This website is owned by Getnet Payments, S.L. (hereinafter, "Getnet" or “We”), a company with registered office at Av. Cantabria s/n, 28660, Boadilla del Monte, Madrid and Tax Identification Number B-87694410, registered in the Madrid Mercantile Registry, Volume 37910, Book 0, Page 26, Section 8, Page M-675111.
Privacy notice
First layer of information
1. What is the purpose of this notice?
This privacy notice aims to explain how Getnet collects, processes and protects your personal data (the “Data”) in a transparent, clear and simple way
2. To whom is this notice addressed?
This notice is aimed at Data Subjects whose personal information is processed by Getnet. Specifically, we distinguish between the following types of Data Subjects, which will be referred to throughout this document:
- Website Visitors: These are the Data Subjects who browse the website.
- Individuals: Data subjects who request information through any of our contact channels.
- Legal representatives or representatives: Data subjects representing companies or institutions that have a legal agreement with Getnet or are in the process of establishing one.
- Contact individuals: Data subjects who provide services to companies with which Getnet has commercial relations of any kind.
- Merchants: customers of the Getnet entities that constitute the Getnet Group.
- Candidates: Data subjects who have applied for a job at Getnet. The details of the processing can be found at the end of this notice in Section 9.
- Getnet Portal Users: Individuals, primarily developers, who create a Getnet account to access and use the Getnet Portal and the services, resources and functionalities made available through it, including GetCode, the Getnet tech community described in Section 10.1, and Getnet Docs, the technical documentation platform described in Section 10.2.
AT A GLANCE: BASIC INFORMATION
To help you understand, we have included the most relevant information in the table below. You can find more detailed information in the second layer of information below. For any clarification or additional queries, please contact our Data Protection Officer (DPO) at privacy@getnet.net
Data Controller
| Getnet Payments, S.L. Postal address: Av. Cantabria 5, Edificio Alhambra, planta 2, 28660, Boadilla del Monte, Madrid. Contact details of the Data Protection Officer: privacy@getnet.net Additional information regarding the Getnet Portal and the services, resources and functionalities made available through it, including GetCode and Getnet Docs, is provided in Section 10 of this Privacy Notice. |
|---|---|
Purpose and legal basis | Your personal data will be processed for the following purposes:
Your data will be processed based on Getnet’s legitimate interest in answering your queries if you have sent us an email or in contracting or having any kind of commercial relation with the entity to whom you are a contact to or represent. Regarding cookies your data shall be processed based on your consent. You can object to the processing based on legitimate interest by writing to privacy@getnet.net |
Recipients
| We may share your data with third parties that provide services to us, that act on our instructions and with whom we have signed a data processor agreement in accordance with the provisions of Article 28 of the GDPR and with other entities that are part of the Getnet group for internal administrative purposes. |
Rights
| You may exercise your rights of access, rectification, erasure and restriction and objection to the processing, as well as portability of your data, by sending your request to privacy@getnet.net Also, you may claim to the Spanish Data Protection Authority (more information www.aepd.com). |
Second layer of information
1. Who is the Data Controller?
Name: Getnet Payments, S.L., NIF: B87694410.
Postal address: Avd. de Cantabria 3, Edificio Arrecife panta 2, 28660 Boadilla del Monte (Madrid).
