Last Updated: 28-04-2020
The protection of your data is very important to us.
The terms “PagBrasil”, “we” or “our” refer to PagBrasil; and the terms “you”, “your” refer to the Merchant or the User (depending on the case).
How PagBrasil stores, uses and protects your personal data when the Merchant or the User browses and uses the Website.
1. We are committed to the security of your Data
PagBrasil protects the Data of the Merchants and of the Users that browse, access or use the Website or use the payment services of (i) intermediation, (ii) processing and (iii) payment gateway (jointly “Services“) provided by PagBrasil, under the terms of applicable legislation and in accordance with the provisions of this Policy.
PagBrasil is committed to the security of the Data of the Merchants and of the Users during the entire process of navigation, use of the Services and sending of support request to PagBrasil. Therefore, the Data of the Merchants and of the Users are kept strictly confidential and are not sold, exchanged or disclosed to any third parties, except in the cases expressly established in this Policy.
We do not knowingly collect or request Data from minors under 18 years old. The Users under 18 years of age shall not send us Data through our Website. If we become aware that we have collected Data from an individual under 18 years old, we will disregard the Data provided and will not keep them in our databases.
2. Collected Data
By accepting the terms of this Policy, the Merchants and the Users expressly agree to provide only true, current, and accurate Data and refrain from misusing their identity or their bank Data in any way when accessing and using the Website and/or the Services.
2.1 What Data do we collect when a Merchant or a User visits and browses our Website?
Even if you are not registered or logged in, by visiting and browsing the Website, we may receive Data on the device (mobile or computer), collect Internet Protocol (IP) addresses and other Data that internet browsers usually make available, such as the pages visited, the duration of the visit, the website browsing, browser type and geolocation, to learn about the Merchants and the Users and improve our products.
2.2 What Data do we collect when a Merchant registers on our Website?
We collect Data such as name, last name, Individual Taxpayers’ Register (CPF), email, mobile phone (all referring to the Merchant’s legal representative), as well as the Merchant’s name, National Register of Legal Entities (CNPJ/MF), address and website. We may ask the balance sheet and profit and loss account of the Merchants.
2.3 What User Data do we collect (i) through the Merchants or (ii) directly on the Website to provide the Services and prevent fraud?
From the Users, individuals and legal entities, we collect name, last name (from individuals), CPF/CNPJ, email, address, telephone number, credit card and bank account details (depending on the type of transaction), which may be shared with companies that provide anti-fraud services, banks or credit card acquirers to provide the Services.
2.4 What Data do we collect when a User files a complaint on our Website?
We collect Data necessary for PagBrasil to contact the Merchant or the User, such as name, email, phone number and address, as well as relevant information on the content of your support request to find out the best way to help you.
3. Where do we store the Data of the Merchants and the Users of the Website?
The Data collected when accessing or using the Website and/or retaining the Services may be transferred and stored at a destination outside Brazil, to the extent permitted by law, also through service providers that use cloud technology (AWS, for example). By accessing and using the Website and sending us your personal data, the Merchants and the Users agree with the transfer, storage and processing of your Data in the format set out in this Policy. We take all reasonable care to ensure that your data is processed safely and in accordance with this Policy.
4. What do we do with the Data we collect?
We only collect, store, process and/or use your Data for the purposes described in this Policy.
We collect your Data to provide the Services, analyze the experience of the Merchants and the Users, prevent fraud, send marketing messages of the Website, as well as to comply with other legal and regulatory obligations imposed on PagBrasil in its own transactions.
The information collected according to item 2.3 may be used for setting up a pre-paid payment account in the User’s name, with the exclusive purpose of providing the payment services offered by PagBrasil, being that the funds are automatically transferred for the purpose of the settlement of the transaction carried out, in case of transactions with Merchant’s domiciled in foreign territory, and requires the settlement amount to be transferred abroad.
5. Data Sharing
Please understand with whom your Data is shared: you will be able to request data about the public and private entities with which PagBrasil has shared your Data, through the mechanisms indicated on the Website, and PagBrasil may share these data to the extent that they do not violate business secrets and confidentiality duties.
