Skip to content

IATA agencies in Germany

PCI DSS for travel agencies in Germany, prepared with you.

For IATA-accredited agencies that take card payments: by terminal, virtual terminal, payment link or their own website.

In short

IATA-accredited travel agencies in Germany that accept payment cards validate PCI DSS every year, normally with a Self-Assessment Questionnaire (SAQ) and an Attestation of Compliance. Wisepassenger works out which SAQ applies, completes the official PCI SSC questionnaire with you and delivers it ready to sign, for 250 EUR invoiced without VAT under the reverse-charge mechanism.

Price, invoice and language

Price

250 EUR per SAQ, without VAT: invoiced from Spain under the reverse-charge mechanism.

Invoice and payment

You pay by card through a secure payment link sent with the SAQ; the invoice follows the payment and carries the reverse-charge note.

Language

We work with you by email, in German or English.

How it works

  1. 1

    Tell us how you take cards

    Terminal, virtual terminal, payment links or your website, and whether any card data is kept. A short email is enough.

  2. 2

    We choose the SAQ and fill in the official form

    The questionnaire that matches how you take cards, on the official PCI SSC document, with the eligibility criteria that decide it.

  3. 3

    You sign it and keep it

    You receive the questionnaire and the Attestation of Compliance ready to sign, with a note of what to send if your bank or payment provider asks for it.

More on PCI DSS for travel agenciesWhat an SAQ is

Common questions

How much does it cost for an agency in Germany?

250 EUR per SAQ, without VAT. The service is invoiced from Spain under the reverse-charge mechanism, and the invoice carries the corresponding note.

Can we work in German?

Yes, by email in German or English. The questionnaire itself is the official PCI SSC document, which is in English.

Which SAQ does an agency usually need?

It depends on how you take cards: SAQ A for payment links or a website that hands the payment to the provider's page, SAQ C-VT for a virtual terminal where your staff type the card, SAQ A-EP when your own website builds the payment form, and SAQ D when card data is stored electronically.

Is Wisepassenger part of IATA?

No. Wisepassenger is an independent consultancy and is not affiliated with IATA.

PCI DSS in other countries

Join hundreds of travel agencies that already work with us

  • Viajes Tarna
  • Upper Level Travel
  • Nova Travel
  • Viajes y Viajes
  • Grand Travel
  • Khipu Travel Agency
  • Ardass Travel
  • Colombia Memories
  • L'alianXa Travel Network
  • Tropical Turismo
  • BeTravel
  • Equitur
  • Viajes Premier
  • Tour Magazine
  • Ready 2 Trade & Travel
  • Traveller

Final call

Ready for departure?

First time or renewal, your PCI DSS prepared by specialists in travel agency compliance.