Last updated on January 8, 2020
Wirecard AG and its affiliated companies pursuant to Sections 15 et seqq. of the German Stock Corporation Act (Aktiengesetz) ("Wirecard Group") offer their customers products and services involving electronic payment transactions. The objective is to enable companies and consumers worldwide to handle electronic transactions securely and smoothly. Security and the protection of personal data is one of the most important aspects in the context of handling and processing of payments. This is why we place particular emphasis on high data protection standards.
Wirecard AG (“Wirecard”, “we”) operates this website in accordance with the provisions of the European General Data Protection Regulation 2016/679 (“GDPR”), the German Federal Data Protection Act (Bundesdatenschutzgesetz, “BDSG”), the California Consumer Privacy Act (“CCPA”) and all other provisions with relevance in the area of data protection law.
2. Contact us
The data controller of your personal data is Wirecard AG, Einsteinring 35, 85609 Aschheim, Germany.
If you have any questions about how we collect, store and use your personal information or would like a copy of the information we hold about you, then please contact our Data Protection Officer. You can either write at the above address or e-mail to: firstname.lastname@example.org.
3. What is this website about?
On this website, you will find information about our products and services involving electronic payment transactions. The objective is to enable companies and consumers worldwide to handle electronic payments securely and smoothly. Security and protecting personal data are two of the most important aspects of handling and processing payments. So the Wirecard Group has high standards for data protection.
Within this website, we'll provide you with a contact form and information about Wirecard services.
5. Processing of personal data and other data by Wirecard during visits of our website
5.1 Information we automatically collect when you access our website
No personal data will be collected, since the IP address is truncated before collection.
5.2 Wirecard does not sell your personal data
Wirecard does not sell your personal data to any third-party without your permission. However, Wirecard may disclose your information in a number of ways as part of our services. For instance, we may share your personal data with our third party service providers that facilitate the functions of our websites, such as our web hosting and cloud storage providers. We may also provide your personal data to service providers or contractors to perform functions on our behalf, including assisting us in providing our services to you or our partners, as set forth below.
5.3 Information you provide by intentionally contacting us
We offer a contact form on our website. Wirecard will store the personal data provided by you when you send the completed contact form (e.g. name, address, telephone number, e-mail address) in its Customer Relationship Management System („CRM System“). Wirecard will use such personal data
- to respond to your contact request;
- in anonymized form to support our internal business objectives, namely data analyses, revisions, the development of new products, improvement of this internet presence, improvement of our services, detection of usage trends and determination of the effectiveness of our advertising campaigns;
- in order to prevent and identify abuse or fraud.
The data collected via the contact form will not be forwarded to third parties. Affiliated companies of Wirecard AG pursuant to Sections 15 et seqq. of the German Stock Corporation Act (Aktiengesetz) are not to be regarded as third parties. Wirecard forwards your personal data to affiliated companies where necessary in order to respond to your contact request.
5.4 Information you provide by registering for our newsletter
On our website, we provide an option to register for our newsletter.
The information you disclose when registering for our newsletter (such as your email address) is stored in our CRM-System. Wirecard uses this personal data to send you information on a monthly basis which pertains to current topics from the areas of finance, product information, etc.
5.5 Transfer of your personal data
Your data will be forwarded to third parties, if at all, only within the limits of statutory regulations. Personal data will be forwarded to government institutions and authorities only within the limits of compulsory national legal provisions, or if those data must be forwarded for legal or criminal prosecution because abusive or fraudulent actions have been committed. Forwarding for any other purpose, especially for address trading, is excluded.
5.6 Information on Web Analysis Tools
5.6.1 Google Tag Manager
This Wirecard website uses the Google Tag Manager. Google Tag Manager is a solution enabling marketers to administer Website Tags on an interface. The tool Tag Manager itself (which implements the tags) is a cookie-less domain and does not collect personal data. The tool triggers the below described other tags which themselves may collect data, as described below. Google Tag Manager does not access these data. If a deactivation has been carried out on domain or cookie level, it remains for all tracking tags implemented with the Google Tag Manager.
