Legal
Privacy Policy
This Privacy Policy explains how Paytimum (“Paytimum”, “we”, “us” or “our”) processes personal data when you visit paytimum.com (the “Website”) or contact us. We process personal data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), and applicable national data protection law.
Paytimum products are not yet available. This policy covers the Website and our correspondence with you only. Before any Paytimum product becomes available, we will publish a separate privacy notice for it.
1. Who is responsible
The controller of your personal data is Paytimum. For any question about this policy or about your personal data, contact us at danny@paytimum.com or on +40 756 117 000.
2. What personal data we process
2.1 When you visit the Website. The Website has no forms, user accounts, analytics, advertising, social media plugins or tracking technologies. To deliver its pages and protect it against abuse, our hosting provider necessarily processes technical data about each request: your IP address, the date and time of the request, the page requested, your browser and operating system, and the referring website. We do not use this data to identify you.
2.2 When you contact us. If you email or call us, we process the information you give us, typically your name, email address, telephone number, company and position, and the content of your message.
3. Why we process it and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Delivering the Website and keeping it secure | Technical data (2.1) | Art. 6(1)(f): our legitimate interest in operating a secure, working website |
| Answering your enquiry and following up on it | Contact data and correspondence (2.2) | Art. 6(1)(b) where your enquiry concerns entering into a contract with us; otherwise Art. 6(1)(f): our legitimate interest in answering enquiries and developing business relationships |
| Meeting legal obligations, and establishing, exercising or defending legal claims | As necessary for the purpose | Art. 6(1)(c) and Art. 6(1)(f) |
We do not sell personal data, and we do not use it for automated decision-making or profiling.
4. Cookies
The Website does not use cookies, local storage or any similar technology, and it does not load content from third-party servers: its fonts and images are served from our own domain. That is why it shows no cookie banner.
5. Who receives your data
We share personal data only with service providers that process it on our behalf, under a data processing agreement and on our instructions:
- Cloudflare, Inc. hosts and delivers the Website and protects it against attacks.
- Google, through Google Workspace, provides our email.
We may also disclose personal data to our professional advisers under a duty of confidentiality, or to public authorities where the law requires it.
6. International transfers
Cloudflare and Google may process personal data outside the European Economic Area, including in the United States. Such transfers are covered by the EU-US Data Privacy Framework, under which both companies are certified, and by the Standard Contractual Clauses adopted by the European Commission.
7. How long we keep it
- Technical data (2.1) is kept by Cloudflare for the short periods set out in its own policies. We do not keep copies of it.
- Correspondence (2.2) is kept for as long as we need it to handle your request, and afterwards for up to three years from our last contact, which is the general limitation period for claims under Romanian law. We keep it longer only where it leads to a business relationship or where a law requires us to.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and receive a copy of it;
- have inaccurate data corrected and incomplete data completed;
- have your data erased where there is no longer a reason to keep it;
- restrict our processing of your data in the cases set out in the GDPR;
- receive data you gave us in a structured, machine-readable format, and have it sent to another controller;
- object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests.
To exercise any of these rights, write to danny@paytimum.com. We will reply within one month. Where a request is complex, we may extend this by up to two further months and will tell you why. We may ask you to confirm your identity before acting on a request.
9. Your right to complain
You may lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live, where you work or where you believe an infringement took place. In Romania this is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), www.dataprotection.ro. We would appreciate the chance to address your concern first.
10. Security
All traffic to the Website is encrypted with HTTPS. Correspondence is kept in accounts protected by access controls, and only people who need it to handle your request can see it.
11. Children
The Website is not directed at children under 16, and we do not knowingly collect personal data from them.
12. Changes to this policy
We will update this policy when our practices change and before any Paytimum product launches. The date at the top of this page shows when it was last changed.