MORPHEUS AIOLOS S.L, responsible for this website and by the provisions of the current legislation on the protection of personal data, the RGPD (EU) 2016/679, of 27 April, and the LOPD 3/2018, of 5 December, and with the provisions of the LSSI-CE 34/2002, of 11 June, has implemented policies, means, and procedures to ensure and protect the privacy of the personal data of its USERS.

DUTY TO INFORM THE DATA SUBJECT ABOUT THE PROCESSING OF DATA ADDITIONAL INFORMATION. RGPD (EU) 2016/679, OF 27 APRIL, AND LOPD 3/2018, OF 5 DECEMBER.

In compliance with the provisions of Articles 13 and 14 of the RGPD (EU) 2016/679, of 27 April, and Article 11 of the LOPD 3/2018, of 5 December, we provide the data subject with additional information concerning the processing of their data.

The person in charge of the treatment is MORPHEUS AIOLOS S.L, with C.I.F.: B86556420, and address at St. San Andrés 8 C.P.: 28004 – Madrid (MADRID). The processing activity is CUSTOMERS, ACCOUNTING, FISCAL, ADMINISTRATIVE, AND COMMERCIAL MANAGEMENT, whose location is St. San Andrés 8 28004-Madrid. The purpose of the treatment is: To send administrative communications via email, SMS, or instant messaging applications; Customer billing; Administrative, accounting, tax, and commercial management of customers; Management of contact data for administrative, commercial, and follow-up management. The typology of the data of the interested party is the following: NIF / DNI / NIE; Telephones; Address; E-mail; Bank details-IBAN; Name and surname of the legal representative in case of legal entity; Name and surname of the contact in case of legal entity; Debit or credit card details. The deadline for deletion of such data is 5 years from the end of the provision of services.

No profiling or automated decisions are foreseen. As for the legal basis for the processing, it is the legitimate interest of the Controller. About the recipients, the Controller may transfer the personal data provided to recipients and service providers provided, provided that it is limited to the purpose that justifies it, as well as to the transfers provided for in the applicable legislation. The categories of recipients to whom the Controller may transfer the personal data of the data subject are Public administrations in the cases provided for by law and for the purposes defined therein; Tax Administration; Data processors linked to the purpose of the Data Controller; Banking institutions. The list of data processors and/or Service Providers with access to data without authorization to the treatment is located at: St. San Andrés 8 28004-Madrid. On the other hand, as regards international transfers, it is foreseen that no international transfer of personal data is carried out.  Regarding the rights that the interested party has about his/her data, he/she will be able to exercise the rights of access, rectification, suppression, limitation of data processing, opposition, revocation, to the portability of his/her data, right to withdraw the consent given, exercising his/her rights by contacting MORPHEUS AIOLOS S.L as the responsible party: info@arcopay.io or St. San Andrés 8 C.P.: 28004 – Madrid (Madrid). Likewise, the interested party has the right to complain to the Supervisory Authority for data protection, the Spanish Data Protection Agency (AEPD).

The person in charge of the treatment is MORPHEUS AIOLOS S.L, with C.I.F.: B86556420, and address at St. San Andrés 8 C.P.: 28004 – Madrid (MADRID). The purpose of the treatment is: Sending information, at the request of the interested party, related to products and services, and its subsequent commercial follow-up; Sending commercial communications of products or services offered by the responsible. The typology of the data of the interested party is the following: Name and surname; Telephone numbers; E-mail; Connection metadata. The deadline for deletion of such data is 30 days from the revocation of consent. No profiling or automated decisions are foreseen. As for the legal basis for the processing, it is the unambiguous consent of the data subject. About the recipients, the Controller may transfer the personal data provided to recipients and service providers provided, provided that it is limited to the purpose that justifies it, as well as to the transfers provided for in the applicable legislation. The categories of recipients to whom the Controller may transfer the personal data of the data subject are Public administrations in the cases provided for by law and for the purposes defined therein. Data processors are linked to the purpose of the data controller. The list of data processors and/or Service Providers with access to data without authorization to the treatment is located at: St. San Andrés 8 28004-Madrid. On the other hand, as regards international transfers, it is foreseen that no international transfer of personal data is carried out. Regarding the rights that the interested party has concerning his/her data, he/she will be able to exercise the rights of access, rectification, suppression, limitation of the treatment, opposition, revocation, to the portability of his/her data, the right to withdraw the consent given, exercising his/her rights by contacting MORPHEUS AIOLOS S.L as the responsible party: info@arcopay.io or St. San Andrés 8 C.P.: 28004 – Madrid (Madrid). Likewise, the interested party has the right to complain to the Supervisory Authority for data protection, the Spanish Data Protection Agency (AEPD).

