Your security and privacy.

FanPayMe is operated from Europe and is subject to the EU General Data Protection Regulation (GDPR). Personal data such as your name, email address and payout details cannot be viewed by other users. Only the profile information you choose to publish (username, display name, bio, profile photo, cover image, social links) and, where enabled, your position on public lists is publicly visible. FanPayMe does not trade or share your information with unauthorised third parties. FanPayMe uses an encrypted SSL/TLS connection. Card numbers are not processed or stored by FanPayMe; they are handled by our payment service providers.

1. General

The following gives a simple overview of what happens to your personal information when you visit our website. Personal information is any data with which you could be personally identified. Detailed information on the subject of data protection can be found in the privacy policy below.

Who is responsible for the data collection on this website?

The data collected on this website is processed by the website operator:

Auerswald Marketing S.L.
Ctra. del Cap de la Nau Pla, 126-1-18
03730 Xàbia
Spain
VAT number: ESB09946799
Email: [email protected]

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, email addresses, etc.).

How do we collect your data?

Some data is collected when you provide it to us. This could, for example, be data you enter when you register, set up your page, send support or write to us.

Other data is collected automatically by our IT systems when you visit the website. This data is primarily technical data such as the browser and operating system you are using or when you accessed the page. This data is collected automatically as soon as you enter our website.

What do we use your data for?

Part of the data is collected to ensure the proper functioning of the website and to provide the service: creating and displaying creator pages, recording and processing support, paying out creators, and communicating with you. Other data can be used to analyse how visitors use the site and to prevent fraud and abuse.

What rights do you have regarding your data?

You always have the right to request information about your stored data, its origin, its recipients and the purpose of its collection at no charge. You also have the right to request that it be corrected, restricted or deleted, to receive your data in a portable format, and to object to processing based on legitimate interests. You can contact us at any time at [email protected] if you have further questions about privacy and data protection. You may also file a complaint with the competent supervisory authority.

Analytics and third-party tools

When visiting our website, statistical analysis may be made of your surfing behaviour. This happens primarily using cookies and analytics tools. The analysis of your surfing behaviour is usually anonymous, i.e. we will not be able to identify you from this data. You can object to this analysis or prevent it by not using certain tools. Details can be found below.

2. Data protection

The operator of this website takes the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations and this privacy policy.

If you use this website, various pieces of personal data will be collected. This privacy policy explains what information we collect and what we use it for. It also explains how and for what purpose this happens.

Please note that data transmitted via the internet (e.g. via email communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.

Revocation of your consent to the processing of your data

Many data processing operations are only possible with your express consent. You may revoke your consent at any time with future effect. An informal email to [email protected] making this request is sufficient. The data processed before we receive your request may still be legally processed.

Right to file complaints with regulatory authorities

If there has been a breach of data protection legislation, the person affected may file a complaint with the competent supervisory authority. The competent authority for the operator is the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), C/ Jorge Juan 6, 28001 Madrid, Spain, www.aepd.es. You may also contact the supervisory authority in the EU member state where you live or work.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognise an encrypted connection in your browser's address line when it changes from "http://" to "https://" and the lock icon is displayed in your browser's address bar. If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.

Encrypted payments on this website

If you send support that requires payment information, this data is required to process your payment. Payment transactions using common means of payment (credit or debit card, PayPal, wallets) are only made via encrypted SSL or TLS connections and are processed by our payment service providers. FanPayMe does not store full card numbers. In the case of encrypted communication, any payment details you submit cannot be read by third parties.

Information, rectification, deletion

As permitted by law, you have the right to be provided at any time with information free of charge about any of your personal data that is stored as well as its origin, the recipient and the purpose for which it has been processed. You also have the right to have this data corrected, restricted or deleted. You can contact us at any time at [email protected] if you have further questions on the topic of personal data.

3. Data collection on our website

Cookies

Some of our web pages use cookies. Cookies do not harm your computer and do not contain any viruses. Cookies help make our website more user-friendly, efficient and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are called "session cookies". They are automatically deleted after your visit. Other cookies remain in your device's memory until you delete them. These cookies make it possible to recognise your browser when you next visit the site.

You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.

Cookies which are necessary to allow electronic communications or to provide certain functions you wish to use (such as staying logged in) are stored pursuant to Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the storage of cookies to ensure an optimised service provided free of technical errors. If other cookies (such as those used to analyse your surfing behaviour) are also stored, they will be treated separately in this privacy policy.

On your first visit we ask for your choice in a cookie banner. Necessary cookies (session, CSRF, login) are required for the site. Statistics cookies are optional and are not set unless you accept them. Your choice is stored in this browser (local storage) so we do not ask again. You can change it at any time via “Cookie settings” in the footer.

Server log files

The website provider automatically collects and stores information that your browser automatically transmits to us in "server log files". These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

This data will not be combined with data from other sources. The basis for this processing is Art. 6 (1) (f) GDPR, which allows the processing of data to fulfil a contract or for measures preliminary to a contract, and our legitimate interest in the secure operation of the website.

Registration on this website

You can register on our website in order to create a creator page and access additional functions. The input data (name, email address, password, username) will only be used for the purpose of using the respective site or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, your registration will be rejected.

To inform you about important changes such as those within the scope of our site or technical changes, we will use the email address specified during registration.

We will process the data provided during registration based on your consent (Art. 6 (1) (a) GDPR) and for the performance of the contract (Art. 6 (1) (b) GDPR). You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.

We will continue to store the data collected during registration for as long as you remain registered on our website. Statutory retention periods remain unaffected.

