[Last updated: April 2022]
Tigapo Ltd. (“we”, “us”, “our”, “Company” or “Tigapo”), a part of the Nayax Group (as defined below), is committed to protecting the privacy of users who use our platform and services, and visitors of our website, all as further detailed below. We take several precautions and have implemented certain mechanisms designed to protect Personal Data (as defined below), as well as to comply with applicable privacy and data protection laws.
Personal Data is any information which identifies or can be reasonably used to identify a natural person. Such data includes for example: first and last name, phone number, email address, unique online identifiers, billing information, credit card details, etc.
As opposed to Personal Data, non-personal data, or anonymized data, is information which does not identify a specific natural person and cannot reasonably be used for such identification. This type of information includes for example aggregate or statistical data, technical information transmitted from your device such as type of browser and operating system, language preference, referring and exit pages and URLs, time and date stamp, and amount of time spent on particular page.
|Types of Personal Data processed
|Purposes of processing
|For EU persons – Legal Basis under the GDPR
Data related to End-Users
Users Sign Up and Profile Data
When you sign up to use our Services we will require you to provide your date of birth for age validation purposes.
When you sign up to our Services and create an account on the App in order to use the Merchant’s machines, you will need to provide us with certain information including your name, email address and your credentials.
Once registered, you may complete your profile on the App and provide us with additional information (at your choice). Such information includes your phone number, language preference and gender.
Note that you are not required to provide us with the additional information in order to use the Services.
If you choose to sign up using Facebook connect, Google+, Twitter or Apple (“Social Media”), we will collect your profile picture available on your Social Media account and your email address. Note that the Social Media operators’ use of your data is governed by their privacy policies.
If you provide us with permission, we also collect and process your geolocation (Geofencing – location based service).
Using the Services with Merchant’s Machines
End User using NFC
In the event you are using our Services by NFC (near field connection) devices, provided to you by the Merchant at the Merchant’s facilities, we will collect certain information about you that includes, your name, phone number and email. When using the NFC we do not collect your payment details. Your credit will be updated automatically through our Solution integrated with the Merchant’s machines.
We collect certain technical information transmitted by your device when accessing the App, this information includes: type of the device used, IP address, device name, IP address, operating systems and device ID. We also collect certain information about your use of the App automatically such as access time and date, and user actions such as purchases and page views.
Merchant and Merchant’s Personnel
In order to provide Merchant with our Solution and the Services, and upon registration, we collect information regarding the Merchant’s and its personnel: Merchant’s full name, name and contact details of the Merchant’s contact person, address, phone number, financial information for billing purposes and email address.
Additionally, if applicable and in order to fulfill our legal obligations to prevent fraud and money laundering, we may obtain information for the purpose of “Know Your Client” (KYC) check. Such information includes information regarding Merchant or Merchant’s shareholders (if applicable), such as: identification number (SSN, passport, I.D. number or driving license number), financial information (credit card number and banking information), date of birth, residence country, citizenship country, nationality, position, phone and mobile number, face snapshot, image and video, and copy of the identification document.
Note that if you are an employee or an authorized user of a Merchant, we may process certain personal data about you, in the framework of our engagement with your employer, as specified herein.
If you register for a demo, available through our Website, we will collect and process your name, email address and company name.
|To send you a demo of our Services.
In the event you contact us for customer service, support or any other inquiries, by sending us an email via the “Get in touch” feature available on the Website, or by any other means of communications we may make available to you, you will be requested to provide us with your full name, email address and phone number. In addition, you can choose to provide us with additional information as part of your correspondence with us.
We collect certain technical information transmitted by your device when accessing the Website, this information includes: type of the device used, IP address, type of browser, internet service provider, End-User actions and page views, directing URL’s, device name, device ID and operating systems.
You are not required by law to interact with us or provide us with Personal Data. If you choose to use any of our App or Services, or if you choose to use or purchase from Merchants’ machines, we will process certain Personal Data (as detailed above) in order to deliver to Merchants and you, as applicable, our Services.
Our Services are not intended to persons under 16 years old or equivalent minimum age for providing consent to processing of Personal Data in the relevant jurisdiction (“Child”). If a parent or guardian becomes aware that his or her Child has provided us with Personal Data without their consent, he or she should contact us immediately. We do not knowingly collect or solicit Personal Data from a Child. If we become aware that a Child has provided us with Personal Data, we will delete such data from our databases.
