Apply for Maksu
Declaration
By proceeding with this onboarding process:
I confirm that I am duly authorized to act on behalf of the Applicant Merchant and to provide information and documentation relating to the Applicant Merchant, its directors, shareholders, ultimate beneficial owners, authorized representatives, and other relevant persons where applicable.
I confirm that all information and documentation submitted during this onboarding process is true, accurate, complete, and not misleading to the best of my knowledge.
I acknowledge that Maksu may collect, process, store, transfer, retain, and verify personal and corporate information for the purposes of merchant onboarding, customer due diligence, identity verification, fraud prevention, sanctions screening, risk assessment, regulatory compliance, ongoing monitoring, and the provision of payment services.
I understand that Maksu may share information with affiliated companies, acquiring partners, payment schemes, regulators, auditors, compliance providers, identity verification providers, fraud prevention providers, banking partners, and other authorized service providers where necessary for these purposes.
I acknowledge that personal data will be processed in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (GDPR).
Providing false, inaccurate, misleading, or incomplete information may result in rejection of the application, suspension or termination of services, reporting to relevant authorities, or other actions required under applicable laws and regulations.
Privacy Notice
Maksu Merchant Onboarding Privacy Notice
1. Introduction
Maksu GmbH ("Maksu", "we", "our", or "us") is committed to protecting the privacy and personal data of merchant applicants and related individuals.
This Merchant Onboarding Privacy Notice explains how Maksu collects, processes, stores, shares, and protects personal and corporate information submitted during the merchant onboarding process, including information relating to merchants, directors, shareholders, ultimate beneficial owners ("UBOs"), authorized representatives, and other associated persons.
This Notice applies specifically to merchant onboarding, customer due diligence, Know Your Customer ("KYC"), Know Your Business ("KYB"), anti-money laundering ("AML"), counter-terrorist financing ("CTF"), fraud prevention, sanctions screening, risk assessment, and regulatory compliance activities.
2. Data Controller
Maksu GmbH
Millennium Tower, 23rd and 24th Floor
Handelskai 94-96
1200 Vienna, Austria
Email: policy@maksupay.com
Phone: +43 1 4120151
3. Categories of Information We Collect
During the onboarding process, we may collect and process the following categories of information:
Corporate Information
• Company name
• Registration number
• Registered address
• Business activities
• VAT information
• Ownership structure
• Corporate group information
• Merchant website information
• Expected transaction volumes
Personal Information
• Full name
• Date of birth
• Nationality
• Country of residence
• Email address
• Telephone number
• Position within the organization
Identification Information
• Passport copies
• National identity cards
• Residence permits
• Driver's licenses (where applicable)
Address Verification Information
• Utility bills
• Bank statements
• Government correspondence
• Other proof of address documents
Corporate Documents
• Registry extracts
• Certificates of incorporation
• Shareholder registers
• Articles of association
• Organizational charts (organograms)
• Supplier agreements
• Business contracts
• Beneficial ownership documentation
Financial Information
• Corporate bank account details
• Bank statements
• Source of funds information
• Source of wealth information (where applicable)
Technical Information
• IP address
• Device information
• Browser information
• Login history
• Audit logs
• Consent records
4. Purposes of Processing
We process personal and corporate information for the following purposes:
• Merchant onboarding
• Identity verification
• Customer due diligence (CDD)
• Enhanced due diligence (EDD)
• Know Your Customer (KYC)
• Know Your Business (KYB)
• AML and CTF compliance
• Sanctions and PEP screening
• Fraud prevention and detection
• Risk assessment
• Regulatory reporting
• Provision of payment services
• Ongoing merchant monitoring
• Internal audit and compliance reviews
• Legal and regulatory obligations
5. Legal Basis for Processing
Maksu processes personal data under one or more of the following legal bases:
Performance of Contract
Article 6(1)(b) GDPR
Where processing is necessary to evaluate, establish, or manage a commercial relationship with the merchant.
Legal Obligation
Article 6(1)(c) GDPR
Where processing is required by applicable anti-money laundering, payment services, financial crime, sanctions, accounting, or regulatory obligations.
Legitimate Interests
Article 6(1)(f) GDPR
Where processing is necessary to protect Maksu, its customers, partners, payment schemes, and financial systems against fraud, abuse, financial crime, and operational risk.
6. Sharing of Information
Maksu may share information with:
• Payment schemes (including Visa and Mastercard)
• Acquiring partners
• Banking partners
• Regulatory authorities
• Financial intelligence units
• Auditors
• External legal advisers
• Compliance service providers
• Identity verification providers
• Fraud prevention providers
• AML and sanctions screening providers
• Merchant onboarding technology providers
• Group companies and affiliates
Information will only be shared where necessary and lawful.
7. Automated Processing
Maksu utilizes technology solutions, including AI-assisted onboarding and verification tools, to facilitate the collection, validation, classification, and review of information and documentation submitted during onboarding.
Final onboarding decisions are subject to review by authorized Maksu personnel and are not based solely on automated decision-making.
8. Data Retention
Information collected during onboarding will be retained for the duration of the business relationship and thereafter for the period required by applicable legal and regulatory obligations.
Where required under anti-money laundering legislation or regulatory requirements, information may be retained for up to ten (10) years following the end of the business relationship.
Rejected applications may also be retained where necessary for fraud prevention, audit, legal, regulatory, or compliance purposes.
9. International Transfers
Where necessary, information may be transferred outside the European Economic Area ("EEA") to service providers, partners, or authorities.
Where such transfers occur, Maksu will implement appropriate safeguards in accordance with Chapter V of the GDPR.
10. Your Rights
Subject to applicable law, individuals whose personal data is processed may have the following rights:
• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object
• Right to lodge a complaint with a supervisory authority
Requests may be submitted to policy@maksupay.com.
11. Updates
Maksu may update this Merchant Onboarding Privacy Notice from time to time to reflect operational, regulatory, or legal changes.
The latest version will always be made available through the merchant onboarding portal.
Last Updated: 03 June 2026
Version: 1.0
