Open

Contents

1 Introduction

These General Notes provide a general explanation of the iDEAL Scheme, its main characteristics and features, the different Roles within the iDEAL Scheme and the iDEAL Rules & Regulations ('iDEAL R&R').

In these General Notes , the following topics are discussed:

• a description of the iDEAL Scheme, iDEAL Value Added Services, iDEAL logo’s and the iDEAL Rules & Regulations (R&R) - paragraph 2;

• a description of the iDEAL Transactions, iDEAL API’s and the iDEAL Hub - paragraph 3;

• a description of the iDEAL fees and contract model - paragraph 4;

• a description of the iDEAL R&R structure and documentation, as well as the Certification Procedure - paragraph 5.

2 The iDEAL Scheme

2.1 General

Currence iDEAL B.V. (hereafter: ‘Currence iDEAL’) is the product owner of the iDEAL Scheme. Currence iDEAL is also performing the role of the iDEAL Hub, which is a routing platform for enabling Issuers and Acquirers as well as CPSPs, C2C Providers and Merchants to connect directly to the iDEAL Hub. This enables them to offer iDEAL as a payment method to their clients and to send and retrieve information in relation to iDEAL Transactions via the iDEAL API, which is operated by Currence iDEAL in accordance with the iDEAL API Specifications and meets the obligations and service levels of Currence iDEAL as provided for in the R&R General Regulations - part 8 - iDEAL Hub. The iDEAL Hub includes the technical infrastructure relating to the operations of the iDEAL Hub. In addition, Users of iDEAL can create an iDEAL Profile with Currence iDEAL for the purpose of making use of iDEAL Value Added Services such as iDEAL Fast Payment (iDEAL Snel betalen), iDEAL Checkout (iDEAL Snel bestellen) and iDEAL in3. Preferably a User has one iDEAL Profile for both private and business purposes, a User can however, if its Issuer supports this feature, have multiple iDEAL Profiles.

The iDEAL Scheme is subject to the iDEAL Rules & Regulations (the ‘iDEAL R&R’).

The iDEAL Scheme is a system of agreements for the offering and use of iDEAL by iDEAL Partners, these are Issuers, Acquirers, Collecting Payment Service Providers (CPSPs) and C2C Providers, consisting of governance agreements, Role Provisions, functional Provisions (requirements) and iDEAL API Specifications, as described in further detail in the iDEAL R&R and its Annexes for the Provisions per Role, including product functionalities and the house style and branding of the logo and brands of iDEAL.

Open

The iDEAL R&R provide for rules and agreements governing all relevant activities relating to the participation in and use of the iDEAL Scheme and the offering of any related products and/or services by iDEAL Participants, these are iDEAL Partners, Merchants, Users and Private Beneficiaries. Currence iDEAL, as product owner and trademark holder for the iDEAL Scheme, defines and manages the requirements regarding the various Roles that feature in the iDEAL Scheme and any related products and services, while taking into account the wishes from the market. In addition, the iDEAL R&R also provide for the obligations and services to be provided by Currence iDEAL in its routing service of the iDEAL Hub, please see the iDEAL R&R General Regulations (GR) - part 8 - iDEAL Hub.

Currence iDEAL wishes to ensure a level playing field for all iDEAL Partners by offering rules and regulations that are fair, reasonable, objective and non-discriminatory. In principle, the iDEAL Scheme is open for any party that wishes to participate in the iDEAL Scheme in a Role, provided that the Applicant meets the requirements that are set for the relevant Role in the iDEAL R&R. The rules and regulations in the iDEAL R&R are restricted to those that are necessary for the purpose of ensuring a high quality standard for the iDEAL Scheme, among others with respect to the availability, integrity and reliability of the iDEAL Scheme and the compatibility and interoperability of the iDEAL API Specifications between iDEAL Partners and the iDEAL Hub. In order to create a level playing field whereby all iDEAL Partners can participate in the iDEAL Scheme under the same terms and conditions, it is not allowed for an iDEAL Partner to undertake any of the activities for or on behalf of the iDEAL Hub as described in the General Regulations (GR) - part 8 - iDEAL Hub.  

2.2 iDEAL Value Added Services (iDEAL VAS)

The iDEAL Scheme has been developed to facilitate iDEAL Payments by or from a User to a Merchant or Private Beneficiary. An iDEAL Payment is a SEPA Credit Transfer (SCT) payment initiated and authorised by a User through the Banking Environment of its Issuer to a Merchant, CPSP or C2C Provider, to be executed upon successful completion of an iDEAL Transaction pursuant to the iDEAL Scheme.

iDEAL also offers Users the possibility to register an iDEAL Profile. An iDEAL Profile is a personal profile which a User can fill with Personal Data and which can be used to provide iDEAL Profile Data with an iDEAL Transaction to a Merchant as an iDEAL Value Added Service (iDEAL VAS). iDEAL Profile Data include (amongst others) payment preferences of the User, such as details of the preferred IBAN(s) for iDEAL Payments, contact and delivery information and other Personal Data (such as the Customer Identification Token (CIT), profile status, cookie consent, iDEAL User Tokens etc.) of the User. By creating an iDEAL Profile, a User can make the checkout or payment process for an iDEAL Payment faster and easier. In the first place, the User can be recognised when initiating an iDEAL Transaction on the basis of a browser cookie placed on his device (with the User’s consent) or on the basis of an iDEAL User Token.

