Visa Privacy Statement for Mainland China
Effective date: March 3, 2023
VISA WORLDWIDE PTE LIMITED (a company registered in Singapore, herein after referred to as “we” or “Visa”) are fully aware of the importance of the personal information for user (hereinafter referred to as “you” or “user”). Respecting your privacy is at the heart of Visa’s mission and we are committed to doing our utmost to keep your personal information safe. This Visa Privacy Statement for Mainland China (hereinafter referred to as this “Statement” or “Privacy Statement”) applies to the promotional activities (hereinafter referred to as “Visa Activities”) for cross-border consumptions conducted by Visa within the mainland of the People’s Republic of China (hereinafter referred to as “Mainland China”, excluding Hong Kong and Macao Special Administrative Regions and Taiwan Region) alone or in conjunction with other financial institutions.
Prior to participating in Visa Activities, we advise you to read carefully and understand all the contents of Visa Global Privacy Notice and this Statement, especially to make sure that you have been fully aware of and understood the meaning of the bolded contents and the corresponding legal consequences, and, on this basis, you make your own choices that you deem appropriate. We will protect your personal information in accordance with the following principles: the principles of lawfulness, legitimacy, necessity, and good faith, the principles of clear purpose, reasonableness, and direct relevance, the principle of minimum necessity, the principles of openness and transparency, and the principle of safeguarding personal information and bearing liabilities. At the same time, we have endeavored to use plain, simple, and concise language and to highlight the provisions of this Statement that are of significant relevance to your rights and interests in bold font. If you have any queries, questions, or suggestions about the contents of this Statement, you can contact us using the contact details set out in this Statement.
This Privacy Statement supplements and constitutes an integral part of Visa Global Privacy Notice. With respect to the Visa Activities, in case of any inconsistency between Visa Global Privacy Notice and this Statement, this Statement shall prevail.
-
-
Personal information refers to all kinds of information related to identified or identifiable natural persons recorded by electronic or other means, excluding the information that has been anonymized.
Sensitive personal information refers to the personal information that is likely to result in damage to the personal dignity of any natural person or damage to his or her personal or property safety once leaked or illegally used, including such information as biometric identification, religious belief, specific identity, medical health, financial account and whereabouts and tracks, as well as the personal information of minors under the age of 14.
-
-
We will collect the information generated from your participation in Visa Activities, the information you voluntarily provide when you participate in Visa Activities, and your personal information we legally collected from third parties in accordance with laws and regulations or based on your consent in accordance with the principles of lawfulness, legitimacy, necessity, and good faith. You can click the Special Statement on Personal Information Collection to read the details on the personal information we collect.
In order to comply with the requirements of the Chinese laws and regulations, to provide you with services related to Visa Activities, and to promote the quality of our services, we may use your information in the following situations:
- Achieve the purposes stated in the Special Statement on Personal Information Collection;
- When we will use the personal information for other purposes other than these described in this Statement, we will request your consent again as required by laws and regulations.
In accordance with relevant laws and regulations, in the following situations, we may legally collect and use your personal information without your consent:
- where it is necessary for the performance of statutory obligations or statutory duties by us;
- where it is necessary for the conclusion or performance of a contract to which you are a party;
- where it is necessary to respond to a public health emergency, or necessary to protect the life, health and property safety of a natural person in emergency situations;
- where it is necessary to handle the personal information disclosed by you or other personal information that has been legally disclosed within a reasonable scope;
- under any other circumstance as provided by any laws or administrative regulations.
-
-
When you use the services we provide in connection with Visa Activities, we may use Cookie, pixel labeling, browser analysis tools, server logs, and other technologies to collect information. You can click Visa Cookie Notice to learn more details of our use of Cookie and similar technologies.
