Privacy Policy

This information describes the methods and purposes of collecting and processing certain Personal Data by this Website. The contact details will also be indicated to request access, modification or deletion of personal data at any time.

The Privacy Policy is applied every time an User navigates through the pages of the Website https://www.paynowsolution.com and all online activities through it.

The processing of Personal Data of users of this Site will be carried out in Italy in compliance with:

• General Data Protection Regulation EU/2016/679 (GDPR)
• The Italian Legislative Decree n. 196 of 30 June 2003, regarding the Protection of Personal Data
• The recommendation n. 2/2001 of the European Data Protection Authorities, to identify the minimum requirements for the collection of personal data online.

The Italian supervisory authority is the "Garante per la protezione dei dati personali", with headquarters in Piazza di Monte Citorio n. 121, 00186 – Roma (https://www.garanteprivacy.it/).

Owner and Data Controller

Following consultation of this Site, data relating to identified or identifiable persons may be processed. The Data Owner of the processing of such data is:

Policy

Each person has the right to the protection of their personal data and in compliance with this right this Privacy Policy provides any useful information to understand how to collect and use the information that identifies users of the Site.

The Owner undertakes to comply with a principle of strict necessity in the processing of data that may identify the User, even indirectly.
The Owner does not collect and treat in any way "sensitive data" according the definition of Reg.UE 679/2016.
Users' Personal Data will be processed by the Data Controller by taking appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.

The Site has been configured so that the use of personal data is reduced to the minimum necessary and makes use of anonymous data whenever it is possible to pursue the same purposes.

Purposes

The Data Controller and the third party service providers used by it, unless otherwise specified, collect the User Data for purposes strictly related to the provision of its Services.

The purposes are:
to contact and respond to requests sent by the User, to collect statistical data on the use of the Website, to satisfy contracts stipulated with the User concerning the purchase or reservation of products and services, to display contents concerning their activity from and through other platforms.

For e-commerce purposes, we process data to:
Process and fulfill orders, manage payments, issue invoices, arrange shipping and delivery, handle returns and refunds, provide customer support, prevent fraud, comply with legal and tax obligations, and maintain accounting records.

To these are added purposes whose purpose is to provide a better experience to the User:
comment on contents, interaction with social networks and integration with external platforms.

With the explicit consent of the User, the purposes of:
sending commercial information via email, surveys on customer satisfaction, market research, promotional activities in general, profiling and analysis of the browsing experience for marketing and promotional purposes.

Collected data form this Website

The types of Personal Data collected and used for each purpose are indicated in the specific sections of this document.

Personal Data collected from this Site may be freely provided by the User or, in the case of Navigation Data, collected automatically during the consultation of the pages of this Site.

Other Personal Data that may be collected are indicated in other sections of this privacy policy or through informative texts indicated together with the collection of the Data.

E-commerce and Order Processing

This website operates as an e-commerce platform allowing users to purchase products/services online.
The processing of personal data for e-commerce purposes is based on the execution of the purchase contract between the User and the Owner.

Data collected from third-party services

This Website uses third-party services for the purposes indicated in the respective section of this site. The information acquired is in any case subject to the User's privacy settings.

It is possible that, even if the users do not use the service, the same collect traffic data relating to the pages in which it is installed.

Cookies

Cookies are installed inside the browser while browsing a Website and may contain various information, some of which may allow us to identify User preferences.

This Website and its domain https://www.paynowsolution.com does not save Personal Data in cookies.
The saved data have the sole purpose of memorizing the preferences requested by the User, or information necessary to allow the functionality of this Site and its safe and efficient browsing.

The cookies used by this site are:

• Session cookies (which disappear when the browser is closed)
• Persistent cookies (expire on a pre-established date)

The use of Cookies - or of other tracking tools - by this Site or by third party services used by it, unless otherwise specified, has the purpose of identifying the User and recording the relative preferences for the required purposes or statistical purposes.

For the deactivation modalities or for other information concerning cookies and privacy, please consult the Cookie Policy.

Data processing, sharing and methods

The Data Controller, in compliance with regulations, processes the Personal Data of Users by adopting appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.

The processing is carried out through IT and / or telematic tools, automated tools and with organizational and logical methods strictly related to the purposes indicated.

It is guaranteed by law that the processing of personal data is carried out in compliance with fundamental rights and the dignity of the person concerned, in particular as regards the secrecy, personal identity and the right to protection of the same.

Personal Data will be processed exclusively by persons in charge of processing specifically authorized and controlled by the Data Controller:

• Employees in charge of the company organization: administrative, commercial, marketing, legal, system administrators
• External subjects: third-party service providers, consultants, technical partners
• E-commerce service providers: Payment processors (Stripe, PayPal), shipping carriers and logistics companies, warehouse management systems, order fulfillment services, and other providers necessary for the execution of the purchase contract.
• Competent authorities: law enforcement or other governmental authorities in cases provided for by law or if strictly necessary to prevent, detect or prosecute any criminal acts and fraud; other organizations/entities and in general to every public and private entity, associated, controlled and parent companies with respect to which we have an obligation to communicate and this also for the purpose of the most correct fulfillment of any respective obligation (even of an instrumental nature) however connected or referable to the present and future relationships that will be established with you, imposed by laws and/or regulations or for the achievement of the purposes expressed above.

