PRIVACY NOTICE – EXCHANGE MONEY SERVICE ACTIVATION REQUEST
(pursuant to the GDPR – EU Regulation 2016/679)
This privacy notice describes how EXCHANGE MONEY SRLS processes the personal data provided by data subjects through the online form “EXCHANGE MONEY Service Activation Request”, intended to express interest in activating the currency exchange service at one or more operational locations.
1. Data Controller
EXCHANGE MONEY SRLS
VAT No.: 03844040836
Registered Office: Via Catania, 200 – Messina, Italy
Contact email: mailbox@exchangemoney.it
2. What data we process
We process the data entered in the form and, if applicable, those included in any subsequent contact messages. In particular:
a) Business / agency details
- Type of business
- Business name / trade name
- Company name (if different)
- VAT number
- Tax code
- Region
- Address of the main operating headquarters
- Type of establishment / main business activity
- Number of additional locations involved
b) Applicant’s details and contacts
- First and last name
- Role (owner / legal representative / partner / other)
- Phone number
- Contact email address
c) Information useful for evaluating the request
- Previous experience in currency exchange activities
- Training in anti-money laundering regulations
- Source channel (word of mouth, social media, Google, other)
- Type of potential clientele (max 3 choices)
- Estimated number of weekly transactions
- Peak demand periods
- Desired timeframe for starting the activation
d) Data for commercial communications (optional)
- Preferred contact channel (email, phone, WhatsApp, SMS)
- Marketing consents
3. Purposes of processing and legal bases
3.1 Management of the activation request and follow-up contact
To receive, manage and evaluate the request, contact you again, schedule calls or meetings, send information about the project and initiate any onboarding process.
3.2 Feasibility assessment and network organization
To assess the operational feasibility of the activation, organize network flows and prevent inconsistent or abusive requests.
3.3 Security, abuse prevention and protection
To ensure IT security, prevent fraud or abuse and protect the Controller’s rights.
3.4 Commercial and promotional communications (optional)
Only with prior explicit consent, for sending communications about news, updates, offers and invitations to calls or events.
4. Nature of data provision
Provision of the mandatory data is necessary for managing the request. Marketing consent is optional.
5. Methods of processing and security measures
The data are processed using electronic and paper-based tools, adopting appropriate security measures and in compliance with the principles of data minimization and confidentiality.
6. Data recipients
The data may be processed by authorized personnel of EXCHANGE MONEY SRLS and by suppliers appointed as Data Processors. They may be disclosed to the competent authorities in cases provided for by law.
7. Transfers to countries outside the EEA
Any transfers will take place in compliance with the GDPR, through appropriate safeguards.
8. Data retention periods
- Requests not activated: up to 24 months from the last interaction.
- Contractual relationship: in accordance with the provisions set out in the privacy documentation attached to the contract.
9. Data subject’s rights
The data subject may exercise the rights of access, rectification, erasure, restriction, objection and data portability, as well as withdraw marketing consent.
E-mail: privacy@exchangemoney.it
Suggested subject: “Privacy Request – Agent Activation”
10. Automated decision-making
The data are not used for decisions based solely on automated processing.
11. Updates
This privacy notice may be updated. The most recent version is always available on this page.
