Privacy Verklaring

Privacy Statement – Taxameter Centrale B.V. / Payflux

1. Introduction

Taxameter Centrale B.V. (“TMC”) respects the privacy of visitors to its websites and of individuals whose personal data is processed in the context of its services. This privacy statement describes how TMC processes personal data in connection with:

• The use of the websites www.taxameter.nl and www.payflux.nl
• The payment services and transaction processing provided by TMC

Payflux is a trade name of Taxameter Centrale B.V. under which payment services are offered.

2. Data Controller

Taxameter Centrale B.V. Chamber of Commerce (KvK) number: 33030098 H.J.E. Wenckebachweg 80, 1114 AD Amsterdam-Duivendrecht

Privacy contact: Data Protection Officer (DPO): dpo@waysis.com

3. Roles in Data Processing

Depending on the service provided, TMC may have different roles under the GDPR:

• Data Controller: TMC is the controller for personal data processed via the websites, for customer contact, contractual relations, and compliance purposes.
• Data Processor: When processing payment transactions, TMC may act as a processor on behalf of its clients (e.g., municipalities or parking operators). In that case, the client determines the purpose of the processing and TMC processes personal data solely on the instruction of this client.

4. Which Personal Data May Be Processed

TMC may process the following categories of personal data:

Website Use:

• Name, email address, and phone number
• Company name
• Data from contact forms

Transaction Data:

• Transaction amount, date, and time
• Payment method and reference
• Technical identification data of the transaction

5. Purposes of Processing

• Providing customer service and support
• Securing systems and preventing fraud
• Improving services
• Complying with legal obligations

6. Legal Basis for Processing

Personal data is processed based on one or more of the following legal grounds: performance of a contract, compliance with legal obligations, legitimate interest (such as fraud prevention and security), or consent.

7. Statutory Obligations

As a payment service provider, TMC may be required to process personal data to comply with laws and regulations, including:

• The Financial Supervision Act (Wft)
• The Money Laundering and Terrorist Financing Prevention Act (Wwft)
• Other applicable financial or regulatory requirements

8. Disclosure to Third Parties

Personal data may be shared with third parties if necessary for:

• The execution of payment services;
• The processing and settlement of transactions;
• Fraud prevention;
• Hosting and IT services;
• Compliance with legal obligations.

If third parties process personal data on behalf of TMC, data processing agreements are concluded to ensure the security of your data.

9. International Transfer

If personal data is processed outside the European Economic Area (EEA), TMC ensures that appropriate safeguards are applied, such as:

• Adequacy decisions by the European Commission;
• Standard Contractual Clauses (SCCs).

10. Security

TMC implements appropriate technical and organizational measures to protect personal data against loss, unauthorized access, or unlawful processing. These measures include:

• Access restriction to systems;
• Encryption where appropriate;
• Logging and monitoring;
• Security measures in accordance with current information security standards.

11. Retention Periods

Personal data is stored no longer than necessary for the purpose for which it was collected, unless a longer retention period is legally required. Specific statutory retention periods may apply to data related to financial transactions.

12. Rights of Data Subjects

Under the GDPR, data subjects have the following rights:

• Right of access;
• Right to rectification;
• Right to erasure;
• Right to restriction of processing;
• Right to data portability;
• Right to object to processing.

Requests can be directed to: privacy@taxameter.nl

13. Cookies

TMC's websites use cookies. More information regarding this is available in the Cookie Statement.

14. Amendments

TMC reserves the right to amend this privacy statement. The most current version is always available on the website.

15. Complaints

If you have a complaint about the processing of personal data, please contact TMC. You also have the right to lodge a complaint with the supervisory authority: Dutch Data Protection Authority (Autoriteit Persoonsgegevens).