Privacy Policy

Privacy Policy

1. Who is the data controller and how can you contact the DPO?

This privacy policy is provided by Satispay Europe S.A., a financial intermediary that acts as an electronic money institution, and Satispay Invest S.A., an investment firm, both authorized and regulated under the laws of Luxembourg (jointly, “Satispay”).


Depending on the services offered, the two companies play different roles in the processing of personal data. Specifically:

  • Satispay Europe S.A. acts as an autonomous controller for all data processing related to the provision of payment services;
  • Satispay Invest S.A., depending on the processing activities performed, acts as an autonomous data controller or as a joint controller together with Satispay Europe S.A., in the context of data processing related to the provision of investment services. To this end, the two companies have entered into a specific agreement that outlines and allocates their respective liabilities regarding compliance with obligations under applicable data protection regulations.


Satispay has appointed a data protection officer (“DPO”) who may help with any questions about the data processing we carry out and/or how to exercise your rights. You can reach our DPO at dpo@satispay.com.

2. Whose personal data does Satispay process?

Satispay processes personal data concerning a range of individuals (“Data Subjects” or “you”), including:

  • subjects using our services;
  • legal representatives of user merchants and/or ultimate beneficial owners; prospective users;
  • individuals aged 14 to 17 seeking parental and/or guardian approval to complete the sign-up and use the payment services, as well as relatives, guardians and associates of such prospective users;
  • suppliers, business partners and service providers;
  • individuals whose personal data are shared with us by users when using our services (like phone contacts saved in phone books);
  • individuals who contact Satispay for information via social networks and/or other communication channels.

3. How does Satispay collect personal data?

Satispay is committed to collecting only personal data strictly necessary for the pursuit of its purposes. In particular, Satispay collects personal data:

  • from users during the sign-up process to Satispay app and their usage of our services (heads-up: as part of the registration process for payment services, users between 14 to 17 must always share their parent/guardian’s personal data);
  • from other Data Subjects via phone, email or social media;
  • from third-party companies that have provided guarantees on the lawfulness of the collection;
  • through checks that Satispay carries out to ensure the accuracy of the received information and any public domain news about users.

5. Who can receive personal data?

According to the purposes for which it is processed, Satispay may share personal data with:

  • other users for service-related reasons (like, payment to user merchants, P2P);
  • service providers for IT, communication, compliance, marketing, customer support and management;
  • our staff, including Satispay group’s staff (who provides intercompany services), and business partners for reasons related to the various services offered;
  • suppliers of commercial information;
  • where requested in the context of the provision of payment services, parents, guardians or associated people with users;
  • where requested, regulatory authorities, financial institutions (like banks, regulated payment services providers, intermediaries, and investment funds), competent courts, law enforcement agencies (including the police), and public administrations.


These recipients may act as autonomous data controllers or as data processors. Data processors follow Satispay’s instructions.

6. Where is data stored and where may it be transferred?

Personal data is stored on servers located in the European Union. If needed for specific purposes, personal data is also transferred to companies located outside the European Union. In this case, Satispay ensures that the data is processed safely and that it has entered into agreements that guarantee an adequate level of protection and/or include the standard contractual clauses provided by the European Commission.

7. How does Satispay ensure the security of personal data?

Satispay has set up strong internal data security measures as well as technical and organizational measures (like segregation, encryption, pseudonymization and anonymization) to keep personal data safe from accidental loss, misuse, alteration, destruction and/or unauthorised access.

Special measures are implemented to safeguard data concerning minors, enhancing their protection and security.

8. How long does Satispay retain personal data?

Satispay retains personal data as long as needed to fulfil specific purposes and comply with applicable laws (such as tax or anti-money laundering laws). In particular:
* for the purpose outlined in paragraph 4.1 above, we keep your personal data for the duration of our agreement;
* for the purposes mentioned in paragraphs 4.2, 4.3, 4.7 and 4.8 above, we keep your personal data for 5 years after our services to you end;
* for the purposes outlined in paragraphs 4.4 and 4.6 above, we keep your data until you ask us not to use it anymore or request its deletion and, in any case, no longer than the duration of our contractual relationship;
* for the purpose mentioned in paragraph 4.5 above, we keep your data until you withdraw the consent or request for the data to be deleted and, in any case, no longer than the duration of our contractual relationship.


In any case, personal data may be stored longer in the event of disputes or requests by the competent authorities.

9. Which rights may you exercise?

You may exercise at any time the following rights:

  • the right to know whether your personal data are being processed, and, if this is the case, access it (right of access);
  • the right to correct inaccurate or outdated personal data (right to rectification);
  • if possible, the right to obtain the erasure of your personal data (right to erasure). To this end, you may also use the “Delete Account” option within the Satispay app;
  • if possible, the right to limit data processing (right to restriction of processing);
  • the right to receive and share your personal data with another controller in a common format (right to data portability);
  • if possible, the right to object to data processing based on legitimate interest (right to object). If you wish to opt out from direct marketing communications, you can also click on “Unsubscribe” at the bottom of each communication or use the “Notifications” section in the app;
  • right to withdraw consent for specific data processing activities. You may click on “Unsubscribe” at the bottom of each communication or through the “Notifications” section in the app.


To exercise your rights, you may contact support@satispay.com or dpo@satispay.com.

You also have the right to lodge a complaint with the relevant Data Protection Authority. However, we encourage reaching out to us first to resolve any issues amicably and promptly.

We are at your disposal for any additional information. Contact us.

Should you have any questions regarding our service for accepting payments please email us at business@satispay.com

If your cell phone has been stolen or you have lost it, block your account

Payment services are provided by Satispay Europe S.A., registered under no. W00000010 in the Register of Electronic Money Institutions at the Commission de Surveillance du Secteur Financier and under no. B229149 in the Luxembourg Business Register. Registered office: 53, Boulevard Royal, L-2449 Luxembourg.
Corporate welfare services are provided by SatisWelfare S.p.A., tax code and registration number in the Milan Business Register no. 12408640964. Registered office: Piazza Fidia 1, 20159 Milan.