Secondly, the User’s preferred Issuer and preferred IBAN(s) registered in the iDEAL Profile of the User can be presented on the iDEAL Checkout Page on the basis of cookie recognition or an iDEAL User Token, improving the customer experience for the User (e.g. automatic push). In this respect, Currence iDEAL offers the service iDEAL Fast Payment (see paragraph 2.2.1) and the iDEAL VAS iDEAL Checkout (see paragraph 2.2.2).

2.2.1 iDEAL Snel Betalen (iDEAL Fast Payment)

iDEAL Snel Betalen (also known as ‘iDEAL Fast Payment’) is the service pursuant to the iDEAL Profile Agreement, whereby the User is recognised on the basis of a browser cookie or iDEAL User Token and and is automatically directed to his Issuer, by means of the preferred IBAN(s) for iDEAL Payments registered in his iDEAL Profile, to authorise the iDEAL Transaction. Issuers are obliged to offer iDEAL Fast Payment to their Users. Acquirers and CPSPs must offer iDEAL Fast Payment to their Acquiring Participants.

2.2.2 iDEAL Snel Bestellen (iDEAL Checkout)

iDEAL Snel Bestellen (also known as ‘iDEAL Checkout’) is the service pursuant to the iDEAL Profile Agreement, whereby the User is recognised on the basis of a browser cookie and some of the iDEAL Profile Data registered in his iDEAL Profile of the User (such as contact and delivery details) are provided to the Merchant upon completion of an iDEAL Transaction for the purpose of delivery of the order by the Merchant to the User. When using iDEAL Checkout, the User does not have to provide his contact and address details anymore, thereby shortening the checkout process. Issuers are obliged to offer iDEAL Checkout to their Users. The offering of iDEAL Checkout to their Acquiring Participants is optional for Acquirers and CPSPs.

The iDEAL Profile is optional. Users can also make iDEAL Payments without having registered an iDEAL Profile. For the purpose of creating an iDEAL Profile and making use of the iDEAL VAS, the User will enter into a contractual relationship (iDEAL Profile Agreement) with Currence iDEAL by accepting the applicable general terms and conditions.

2.2.3 iDEAL in3

For this VAS Currence iDEAL is working together with VAS provider In3. In3 is the white label provider and they will enter into a contractual relationship, including the terms and conditions for processing these transactions, with the Acquirers and CPSPs.

Users can pay an online order in three installments over a period of 60 days. The In3 transaction is subject to a credit check and an age verification via iDIN. When all checks are approved the User is allowed to purchase the order with iDEAL in3.
The first instalment is paid via a regular iDEAL Transactions at the start of the purchase. For the second and third term the User will receive an email from iDEAL in3 after 30 and 60 days, with the request to pay the 2nd and 3rd instalment via an iDEAL Transaction.

2.3 iDEAL logo’s

2.3.1 iDEAL

An iDEAL Payment is identified by means of the following iDEAL logo:

Open

iDEAL is a registered trademark owned by Currence iDEAL and protected by trademark law. The iDEAL trademark is used, among other things, as a feature for the marketing and use of iDEAL by iDEAL Partners. The iDEAL brand may only be used in connection with the activities related to the iDEAL Scheme and in accordance with a Licence, Certificate or Accreditation Agreement with Currence iDEAL.

2.3.2 iDEAL QR

An iDEAL QR payment is identified by means of the following iDEAL QR logo:

iDEAL QR is a registered trademark owned by Currence iDEAL and protected by trademark law. The iDEAL QR trademark is used, among other things, as a feature for the marketing and use of iDEAL by iDEAL Partners. The iDEAL QR brand may only be used in connection with the activities related to the iDEAL Scheme and in accordance with a Licence, Certificate or Accreditation Agreement with Currence iDEAL.

The QR code is used by a wide audience and can be shown through a variety of channels, such as invoices, emails, bus shelter posters, other posters, television, smartphones, etc. This gives Users the option of initiating an iDEAL Payment via an iDEAL QR code in (among other things) the following use cases (Figure 1):

• Transferring the Merchant’s iDEAL Transaction from a PC or laptop to the Banking Environment of the Issuer on a mobile device.

• Doorstep donations;

• Paying for video on demand;

• TV fundraising campaigns;

• Paying an invoice;

• Paying bar, hotel or restaurants bills;

• Paying for purchases at a market;

• Paying for purchases using an online terminal in a shop; and

• Paying for purchases from a bus shelter or other poster.

2.3.3 iDEAL Snel Bestellen (iDEAL Checkout)

An iDEAL Checkout transaction is an iDEAL Request for Data Transaction and is identified by means of the following iDEAL logo:

iDEAL Snel Bestellen is a registered trademark owned by Currence iDEAL and protected by trademark law. The iDEAL Snel Bestellen trademark is used, among other things, as a feature for the marketing and use of iDEAL by iDEAL Partners. The iDEAL Snel Bestellen brand may only be used in connection with the activities related to the iDEAL Scheme and in accordance with a Licence, Certificate or Accreditation Agreement with Currence iDEAL.

2.3.4 iDEAL in3

An iDEAL in3 transaction is an iDEAL Transaction that is identified by means of the following iDEAL logo:

iDEAL in3 is a registered trademark owned by Currence iDEAL and protected by trademark law. The iDEAL in3 trademark is used, among other things, as a feature for the marketing and use of iDEAL by iDEAL Partners. The iDEAL in3 brand may only be used in connection with the activities related to the iDEAL Scheme and by iDEAL Partners which have entered into a Licence, Certificate or Accreditation Agreement with Currence iDEAL.

