EBANX PRIVACY NOTICE - EN
Effective Date: 2026年8月14日
This is the Privacy Notice of EBANX LTDA., CNPJ 13.236.697/0001-46, headquartered at Rua Marechal Deodoro, 630, Praça San Marco, CEP 80010-010, Centro, Curitiba, PR, as well as of all companies of the EBANX economic group, represented herein by its headquarters ("EBANX"). This Notice is available through the https://www.ebanx.com website, where you can access information about all services provided by us. The privacy of your Personal Data is a key priority for EBANX, and we are committed to your security throughout your browsing and use of our services.
The purpose of this Notice is to explain how your Personal Data is collected, used, and shared by us. Here we also tell you how you can access, update, correct your Personal Data and have control over your information.
Glossary
· Controller: entity(ies) that make(s) the decisions regarding the processing of Personal Data.
· Data Protection Officer (DPO): person appointed by EBANX to act as a communication channel between EBANX, the Data Subjects and the competent data protection authorities.
· Data Subject: any natural person who uses our services.
· EBANX: all companies within the EBANX economic group, including EBANX S.A. (Argentina), Zilver S.A. (Argentina), EBANX Gold S.A. (Argentina), EBANX Bahamas Ltd., EBANX Instituição de Pagamentos Ltda. (Brazil), EBANX Brasil Holding Ltda., EBANX Holding de Pagamentos Ltda. (Brazil), EBANX Ltda. (Brazil), EBANX Pagamentos Ltda. (Brazil), Frontier Payments Brasil Ltda., EBANX Serviços Digitais Ltda. (Brazil), EBANX Holdings LLC (Cayman), EBANX Chile Limitada, Frontier Payments Chile SpA, EBANX Chile Local Payments SPA, EBANX Shanghai Technology Information Co. Ltd. (China), EBANX Colombia Local Payments S.A.S, EBANX Colombia SAS, Frontier Payments Colombia S.A.S, EBANX Costa Rica SRL, EBANX LLC (Egypt), EBANX de El Salvador S.A., EBANX Ecuador S.A, EBANX Guatemala S.A., EBANX India Private Limited, EBX Jamaica Limited, EBAKE Limited (Kenya), EBANX de México S. de RL. de CV., FTR Payments, S.R.L de C.V (Mexico), EBANX Mexico Local Payments S.A. de C.V., E3X Pay Limited (Nigeria), EBANX Panama S.A., EBANX Paraguay S.R.L., EBANX Peru S.A.C., Frontier Payments Peru S.A.C., EBANX República Dominicana S.R.L, EBANX PTE. LTD. (Singapore), EBANX South Africa (Pty) Ltd., EBANX Uruguay S.A.
· Merchants: national or international platforms or websites that use EBANX's services to process payments.
· Personal Data: information relating to an identified or identifiable individual; that is, information that allows a person to be recognized, directly or indirectly, through an identifier such as name, CPF and other identification documents, date of birth, e-mail, mother's name, telephone number, IP address, geolocation data, etc.
· Platform: the website https://www.ebanx.com and the EBANX API.
· Processing: any operation carried out with Personal Data, such as collection, production, receipt, classification, use, access, reproduction, transmission, sharing, distribution, processing, filing, storage, deletion, evaluation or control of information, modification, communication, transfer, dissemination or extraction.
· Processor: entity(ies) that carry(ies) out the processing of Personal Data on behalf of the Controller.
· Sensitive Personal Data: Personal Data with a special classification under applicable law, generally including racial or ethnic origin, religious belief, political opinion, membership of a union or of a religious, philosophical or political organization, data concerning health, information relating to sex life, genetic or biometric data (e.g., fingerprint and facial data). In some countries, financial information and criminal records are also considered Sensitive Personal Data.
