Logo Prismapay
Prisma

Services

Benefits

Prisma

English
Español
English
Español

Benefits

Agile. Secure. Reliable.

Fintech built to grow with you – greater control, greater efficiency and less friction.
Contact us
Automate payments and create fast, intuitive experiences in any digital environment. Our API makes it easy to integrate payments into your app, platform or marketplace, giving you total control and complete security.
Create unique or virtual IBANs to manage large payment volumes according to your clients’ needs.
Easily synchronise your payments via webhooks.
Clear, detailed reports that ensure you maintain complete control over your transactions and regulatory obligations.
Seamlessly integrate your operations via API and unlock all our features.
Track collections and payments in real time and streamline your treasury management.
Access and manage your operations from your mobile, your computer or directly via our API.
Identity verification, continuous monitoring and compliance with European regulations through robust systems like OTP, SCA and HTTPS.

Agile.
Secure.
Reliable.

Fintech built to grow with you – greater control, greater efficiency and less friction.
Contact us
automate payments and create fast, intuitive experiences in any digital environment. Our API makes it easy to integrate payments into your app, platform or marketplace, giving you total control and complete security.
Create unique or virtual IBANs to manage large payment volumes according to your clients’ needs.
Easily synchronise your payments via webhooks.
Clear, detailed reports that ensure you maintain complete control over your transactions and regulatory obligations.
Seamlessly integrate your operations via API and unlock all our features.
Track collections and payments in real time and streamline your treasury management.
Access and manage your operations from your mobile, your computer or directly via our API.
Identity verification, continuous monitoring and compliance with European regulations through robust systems like OTP, SCA and HTTPS.

Partners

Microdoft
Corpay
Visa
Comply Advantage
Slack
Tuum
Google
Orenda
Tribe
Parallel
Andersen Legal

Partners

Microdoft
Corpay
Visa
Comply Advantage
Slack
Tuum
Google
Orenda
Tribe
Parallel
Andersen Legal

Discover the potential
of partnering with Prisma

Let’s shape the future of payments together.
Get in touch to learn more about ways in which we can work together.

Contact us
  • © 2025 Prisma Payments EP SA, All rights reserved.

SERVICES

Services

Privacy Policy

Responsible: PRISMA PAYMENTS EP SA.

Purpose: The attention of requests of various kinds by the User or holders of the data (hereinafter, “User”).
Legitimation: Consent of the data subject.
Rights: Access, Rectify and Delete Data, as well as other rights, as explained in the Additional Information.
Additional information: Please refer to the Additional and Detailed Information on Data Protection.

This Privacy Policy regulates the processing of personal data provided by the User through the Internet portal (hereinafter, the “Portal”) that is made available to Internet users. This Policy is an integral part of the Legal Notice accessible at all times from the Portal.

The User guarantees that the data provided are true, accurate, complete and updated, being responsible for any damage or prejudice, direct or indirect, that could be caused as a result of the breach of such obligation. In the event that the data provided belong to a third party, the User guarantees that he/she has informed said third party of the aspects contained in this document and obtained his/her authorization to provide his/her data for the aforementioned purposes.

In order to offer information or services of interest based on the User’s location, data related to the geolocation of the User’s device may be accessed, in those cases in which the user’s configuration to that effect so permits.

For the purposes of technical security and system diagnostics, in anonymized or aggregated form, the IP address (Internet access identification number of the device, which allows devices, systems and servers to recognize and communicate with each other) may be recorded. This information may also be used for web performance analysis purposes.

1. Contact information
Web: https://prismapay.com
Company Name: PRISMA PAYMENTS EP SA.
Registered Office: Calle de Leganitos 47, 9th floor (Madrid), 28013.
Phone: +34 91 787 62 00

2. Who is responsible for the processing of your personal data?

Your personal data will be processed by PRISMA PAYMENTS EP SA. and address at Leganitos nº47 9ª (Madrid), 28013, with e-mail address dpo@prismapay.com.