2.4 The iDEAL R&R

The iDEAL R&R, including all iDEAL API Specifications and implementatie guidelines, are owned by Currence iDEAL. In that capacity, Currence iDEAL defines and manages the requirements regarding the various Roles that feature in the iDEAL Scheme. These requirements are necessary for iDEAL to operate effectively for all iDEAL Participants. The iDEAL R&R have been drawn up as a set of rules of iDEAL Partners towards each other and Currence iDEAL in practical terms. Currence iDEAL consults its Licensees and Certificate Holders when drawing up or amending the iDEAL R&R (unless a Proposed Change is correcting a textual error or providing an explanation to a Provision already included in the iDEAL R&R).

The iDEAL R&R contain the established rules and regulations for the iDEAL Scheme and also describe the Roles and activities that iDEAL Partners may carry out. In that context, Currence iDEAL issues Licence, Certificate and Accreditation Agreements (the ‘Agreements’).

Currence iDEAL helps to safeguard the efficiency, quality (including reliability and image) and the integrity of the iDEAL Scheme. Currence iDEAL carries out the following tasks in relation to the iDEAL Scheme:

• determining the strategy and policies of the iDEAL Scheme;

• developing and (if necessary) revising the iDEAL Scheme and any related products and/or services (including iDEAL VAS);

• issuing Certificates in its role as a Certificate Authority;

• drawing up, laying down and managing the iDEAL R&R;

• supplying and maintaining the iDEAL Hub at agreed upon service levels;

• supplying the Merchant Implementation Guide to Acquiring Participants (Merchants, CPSPs and C2C Providers);

• supplying and describing iDEAL API Specifications;

• certifying Licensees and Certificate Holders;

• accrediting Accredited Parties;

• monitoring compliance with the iDEAL R&R and applicable laws and regulations by Licensees, Certificate Holders and Accredited Parties (with the power to impose penalties);

• coordinating anti-fraud measures;

• facilitating collective consultation structures; and

• public relations, public affairs, communications and iDEAL brand promotion.

2.4.1 Roles within the iDEAL R&R

The iDEAL R&R provide for the following Roles:

• Issuers and Acquirers who are certified by Currence iDEAL and who have entered into a Licence Agreement with Currence iDEAL;

• CPSPs who are certified by Currence iDEAL and who have entered into a Certificate Agreement or (if the annual volume of iDEAL Transactions of the Institution does not exceed EUR 3 million) an Accreditation Agreement with Currence iDEAL and have an iDEAL Contract with at least one Acquirer; and

• C2C Providers who are certified by Currence iDEAL and who have entered into a Certificate Agreement with Currence iDEAL and have an iDEAL Contract with at least one Acquirer.

Issuers and Acquirers must be Licensed Payments Service Providers (Licensed PSPs), CPSPs and C2C Providers must be (Licensed or Exempt) Payment Service Providers (PSPs).

The Roles have been defined for the iDEAL Scheme so that a User can authorise an iDEAL Transaction, which results in an iDEAL Payment from the Issuer to a Merchant (such as a webshop or invoice company) or a Private Beneficiary (a Consumer who has concluded an iDEAL Contract with a C2C Provider in order to receive iDEAL Payments as beneficiary pursuant to an iDEAL Transaction). These payments are debited from the User's payment account and credited to the Business IBAN of the Acquiring Participant. If the Acquiring Participant is a CPSP or C2C Provider, the Acquiring Participant will ensure that the payment account of the Merchant or Private Beneficiary is credited. At the request of a Merchant or Private Beneficiary (or an Acquirer, CPSP or C2C Provider acting on behalf of its Merchant or Private Beneficiary), iDEAL Profile Data may be added to an iDEAL Transaction as an iDEAL Value Added Service (iDEAL VAS).

To be able to make iDEAL Transactions, the User must have an identified payment account with access to the Banking Environment of its Issuer. The Merchant must have entered into an iDEAL Contract with an Acquirer or CPSP that provides the option to offer his Users the ability to make an iDEAL Payment.

Under the iDEAL Scheme, the Issuer guarantees payment of funds to the Acquirer for iDEAL Transactions initiated and completed by Users, to the extent that the Issuer has given the iDEAL Transactions the status ‘Successful’ and this status is laid down in the iDEAL Application Programming Interface (iDEAL API). The Issuer must immediately debit the successful iDEAL Payments to the User’s account in accordance with the requirements in the SCT Rulebook, except if an iDEAL Payment is subject to Sanctions. In that case, the iDEAL Payment Guarantee is not applicable.

An iDEAL Payment is easily recognisable as such by Users. The description of the iDEAL Payment in the Banking Environment (bank statement) always contains a 16-figure iDEAL Transaction_ID, which can be used by the Issuer and the Acquirer to clarify the status of the iDEAL Payment in case something is unclear at a later stage.

The Acquirer guarantees its Acquiring Participants (Merchants, CPSPs and C2C Providers) payment of funds for iDEAL Transactions initiated and completed by Users, to the extent that the Issuer has given the iDEAL Transactions the status ‘Successful’ and this status is laid down in the iDEAL API. In that case, the Acquirer must ensure that its Acquiring Participant receives the funds related to the iDEAL Payment Guarantee, except if an iDEAL Payment is subject to Sanctions. In that case, the iDEAL Payment Guarantee is not applicable.

Similarly, the CPSP/C2C Provider must upon receipt of the iDEAL Payment from the Issuer credit the iDEAL Payment, in accordance with the requirements of the SCT Rulebooks, to the (business) account of the Merchant/Private Beneficiary within the period contractually agreed with the Merchant/Private Beneficiary, unless the iDEAL Payment is subject to Sanctions. In that case, the iDEAL Payment Guarantee is not applicable.