1. EBANX's role in processing your Personal Data
EBANX's role in the Processing of your Personal Data may vary depending on the context of the Processing operation. In general, EBANX acts as Controller, making the main decisions regarding the Processing, especially in activities related to payment processing, fraud prevention, risk analysis and regulatory compliance. In certain specific contexts, EBANX may act as the Merchant's Processor, strictly following its instructions for the Processing of Personal Data.
2. Data collected by EBANX
EBANX may collect your Personal Data at different moments: (i) when you access our website and browse the items made available; (ii) when you contact us through our communication channels; (iii) when you make purchases on the platforms of Merchants that have engaged our payment services; (iv) when you maintain a commercial relationship on behalf of a company that is an EBANX client or partner.
In the scenarios mentioned above, we may collect information including:
· Identification Data: full name; tax identification number; date of birth; address; e-mail; mother's name; telephone number; photo of identification document.
· Financial Data: payment details; banking information (bank, account, branch); payment method used; payment token.
· Technical Data: IP address; time of access; date of access; data about the access device; cookies.
· Usage Data: information about the purchases made (type of product/services, amounts); information about your consumption profile; transaction volume.
Our services are directed at adults and are not intended for children or adolescents. We do not knowingly collect Personal Data from individuals below the legal age of majority. If we identify that a minor's Personal Data has been collected in breach of applicable law, we will delete such data as soon as possible. Merchants that use EBANX's services on platforms intended for minors are responsible for obtaining consent from the legal guardians before directing the Data Subject to the EBANX payment environment, where applicable. If you believe that we have inadvertently collected a minor's Personal Data, please contact us through our Privacy Portal.
3. How we use your Personal Data
We always use your Personal Data in order to achieve specific purposes, as described below. Take a look:
|
Type of Data |
What is the collection for? |
Applicable legal bases |
|
Identification Data |
· To provide our services, including payment processing, chargebacks and refunds, sending notifications about transactions and complying with our legal and regulatory obligations; · To identify and prevent fraud and security threats, data analysis, systems maintenance, data hosting; · To manage our relationship with you, including support through our communication and customer service channels, which may involve procedures to confirm your identity and prevent fraud; · To maintain the commercial relationship, in the context of EBANX's clients |
· Compliance with a Legal or Regulatory obligation; · Performance or formation of a Contract; · Legitimate Interest; · Consent (where this is the only applicable legal basis). |
|
Financial Data |
· To provide our services, including payment processing, chargebacks and refunds, sending notifications about transactions, data analysis; · To comply with our legal and regulatory obligations and to carry out bank audits and/or external audits; · To calculate fees, assess taxes and comply with tax obligations; · To identify and prevent fraud and security threats. |
· Compliance with a Legal or Regulatory obligation; · Performance or formation of a Contract; · Legitimate Interest; · Consent (where this is the only applicable legal basis). |
|
Technical Data |
· To provide our services, including payment processing, chargebacks and refunds, sending notifications about transactions, identification and prevention of fraud and security threats, data analysis, systems maintenance, data hosting and compliance with our legal and regulatory obligations; · To analyze transactions and the consumption profile, for the purposes of behavioral analysis and prevention of fraud and security threats, to monitor and improve our performance and enhance our services; · To manage our relationship with you, including support through our communication channels, which may involve procedures to confirm your identity and prevent fraud. |
· Compliance with a Legal or Regulatory obligation; · Performance or formation of a Contract; · Legitimate Interest; · Consent (where this is the only applicable legal basis). |
|
Usage Data |
· To fix technical failures, improve the usability of the Platform and develop new products and functionalities. · To prepare reports and studies on market trends. |
· Legitimate Interest; · Consent (where this is the only applicable legal basis). |
We may also use automated decision-making systems in the context of fraud prevention and transactional risk analysis. These systems analyze behavior patterns, transaction history, information about the device used and anomalies in relation to the Data Subject's usual consumption profile, in order to identify suspicious transactions and protect the integrity of the payment ecosystem. The outcome of this processing may influence the approval, blocking or referral for manual review of a transaction, which may, as a result, prevent the completion of a purchase or temporarily restrict access to the service. If you disagree with a decision taken on an automated basis, you may request a review through EBANX’s Privacy Portal, in accordance with the rights guaranteed by the legislation applicable in your country. The legal bases underlying the Processing of Personal Data carried out by EBANX may vary depending on the country in which the data was collected. Regardless of the country, EBANX always identifies the legal basis applicable to the operation and collects the minimum data necessary to properly provide its services in compliance with applicable law.
