1. Controller and Contact

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Chip & Pin Direct
Haasallee 16a
Phone: 09577 2583035
Email: info@chipandpindirect.com

If you have any questions about the processing of your personal data or about exercising your rights, please contact us at the email address above.

2. Collection and Processing of Personal Data

We collect and process personal data only to the extent necessary for the provision of our services in the field of digital payment systems and security technologies. Processing is carried out on the basis of the GDPR, in particular for contract fulfillment (Art. 6(1)(b) GDPR) and due to our legitimate interest in improving our digital solutions (Art. 6(1)(f) GDPR).

The categories of data processed include:

• Contact data (name, email address, phone number)
• Communication data (content of inquiries and correspondence)
• Technical data (IP address, browser type, operating system)
• Usage data (pages visited, time spent on site)

3. Purposes of Data Processing

Your data is processed for the following purposes:

• Provision and optimization of our training courses on payment systems and security technologies
• Responding to inquiries and communicating with prospects and customers
• Technical administration and security checks
• Fulfillment of legal obligations, particularly in the area of data protection and compliance

4. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to ensure functionality and to analyze the use of our digital solutions. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can revoke at any time. The following types of cookies are used:

• Necessary cookies: required for the operation of the website
• Analytics cookies: for the anonymized evaluation of usage behavior
• Functional cookies: to store your settings

Third-party providers may also integrate tracking services that process data to improve security technologies. Data is only shared with third parties with your explicit consent or based on legal provisions.

5. Disclosure of Data to Third Parties

Your personal data is only transmitted to third parties if this is necessary for contract fulfillment, you have consented, or there is a legal obligation. Recipients may include:

• Service providers for IT infrastructure and hosting
• Payment service providers within the framework of payment systems
• Authorities and supervisory bodies if legally required

Data is only transferred to third countries in compliance with the GDPR standard contractual clauses or if an adequacy decision by the EU Commission exists.

6. Your Rights as a Data Subject

You have the right at any time to:

• Information about the data we process (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data, provided there are no legal retention obligations (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Withdraw your consent with effect for the future

To exercise your rights, please contact: info@chipandpindirect.com. You also have the right to lodge a complaint with the competent data protection supervisory authority.

7. Data Security

We use technical and organizational security measures to protect your data against unauthorized access, loss, or misuse. These include encryption technologies, firewalls, and regular security checks as part of our training courses on security technologies.

8. Storage Duration

We store your personal data only for as long as is necessary to fulfill the purposes mentioned above or as required by legal retention periods. Once the purpose ceases to apply, the data is deleted or anonymized.

9. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy as necessary to reflect changes in legal frameworks or new digital solutions. The current version is always available on this page. Status: May 2025.