5. Your rights
You always have the right to object to our marketing communications. To opt-out of emails, simply click the link labelled “unsubscribe” at the bottom of any email we send you. To revoke permissions that you may have given to send text messages, text STOP in response to any message.
Visa also respects the rights of EEA residents to access, correct and request erasure or restriction of their personal
information as required by law. Where Visa is a data controller, this means:
- You generally have a right to know if Visa processes your personal information. If we do process your personal information, you have the right to request that we provide you with a copy of that personal information or in some cases, provide the information to another data controller. If your information is incorrect or incomplete, you have the right to ask us to update it.
- You have the right to object to our processing of your personal information. If we are processing your personal information based on your consent, you have the right to withdraw your consent at any time.
- You may also ask us to delete or restrict your personal information.
You may exercise these rights by accessing the following links:
Alternatively, you may exercise these rights by contacting us via email at [email protected] or by writing to us at the address above and a member of our Privacy team will assist you. Please understand that we may need to verify your identity before we can process your request.
If Visa is processing your personal information as a data processor, we will refer you to our client (such as to your Visa card issuer) for assistance with these requests. Visa supports its clients in responding to requests as required by law.
If you believe that we have processed your personal information in violation of applicable law, you may also file a complaint with the Visa global privacy office, as above or with a supervisory authority.
6. International transfers
We generally use approved standard contractual clauses to assure that personal information is adequately protected when it is transferred out of the European Economic Area or Switzerland but we may also make transfers to recipients with approved binding corporate rules or to recipients in the United States who have certified to the EU-US and/or Swiss-US privacy shield framework.
Please contact us via email to [email protected] if you would like more information about cross-border transfers or to obtain a copy of the standard contractual clauses.
7. Data retention
We will retain your personal information for as long as the information is needed for the purposes set forth above and for any additional period that may be required or permitted by law. The length of time your personal information is retained depends on the purpose(s) it was collected, how it’s used and the requirements to comply with applicable laws. For example, you may request that we delete your personal information by contacting us via email to [email protected]. Unless we are required to retain your information, we will delete it as required by applicable law.
The recording, systematisation, accumulation, storage, refinement (including updating or changing) and extraction of any personal information of Russian citizens occurs with the use of databases located in the territory of the Russian Federation, except as otherwise permitted by Russian data protection legislation. We may process the personal information of Russian citizens using databases located in the United States, Singapore, the United Kingdom and Ireland, subject to compliance with Russian data protection legislation.