4. How we record your activities
When you access our Platform, we may record your activities to create logs (records of activities carried out on the websites, applications and products). They register your IP address, access and the actions you take on the Platform, including the date and time of each action performed and information about the device used, such as the operating system version of your smartphone, computer and browser.
To help us in this process, we may use technologies to monitor the activities carried out on our Platform, including:
· Cookies: Cookies are small text files that are stored on your device and tell us about your interaction with the features of our Platform. You can review and update your cookie preferences at any time through your browser settings. If you disable or refuse cookies, some parts of the Platform may stop working or may not work properly, impairing your experience. To learn more about how we use cookies, visit our Cookie Notice.
· Analytics tools: These are tools that collect information about the way you browse our Platform, including the pages you visited, when you visited them, which content may have interested you most, etc.
All the technologies we use and the records we keep will comply with the terms and limits set out in this Privacy Notice.
5. Sharing and disclosure of Personal Data
We may share your Personal Data in the performance of our legitimate activities, which will always be done in accordance with applicable laws, within the limits and purposes of the business and the terms of this Privacy Notice. On this basis, we may share your Personal Data with:
· The EBANX group companies, to offer the best experience while using our payment services;
· Third parties, (i) to protect EBANX's interests in the event of a conflict, including in legal proceedings; (ii) in the event of corporate transactions and changes involving EBANX, for the continuity of our services;
· Outsourced service providers, to the extent that such data is necessary for the provision of the service/product or the improvement of our Platform. For example, we may share data with partners to monitor the transactions carried out through our Platform, in order to prevent fraud and money laundering;
· The Central Bank of the countries in which EBANX operates and other regulatory bodies, or financial institutions, payment institutions and other applicable institutions, in accordance with legal requirements; and
· Judicial, police, governmental authorities or other third parties to whom we are required by law, regulatory rule or court order.
EBANX always shares data for legitimate purposes and under no circumstances sells Personal Data.
6. Storage, retention and deletion of Personal Data
Your Personal Data will be kept only for as long as necessary to fulfill the purposes for which we collected it, in compliance with the principles of data protection laws. The period during which we use, store and subsequently delete Personal Data varies according to the category of Personal Data, the purpose of the processing, the applicable legal basis, the nature of our relationship with you, regulatory requirements, contractual obligations and the need to safeguard or exercise our rights.
In general, Personal Data is used for as long as necessary for the purposes described in this Notice and stored for the periods required or permitted by applicable law and may, due to the financial nature of our operations, be kept for periods of between 5 and 15 years, in accordance with the applicable local regulation. The term of the databases managed by EBANX will correspond to the period necessary to achieve the purposes stated in this Privacy Notice, as well as to meet the legal, contractual, accounting, tax and administrative obligations to which EBANX is subject.
Access to Personal Data at EBANX is restricted, and Personal Data is only accessed or processed when actually necessary. Its deletion occurs after the retention period defined by EBANX, in compliance with applicable law, and the deletion methods include anonymization, purging, destruction and secure disposal of hardware, where applicable.
7. Your rights, choices and controls
You have rights and guarantees in relation to your Personal Data.
Data protection laws generally grant rights to Data Subjects. Such rights may vary depending on the country in which you reside. So that you have clarity and transparency in exercising your rights, we provide the list of countries in which EBANX operates and the specific rights of Data Subjects at the end of this Notice.
