Effective Date: January 1, 2024
Database Retention Period: Indefinite, as long as the data processing purpose remains, or until the data subject requests the deletion of their data, in accordance with legal provisions.

1. Data Controller Identification

• Name or Corporate Name: LP MimosPAY legal name: MIMOSALECRIM LDA
• Address: R.  Adriano Correia de Oliveira, 5, 6.o, DF, 2810-150 ALMADA, distrito de Setúbal, concelho de Almada, freguesia de Laranjeiro e Feijó, Portugal.
• Email Address: info@mimospay.com
• Phone Number: +351 91221 2915

2. Data Processing and Purpose

The personal data collected by LP MimosPAY will be subject to the following processing activities: collection, storage, use, circulation, transfer, and deletion. These data will be used for the following purposes:

• Contractual Fulfillment: Management of services related to payment solutions provided by LP MimosPAY.
• Customer Service: Responding to inquiries, requests, and complaints.
• Service Improvements: Optimization and customization of products and services offered.
• Marketing: Sending promotional, advertising, or commercial information, always with the prior consent of the data subject.
• Legal Compliance: Fraud prevention, compliance with data protection regulations, and cooperation with authorities in investigations.

In cases where these purposes have not been informed through a specific privacy notice, the data subjects will be notified at the time of data collection.

3. Data Subject Rights

Data subjects have the following rights, in accordance with applicable data protection regulations:

• Right to Access: The data subject can request information about the data being processed by LP MimosPAY.
• Right to Update and Rectify: The data subject can update or correct their data when it is outdated or inaccurate.
• Right to Erasure: The data subject can request the deletion of their data when it is no longer necessary for the purposes for which it was collected, or if the consent has been revoked.
• Right to Data Portability: The data subject can request the transfer of their personal data to another controller, when technically feasible.
• Right to Withdraw Consent: The data subject can withdraw consent for the processing of their personal data at any time, except in cases where the law states otherwise.

4. Responsible Department for Handling Inquiries and Complaints

The department responsible for handling inquiries, requests, and complaints related to personal data protection is the Data Protection Department of LP MimosPAY.

• Person or Department Responsible: Data Protection Officer
• Email Address: info@mimospay.com
• Phone Number: +351 912 2129 15
• Address: Doca de Santo Amaro Armazém 15, 1350-353 Lisboa, Portugal

5. Procedure for Exercising Data Subject Rights

To exercise their rights to access, update, rectify, delete data, or withdraw consent, the data subject must follow these steps:

1. Request: The data subject may submit their request for inquiry or complaint in writing via email (info@mimospay.com) or by sending a letter to the company’s physical address.
2. Request Content: The request must include:
   • Full name of the data subject.
   • A clear description of the inquiry, update, rectification, or withdrawal requested.
   • A copy of the data subject’s identification document.
   • A preferred method of receiving the response (email or physical).
3. Response Times:
   • Inquiries: LP MimosPAY will respond within a maximum of 10 business days from the receipt of the request.
   • Complaints: LP MimosPAY will respond within a maximum of 15 business days, extendable if additional time is needed, notifying the data subject of the reason for the extension.

6. Modifications to the Privacy Policy

LP MimosPAY reserves the right to modify this Privacy Policy at any time. Changes will be communicated through the available contact methods or by updating the policy on the company’s website. The database retention period will be indefinite as long as the processing purpose remains or until the data subject requests deletion, in accordance with the law.

Note: Any violation of the data subject’s rights may be reported to the data protection authorities in the country where LP MimosPAY operates, in compliance with the current laws.