Contact details of the data controller: privacy@getnet.net
2. What type of Data do We process, where does it come from, and what are the purposes and legal basis for processing?
Data Subject | Type of data and origin | Purpose | Legal basis |
|---|---|---|---|
Website Visitors | Data such as your IP or other identifiers that, although don’t allow us to uniquely identify you without additional information, are considered personal data. More information can be found on our Cookie Notice. | Depending on the type of cookies you have accepted, WE will use them to improve our website, to personalize them, etc. as described in our Cookie Notice. | Consent. |
Individuals | Identification and professional contact data, (name and surname, email, company, phone number, job or position). | The purpose of processing the Data is to receive your questions or queries through the different channels that We provide for this purpose, managing and responding to them. | Legitimate interest in answering Data Subjects queries and in maintaining commercial relationships with the entity you represent or contact on behalf of. |
Representatives and Contact individuals | a) Identification and professional contact data, (name and surname, email, company, phone number, job or position). b) Same as a) and the responses you provide to the surveys. | a) The purpose of processing the Data is so We can maintain any kind of commercial relations with the entity you represent, or you are a contact to. b) In addition, to send you satisfaction surveys and analyse the responses to improve the quality of our products and services. | a) Legitimate interest in processing data is to maintain any kind of relationship with the legal entity that it represents or acts as a contact for. b) Legitimate interest in knowing the opinion of the entity you represent or act as a contact for, to enable the evaluation and improvement of the quality of the products and services provided. |
Merchants (when self-employed individuals) | Pseudonymized identification data. | To produce reports to have global and consolidated finance information for the Getnet group business and for internal administrative purposes. | As the parent company of the Getnet group, We have a legitimate interest in processing data for internal administrative purposes, such as producing finance and audit reports. |
| Getnet Portal Users | Identification and contact data (such as name, surname, email address, and country of residence) Account and profile information. Authentication and access data. Information relating to the use of the Getnet Portal and the services available through it, including GetCode and Getnet Docs. Participation data relating to events, surveys and other initiatives made available through the Getnet Portal. Marketing preferences, consents and communication settings. Feedback, survey responses and information voluntarily provided by the user through the Getnet Portal. Professional information and technical interests (such as areas of expertise, technologies of interest, skills and professional background). | a) Account creation and management: To create and manage user accounts, authenticate users and provide access to the Getnet Portal and its functionalities. b) Provision of Portal services: To provide access to the resources, content, tools, services and initiatives available through the Getnet Portal, including GetCode and Getnet Docs, and to facilitate users' participation in activities and events made available through the Portal. c) Platform maintenance and security: To operate, maintain and secure the Getnet Portal and its services. d) Programme and service communications: To keep users informed about events, hackathons, webinars, training activities, resources and other initiatives available through the Getnet Portal. e) Marketing communications: To send marketing and promotional communications regarding Getnet products and services, where the user has provided their consent. f) Analytics and programme improvement: To analyse aggregated usage data and feedback relating to the Getnet Portal and the Programme in order to improve functionalities, content, user experience and service performance. No profiling or automated decision-making is carried out. g) Programme surveys and feedback: To send surveys and collect feedback regarding the Getnet Portal, the Programme and the services available through them, in order to evaluate and improve their quality and usefulness. | a), b), d) Performance of a contract consisting of the provision of access to and use of the Getnet Portal and the services, resources and functionalities made available through it, including the voluntary participation in events and initiatives offered through the Portal. c), f), g) Getnet's legitimate interest in ensuring the operation, security and continuous improvement of the Getnet Portal and its services, including through the analysis of aggregated usage data and user feedback. These processing activities do not involve profiling or automated decision-making. e) The data subject's consent to receive marketing and promotional communications regarding Getnet products and services. |
You may object to any processing based on legitimate interest, sending an email to privacy@getnet.net
3. How long do We store your Data?
Data subject | Conservation period |
|---|---|
Website Visitors | We process the information We collect using cookies for the periods indicated in the Cookie Notice. |
Individuals | The Data provided will be stored for as long as is necessary to manage the request. Thereafter, it will be kept and blocked for as long as is necessary to formulate, exercise and defend possible claims arising from the processing of the data. |
Representatives and Contact individuals | The Data will be stored for as long as the Data Subject is representing the company and there is an ongoing commercial relationship. If a commercial agreement is reached, we will process your data for the duration of the agreement. Once the agreement has expired, we will keep the Data blocked for the time necessary for the formulation, exercise and defense of possible claims arising from it processing. In the case of satisfaction surveys, individual responses will be kept only for the period necessary to analyse them and, in any case, for a maximum of 12 months from their receipt, after which they will be anonymised or deleted. Aggregated and anonymised results may be kept for statistical purposes. |
Merchants (when self-employed individuals) | The Data will be stored for as long as the data subject is a Getnet Group customer. Once they are no longer a customer, the data will be kept blocked for 10 years to comply with anti-money laundering and financial crime regulations. |
Getnet Portal Users | We will process your personal data for as long as you maintain an active Getnet Portal account. We will process your personal data for as long as necessary to fulfil the purposes for which it was collected. If the data subject requests its erasure, or when the data is no longer necessary for those purposes, it will be blocked for three (3) years and thereafter permanently deleted, unless retention is required by law or for the establishment, exercise or defence of legal claims. |
4. Will your data be shared with third parties?
Getnet may communicate your data to the following entities, always in relation to the purposes described:
Service providers, that act on Getnet’s instructions and with whom it has signed a data processor agreement in accordance with the provisions of Article 28 of the GDPR.
Affiliates (entities that are part of the Getnet group) for internal administrative purposes and, where necessary, to facilitate users' participation in activities, events, initiatives and services made available through the Getnet Portal.
To the competent bodies of the Public Administrations, if the Data are required.
Unless you or where applicable the company you represent, request us to do so in the context of a business relationship, or participate in a service, activity or initiative made available through the Getnet Portal, Getnet will not share your personal data with other data controllers, except where required by law or otherwise permitted under applicable data protection laws.