Regardless of where you are, you may exercise any of your rights, including the right to withdraw your consent, through EBANX’s Privacy Portal. Before responding to any request, we will ask for some information to confirm your identity. Your request will be fulfilled after your identity has been validated.
If you reside in a country that does not have data protection legislation establishing formal rights for Data Subjects, we maintain our commitment to transparency with you. If you have any questions about how EBANX processes your Personal Data, please contact us through our Privacy Portal.
We note that rights are not absolute and may not be applicable in certain circumstances. In certain cases, such as to comply with legal, contractual or regulatory obligations, to safeguard and exercise rights in judicial proceedings, or in other situations provided for by law, we may not be able to fulfill your request for deletion, objection, blocking or anonymization of Personal Data. In such cases, we will respond explaining the reasons that justify not fulfilling your request.
You also have the right to lodge a complaint or petition with the competent data protection authority. If the jurisdiction in which you are located recognizes the right to petition the local authority, we recommend that you visit the website of the competent authority in your country to find the most appropriate means of exercising this right.
8. International Transfers
Your Personal Data may be transferred to other countries during the provision of our services, whether between EBANX group companies or to Merchants and third parties, for purposes such as payment processing, chargebacks and refunds, fraud prevention, compliance with legal and regulatory obligations, providing support, carrying out audits, maintaining technological infrastructure and cloud storage. In such cases, we will adopt the measures required by law to ensure that your Personal Data remains protected and that such transfer is carried out in accordance with one of the mechanisms provided for in applicable law, including (i) standard contractual clauses approved by the competent data protection authorities; (ii) binding corporate rules applicable to transfers within the EBANX economic group; (iii) adequacy decisions recognized by the local authority, where the destination country offers an equivalent level of protection; or (iv) the Data Subject's specific consent to the transfer, where no other mechanism is applicable.
9. Commitment to the security of your Personal Data
We are committed to the security of your data throughout your experience with us. We adopt robust security measures and use our best efforts to mitigate risks of destruction, accidental or unlawful loss, alteration, disclosure, unauthorized access or any unlawful processing of Personal Data.
To protect your Personal Data, we adopt technical and organizational measures that include, among others: encryption of data in transit and at rest; pseudonymization of data where technically feasible and appropriate to the purpose of the Processing; access controls based on the principle of least privilege, ensuring that only the employees and systems that need it can access certain information; multi-factor authentication for access to systems; continuous monitoring of activities and detection of anomalous behavior; periodic vulnerability assessment programs and security testing.
However, even with all the security measures adopted, we cannot guarantee that all information traveling through our systems will not be the target of unauthorized access arising from criminal conduct. Therefore, if there is a security incident affecting the Personal Data processed by EBANX, we will notify the competent authorities and inform the impacted Data Subjects, in accordance with applicable data protection laws.
10. Changes to this Privacy Notice
We are always evolving, so the information provided in this Privacy Notice may also change. We recommend that you access it frequently, or whenever you have questions, to keep up with any updates. Changes will be communicated right here, on the page of this Notice.
Where the changes to this Notice are material, especially those that entail new Processing purposes or changes to the applicable legal bases (requiring consent, for example), we undertake to communicate them with reasonable advance notice and through the available communication channels, in accordance with the minimum time frames and if required by applicable law, before they take effect.
11. Contact us
If you have questions, suggestions and/or complaints regarding the provisions of this Privacy Notice, or if you wish to submit any request regarding the Processing of your Personal Data, please contact us through EBANX’s Privacy Portal.Your request will be handled by our Data Protection Officer (DPO), Giovanna Michelato Almada, and her team, within the time frame established by the data protection law applicable to your country.
12. Country-specific requirements
The rights of Data Subjects may vary according to the legislation in force in each country. To ensure clarity and transparency, we provide below information about the countries in which EBANX operates. The provisions set out in this section prevail over the general provisions of this Privacy Notice whenever there is a difference between them.