The same security measures used for the Banking Environment of the Issuers apply to the iDEAL API that is used for iDEAL Transactions. The Banking Environment of the Issuers must meet strict security standards to ensure that iDEAL Transactions by Users can be carried out securely.

3 iDEAL Transaction

3.1 Initiating an iDEAL Transaction

iDEAL is the service pursuant to the iDEAL Scheme whereby iDEAL Transaction are processed, followed by an iDEAL Payment. An iDEAL Transaction can contain iDEAL Payment information and iDEAL Profile Data. An iDEAL Transaction is a set of iDEAL messages which is exchanged in relation to a request to pay by an Acquirer on behalf of its Acquiring Participants to the Issuer to receive the iDEAL Payment Guarantee from the Issuer. An iDEAL Transaction will always be initiated by a Merchant or Private Beneficiary.

3.2  Process flow for iDEAL Transactions

The actual iDEAL Transaction flow that the User follows, depends on:

1. The connection the Acquirer offers to its iDEAL Participants (see paragraph 3.4):

   1. Via its own technical interface (Route 1 - see R1a & R1b in flow below).

   2. Via a Direct Connection

      1. For its CPSPs and C2C Providers Route 2 is applicable (see R2 in flow below), including iDEAL Transaction initiated by their clients (Merchants and Private Beneficiaries).

      2. For its Merchants Route 3 is applicable (see R3 in flow below).

2. Furthermore the flow depends on:

(i)     the device the User is using when initiating an iDEAL Transaction;
(ii)    whether a User has already registered an iDEAL Profile;
(iii)   whether a User with an iDEAL Profile is recognised by the iDEAL Hub (via an iDEAL User Token or a browser cookie); and
(iv)   whether or not the Acquiring Participant or Merchant has a direct connection with the iDEAL Hub.

See the figure 2 below for the indicative process flow for iDEAL Transactions.

^{Figure 2: Indicative iDEAL Transaction flow}
The full iDEAL Transaction flow broadly follows the following steps (as further specified in the iDEAL API Specifications)

1. Shopping process & payment preference: The User places wants to pay to a Merchant or Private Beneficiary and chooses iDEAL as payment method*. The iDEAL Transaction will be sent to the iDEAL Hub either via the technical interface of the Acquirer or via the Direct Connection, in accordance with the iDEAL API Specifications (or the technical interface offered by the Acquirer).

2. Transaction initiation: An iDEAL Transaction is initiated at the iDEAL Hub, which responds to the Acquiring Participant with a redirect URL to the iDEAL Checkout Page or the Issuer.

3. Customer recognition / Issuer selection: The User is redirected by the Merchant (or CPSP/Acquirer) to the iDEAL Checkout Page, where the User can choose an Issuer or scan a QR code (depending on the web/app context). Alternatively, if the iDEAL Profile is recognised (by a browser cookie or iDEAL User Token), the User may be redirected to its preferred Issuer or receive a push notification from its preferred Issuer to authorise the iDEAL Transaction.

4. Issuer Authorisation: The User is presented with the iDEAL Transaction details at the Issuer, where the User authorises the iDEAL Transaction;

5. Transaction confirmation and redirect to the Merchant: When the User authorises the iDEAL Transaction, a confirmation is sent by the Issuer to the iDEAL Hub. The iDEAL Hub informs the Acquirer/CPSP of the status of the iDEAL Transaction, who in turn informs the Merchant. If applicable, the User may be requested to register an iDEAL Profile. Depending on the context, the User is ultimately redirected back to the Merchant.

3.3 iDEAL API

The iDEAL API developed by Currence iDEAL is based on a so-called ‘four-party model’. Issuers and Acquirers with a Licence Agreement offer iDEAL to the market on a commercial basis. This produces benefits for all parties. The four-party model forms the basis for the contract model of Currence iDEAL and the iDEAL R&R, including the iDEAL API Specifications. The fee model is represented in figure 3 and the contract model in figure 4 and will be further described in paragraph 4. The fields that require a mandatory filling are described in the https://currencenl.atlassian.net/wiki/spaces/I2P/pages/3648290822, part of the document suite https://currencenl.atlassian.net/wiki/spaces/I2P/pages/3299147777.

3.4 iDEAL Hub

Currence iDEAL is operating the iDEAL Hub, which is a hub for enabling Issuers and Acquirers as well as CPSPs, C2C Providers and Merchants with a Direct Connection to the iDEAL Hub to offer iDEAL as a payment method to their clients and to send and retrieve information in relation to iDEAL Transactions via the iDEAL API , which is operated by Currence iDEAL in accordance with the iDEAL API Specifications and the obligations and service levels of Currence iDEAL as provided for in the R&R General Regulations - part 8 - iDEAL Hub. The iDEAL Hub includes the technical infrastructure relating to the operations of the iDEAL Hub.

The Acquirer must connect its Acquiring Participants (Merchants, CPSPs and C2C Providers) to the iDEAL Hub. The Acquirer can offer two connections:

1. Via its own technical interface, which can be a (backwards compatible) extension of the iDEAL technical interface.

   • Before connecting the Acquiring Participant (or implementing new versions), the Acquirer must implement and test those versions with its Acquiring Participants. In addition, the Acquirer must provide its own discretionary Merchant implementation guide to its Acquiring Participants.

2. Via Direct Connection in accordance with the iDEAL API Specifications for Acquiring Participants, the iDEAL API Specification ‘Direct Connection Acquiring Participant’.