5. International Data Transfers
Getnet may transfer some of the Data to service providers and affiliates located outside the EEA, including those in the United States, Argentina, Brazil, Mexico, Chile, Colombia and Uruguay.
Non-EEA countries do not have the same data protection laws as the EEA. These countries may not provide the same degree of protection for your personal data or give you the same rights in relation to it. For these reasons, and to comply with applicable regulations, when transferring data to territories outside the EEA, Getnet will only transfer data to countries that have been deemed by the European Commission to provide an adequate level of protection for personal data (as is the case for Argentina, the United States and Uruguay), or will sign the 'Standard Contractual Clauses' (SSCs) approved by the European Commission, which provide personal data with the same level of protection it has in the EU.
6. What are your rights when you provide us with your Data?
You have the following rights:
- Access: you have the right to ask us to inform you about what data we hold about you and provide you with a copy of it.
- Rectification: you have the right to ask us to correct the information we hold about you if it is incorrect.
- Cancellation or deletion: you have the right to ask us to delete your data when it is no longer necessary or when we are processing it because you have given us your consent.
- Objection: you have the right to ask us to stop processing your data when we are processing it based on our legitimate interest.
- Limitation of processing: you have the right to ask us to limit the processing of your data when, for example, you have contested the accuracy of the data.
- Portability: you have the right to ask us to communicate your data to a third party in a structured, commonly used and machine-readable format, wherever possible, or to yourself.
- Right not to be subject to automated decisions: you have the right to ask us not to base a decision that has legal effect for you or significantly affects you on automated processing, with some exceptions.
Where processing is based on your consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to its withdrawal.
You can also file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es
If you want more information about rights in the framework of data protection you can access the infographic about the AEPD here.
7. What security measures do we apply?
At Getnet we are committed to security, and we apply technical and organizational measures aimed at guaranteeing the integrity, unavailability and confidentiality of your Data.
At Getnet, we are committed to security. We have implemented technical and organisational measures to ensure the integrity, availability and confidentiality of your data. These measures include encryption, data loss prevention, secure passwords and access controls. Likewise, Getnet guarantees the fulfilment of the duty of secrecy and confidentiality with respect to the Data.
8. Other important information
8.1 Communication of Data by a third party
As we have already explained, in some cases, the data we collect is not received directly from you, the data subject, but rather from a third party, such as an affiliate, partner, representative, or contact individual from your company.
If you are such a third party, you guarantee that you will comply with the applicable regulations for sharing data, and that you have informed the data subject of this, indicating that they can review this privacy notice.
8.2. Changes to this notice and inquiries
We may update this privacy notice and will inform you of the changes and their effective date. Any updates will also be posted on this website.
9. Employment candidates' privacy notice
9.1. Purpose of the processing and legal basis
| Management of the selection process | |
|---|---|
Purpose | We will process your personal data to evaluate your suitability for the job you have requested and to manage the selection process. Linked to this processing and if you turn out to be the candidate selected, we may carry out a series of pre-hiring checks that may include:
|
Lawfulness |
|
Types of data processed |
|
Resolution and management of consultations | |
|---|---|
Purpose | Answer the queries you can make during the selection process and after it. |
Lawfulness | Our legitimate interest in answering any questions that may arise during the selection process or subsequently. |
Types of data processed |
|
Candidate Examination | |
|---|---|
Purpose |
|
Lawfulness | The fulfillment of legal obligations or the legitimate interest in fulfilling the obligations of due diligence and avoiding the possible damages (including possible fines) that may arise from the hiring of sanctioned persons. |
Types of data processed |
|
9.2. Additional information on the use of AI tools to assess whether the candidate meets the requirements of the offer for which he or she is applying
How does the automated tool used by Getnet work?
During the initial selection of candidates, Getnet can use an analysis tool based on artificial intelligence to assess whether the characteristics of the candidates contained in the information provided by them (mostly CVs) meet the requirements of the job offer.
The system analyses this information and generates different scores showing the percentage of matching between the candidates and the job offer based on the information they have provided. The result generated by the tool does not in itself determine a final decision. Candidate selection decisions are made exclusively by human beings, who may or may not consider the results generated by the tool. In any case, there is always human supervision during the evaluation process.
What type of information is processed by the automated tool and what is the legal basis for the processing?
The tool only processes the information provided by the candidate at the time of applying for the vacancy, in particular the information contained in the CV.
Candidates participate in the recruitment process on a voluntary basis and the processing of their data is based on the adoption of pre-contractual measures. However, the automated processing of personal data through the tool is legally based on the legitimate interest of Getnet.
This legitimate interest is specified in the need to use technological tools to improve efficiency, objectivity and traceability, to optimise the management of the recruitment process and to ensure an initial technical evaluation based on previously defined criteria.