South Africa
Data Subject's rights:
· Obtain information about the processing of your Personal Data.
· Obtain confirmation that we process your Personal Data, that is, verify whether EBANX processes your personal information.
· Access your Personal Data processed by EBANX, that is, request a copy of the Personal Data we hold about you.
· Request the correction of Personal Data that is incomplete, inaccurate or out of date.
· Request the deletion of Personal Data, that is, request the erasure of your data when we no longer need to keep it.
· Request the restriction of processing, that is, limit how we use your Personal Data in certain circumstances.
· Object to the processing of your Personal Data for direct marketing purposes and in the other situations permitted by law.
· Request the review of automated decisions, that is, challenge decisions taken solely on the basis of the automated processing of your Personal Data that produce legal effects or significantly affect your interests.
· Petition the competent authority via this link.
Argentina
Data Subject's rights:
· Obtain information about the processing of your Personal Data.
· Obtain confirmation that we process your Personal Data, that is, verify whether EBANX processes your personal information.
· Access your Personal Data processed by EBANX, that is, request a copy of the Personal Data we hold about you.
· Request the correction of Personal Data that is incomplete, inaccurate or out of date.
· Request the deletion of Personal Data, that is, request the erasure of your data when we no longer need to keep it.
· Request the restriction of processing, that is, limit how we use your Personal Data in certain circumstances.
· Object to the processing of your Personal Data for direct marketing purposes and in the other situations permitted by law.
· Withdraw consent, that is, withdraw your authorization for consent-based data processing.
· Petition the competent authority.
Brazil
Data Subject's rights:
· Obtain confirmation that we process your Personal Data, that is, verify whether EBANX processes your personal information.
· Access your Personal Data processed by EBANX, that is, request a copy of the Personal Data we hold about you.
· Request the correction of Personal Data that is incomplete, inaccurate or out of date.
· Request the anonymization, blocking or deletion of Personal Data that is unnecessary, excessive or processed in breach of applicable law, that is, ask us to remove or anonymize data that we no longer need to keep.
· Request the portability of your Personal Data to another service or product provider.
· Request the deletion of Personal Data processed on the basis of consent;
· Obtain information about the public and private entities with which we share data.
· Obtain information about the possibility of not providing consent and about the consequences of such refusal.
· Withdraw consent, that is, withdraw your authorization for consent-based data processing.
· Request the review of automated decisions, that is, challenge decisions taken solely by automated systems that affect your interests.
· Petition the competent authority.
Chile
Data Subject's rights:
· Access your Personal Data processed by EBANX, that is, request a copy of the Personal Data we hold about you.
· Request the correction of Personal Data that is incomplete, inaccurate or out of date.
· Request the suppression or deletion of Personal Data, that is, request the erasure of your data when we no longer need to keep it.
· Request the restriction of processing, that is, limit how we use your Personal Data in certain circumstances.
· Object to the processing of your Personal Data for direct marketing purposes and in the other situations permitted by law.
· Request the portability of your Personal Data to another service or product provider.
· Request the review of automated decisions, that is, challenge decisions taken solely on the basis of the automated processing of your Personal Data that produce legal effects or significantly affect your interests.
· Request the temporary suspension of a processing operation involving your Personal Data when you file a request for correction, deletion or objection.
· Withdraw consent, that is, withdraw your authorization for consent-based data processing.
· Petition the competent authority.
Colombia
Data Subject's rights:
· Obtain information about the processing of your Personal Data.
· Obtain confirmation that we process your Personal Data, that is, verify whether EBANX processes your personal information.
· Access your Personal Data processed by EBANX, that is, request a copy of the Personal Data we hold about you.
· Request the correction of Personal Data that is incomplete, inaccurate or out of date.
· Request the deletion of Personal Data, that is, request the erasure of your data when we no longer need to keep it.