   • Before connecting (or implementing new versions) a CPSP or C2C Provider to the iDEAL Hub, the Acquirer must inform Currence iDEAL via implementation@ideal.nl. The CPSP / C2C Provider must have successfully completed all tests as described in the Test Strategy and the test results must be reported via the form ‘In control Statement’ and this form must be approved by Currence iDEAL before go-live.

Currence iDEAL is the processor of the iDEAL Transaction Data relating to iDEAL Transactions on behalf of the Institutions (as controllers within the meaning of the GDPR). Currence iDEAL and the Institutions have agreed upon a Data Processing Agreement for the purpose of the processing of iDEAL Transaction Data by Currence iDEAL, which is provided for in iDEAL GR - part 8 - appendix 'Data Processing Agreement'.

Currence iDEAL and the Issuers qualify as joint controllers within the meaning of the GDPR in respect of the processing of iDEAL Profile Data relating to iDEAL Fast Payment (iDEAL Snel Betalen). Currence iDEAL and the Issuers have agreed upon a Joint Controller Agreement for the purpose of the processing of iDEAL Profile Data, which is provided for in iDEAL GR - part 8 - appendix 'Joint Controller Agreement'.

The processing of Personal Data by Currence iDEAL is further described in the Currence iDEAL Privacy Statement.

iDEAL Profile Management (viewing, amending or deleting an iDEAL Profile in the online environment of the iDEAL Hub) can take place by Users after logging in on their Banking Environment. Similarly, Users can view their iDEAL Payments in their Banking Environment.

4 iDEAL fees and contract model

4.1 Fee model

4.1.1 Fee model

The fee model for iDEAL is based on the bilateral contractual relationships between the parties involved in the iDEAL Scheme (see Figure 3). Acquirers and Issuers (with a Licence Agreement), CPSPs (Certificate Holders or Accredited Parties) and C2C Providers (Certificate Holders) offer iDEAL to the market commercially. They can charge each other or a User/Private Beneficiary/Merchant a fee for this, which is at the iDEAL Partner's discretion. iDEAL Partners must draw up a bilateral agreement regarding iDEAL, which may include (amongst others) any of the following elements:

• the (interchange) fees for iDEAL Transactions;

• the fees and services for iDEAL and any iDEAL Request for Data Transactions;

• adherence to the SCT Rulebook;

• the iDEAL Payment Guarantee;

• operational aspects, such as incidents, invoicing, contact persons etc.; and

• Clearing and Settlement of iDEAL Payments.

Currence iDEAL charges its Licensees, Certificate Holders and Accredited Parties the following fees:

• a non-recurring entry fee when entering into the Agreement;

• an annual fixed fee per agreed Role;

• a variable fee for iDEAL Transactions;

• a routing fee for the routing of iDEAL Transactions; and

• a non-recurring entry fee for the iDEAL API Specifications.

A Merchant will pay a fee to his Acquirer or CPSP.

^{Figure 3: Fee model}
* A Merchant can have an iDEAL Contract with either an Acquirer or a CPSP

4.2 Contract model

^{Figure 4: Contract model}
* A Merchant can have an iDEAL Contract with either an Acquirer or a CPSP

The contract model developed by Currence iDEAL forms the basis of the contents of the iDEAL R&R. This is represented in Figure 4.
The various Roles in the Schemes are explained on the basis of this contract model in paragraphs 4.2.1 up to and including 4.2.8.

4.2.1 CURRENCE iDEAL B.V.

Currence iDEAL is the owner of the iDEAL Scheme and trademark owner of the iDEAL logo, as described in the iDEAL R&R, including the iDEAL API Specifications. In this capacity, Currence iDEAL lays down requirements in the iDEAL R&R with respect to the iDEAL Scheme and the iDEAL Participants involved in the iDEAL Scheme.

Currence iDEAL is also operating the iDEAL Hub and in that capacity enabling Issuers and Acquirers as well as CPSPs, C2C Providers and Merchants via a Direct Connection to the iDEAL Hub to offer iDEAL as a payment method to their clients and to send and retrieve information in relation to iDEAL Transactions via the iDEAL API, which is operated by Currence iDEAL in accordance with the iDEAL API Specifications. The obligations and service levels of Currence iDEAL in relation to its services with respect to the iDEAL Hub are described in iDEAL GR - part 8 - iDEAL Hub.

Finally, Currence iDEAL offers Users the possibility to register an iDEAL Profile with the iDEAL Hub for the purpose of making use of iDEAL VAS. Currently, iDEAL offers the following iDEAL VAS: iDEAL Fast Payment (iDEAL Snel Betalen) and iDEAL Checkout (iDEAL Snel Bestellen). Additional iDEAL VAS may be offered in the future. For the purpose of registering an iDEAL Profile and making use of iDEAL VAS, the User needs to enter into an iDEAL Profile Agreement with Currence iDEAL (see paragraph 2.2).

4.2.2 The Issuer (Licensee)

The Issuer is an Institution where the User maintains an identified payment account with which the User has access to the Banking Environment for the initiation and authorisation of iDEAL Transactions. The Issuer must be a Licensed PSP and may only offer Users iDEAL if it has entered into a Licence Agreement with Currence iDEAL. The Issuer is responsible for the entire Issuing Domain, which comprises all activities related to the initiation, receipt, processing or Authorisation of iDEAL Transactions initiated by Users using the Banking Environment of the Issuer, as well as any other activities that are performed by the Issuer on behalf of its Users within the iDEAL Scheme. The Issuer has entered into an iDEAL Contract with its Users (which may be a contract or part of general terms and conditions for payment services, at the discretion of the Issuer) on the basis of which iDEAL Transactions can be authorised.