Candidates may, at any time, object to their application being evaluated by the automated tool and request that their profile be reviewed manually by the person responsible for the selection process. To do so, the candidate should contact Getnet by e-mail at privacy@getnet.net
9.3. Who do we share your data with?
With service providers
We may share your personal information with companies that provide services to us and with whom we have entered into a data processing agreement in accordance with applicable law. These will process your data on our behalf and following our instructions.
International transfers of Data
In exceptional cases, as we may use service providers located outside the EEA, or our EEA-based providers may sub-contract to providers outside the EEA, your data may be transferred outside the EEA to countries such as Brazil, Chile, Mexico or others which do not provide a similar or adequate level of protection to that provided in the EEA, we will provide adequate safeguards in accordance with data protection legislation. If you wish to request a copy of these guarantees or additional information, you may do so by contacting the DPO at privacy@getnet.net
9.4 How long do we keep your Data?
We will process your personal data for as long as the selection process lasts and, where appropriate, as necessary to manage queries. Once the process is complete, we will retain your information in case of future opportunities in which you may be interested in a maximum period of 18 months. After that period, we will proceed to block the information and delete it after the period of exercise of actions.
9.5. Exercise of rights
You can exercise your rights of access, rectification, erasure, limitation of processing, portability, opposition and the right not to be subject to automated individual decisions including profiling, sending an email to mailbox privacy@getnet.net as well as filing a claim with the Spanish Data Protection Agency at www.aepd.es
10. Getnet Portal
The Getnet Portal is a digital platform operated by Getnet Payments, S.L. that provides users with access to developer resources, services, content, initiatives and functionalities made available by Getnet.
Through a single user account, users may access different services available through the Getnet Portal, including GetCode and Getnet Docs, as further described below.
10.1. GetCode
GetCode is Getnet's tech community available through the Getnet Portal. Through GetCode, Getnet Portal Users may participate in events, hackathons, webinars, training activities and other community initiatives, as well as access resources made available through the community.
In relation to the management of GetCode, including user registration, participation, communications and programme administration, Getnet Payments, S.L. acts as Data Controller as described in this Privacy Notice.
10.2. Getnet Docs
Getnet Docs is the technical documentation platform available through the Getnet Portal. Through Getnet Docs, Getnet Portal Users may access technical documentation, APIs, integration guides, knowledge resources and other materials intended to facilitate integrations with Getnet services.
In relation to the provision and management of Getnet Docs, Getnet Payments, S.L. acts as Data Controller as described in this Privacy Notice.
10.3. Joint Controllership for GetCode Events, Hackathons and Other Initiatives
Certain events, hackathons, webinars, training activities and other initiatives available through GetCode may be organised jointly by Getnet Payments, S.L. and one of the following Getnet entities:
- Getnet México, S.A. de C.V.
- Getnet Argentina, S.A.
- Getnet Chile, S.A.
- Getnet Adquirencia e Serviços para Meios de Pagamento SA
- Getnet Uruguay, S.A.
In relation to the personal data processing necessary for the organisation and management of the relevant activity, Getnet Payments, S.L. and the Getnet entity organising such activity shall act as Joint Controllers.
10.4. Allocation of Responsibilities Between Joint Controllers
The joint controllership arrangements described in Section 10.3 apply exclusively to specific events, hackathons, webinars, training activities and other initiatives organised through GetCode jointly by Getnet Payments, S.L. and the relevant organising Getnet entity.
Such arrangements do not apply to the operation and management of the Getnet Portal, GetCode or Getnet Docs, for which Getnet Payments, S.L. acts as sole Data Controller as described in this Privacy Notice.
For jointly organised GetCode activities, Getnet Payments, S.L. and the relevant organising Getnet entity jointly determine the purposes and essential means of the processing necessary for the organisation and management of the relevant activity and therefore act as Joint Controllers.
Getnet Payments, S.L. remains responsible for the operation and management of the Getnet Portal, GetCode and Getnet Docs, including user registration, account management, programme administration and related communications.
The organising Getnet entity is responsible for the local organisation and management of the relevant event, initiative or activity.
The Joint Controllers cooperate to ensure compliance with applicable data protection laws and to respond to requests from data subjects.
10.5. Contact Point and Exercise of Rights
Getnet Portal Users may exercise their data protection rights at any time by contacting:
- getcode@getnet.net for matters relating to GetCode and its activities.
- privacy@getnet.net for all other privacy-related matters concerning the Getnet Portal and Getnet Docs.
Where a specific activity is subject to a joint controllership arrangement, Getnet Payments, S.L. will act as the primary contact point for data protection matters unless otherwise indicated in the information provided for that activity.
Last update: September 2026