← Back to Home

Privacy Policy – Pay3

Last updated: 9 May 2026

English translation of the policy published on Iubenda.

Owner and Data Controller

Pay3 srl – Piazza Armando Diaz 5 – 20123 Milan (MI), Italy

Owner's contact email: info@pay3.it

Types of Data we collect

The types of Personal Data that this Application collects, either directly or through third parties, include:

  • Trackers
  • Usage Data
  • number of Users
  • session statistics
  • first name
  • last name
  • phone number
  • email

Full details of each type of Personal Data collected are provided in the relevant sections of this privacy policy or in specific notices displayed before the Data is collected.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when this Application is used.
Unless otherwise specified, all Data requested by this Application is mandatory. If the User refuses to provide it, this Application may be unable to provide the Service. Where this Application identifies certain Data as optional, Users are free not to provide it without affecting the availability or operation of the Service.
Users who are unsure which Data is mandatory are encouraged to contact the Owner.
Any use of Cookies or other tracking tools by this Application or by the owners of third-party services used by this Application serves to provide the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy.

Users are responsible for any third-party Personal Data obtained, published or shared through this Application.

Methods and place of processing the Data collected

Methods of processing

The Owner takes appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of Personal Data.
Data is processed using computers and/or IT-enabled tools, following organisational procedures and methods strictly related to the purposes indicated. In addition to the Owner, in some cases Data may be accessible to people involved in operating this Application (administration, sales, marketing, legal and system administration staff) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies and communications agencies), appointed by the Owner as Data Processors where necessary. An updated list of Data Processors may be requested from the Owner at any time.

Place

Data is processed at the Owner's operating offices and at any other locations where the parties involved in the processing are based. For further information, contact the Owner.
The User's Personal Data may be transferred to a country other than the one in which the User is located. For further information about the place of processing, Users can refer to the section detailing the processing of Personal Data.

Retention period

Unless otherwise specified in this document, Personal Data is processed and retained for as long as required by the purpose for which it was collected, and may be retained for longer to fulfil legal obligations or on the basis of Users' consent.

Purposes of processing the Data collected

The User's Data is collected to enable the Owner to provide the Service, comply with legal obligations, respond to requests or enforcement actions, protect its rights and interests (or those of Users or third parties), identify malicious or fraudulent activities, and for the following purposes:

  • Analytics
  • Contacting the User
  • Tag Management
  • Displaying content from external platforms

Detailed information on the processing of Personal Data

Contacting the User

Contact form

Personal Data processed: last name +4

By completing the contact form with their details, the User authorises this Application to use those details to respond to requests, such as requests for quotations or any other enquiries.

Personal Data processed:
  • last name
  • Usage Data
  • email
  • first name
  • phone number

Tag Management

This type of service enables the Owner to manage centrally the tags or scripts needed by this Application. Consequently, the User's Data may be processed by these services and may be stored.

Google Tag Manager

Company: Google LLC

Place of processing: United States

Personal Data processed: Usage Data +1

Google Tag Manager is a tag management service provided by Google LLC.

To understand how Google uses Data, please consult its partner policy and its Business Data page.

Personal Data processed:
  • Usage Data
  • Trackers
Service provided by:

Analytics

The services in this section enable the Owner to monitor and analyse web traffic and track User behaviour.

Google Analytics 4

Company: Google LLC

Place of processing: United States

Personal Data processed: Usage Data +3

Google Analytics is an analytics service provided by Google LLC ("Google"). Google uses the Personal Data collected to track and examine the use of this Application, compile reports and share them with other services developed by Google. Google may use Personal Data to contextualise and personalise advertisements on its advertising network. In Google Analytics 4, IP addresses are used at the time of collection and then discarded before the data is recorded in any data centre or server. For more information, please consult Google's official documentation.

To understand how Google uses Data, please consult its partner policy and its Business Data page.

Personal Data processed:
  • Usage Data
  • number of Users
  • session statistics
  • Trackers
Service provided by:

Displaying content from external platforms

This type of service allows content hosted on external platforms to be displayed directly on the pages of this Application and enables interaction with it. These services are often called widgets: small elements embedded in a website or application. They provide specific information or perform a particular function and often allow user interaction.
This type of service may still collect web traffic data for the pages on which it is installed, even when Users do not use it.

Google Fonts

Company: Google LLC

Place of processing: United States

Personal Data processed: Usage Data +1

Google Fonts is a font visualisation service provided by Google LLC that allows this Application to incorporate such content into its pages.

Personal Data processed:
  • Usage Data
  • Trackers
Service provided by:

Cookie Policy

This Application uses Trackers. For more information, Users can consult the Cookie Policy.

Further information for Users in the European Union

Legal basis for processing

The Owner processes Personal Data relating to Users where one of the following conditions applies:

  • the User has given consent for one or more specific purposes;
  • processing is necessary for the performance of a contract with the User and/or for steps taken before entering into a contract;
  • processing is necessary to comply with a legal obligation to which the Owner is subject;
  • processing is necessary for a task carried out in the public interest or in the exercise of official authority vested in the Owner;
  • processing is necessary for the purposes of the legitimate interests pursued by the Owner or a third party.
Users may always ask the Owner to clarify the specific legal basis for each processing activity and, in particular, to specify whether processing is required by law, provided for by a contract or necessary to enter into a contract.

Further information about retention periods

Unless otherwise specified in this document, Personal Data is processed and retained for as long as required by the purpose for which it was collected, and may be retained for longer to fulfil legal obligations or on the basis of Users' consent.

