Privacy Notice
Introduction
This Privacy Notice describes how we process personal data collected from you on our website, when you use our services or interact with us. It is important to us that you understand how your data and personal data is collected, processed, stored and shared by Planet and our group affiliate companies (referred to as Planet, we, our, us or affiliate).
This Notice relates to customers, suppliers, end users and or other stakeholders that we collect, process, store and share information with. Where you are a customer or vendor we will only process or share your data where we have a legal basis to do such as an appropriate legal contract, other equivalent legal agreement or legitimate interest. When we have collected your data from the website we will only process your personal data where we have obtained your consent, have a contract in place or have a legitimate reason to do so.
Who are we
Planet is a group of affiliate companies that provide payment, connected commerce and VAT refunding services in the experience economy. Which means Planet handles electronic payments and transactions for our customers in retail, hospitality, VAT refunds and property managed services. Planet affiliate companies include: 3C, Datatrans, Hoist, Protel, Proximis, Ideosoft, Avantio and Rebag.
Information we collect and why
Personal data is information that relates to an identified individual that we process on your behalf or is supplied by you in connection with any of our services, which can also include direct personal information such as names, addresses, identity numbers or device information such as IP details, that can be linked to an individual.
Specifically, and depending on the service being provided, we may process the following types of personal data:
-
E-mail address
-
Name First/Last
-
Title
-
Company
-
Company postal address
-
Phone number
-
In relation to events, pictures in which you may be visible
-
Date of Birth
-
Travel document ID
-
Travel document expiry date
-
Nationality
-
Residency
-
Preferred VAT refund method details (card number and expiry date)
-
Card holder address
We collect, process, store or share this personal information to deliver products and services for our customers across the connected commerce landscape. We process information for the following reasons:
-
To fulfil our contractual obligations
-
To comply with our legal and regulatory obligations
-
Where we have legitimate interests to protect our business interests and prevent fraud
-
To promote services that may be of interest to our customers and prospects
-
Where you have provided your consent to use your data
-
Where our customers have asked us to do so.
-
Where you have provided your personal data to us including when you visit our website
-
Where you have expressed an interest in our services
-
When you interact with us in anyway via our website, online forms, chat or other method of communication
-
When you register with us
How we use your information
We may use your personal data because it is necessary for us to deliver our products and services to you, and to do this we must:
-
Share information with merchants, customers, partners or third party service providers in the fulfilment of a contract, processing a payment transaction or providing an outsourcing arrangement to the Planet group
-
Confirm your identity with credit and fraud reference agencies or as otherwise might be required
-
Share information for contractual, legal and regulatory reasons, with our group of affiliate companies, issuers and payment schemes, government tax or customs authorities, to process your payments or refunds (internal transfers or exports of data are covered under our Intercompany Data Transfer Agreement)
-
Transfer or export data which will be processed under relevant adequate regulatory safeguards to protect that data, for further processing with partners we work with to deliver our products and services
-
Use data to comply with anti-money laundering and terrorist financing, anti-bribery, corruption, and fraud detection activities
Collection and use of website information
This website uses cookies to provide us with information to ensure we provide a better service to you. Cookies help us enhance the use of this website to you, given we use details such as visits to the website for statistical and marketing purposes.
No information is collected or shared with third parties to identify individuals. Planet will not record information to identify individual users. Technical information will only be used to improve the overall service to you.
The services we provide across unified commerce include several connected activities related to payments, hospitality and VAT refunds. To ensure compliance with all regulations your personal data may be shared across Planet affiliate companies to ensure compliance with credit and fraud detention activities, your consent to cookies is requested to enable this.
You may withdraw consent to the use of cookies at any time, unless strictly necessary for the proper functioning of the website as described in our Cookie Policy.
Planet will never disclose any technical or personal information in respect of individual website visitors to any third party unless obliged to disclose any such information by contract, or for legal reasons.
For a full list of the Cookies we use and why see the Cookie Policy here: https://www.weareplanet.com/cookie-policy
Disclaimer
We may also receive personal information about you from affiliates or partner companies. We will always process your data securely and in line with all regulatory requirements which apply to the Planet group, including GDPR, PCIDSS and other relevant data privacy legislation and regulations.
This Privacy Notice does not address, and we are not responsible for, the privacy, information or other practices of other third-party websites, including third parties which link to this website. The inclusion of a link on another website does not imply endorsement by Planet.
Additionally, we may provide you with access to third party functionality that permits you to post content to social media accounts. Any information that you provide through use of this functionality is governed by the applicable third party’s privacy policy, and we do not accept any liability or responsibility for these external social media platforms.
