Data Protection

(1) Operators of payment systems and payment service providers may process personal data insofar as this is necessary to prevent, investigate and detect payment fraud.
(2) Payment service providers may process the personal data necessary to provide their payment services only with the explicit consent of the payment service user.
(3) The data protection provisions on the processing of personal data must be observed.