Visa Solution Additional Country/Territory-Specific Privacy Notices

Argentina

The owner of personal data has the right to exercise the right of access to them, free of charge at intervals of not less than six months, unless a legitimate interest is evidenced to that effect, in accordance with the provisions of article 14, subsection 3 of the Law No. 25,326. The “Dirección Nacional de Datos Personales”, control authority of Law No. 25,326, has the power to address complaints and claims that are filed in relation to the breach of the rules on protection of personal data.

Address: Sarmiento 1118, 5º piso (C1041AAX), C.A.B.A.

Tel.: (011) 4383-8510/12/13/15

Web: www.jus.gov.ar/datos-personales.aspx

E-mail: [email protected]

Brazil:

In addition to the personal information listed above, the Visa Solution also asks you to provide your Cadastro de Pessoas Físicas (CPF), to help facilitate transactions. Once you associate a CPF with an account, the CPF cannot be changed. Your CPF will be handled and protected in the same way as other personal information you provide.

European Economic Area or the United Kingdom

1. Information about Visa

This information is being provided by Visa Inc. for itself and its affiliates:

Visa USA, Inc.

900 Metro Center Boulevard

Foster City, CA 94404

USA

Visa USA, Inc. is based in the United States. Our representative in the EEA and the United Kingdom is:

Visa Europe Limited

1 Sheldon Square

London, W2 6TT.

Registration Number: Z8657396

To contact Visa’s data protection officer please write to us at either of the above addresses or email us at [email protected]

2. The purposes and legal basis for processing, including legitimate interests

The Visa Solution Privacy Notice explains the reasons why we process your personal information. We only process Personal Information when we have a legal basis for the processing, as follows:

• To fulfil a contract with you or as needed to fulfil a contract between you and a  merchant or the financial institution that issued your card, where Visa is a data processor for that merchant or financial institution
• For closely-related purposes, such as payment processing and financial account management, contract management, website administration, business continuity and disaster recovery, security and fraud prevention, corporate governance, reporting and legal compliance
• With your consent (or provided you have not objected, or opted-out, as may be appropriate under applicable law), to provide you with marketing communications. You have the right to withdraw your consent at any time by following the instructions in the communications we send you or by sending an email containing your request to [email protected]. 
• To comply with the laws that are applicable to us around the world

We may also process your Personal Information for the purposes of our own legitimate interests or for the legitimate interests of others, provided that the processing does not and shall not outweigh your rights and freedoms. In particular, we will process your Personal Information as needed to:

• Protect you, us or others from threats (such as security threats or fraud),
• Enable or administer our business, such as for quality control, consolidated reporting, and customer service,
• Manage corporate transactions, such as mergers or acquisitions, and 
• Understand and improve our business or customer relationships generally.

3. Automated decision-making and profiling

We use profiling and analytics to understand how individuals use their Visa cards and other products, for product development purposes and business intelligence purposes. These analytics help us understand and improve our products and better serve our clients and consumers. We also use analytics for security and anti-fraud purposes, such as to identify the unauthorised use of Visa cards.

We will not make automated-decisions about you that may significantly affect you, unless (1) the decision is necessary as part of a contract that we have with you, (2) we have your explicit consent, or (3) we are required by law to use the technology. 

4. When you are required to provide Personal Information to Visa

In most cases, you are not required by law to provide any Personal Information to Visa. You are required to provide certain Personal Information to enable us to enter into a contract with you so that you can use our products and services. Our registration forms indicate which data elements are required for our contracts. If you do not provide these data elements, we cannot do business with you. 

5. Your rights

You always have the right to object to our marketing communications. To opt out of marketing emails, simply click the link labelled “unsubscribe” at the bottom of any email we send you. To revoke permissions that you may have given to send text messages, text STOP in response to any message.  

Visa also respects the rights of EEA citizens to access, correct and request the deletion or restriction of their Personal
Information as required by law. Where Visa is a data controller, this means:

• You generally have a right to know if Visa is storing your Personal Information. If we do process your Personal Information, you have the right to request that we provide you with a copy of that Personal Information, or in some cases, provide the information to another data controller. If your information is incorrect or incomplete, you have the right to ask us to update it.
• You have the right to object to our processing of your Personal Information. If we are processing your Personal Information based on your consent, you have the right to withdraw your consent at any time.
• You may also ask us to delete or restrict your personal information.

To exercise your rights, please write to us at either of the above addresses or email us at [email protected] and a member of our Privacy Team will assist you. Please understand that we may need to verify your identity before we can process your request.  If Visa is processing your Personal Information as a data processor, we will refer you to our client (such as to your Visa card issuer) for assistance with these requests. Visa supports its clients in responding to requests as required by law. 

If you believe that we have processed your Personal Information in violation of applicable law, you may also file a complaint with the Visa Global Privacy Office, as above or with a supervisory authority.

6. International transfers

As noted in the Visa Solution Privacy Notice, your Personal Information may be transferred to, stored at or processed in the United States, Singapore, Australia and other countries that may not have equivalent privacy or data protection laws.

We generally use approved Standard Contractual Clauses to assure that Personal Information is adequately protected when it is transferred out of the European Economic Area or Switzerland, but we may also make transfers to recipients with approved binding corporate rules or to recipients in the United States who have signed up to the EU-US and/or Swiss-US Privacy Shield Framework. 

Please contact us via email at [email protected] if you would like more information about cross-border transfers or to obtain a copy of the standard contractual clauses. 

7. Data retention

We will retain your Personal Information for as long as the information is needed for the purposes set forth above and for any additional period that may be required or permitted by law. The length of time your Personal Information is retained depends on the purpose(s) for which it was collected, how it is used, and the requirements for compliance with applicable laws. For example, you may request that we delete your personal information by contacting us via email to [email protected]. Unless we are required to retain your information, we will delete it as required by applicable law. 

Users in the European Economic Area and the United Kingdom may refer to our Cookie Notice.