Data subject rights
Planet respects your individual rights regarding your personal data usage. We ensure compliance with all applicable regulations regarding your information and personal data.
You have the right to access the personal data that relates to you and to know what categories of your Personal Data is processed . You can confirm any information about how it is used, if it is accurate and only being used for the agreed purpose. Please clearly state the reasons why you require the data subject request, the more information you provide the more effective the response to your request is likely to be (business transaction type, level of personal data processed, reason why we are likely to process your personal data and your known connection to Planet).
You are entitled to have any inaccuracies in your personal data corrected or updated.
You can request that we restrict the use of your personal data in certain circumstances where you feel your personal data is inaccurate or unlawfully processed, unless subject to a query or an ongoing legal claim.
You can also ask us to delete your personal data in certain circumstances, subject to any regulations that oblige us to keep the data for a certain period of time and complying with any obligation related to data storage, or you wish to withdraw your consent at any time.
We do not sell personal data as defined by the Californian CCPA and you always have the right to opt out from a sale.
If you require further information related to data subject rights or obligations please contact the Planet Data Protection Officer at data.protection@weareplanet.com
If you think you have not received a satisfactory response from us, you have the right to complain to your local supervisory authority or the Data Protection Commission in Ireland, who Planet has identified as our lead supervisory authority.
Changes to the Privacy Notice
Any changes to this Privacy Notice will be made to this website so you are always aware of what information we collect, how we use it, and under what circumstances we share it. We reserve the right to make changes to this Notice to reflect changes made to regulations or our target operating model.
Sub Processors
We use third party sub processors to further process your data for card payment, security, marketing and regulatory services.
The list of Sub Processors and third parties can be viewed here: https://www.weareplanet.com/data-protection-sub-processors
Marketing
In order to provide our customers with information, news and promotions such as event invitations, Planet needs to process certain personal data. Where we collect your personal data as part our marketing or outreach activities, we may process your information on the basis of legitimate interest to send you promotional material where an interest of a prospect can be implied. You may also remove your consent and to opt out of any marketing communications at any time.
Other data collection
Planet may also collect your personal data where that data is supplied to us by your employer, provided by government entities or public record sources. Digitally we automatically capture certain information such as IP address, browsing preferences and purchase history for online retail activities.
Security
For your protection we maintain appropriate technical and organisation measures to ensure the security and integrity of your personal data and to avoid the loss, destruction or compromise of any of your data. In addition we also maintain access and administration controls to protect against any unapproved or malicious access.
We therefore retain your personal data to ensure security, prevent fraud and to comply with our regulatory and legal obligations.
International Data Transfers
Information we process for you may be transferred to other Planet group affiliates for processing in other countries. To protect your information, we have implemented a number of appropriates safeguards for the processing and transferring of this data. Information shared across the group is protected by an Internal Data Transfer Agreement and standard contractual clauses when required.
We may also transfer your data to our international partners for processing or sub processing of that data.
We use a number of appropriate transfer mechanisms including:
-
Countries that have an equivalent and adequate level of data protection law
-
UK International Data Transfer Addendum or EU Standard Contractual Causes
-
Other methods of transfer compliance as required to ensure regulatory compliance
Jurisdictions
Planet operates our software, hospitality, payment and VAT refund services globally across a number of countries. We comply with all rules, regulations and laws in each jurisdiction that applies or where we conduct business.
How long do we retain Personal Data
We will only keep your Personal Data for as long as necessary and in line with our data Retention Policy. Retention periods will on the basis of complying with application laws or regulations. The legals basis for retention will be by contract, consent, legitimate interest where allowed or to comply with other legal or law enforcement requirements such as fraud or money laundering detection.
Regulation
Our financial regulated entities include the following companies in the UK and France :-
Planet Merchant Services Ltd.
4th Floor, Ilona Rose House, Manette Street, London, England, W1D 4AL
Planet Merchant Services SAS.
1 Terrasse Bellini, 92919, Paris, La Defense, France
Data Protection Officer
If you have any issues or concerns in relation to your personal data or this website, please contact the Data Protection Officer for the Planet group of companies at the following email address: data.protection@weareplanet.com.
Or at the following key entity addresses:
Planet Payment Group Holdings, Martin House, IDA Business Park, Dangan, Galway, Ireland H91A06C.
Complaints
If you think you have not received a satisfactory response from us you have the right to complain to the lead supervisory authority, who Planet has identified as the Data Protection Commission in Ireland for the EU and EEA region countries.
You can contact them via their website: https://dataprotection.ie/ or if preferred the UK supervisory authority, the ICO at https://ico.org.uk/ or the supervisory authority in France the CNIL at https://cnil.fr/fr