Personal data controller

SC. Digital Payments Srl manages personal data. The company is registered in Paleu, Bihor, Romania and can be reached at support@ppay.ro or +40 773 810 348. No Data Protection Officer has been appointed; an internal representative handles such requests.

Categories of personal data collected

The platform gathers only information strictly necessary for electronic top-up services.

Directly provided data includes email address, mobile phone number and payment confirmations via PayPal or cryptocurrencies. Automatically captured technical data includes IP address, browser type and access timestamps.

No special sensitive categories under GDPR Article 9 are collected.

Purposes and legal bases for processing

Data is processed based on contract execution, fiscal and anti-money-laundering legal obligations, legitimate fraud-prevention interests, and consent for promotional materials.

The platform performs no automated profiling or automated decision-making with legal effects.

Data retention period

Transaction information is kept for 10 years per fiscal-archiving rules. Technical logs are retained for a maximum of 1 year. KYC data is preserved for 5 years per anti-money-laundering regulations.

Disclosure to third parties

Data is not sold. It is shared on a limited basis with payment processors, technical providers and authorities upon legal request. International transfers comply with GDPR mechanisms.

Security measures

Encryption in transit, restricted access and secure backups are implemented. Breaches are notified within 72 hours if user rights are affected.

Your rights

You enjoy GDPR rights: access, rectification, erasure, restriction, portability and objection. Requests are submitted to support@ppay.ro and resolved within one month. Complaints may be addressed to ANSPDCP.