Therefore:

  • Personal Data collected for purposes connected with the performance of a contract between the Owner and the User will be retained until that contract has been fully performed.
  • Personal Data collected for purposes relating to the Owner's legitimate interests will be retained for as long as needed to fulfil those interests. Users can obtain further information about the legitimate interests pursued by the Owner in the relevant sections of this document or by contacting the Owner.

Where processing is based on the User's consent, the Owner may retain Personal Data for longer, until that consent is withdrawn. The Owner may also be required to retain Personal Data for longer to comply with a legal obligation or an authority's order.

Personal Data will be deleted when the retention period ends. Accordingly, once that period has expired, the rights of access, erasure, rectification and data portability can no longer be exercised.

Users' rights under the General Data Protection Regulation (GDPR)

Users may exercise certain rights concerning Data processed by the Owner.

In particular, within the limits provided by law, Users have the right to:

  • withdraw consent at any time. Users may withdraw previously given consent to the processing of their Personal Data.
  • object to the processing of their Data. Users may object to the processing of their Data where processing is based on a legal basis other than consent.
  • access their Data. Users have the right to obtain information about Data processed by the Owner, certain aspects of the processing and a copy of the Data being processed.
  • verify and request rectification. Users may verify the accuracy of their Data and request that it be updated or corrected.
  • restrict the processing of their Data. Users may request restriction of the processing of their Data. In that case, the Owner will not process the Data for any purpose other than storage.
  • have their Personal Data deleted or otherwise removed. Users may request that the Owner erase their Data.
  • receive their Data or have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transmitted to another controller without hindrance.
  • lodge a complaint. Users may lodge a complaint with the competent data protection supervisory authority or bring proceedings before the courts.

Users have the right to obtain information about the legal basis for transfers of Data abroad, including transfers to an international organisation governed by international law or established by two or more countries, such as the UN, and about the security measures adopted by the Owner to protect their Data.

Details about the right to object

Where Personal Data is processed in the public interest, in the exercise of official authority vested in the Owner or for the Owner's legitimate interests, Users have the right to object to processing on grounds relating to their particular situation.

Users should note that, where their Data is processed for direct marketing purposes, they may object at any time, free of charge and without giving any reason. If Users object to processing for direct marketing purposes, their Personal Data will no longer be processed for those purposes. To find out whether the Owner processes Data for direct marketing, Users may refer to the relevant sections of this document.

How to exercise these rights

Requests to exercise Users' rights may be addressed to the Owner using the contact details provided in this document. Requests are free of charge, and the Owner will respond as soon as possible and in any event within one month, providing all information required by law. The Owner will communicate any rectification, erasure or restriction of processing to each recipient, if any, to whom Personal Data has been disclosed, unless this proves impossible or involves disproportionate effort. The Owner will inform the User of those recipients upon request.

Further information about processing

Legal action

The User's Personal Data may be used by the Owner in legal proceedings or in preparation for possible proceedings to defend against misuse of this Application or related Services by the User.
The User acknowledges that the Owner may be required to disclose Data in response to an order from public authorities.

Specific information notices

At the User's request, in addition to the information contained in this privacy policy, this Application may provide additional contextual notices concerning specific Services or the collection and processing of Personal Data.

System logs and maintenance

For operation and maintenance purposes, this Application and any third-party services it uses may collect system logs: files recording interactions that may also contain Personal Data, such as the User's IP address.

Information not contained in this policy

Further information about the processing of Personal Data may be requested from the Owner at any time using the contact details provided.

Changes to this privacy policy

The Owner reserves the right to amend this privacy policy at any time by notifying Users on this page and, where possible, within this Application and, where technically and legally feasible, by sending a notice through one of the contact methods available to the Owner. Users are therefore encouraged to consult this page regularly, referring to the date of the latest amendment indicated below.

If changes affect processing activities whose legal basis is consent, the Owner will obtain the User's consent again where necessary.

Definitions and legal references

Personal Data (or Data)

Personal data means any information that, directly or indirectly, including in connection with other information such as a personal identification number, identifies or makes a natural person identifiable.

Usage Data

Information collected automatically through this Application, including through third-party applications integrated into it, such as: the IP addresses or domain names of computers used by Users connecting to this Application; URI (Uniform Resource Identifier) addresses; the time of the request; the method used to submit the request to the server; the size of the file received in response; the numerical code indicating the server's response status (success, error, etc.); the country of origin; the characteristics of the visitor's browser and operating system; the various time-related details of the visit (such as time spent on each page); and details of the path followed within the Application, particularly the sequence of pages visited and parameters relating to the User's operating system and IT environment.

User

The individual using this Application who, unless otherwise specified, is the Data Subject.

Data Subject

The natural person to whom the Personal Data relates.

Data Processor (or Processor)

The natural or legal person, public authority or other body processing Personal Data on behalf of the Owner, as described in this privacy policy.

Data Controller (or Owner)

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of processing Personal Data and the tools used, including security measures relating to the operation and use of this Application. Unless otherwise specified, the Data Controller is the owner of this Application.

This Application

The hardware or software tool through which Users' Personal Data is collected and processed.

Service

The service provided by this Application as defined in the relevant terms, if any, on this website/application.

European Union (or EU)

Unless otherwise specified, any reference to the European Union in this document includes all current member states of the European Union and the European Economic Area.

Cookie

Cookies are Trackers consisting of small sets of data stored in the User's browser.

Tracker

Tracker means any technology, such as Cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting, that enables Users to be tracked, for example by collecting or storing information on the User's device.

Legal references

Unless otherwise specified, this policy applies solely to this Application.

WhatsApp Icon