RIBPay

Privacy Policy

Preamble

Your privacy is a priority for RIBPay (hereinafter "RIBPay" or "we"). In this regard, we are committed to respecting the personal data of our online users (hereinafter "you"), to process them with the utmost care and ensure the best level of protection in accordance with EU Regulation 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter "GDPR") and the French Law No. 78-17 on Data Processing, Data Files and Individual Liberties.

By using the services provided by RIBPay, you have communicated your personal data (hereinafter "PD") to us so that we can provide you with a service. This data will be processed confidentially in accordance with current provisions and in compliance with legal requirements at national and international levels. By processing, we mean any form of automated processing carried out by RIBPay or its potential subcontractors.

The aforementioned concepts encompass any operation we perform based on the PD of a natural person, such as collection, recording, modification, deletion, consultation, communication, use, etc.

This privacy policy aims in particular to inform you:

  • The type of PD we collect to provide you with services and the reasons for such collection
  • How your PD is used by RIBPay
  • How cookies are managed on our sites and applications
  • Your rights regarding your PD and the means to exercise them.

Article 1

Who is responsible for using your data in the context of your relationship with our services?

The data controller for your PD described in this privacy policy is RIBPay. Its registered office is located at: 679 AV DE LA REPUBLIQUE 59800 LILLE.

This privacy policy reflects the agreement concluded between you and RIBPay to facilitate the exercise of your rights. Any question or request concerning the processing of your PD can be addressed to the following email address: dpo@ribpay.app.

You can exercise your rights with respect to RIBPay in accordance with the GDPR.

Article 2

Why do we collect your personal data and on what grounds?

We collect PD concerning you for the reasons and purposes described below.

RIBPay collects and uses your PD to operate efficiently and provide you with the best possible user experience with its services.

Please also note that we can only collect and use your PD if this use is based on one of the legal grounds determined by Article 6 of the GDPR (legal basis) (For example, your consent or the performance of a contract concluded with us).

The table below precisely lists the purposes of using your PD by RIBPay and its joint data controllers, the legal basis of the corresponding processing and the type of PD collected and/or processed.

PurposeLegal BasisPersonal Data
Provision of "Account" service
  • Your consent (GDPR 6.1.a)
  • Performance of the contract concluded with you (GDPR 6.1.b)
  • Email
  • Phone number
  • First and last name
  • Company identification data
  • IBAN
Provision of "Payment" service
  • Your consent (GDPR 6.1.a)
  • Performance of the contract concluded with you (GDPR 6.1.b)
  • Beneficiary's name
  • Beneficiary's IBAN
Meet our legal obligations
  • Compliance with a legal obligation (GDPR 6.1.c)
  • Information relating to your identity
Customer support and problem resolution
  • Your consent (GDPR 6.1.a)
  • Email address
  • Any personal information allowing us to process your request and ensure its legitimacy
  • Data relating to the use of our services
Complaint processing
  • Compliance with a legal obligation (GDPR 6.1.c)
  • Email address
  • Any personal information allowing us to process your request and ensure its legitimacy
Measure audience
  • Performance of the contract concluded with you (GDPR 6.1.b)
  • No PD collected in the context of this processing
Questionnaires and surveys
  • RIBPay's legitimate interest (GDPR 6.1.f)
  • Your consent (GDPR 6.1.a)
  • Email
Ensure the security of our services and our users
  • Compliance with a legal obligation (GDPR 6.1.c)
  • RIBPay's legitimate interest (GDPR 6.1.f)
  • Authentication data

Article 3

Cookies and other trackers

To improve your user experience when visiting our site application, we use cookies to retain your login information, provide you with a secure connection, collect statistics to optimize site functionality and adapt content to your interests.

PD may also give rise to commercial solicitation on our part. However, you can modify your communication preferences at any time. When consulting our site, information relating to your navigation may be recorded in "Cookies" files installed on your terminal (computer, tablet, smartphone...) subject to your preferences.

  1. 3.1. What is a cookie?

    A cookie is a small text file, image or software, containing information, which is recorded on the hard drive of your terminal (example: computer, tablet, smartphone, or any device allowing you to browse the internet) when consulting a website or application with your browsing software. It is transmitted by the server of a website to your browser. The cookie file relates in particular to the pages visited, the advertisements you clicked on, the type of browser you use, and allows its issuer to identify the terminal in which it is recorded, during the validity or recording period of the cookie concerned.

    If your terminal is used by several people and when the same terminal has several browsing software, we cannot ensure with certainty that the services and advertisements intended for your terminal correspond to your own use of this terminal and not to that of another user.

  2. 3.2. What cookies are placed?

    Functional cookiesThese cookies are necessary for the proper functioning of our site and allow its optimization. They allow in particular to remember your browsing preferences on the site.
    Audience measurement cookiesThey allow to perform visit statistics and analyze the use of the site or our application in order to improve its performance and the quality of our services. They can also enrich our knowledge of your interests on the site or our application.
    Marketing cookiesThese cookies are used to track visitors across websites. The objective is to display advertisements that are relevant and interesting for the user and therefore have more value for publishers and third-party advertisers.
  3. 3.3. Cookie management

    Internally managed cookiesThese cookies are created or managed by us as responsible for our Web/App
    Third-party managed cookiesThese cookies are managed by service providers external to our services.
  4. 3.4. What is the lifespan of these cookies?

    All optional cookies placed for our services have a validity period of less than or equal to 6 months. The duration for taking into account your refusal to validate these cookies is also 6 months.

    Some of the mandatory technical cookies issued and placed for our services are kept for the duration of session handling by the browser; the other mandatory technical cookies are valid for one year.

Article 4

With whom do we share your personal data?

In the context of our activities, it may be necessary for us to share your PD. However, we assure you that we always do so in a way that guarantees optimal protection of your PD.

In this regard, we ensure that all our partners properly respect the obligations provided for by the GDPR through the contractual commitments concluded with them. Most of our partners are located in the European Union, and for those who are outside the European Union, we have carried out an analysis to ensure on the one hand compliance with their commitment regarding GDPR and on the other hand that they have signed standard contractual clauses or that they undertake to respect binding corporate rules.

Article 5

How long do we keep your PD?

RIBPay retains user data in its main system for the entire duration of contractual relations, which end under the conditions set by Article 4 "Service termination" of the general terms of use of the service concerned - a duration to which is added a backup duration of 6 months maximum (except regulatory exception indicated).

Article 6

How do we ensure the security of your PD?

RIBPay, certified ISO 27001, implements numerous measures intended to ensure the integrity, confidentiality and availability of your PD. In this regard, RIBPay uses encryption methods based on proven public standards at the state of the art, allowing any PD concerning you to be transmitted securely.

Article 7

How can you exercise your rights regarding your PD?

You have the right to consult and have your PD modified free of charge.

You can also exercise your right to erasure, portability, to be forgotten, to limitation of your processing and opposition under the same conditions, as well as file a complaint with a supervisory authority (in France, the CNIL).

To exercise these rights, you simply need to send us a request indicating your first and last name as well as in the subject which right(s) you wish to exercise.

Your written request must be signed and accompanied by a photocopy of your identity document (identity card or passport in progress of validity). The request must also specify the email address to which we must send you the reply.

We will do everything possible to ensure that the requested actions are undertaken as soon as possible and at the latest one month after receipt of the request and the supporting documents necessary for its processing in accordance with the GDPR.

In case of a particularly complex request, the regulation provides that this deadline may be exceptionally extended by two months (Article 12.3 of the GDPR).

Article 8

Contact details of the Data Protection Officer (DPO)

dpo@ribpay.app