myPOS and GDPR compliance

With whom we share personal data

At myPOS, we are committed to protecting your personal data. We share personal data only when necessary to provide our services and comply with legal obligations. Here’s how we handle the sharing of personal data:   Sharing with the myPOS Group: Members...

Continue reading

Our licenses and registrations

We provide financial services across the entire EU and EEA. myPOS Europe Ltd. is licensed by the Financial Conduct Authority (FCA) as an E-Money Institution. This license enables us to offer merchant accounts and financial services. You can find our reg...

Continue reading

Cookies Compliance

Cookies Compliance We use "cookies" and other technologies when users visit or use our websites or mobile apps. This usage is based on user consent. If users wish to withdraw their agreement to accept cookies and similar technologies, they can delete th...

Continue reading

Incident response

Our Incident Response procedures are designed and tested to ensure potential security events are identified and reported to appropriate personnel for resolution. Our team follows defined protocols for resolving security events, and steps for resolution ...

Continue reading

Encryption and storage of personal data

At myPOS, we take the responsibility to ensure that your personal information is secure. Your data is kept in an encrypted form on servers located in special data centres in Class A jurisdictions across Europe. To prevent unauthorized access or disclosu...

Continue reading

Reviews of Vendors and Partners

At myPOS, we are committed to ensuring that all our vendors and partners meet stringent security and privacy requirements. Our review process is thorough and aligned with the General Data Protection Regulation (GDPR).Where we deal with entities outside ...

Continue reading

Children and our services

Our services are not designed for individuals under the age of 18, unless explicitly specified in our Privacy Policy or other legal documents. If we obtain actual knowledge that we have collected Personal Data from an individual under the age of 18 with...

Continue reading

Data subjects’ rights and legal entities

Please be informed that corporations are not considered data subjects under the General Data Protection Regulation (GDPR). Business owners who use myPOS services and have business accounts can exercise their rights, but only concerning their personal da...

Continue reading

Consent withdraw and restriction of personal data processing

Where our clients have provided their consent to the processing of personal information by us, they may withdraw the consent at any time. Clients can do this by changing their account settings or by sending a communication to us specifying which consent...

Continue reading

Data transfer as our clients’ right

Our clients have the right to receive a copy of their personal data in a structured, commonly used, machine-readable format that supports re-use. They can transfer their personal data from one controller to another and/or have the personal data transmit...

Continue reading

Data Deletion

We generally retain clients’ personal information for as long as necessary for the performance of the contract between them and us and to comply with our regulatory obligations. Our customers can request the closure of their myPOS Account and the termin...

Continue reading

Data Access

Our clients have the right to receive a copy of the data we hold for them at any time. The request can be sent via e-mail to dpo@mypos.com.

Continue reading

Correction (rectification) of client’s personal data

Our customers have the right to request the correction of inaccurate or incomplete personal information we hold about them. Clients can send their requests via email to dpo@mypos.com.

Continue reading

Our retention periods

As a financial institution, we are required by the Payment Services Directive and money laundering legislation to keep clients’ data for a period of 5 years after the termination of the contract or account. After the regulatory retention period has expi...

Continue reading

Data Protection Impact Assessment

We have conducted a detailed review of all our data processing activities, organized by product and department. This review includes analyzing the legal grounds for processing, retention periods, and the technical and legal safeguards in place to protec...

Continue reading

Why are we taking pictures of an entity’s authorised persons and their ID documents and is it GDPR-compliant?

myPOS services are designed for business purposes and can be used by both individuals and entities. When you register for and/or use myPOS Services on behalf of an entity, we treat you as an authorised person, and you may need to provide personal data o...

Continue reading

myPOS clients and their related personal data

All of myPOS clients are legal entities (companies/corporations). The data about sole traders is considered personal data under GDPR. Corporations and companies, other than sole traders, are not data subjects under the law. However, we are obliged to ve...

Continue reading

How we use the collected data?

At myPOS, we are committed to protecting your personal data. Here’s how we use, store, and process your information: Service Provision: We use your data to provide, understand, improve, and develop our services.Security: Your information helps us create...

Continue reading

The data we collect

At myPOS, the personal data we collect and process is described in detail in our Privacy Policy. The data includes: Personal Identification Information: Name, address, email address, phone number, and other contact details.Financial Information: Bank ac...

Continue reading

Internal policies

At myPOS, we prioritize the protection of your personal data and ensure that our internal policies are always in compliance with the latest GDPR requirements.Our internal policies are regularly updated to align with new regulations and best practices.

Continue reading

Data Protection Officer, Privacy Team and GDPR Training

At myPOS, we ensure that our internal practices comply with GDPR through the following measures: GDPR Training: All employees undergo GDPR training managed by our Privacy Team and Compliance Department, with annual refresher sessions for all staff. Data...

Continue reading

Organisational Readiness at myPOS

At myPOS, the protection of our customers’ personal data is of utmost importance. We have worked tirelessly to ensure that all GDPR compliance requirements were met. We continue to follow best practices and guidelines issued by regulatory bodies to adap...

Continue reading