· Modify and withdraw consent, that is, withdraw your authorization for consent-based data processing.
· Request confirmation that you have authorized EBANX to process your Personal Data.
· Petition the competent authority.
Costa Rica
Data Subject's rights:
· Obtain information about the processing of your Personal Data.
· Access your Personal Data processed by EBANX, that is, request a copy of the Personal Data we hold about you.
· Request the correction of Personal Data that is incomplete, inaccurate or out of date.
· Request the deletion of Personal Data, that is, request the erasure of your data when it has been processed in breach of applicable law or collected without your consent.
· Petition the competent authority.
Egypt
Data Subject's rights:
· Obtain information about the processing of your Personal Data.
· Access your Personal Data processed by EBANX, that is, request a copy of the Personal Data we hold about you.
· Request the correction of Personal Data that is incomplete, inaccurate or out of date.
· Request the deletion of Personal Data, that is, request the erasure of your data when we no longer need to keep it;
· Request the restriction of processing, that is, limit the processing of your Personal Data to a specific purpose;
· Withdraw consent, that is, withdraw your authorization for consent-based data processing.
· Object to the processing of your Personal Data where such processing infringes your fundamental rights and freedoms.
· Petition the competent authority.
Ecuador
Data Subject's rights:
· Obtain information about the processing of your Personal Data.
· Request the correction of Personal Data that is incomplete, inaccurate or out of date.
· Access your Personal Data processed by EBANX, that is, request a copy of the Personal Data we hold about you.
· Request the deletion of Personal Data, that is, request the erasure of your data when we no longer need to keep it or in the other situations provided for by law.
· Object to the processing of your Personal Data for direct marketing purposes and in the other situations permitted by law.
· Request the portability of your Personal Data to another service or product provider.
· Request the suspension of the processing of your Personal Data.
· Request the review of automated decisions, that is, challenge decisions taken solely on the basis of the automated processing of your Personal Data that produce legal effects or affect your fundamental rights and freedoms.
· Petition the competent authority.
Philippines
Data Subject's rights:
· Obtain information about the processing of your Personal Data.
· Access your Personal Data processed by EBANX, that is, request a copy of the Personal Data we hold about you.
· Challenge and request the correction of Personal Data that is incomplete, inaccurate or out of date.
· Request the blocking or deletion of Personal Data, that is, request the erasure of your data when we no longer need to keep it or in the other situations provided for by law.
· Request the portability of your Personal Data to another service or product provider.
· Petition the competent authority.
India
Data Subject's rights:
· Obtain information about the processing of your Personal Data.
· Access your Personal Data processed by EBANX, that is, request a copy of the Personal Data we hold about you.
· Obtain information about the entities with which we share data.
· Request the correction of Personal Data that is incomplete, inaccurate or out of date.
· Request the deletion of Personal Data, that is, request the erasure of your data when we no longer need to keep it.
· Petition the competent authority.
Indonesia
Data Subject's rights:
· Obtain information about the processing of your Personal Data.
· Access your Personal Data processed by EBANX, that is, request a copy of the Personal Data we hold about you.
· Request the correction of Personal Data that is incomplete, inaccurate or out of date.
· Request the deletion of Personal Data, that is, request the erasure of your data when we no longer need to keep it.
· Request the portability of your Personal Data to another service or product provider.
· Withdraw consent, that is, withdraw your authorization for consent-based data processing.
· Request the review of automated decisions, that is, challenge decisions taken solely on the basis of the automated processing of your Personal Data that produce legal effects or that significantly affect your interests.
· Request the restriction of processing, that is, limit how we use your Personal Data in certain circumstances.
· Petition the competent authority.
Kenya
Data Subject's rights:
· Obtain information about the processing of your Personal Data.
· Access your Personal Data processed by EBANX, that is, request a copy of the Personal Data we hold about you.
· Request the correction of Personal Data that is incomplete, inaccurate or out of date.