4.2.3 The User

The User is the Consumer or Business using the iDEAL Scheme to make an iDEAL Payment through the Banking Environment of its Issuer (using the Authorisation and Authentication tools provided by the Issuer). The User has entered into an iDEAL Contract with the Issuer (which may be a contract or part of general terms and conditions for payment services, at the discretion of the Issuer) with respect to the use of iDEAL. A User is not subject to any requirements on the part of Currence iDEAL, except for the iDEAL Profile Agreement between Currence iDEAL and the User for the creation and use of an iDEAL Profile. Any obligations (except in relation to the iDEAL Profile Agreement) will be imposed on the User by the Issuer. When a User has registered an iDEAL Profile on the iDEAL Hub, the User can be recognised by way of a browser cookie or iDEAL User Token when initiating an iDEAL Transaction (iDEAL Checkout) or by way of a browser cookie (iDEAL Checkout and iDEAL Fast Payment) when completing an iDEAL Transaction. iDEAL Profile Management can take place by Users after logging in on their Banking Environment. Similarly, Users can view their iDEAL Payments in their Banking Environment (see paragraph 2.2 above).

4.2.4 The Acquirer (Licensee)

The Acquirer is an Institution that offers its Acquiring Participants (Merchants, CPSPs or C2C Providers) the possibility to offer iDEAL as a payment method to its Users. The Acquirer is responsible for the entire Acquiring Domain, which comprises all activities relating to:
(i) receiving iDEAL Transactions from or initiating iDEAL Request for Data Transactions on behalf of Acquiring Participants or (if the Acquiring Participant has a Direct Connection to the iDEAL Hub) monitoring the receiving of iDEAL Transactions or initiating of iDEAL Request for Data Transactions by Acquiring Participants;
(ii) ensuring that the iDEAL Payment Guarantee from the Issuer is met when the Issuer has given the iDEAL Transaction the status ’Successful’, unless the iDEAL Payment is subject to Sanctions; and
(iii) providing the iDEAL Payment Guarantee to Acquiring Participants and ensuring that the funds from iDEAL Payments by the Issuer are transferred to Acquiring Participants,
as well as any other activities that are performed by the Acquirer on behalf of Acquiring Participants within the iDEAL Scheme.

The Acquirer is responsible for the correct processing of iDEAL Transactions for its Acquiring Participants, which have been sent by a User who purchases a product or service from a Merchant. The Acquirer must connect its Acquiring Participants (Merchants, CPSPs and C2C Providers) to the iDEAL Hub, for which it can offer two connections (see paragraph 3.3 above).

Before the Acquirer is allowed to process iDEAL Transactions for its Acquiring Participants, it must onboard its Acquiring Participants in accordance with the iDEAL R&R annex ‘Minimum acceptance criteria Acquiring Participants’ (only for Merchants) and conclude an iDEAL Contract that includes the conditions prescribed by Currence iDEAL in the iDEAL R&R annex 'General terms and conditions for iDEAL Contracts' (for all Acquiring Participants).

4.2.5 The Collecting Payment Service Provider (CPSP; Certificate Holder or Accredited Party)

The CPSP is an Institution who mediates in collecting the funds (managing third-party funds) of the iDEAL Payments for its Merchants for its own account and risk, by offering its Merchants the possibility to offer iDEAL as a payment method to Users. To this end, the CPSP collects iDEAL Payments on behalf its Merchants and transfers the funds to the Business IBAN of its Merchants, as contractually agreed between the CPSP and the Merchants. A CPSP is active in the Acquiring Domain, which includes activities in the B2B Domain and the C2B Domain.

A CPSP may only participate in iDEAL if the CPSP has been certified or (if its annual volume of iDEAL Transactions does not exceed EUR 3 million) accredited by Currence iDEAL and has concluded an iDEAL Contract with at least one Acquirer that has entered into a Licence Agreement with Currence iDEAL. In addition, a CPSP must be a (Licensed or Exempt) PSP. 

Before the CPSP is allowed to process iDEAL Transactions for its Merchant, it must onboard its Merchants in accordance with the iDEAL R&R annex ‘Minimum acceptance criteria Acquiring Participants’ and conclude an iDEAL Contract that includes the conditions prescribed by Currence iDEAL in the iDEAL R&R annex 'General terms and conditions for iDEAL Contracts'.

4.2.6 C2C Provider (Certificate Holder)

A C2C Provider is an Institution which mediates in collecting the funds (managing third-party funds) of the iDEAL Payments of its Private Recipients for its own account and risk, by offering its Private Recipients the possibility to initiate iDEAL Transactions. If the iDEAL Transaction is successful, the Issuer debits the IBAN of its User (within the C2C Domain the User is a Consumer) and transfers the iDEAL Payment to (the Business IBAN of) the C2C Provider, whereafter the C2C Provider transfers the funds received to the IBAN of the Private Beneficiary within the agreed period of time.

A C2C Provider must clearly indicate to every Private Beneficiary to whom it provides C2C Services what these C2C Services entail and what the rights and obligations of the Private Beneficiary are and, if applicable, if the C2C Provider provides payment services to a Platform.

A C2C Provider may only participate in the iDEAL Scheme if the C2C Provider is a (Licensed or Exempt) PSP and has been certified by Currence iDEAL by way of a Certificate Agreement.

