Close countries panel

Select country

For solutions in a specific country please visit our local website

Nets is a part of the Nexi Group - The European PayTech. Visit our Group website at

Careers
Operating Status
​
Menu​​
Go to Search Operational Status
SolutionsSupportInsight ＆ InnovationNews ＆ mediaAbout Nets
Choose country
Close panel​​
Close panel​​
Close panel​​
Close panel​​
Close panel​​

Get insights

​​​to how Nets secure your personal data

​

​Introduction

Did you not find the information you were looking for, then you might be able to find it here.

To get any information you must as a starting point, be a customer of a Nets product. Click here to see products.

If you are a customer of a Nets product, then we have listed some examples of what type of personal data Nets can provide. 

​​Explanation of processor and controller ​

​When Nets acts as a Processor, Nets is processing your personal data on behalf of our customer(s) and you need to contact your bank, merchant or other responsible Controller if you have questions about your rights in accordance with the GDPR.

 

Processor
means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller; (article 4 (8)).

 

Controller
means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law; (article 4 (7)).

 

When Nets acts as a Controller, Nets can provide information to you as a data subject about your rights in accordance with the GDPR.

​Nets Group is in the clear majority acting as a Processor and upon instruction in written agreement with our customers (namely banks and merchants).

​​The different rights

When Nets is the controller you have these rights:

 

​Right of access by the data subject

​You have the right to get confirmation and eventual access to the data Nets has registered for a specific product where Nets is regarded as data Controller. You may only request access to personal information about yourself.    

​The data subject shall have the right to obtain from the controller confirmation as to if personal data concerning him or her are being processed, and, where that is the case, access to the personal data as further described in article 15.    
​

Right to restriction of processing

You have the right to request the restriction or suppression of your personal data. This is not an absolute right and only applies in certain circumstances.
​The data subject shall have the right to obtain from the controller restriction of processing as further described in article 18.

​​Right to erasure

You have the right to have your personal data erased. This is also known as the ‘right to be forgotten’. The right is not absolute and only applies in certain circumstances. In practice this means that Nets will erase your personal information when you no longer have an active agreement with Nets and the information is not necessary to keep due to requirements in law or to defend a legal claim. Because Nets is a financial company we must apply to various financial legislation, which means that we are not always allowed to delete your information. As an example, the Anti money laundering rules states that data must be kept current year + 5 years.

The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the grounds stipulated in article 17 (1) a-f applies, unless the processing is necessary due to local law or to exercise or defend a legal claim (cf. article 17 (3).

​Right to rectification

​You have the right to have inaccurate personal data rectified or incomplete data completed. If you receive documents or notifications from Nets, where the personal data need to be rectified, then please fill in the correct information in the request template and select a product on the next page. In many cases, it is possible for you to correct the personal data yourself though portals or apps. 

 

​The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Considering the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement. (article 16).

​​Right to data portability

You have the right to receive personal data you have provided when providing your consent or for performance of contract in a readable format. 

​The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, as stipulated in article 20 (1) a and b.

​​Right to object

You have the right to object to the processing of your personal data. This effectively allows you to ask Nets stop processing your personal data. The right to object only applies in certain circumstances. Whether it applies depends on the purposes for processing. One example is if you have not provided your consent to marketing and are receiving marketing letters/information.

​The data subject shall have the right to object, on grounds relating to his or her situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions and direct marketing as further stipulated in article 21.

​​Automated individual decision-making, including profiling

Def: Automated individual decision-making is a decision made by automated means without any human involvement. You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you similarly significantly affects you. In many cases this does not applies to Nets products. On the next page under the products you will be able to select this if it applies.

​The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her. (article 22 (1))
After having familiarized yourself with the above information, and you still want to request information
– then please click on the link below.    
Click here to start the request process:
Privacy notice/ Cookie policy​