· Request the deletion of Personal Data, that is, request the erasure of false or misleading data about you.
· Object to the processing, that is, challenge the processing of your Personal Data.
· Petition the competent authority.
Malaysia
Data Subject's rights:
· Obtain information about the processing of your Personal Data.
· Access your Personal Data processed by EBANX, that is, request a copy of the Personal Data we hold about you.
· Request the correction of Personal Data that is incomplete, inaccurate or out of date.
· Withdraw consent, that is, withdraw your authorization for consent-based data processing.
· Object to the processing of your Personal Data for direct marketing purposes or in the other situations permitted by law.
· Request the portability of your Personal Data to another service or product provider.
Mexico
Data Subject's rights:
· Obtain information about the processing of your Personal Data, that is, know how your data is processed.
· Access your Personal Data processed by us, that is, request a copy of the Personal Data we hold about you.
· Request the correction of Personal Data that is incorrect or out of date.
· Request the deletion or cancellation of Personal Data, that is, request the erasure of your data when we no longer need to keep it.
· Object to the processing of your Personal Data for marketing purposes and refuse the use of your data for secondary purposes that are not necessary for your relationship with EBANX or for the provision of the requested services.
· Request the restriction of processing, that is, limit how we use your Personal Data in certain circumstances.
· Withdraw consent, that is, withdraw your authorization for consent-based data processing.
· Petition the competent authority.
Nigeria
Data Subject's rights:
· Obtain information about the processing of your Personal Data.
· Obtain confirmation that we process your Personal Data, that is, verify whether EBANX processes your personal information.
· Access your Personal Data processed by us, that is, request a copy of the Personal Data we hold about you.
· Request the correction of Personal Data that is incomplete, inaccurate or out of date.
· Request the deletion of Personal Data, that is, request the erasure of your data when we no longer need to keep it or in the other situations provided for by law.
· Request the restriction of processing, that is, limit how we use your Personal Data in certain circumstances.
· Withdraw consent, that is, withdraw your authorization for consent-based data processing.
· Object to the processing of your Personal Data for direct marketing purposes or in the other situations permitted by law.
· Request the portability of your Personal Data to another service or product provider.
· Request the review of automated decisions, that is, challenge decisions taken solely on the basis of the automated processing of your Personal Data that produce legal effects or that significantly affect your interests.
· Petition the competent authority.
Panama
Data Subject's rights:
· Obtain information about the processing of your Personal Data.
· Access your Personal Data processed by us, that is, request a copy of the Personal Data we hold about you.
· Request the correction of Personal Data that is incomplete, inaccurate or out of date.
· Request the deletion of Personal Data, that is, request the erasure of your data when we no longer need to keep it.
· Object to the processing, that is, refuse to provide your Personal Data or to a given processing operation.
· Withdraw consent, that is, withdraw your authorization for consent-based data processing.
· Request the portability of your Personal Data to another service or product provider.
· Request the review of automated decisions, that is, challenge decisions taken solely on the basis of the automated processing of your Personal Data that produce adverse legal effects or that affect your rights.
· Petition the competent authority.
Paraguay
Data Subject's rights:
· Obtain information about the processing of your Personal Data.
· Access your Personal Data processed by us, that is, request a copy of the Personal Data we hold about you.
· Request the correction of Personal Data that is incomplete, inaccurate or out of date.
· Request the deletion of Personal Data, that is, request the erasure of your data when we no longer need to keep it and in the other cases permitted by law.
· Object to the processing of your Personal Data for direct marketing purposes or in the other situations permitted by law.
· Request the portability of your Personal Data to another service or product provider.
· Request the review of automated decisions, that is, challenge decisions taken solely on the basis of the automated processing of your Personal Data that produce legal effects or that adversely affect your interests.
· Petition the competent authority.
Peru
Data Subject's rights:
· Obtain information about the processing of your Personal Data.