 The data controller is MORPHEUS AIOLOS S.L, with C.I.F.: B86556420, and address at St. San Andrés 8 C.P.: 28004 – Madrid (MADRID). The processing activity is HUMAN RESOURCES – PERSONNEL SELECTION, whose location is St. San Andrés 8 28004-Madrid. The purpose of the processing is Management of the selective processes to staff job positions and/or collaborations with the organization. The typology of the data of the interested party is the following: Name and surname; Telephone numbers; E-mail; Academics, degrees and academic certificates; Curriculum Vitae. The term suppression of such data is for the duration of the selection process. No profiling or automated decisions are foreseen. As for the legal basis for the processing, it is the legitimate interest of the data controller. About the recipients, the Controller may transfer the personal data provided to recipients and service providers provided, provided that it is limited to the purpose that justifies it, as well as to the transfers provided for in the applicable legislation. The categories of recipients to whom the Controller may transfer the personal data of the data subject are Processors linked to the purpose of the Controller. The list of data processors and/or Service Providers with access to data without authorization for processing can be found at Street San Andres 8 28004-Madrid. On the other hand, as regards international transfers, it is foreseen that no international transfer of personal data is carried out. Regarding the rights that the interested party has in relation to his/her data, he/she may exercise the rights of access, rectification, suppression, limitation of processing, opposition, revocation, portability of his/her data, right to withdraw the consent given, exercising his/her rights by contacting MORPHEUS AIOLOS S.L as the responsible party: info@arcopay.i. Likewise, the interested party has the right to complain to the Supervisory Authority for data protection, the Spanish Data Protection Agency (AEPD).

The Data Controller is: MORPHEUS AIOLOS S.L, with C.I.F.: B86556420, and address at St. San Andrés 8 C.P.: 28004 – Madrid (MADRID). The processing activity is “API BANK READER” BANKING AGGREGATION SERVICE TO THIRD PARTIES, whose location is located in St. San Andrés 8 28004-Madrid. The purpose of the treatment is: Provision of electronic communications services and means of payment to third parties; Banking aggregation service and payment initiation; Customer service, complaints and claims; Verification of ownership. Download of files 43 and 19. The typology of the data of the interested party are the following: Name and surname; NIF / DNI / NIE; Address; E-mail; Bank details-IBAN; Mobile phone number; Credentials. The term of suppression of such data is for as long as the service is provided. No profiling or automated decisions are foreseen. As for the legal basis for the processing, it is execution of a contract. In relation to the recipients, the Responsible may transfer the personal data provided to recipients and service providers provided, provided that it is limited to the purpose that justifies it, as well as the transfers provided for in the applicable legislation. The categories of recipients to whom the Controller may transfer the data subject’s personal data are: Public administrations in the cases provided for by law and for the purposes defined therein; Tax Administration; Data Processors connected with the purpose of the Controller; Banking Entities; Collaborating Entities; Financial Entities; Entities connected with telecommunication services. The list of data processors and/or Service Providers with access to data without authorization for processing is located at: St. San Andrés 8 28004-Madrid. On the other hand, as regards international transfers, it is foreseen that no international transfer of personal data is carried out. Regarding the rights that the interested party has in relation to his/her data, he/she will be able to exercise the rights of access, rectification, suppression, limitation of the treatment, opposition, revocation, to the portability of his/her data, the right to withdraw the consent given, exercising his/her rights by contacting MORPHEUS AIOLOS S.L as the responsible party: info@arcopay.io or St. San Andrés 8 C.P.: 28004 – Madrid (Madrid). Likewise, the interested party has the right to complain to the Supervisory Authority for data protection, the Spanish Data Protection Agency (AEPD).

