The controller for data processing on this website is:

Powerful Payments GmbH
Sophia-Köster-Weg 657
Phone: (0421) 3815617
Email: info@powerfulpayments.com

If you have any questions about data protection or wish to exercise your rights, you can contact us at any time using the contact details provided above.

We collect and process personal data only to the extent necessary for providing our digital payment services. The legal basis arises from Art. 6 (1) lit. b GDPR (contract performance) and Art. 6 (1) lit. f GDPR (legitimate interest).

The categories of data processed include:

• Inventory data (name, address, contact details)
• Contract data (payment information, transaction data)
• Usage data (IP address, browser type, access times)

2.1 Cookies and Tracking

Our website uses cookies and similar technologies to ensure functionality and analyze usage. The legal basis is Art. 6 (1) lit. a GDPR (consent) or Art. 6 (1) lit. f GDPR (legitimate interest).

You can revoke your consent at any time with effect for the future. For more information, please see our Cookie Policy.

Your data is processed for the following purposes:

• Provision and optimization of our payment services
• Processing of transactions and customer communication
• Fulfillment of legal retention and documentation obligations
• Improvement of user experience and security

Your personal data is only disclosed to third parties if this is necessary for contract performance, you have given your consent, or a legal obligation exists. Recipients may include:

• Payment service providers and banks
• IT service providers and hosting providers
• Authorities and supervisory bodies (if legally required)

Data is transferred to third countries only in compliance with legal requirements (e.g., adequacy decision or standard contractual clauses).

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw your consent (Art. 7 (3) GDPR)

To exercise your rights, please contact us at the address provided above. You also have the right to lodge a complaint with a supervisory authority.

We implement technical and organizational measures to protect your data against loss, destruction, manipulation, and unauthorized access. These include encryption technologies, access controls, and regular security reviews.

We store your personal data only as long as necessary to fulfill the respective purposes or as required by legal retention periods. Once the purpose ceases or the retention period expires, the data is deleted.

We reserve the right to adapt this privacy policy as needed to reflect changes in legal or technical circumstances. The current version can always be found on this page.

Status: January 2025