Privacy policy
We at Paylike ApS (operating under the official name Lunar Payments ApS) hereafter referred to as ”‘we”, “us” are fully committed to protecting your privacy.
Paylike ApS (Lunar Payments ApS) is a part of the Lunar Group, which consists of Lunar Bank, Lunar Way and Lunar Block. Paylike ApS (Lunar Payments ApS) has the following contact information Lunar Payments, Hack Kampmanns Pl. 10, 8000 Aarhus, Danish Central Business Registration Number no.: 36 68 32 79
This privacy policy describes how and for what purposes we - as the data controller - process your personal data, when you get in touch with us via our website. All information about you is processed in accordance with the General Data Protection Regulation 2016/679 (hereafter referred to as ‘GDPR’) and supplementary national regulation.
This privacy policy applies to websites owned and managed by Paylike ApS (hereafter referred to as ‘the website’). The privacy policy applies to these websites only, and does not apply to any website these websites may link to.
Contact us
If you have any questions to this privacy policy or the way we process your personal data or wish to exercise your rights according to the GDPR then you can contact our data protection officer via mail: dpo@lunar.app
Purposes with processing personal data
We process personal data about you for the following overall purposes:
- Establishing a new customer relation
- Handling inquiries from you as either an existing and non-existing customer
- Administering newsletter subscription
- Administering our website
Legal grounds for processing personal data
When establishing a new customer relation we process personal data on several legal grounds. We process personal data both in accordance with the GDPR article 6 (1), point b. We also process personal data in accordance with the GDPR article 6 (1), point c in relation to complying with the obligations we are imposed by concerning anti money laundering-, know your customer-, bookkeeping- and taxation acts.
We handle inquiries from you as a non-existing customer on the basis of the GDPR article 6 (1), point f. This processing pursues a legitimate purpose in conducting support of or answer to your inquiry.
If you are an already existing customer we then handle your data on the basis of the GDPR art. 6 (1), point b.
We only send you newsletters, if you have consented to this in accordance with the GDPR art. 6 (1), point a. Our administration of the newsletters is also based on your consent, which means that if you withdraw it, we no longer process your data. You can at all times withdraw your consent. The withdrawal will however not effect the lawfulness of processing based on consent before its withdrawal.
The personal data we process about you on our webpage (IP-adress) is processed on the basis of the GDPR art. 6 (1), point f, and art. 6 (1), point a, but only as far as you have given consent. As far as the GDPR art. 6 (1), point f, goes we process the data for the purpose of ensuring the correct and safe function of our website.
Recipients of personal data
We use data processors with whom we have entered data protection agreements. We disclose personal data to our data processors. In certain lawfully regulated situations we may also disclose personal data to some Danish Authorities.
Transfers of personal data outside the EU/EEA
In certain situations Paylike does transfer personal data to data processors and who use sub-processors located outside of the EU/EEA (third countries) in order for us to be able to provide the particular service to you. These transfers are regulated in the data protection agreements (and subprocessor data protection agreements) we have entered with our data processors. All transfers are based on EU-Commission’s Standard Contractual Clauses from 2021 supported by supplementary safety measures. You can find the clauses that Paylike uses by clicking here.
Storage of personal data
We store your personal data only as long as we need to pursue the above mentioned purposes. Our legal obligations concerning compliance with anti money laundering-, know your customer-, bookkeeping- and taxation acts do however require us to process personal data for a specific period of time. This means that we are obliged to store the personal data for that specific period of time.
Your rights as data subject
According to the GDPR you as data subject have some rights in relation to the processings that we conduct, which you - with specific exemptions - can exercise. If you wish to exercise your rights then you can write to our data protection officer (DPO) to dpo@lunar.app.
Right of access
You have the right to obtain information about whether or not personal data is being processed about you and, where that is the case, information about the types of personal data being processed, the purpose for processing the personal data and, where possible, the expected period the personal data will be stored.
Right to rectification
If any of the information we have about you somehow is incorrect, incomplete or irrelevant, you have the right to have it corrected.
Right to erasure
In certain situations you have the right to have your information deleted within us and thereby be forgotten. There are, however, some limitations to this right, e.g. when we need the information to comply with documentation requirements or to defend Paylike against legal claims.
Right to restriction of processing
In some situations, typically related to the fulfilment of other requests to exercise your rights, you have the right to restrict the processing of your personal data. That will, in nature, limit Paylike’s ability to process your personal data without your consent for other purposes than storage and the establishment, exercise or defence of legal claims.
Right to data portability
You have the right to receive the personal data, which you have provided to Paylike, in a structured, commonly used and machine-readable format and to have the personal data transmitted from Paylike to a new data controller.
Right to object
You have the right to object against certain processing activities, such as the processing performed in relation to direct marketing, including profiling.This right applies in case the processing is based on legitimate interests in accordance with the GDPR article 6 (1) (f).
Complaints
If you are unsatisfied with the way we process personal data about you, then you can file a complaint to the Danish Data Protection Agency. The Danish Data Protection Agency has the following contact information: + 45 33 19 32 00 and dt@datatilsynet.dk and the following address: Carl Jacobsens Vej 35, 2500 Valby, Denmark.