3. What is the purpose of the processing of your data and our legitimacy for it?

The information provided by the User is processed in order to respond to requests of various kinds made by the User. Depending on the nature of the request, the purpose will pursue the management of inquiries and requests for proposals (RFP) sent through the contact form provided for this purpose, requests for registration in training, information of any course, webinar, electronic communications of an informative nature, according to their interests. a commercial profile may be developed, based on the information provided. No automated decisions will be made based on this profile.
In the event that the User aggregates his or her data, only the User’s personal data to which he or she has consented during the access configuration will be accessed. Any information provided in connection with such social applications may be accessed by members of the relevant social network, such interactions will be governed by the privacy policies of the entities providing the services.
The express consent given by the owner constitutes the legal basis for the aforementioned processing. In each of the communications received, you may unsubscribe from such mailings through the mechanism provided for that purpose. The criterion of data conservation will be based on the contrary manifestation to the treatment on their part. In any case, you may exercise your rights of access, rectification, opposition, deletion, portability and limitation of treatment, as well as raise any questions regarding the processing of your personal data via email dpo@prismapay.com

To contact the Data Protection Delegate, you can go to the same e-mail address. Data subjects may also file a complaint, in case of dissatisfaction in the exercise of their rights, before the Spanish Data Protection Agency, through its electronic headquarters by means of the electronic procedure for filing complaints.

4. What is the legitimacy for the processing of the User’s personal data?

The legal basis for the processing of data is the legitimacy of the User’s consent.

5. How long will we keep your personal data?

We will keep your personal data as long as they are necessary for the development of the requested service. After this period the data will be deleted in accordance with the provisions of the data protection legislation and other applicable regulations, which implies its blocking, being available only at the request of Judges and Courts, the Public Prosecutor or the competent Public Administrations during the limitation period of the actions that may arise to be subsequently eliminated.

In general, the personal data provided will be kept for the time necessary to fulfill the User’s request or as long as their deletion is not requested by the User.

6. To whom do we disclose your personal data?

The data may be transferred to public administrations and agencies for the fulfillment of obligations directly enforceable against us.

7. Are there any International Data Transfers?

There are no international data transfers, except in the case of a judicial request.

What are your rights and how can you exercise them?

The User has the right to obtain confirmation of how we treat personal data concerning him/her, as well as to access his/her personal data, request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, the User may request the limitation of the processing of their data, in which case they will only be kept for the exercise or defense of claims.

In certain circumstances and for reasons related to his or her particular situation, the User may object to the processing of his or her data. In this case, the processing of the data will cease, except for compelling legitimate reasons, or the exercise or defense of possible claims.

The User may exercise the right to the portability of his/her data, in a structured, commonly used and machine-readable format, and to transfer it to another data controller. Such action may entail a reasonable fee to be paid by the User, depending on the administrative costs incurred in fulfilling the request, in accordance with the regulations.

In other words, our data protection regulations give you a series of rights in relation to the data processing involved in our services, which can be summarized as follows:

Right of access: you have the right to know what type of data we are processing and the characteristics of the processing we are carrying out.
Right of rectification: you may request the modification of your data if it is inaccurate or not truthful.
Right of portability: you can obtain a copy in an interoperable format of the data being processed.
The right to the limitation of the treatment in the cases included in the Law.
Right of erasure: you may request the erasure of your data when the processing is no longer necessary.
Right of opposition: you may request the cessation of the sending of commercial communications in the terms indicated above.
Right to revoke the consent given.
You can exercise your rights by e-mail to dpo@prismapay.com or by postal communication to the address Leganitos 47 9ª, 28013 Madrid (Spain), indicating the right to be exercised and attaching your ID card or similar identification documentation. You also have the right to lodge a complaint with the supervisory authority (in Spain, the Spanish Data Protection Agency).

What cookies does the website use?

The website uses storage devices, cookies, as well as similar technologies. For more information about cookies and these technologies, please see the Cookie Policy.

* Last updated on November 08, 2024

Cookies Policy

This Cookie Policy will be permanently accessible through a link located on the Portal.

