Duration of the storage of your data
We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years. However, we restrict processing after two years, i.e. your data is only used to comply with legal obligations.
Data security
Credit card data is not stored, but is collected and processed directly by our payment service provider. We secure our website and other systems through technical and organisational measures against loss, destruction, access, modification or distribution of your data by unauthorised persons.
To prevent unauthorised access by third parties to your personal data, in particular financial data, the ordering process is encrypted using TLS technology.
Use and application of PayPal
Educody GmbH has integrated components of PayPal on this website. PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which represent virtual private or business accounts. In addition, PayPal offers the possibility of processing virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is managed via an e-mail address, which is why there is no classic account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also assumes trustee functions and offers buyer protection services.
The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.
If the data subject selects “PayPal” as a payment option during the ordering process in our online shop, data of the data subject will be automatically transmitted to PayPal. By selecting this payment option, the data subject consents to the transmission of personal data required for payment processing.
The personal data transmitted to PayPal are usually first name, last name, address, e-mail address, IP address, telephone number, mobile phone number or other data that are necessary for the processing of the payment. Personal data that is necessary for the processing of the purchase contract is also personal data that is related to the respective order.
The purpose of the transfer of data is payment processing and fraud prevention. Educody GmbH will transfer personal data to PayPal in particular if there is a legitimate interest for the transfer. The personal data exchanged between PayPal and the controller may be transferred by PayPal to credit reference agencies. The purpose of this transmission is to check identity and creditworthiness.
PayPal may share personal data with affiliated companies and service providers or subcontractors to the extent necessary to fulfil contractual obligations or to process the data on their behalf.
The data subject has the option to revoke the consent to the handling of personal data at any time vis-à-vis PayPal. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing.
PayPal’s applicable privacy policy can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Use and application of Stripe
When you make a payment via our Services, we do not collect the financial information you provide. Rather, the information is collected by Stripe, Inc., a third party payment platform which collects a user’s name, email, credit card information, and other information a user provides to Stripe. We do not share any Personal Data with Stripe and we do not receive any Personal Data from Stripe. We only receive a confirmation from Stripe that there was a successful transaction completed on Stripe but no Personal Data is transferred between Stripe and Educody GmbH.
We will share transaction data with Stripe only to the extent necessary for the purposes of allocating your payments. When you initially provide or update your payment information, we transmit it via an encrypted connection to Stripe. Stripe uses and processes your payment information in accordance with Stripe’s Privacy Policy.