Privacy Policy & GDPR

Last updated: 7 July 2026

1. Data Controller

The controller of your personal data is WXP Group s. r. o., with its registered office at Doležalova 3424/15C, 821 04 Bratislava, Slovak Republic, Company ID (IČO): 57581070, Tax ID (DIČ): 2122837750 (hereinafter "WXP Group", "we", "us").

For any privacy-related matters, you can contact us at info@wxpgroup.eu.

2. What Data We Collect

• Contact form data — name, e-mail address, phone number, industry and the content of your message.
• Business and onboarding data — if you become our client, we process data required for KYC/AML checks, such as company details, identification documents of directors and beneficial owners, and financial information.
• Technical data — IP address, browser type, device information and cookies (see section 7).

3. Purposes and Legal Bases of Processing

Purpose	Legal basis (Art. 6 GDPR)
Responding to your enquiries	Pre-contractual measures — Art. 6(1)(b)
Provision of payment services and onboarding	Performance of a contract — Art. 6(1)(b)
KYC/AML compliance	Legal obligation — Art. 6(1)(c)
Marketing communications	Consent — Art. 6(1)(a)
Website analytics and security	Legitimate interest — Art. 6(1)(f)

4. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected: contact enquiries for a maximum of 2 years; contractual and KYC/AML documentation for the period required by applicable law (typically 5–10 years after termination of the business relationship); and marketing data until consent is withdrawn.

5. Data Recipients

Your data may be shared with: acquiring banks and payment institutions involved in providing our services; IT and hosting providers; legal and accounting advisors; and public authorities where required by law. We do not sell personal data to third parties.

If data is transferred outside the European Economic Area, we ensure adequate safeguards such as European Commission adequacy decisions or Standard Contractual Clauses.

6. Your Rights

Under the GDPR you have the right to:

• access your personal data (Art. 15),
• rectification of inaccurate data (Art. 16),
• erasure ("right to be forgotten", Art. 17),
• restriction of processing (Art. 18),
• data portability (Art. 20),
• object to processing based on legitimate interest (Art. 21),
• withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@wxpgroup.eu. You also have the right to lodge a complaint with the supervisory authority: Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic), Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk.

7. Cookies

Our website uses cookies — small text files stored in your browser. We use the following categories:

Cookie	Type	Purpose	Duration
wxp_consent	Necessary	Stores your cookie consent choice	1 year
wxp_popup	Necessary	Prevents repeated display of the promotional pop-up	3 days

Necessary cookies are required for the website to function and cannot be disabled. If we deploy analytics or marketing cookies in the future, they will only be used with your prior consent given via the cookie banner. You can change or withdraw your consent at any time by deleting cookies in your browser settings.

8. Data Security

We apply appropriate technical and organisational measures to protect personal data, including encrypted connections (TLS), access controls and the PCI DSS security standards applied across our payment infrastructure.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always published on this page with the date of the last update.