Privacy Policy

SatisWelfare S.p.A. (“Satispay”), with registered office in Milan, Piazza Fidia 1, Italian tax code and registration number with the Milan companies’ register 12408640964.

Satispay has appointed a data protection officer (“DPO”) who may help with any questions about the data processing we carry out and/or how to exercise your rights. You can reach our DPO at dpo@satispay.com.

Satispay processes personal data of:

• legal representatives and/or ultimate beneficial owners of affiliated merchants that accept meal vouchers, shopping vouchers, and other corporate welfare products, as well as merchants who use payment services provided by Satispay Europe S.A., for the purpose of offering and providing value-added services;
• employers interested in offering welfare services to their employees and collaborators, as well as such employees and collaborators currently employed by those employers.

In the course of providing value-added and corporate welfare services (collectively, the “Services”), Satispay collects personal data directly from data subjects or, in the case of data related to merchants, also through Satispay Europe S.A. Personal data of employees and collaborators who benefit from the welfare services are also collected through their respective employers, who share such data with Satispay.

Satispay processes personal identification data (like name, surname, sole proprietorship, etc.) and contact information (email address, phone number) for the following purposes and on the legal bases indicated below:

a) to reply to and reach out to individuals interested in the Services, to the extent that such processing is necessary for the performance of pre-contractual measures taken at the request of the data subjects (Art. 6.1, letter b, GDPR);
b) to ensure the proper provision and subsequent use of the Services, to the extent that such processing is necessary for the performance of a contract to which the data subject is a party (Art. 6.1, letter b, GDPR);
c) to comply with legal obligations related to the provision of the Services, as well as with requests from competent authorities to which Satispay is subject (Art. 6.1, letter c, GDPR);
d) to verify eligibility requirements for the provision of the Services and to conduct analyses aimed at improving and optimizing the Services, including through surveys, based on Satispay’s and/or employers’ legitimate interest (Art. 6.1, letter f, GDPR);
e) to send communications promoting the Services and informing data subjects of updates and/or features related to the Services, based on Satispay’s legitimate interest (Art. 6.1, letter f, GDPR);
f) to send, through business partners, communications promoting the Services, based on the prior consent of the data subjects (Art. 6.1, letter a, GDPR).

Where strictly necessary, Satispay may share personal data with:

• service providers for IT, communication, marketing, compliance, customer support and management;
• our staff, including Satispay’s group staff (who provides intercompany services), as well as business partners for reasons related to the Services;
• employers offering welfare services to their employees and collaborators. Specifically, Satispay may share the names of employees/collaborators using welfare services, without disclosing further details regarding how such services are used;
• where requested, competent authorities, including financial institutions, courts, law enforcement agencies, and public administrations.

These recipients may act as autonomous data controllers or as data processors. Data processors follow Satispay’s instructions.

Personal data is stored on servers located in the European Union. If needed for specific purposes, personal data is also transferred to companies located outside the European Union. In this case, Satispay ensures that the data is processed safely and that it has entered into agreements that guarantee an adequate level of protection and/or include the standard contractual clauses provided by the European Commission.

Satispay has set up strong internal data security measures as well as technical and organizational measures (like segregation, encryption, pseudonymization and anonymization) to keep personal data safe from accidental loss, misuse, alteration, destruction and/or unauthorised access.

Satispay retains personal data as long as needed to fulfil specific purposes and comply with applicable laws. In particular:

• for the purposes outlined in paragraphs 4.a) and 4.b) above, Satispay retains personal data for the duration of the relevant contractual or pre-contractual relationship;
• for the purpose outlined in paragraph 4.c) above, data is retained for the time required by applicable law. Specifically, Satispay retains such data for 10 years after the end of the relevant contractual relationship;
• for the purposes outlined in paragraphs 4.d) and 4.e) above, Satispay retains personal data until the data subject asks us not to use it anymore or requests its deletion and, in any case, no longer than the duration of our contractual relationship;
• for the purpose outlined in paragraph 4.f), data is retained until consent is withdrawn or a deletion request is made and, in any event, no longer than the duration of the marketing campaign for which the data subject’s consent was collected.



In any case, personal data may be stored longer in the event of disputes or requests by the competent authorities.

Data subjects may exercise the following rights at any time:

• the right to know whether their personal data is being processed and, if so, to obtain a copy;
• the right to correct inaccurate or outdated personal data;
• where applicable, the right to have their personal data deleted;
• where applicable, the right to limit the processing of their personal data;
• the right to receive and transmit their personal data to another data controller in a commonly used format;
• where applicable, the right to object to data processing based on legitimate interest;
• the right to withdraw consent for specific data processing activities.

To exercise your rights, you may contact support@satispay.com or dpo@satispay.com.

You also have the right to lodge a complaint with the relevant Data Protection Authority. However, we encourage reaching out to us first to resolve any issues amicably and promptly.