BY ACCEPTING THE USE OF COOKIES, THE USER CONSENTS TO THE DOWNLOADING OF COOKIES AND/OR SIMILAR TECHNOLOGIES ON THE DEVICE IF THE CORRESPONDING OPTION IS ENABLED.

This Cookie Policy regulates the use of data storage and retrieval devices through the Internet portal accessible through https://prismapay.com (hereinafter, the Web) made available to Internet users. This Policy is an integral part of the Legal Notice accessible at all times from the Portal.

In the initial access to the Portal the user is informed, through the banner published on the same, of the use of cookies and similar technologies, such as pixel tags web beacons (hereinafter referred to collectively as cookies), indicating the main purposes and the concurrence of third parties responsible. When the User starts browsing the Portal, he/she has the possibility to accept the use of cookies, as well as the option to configure them. In any case, the User will be able to modify at any time the configuration of his browser according to his preferences.

Additionally, the Cookies Policy is made available to the User in order to expand and detail the information regarding (i) what a cookie is, (ii) types of cookies used in the Portal and (iii) how to manage them, according to the configuration panel, the characteristics of your browser and the device used to browse the Portal.

1. What are cookies?

A cookie is a small file containing information relating to multiple variables, such as, for example, the number of times the page has been visited by the user, identifying the registered user, guaranteeing the user’s session while browsing the page, allowing operations to be carried out in a secure and stable manner, etc. These files are stored in the User’s terminal, through the browser, and communicate with web pages to personalize navigation based on the information provided.

In addition to cookies, other technologies are also used, such as, for example, pixel tags, which make it possible, by means of electronic images, usually of minuscule size, to count page views or access cookies. The pixel tags used do not collect, monitor or share personal information of the user, having a mere analytical technical function of anonymous character. Another example of these technologies is web beacons, which are used to collect certain information such as IP addresses, time of content display, browser type or cookies previously installed on the server.

The cookies used on the Portal themselves do not reveal personal information. Their analytical purpose uses identifiers, including IP, for the sole purpose of identifying the number of unique visitors to the website, their geographic origin or their web usage trend, but they do not personally identify the User.

2. Types of cookies

Below, we provide information about the type of cookies used on our website:

2.1. According to the entity that manages them

Depending on the entity managing the domain from which the cookies are sent and treat the data obtained, we can distinguish:

Own Cookies: These are those that are sent to the user’s terminal equipment from domains managed by THE WEBSITE.

Third-party cookies: These are those that are sent to the user’s terminal equipment from a computer or domain that is not managed by the editor, but by another entity.

2.2. According to the length of time they remain activated in the terminal equipment

Session Cookies: These are a type of cookies designed to collect and store data while the user accesses the Portal. As their name suggests, these cookies are stored on your terminal until the end of the user’s browsing session.

Persistent cookies: These are a type of cookie in which the data remains stored in the terminal and can be accessed and processed for a period defined by the party responsible for the cookie, and can range from a few minutes to several years.

2.3. According to their purpose

Strictly necessary Cookies: These are those that allow the user to navigate through the Portal and the use of the different options or services that are available such as, for example, control traffic and data communication, identify the type of browser, identify the session, access restricted areas, use the services made available to the User, use security features while browsing, identify user preferences or share content through social networks. These types of cookies improve the user experience by optimizing performance based on the information collected.

Targeted Cookies: are those that allow the management, in the most effective way possible, of the advertising spaces included in the Portal. These cookies store information on user behavior obtained through the continuous observation of their browsing habits, which allows the development of a specific profile to display advertising based on this.

Performance cookies: these are a type of cookies designed and used for monitoring and analyzing user behavior. This type of cookies offer the owner of the page the measurement of activity on the website through aggregate or statistical information. The Portal uses analytical, own and third party, session and persistent cookies for this purpose.

Functionality Cookies: are those that allow remembering information for the user to access the service with certain features that can differentiate their experience from that of other users, such as, for example, the language, the number of results to display when the user performs a search, the appearance or content of the service depending on the type of browser through which the user accesses the service or the region from which you access the service, etc..

Preferences regarding the use of this type of cookies, advertising and analytical, can be defined through the configuration panel accessible at any time from the Portal.

