Processing of personal data
Information on processing of personal data
Purpose of the data processing: provision of services.
Legal basis for the data processing: a legal obligation (Law on Payments of the Republic of Lithuania, Law on Prevention of Money Laundering and Terrorist Financing of the Republic of Lithuania).
Categories of processed personal data: information, transmitted together with the payment, i.e. identification data (name, surname, personal identification number (if transmitted together with the payment), financial data (current account number, transaction amount) and communication data (email address, language of communication).
Data recipients: recipients of payments, receiving the information in payment statements together with the transaction funds.
Data processing period: 8 (eight) years after the termination of the business relationship with the client. The retention period may be extended for a period not exceeding 2 (two) years, provided there is a reasoned request from a competent authority. Such data retention period is required by the Law on Prevention of Money Laundering and Terrorist Financing of the Republic of Lithuania.
The rights of the data subject:
- the right to request the data controller to provide access to personal data of the data subject, to correct or delete personal data, or to restrict the processing of personal data;
- the right to object to the processing of personal data. It should be noted that the right to require the immediate erasure of your personal data may be limited or not possible due to the obligation of Paysera to store data about clients for the period laid down in legislation;
- to address the supervisory authority with a claim;
- the right to data portability;
- other rights stipulated by legislation.