Depending on your jurisdiction, data protection and privacy laws provide you with the ability to exercise certain rights regarding your Personal Data that we process. Please note that, unless you instruct us otherwise, we retain the information we collect for as long as needed to provide the Services and to comply with our legal obligations, resolve disputes and enforce our agreements. If you object to the aforesaid collection, use and sharing of data, please immediately cease using the Services and/or App.
Data subject rights include (depending on your jurisdiction and applicable law):
To assert any of these rights, please contact us at: [email protected].
We may request additional information from you when you contact us with a request concerning your data subjects rights in order to: (i) verify your identity; (ii) determine the applicable laws; (iii) and locate your data.
If you have any questions, concerns or requests in relation to your privacy or personal data, you are welcome to contact us, by sending an email to: [email protected].
You may also contact us using the following contact information:
3 Arik Einstein St., Herzliya 4659071 Israel
EU residents may also contact us by using the following details of our EU entity:
Nayax Europe UAB
Antakalnio 17, LT-10312, Vilnius, Lithuania
WE DO NOT SELL OR RENT ANY OF YOUR PERSONAL DATA TO NON-AFFILIATED THIRD PARTIES FOR THEIR MARKETING PURPOSES.
A “cookie” is a small piece of information that a website assigns to your device while you access such website. Cookies are very helpful and may be used for a variety of different purposes. These purposes include, among other things, allowing you to navigate between pages efficiently, enabling automatic activation of certain features, remembering your preferences and making the interaction between you and our Service quicker, easier and smoother. Cookies are also used to help customize your experience and for advertising purposes (including personalized advertising). You can find out more information about cookies at: www.allaboutcookies.org.
Most browsers will allow you to erase cookies from your computer’s hard drive, block acceptance of cookies, or receive a warning before a cookie is stored. However, if you block or erase cookies your online experience may be limited.
We use both session and persistent cookies on the Services and we may use different types of cookies to run the Services, as follows:
Strictly necessary cookies – these cookies are necessary for the Website and Services to function properly and cannot be switched off in our systems. If you set your browser to refuse these cookies, some parts of the Services will not then work.
Analytics and Performance-related cookies – these cookies allow us to assess and improve the performances of our Services, including improving your online activity on our Website and Services. These cookies allow us to count visits and geographic sources. The information we get through the use of these cookies are in an aggregated form and we make no attempt to identify you or influence your experience of the Website and Services. If you do not allow these cookies, the loss of the information stored in a preference cookie may make the Service experience less functional but should not prevent it from working.
Functionality-related cookies: these cookies tell us, for example, whether you have engaged our Website and Services before or if this is your first time, and help us to identify the features in which you may find favorable.
For more information about the cookies we use and to manage your preferences you can: go the cookies settings or see the following links for more information with respect to how you can block or erase cookies via your particular browser: Google Chrome; Firefox; Internet Explorer; Safari; Edge; Opera.
Nayax Group is an international corporation, operating globally, with offices and data centers in various jurisdictions around the world. Therefore, Personal Data may be transferred across international borders in the framework of our services, including to Israel, the US and Europe. International transfers of data are done with appropriate measures to ensure that your Personal Data receives an adequate level of protection as required under applicable law. Further, when Personal Data collected within the EU is transferred outside the EU (and not to a recipient in a country that the European Commission has decided provides adequate protection), it shall be transferred in accordance with the provisions of the Standard Contractual Clauses approved by the European Union (if applicable). If you would like to understand more about these arrangements and your rights in connection therewith, please contact us at: [email protected].
We may send users of the Services or users who provided us with their consent with information on new products, features, activities, services and periodic announcements or newsletters. You may opt-out any time from such communications at any time by either: (i) using the “unsubscribe” feature available within the message; or (ii) sending us an email to: [email protected].
We implement security measures designed to reduce the risks of damage, loss of information and unauthorized access or misuse of personal data. We implement appropriate data collection, storage and processing practices and security tools designed to protect personal data against unauthorized access, alteration, disclosure or destruction.
You should be aware that no security measures are completely fail-proof, and it is impossible to prevent all threats to the security of data and systems. Therefore, you should be aware that any processing of digital personal data holds certain inherent risks, and we cannot guarantee that our services and databases will be immune to any wrongdoings, malfunctions, unauthorized interceptions or access, malware attacks or other kinds of abuse and misuse.