3. Who uses cookies?

The information collected through cookies downloaded from the Portal is used by the owner of the website and sometimes by third parties. All information regarding who uses cookies can be obtained in the cookie settings panel accessible at any time from the Portal.

4. Cookie management

The User can set their preferences and configure the use of cookies through the configuration panel accessible through the banner published on the Portal. In any case, the User may modify at any time the configuration and preferences on the use of cookies through the configuration panel accessible from the right side of the page.

Likewise, the User may modify the configuration of his/her browser according to his/her preferences at any time. Taking into account the information provided through this Cookies Policy, information is provided below on how to manage the cookies used in the Portal through the different options offered by the most common browsers (Explorer, Safari, Chrome, Firefox, Opera, Android, Windows, phone and Blackberry).

The configuration of the browser in order to avoid the installation of any cookie may affect the operation of some functionalities of the Portal, as well as the visualization of some contents.

In general, browsers offer the User the possibility of managing the cookies installed by a given website, obtaining information on their duration and the possibility of deactivating, restricting, blocking or deleting them.

The user must modify the configuration of the browser used on their terminal (computer, smartphone or tablet). In general, browsers offer the following configuration options in relation to the installation of cookies:

That the browser rejects all cookies and, therefore, that no cookie from any web page is installed on the user’s terminal. That the browser warns you before the installation of the cookie so that the user can decide whether or not to accept the installation of this. That the browser only rejects third-party cookies from the websites you visit, but not those used by the website through which the user browses.
The option of browsing in private mode whereby cookies are installed on the terminal, but are automatically deleted when you finish browsing the website.
Below are links to the information on cookie management provided by the main browsers:

Internet Explorer™.
Safari™
Google™
Firefox™
Android™
Windows Phone™
5. Information about TID

The User can find out about the International Data Transfers (IDT) to third countries that, if applicable, are carried out by the third parties identified in this cookie policy in their corresponding policies.

Legal Notice

The present provisions regulate the use of the Internet portal service (hereinafter, the ‘Portal’) that PRISMA PAYMENTS EP SA. (hereinafter, PRISMA) makes available to Internet users.

PRISMA, with registered office at Calle Leganitos 47 9ª Planta, 28013 Madrid, Spain and C.I.F. number A-85785905, is registered in the Mercantile Registry of Madrid, Volume 27111, Folio 157, Section 8, Page M-488476, inscription I/A 1º, Telephone: 91 787 62 00 Email: info@prismapay.com.

Access to the website is free of charge except for the cost of the connection through the telecommunications network provided by the access provider contracted by the users.

The use of the website attributes the condition of user of the Portal (hereinafter, the ‘User’) and implies acceptance of all conditions included in this Legal Notice. The provision of the service is limited to the time at which the User is connected to the website or any of the services provided through it. Therefore, the User must carefully read this Legal Notice each time he/she intends to use our website, as it and its conditions of use contained in this Legal Notice may be subject to change.

2. Intellectual and industrial property

All content, including but not limited to text, photographs, graphics, images, icons, technology, software, links and other audiovisual or audio content, as well as graphic design and source codes (hereinafter, the ‘Content’), are the intellectual property of PRISMA, and none of the exploitation rights recognized by current legislation on intellectual property on the same may be understood to be transferred to the User, except those that are strictly necessary for the use of the website.

The trademarks, trade names or distinctive signs, including the Prisma brand, are owned by PRISMA or third parties, without it being understood that access to the website attributes any right over said trademarks, trade names and/or distinctive signs.

3. Conditions of use of the portal

3.1 General

The User undertakes to make proper use in accordance with the Law and this Legal Notice. The User shall be liable to PRISMA or third parties for any damages that may be caused as a result of a breach of this obligation.

It is expressly forbidden to use the website for purposes harmful to property or interests of PRISMA or third parties or in any other way overload, damage or disable the networks, servers and other computer equipment (hardware) or products and applications (software) of PRISMA.

