Data protection regulations VERD dealers

Thank you for choosing to accept the VERD.cash payment solution. The protection of your merchant data is important to us. Our payment solution is only offered in Switzerland and is only aimed at customers in Switzerland. The processing of personal and merchant data is therefore subject exclusively to the provisions of Swiss data protection law. In the following data protection provisions, we inform you which data we collect when you accept the payment solution, how we use it and what rights you have as a merchant. By accepting these provisions online, you agree to the following data protection provisions.

‍

1. responsible body

The controller for data processing is:

VERD Finanzas AG, Marktgasse 55, 3011 Berne

www.verd.cash / datenschutz@verd.cash

VERD Finanzas AG acts as the issuer of the VERD.cash prepaid card and VERD.cash payment solution and as the provider of the associated payment infrastructure.

2. scope of application

These provisions apply to all merchants who have a contractual relationship with VERD Finanzas AG and use the VERD.cash payment system in face-to-face and/or distance selling (e.g. stationary, online, via app or e-commerce platform).

3. recorded data

In the context of use by merchants and to ensure payment operations, VERD processes the following data as issuer:

Transaction data: Amount, timestamp, card number, transaction ID, POS/terminal ID or online payment ID, location of the transaction (for face-to-face transactions) or IP/URL (for distance transactions)
Merchant information: Company name, address, VAT ID, industry classification, contact persons and communication data, business type (presence/online), POS/terminal ID, provider, bank details (payment processing)
Technical data: Device information, checkout systems (for stationary retail), integration interfaces, API usage data (for online retail)
Communication data: support requests, contract correspondence, feedback on payments

‍

4. purpose of data processing

Processing is carried out for the following purposes:

Execution and processing of payments with VERD.cash
Payment of merchant turnover
Fraud prevention, transaction security and monitoring
Support, reversal (chargebacks), clarification of discrepancies
Compliance with legal obligations (e.g. audits, accounting, money laundering law)

‍

5 Legal basis for data processing

The processing of the data is justified by the following reasons:

Contract fulfillment: The processing of the data is necessary to fulfill the dealer contract.
Legal obligations: We are required by law to process certain data, e.g. to comply with tax and money laundering regulations, retention obligations, KYC requirements)
Legitimate interest: e.g. security, system analysis, prevention of misuse

‍

6. disclosure of data

Your data will only be passed on to third parties if this is necessary for the above-mentioned purposes or if we are legally obliged to do so. Possible recipients of your data are

Payment service providers, acquirers and banks for processing payments.
IT service providers and hosting providers (e.g. cloud, data center in Switzerland) who support us in the technical implementation of the payment solution.
Authorities, where required by law.
E-commerce platforms and technical service providers for online business

If your data is disclosed to third parties abroad, we will ensure that this only takes place in countries that guarantee adequate protection or ensure appropriate data protection within the meaning of Art. 16 para. 2 FADP (in particular by concluding EU standard contractual clauses).

7. duration of storage

We only store your merchant information and transaction data for as long as is necessary to fulfill the purposes or as required by legal retention periods. Your data will be deleted once these periods have expired.

8. your rights

You have the following rights in relation to your data:

Information: You can request information about which data we process.
Rectification: You can request the correction of incorrect or incomplete data.
Deletion: You can request the deletion of your data, provided that there are no statutory retention obligations to the contrary.
Restriction of processing: You can request the restriction of the processing of your data, which may prevent the publisher from offering you certain services.
Objection: You can object to the processing of your data if this is based on legitimate interests.
Data portability: You can request that we provide your data in a transferable format.

To exercise your rights, please contact the person responsible named above and we will contact you immediately.

8. security of your data

We use technical and organizational measures to protect your data from loss, misuse and unauthorized access. Our security measures are regularly reviewed and adapted to the state of the art.

9. update of the data protection provisions

We reserve the right to amend these data protection provisions in order to adapt them to changed legal or technical conditions. You will be notified of any changes in good time by e-mail.

10. contact

If you have any questions or concerns about this privacy policy, you can contact us at any time using the contact details provided (see point 1 Responsible body).