Version date: 8 December, 2023
Rootline BV
Prinsengracht 449a
1016 HN Amsterdam
The Netherlands
1. ABOUT ROOTLINE BV
Rootline B.V. (“Rootline”) is located at Prinsengracht 449a, 1016 HN Amsterdam, the Netherlands and is registered at the Chamber of Commerce under number 83218025.
Rootline uses third parties to provide its payment services. These third parties are considered sub-processors of your personal data in accordance with the General Data Protection Regulation (‘GDPR’).
A sub-processor acts under the instructions of Rootline, meaning that they may process individuals' personal data on behalf of Rootline.
Rootline requires its sub processors to enter into agreements that satisfy the requirements of Article 28 of the General Data Protection Regulation, including but not limited to obligations to:
Process data in accordance with Rootline’s instructions.
Ensure that persons authorized to process the personal data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality.
Not engage a subprocessor without prior specific or general written authorisation of Rootline and when engaging a subprocessor, impose the same data protection obligations as are in place between itself and Rootline.
Provide regular training in security and data protection to personnel to whom they grant access to personal data.
Implement and maintain appropriate technical and organizational measures to ensure the security, integrity and confidentiality of personal data.
Prompt inform Rootline about any actual or potential security breach.
Cooperate with Rootline in order to deal with requests from Rootline’s merchants, data subjects or data protection authorities, as applicable.
2. HOSTING SUB-PROCESSORS
Rootline uses sub-processors for server hosting facilities of its infrastructure. Rootline is only using industry leading cloud service providers. These cloud service providers are listed with our regulator.
3. PLATFORM SUB-PROCESSORS
Rootline uses sub-processors for communicating transactions between Rootline and Payment Schemes. These sub-processors are called acquirer banks.
4. CDD (INCL. KYC) SUB-PROCESSORS
Rootline uses sub-processors for its customer due diligence and know-your-customer processes. These sub-processor help Rootline to verify your identity and monitor your activity.
6. BUSINESS OPERATIONS SUB-PROCESSORS
Rootline used sub-processors for business operations, such as human resources , legal, compliance and audit services.
You may request a full list of sub-processors used by Rootline or you may object to a sub-processor by sending an email to info@rootline.com along with your name, your company’s name and the name of the Rootline account, together with your request and reason for this request.