3.2 Contents

The User agrees to use the Contents in accordance with the Law and this Legal Notice, as well as with the other conditions, regulations and instructions. By way of example, the User, in accordance with current legislation, shall refrain from:

a) Reproduce, copy, distribute, make available, publicly communicate, transform or modify the Contents except in cases authorized by law or expressly consented to by PRISMA or by whoever holds the ownership of the exploitation rights, as the case may be.
b) Reproduce or copy for private use the Contents that may be considered as Software or Database in accordance with the current legislation on intellectual property, as well as its public communication or making it available to third parties when these acts necessarily imply the reproduction by the User or a third party.
c) Extract and/or reuse all or a substantial part of the Contents of the Portal.

3.3 Data collection forms

Without prejudice to the provisions of this Legal Notice, as well as the privacy policies accessible from the website of PRISMA and that may be applicable at any time, the use of certain services or requests addressed to PRISMA are conditioned to the prior completion of the corresponding User registration.

All information provided by the User through the existing forms for the above purposes or any other must be truthful. For these purposes, the User guarantees the authenticity of all data provided and will keep the information provided to PRISMA perfectly updated so that it corresponds, at all times, to the real situation of the User. In any case, the User shall be solely responsible for any false or inaccurate statements made and the damages caused to the entity by the information provided.

4. Protection of personal data

For more information about the treatment of your personal data, please refer to the Privacy Policy and the Data Protection Policy, where you will find detailed information.

5. Reporting of activities of an illegal and inappropiate nature

In the event that the User or any other Internet user becomes aware that the Linked Sites refer to pages whose content or services are illegal, harmful, denigrating, violent or contrary to morality may contact PRISMA indicating the following:

a) Personal data of the caller: name, address, telephone number and e-mail address.
b) Description of the facts that reveal the illicit or inadequate nature of the Linked Site.
c) In the case of violation of rights, such as intellectual and industrial property, the personal data of the holder of the infringed right when it is a person other than the communicating party. Likewise, the title accrediting the legitimacy of the holder of the rights and, if applicable, that of representation to act on behalf of the holder when it is a person other than the communicating party must be provided.
d) Express declaration that the information contained in the claim is accurate.

The receipt by PRISMA of the communication provided for in this clause does not imply, according to the provisions of the LSSI, the effective knowledge of the activities and / or contents indicated by the caller.

Likewise, the title accrediting the legitimacy of the holder of the rights and, if applicable, that of representation to act on behalf of the holder when it is a person other than the communicating party, must be provided.

6. Jurisdiction

The relations established between PRISMA and the User shall be governed by the provisions of current Spanish legislation. The User, expressly waiving any other jurisdiction that may correspond to them, shall submit any disputes and / or litigation to the Courts and Tribunals of the city of Madrid.

Data Protection Policy

Why and for what purpose do we process your personal data?

The following are the different purposes for which PRISMA PAYMENTS EP SA:

Treatments made by the contract. They are necessary for the signing of the contract or the provision of the service you request from us.
We will treat your data to inform you about the contracting of products and services, for your contracting, as well as to maintain and fulfill the contract.

In order to fulfill the contract, we may resort to external sources of information, such as newspapers and official gazettes, public registries, resolutions of public administrations, telephone directories, lists of persons belonging to professional associations, official lists for fraud prevention, social networks and the Internet.

Treatments made by your consent. Provided that you have given your consent through the box provided for this purpose in the form that we would make available.
Processing carried out for legitimate interest.
We will treat your data for the development of commercial actions, both general and adjusted to your commercial profile, to offer you products or services similar to those you have already contracted. The commercial actions may be by any means, including electronic means (email, fax, SMS, social networks, mobile applications, etc.).
We will use your information to make observations and recommend products and services. We will consult the information that we have for the management of the services that we lend you or the products that you have contracted or maintained contracted in the last year.
For these purposes, we will only be able to consult information from companies that provide information on solvency, delinquency and, in general, risk indicators, if you have previously given us your consent.

By means of the two (2) previous treatments, we pursue the legitimate interest of offering you the products and services that better adapt to your personal characteristics, as well as better conditions in products or services that you have contracted, or that you may contract in the future.

