1. Introduction
This Privacy Policy explains how Aperia Compliance collects, processes, and protects personal data through our website. We are committed to safeguarding your data and ensuring compliance with applicable data protection laws.
2. Data We Collect and How It Is Used
Access Logs: Like most websites, we collect standard access logs (e.g., IP address, browser type, timestamps) to ensure the website’s security and functionality.
Session Cookie: Our website uses a session cookie to store data essential for the proper functioning of the application. This cookie does not track user behavior or store unnecessary information.
Cloudflare: We rely on Cloudflare to enhance website security and performance. Data processing by Cloudflare is subject to their privacy policy.
3. Data Retention
Access logs and monitoring data are retained only as long as necessary to fulfill security and operational purposes and are subsequently deleted.
4. Your Rights under GDPR, and other Data Protection Laws
4.1. You have the right to access your personal data that is being processed by us (Art 15 GDPR). Apart from that, you have the right to rectification of inaccurate or incomplete data (Art 16 GDPR). You have a right to erasure if (i) your personal data is no longer necessary for the purposes for which we have collected it, (ii) you withdraw your consent and there is no other legal basis for processing by us, (iii) you object to the processing and there are no overriding legitimate grounds for the processing , (iv) your personal data has been unlawfully processed or (v) for compliance with our legal obligations (Art 17 GDPR). Additionally, you have the right to restriction of processing (Art 18 GDPR) as well as the right to data portability concerning the data you have provided us with (Art 20 GDPR).
4.2. We may process your data on the basis of legitimate interests (in particular cf. Section 2.2) in which case you have the right to object. In the case you object to the processing, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing of this data which override your interests, rights and freedoms (weighing of interests) or for the establishment, exercise or defense of legal claims.
In particular, you may object at any time to the processing of your data for the purposes of direct marketing by us. In the case of such an objection, we will no longer process your personal data for these purposes (no weighing of interests).
4.3. Additionally, you have the right to withdraw your consent at any time with effect for the future.
4.4. Finally, you have the right to lodge a complaint with the responsible supervisory authority (Art 77 GDPR).
4.5. Additional information for California Residents:
This section is only applicable to California consumers for purposes of compliance with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, the “California Privacy Laws”). In the previous twelve month period, we have collected, used, and shared certain personal data of California consumers solely for business purposes and strictly in the manner described within this Privacy Policy. California consumers have the right to request access, correction, and deletion to and of their personal data, opt out of the sale of their personal data, opt out of the sharing of their personal data, and not be discriminated against for exercising the rights afforded to them under California privacy laws. In the event of such a request from a California consumer, we will provide all relevant information about our collection, use, and sharing of your personal data.
All requests should include appropriate information to allow us to verify your identity, such as your name, email address, and company name. If we cannot verify your identity, we may request information to allow us to complete the validation process. Personal data provided to us for the purpose of identifying you will be used solely for that purpose.
We do not sell personal data of any California consumers and we do not discriminate against California consumers for exercising their privacy rights.
4.6. Contacting us:
If you have questions regarding this policy, or wish to exercise any of the data protection rights outlined above, feel free to contact IXOPAY at: [email protected] or IXOPAY GmbH, Privacy Department, Vorgartenstrasse 206c, 1st floor, A-1020 Vienna, Austria.
5. Data security
Information security is critical to our business. We implement appropriate technical and organisational security measures, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons pursuant to Art 32 GDPR and other applicable Data Protection Laws.
For further information on how we ensure that we maintain appropriate technical and organizational measures, please see our Security & Trust page.
6. Amendments of our Privacy Policy
We will amend our Privacy Policy as necessary to reflect changes to the legal landscape as well as the development of our online services and the internet. Amendments will be published on our Website, so you should visit this Privacy Policy regularly to stay informed about the current status.
7. Cookies
7.1. General Information
Cookies are files transmitted from our web server to your web browser and are stored on your device for later retrieval. Through such cookies, our Website can store important data to provide you with our services and to make the use of our Website more comfortable for you. You are not required to consent to the use of reporting or marketing cookies to use the Website.
7.2. Types of Cookies
Session Cookies: are temporary cookies valid for the duration of your visit and are erased automatically thereafter.
Persistent Cookies: stay on your device and are not erased automatically when you close your browser. Persistent cookies improve your user experience by customizing the Website to your needs and optimizing loading time.
An overview of all purposes of session and persistent cookies, and options to enable or disable cookies are available in our "Cookie Settings" tool (cf Section 7.4).
7.3. Google Tag Manager
Our Website uses the "Google Tag Manager" to implement and manage the Google Reporting and Marketing services into our Website according to your Cookie Settings. No cookies are set, nor do we process personal data in this context.
7.4. Cookie Settings
You can accept or reject individual or all types of cookies that are not strictly necessary easily via our "Cookie Settings" tool, which also includes details on the types of cookies we use on this Website.
Most internet browsers accept cookies by default, but you can adjust your settings to control the placement and storage of cookies:
Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Chrome: https://support.google.com/chrome/answer/95647?hl=en
Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
In addition, you can deactivate cookies via Your Online Choices. This process will ask your device for an ID-Tag of an "opt-out-cookie" preventing data to be linked/associated with your device. Note that this process does not remove the opt-out-cookie; it must remain on your device for the opt out to work successfully, recognizing your opt-out. You will need to repeat this process on each internet browser you use and if you delete all cookie data from your device. Nonetheless, the use of Your Online Choices does not guarantee that no third parties use cookies through our Website.
7.5. Third Party Cookies
If you have consented to Reporting Cookies, we use the following:
Google Analytics
Google Analytics collects, analyzes, and reports on website traffic and user behavior. Google Analytics, a service of Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland ("Google"), typically transmits information generated through Google Analytics Cookies to Google servers in the United States, where it is stored.
Pseudonymized user profiles can be generated from the processed data, and Google may share this data with third parties acting on its behalf or as required by law. Both Google and government authorities might have access to this data. Under the current data processing arrangements, Google is contractually committed to transferring personal data outside the EU in compliance with GDPR requirements.
If you have not consented, we use Google Analytics only with activated IP anonymization, which truncates IP addresses before storage or processing. To our knowledge, the IP address transmitted from your browser is not merged with other data by Google.
In addition to configuration of our 'Cookie Settings' tool, you can prevent the use of Google Analytics by downloading and installing the browser plug-in available at: Google Opt-Out. Google may link usage data with other data about you, such as search history, personal accounts, usage data from other devices, and any other data that Google processes about you as a user. More information about the data usage by Google, settings and objection options is available at: Google Privacy & Terms.