In providing its payment services, Centralpay relies on a number of processors as defined in Article 4 of the General Data Protection Regulation (GDPR). These processors may be required to process personal data on behalf of Centralpay, exclusively in accordance with documented instructions and within the scope of the purposes of the service to which they contribute. <\/p>\n\n
This page lists the subcontractors that may be involved in the processing of personal data belonging to Account Owners, Merchants, and Payers who use Centralpay services. It is updated as our system evolves. <\/p>\n\n In accordance with Article 28 of the GDPR, all processors engaged by Centralpay act exclusively on the basis of documented instructions, are bound by strict contractual obligations regarding confidentiality and security, and may not use personal data for any purposes other than those defined by Centralpay.<\/p>\n\n Any substantial change to this list will be announced in advance by any appropriate means (notification on the Merchant Portal, email, or a public update to this page), allowing the individuals concerned, if applicable, to object to such changes.<\/p>\n\nSubcontractor<\/th> Purpose<\/th> Country Where Data Is Processed<\/th> Data Categories<\/th><\/tr><\/thead> Amazon Web Services (AWS)<\/td> Cloud hosting for certain services and application data<\/td> Ireland<\/td> All data processed by the departments<\/td><\/tr> Comply Advantage (IVXS)<\/td> AML\/CFT Screening and Verification Against International Sanctions Lists<\/td> Romania<\/td> Identification Information<\/td><\/tr> Dotfile<\/td> Management of onboarding processes, collection and updating of KYC\/KYB records<\/td> France<\/td> Identification Information, Supporting Documents<\/td><\/tr> Gpayments<\/td> 3D Secure authentication for Card Transactions (second service provider)<\/td> Ireland<\/td> Card data, authentication<\/td><\/tr> Innovest<\/td> The group’s parent company; internal recipient for the purposes of governance, audit, compliance, and consolidated reporting<\/td> France<\/td> Governance and Reporting Data<\/td><\/tr> Microsoft<\/td> Management and Control of Cash Flows<\/td> France<\/td> Transaction and Accounting Data<\/td><\/tr> Netcetera<\/td> 3D-Secure Authentication for Card Transactions (Access Control Server)<\/td> Switzerland<\/td> Card data, authentication<\/td><\/tr> Onfido<\/td> Automated verification of identification documents and biometric data (facial recognition, liveness detection)<\/td> Europe<\/td> Identification data, biometric data<\/td><\/tr> Qombo<\/td> Verification of Beneficiary (verification of the beneficiary of a SEPA bank transfer)<\/td> France<\/td> Identification Information, IBAN<\/td><\/tr> Tanla Digital Labs<\/td> Sending text messages (authentication codes, notifications)<\/td> Europe<\/td> Phone number, message content<\/td><\/tr><\/tbody><\/table><\/figure>\n\n Supervision of Subcontractors and Change Control Procedures<\/h2>\n\n