You may request to object to any of the above processing based on legitimate interest and, where appropriate, exercise your right not to be subject to a decision based solely on automated processing. To do so, you should contact the Data Protection Officer/Privacy Office and explain the reason for your objection.

Processing carried out in order to comply with a legal obligation.
We will process your data to comply with applicable legal and tax obligations, such as the prevention of money laundering and terrorist financing. These treatments will exist even after the termination of the contractual relationship, if necessary.

How do we obtain your data?

We must take into account that no data that does not identify a natural or legal person will be processed. We obtain your data by the following means:

The information you provide to us when you contract and maintain products and/or services with us, either directly or indirectly. Some examples are: through inquiries, transactions, operations or contract applications.
External information sources, such as newspapers and official bulletins, public records, public sources, resolutions of public administrations, official lists for the prevention of fraud, social networks and the Internet, as well as third party companies to which you have given your consent for the transfer of your data to entities. In particular, the data we will process include the following categories: identification data, data concerning your
Consent must be free, informed, specific and unequivocal.

PURPOSES OF TREATMENT

Information about data processing for sending communications:

The express consent given by the owner constitutes the legal basis for the aforementioned processing. In each of the communications received, you may unsubscribe from such mailings through the mechanism provided for that purpose. The criterion of data conservation will be based on the contrary manifestation to the treatment on their part. In any case, you may exercise your rights of access, rectification, opposition, cancellation, portability and limitation of treatment, as well as raise any questions regarding the processing of your personal data via email dpo@prismapay.com.

To contact the Data Protection Delegate, you may write to the e-mail address dpo@prismapay.com. Data subjects may also file a complaint, in case of dissatisfaction in the exercise of their rights, before the Spanish Data Protection Agency, through its electronic headquarters by means of the electronic procedure for the filing of complaints.

How long will we keep the User’s personal data?

In general, the personal data provided will be kept for the time necessary to fulfill the User’s request or as long as their deletion is not requested by the User.

What is the legitimacy for the processing of the User’s personal data?

The legal basis for the processing of data is the legitimacy of the User’s consent.

To which recipients will the User’s personal data be communicated?

In those cases in which the User requests, through the web, service proposals.

Likewise, the data may be transferred to public administrations and agencies for the fulfillment of obligations directly enforceable to PRISMA PAYMENTS EP SA.

What are the User’s rights when providing us with personal data?

The User has the right to obtain confirmation as to whether PRISMA PAYMENTS EP SA. processes personal data concerning him/her, as well as to access his/her personal data, request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, the User may request the limitation of the processing of their data, in which case they will only be kept for the exercise or defense of claims.

In certain circumstances and for reasons related to his or her particular situation, the User may object to the processing of his or her data. PRISMA PAYMENTS EP SA. will cease processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.

The User may exercise the right to the portability of his/her data, in a structured, commonly used and machine-readable format, and to transfer it to another data controller. Such action may entail a reasonable fee to be paid by the User, depending on the administrative costs incurred in fulfilling the request, in accordance with the regulations.

The User may raise any questions he/she may consider in relation to this Policy as well as exercise his/her rights under the terms provided for by law by sending a letter by post to: PRISMA PAYMENTS EP SA, Calle Leganitos 47 9th floor, 28013 Madrid, Spain, or e-mail to: dpo@prismapay.com, indicating the corresponding request and accompanied by a copy of the ID card or document proving identity.

In case of not obtaining satisfaction in the exercise of your rights, you may file a complaint with the Spanish Data Protection Agency through its electronic headquarters, by filing a claim for the protection of rights.

Code of Conduct

At Prisma Payments, EP, S.A. (hereinafter, “Prisma”), we aspire to become a benchmark in our industry. We firmly believe that achieving this ambitious collective challenge and our business objectives must be based on building and maintaining strong trust relationships with all individuals and entities that are part of our ecosystem: shareholders, investors, employees, collaborators, clients, suppliers, public institutions, and society in general.