4.2.7 Merchant

The Merchant is the Business or non-profit entity that has concluded an iDEAL Contract with an Acquirer or CPSP in order to offer iDEAL as a payment method to its customers (Users), and to receive iDEAL Payments (via its Acquirer or CPSP) from its customers (Users) for the payment of goods and services delivered by it or for the support of non-profit activities. The Acquirer or CPSP provides its Merchants with the possibility to initiate iDEAL Transactions via different means (see paragraph 3). The iDEAL Contract must include the conditions prescribed by Currence iDEAL in the iDEAL R&R annex ‘General terms and conditions for iDEAL Contracts’.

Currence iDEAL has no direct relationship with a Merchant. The Acquirer or CPSP is responsible for the onboarding of a Merchant in accordance with the requirements in the iDEAL R&R annex 'Minimum Acceptance Criteria Acquiring Participants' and 'Requirements and instructions iDEAL (QR) Logo', as well as the iDEAL API Specifications. 

4.2.8 Private Beneficiary

The Private Beneficiary is the Consumer who has concluded an iDEAL Contract with a C2C Provider in order to receive iDEAL Payments as beneficiary pursuant to an iDEAL Transaction. The C2C Provider provides its Private Beneficiaries with the possibility to initiate an iDEAL Transaction via different means (see paragraph 3). The iDEAL Contract must include the conditions prescribed by Currence iDEAL in the iDEAL R&R annex ‘General terms and conditions for iDEAL Contracts’.

5 Documents iDEAL Rules & Regulations, including the iDEAL API Specifications

5.1 iDEAL R&R

Currence iDEAL has adopted a uniform set of rules for the iDEAL Scheme, the iDEAL R&R, which must be adhered to by every Licensee, Certificate Holder and Accredited Party. The iDEAL R&R include rules covering all relevant activities relating to the iDEAL Scheme. Currence iDEAL has compiled the iDEAL R&R with due care, taking the relevant laws and regulations as a starting point.

The requirements in respect of the various Roles, as described in paragraph 4.2, can be divided into those of a general organisational nature and those that relate to the process associated with the Role fulfilled by the Institution within the iDEAL Scheme. The process comprises the various relevant activities that together make up the complete Role. The process-related requirements can be divided into quality requirements and, where necessary, additional requirements of a more operational nature. All requirements can be recognised as such in the iDEAL R&R documents and, where applicable, are accompanied by explanatory notes.

With respect to the activities for which rules have been made in the iDEAL R&R, a distinction is made between the Issuing Domain (see paragraph 4.2.2) and the Acquiring Domain (see paragraph 4.2.4). For both the Issuing and Acquiring Domain, the Institutions must comply with the relevant laws and regulations that apply to them, and with the rules and guidelines prescribed by Currence iDEAL and the relevant supervisory authorities by which they are supervised.

5.2 Licence, Certificate and Accreditation structure

Institutions wishing to participate in the iDEAL Scheme must conclude a Licence, Certificate or Accreditation Agreement with Currence iDEAL:

• Institutions wishing to fulfil the Role of Issuer or Acquirer are eligible for a Licence Agreement. Licensees are responsible for all activities and services in their Issuing or Acquiring Domain;

• Institutions wishing to fulfil the Role of CPSP are eligible for a Certificate Agreement or (if the annual volume of iDEAL Transactions does not exceed EUR 3 million) an Accreditation Agreement. Certificate Holders and Accredited Parties are responsible for the activities and services related to their respective Roles;

• Institutions wishing to fulfil the Role of C2C Provider are eligible for a Certificate Agreement. Certificate Holders are responsible for the activities and services related to their Role.

5.3 Acceptance and Acceptance Regulations

An Institution is eligible for a Licence, Certificate or Accreditation Agreement if it has demonstrated that it meets the acceptance requirements in relation to the Role that the Institution wishes to fulfil in the iDEAL Scheme, which are described in the Acceptance Regulations. The Certification Procedure describes the steps the Applicant must take in order to be certified or accredited for the Role in question. To start the Certification Procedure, the Institution must send a signed Application Form to Currence iDEAL for approval. Currence iDEAL will then send a set of documents to the Applicant, including the iDEAL R&R. The Certification Procedure will then start.

5.4 Certification Procedure

The Certification Procedure mainly involves the Applicant carrying out a Control Self-Assessment (CSA) in order to demonstrate that it meets the requirements related to the Role that the Applicant wishes to fulfill in the iDEAL Scheme.

The Certification Procedure comprises the following stages:

1. Carrying out a Control Self Assessment (CSA) by the Applicant/Institution;

2. Evaluation of the CSA by Currence iDEAL;

3. Selective verification by Currence iDEAL to establish the accuracy of the CSA (and therefore of the implementation of the iDEAL R&R by the Applicant);

4. Successful conclusion of the iDEAL tests and signing of an ‘In Control Statement’ by the Applicant;

5. iDEAL Product Verification (iPV) by the Applicant with all Licensees and Certificate Holders already licensed or certified;

6. A new Issuer must have its issuer screens assessed by Currence iDEAL;

7. Final evaluation and decision by Currence iDEAL concerning the granting of a Licence Agreement or Certificate Agreement;

8. Monitoring of compliance with Agreements to rectify/correct any outstanding issues (of minor importance) revealed by the Certification Procedure within the period of time indicated by Currence iDEAL.

For Accredited Parties, the Certification Procedure is more limited in scope than the Certification Procedure for Licensees and Certificate Holders. The main difference is that the requirements for the Role of CPSP which are verified by Currence iDEAL on a risk-based approach are more limited if the Applicant is applying for the Role of CPSP as an Accredited Party than if the Applicant is applying for the Role of CPSP as Certificate Holder.