5.6.2 Google Analytics
Google uses the information on our behalf to evaluate how this Wirecard website is used, create reports about the activities on the site for the site operators, and to perform additional services regarding website and internet utilization. Further, Google may pass this data on to third parties, if required by law or if using their services to analyse this data. Google will not associate IP addresses with any other information held by Google.
You can prevent the storing of cookies by choosing the appropriate settings in your browser; however, we would like to point out that in this case some functionality of the website may not be available to its full extent. Further you can prevent the collection and processing of cookie created data relating to your utilization of the website (including your IP) via Google by downloading and installing the browser-plugin available under this link.
You can refuse the use of Google Analytics by clicking on this link. An opt-out cookie will be set on the computer, which prevents the future collection of your data when visiting this website.
Further information concerning the terms and conditions of use for Google are available under this link. Further information concerning the data privacy of Google can be found under this link.
5.6.3 Google AdWords
We use the so-called Conversion Tracking from Google AdWords. Google AdWords is an online advertising program of Google Inc. If you click on advertising placed by Google, a cookie for the Conversion Tracking is placed on your device. These cookies lose their validity after 30 days and contain no personal data and therefore do not serve identification. If you visit certain websites within the 30-day-validity, Google can recognize that you clicked on the advertisement and that you have been forwarded to our website. Every Google AdWords customer receives a different cookie. The information collected with the aid of the Conversion cookie serves the purpose of creating Conversion statistics for AdWords customers that have decided to use Conversion Tracking. Thereby Google AdWords customers find out the total number of users that have clicked on their advertisement and have been forwarded to their website. However, they do not receive any information that can personally identify a user.
You can disable the storing of cookies in the settings options at Google (“Google Ad Settings”) using this link. Furthermore, you can make use of the deactivation options available at Network Advertising Initiative under this link.
5.6.4 Google Remarketing
Furthermore, within the Google AdWords services we use the remarketing functions “Google Remarketing for Search” and “Google Display Network Remarketing”. These remarketing reports are used within Google Analytics. Should you wish to opt out of this then please see this link.
“Google Remarketing for Search” and “Google Display Network Remarketing” display relevant ads tailored to you based on the fact that you visited our website by placing a cookie on your machine. The cookie is used to say “This person visited this page, so show them ads relating to that page.” It allows us to tailor our marketing to better suit your needs and only display ads that are relevant to you.
Google Analytics Demographics: We use these reports in Google Analytics, which are pulled from the Google Display Network (3rd party cookies). It includes age, interest groups, gender. We use this data for marketing reporting/intelligence.
5.6.5 Facebook Custom Audience – Use of the Pixel
This Wirecard website uses the pixel function of Facebook Custom Audience. The Facebook Pixel is offered by the social network Facebook. Facebook is registered in Europe as Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
The Facebook Pixel is integrated into this Wirecard website with an "advanced matching" function. The pixel initiates the processing of personal data by Facebook and enables the identification of users via numerous websites. This tracking procedure allows target group-oriented advertising.
The Facebook Pixel stores a cookie, which is a tiny text file, on your device when you access our Wirecard website. If you are logged in to Facebook at the same time or subsequently log in to Facebook, the visit of this this Wirecard website will be noted in your Facebook profile. That information is stored and processed by Facebook so that a connection to the respective user profile is possible and can be used for market research and advertising purposes. Also, data such as name and e-mail address of non-Facebook users who are not logged on to a Facebook account while visiting this Wirecard website are recorded via the pixel and its "advanced matching" function.
If you want to prevent the collection of your data through the Facebook Pixel on this Wirecard website, you can use this link.
Facebook processes the data in accordance with Facebook's Data Usage Policy.
For more information and details about the Facebook Pixel and how it works, please visit the Facebook Help Section.