Our work must be founded on our absolute commitment to business ethics. Responsibility, integrity, and honesty are the pillars of our corporate culture and must guide our decisions and conduct at all times.

For this reason, at Prisma, we adopt a zero-tolerance policy towards any behaviour that violates our ethical principles or breaches applicable laws. This commitment concerns each and every one of us within this organization, from the members of the Board of Directors to each employee or collaborator. Ethics must take precedence over any other priority, and we must strive to set an example of conduct for our colleagues as well as for all individuals and institutions that place their trust in us.

With this purpose in mind, we present Prisma’s Code of Conduct (hereinafter, the “Code of Conduct”), approved by the Board of Directors. This document outlines our obligations, rules, and guidelines for conduct, reflecting our values, which must guide our daily actions. Its goal is to serve as a reference in our internal and external relationships, as well as to detect and prevent any conduct that may be ethically or legally questionable.

This Code of Conduct is mandatory for all members of Prisma’s organization, and we trust that each of us is committed to respecting and ensuring compliance with the rules set forth therein. In this regard, the members of the Board of Directors wish to express our full adherence to these principles and our firm commitment to their enforcement.

This Code of Conduct is a key tool in consolidating our ethical culture and strengthening trust that allows us to continue advancing. We count on you for its compliance.

PDF Code of Conduct

Internal Information System Policy

Law 2/2023, of February 20, regulating the protection of persons who report regulatory violations and the fight against corruption, incorporates Directive (EU) 2019/1937 of the European Parliament and the Council of October 23, 2019, into Spanish law. This directive establishes a homogeneous regulatory framework across the European Union to ensure legal security and protection for those who, in the course of their professional or work activities, detect irregularities or legal breaches and report them through the appropriate channels.

The main objective of this regulation is to protect whistleblowers from possible retaliation due to their reports, ensuring the existence of appropriate mechanisms for handling such information and promoting a culture of transparency and regulatory compliance within organizations. To this end, the law requires the implementation of internal reporting channels that allow the secure communication of alleged violations, guaranteeing whistleblower confidentiality and expressly prohibiting any form of direct or indirect retaliation.

In compliance with these legal obligations, the Board of Directors of Prisma Payments EP, S.A. (hereinafter, “Prisma”) has approved this Policy on the Internal Reporting System (hereinafter, “Internal Reporting System”). This policy is part of the entity’s internal regulatory framework, aligning with its commitment to transparency, business ethics, and regulatory compliance.

Through this policy, Prisma regulates its Internal Reporting System, ensuring compliance with the principles and guarantees established by applicable laws. This reinforces Prisma’s commitment to preventing, detecting, and managing possible regulatory breaches, fostering an environment where individuals can report irregularities without fear of retaliation, thereby contributing to a corporate culture based on legality, integrity, and corporate responsibility.

For matters not expressly regulated in this policy, the provisions of Law 2/2023, of February 20, on the protection of persons who report regulatory violations and the fight against corruption, shall apply subsidiarily. In case of any contradiction between the content of this policy and the imperative provisions of the law, the latter shall prevail.

PDF Internal Information System Policy

Prisma Payments Whistleblower System | Prisma Payments Whistleblower Channel

Criminal Prevention Policy

Criminal liability of legal entities has been part of the Spanish legal system since 2010 and requires companies to adopt effective measures to prevent the commission of criminal offences within their organizations. Within this regulatory framework, which has been subsequently strengthened through successive amendments to the Criminal Code and the interpretation of the Public Prosecutor’s Office and the courts, criminal compliance models have become an essential element of good corporate governance.

In line with these legal requirements and with best practices in the field of compliance, the Board of Directors of Prisma Payments, EP, S.A. has approved this Corporate Criminal Risk Prevention Policy, the purpose of which is to establish its own criminal risk management system aimed at the prevention, detection, and control of potential criminal offences.

This Policy forms part of Prisma’s ethical culture framework and complements its Code of Conduct by identifying the main criminal risks the company may face, as well as the controls implemented to mitigate them, thereby reaffirming Prisma’s commitment to ethical, responsible, and lawful conduct.

PDF Criminal Prevention Policy