-
-
Entrusted processing of personal information. In order to provide you with services related to Visa Activities, we may entrust third-party service providers such as system maintenance service providers, telecommunication service providers, information storage service providers, and Visa partners to process your personal information. We will perform corresponding legal obligations in accordance with applicable laws and regulations and take appropriate measures to keep your personal information confidential and protected, including requiring third parties to take appropriate measures keep confidential and protect the security of your personal information.
Sharing of personal information. We share your personal information on the premise of complying with the principles of lawfulness, legitimacy, and minimum necessity, and clear purpose. We will take effective technical protection measures to ensure the security of your personal information. We will strictly require corporation partners that receive personal information to fulfill their obligations and responsibilities for personal information protection. You can click the Special Statement on Personal Information Sharing to check the details how we share your personal information.
Transferring of personal information. We generally do not transfer your personal information externally. According to laws, regulations and business practices, if we need to transfer personal information due to merger, division, dissolution, bankruptcy, etc., we will inform you of the recipient’s name and contact information, and, at the same time, we will require the recipient to continue to be bound by this Statement and assume the corresponding obligations and responsibilities. If the recipient changes the original processing purpose and method, it shall obtain your consent again in accordance with laws and regulations.
Public disclosing of personal information. We will not disclose your personal information publicly, except with your consent obtained in accordance with the law.
In accordance with relevant laws and regulations, in the following situations, we may legally share, transfer, and publicly disclose your personal information without your consent:
- where it is necessary for the performance of statutory obligations or statutory duties by us;
- where it is necessary for the conclusion or performance of a contract to which you are a party;
- where it is necessary to respond to a public health emergency, or necessary to protect the life, health and property safety of a natural person in emergency situations;
- where it is necessary to handle the personal information disclosed by you or other personal information that has been legally disclosed within a reasonable scope;
- under any other circumstance as provided by any laws or administrative regulations.
-
-
Personal Information Storage. Personal information generated, collected, and obtained during our operations in Mainland China will be stored in region outside Mainland China. Unless otherwise stipulated by laws and administrative regulations, we will only store your personal information for the shortest time necessary to achieve the purposes of processing. We will determine the storage period of personal information based on the following criteria: the period for which we provide you with services related to Visa Activities, and the legal or commercial obligations we assume. After the aforementioned storage period expires, we will delete or anonymize your personal information.
Cross-border Transfer of Personal Information. We, VISA WORLDWIDE PTE LIMITED, as the operator of the Visa Activities, are a private limited company incorporated in Singapore. Your provision of your personal information to us, or we collect your personal information from third parties constitutes a cross-border collection of personal information. You can click the Special Statement on Cross-border Transfer of Personal Information to check the details on our cross-border transfers of personal information.
We will provide personal information overseas in accordance with the requirements of applicable laws and regulations, fulfill legal obligations related to cross-border transfer of personal information, ensure the security of your personal information, and protect your legal rights and interests of your personal information.
-
-
We attach great importance to the security of your personal information, and will endeavor to take reasonable security measures to protect your personal information in order to ensure that our personal information processing activities comply with the requirements of laws and regulations and to prevent personal information from unauthorized access, public disclosure, use, modification, damage, or loss.
In the event of an unfortunate personal information security incident, we will promptly notify you of the incident in accordance with the requirements of laws and regulations in writing, or publish an announcement in a reasonable and effective manner. At the same time, we will also report the disposal of personal information security incidents in accordance with laws and regulations.
-
-
In accordance with the relevant Chinese laws and regulations, we guarantee that you may exercise the following rights with respect to your personal information:
- You have the right to access and copy your personal information, unless otherwise stipulated by laws and administrative regulations.
- When you find that your personal information that we process is incorrect or you need to update your personal information, you have the right to make corrections and updates.
- Change the authorization scope of your consent and cancel the authorization. For our collection and use of your personal information, you can give or withdraw your consent at any time. After the authorization is cancelled, we will no longer continue to collect, process, or use your corresponding personal information. However, your decision to cancel the authorization will not affect our previous processing of your personal information based on authorization.
- Personal information transfer: if you request to transfer your personal information to the personal information processor you designate, and such transfer meets the conditions specified by the cyberspace administration authorities, we will provide the transfer ways.
- You have the right to ask us to explain this Statement.
- In some services, we may make decisions only based on non-manual automated decision-making mechanisms including information systems, algorithms, etc. If these decisions significantly affect your legitimate rights and interests, you have the right to ask us to explain and we will provide appropriate remedies.
- You have the right to ask us to delete your personal information in the following circumstances:
- where the purpose of processing has been achieved, is impossible to achieve, or is no longer necessary to achieve;
- where we cease to provide relevant services, or the storage period of personal information has expired;
- where you withdraw your consent;
- where we process personal information in violation of laws, administrative regulations, or the agreement;
- other circumstances stipulated by laws and administrative regulations.
If the storage period stipulated by laws and administrative regulations has not expired, or if it is technically difficult to delete personal information, we will stop processing other than storing and taking necessary security protection measures.
If you encounter problems in exercising the aforementioned legal rights with respect to personal information or need to exercise other legal rights with respect to personal information, please contact us according to the contact information set out in this Statement.
In order to protect the security of your personal information, before responding to your personal information rights, you may need to provide a written request, or otherwise prove your identity, and we have the right to verify your identity before processing your request. Unless there are special circumstances, we will accept and process your request within 30 days. For your reasonable request, we do not charge any fees in principle. However, for repeated requests that exceed a reasonable limit, we will charge a certain cost depending on the circumstance. We have the right to refuse requests that are unreasonably repeated, require excessive technical means, bring risks to the legitimate rights and interests of others, or are very unrealistic.
If you are dissatisfied with our personal information protection work or find problems, you can contact us through the contact information set out in this Statement to make a complaint or report. If there are no special circumstances, we will accept and process your complaints and reports within 30 days.
-
-
Please pay attention that your counterparty to the transactions, the operator pf third-party websites you visit, the third-party service providers you access through us, and the third-party that receives your personal information may have their own personal information protection policies; when you view web pages created by third parties or use services provided by third parties, we will remind you in an appropriate manner that relevant services are provided by third parties, and you are advised to review and understand their personal information protection policies. If you find that the web pages created by these third parties or the services provided by the third parties are at risk, it is recommended that you terminate the relevant operations to protect your legitimate rights and interests.
-
-
Generally, we will not process personal information of minors under the age of 14 (i.e., children). If you are a minor under the age of 14 and want to participate in Visa Activities, we need to obtain the consent of your parents or other guardians. Please ask your parents or other guardians to contact us through the contact information set out in this Statement to go through the relevant procedures. We will protect children’s relevant information in accordance with the Chinese laws and regulations, and children’s parents or other guardians can exercise children’s rights in accordance with the methods agreed in this Statement.
-
-
In accordance with the provisions of the state laws and regulations and the needs of providing services, we may revise this Statement in part or in whole. If the modified contents involve the following matters, we will notify you through the ways including, without limitation, push notifications, pop-up windows, announcements, etc.
- Our name and contact information;
- The purpose and method of processing personal information, the type of personal information processed, and the storage period;
- The methods and procedures by which you exercise your legal rights;
- Other matters that should be notified as required by laws and administrative regulations.
After the Privacy Statement is revised, you have the right to choose whether to continue to authorize us to collect, process, and use your personal information. Please fully understand our revised Privacy Statement and make the choices you deem appropriate. If you do not agree with the revised Privacy Statement, you have the right and should immediately stop using our services.
-
-
If you have any queries, questions, or suggestions regarding the processing of your personal information, or if you would like to exercise any of your rights, or if you are unsatisfied with the methods of our processing of your personal information, please contact us in the following ways:
- Email us: [email protected];
- Mail us a letter:
Visa Global Privacy Office
900 Metro Center Blvd.
Foster City, CA, 94404 USA