This clause describes NADER GAS’s respective obligations when handling and storing information connected with the Nader Gas Products and  Services. The following terms used in this section relate to data provided to NADER GAS by the Merchant or the Account Holders, or received or accessed by the Merchant through the Merchant’s use of the Nader Gas Products and Services:

“Data Subject” the individual, the entity or the Account Holder who is the owner of the Data.

“Personal Data” means information that identifies a specific living person (not a company, legal entity, or machine) and is transmitted to or accessible through the Nader Gas  including, but not limited to, name, postal address, email address, telephone number, date of birth, Passport and ID number (or its equivalent), driver’s license number, account information (including, but not limited to, financial and payment card account information), PIN, Internet Protocol (IP) address, or any other unique identifier or one or more factors specific to the individual’s physical, physiological, mental, economic or social identity, whether such data is in individual or aggregate form and regardless of the media in which it is contained.

“User Data” means information that describes the Merchant’s business and its operations, products or services, and orders placed by an Account Holder.

“Payment Data” means payment account details, information communicated to or by Financial Services Providers, financial information specifically regulated by Laws, and any other information used with the Nader Gas Products and Services to complete a Payment Transaction.

“NADER GAS Data” means details of the API transactions over NADER GAS infrastructure, information used in fraud detection and analysis, aggregated or anonymized information generated from Data, and any other information created by or originating from NADER GAS or the Nader Gas Products and Services.

The term “Data” used without a modifier means all Personal Data, User Data, Payment Data, and NADER GAS Data.

“Process” or “Processing” means any operation or set of operations performed upon Data, whether or not by automatic means, such as analyzing, reviewing, manipulating, creating, collecting, procuring, obtaining, accessing, recording, organizing, storing, transferring, adapting, altering, retrieving, consulting, using, disclosing or destroying the Data.

NADER GAS Processes, analyses, and manages Data to: (a) provide Nader Gas Products and Services to the Merchant, other NADER GAS users, and Account Holders; (b) mitigate fraud, financial loss, or other harm to users, Account Holders and NADER GAS; and (c) analyse, develop and improve NADER GAS’s products, systems, and Equipment. NADER GAS provides Data to third-party service providers, including Financial Services Providers and their affiliates, as well as Nader Gas and global affiliates, to allow us to provide the Nader Gas Products and Services to the Merchant and other Account Holders.

NADER GAS may provide any Personal Data to Nader Gas to market Nader Gas and their products to the Merchant and/or the Account Holders. Merchant understands and consents to NADER GAS’s use of Data for the purposes and in a manner consistent with this clause 19.

19.2 Notwithstanding clause 15 above, NADER GAS will only use User Data as permitted by this Agreement, by other agreements between the Merchant and NADER GAS, or as otherwise directed by the Merchant. The Merchant will protect all Data the Merchant receives through the Nader Gas Products and Services, and the Merchant may not disclose or distribute any such Data, and Merchant will only use such Data in conjunction with the Nader Gas Products and Services and as permitted by this Agreement or by other agreements between the Merchant and NADER GAS. The Merchant may not use any Personal Data to market to Customers unless it has received the express consent from a specific Customer to do so. The Merchant may not disclose Payment Data to others except in connection with processing Transactions requested by Customers and consistent with applicable Laws and network rules.