5.5 iDEAL API Specifications

Currence iDEAL provides iDEAL API Specifications in the iDEAL R&R. The iDEAL API Specifications describe the message traffic of an iDEAL Transaction. There are API Specifications for Licensees (Issuers and Acquirers) and API Specifications for Acquiring Participants with a Direct Connection to the iDEAL Hub. If an Acquiring Participant connects to the iDEAL Hub via its own technical interface, the Acquirer must provide its specifications to its Acquiring Participant.

5.6 Overview iDEAL R&R documentation

The iDEAL R&R consist of the following documents:

• General Notes (this document)
  This gives an outline description of the iDEAL Scheme, with the Roles and iDEAL products and services associated with them.

• Agreements
  Licence Agreement: The agreement concluded by a Licensee with Currence iDEAL after successfully completing the Certification Procedure for the iDEAL Scheme. The Fees annex also applies here;
  Certificate Agreement: The agreement concluded by a Certificate Holder with Currence iDEAL after successfully completing the Certification Procedure for the iDEAL Scheme. The Fees annex also applies here;
  Accreditation Agreement: The agreement concluded by an Accredited Party with Currence iDEAL after successfully completing the Certification Procedure for the iDEAL Scheme. The Fees annex also applies here.

General Regulations (GR)
GR - part 1 - Definitions: defined terms in the iDEAL R&R that start with a capital letter;
GR - part 2 - General Provisions: description and applicability of the General Regulations;
GR - part 3 - Advisory Board Regulations: duties and powers of the members of the Advisory Board;
GR - part 4 - Communication Regulations: description of how parties may communicate in relation to the iDEAL Scheme;
GR - part 5 - Change Procedure Regulations: description of how Currence iDEAL implements changes to the iDEAL R&R;
GR - part 6 - Penalty Regulations: description of when Currence iDEAL may impose a penalty on an Institution. The Tables annex also applies here;
GR - part 7 - Bilateral agreements: description of how and when a bilateral fee is applicable between the Licensees.
GR - part 8 - The iDEAL Hub: a description of how the iDEAL Hub functions and the duties and responsibilities of Currence iDEAL, with the following two Appendices:

• iDEAL GR - part 8 - appendix ‘Data Processing Agreement': the terms and conditions under which Currence iDEAL processes the iDEAL Transaction Data on behalf of the Institutions and in accordance with the Institutions’ instructions as required based on article 28 GDPR and in compliance with Applicable Data Protection Laws.

• iDEAL GR - part 8 - appendix 'Joint Controller Agreement': the respective responsibilities of Currence iDEAL and the Issuers as joint controllers under article 26 GDPR in relation to iDEAL Profile Data relating to iDEAL Fast Payment (iDEAL Snel Betalen) and the handling of Service Requests in compliance with Applicable Data Protection Laws.

Acceptance Regulations and Certification Procedure
Acceptance Regulations: a description of the procedure established by Currence iDEAL to assess whether an Applicant may be accepted into the iDEAL Scheme in order to be able to fulfill the Role it has applied for. This is comparable with a NDA and these Regulations are applicable during the iDEAL Certification Process;
Certification Procedure: a description of the procedure established by Currence iDEAL to assess whether an Applicant meets the conditions set out in the iDEAL R&R on the basis of a Control Self Assessment (CSA) that the Applicant carries out.

• iDEAL R&R - Provisions per Role

1. Issuer: a set of provisions that a Licensee who is certified for the Role of Issuer is obliged to comply with;

2. Acquirer: a set of provisions that a Licensee who is certified for the Role of Acquirer is obliged to comply with;

3. Collecting Payment Service Provider (CPSP): a set of provisions that a Certificate Holder or (if the annual volume of iDEAL Transactions does not exceed EUR 3 million) Accredited Party who is certified or accredited for the Role of CPCP is obliged to comply with;

4. C2C Provider: a set of provisions that a Certificate Holder who is certified for the Role of C2C Provider is obliged to comply with.

• R&R Annexes

1. Branding Manual and the use of the iDEAL logos

2. Certificate Policy

   1. Certificate Practice Statement

   2. Certificate Subscriber Agreement

3. Escalation Procedure

   1. Personal Data Breach Notification

4. General terms and conditions for iDEAL Contracts

5. Management of ICT infrastructure

6. Minimum acceptance criteria

7. Monitoring and follow-up (alleged) Abuse of iDEAL

8. Operational Agreements

• iDEAL API Specifications and guide lines
  The iDEAL API Specifications has the following set of API Specifications:

  • https://currencenl.atlassian.net/wiki/spaces/I2P/pages/3299148288

  • Issuer API’s: A set of API specifications which prescribe the technical interface between Currence iDEAL and Licensees via the iDEAL Hub;

  • https://currencenl.atlassian.net/wiki/spaces/I2P/pages/3299147777, with special attention for the mandatory filling of the iDEAL API fields: https://currencenl.atlassian.net/wiki/spaces/I2P/pages/3648290822

  • Acquirer API’s: a set of API specifications which prescribe the technical interface between Currence iDEAL and Acquirers; and

  • Direct Merchant/CPSP API’s: a set of API specifications which prescribe the technical interface between Currence iDEAL and Acquiring Participants with a Direct Connection to the iDEAL Hub.

5.6.1 Availability of the iDEAL API Specifications

The following is applicable:

1. For access to the iDEAL API Specifications, interested parties first need to complete and sign the ‘iDEAL API Specifications application form’ and pay a fee.

2. The iDEAL API Specifications will only be made available via an intranet website specifically set up for this purpose. This is accessible by using a username and password. The Applicant is responsible for ensuring that unauthorised persons do not gain access to the intranet website.