5.6.6 LinkedIn Insight Tag
This Wirecard website uses LinkedIn Conversion Tracking of LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn"). LinkedIn Conversion Tracking is a re-targeting and analysis tool supported by the LinkedIn Insight Tag. The Insight Tag causes a cookie which is a tiny text file to be placed in your web browser when you visit the Wirecard website. The Insight Tag is integrated into this Wirecard website and enables the collection of data such as your IP address or the time of accessing this website or the collection of defined events (such as downloads or page views). In addition, interest-specific and relevant offers and recommendations can be displayed, which depend on the services, information and offers you have accessed on our Wirecard website. Furthermore, LinkedIn can compile statistics with aggregated data about the use and visit of our Wirecard website. If you are a LinkedIn member, demographic information, such as your approximate location, may also be collected. The cookie stored by the Insight Tag in your web browser remains there until it is manually deleted by you or automatically deleted after loading of the Insight Tag for the last time.
You can generally prevent the storage of cookies in the settings of your web browser. Alternatively, you can specifically object to LinkedIn Conversion Tracking by setting an opt-out cookie that remains on your device until you delete cookies. You can deactivate the LinkedIn cookie using this link. If you are a LinkedIn member, click on "Opt-out on LinkedIn". Non-members click on "Opt-out".
Further information on data protection at LinkedIn can be found here.
5.6.7 Twitter Pixel
Specific information on conversion tracking and the data protection settings for tailored advertising can be found here.
By using Twitter and the function “Re-Tweet” the websites visited by you will be connected to your Twitter Account and will be made known to other Twitter users, and data will also be transferred to Twitter. Please note that the Wirecard website does not receive knowledge about the content of the transferred data or their use by Twitter.
You can change your data protection settings relating to Twitter in your Twitter account settings.
This Wirecard website uses the services of etracker GmbH, Erste Brunnenstr. 1, 20459 Hamburg (www.etracker.com) for further web analyses. This service employs cookies which enable a statistical analysis of the use of the Wirecard website through its visitors as well as the display of use-related content and advertisement.
The so-created data will be processed and stored by etracker on assignment in Germany and are subject to the strict German and European data protection laws and standards. In this regard, etracker has undergone independent audit and certification and has been awarded the data protection quality seal "ePrivacyseal".
The data processing is carried out on the basis of the statutory provision of Art 6 para 1 lit f GDPR (legitimate interest). Our interest within the sense of GDPR (legitimate interest) is the optimization of our online offering and our web presence. Because the privacy of our visitors is important to us we anonymize or pseudonymize data that may permit a relation to individual persons such as IP address or device ID as soon as possible. A further use, connection with other data of etracker or transfer to third parties will not be done.
If you want to prevent the collection of your data through etracker on this Wirecard website, visitors can use the following link: etracker Opt-out
5.6.9 Crazy Egg
Crazy Egg Analytics collects standard Internet log information to track the following visitor behavior information: browser information, operating system information, mobile device information (e.g. device identifier, mobile operating system, etc.), IP address (stored in anonymized form), page accessed, geographic location, time of visit (by day, week, and duration), whether the visitor is a new or returning visitor.
The information generated by cookies about the use of this website (including your IP address) is transmitted to Crazy Egg. This information is used by Wirecard to compile statistical reports on the website’s activities and enhance the online user experience.
6. International data transfer
If necessary under clause 5, Wirecard will transmit your personal data to business partners, service providers and other companies in the Wirecard Group which are located outside the European Economic Area (EEA). However, if we process your personal data outside the EEA, we take suitable measures which guarantee an adequate level of data protection.
7. Data retention
We store your personal data for as long as it is needed to fulfil the purpose for which they were collected notwithstanding any statutory retention obligations, in particular according to tax or accounting law.
8. Data safety
In order to protect the personal data against loss, falsification or disclosure to unauthorised third parties, we have taken adequate organisational, technical and administrative measures. Wirecard uses firewalls in order to prevent unauthorised access to servers. The servers are located at a safe location in Germany to which only authorised staff have access. All staff members and all persons involved in the processing of data are subject to an obligation to comply with all laws relating to data protection, and to treat personal data confidentially.
9. Children’s privacy
All of our services, including our website, are intended for adult audiences, and are not meant to address anyone under the age of 18 (“children”). As such, children under 18 may not use our website. If you are under 18, do not attempt to register for or use any of our services, including our website, and do not provide us any personal data about yourself.
