Valitor Privacy Notice
Valitor (“We, Us, Our”) is a provider of payment Services that includes issuing of cards and acquiring of card transactions, provision of consumer loans and various other payment related services (“Service”). As a payment service provider, We may process Your data for variety of reasons in relation to this purpose.
This privacy notice outlines how We use and process personally identifiable information in relation to Our Services.
1.1. Data means any electronic data or information that is processed by Us respective of the Services. Data may include but is not limited to; personally identifiable information as it is defined in the General Data Protection Regulation, such as name, address, phone number, e-mail address, and any payment details associated with the Services, including all transaction and card data. Data may furthermore include any information or data that is processed under instructions from You; and data or information that Valitor is required to process in order to comply with legal requirements or it has legitimate interest to process, including information obtained from third parties.
1.2. How Data will be used: Data may be processed by Us for variety of reasons including but not limited to ensure compliance to applicable legal requirements, for the purposes of business processes including without limitation management analysis, audit, forecasts, business planning and transactions (including joint ventures and business sales), dealing with legal claims and maintaining good governance. Valitor may anonymise Data and use it for analysis of statistical trends, carrying out actuarial work, business planning, risk assessment and to analyse costs and charges.
1.3. Data disclosures: To provide the Services, Valitor is required to disclose Data with various third parties, including but not limited to; government authorities, partners and suppliers of essential services such as financial institutions and payment schemes. Such third parties may include:
Our partners and service providers. We share Data with service providers who help Us provide the services to You. These may include banks and other financial institutions, credit bureaus, website hosting providers, data analytics providers, information technology, customer service, email delivery;
Third parties that You have authorized to receive such data, for example if You authorize a third-party application provider to access Your information. The use of data by a third party authorized by You is subject to the third party’s privacy policy and/or terms and conditions;
We share Data with entities within the Valitor Group of companies;
We use and disclose data as we believe necessary for any of the following purposes: (a) under applicable law; (c) to protect Our legitimate interest (d) to respond to production orders from law enforcement, courts, regulatory bodies, and other public and government authorities, which may include authorities outside the country You reside in
1.4. Retention period: We take appropriate measures to ensure that any Data is kept only for so long as is necessary for the purpose for which such information is used and/or to comply with applicable law.
1.5. Transfers outside the European Economic Area: We will ensure, to the extent that any personal data originating from the European Economic Area is transferred to a country or territory outside the European Economic Area that has not received a binding adequacy decision by the European Commission or a competent national data protection authority, such transfer will be subject to appropriate safeguards that provide an adequate level of protection or where alternative arrangements are in place to protect the rights of data subjects.
1.6. Rights under the GDPR: The General Data Protection Regulation (GDPR) has a number of provisions with regard to the rights of the data subjects. Data subjects have the right to request access to and rectification of personal data, the right to erasure, the right to restrict processing, object to processing as well as in certain circumstances the right to data portability. In the case where a data subject has provided consent for the processing of personal data the data subject has the right (in certain circumstances) to withdraw that consent at any time which will not affect the lawfulness of the processing before the consent was withdrawn. Data subject are recommended to contact Valitor at privacy@valitor.com for any request regarding data subject rights. Data subjects have the right to lodge a complaint to the local Data Protection Authority in the believe that We have not complied with the requirements of the GDPR with regard to personal data.
1.7. Security: We are committed to ensure that Data is secure and complies fully with the applicable law. In order to prevent unauthorized access, use or disclosure We have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information We process.
1.8. Changes to this Privacy Notice. We may occasionally update this Privacy Notice. When We do, We will notify you either by placing a prominent notice on the home page of Our Website or by directly sending You notification. We encourage You to periodically review this Privacy Notice to stay informed about how We are using and protecting Personal Information We collect. Your continued use of the Website constitutes Your agreement to this Privacy Notice and any updates that We may make.
1.9. Opting out of marketing messages. You can ask Us to stop sending you marketing messages at any time by contacting Us at privacy@valitor.com. Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of the Services.
1.10. Identity and contact details of controller and data protection officer: To get further information relating to how We processes personal data it is possible to contact Us via email: privacy@valitor.com. Our full contact details are Valitor hf., Dalshraun 3, 220 Hafnarfjörður, Iceland.