The data controller is MORPHEUS AIOLOS S.L, with C.I.F.: B86556420, and address at St. San Andrés 8 C.P.: 28004 – Madrid (MADRID). The processing activity is REGISTRO DE CONTROL LABORAL OBLIGATORIO, whose location is St. San Andrés 8 28004-Madrid. The purpose of the processing is a Compulsory daily record of the working day. The typology of the data of the interested party is the following: Name and surname; NIF / DNI / NIE; Signature. The deadline for deletion of such data is 5 years from the end of the employment relationship. No profiling or automated decisions are foreseen. As for the legal basis for the processing, it is compliance with a legal obligation. About the recipients, the Controller may transfer the personal data provided to recipients and service providers provided, provided that it is limited to the purpose that justifies it, as well as to the transfers provided for in the applicable legislation. The categories of recipients to which the Controller may transfer the personal data of the data subject are Workers, Labor Inspection, Legal Representatives of the workers, and Social Security. The list of data processors and/or Service Providers with access to data without authorization to the treatment is located at: St. San Andrés 8 28004-Madrid. On the other hand, as regards international transfers, it is foreseen that no international transfer of personal data is carried out. Regarding the rights that the interested party has concerning his/her data, he/she may exercise the rights of access, rectification, suppression, limitation of processing, opposition, revocation, portability of his/her data, right to withdraw the consent given, exercising his/her rights by contacting MORPHEUS AIOLOS S.L as the responsible party: info@arcopay.i. Likewise, the interested party has the right to complain to the Supervisory Authority for data protection, the Spanish Data Protection Agency (AEPD).

The person in charge of the treatment is MORPHEUS AIOLOS S.L, with C.I.F.: B86556420, and address at St. San Andrés 8 C.P.: 28004 – Madrid (MADRID). The purpose of the treatment is the Provision of electronic communications services and means of payment; Registration as a customer for use of the service; Banking aggregation service and initiation of payments. The typology of the data of the interested party is the following: Name and surname; NIF / DNI / NIE; Telephones; Address; E-mail; Connection metadata; Credentials. The term suppression of such data is for the duration of the provision of the service. No profiling or automated decisions are foreseen. As for the legal basis for the processing, it is the unambiguous consent of the data subject. About the recipients, the Controller may transfer the personal data provided to recipients and service providers provided, provided that it is limited to the purpose that justifies it, as well as the transfers provided for in the applicable legislation. The categories of recipients to whom the Controller may transfer the data subject’s data are Public administrations in the cases provided for by law and for the purposes defined therein; Tax Administration; Data Processors connected with the purpose of the Controller; Banking Entities; Collaborating Entities; Financial Entities; Entities connected with telecommunication services. The list of data processors and/or Service Providers with access to data without authorization for processing is located at: St. San Andrés 8 28004-Madrid. On the other hand, as regards international transfers, it is foreseen that no international transfer of personal data is carried out. Regarding the rights that the interested party has concerning his/her data, he/she will be able to exercise the rights of access, rectification, suppression, limitation of the treatment, opposition, revocation, to the portability of his/her data, the right to withdraw the consent given, exercising his/her rights by contacting MORPHEUS AIOLOS S.L as the responsible party: info@arcopay.io or St. San Andrés 8 C.P.: 28004 – Madrid (Madrid). Likewise, the interested party has the right to complain to the Supervisory Authority for data protection, the Spanish Data Protection Agency (AEPD).

The Data Controller is MORPHEUS AIOLOS S.L, with C.I.F.: B86556420, and address at St. San Andrés 8 C.P.: 28004 – Madrid (MADRID). The processing activity is ADMINISTRATIVE MANAGEMENT OF PERSONNEL, whose location is St. San Andrés 8 28004-Madrid. The purpose of the treatment is: Administrative, accounting and tax processing in the labor-management of the organization’s employees. The typology of the data of the interested party is the following: Name and surname; NIF / DNI / NIE; Nº Affiliation S.S / Mutualidad; Telephones; Address; Certificate of disability; Email; Marital status; Date of birth; Signature; Number of dependent children; IBAN bank account details; Details of employment; Academics, degrees and academic certificates; Position or position; Payrolls. The period for deletion of such data is 5 years from the end of the employment relationship. No profiling or automated decisions are foreseen. As for the legal basis for the processing, it is the execution of a contract. Concerning the recipients, the Controller may transfer the personal data provided to recipients and service providers provided, provided that it is limited to the purpose that justifies it, as well as to the transfers provided for in the applicable legislation. The categories of recipients to whom the Controller may transfer the personal data of the data subject are Public administrations in the cases provided for by law and for the purposes defined therein; Tax Administration; Occupational risk prevention companies and mutual accident insurance companies; Data processors linked to the purpose of the data controller; Insurance companies; Banking companies; Social Security; Psychological services for employees; Trade unions. The list of data processors and/or Service Providers with access to data without authorization to the treatment is located at: St. San Andrés 8 28004-Madrid. On the other hand, as regards international transfers, it is foreseen that no international transfer of personal data is carried out. Regarding the rights that the interested party has about his/her data, he/she may exercise the rights of access, rectification, suppression, limitation of processing, opposition, revocation, portability of his/her data, right to withdraw the consent given, exercising his/her rights by contacting MORPHEUS AIOLOS S.L as the responsible party: info@arcopay.i. Likewise, the interested party has the right to complain to the Supervisory Authority for data protection, the Spanish Data Protection Agency (AEPD).

