exchange-pp-v0.en.rst (8396B)
1 Privacy Policy 2 ============== 3 4 Last update: April 2025 5 6 This privacy policy describes the guidelines and principles of Taler Operations AG (hereinafter **TOPS**), with 7 headquarters of the company in Biel/Bienne, Switzerland, in relation to the collection, processing, storage and 8 disclosure of personal data of visitors to our websites and users of the applications and products provided by TOPS. By 9 using the websites, applications and products users automatically consent to the legal validity of this privacy policy. 10 11 You can find information about our company on the website at www.taler-ops.ch. If you have any questions or concerns 12 about this privacy policy, please contact us by sending a message to privacy@taler-ops.ch. 13 14 15 Principles 16 ---------- 17 18 The explicit aim of the payment system based on GNU Taler is to protect the private data of its users. TOPS is 19 committed to the principles of ‘Privacy by design’ and ‘Privacy by default’ and does not collect any personal data when 20 using the Taler payment service, nor does it request any personal data or specific personal information for other 21 purposes. You can therefore rest assured that data protection is guaranteed from the very first use of our applications 22 (Privacy by design) and remains in place if you retain the applications' default settings (Privacy by default). 23 24 No personal data of the payer is required or collected with the payment service provided by TOPS. For technical 25 reasons, it is not possible to identify individual persons among the payers. Neither the transaction numbers nor the 26 cryptographic signatures used to authorise transactions allow conclusions to be drawn about the persons who initiate 27 a payment to the beneficiaries. 28 29 If users wish to contact us personally, telephone numbers, email addresses or postal addresses are recorded and stored 30 only for the purpose and for the duration of the exchange of information. If you would like to report bugs, 31 improvement requests or errors in applications (e.g. Taler wallets, Taler Merchant Backend, Taler Cashier or Taler 32 Point-of-sales apps) respectively on our web pages, please use our bug tracker (https://bugs.gnunet.org). You will leave 33 an email address so that we can get in touch with you if necessary. In the case of support services, we may also need to 34 collect your contact details such as email addresses, telephone numbers or postal addresses. However, TOPS does not 35 share this information to third parties unless it is strictly necessary while providing you with our applications and 36 products or to comply with state or federal laws. 37 38 39 Compliance with data protection legislation 40 ------------------------------------------- 41 42 TOPS undertakes to comply with the provisions of applicable data protection law when obtaining, processing and utilising 43 the personal data of users. Personal data is only collected, processed or passed on by us within the scope of legal or 44 regulatory obligations. TOPS ensures that the data is handled in accordance with Swiss data protection regulations, 45 particularly the Federal Act on Data Protection (FADP/DSG) and the Data Protection Ordinance (DPO/DSV). 46 47 All system data is primarily hosted in Switzerland, stored redundantly on encrypted hard drives, i.e. with backup 48 storage, and only accessible to authorised personnel. Authorised personnel are subject to regular security checks. 49 50 Know-Your-Customer (KYC) procedures to identify beneficial owners of bank accounts are carried out by external service 51 providers authorised by TOPS. These service providers are also obliged to process and store the data securely in 52 accordance with the laws and regulations of the respective country or territory in which the payment service is offered. 53 54 TOPS provides users with technical support upon their explicit request. The provision of this support may involve third 55 parties who have access to the personal data required for communication and are also obliged to comply with data 56 protection law. 57 58 59 Purpose of data processing 60 -------------------------- 61 62 TOPS processes and stores the data absolutely necessary for the provision of the services and in particular personal 63 data only if this is required for legal or regulatory reasons. Account-holding banks are required by law to implement 64 Know-Your-Customer (KYC) procedures in order to be aware of the beneficial owners of the bank accounts that transfer 65 funds to the payment service operated by TOPS for the purpose of topping up Taler wallets, and also to know the 66 beneficial owners of the bank accounts to which the payment service transfers funds for the purpose of payment to 67 beneficiaries. TOPS only processes and stores the account numbers and names of the account owners who transfer money to 68 the payment service and of the account owners to whom the payment service transfers funds. TOPS also learns the 69 withdrawal amount wired to the payment service for the purpose of topping up Taler wallets and the amount of aggregated 70 transfers wired to the beneficiaries' bank accounts. 71 72 Duration of data storage 73 ------------------------ 74 75 The business relationship between TOPS and beneficiaries (merchants, businesses and other regular recipients of 76 transfers from the payment service to the beneficiary accounts) is concluded for an indefinite period. If no 77 transactions are made to the beneficiaries for more than 12 months, the business relationship is automatically 78 considered terminated. In addition, TOPS retains the collected data of the beneficiaries for the duration required by 79 legal or regulatory provisions such as Anti-Money Laundering (AML) laws, fiscal code and laws regulating the 80 identification of beneficial owners. 81 82 If users are unable to make a withdrawal to a Taler wallet or if wallet funds are to be balanced and deposited, TOPS 83 will transfer funds back to the original bank account. TOPS also stores the data required for this purpose for the 84 duration prescribed by legal or regulatory provisions. 85 86 87 Forwarding of data 88 ------------------ 89 90 TOPS assumes that Taler wallets do not transmit any personal data, at least not without the conscious and informed prior 91 consent of the user. If TOPS forwards personal data, then only the names of account owners, bank account numbers and 92 the amount of transfers wired to beneficiary accounts. If necessary, TOPS may pass this data on to the competent 93 authorities and auditors. Beneficiaries must assume that their personal data will be processed, stored and disclosed by 94 TOPS on the basis of legal or regulatory provisions, and that their data is processed and passed on on the basis of 95 legal or statutory provisions, e.g. to comply with the fiscal code and statutory retention obligations. 96 97 If users contact us personally or make use of support services, TOPS reserves the right to pass on the personal data 98 required for this purpose to employees, contracted service providers or authorized contractors. 99 100 101 Updating this privacy policy 102 ---------------------------- 103 104 TOPS may amend and update this privacy policy at any time, the date at “Last update” will then change. Updates are 105 made, for example, as a result of changes in legal or regulatory provisions or due to developments in the industry. 106 107 TOPS cannot directly inform users about updates to the privacy policy because, in principle, no personal contact data is 108 collected that could be used to inform users of websites, applications and products. However, the Taler wallets may 109 inform you when they notice an update to the privacy policy. 110 111 Please read this privacy policy carefully and repeatedly to stay informed about its existing content and any changes. 112 113 This privacy policy and its updates are not part of any contract, but are implied by the use of our websites, 114 applications and products. If you have any questions or concerns about this privacy policy, please contact us by 115 sending a message to privacy@taler-ops.ch. 116 117 118 Applicable law and place of jurisdiction 119 ---------------------------------------- 120 121 To the extent permitted by law, all legal relationships between TOPS and users shall be governed exclusively by 122 substantive Swiss law, excluding conflict of laws and international treaties. Subject to any mandatory statutory 123 provisions to the contrary, Biel is the exclusive place of jurisdiction and the place of performance. For users and 124 beneficiaries domiciled outside Switzerland, Biel/Bienne is also the place of debt collection.