Privacy policy

ClickDirectPay takes data privacy very seriously and adheres strictly to the rules of data protection laws. Personal data is collected on this website only for technical purposes. Under no circumstances shall these data be sold or otherwise transferred to third parties.

Collection, storage and processing of data
ClickDirectPay collects the following data of the participant:

  • IP address of the participant;
  • access data of the participant;
  • date and time;
  • This consists of inventory data and usage data.
  • ClickDirectPay shall be entitled to log connections and their contents and inspect the logs thereafter. No transfer of records to third parties shall be allowed unless mandatory legal regulation demand such disclosure or this serves the assertion of claims under this User Agreement.

Providers placing ads on this website can send the so-called cookies and/or web beacons, which may be saved in your browser. These can be read from the respective providers and are primarily committed to improving particular services. Should you wish to delete any data stored in your browser or prevent future storage, please contact the support service for your web browser.

Disclosure of your information
ClickDirectPay shall not share your personal details with anyone. Unless ClickDirectPay is so mandated by law or court order, your data shall only be disclosed authorized state institutions and authorities.

Amendments to this Privacy Policy
ClickDirectPay shall be entitled to amend these security and data protection measures if this is necessary due to technological development. In these cases, we shall update our privacy policy accordingly. Please read the most current version of our Privacy Policy.

Web analysis with Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc. (Google). Google Analytics uses cookies, i.e. text files stored on your computer to enable analysis of website usage by you. Information generated by the cookie about your use of this website is usually transmitted to a Google server in the United States and stored there. In case of activated IP anonymization on this website, however, your IP address is previously truncated by Google within member states of the European Union or in other states which are party to the agreement on the European Economic Area. Only in exceptional cases is a full IP address transmitted to a Google server in the United States and truncated there. On behalf this website's owner, Google will use this information to evaluate your use of the website, compile reports about website activities, and provide the website's operator with further services related to website and Internet usage. The IP address sent from your browser as part of Google Analytics is not merged with other data by Google. You can prevent storage of cookies by appropriately setting your browser software; in this case, however, please note that you might not be able to fully use all functions offered by this website. In addition, you can prevent data generated by the cookie and relating to your use of the website (including your IP address) from being collected and processed by Google, by downloading and installing a browser plug-in from the following link:

With this privacy notice, GH Capital Inc. is letting you know about the personal data collected, processed, and used when you use the ClickDirectPay transfer service.

What is ClickDirectPay?

By initiating a ClickDirectPay transfer, you authorize us to conduct check automated checks to determine if your account balance will cover the transfer amount and if you have had any successful ClickDirectPay transfers in the past 30 days. Once this check is passed, we will electronically transmit your bank transfer authorization to your bank and notify your selected payees (online vendors) that the transfer has been successfully authorized. The online vendor thus receives confirmation that your online transfer has been authorized without having to obtain data about your credit rating or having to store your bank information. This allows the online vendor to provide the service or delivery immediately with confidence.

What do we check and what personal data do we collect?

Depending on how your bank structures its online accounts, different steps are necessary to conduct these checks. Some banks accept transfer orders only if a corresponding amount to cover the transaction is already on hand. If this is the case, we will not perform a check of your account balance. In other cases, we will check if your account balance and overdraft line of credit are sufficient to cover the transfer amount. This does not yet initiate a debit from your account ("pending transfers").
For transfers with an increased risk of fraud, we also check if ClickDirectPay transfers from your account were successful within the past 30 days. If records of such transfers are stored in our system, we will check whether the transactions actually posted (e.g. by comparing the amount and purpose line).
We collect the necessary data for these tests online. In so doing, we can sometimes use your bank's specific software interfaces (e.g. according to the HBCI standard for electronic banking). Alternatively, our system automatically retrieves the data from the user interface of your online banking access, just as if you had logged in yourself. If you manage multiple accounts over your online banking access, our software shows you the available checking accounts to choose from. We do not use or store information about accounts not selected, especially the account number and their respective balances.

When and to whom do we forward personal data?

To process your order, we forward the data displayed in the transfer form upon approval to your bank. We do not store your PIN and TAN, instead only using them to access your bank directly via an encrypted connection that meets banking standards The online vendor is notified that your transfer has been successfully authorized. This includes only the data from the transfer form (name, account number, routing number, subject, transfer amount) and the date (including time) and the transaction identification code (order number) chosen by the online vendor. For SEPA credit transfers and for transfers requiring BIC and IBAN, the online vendor will also be supplied with your BIC and IBAN. This data is also generally available to the vendor on their bank statements. No other personal data will not be transmitted to the online vendor. In the event the transfer does not go through, online vendors are not provided with the reason nor can they find out about it. In this case, you will be redirected to the checkout page where you can choose another payment method offered by the vendor.

What personal data do we store and for how long?

To provide online vendors with account statements and to comply with legal retention requirements, we store your name, account number, BIC, subject, date and amount of transfer. For SEPA credit transfers and for transfers requiring BIC and IBAN, we also store your BIC and IBAN for the statutory retention periods. We also use this data for 30 days when processing subsequent ClickDirectPay transfers as part of the checks we conduct as described above. The data retrieved for examination of account coverage and earlier ClickDirectPay transfers are used by us only for the real-time checks described above. We do not store any further personal data, in particular any account balances, sales data, credit limit, account lists, online banking login information (login information / PIN) or TANs.

What happens in the case of failed transfers?

If we become aware that, despite our prior positive check, a ClickDirectPay transfer has not received by the payee (e.g. the vendor subsequently makes an inquiry about it), we will notify you at the latest by the time we attempt to run the transfer through a second time. Until this matter is resolved, we will accept no further transfer requests from you and/or corresponding online banking access.

Which cookies are employed?

Cookies are small text files that are stored on your computer in order to make visiting our website more user-friendly. In our payment form, we use a language selection cookie that stores the user's language preference, so that it is preselected upon the next visit to our payment form. The language selection cookie has a lifetime of 6 months. In addition, we use a bank selection cookie, which saves the most recently chosen sender's country and banking interface (by means of the bank routing number and log-in method [e.g. www or HBCI]). By using this cookie, you can be taken directly to the log-in area inside our protected payment form upon your next use of a ClickDirectPay transfer without having to reselect your country and bank. The bank selection cookie has a lifespan of one year. All cookies are only visible to our server, not for other websites that you visit later. You can disable the storage of cookies in your browser, limit the storage to specific websites, or adjust your browser so that it notifies you as soon as a cookie is stored. You can also delete cookies from your computer retroactively.

To whom can I turn?

If you have questions regarding data protection with ClickDirectPay transfers or wish to know what information we hold about you, please contact

Follow us: