This supplementary privacy notice from Visa provides the additional information required by Federal Law No. 13,709/2018 - General Data Protection Law of Brazil ("LGPD"). These provisions and statements in the Global Visa Privacy Notice explain our practices with respect to Personal Information (term defined in the Global Privacy Notice) in Brazil.
Important information: Brazil
Information about Visa
This information is provided by Visa Inc. on behalf of itself and its affiliates:
Visa Inc.
900 Metro Center Boulevard
Foster City, CA 94404
USA
Visa Inc. is headquartered in the United States. Our representative in Brazil is:
Visa do Brasil Empreendimentos Ltda.
Address: Av. Presidente Juscelino Kubitschek, no 1.909, 3º andar, Torre Norte, Vila Nova Conceição, São Paulo/SP
Contact Visa's global privacy department via email at [email protected] or write to:
Visa Global Privacy Office
900 Metro Center Boulevard
Foster City, CA 94404
USA
Collection and use of Personal Information
As described in the Visa Global Privacy Notice, some Personal Information is necessary for us to establish a business relationship with you so that you can use our products and services, participate in promotions or enjoy benefits addressed to payment credentials (cards) issued under the Visa brands. Our registration forms indicate what Personal Information is required.
In addition to the Personal Information listed above, Visa also requests the provision of your Tax ID number to individualize the registration, avoid fraudulent registrations and, if necessary, facilitate the login and password recovery processes. Once a Tax ID number has been associated with a registered account, that number cannot be changed. Your Tax ID number will be used and protected in the same way as other personal information that you provide to us.
Visa also asks you for the day and month of your birthday in order to eventually provide offers and benefits on your birthday.
Visa's Global Privacy Notice explains the purposes for which we process your Personal Information.
We may also process your Personal Information for our own legitimate interests or the legitimate interests of others, provided that such processing does not infringe your fundamental rights and freedoms or if we have another legal basis for the processing under data privacy law.
Automated decisions
We use profiling and analytics to understand how people use Visa cards and other products for product development and business information purposes. These analytics help us understand and improve our products, and to improve the services for customers, partners and consumers. We also use security and fraud analytics, for example, to identify the unauthorized use of Visa cards.
We do not make automated decisions about you that may affect you significantly unless (1) the decision is required as part of a contract we have with you or in which you are a party, (2) we have your specific consent, or (3) we are required by law to use the technology.
Your Rights
You may choose how Visa will use your Personal Information whenever Visa acts as data controller with respect to the custody and processing of your information. You always have the right to oppose our marketing communications.
Please note that Visa Advertising Solutions does not use Card Transaction Data in Brazil to generate data products as the tool is not available in Brazil.
In compliance with the Brazilian LGPD, Visa respects and guarantees you the possibility of submitting requests based on the following rights:
- Confirmation of processing;
- Access to data;
- Correction of incomplete, inaccurate or outdated data;
- Anonymization, blocking or deletion of unnecessary, excessive data;
- Data portability to another service provider or product, upon express request, as may be provided by the appropriate law;
- Deletion of data processed with your consent;
- Obtaining information about the public or private entities with which Visa shared your data;
- Information on the possibility of you not providing consent, as well as being informed about the consequences should consent not be given;
- Revocation of consent.
To exercise these rights, please write to our Global Privacy Office at: [email protected] and a member of our privacy team will assist you. Please note that we may need to verify your identity before we process your request.
If Visa is processing your Personal Information as a data processor, you will receive our customer's contact details (e.g. the Visa card issuer) to obtain support with your requests directly with this partner. Visa supports its customers by responding to requests as required by law.
We emphasize that your request, regarding your rights as data subject, may be legally rejected, either for formal reasons (such as your inability to prove your identity) or legal reasons (such as the request for deletion of data whose maintenance is required or permitted by law). Be sure that, in the event of impossibility of fulfilling these requests, Visa will provide reasonable justification.
If you believe that we are processing your Personal Information in violation of applicable law, you may also file a complaint with Visa's Data Protection Officer, who may be contacted at Visa's Global Privacy Office, or with a supervisory authority.
Sharing Personal Information
As noted in Visa's Global Privacy Notice, we may share your Personal Information with the financial institution (or other entity) that issued your Visa card (or other payment mechanism) and with our Affiliates, merchants, other financial institutions and third parties as necessary to process transactions, manage risks and fraud, provide services to such entities and for similar purposes (e.g., investigate and resolve disputed charges, apply a commercial promotion you are involved in) and comply with applicable law.
We may share your Personal Information with our service providers, who are required to protect it by law or contract and use it in accordance with our instructions.
International Transfers
In accordance with Visa's Global Privacy Notice, your Personal Information may be transferred, stored or processed in the United States, Singapore, Australia and other countries that may not have equivalent privacy or data protection laws.
In general, we use standard contractual clauses to ensure that Personal Information is adequately protected when transferred outside Brazil, but we may also make transfers using other mechanisms as permitted by law.
Please contact us at [email protected] if you would like more information about international transfers.
Duration of processing and retention of Personal Information
We will retain your Personal Information as long as it is necessary for the purposes set out above and for any additional period that may be required or permitted by law. The period in which your Personal Information is retained depends on the purposes for which it was collected, how it is used, and the requirements to comply with applicable laws. You may request the deletion of your Personal Information via email at [email protected] or by writing to the Global Privacy Office at the address above. If we do not have a legal basis for retaining your information, we will delete it in accordance with applicable law.