Unless you or the Merchant (as the case may be) instruct us otherwise, and subject to applicable laws, we retain the information we collect for as long as needed to provide our Services and to comply with our legal obligations, resolve disputes and enforce our agreements, if applicable.
Our Website does not currently take any action when it receives a Do Not Track request. Do Not Track is a privacy preference that you can set in your web browser to indicate that you do not want certain information about your webpage visits collected across websites when you have not interacted with that service on the page. For additional details visit www.donottrack.us.
In this section, we provide information for California residents, as required under California privacy laws, including the CCPA, which requires that we provide California residents certain specific information about how we handle their personal information, whether collected online or offline. Under the CCPA, “personal information” is any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. It does not include publicly available data as defined by the CCPA.
Except for the right to opt-out and the right of non-discrimination, this section does not apply to California residents with whom we transact or communicate solely in the context of providing or receiving a product or service to or from a company that employs such residents or engages such residents as contractors. This section also does not apply to personal information we collect about job applicants, independent contractors, or current or former full-time, part-time and temporary employees and staff, officers, directors or owners of the Company or any affiliated entities.
We have set out above the categories of personal information (as defined by the CCPA) about California residents that we collect. As noted below, we do not sell your personal information or disclose it to third parties for a business purpose. We may disclose each of these categories of personal information to our service providers, who are not permitted to use your personal information except as necessary for performing Services on our behalf. We collect these categories of personal information from the sources and for the purposes described above under the heading “Overview of Data We Process”. Our collection, use and disclosure of personal information about a California resident will vary depending upon the circumstances and nature of our interactions or relationship with such resident. Please note that the CCPA defines the term “sale” very broadly to include any exchange of data for consideration of any kind, not simply selling your data for monetary compensation.
California law grants consumers certain rights and imposes restrictions on particular business practices as set forth below. California consumers have the right to request that we disclose what personal information we collect, use, disclose, and sell about you.
California residents have the right to opt-out of our sale of their personal information. We do not sell your personal information to other businesses or third parties. However, because of how broadly “sale” is defined under the CCPA, the collection of data by our third party digital advertising and web analytics service providers for our targeted advertising and analytics purposes may be considered a “sale” under the CCPA. To not have your information shared with such parties, you may manage your cookie preferences through our “Do Not Sell My Personal Information” web page.
Subject to certain exceptions, California consumers have the right to make the following requests, at no charge, up to twice every 12 months. Please see “Submitting Requests” for instructions on how to exercise your rights.
o Deletion: the right to request deletion of personal information that we have collected about you, subject to certain exemptions.
o Copy: the right to request a copy of the specific pieces of personal information that we have collected about you in the prior 12 months.
o Right to Know (Collection): Where we have collected personal information about you, the right to request that we disclose certain information about how we have handled your personal information in the prior 12 months, including: the categories of personal information collected; categories of sources of personal information; business and/or commercial purposes for collecting and selling your personal information; and the categories of third parties/with whom we have disclosed or shared your personal information.
o Right to Know (Disclosure and Sale): Where we have sold or disclosed for a business purpose your personal information, the right to request that we disclose certain information about how we have handled your personal information in the prior 12 months, including: the categories of personal information collected; categories of third parties to whom your personal information has been sold and the specific categories of personal information sold to each category of third party; categories of third parties to whom personal information has been disclosed; and the categories of personal information that we have disclosed or shared with a third party for a business purpose.
The CCPA prohibits discrimination against California consumers for exercising their rights under the CCPA and imposes requirements on any financial incentives offered to California consumers related to their personal information. We do not currently offer financial incentives for the collection of personal information.
If consumers exercise their rights under CCPA, businesses may not discriminate against them including by denying or providing a different level or quality of goods or services or charging or suggesting that a business will charge different prices or rates or impose penalties, unless doing so is reasonably related to the value provided to the consumer by the consumer’s data.
California’s “Shine the Light” law (Civil Code Section § 1798.83) permits users of our App that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email to [email protected].
We do not sell your personal information as defined under Nevada law. However, if you are a Nevada resident, you may submit a request that we not sell any personal information we have collected about you by contacting us at [email protected].