· Access your Personal Data processed by us, that is, request a copy of the Personal Data we hold about you.
· Request the correction of Personal Data that is incomplete, inaccurate or out of date.
· Request the deletion of Personal Data, that is, request the erasure of your data when we no longer need to keep it.
· Object to the processing, that is, challenge the processing of your Personal Data.
· Petition the competent authority.
Dominican Republic
Data Subject's rights:
· Obtain information about the processing of your Personal Data.
· Access your Personal Data processed by us, that is, request a copy of the Personal Data we hold about you.
· Request the correction of Personal Data that is incomplete, inaccurate or out of date.
· Request the deletion or blocking of Personal Data, that is, request the erasure of your data when we no longer need to keep it.
· Petition the competent authority.
Thailand
Data Subject's rights:
· Obtain information about the processing of your Personal Data.
· Access your Personal Data processed by EBANX, that is, request a copy of the Personal Data we hold about you.
· Request the correction of Personal Data that is incomplete, inaccurate or out of date.
· Request the anonymization, blocking or deletion of Personal Data that is unnecessary, excessive or processed in breach of applicable law, that is, ask us to remove or anonymize data that we no longer need to keep.
· Request the portability of your Personal Data to another service or product provider or receive a copy of your data in a machine-readable format.
· Object to the processing of your Personal Data for direct marketing purposes or in the other situations permitted by law.
· Request the restriction of processing, that is, limit how we use your Personal Data in certain circumstances.
· Withdraw consent, that is, withdraw your authorization for consent-based data processing.
· Petition the competent authority.
Turkey
Data Subject's rights:
· Obtain confirmation that we process your Personal Data, that is, verify whether EBANX processes your personal information.
· Obtain information about the processing of your Personal Data.
· Request the correction of Personal Data that is incomplete, inaccurate or out of date.
· Request the deletion of Personal Data, that is, request the erasure of your data when we no longer need to keep it.
· Request the restriction of processing, that is, limit how we use your Personal Data in certain circumstances.
· Obtain information about the third parties with which we share data.
· Request the review of automated decisions, that is, challenge decisions taken solely on the basis of the automated processing of your Personal Data that adversely affect your interests.
· Petition the competent authority.
Uruguay
Data Subject's rights:
· Obtain information about the processing of your Personal Data.
· Access your Personal Data processed by EBANX, that is, request a copy of the Personal Data we hold about you.
· Request the correction of Personal Data that is incomplete, inaccurate or out of date.
· Request the deletion of Personal Data, that is, request the erasure of your data when we no longer need to keep it or in the situations provided for by law.
· Request the review of automated decisions, that is, challenge decisions taken solely on the basis of the automated processing of your Personal Data that produce legal effects or significantly affect your interests.
· Petition the competent authority.
Vietnam
Data Subject's rights:
· Obtain information about the processing of your Personal Data.
· Access your Personal Data processed by EBANX, that is, request a copy of the Personal Data we hold about you.
· Request the correction of Personal Data that is incomplete, inaccurate or out of date.
· Request the deletion of Personal Data, that is, request the erasure of your data when we no longer need to keep it or in the situations provided for by law.
· Withdraw consent, that is, withdraw your authorization for consent-based data processing.
· Request the restriction of processing, that is, limit how we use your Personal Data in certain circumstances.
· Request the portability of your Personal Data to another service or product provider.
· Object to the processing of your Personal Data for direct marketing purposes or in the other situations permitted by law.
· Petition the competent authority.
Data Subject's obligations:
· Provide accurate, complete and non-misleading Personal Data;
· Notify EBANX of any error, change or outdated information in the data provided;
· Comply with the applicable personal data protection rules and regulations;
· Cooperate with EBANX and the competent authorities in any investigations into data breaches;
· Respect the privacy and Personal Data of third parties;
· Assume liability for damages caused to EBANX or third parties as a result of providing false or inaccurate data.
.png)