Zettle by PayPal Privacy Policy
Privacy Policy for the Zettle payment module from PayPal
We, KuBa Label UG (Fuhrmannstrasse 4, 93413 Cham)
and KuBa Fashion UG (Marktstraße 13, 93444 Bad Kötzting),
Take the protection of your personal data very seriously.
This privacy policy provides you with comprehensive information about the nature, scope, and purpose of the collection, storage, use, and disclosure of your data as part of our payment processing via our payment provider **Zettle by PayPal** and as part of our loyalty program. This policy is based on the requirements of the General Data Protection Regulation (GDPR).
2. Responsible body
Responsible person within the meaning of the GDPR:
KuBa Label UG (limited liability)
Fuhrmannstraße 4
93413 Cham
Germany
Email: kuba-office@t-online.de
KuBa Fashion UG (limited liability)
Marktstraße 13
93444 Bad Kötzting
Germany
Email: kuba-office@t-online.de
3. Privacy Policy for the payment provider Zettle by PayPal
a) Data processing and purpose
To ensure secure and seamless payment processing, we use the payment provider **Zettle by PayPal**. As part of the transaction processing, the following personal data may be collected and processed:
- **Customer data:** First and last name, billing address
- **Payment data:** Payment information (e.g. credit card details, bank details), transaction data
- **Further contractually required information**
This data is processed exclusively for the purpose of carrying out the payment transaction, fulfilling the contract, preventing fraud and fulfilling legal obligations.
)
Your data is processed on the basis of:
- **Art. 6 (1) (b) GDPR** (necessity for contract performance) and
- if applicable **Art. 6 (1) (f) GDPR** (legitimate interests, e.g. for fraud prevention).
c) Data transfer and international transfers
To process the payment, your data will be transferred to **Payment via PayPal**. This may involve cross-border data transfers. Please refer to Zettle by PayPal's privacy policy for further information on data processing and security measures, available at:
[https://www.zettle.com/de/dataprivacy](https://www.zettle.com/de/dataprivacy)
d) Storage period
Your personal data will be stored in compliance with legal regulations and deleted as soon as the purpose of storage no longer applies or you object to further processing.
4. Additional section to the loyalty program
a) Collection and purpose of the data
As part of our loyalty program, we collect your **email address** and **telephone number** in addition to the data required for payment processing. This data is used solely for program administration, sending informational and promotional emails, and providing customized offers.
b) Consent to use for advertising purposes
By providing your email address and telephone number in the loyalty program, you expressly agree that we may regularly send you information about offers, promotions and news from our companies by email and, if specified, also by SMS.
Consent to receive such advertising and information emails is voluntary and is based on **Art. 6 (1) (a) GDPR**.
c) Right of objection and revocation
You have the right to revoke your consent to the use of your contact details for advertising purposes at any time with future effect. You can do this, for example:
- by clicking on the unsubscribe link included in each promotional email,
- via the customer portal set up for this purpose or
- in writing to one of the above-mentioned email addresses.
If you revoke your consent, you will no longer receive any promotional or informational emails from us in the future. Emails already sent will remain unaffected.
d) Data security and storage
The data collected as part of the loyalty program is stored under strict technical and organizational measures. It will only be shared with third parties if necessary to implement the program or if required by law.
5. Rights of data subjects
Regardless of the processing purposes mentioned above, you as the data subject have the following rights:
- **Right to information** according to Art. 15 GDPR (right to information about your stored data)
- **Right to rectification** according to Art. 16 GDPR (right to rectification of incorrect data)
- **Right to erasure** according to Art. 17 GDPR (“right to be forgotten”)
- **Right to restriction of processing** according to Art. 18 GDPR
- **Right to data portability** according to Art. 20 GDPR
- **Right of objection** according to Art. 21 GDPR (in particular with regard to processing for advertising purposes)
- **Right to lodge a complaint** with a supervisory authority pursuant to Art. 77 GDPR
6. Contact options for data protection inquiries
If you have any questions, concerns, or wish to exercise your rights, please contact us using the contact details above. We will endeavor to respond to your inquiries as quickly as possible.
7. Changes to this Privacy Policy
We reserve the right to adapt this privacy policy to reflect legal developments or changes to our services. You can find the most current version on our website.
With this privacy policy, we would like to provide you with a transparent explanation of how and for what purposes your personal data is processed in the context of payment processing and the loyalty program. Should you have any questions about this or other data protection-related topics, we are of course at your disposal.