Creator profile

A creator can add a short bio, a role, a location, links to social profiles, a profile picture and a cover image. This information is published on the creator's public page because that is the purpose of the page. You control what you add and can edit or remove it at any time in your profile settings.

Sending support and leaving messages

When a fan sends support, we store the amount, the currency, the time, the optional message, the display name chosen by the fan (if any) and whether the fan asked to stay anonymous. If the fan is logged in, the support is linked to the fan account. If the fan is not logged in, the email address used for the payment may be stored so that we can send a receipt and answer questions about the payment.

Anonymous support hides the fan's name on the public page and in the creator's dashboard. It does not remove the payment record itself, which we must keep for accounting purposes.

Storage of the IP address

Our support and message functions store the IP addresses of users who send support or messages. We need this information to prevent fraud and to be able to pursue action for illegal or slanderous content.

How long messages are stored

Messages and the associated data (e.g. IP address) are stored and remain on our website until the message has been completely deleted or is required to be removed for legal reasons (slander, etc.). Payment records connected to a message are retained for the statutory retention period.

Legal basis

Messages are stored based on your consent (Art. 6 (1) (a) GDPR). You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.

4. Processing of data (customer and contract data)

We collect, process and use personal data only insofar as it is necessary to establish, or modify legal relationships with us (master data). This is done on the basis of Art. 6 (1) (b) GDPR, which allows the processing of data to fulfil a contract or for measures preliminary to a contract. We collect, process and use your personal data when accessing our website (usage data) only to the extent required to enable you to access our service or to bill you for the same.

Collected customer data shall be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.

Data transferred to third parties

We transmit personally identifiable data to third parties only to the extent required to fulfil the terms of your contract with us, for example to payment service providers entrusted to process your payments or to banks and payout providers entrusted to pay out creators. Your data will not be transmitted for any other purpose unless you have given your express permission to do so. Your data will not be disclosed to third parties for advertising purposes without your express consent.

Payout details

A creator can save a payout method, which can be a bank account (IBAN) or a PayPal email address. These details are stored encrypted. They are never shown on the public creator page. They are used exclusively to pay out confirmed support to the creator and to comply with our accounting and anti-money-laundering obligations. To verify identity and prevent fraud, we may ask a creator for a copy of an official identification document before a payout is released. Such documents are stored only for as long as required by law.

5. Payment service providers

Payments on FanPayMe are processed by external payment service providers. If you pay by card, wallet or PayPal, your payment data (such as card number, expiry date, name, billing address and IP address) is transmitted directly to the respective provider and processed under its own privacy policy. FanPayMe receives a confirmation of the payment, the amount, a transaction reference and, where required for receipts and fraud prevention, the payer's name, email address and country. The transmission of this data is necessary to identify you securely and to prevent fraud. Which providers are available is shown at checkout.

Payouts to creators are made by bank transfer (SEPA or international) or via PayPal. For this purpose we transmit the creator's name, payout details and the amount to the executing bank or to PayPal.

6. Analytics and advertising

If we use a web analytics service, it will use cookies or similar technologies to analyse how visitors use the website. Such data is processed in anonymised or pseudonymised form on the basis of Art. 6 (1) (f) GDPR. You can prevent these cookies from being stored by selecting the appropriate settings in your browser; however, doing so may mean you will not be able to enjoy the full functionality of this website. Where a tool requires consent, we will ask for it before the tool is loaded.

Social media links

Creator pages can contain links to profiles on platforms such as Instagram, TikTok, YouTube or X. These are plain links. No data is transferred to the respective platform until you click a link and leave our website. The linked platforms are responsible for their own data processing.

7. Emails and notifications

When registering, we verify that you are the owner of the email address provided and that you agree to receive emails. We use this email address exclusively for sending the requested information, service messages (such as notifications about received support, payouts and security) and do not pass it on to other third parties, except for the service providers named in this privacy policy.

If you would like to receive an optional newsletter, we require your consent. You can revoke this consent at any time in your account settings or via the "unsubscribe" link in the newsletter. The processing of the data entered by you is based exclusively on your consent. You can completely revoke your consent to the automatic sending of emails by deleting your account. The legality of the data processing operations already carried out remains unaffected by the revocation.

Email delivery provider

This site uses an external email delivery provider to support the sending of emails such as registration confirmations, receipts and notifications. Through this, the provider gains knowledge that our website is being used in conjunction with the email address you provide. The use of such a provider is in the interest of secure and stable email delivery (Art. 6 (1) (f) GDPR). The provider is bound by a data processing agreement with us.

8. Google Web Fonts

For uniform representation of fonts, this page uses web fonts provided by Google. When you open a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.

For this purpose your browser has to establish a direct connection to Google servers. Google thus becomes aware that our web page was accessed via your IP address. The use of Google Web Fonts is done in the interest of a uniform and attractive presentation of our website. This constitutes a justified interest pursuant to Art. 6 (1) (f) GDPR.

If your browser does not support web fonts, a standard font is used by your computer. Further information about handling user data can be found at developers.google.com/fonts/faq and in Google's privacy policy at www.google.com/policies/privacy.

9. Retention

We keep personal data only as long as it is needed for the purposes described here. Account data is kept while the account exists. Payment and payout records are kept for the retention periods required by Spanish tax and commercial law. Data that is no longer needed is deleted or anonymised.

10. Changes to this privacy policy

We may update this privacy policy to reflect changes in the service or in the law. The current version is always available at this address. Significant changes will be announced on the website or by email.

Contact

Auerswald Marketing S.L.
Ctra. del Cap de la Nau Pla, 126-1-18
03730 Xàbia, Spain
[email protected]