2.1 After concluding the merchant agreement or the factoring and service agreement with RBI, we will create a user account (“account”) for you in the Merchant Portal at
https://partnerportal.cashpresso.com. 2.2 In particular, the following data will be processed: merchant name, personal master data (first name, surname) of a representative of the merchant, telephone number, e-mail address of the merchant. 2.3 Once the account has been set up, you will have access to the Merchant Portal, where you can view, use and manage the services described in section 1.2. Once your account has been set up in accordance with section 2.1, we will create an admin user for you, who will be notified of the account setup via the email address provided. The setup of your account is completed by means of two-factor authentication via the telephone number stored in the account and a request to change the one-time password. 2.4 You use the email address and your (changed) password to identify yourself to Credi2 and RBI as an authorised merchant. You will be granted access to the Merchant Portal once you have (a) submitted your email address and password, (b) these details have been verified and you have been granted access, and (c) your access has not been blocked. 2.5 If personal data is processed in connection with the use of the Merchant Portal, you will find all information on the personal data processed within the meaning of Article 13 of the General Data Protection Regulation ( "GDPR ") at
https://www.rbinternational.com/de/raiffeisen/legal/datenschutz.html and in the dealer merchant agreement or in the factoring and service agreement. 2.6 If personal data of the merchant's customers is processed in the Merchant Portal, the merchant must ensure that the customers give their prior consent to such data processing or ensure that there is another legal basis for data processing that complies with data protection regulations. 2.7 You are obliged to provide truthful access data and to keep it up to date at all times. You must notify us of any changes immediately by changing the access data in your account. 2.8 You are obliged to treat your access data – in particular your account password – as confidential; disclosure to third parties is prohibited. Please note that you are liable for damages resulting from a culpable breach of this confidentiality obligation in accordance with the statutory provisions. 2.9 If you do not provide your access data completely or correctly, or if you do not update changed access data immediately, we may refuse registration at any time or block your account. Furthermore, we reserve the right to refuse registration at any time without giving reasons, or to withdraw a registration that has been granted and terminate the account.