1. Introduction

Welcome to JustPayFor. By using our services or accepting this Privacy Policy, you confirm that you have read its content and understand how your personal data is processed in accordance with applicable data protection laws, including RODO / GDPR.

This Privacy Policy explains what personal data we collect, the purposes for which we process it, who it may be shared with, how long we store it and what rights users have.

2. Data controller

The controller of personal data is the entity operating the JustPayFor platform, hereinafter referred to as the Platform.

In matters concerning the protection of personal data, you can contact us through the contact form available on the Platform website.

3. Scope of data collected

We collect and process personal data only to the extent necessary to provide services, ensure Platform functionality, handle transactions, maintain security and comply with applicable legal requirements.

4. Legal basis for data processing

We process personal data only when there is an appropriate legal basis for doing so.

• Art. 6 sec. 1 lit. a GDPR: user consent, for example in the case of selected marketing activities or the use of certain cookies.
• Art. 6 sec. 1 lit. b GDPR: processing necessary to enter into or perform a contract, including account management, orders, baskets, payment links and Platform services.
• Art. 6 sec. 1 lit. c GDPR: processing required to fulfil legal obligations, including accounting, tax, regulatory or fraud prevention obligations.
• Art. 6 sec. 1 lit. f GDPR: legitimate interest of the controller, in particular ensuring Platform security, pursuing claims, defending against claims, preventing abuse and developing services.

5. Purposes of data processing

Personal data may be processed for the following purposes:

• providing access to the Platform and its features,
• registration and management of user and seller accounts,
• seller verification and handling integrations with partners,
• creating and managing baskets, offers and payment links,
• processing purchase transactions, payments and orders,
• handling the sale of tickets, entry passes, vouchers or similar services,
• handling online fundraisers, if made available through the Platform,
• sending notifications related to accounts, orders, payments or security,
• handling requests, complaints and technical support,
• monitoring Platform security and preventing abuse,
• conducting technical and statistical analyses,
• adapting Platform content and features to user needs,
• fulfilling legal, tax, accounting and regulatory obligations.

6. Payments and external operators

Payments made through the Platform may be handled by external payment operators, such as PayU, Tpay or other payment partners.

Data necessary to process payments may be transferred to payment operators in accordance with their own terms and privacy policies. The Platform does not store full payment card details, unless expressly stated otherwise and where this is compliant with applicable laws and security requirements.

In the case of integration with POS systems, PayU, Tpay or other partner systems, we may process technical, transactional and billing data necessary to handle transactions, verification, security and the proper operation of the Platform.

7. Data related to ticket sales and events

If tickets, entry passes, vouchers or other documents entitling participation in an event are sold through the Platform, we may process data necessary to handle such sales.

• buyer data,
• event participant data, if required,
• data relating to the purchased ticket or entry pass,
• information about the event, date, location and ticket type,
• data needed to handle complaints, refunds, changes or ticket validity verification.

8. Data related to online fundraisers

If the Platform is used to manage online fundraisers, we may process data of fundraising organisers, supporters and data relating to the purpose, amounts and payment history.

• fundraising organiser data,
• supporter data, if necessary to handle the payment, confirmation or refund,
• data relating to the fundraising purpose, beneficiary and description of the fundraiser,
• payment data and transaction identifiers,
• data required to verify the compliance of the fundraiser with the law and Platform terms.

9. Sharing and transfer of data

Personal data may be shared with third parties only when this is necessary to provide services, fulfil legal obligations, ensure security or operate the Platform.

• payment operators, such as PayU, Tpay or other payment partners,
• delivery operators and logistics companies for order fulfilment,
• providers of technical, hosting, analytics and security services,
• partners responsible for seller account verification,
• sellers, if necessary to fulfil an order or support a buyer,
• event organisers, if necessary to handle a ticket or participation in an event,
• fundraising organisers, if necessary to handle a payment or contact a supporter,
• law enforcement authorities, courts, public administration bodies or regulatory institutions, if required by law.

We do not sell personal data of users or share it with third parties for marketing purposes without the express consent of the user.

10. Transfer of data outside the EEA or the United Kingdom

If personal data is transferred outside the European Economic Area or the United Kingdom, this is done only with appropriate safeguards required by applicable personal data protection laws.

11. Cookies and similar technologies

The Platform may use cookies and similar technologies to ensure the proper operation of the website, remember settings, analyse traffic, improve security and adapt content to the user.

• Essential cookies: required for the proper operation of the Platform.
• Analytics cookies: help us understand how the Platform is used and improve its features.
• Marketing cookies: may be used only when the user gives consent, if such consent is required.

12. User rights

In connection with the processing of personal data, the user has the rights set out in applicable data protection laws.

• access to their personal data,
• rectification of incorrect or outdated data,
• erasure of data, also known as the right to be forgotten,
• restriction of data processing,
• transfer of data to another entity,
• objection to data processing,
• withdrawal of consent to data processing, if processing is based on consent,
• lodging a complaint with the competent supervisory authority.

To exercise your rights, contact us through the contact form available on the Platform website.

13. Data retention period

We store personal data for as long as necessary to achieve the purposes for which it was collected, including providing services, account management, transaction processing, settlements, security and fulfilment of legal obligations.

After the required period has expired, data may be deleted, anonymised or restricted only to the extent required by law, the pursuit of claims or defence against claims.

14. Data security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, accidental deletion, alteration, disclosure or other unauthorised processing.

15. Automated decision making

The Platform may use automated mechanisms supporting security, abuse detection, risk verification or protection against unauthorised actions. However, we do not make decisions producing legal effects for the user solely by automated means, unless this is permitted under applicable laws.

16. Changes to the Privacy Policy

We may update this Privacy Policy periodically. We will inform users of significant changes through a notice on the Platform, email or another appropriate communication channel.