10. Our Policy on “Do Not Track” signals under the California Online Protection Act (CalOPPA)
We do not support “Do Not Track”. Do Not Track is a preference you can set in your web browser to inform websites you do not want to be tracked. You can enable or disable “Do Not Track” by visiting the “Preferences” or “Settings” page of your web browser. Third parties may collect data that relates to you. We cannot control third parties’ responses to do-not-track signals or other such mechanisms. Third parties’ use of data relating to you and responsiveness to do-not-track signals is governed by their respective privacy policies.
11. Data subjects rights
Under GDPR, CCPA and other applicable data privacy laws and regulations, visitors as data subjects have certain rights in particular the right to access, correct, update, or request deletion of your personal data that we store about you. Rights specific to California residents are set forth below.
If you wish to exercise any of these rights, you can do so at any time by contacting us via this form.
You can object to processing of your personal data, ask us to restrict processing of your personal data or request portability of your personal data. Again, you can exercise these rights by contacting us via this form.
Similarly, if we have collected and processed your personal data with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in reliance on lawful processing grounds other than consent.
California residents: Wirecard has in place policies and procedures to facilitate your exercise of privacy rights available under applicable law. Wirecard therefore informs you that, where applicable under relevant law, you may be entitled to the following:
Right to Access / Disclosure: to have access to your personal information upon simple request – that is, you may receive a copy of such information upon receipt of a verifiable request, along with other information related to the collection or processing.
Disclosure of Direct Marketers: to have access upon simple request, and free of charge, the categories and names/addresses of third parties that have received personal information for direct marketing purposes. Please see the “Your California Privacy Rights” section below for more information.
Right to Information about Collecting, Sharing, or Disclosing Personal Information: upon receipt of a verifiable request, you may obtain a list of:
- The specific pieces of your personal data Wirecard holds;
- The categories of personal data collected about you, sold to third parties, or disclosed to third parties for business purposes;
- The categories of personal data sold within the last 12 months;
- The categories of sources from which personal data is collected;
- The business or commercial purpose for collecting or selling personal data; and
- The categories of third parties with whom personal data is shared, sold, or disclosed for a business purpose.
Right to Opt-Out of the Sale of Personal Data: As noted elsewhere, Wirecard does not sell individuals’ personal data without permission. California residents have the right to opt-out of the sale of their personal data under certain circumstances.
Right to Deletion / “Right to be Forgotten”: to obtain the deletion of your personal information in the situations set forth by applicable data protection law and upon receipt of a verifiable request.
Right to Non-Discrimination: As defined under relevant law, you have a right to non-discrimination in the services or quality of services you receive from us for exercising your rights.
You have the right to complain to a data protection authority about our collection and use of your personal data. For more information, please contact us at the above e-mail address.
Our data protection officer can be reached under email@example.com.
12. California residents: submitting a verifiable request to Wirecard
As mentioned above, California residents have certain rights to access, delete, or otherwise control the use, collection, and/or disclosure of their information. Wirecard will respond to an individual’s “verifiable request” to exercise his or her rights under such laws – that is, where Wirecard has received a request purporting to be from a particular individual, and Wirecard has been able to verify the individual’s identity. The need to verify an individual’s identity is critical to protecting your information, and ensuring that your information is not shared with anyone pretending to be you or someone who is not authorized to act as your agent on your behalf.
We may ask for additional information if we have difficulty confirming your identity. We will not share your information or honor other requests in those situations in which we are unable to confirm a request for your information is a “verifiable request.”
Under California law, a consumer can appoint an “authorized agent” to make certain verifiable requests upon their behalf, such as the right to know what information we collect about the consumer or to request deletion of the consumer’s information. Because the security and privacy of your information is paramount, we will ask that you identify and provide permission in writing for such persons to act as your authorized agent and exercise your applicable rights under California law in such situations. This may require us to contact you directly and alert you that an individual has claimed to be your agent and is attempting to access or delete your information. We will also independently verify your identity to ensure that an unauthorized person is not attempting to impersonate you and exercise your rights without authorization. We will not share your information or honor any other requests in those situations where you cannot or do not grant permission in writing for an identified authorized agent to act on your behalf, or where we cannot independently verify your identity.