INTRODUCTION

This Privacy Policy ("Policy") explains how GeoCurrency Sp. z o.o. (hereinafter "GeoCurrency", "we", "us", or "our") collects, uses, shares, and protects Personal Information provided by users of the pbpay.io website (the "Website"), our software products, APIs, and technology services.

This Policy governs the processing of personal data of our clients, business partners, their representatives, and all other Website visitors.

GeoCurrency is committed to protecting your privacy. We have implemented appropriate legal, technical, and organizational measures to ensure the confidentiality, integrity, and availability of your Personal Information.

Under "Personal Information" or "Personal Data" we mean any information relating to an identified or identifiable natural person.

The General Data Protection Regulation (EU) 2016/679 of 27 April 2016 ("GDPR") applies to the processing of Personal Information by GeoCurrency.

OUR CONTACT DETAILS

All references to "GeoCurrency", "us", "we", or "our" apply to GeoCurrency Sp. z o.o., a company incorporated under the laws of the Republic of Poland with registration number 0000960924.

GeoCurrency is a technology company providing software solutions, APIs, automation tools, and blockchain integration infrastructure for business customers.

Our registered office is located at:

Katowice, Uniwersytecka 13
40-007 Katowice
Poland

For all matters related to data protection, please contact us at:

compliance@pbpay.io

WHAT TYPE OF PERSONAL INFORMATION WE COLLECT

The types of Personal Information we may collect include:

• Contact details (email address, telephone number, messenger ID)

• Identification information

• Residence or business address

• Business and corporate information

• Employment details

• Geolocation information

• Activity logs related to the use of our Website and services

• IP address, browser information, operating system information, device identifiers, and device fingerprint data

Most information we collect is provided directly by you.

We may also obtain information from publicly available sources, our business partners, service providers, and third-party verification or security service providers.

For security, fraud prevention, compliance, and operational purposes, we may use external software and service providers supporting identity verification, risk assessment, security monitoring, and business verification processes.

Please note that certain information may be required to create, maintain, or secure access to our services and products. If such information is not provided, we may be unable to provide specific functionalities or services.

In some cases, we may request additional information or documentation for security, verification, compliance, or operational purposes.

Please note that processing of your Personal Data may include automated decision-making and profiling. Such processing may be used for account administration, service security, fraud prevention, risk assessment, and operational purposes.

HOW WE GET THE INFORMATION AND WHY WE HAVE IT

We process Personal Information for the following purposes:

• to provide access to our software products, APIs, and technology services;

• to manage and maintain user accounts;

• to communicate with you and respond to your inquiries;

• to comply with applicable legal and regulatory obligations;

• to protect the security and integrity of our systems and services;

• to prevent fraud, abuse, unauthorized access, and other security incidents;

• to improve, develop, and optimize our products and services;

• to provide information about our products, updates, features, and technical notices;

• to resolve disputes and protect our legal rights and legitimate interests.

Under the GDPR, the lawful bases we rely on for processing this information are:

• Your consent. You may withdraw your consent at any time by contacting us at compliance@pbpay.io;

• The performance of a contract between you and us;

• Compliance with legal obligations applicable to our business operations;

• Our legitimate interests in maintaining service security, preventing fraud, improving our products and services, and communicating with our customers and business partners.

WHO WE SHARE YOUR PERSONAL INFORMATION WITH

We may share Personal Information with:

• our affiliates, contractors, agents, and authorized representatives;

• providers of cloud infrastructure, hosting, analytics, communications, and software services;

• providers of identity verification, security, fraud prevention, and business verification solutions;

• providers supporting platform functionality, operational processes, and technical integrations;

• legal, regulatory, or public authorities where required by applicable law;

• professional advisers including lawyers, auditors, and consultants.

We do not sell Personal Information to third parties.

INTERNATIONAL TRANSFER OF PERSONAL INFORMATION

We may transfer your Personal Information outside the European Economic Area only in the following circumstances:

• where the destination country ensures an adequate level of data protection recognized by the European Commission;

• where appropriate safeguards are implemented, including Standard Contractual Clauses;

• where another lawful transfer mechanism under the GDPR applies.

PERSONAL DATA RETENTION

We retain Personal Information only for as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, enforce agreements, and protect legitimate interests.

Unless a longer retention period is required by law, we will retain Personal Information for a maximum period of seven (7) years after the termination of our relationship with you.

You may request deletion of your Personal Information at any time. However, in certain situations we may be required to retain information to comply with legal obligations or protect legitimate interests.

YOUR RIGHTS

Under applicable data protection laws, you have the following rights:

• Right of access

• Right to rectification

• Right to erasure

• Right to restriction of processing

• Right to object to processing

• Right to data portability

You are not required to pay any fee for exercising your rights.

If you make a request, we will respond within one month.

Please contact us at:

compliance@pbpay.io

Please note that in some circumstances we may not be able to fulfill your request due to legal obligations or overriding legitimate interests. Where applicable, we will explain the reasons for our decision and inform you of available remedies.

SECURITY

GeoCurrency has implemented technical and organizational security measures designed to protect Personal Information against unauthorized access, disclosure, alteration, or destruction.

Our systems are designed in accordance with recognized security standards and industry best practices.

The Website uses SSL/TLS encryption to protect communications and the transmission of information between users and our systems.

OUR DATA PROTECTION AUTHORITY

Our supervisory authority for data protection matters is:

Urząd Ochrony Danych Osobowych (UODO)
ul. Stawki 2
00-193 Warszawa
Poland

Email:
kancelaria@uodo.gov.pl

Website:
https://uodo.gov.pl/en

If you believe that your Personal Information has been processed unlawfully, you have the right to lodge a complaint with the supervisory authority.

POLICY CHANGES

GeoCurrency may update this Privacy Policy from time to time.

Any material changes will be published on our Website or communicated through appropriate channels.

The latest version of this Policy will always be available on the Website.