To provide the Service, we share the Data with banks and acquirers and in anti-fraud checks, we share the Data with credit bureaus, such as SPC and SERASA.
6. Mechanisms we provide to protect your rights
You have rights and guarantees in relation to your personal data. Below you will find clear and transparent mechanisms for the legal representatives of the Merchants and the Users to exercise their rights. Whenever necessary, our team will be ready to answer any requests.
• Confirm and access your Data: You may request details and/or a copy of your Data processed by us at www.pagbrasil.com/pt-br/suporte/.
• Change or correct your Data: If you want to change your Data or if you have any reason to believe or suspect that any Data we have about you is wrong or incomplete, please access www.pagbrasil.com/pt-br/suporte/.
• If you wish, you may withdraw consents, remove, block or request anonymization of your Data: You may withdraw your consent, whenever the processing of personal data is based on consent under the terms of Law No. 13,709 of 2018, request the removal of your Data or deactivate your account at any time, under the terms of the law. The withdraw of the consent will cause the removal of all personal data, except (i) anonymized Data and (ii) Data necessary for PagBrasil and/or third parties involved in the provision of the Services to have judicial, arbitration or administrative defense, and to comply with legal and regulatory obligations.
• We will store your history: You may contact PagBrasil and we are authorized to contact you so that you may access certain functionalities of our Services, ask questions about the Website, and make complaints or suggestions, through the email firstname.lastname@example.org, phone numbers provided by you or through Whatsapp (or other instant messaging apps). The conversations will be stored by us and we will be able to use their content as a means of evidence in court, for the provision of our Services, or in other events provided by law.
Cookies: Cookie is a small file added to the user’s device or computer to provide a customized experience of accessing the Website. Cookies help to analyze internet traffic or allow us to know when the user visited a specific website, as well as to promote remarketing, fraud and risk analysis and better knowledge of the user. A cookie does not give access to a computer or disclose data other than the data the user chooses to share with us.
Web beacon: Web beacon is a technique used to map those visiting a certain web page, identifying the user’s behavior in different websites or webservers.
Analytics tools: We use analytics tools to improve the Website and Services. These tools may collect data such as: how the Merchants and the Users visit this Website, what pages they visit, and when they visit said pages, and other websites visited before coming to this Website.
8. Internet security
We strive to protect the privacy of the Data that we keep in our records, however, we cannot guarantee total security. Unauthorized access or use, hardware or software failure and other factors can compromise the security of the Data of the Merchant or of the User at any time.
We emphasize that Data transmission through the internet is not completely safe due to several factors, including network and operating factors, and PagBrasil cannot guarantee total security of the data transmitted by the Merchants and the Users to PagBrasil. Although we do our best to protect your Data, we cannot guarantee the security of the data transmitted to our website. Any transmission is the sole responsibility of the Merchants and of the Users that, by agreeing with this Policy, expressly acknowledge and assume such responsibility.
Once Data is received through the Website, we are committed to ensuring that they are secure in the Website’s environment. To prevent unauthorized access or disclosure of Data of the Merchants and of the Users, we have implemented appropriate physical, electronic, and administrative procedures to secure and protect the Data we collect. We own PCI DSS Level 1 certificate and all communication is encrypted and stored in our databases using the most state-of-the-art techniques of data security and protection.
We keep the date, time, and IP address of your access to our Website for at least six (6) months to comply with legal obligation.
9. Our legal bases of the use of Data
Our legal bases for processing your personal data, in addition to the consent indicated herein, may also include the need to collect personal data in order to fulfill any agreement entered into by and between you and PagBrasil, in order to comply with legal obligations; based on our legitimate interests (to the extent permitted by law) and fraud prevention.
10. Changes to this Policy
PagBrasil may change this Policy at any time. In the event of changes to the Policy, PagBrasil undertakes to inform the Website users about said changes by means of a post on our website and by email. PagBrasil will obtain the consent of the Merchant and the User to make relevant changes.
If the Merchant or the User do not agree with the new Policy, the Merchant or the User may reject it, however, they will not be able to use the Services or the Website.
11. Contact us