The Data Controller is MORPHEUS AIOLOS S.L, with C.I.F.: B86556420, and address at St. San Andrés 8 C.P.: 28004 – Madrid (MADRID).  The activity of treatment is “PAGA CON TU BANCO”, SERVICE OF INITIATION OF PAYMENTS TO THIRD PARTIES, whose location is in St. San Andrés 8 28004-Madrid. The purpose of the treatment is Provision of electronic communications services and means of payment to third parties; Customer service, complaints, and claims; payment initiation service. The typology of the data of the interested party is the following: Name and surname; NIF / DNI / NIE; Address; Email; Mobile phone number; Credentials; IBAN bank account details. The term of suppression of such data is for as long as the service is provided. No profiling or automated decisions are foreseen. As for the legal basis for the processing, it is the execution of a contract. About the recipients, the Responsible may transfer the personal data provided to recipients and service providers provided, provided that it is limited to the purpose that justifies it, as well as the transfers provided for in the applicable legislation. The categories of recipients to whom the Controller may transfer the data subject’s data are Public administrations in the cases provided for by law and for the purposes defined therein; Tax Administration; Data Processors connected with the purpose of the Controller; Banking Entities; Collaborating Entities; Financial Entities; Entities connected with telecommunication services. The list of data processors and/or Service Providers with access to data without authorization for processing is located at: St. San Andrés 8 28004-Madrid. On the other hand, as regards international transfers, it is foreseen that no international transfer of personal data is carried out. Regarding the rights that the interested party has concerning his/her data, he/she will be able to exercise the rights of access, rectification, suppression, limitation of the treatment, opposition, revocation, to the portability of his/her data, the right to withdraw the consent given, exercising his/her rights by contacting MORPHEUS AIOLOS S.L as the responsible party: info@arcopay.io or St. San Andrés 8 C.P.: 28004 – Madrid (Madrid). Likewise, the interested party has the right to complain to the Supervisory Authority for data protection, the Spanish Data Protection Agency (AEPD).

The Data Controller is MORPHEUS AIOLOS S.L, with C.I.F.: B86556420, and address at St. San Andrés 8 C.P.: 28004 – Madrid (MADRID). The processing activity is PROVIDERS, ADMINISTRATIVE, AND ACCOUNTING MANAGEMENT, whose location is St. San Andrés 8 28004-Madrid.  The purpose of the treatment is: To send administrative communications via email or instant messaging applications; Data processing for administrative and accounting management of suppliers. The typology of the data of the interested party is the following: Name and surname; NIF / DNI / NIE; Telephone; Address; E-mail; Bank details-IBAN; Name and surname of the legal representative in case of legal entity; Name and surname of the contact in case of legal entity; Invoices. The deadline for deletion of such data is 5 years from the end of the provision of services. No profiling or automated decisions are foreseen. As for the legal basis for the processing, it is the execution of a contract. About the recipients, the Controller may transfer the personal data provided to recipients and service providers provided, provided that it is limited to the purpose that justifies it, as well as to the transfers provided for in the applicable legislation. The categories of recipients to which the Controller may transfer the personal data of the data subject are Public administrations in the cases provided for by law and for the purposes defined therein; Tax Administration; Data processors linked to the purpose of the data controller; Banks. The list of data processors and/or Service Providers with access to data without authorization for the processing is located at: St. San Andrés 8 28004-Madrid. On the other hand, as regards international transfers, it is foreseen that no international transfer of personal data is carried out. Regarding the rights that the interested party has about his/her data, he/she may exercise the rights of access, rectification, suppression, limitation of processing, opposition, revocation, portability of his/her data, right to withdraw the consent given, exercising his/her rights by contacting MORPHEUS AIOLOS S.L as the responsible party: info@arcopay.i. Likewise, the interested party has the right to complain to the Supervisory Authority for data protection, the Spanish Data Protection Agency (AEPD).

