Privacy Policy of the dpaymobile.com Website

https://dpaymobile.com (the "Website")

This is an English translation of the Polish Privacy Policy. In case of any discrepancy, the Polish version (dpaymobile.com/polityka-prywatnosci) prevails.

Dear User,

We care about your privacy and want you to feel comfortable while using our services. That is why we present below the most important information about the rules under which we process your personal data and about the cookies used by our Website. This information has been prepared in accordance with the GDPR, i.e. the General Data Protection Regulation.

Personal data controller

PAYMENTS LAB SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (limited liability company), with its registered office at ul. Chmielna 2/31, 00-020 Warszawa, Poland, entered in the Register of Entrepreneurs of the National Court Register (KRS) by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division of the National Court Register, under KRS number 0000845085, NIP (tax identification number) 5252825300, REGON (statistical number) 386243396, share capital PLN 50,000.00.

If you wish to contact us regarding our processing of your personal data, please write to us at: [email protected].

Your rights

You have the right to request:

• access to your personal data, including obtaining a copy of your data (Article 15 GDPR or, where applicable, Article 13(1)(f) GDPR),
• rectification of your data (Article 16 GDPR),
• erasure of your data (Article 17 GDPR),
• restriction of processing (Article 18 GDPR),
• transfer of your data to another controller (Article 20 GDPR).

You also have the right:

• to object at any time to the processing of your data:
  • on grounds relating to your particular situation: to the processing of personal data concerning you which is based on Article 6(1)(f) GDPR (i.e. on the legitimate interests pursued by us), including profiling (Article 21(1) GDPR);
  • where personal data are processed for direct marketing purposes, including profiling, to the extent that it is related to such direct marketing (Article 21(2) GDPR).

Contact us if you wish to exercise your rights. You can object to our use of cookies (described below) in particular by adjusting the relevant settings of your browser.

If you consider that your data are being processed unlawfully, you may lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO) in Poland.

Personal data and privacy

Below you will find detailed information on the processing of your data depending on the actions you take.

1. Using the paid services offered on the Website

2. Contacting us (e.g. to ask a question)

* depending on which applies in a given case and which occurs first

3. Your consent to marketing activities (consent banner)

* depending on which applies in a given case and which occurs first

4. Your consent to analytics activities (consent banner)

* depending on which applies in a given case and which occurs first

5. Your consent to receiving marketing content from us (e.g. information about special offers)

6. Newsletter subscription

7. An act or omission that may give rise to claims related to the Website or our services

* depending on which applies in a given case and which occurs first

Profiling

We carry out profiling on the Website. In your case, this will take place only if you allow such activities. This profiling consists of an automated assessment of which products or services you may be interested in, based on information about the content you view. As a result, advertisements for products or services displayed within the online services you use will be better tailored to you and your needs.

The profiling we carry out does not result in decisions that produce legal effects concerning you or similarly significantly affect you.

Analytics activities

We carry out analytics activities on the Website, aimed at making it more intuitive and accessible. In your case, this will take place only if you allow such activities. As part of the analysis, we will take into account the way you navigate the Website, e.g. how much time you spend on a given subpage or where on the Website you click. This allows us to adapt the layout and appearance of the Website and its content to the needs of Users.

Data security

When processing your personal data, we apply organisational and technical measures in accordance with the applicable legislation, including encryption of the connection by means of an SSL certificate.

Cookies

Like most websites, our Website uses so-called cookies. These files:

• are stored in the memory of your device (computer, phone, etc.);
• do not change the settings of your device.

On this Website, cookies are used for the following purposes:

• remembering your session
• statistical
• marketing
• providing Website features

On your first visit to the Website, we display a banner in which you decide whether you consent to analytics and marketing cookies. Until you make your decision, we do not store any files other than those necessary for the Website to function and for a purchase to be made. Refusing is as easy as consenting and does not limit your ability to use the Website.

You can change your choice at any time: simply delete our Website's cookies in your browser settings. The banner will then appear again on your next visit.

To learn how to manage cookies, including how to disable them in your browser, you can use your browser's help file. You can access this information by pressing the F1 key in your browser. In addition, you will find relevant guidance on the following pages, depending on the browser you use:

• Firefox
• Chrome
• Safari
• Internet Explorer / Microsoft Edge

The retention period depends on the purpose of the file:

• necessary files (session, cart, language selection): until the end of the browser session or less than 24 hours;
• remembering your decision on consents: up to 180 days, after which we will ask you again;
• files used to determine which advertisement brought you to the Website: up to 90 days;
• Google analytics and marketing files: in accordance with the rules of that service, no longer than 14 months.

Using the relevant options of your browser, you can at any time:

• delete cookies,
• block the use of cookies in the future.

In such cases, we will no longer process them.

You can find more information about cookies on Wikipedia.

External services / data recipients

We use the services of external entities that support us in running our business. We entrust your data to them for processing. These entities process data solely on our documented instructions. Below you will find a list of the recipients of your data:

In addition:

• competent public authorities, to the extent that we are obliged to make data available to them.

Transfer of personal data to countries outside the European Union

In view of the above, your personal data may also be processed by entities outside the European Union. An adequate level of protection of your data, including through the use of appropriate safeguards, is ensured by:

• ** Commission Implementing Decision of 28 June 2021 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate protection of personal data by the United Kingdom;
• *** Commission Implementing Decision (EU) 2023/1795 of 10 July 2023 pursuant to Regulation (EU) 2016/679, on the adequate level of protection of personal data under the EU-US Data Privacy Framework. Google LLC participates in this framework.