Terms of use

Version 31.10.2026. Fields in [brackets] are still to be filled in or approved by the service provider.

1. Provider

PagoFix (https://pagofix.com) is provided by [LEGAL NAME OF THE PROVIDER], registry code [REGISTRY CODE], address [ADDRESS], email [CONTACT EMAIL] (‘we’).

2. What PagoFix is and is not

3. Account

4. Your responsibilities

5. Processing of your debtor’s data (art 28 GDPR)

[TO BE APPROVED BY THE PROVIDER: this section is the data processing agreement]

This section is the contract between you (controller) and us (processor) required by art 28(3) GDPR. By saving a case you accept it; it is concluded electronically, which art 28(9) GDPR allows.

  1. Subject, nature and purpose. We store the cases you save and use them to show your cases, plan and claim, to prepare letter and Form A drafts and calendar files, and to keep your account log.
  2. Duration. As long as the case or the account exists; for unused accounts see the privacy notice.
  3. Types of data. Names, addresses, email addresses, VAT and registry numbers, invoice data and amounts.
  4. Data subjects. Your debtors (if natural persons) and their contact persons, and people named in your own details (for example the sender of the letter).
  5. Instructions. We process the data only on your documented instructions: your use of PagoFix’s features and these terms. If we think an instruction infringes data protection law, we tell you at once.
  6. Confidentiality. Only people bound by a confidentiality obligation have access to the data, and only as far as needed to run the service.
  7. Security (art 32 GDPR). Encrypted connections (HTTPS), the data can be opened only after signing in to your account, sign-in tokens are stored only as hashes, and the database is located in Cloudflare’s EU jurisdiction.
  8. Other processors. You give us general written authorisation to use the processors listed in section 6 of the privacy notice. We will announce any change there and in your account in advance; if you object, you can export and delete your data before the change takes effect. We impose the same data protection obligations on them. [TO CHECK: agreements with Cloudflare and Resend]
  9. Help with data subject requests. You can view, correct, export and delete the data yourself in your account. If a data subject contacts us, we forward the request to you where we can identify you.
  10. Help with your other obligations (art 32–36 GDPR). We tell you without undue delay after becoming aware of a personal data breach that affects your data, and give you the information we have.
  11. End of processing. When you delete a case or your account, the data is deleted at once; you can download it first. Restore points of the database expire within 7 days.
  12. Demonstrating compliance. On request we give you the information needed to show that we meet these obligations.

6. Price, availability and liability

7. Changes, law and disputes

We publish changes to these terms here with a new date and tell signed-in users about important changes in their account. [APPLICABLE LAW AND COURT: to be decided by the provider]

Privacy · Terms