External parties may also be appointed, if necessary, as Data Processors by the Data Controller.

In addition to the companies that act as data processors, the Personal Data are also made available to third parties, independent data controllers, for ancillary purposes related to the provision of the requested services.

The updated list of managers can always be requested at any time at the email address of the Owner and Data Controller.

Place and communication of data

The Data are processed at the operational headquarters of the Data Controller and in any other place where the parties involved in the processing are located. For more information, contact the owner.

The User's Personal Data may be transferred to a country other than that in which the User is located. In any case they will never be transferred outside the countries belonging to the European Union, unless safeguard clauses are guaranteed or equal levels of protection of Personal Data.

The transfer will be made only to pursue commercial purposes agreed upon explicit request by the User.

Retention period

The Data are processed and stored for the time required by the purposes for which they were collected.

In particular:

• Personal Data collected for purposes related to the execution of a contract between the Owner and the User will be retained until the execution of the contract is completed.
• Personal Data collected for purposes related to the legitimate interest of the Data Controller will be retained until such interest is met.

When the processing is based on the consent of the User, the Data Controller may retain the Personal Data for a longer period until such consent is revoked. Furthermore, the Data Controller may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or an order of an authority. At the end of the retention period the Personal Data will be deleted or anonymized.

Security Measures for E-commerce

We implement appropriate technical and organizational measures to protect your personal data, especially payment information and order details:

• SSL/TLS encryption for all data transmission
• Secure payment processing through PCI-DSS compliant payment providers
• Regular security audits and updates
• Access controls and authentication systems
• Encrypted storage of sensitive data
• Regular backups and disaster recovery procedures

Credit card information is never stored on our servers. All payment data is processed directly by our certified payment service providers (Stripe, PayPal).

Rights

The User can know their rights, request further information and be up-to-date on the legislation regarding the protection of persons with regard to the processing of Personal Data by consulting the Website of the Guarantor for the protection of Personal Data at the address www.garanteprivacy.it.

The User has the right to:

• Revoke a previously expressed consent to the processing of personal data.
• Object to the processing of their data, if it occurs on a legal basis other than consent.
• Access to data and obtain all the information on the Data processed by the Data Controller.
  The data will be provided by a copy of the Data in a format in common use, and readable by automatic device.
• Verify and request the correction of your data.
• Obtain the limitation of treatment, if certain conditions are met. In this case, the Data Controller will not process the Data for any other purpose other than its conservation.
• Request cancellation or removal (right to be forgotten) of your Personal Data.
• Transfer data to another Data Controller, where technically feasible, obtaining or requesting the forwarding of data in a structured format, commonly used and readable by an automatic device. This provision is applicable when the Data are processed with automated tools and the processing is based on the User's consent, on a contract of which the User is a party or on contractual measures connected to it.
• File a complaint to the competent personal data protection authority or take legal action.

The users may exercise their rights at any time by forwarding the request to the Owner and Data Controller.

Defense in court

The User's Personal Data may be used for the defense by the Owner in court or in the stages leading to its possible establishment, by abuse in the use of the same or related services by the User.

The User is aware that the Data Controller may be required to disclose the Data at the request of the public authorities.

Legal obligations

The Owner reserves the right to access, store and share information with regulatory bodies, law enforcement agencies or other subjects in the following cases:

• In response to a legal request, in terms of good faith and within the time limits set by law.
• For all cases where it is necessary to detect, prevent and resolve unauthorized uses of the Services or Products provided or sold by this Site, in order to detect violations of our contractual or regulatory conditions.
• In order to detect harmful or illegal activities, to protect the activity, in relation to the Owner of the Activity, the User and / or Third Parties.

The data that is collected can be consulted and stored for a prolonged period of time when they are the subject of a legal proceeding or obligation, a government investigation or investigations regarding possible violations of our conditions or regulations or to avoid damage.

We may also retain the Data for at least one year in order to avoid repetition of improper use or other violations of the conditions.

Applicable laws

This Privacy Policy is governed by the aforementioned GDPR and the Italian law in force, which govern the processing of personal data - also held abroad - carried out by anyone who is resident or is based in a country of the European Community.

The GDPR guarantees that the processing of personal data will be carried out respecting the fundamental rights and freedoms, as well as the dignity of the interested party, with particular reference to privacy, personal identity and the right to protection of personal data.

Policy changes and updates

The Data Controller reserves the right to modify, in whole or in part, this Privacy Policy also in consideration of regulatory updates that protect the rights of Users.

Changes and updates to the Privacy Policy will be binding as soon as they are published in this section. We therefore ask you to regularly access this section to check the publication of the most recent and updated version of the Privacy Policy.

Legal notices

All documentation retrievable from this Site has been created and checked with the utmost care but the user is always required to check its accuracy and is responsible for its use.
In the event of defects, liability for direct or indirect damages suffered by the User or by third parties due to the use or non-use of the information collected is not attributable.
Although the contents of these pages are subject to continuous updating and verification, errors and / or omissions may still occur.

By accessing this Site, the User implicitly declares to have read, understood and accepted the information on Legal Notice and Privacy and declares to comply with all applicable laws and regulations.

If the User does not accept these conditions, they cannot use this Site.

Last modified: Wednesday 8 October 2025