The Data Controller is MORPHEUS AIOLOS S.L, with C.I.F: B86556420, and address at St. San Andrés 8 C.P.: 28004 – Madrid (MADRID). The processing activity is CONTACTS VIA WEB, whose location is www.arcopay.io. The purpose of the treatment is Management through the web of queries related to the activity of the data controller; The e-mail address will only be used for the purpose defined by the data controller in the present activity. The typology of the data of the interested party is the following: Name and surname; Telephone numbers; E-mail address. The deadline for the deletion of such data is as long as the consultation formulated by the user is resolved. No profiling or automated decisions are foreseen. As for the legal basis for the processing, it is the legitimate interest of the data controller. Concerning the recipients, the Controller may transfer the personal data provided to recipients and service providers provided, provided that it is limited to the purpose that justifies it, as well as to the transfers provided for in the applicable legislation. The categories of recipients to which the Controller may transfer the personal data of the data subject are Public administrations in the cases provided for by law and for the purposes defined therein; Data processors linked to the purpose of the data controller. The list of data processors and / or Service Providers with access to data without authorization for the treatment is located at: St. San Andrés 8 28004-Madrid. On the other hand, as regards international transfers, it is foreseen that no international transfer of personal data is carried out. Regarding the rights that the interested party has concerning his/her data, he/she will be able to exercise the rights of access, rectification, suppression, limitation of the treatment, opposition, revocation, to the portability of his/her data, the right to withdraw the consent given, exercising his/her rights by contacting MORPHEUS AIOLOS S.L as the responsible party: info@arcopay.io or St. San Andrés 8 C.P.: 28004 – Madrid (Madrid). Likewise, the interested party has the right to complain to the Supervisory Authority for data protection, the Spanish Data Protection Agency (AEPD).

The person in charge of the treatment is MORPHEUS AIOLOS S.L, with C.I.F.: B86556420, and address at St. San Andrés 8 C.P.: 28004 – Madrid (MADRID). The purpose of the treatment is the Publication of customer testimonials on the web. The typology of the data of the interested party is the following: Name and surname. The deadline for deletion of such data is until the end of the publication or 30 days from the request for cancellation by the person concerned. No profiling or automated decisions are foreseen. As for the legal basis for the processing, it is the legitimate interest of the Controller. About the recipients, the Controller may transfer the personal data provided to recipients and service providers provided, provided that it is limited to the purpose that justifies it, as well as to the transfers provided for in the applicable legislation. The categories of recipients to whom the Controller may transfer the personal data of the data subject are Public administrations in the cases provided for by law and for the purposes defined therein; Data processors linked to the purpose of the data controller; Websites. The list of data processors and/or Service Providers with access to data without authorization for the processing is located at: St. San Andrés 8 28004-Madrid. On the other hand, as regards international transfers, it is foreseen that no international transfer of personal data is carried out. Regarding the rights that the interested party has about his/her data, he/she will be able to exercise the rights of access, rectification, suppression, limitation of the treatment, opposition, revocation, to the portability of his/her data, the right to withdraw the consent given, exercising his/her rights by contacting MORPHEUS AIOLOS S.L as the responsible party: info@arcopay.io or St. San Andrés 8 C.P.: 28004 – Madrid (Madrid). Likewise, the interested party has the right to complain to the Supervisory Authority for data protection, the Spanish Data Protection Agency (AEPD).

The Data Controller, in compliance with Article 37 of the RGPD (EU) 2016/679 of 27 April, appoints Shocktech y Protechplus SLU with C.I.F.: B85783777, with email delegadoprotecciondatos@protechplus.es as Data Protection Delegate.

The data subject may access this information on data protection updated at any time at St. San Andrés 8 28004-Madrid.

DATA PROCESSING AND CONFIDENTIALITY ON THE WEBSITE

The data provided will be incorporated into processing activities, whose ownership and responsibility are held by MORPHEUS AIOLOS S.L., and will be treated with absolute confidentiality.

The entity responsible for the processing, as well as those involved in any phase of the processing and/or the entities to whom the data have been communicated – under the authorization given by the USER – are obliged to observe professional secrecy and to adopt the levels of protection and the necessary technical and organizational measures within their reach to guarantee the security of the personal data, avoiding, as far as possible, unauthorized access, illicit modifications, theft and/or loss of the data.

However, USERS are warned and informed that such technical measures are not infallible or impregnable, which is why the Data Controller cannot be held responsible for such practices or their consequences.

The personal data of the USERS, together with those arising as a result of access, use, or contracting of the service, may only be subject to automated processing and transferred in the manner and for the purpose established and expressly authorized by the USERS.