BAL PAY
← Back to Balpay

Legal information

Privacy Policy

Last updated: 13 August 2026

This policy explains how BAL PAY S.A. processes personal data in connection with landing.balpay.eu and enquiries sent to us.

Controller and contact

BAL PAY S.A., 6, rue d’Arlon, L-8399 Windhof (Koerich), Luxembourg, RCS Luxembourg B305112, is the controller for this website. Privacy requests may be sent to support@balpay.eu. If a data protection officer is formally appointed, their contact details will be added here.

Data we process

  • connection and security data such as IP address, request time, requested resource, browser information and server events;
  • device-local preferences, including language and cookie-notice choice;
  • identity, business contact details and message content when you contact us;
  • onboarding information only when you choose to proceed through the separate client service.

Purposes and legal bases

We operate and secure the website, prevent abuse and diagnose faults on the basis of our legitimate interests. We remember a language selected by you to provide the requested interface. We answer enquiries and take pre-contractual steps at your request. We may also process data to meet legal obligations and establish or defend legal claims.

Recipients and international transfers

Data may be available to authorised Balpay staff, EU-based hosting and IT providers, email providers, professional advisers, competent authorities and, when relevant to your request, an authorised service partner. We aim to process website data in the EEA. If a provider processes data outside the EEA, an adequacy decision or appropriate safeguards such as Standard Contractual Clauses will be used where required.

Retention

Data is kept no longer than necessary. Retention is determined by website-security needs, the lifetime of an enquiry, contractual preparation and applicable limitation or statutory periods. Local preferences remain on your device until cleared; the cookie choice is renewed within 12 months. Security records may be retained longer when an incident must be investigated.

Your rights

Subject to the GDPR, you may request access, correction, erasure, restriction, portability or object to processing, and may withdraw consent where processing relies on consent. You may complain to the Luxembourg CNPD. We do not use website data for automated decisions producing legal or similarly significant effects.

Updates

We will update this policy when our services, providers or legal obligations change. Material changes will be reflected by a new date and, where required, a new notice or consent request.