Stored Value Solutions, a division of Comdata Inc. takes the privacy of your personal information seriously. In the course of operating our business and interacting with you, we collect, use, and share personal information. This Privacy Policy provides you with information about how we collect, use, and share personal information, and describes choices and rights available to you regarding your personal information. If you have any questions, please contact us via the channels listed below.
ABOUT THIS PRIVACY POLICY
This Privacy Policy applies to Stored Value Solutions, a division of Comdata Inc. ( “SVS,” “we,” “our,” or “us”). In this Privacy Policy, the words “you” and “your” refer to you, the user of our Services, as the party agreeing to this Privacy Policy. This Privacy Policy does not apply to Buyatab Online Inc., a Canadian company owned by SVS, or your use of the Buyatab Online Inc. websites.
This Privacy Policy describes our privacy practices for information that we collect from your interactions with us, including, but not limited to:
The Websites, the Apps, the Services, the Communications, and the Participation Opportunities are collectively referred to as the “Company Activities and Interactions.”
This Privacy Policy also applies to personal information that we receive from business partners and other third parties. You can find more information about our collection of personal information below.
Additional privacy disclosures or policies may apply in connection with your use of a specific product or relationship you may have with one of our U.S. lines of business. Please read this Privacy Policy and any additional privacy disclosures or policies to understand our views and practices.
This Privacy Policy does not apply to third-party websites accessible through our Websites, unless we advise you otherwise.
1. ACCEPTANCE
Please read the following carefully to understand our views and practices. By using, visiting, or participating in the Company Activities and Interactions, you are accepting and consenting to the practices described in this Privacy Policy.
2. PERSONAL INFORMATION WE COLLECT
"Personal Information" means any data that identifies you as an individual or relates to an identifiable individual. We obtain various categories of Personal Information relating to you from various sources described below.
2.1 CATEGORIES OF PERSONAL INFORMATION WE COLLECT
The categories of Personal Information that we may collect include:
2.2 WHERE WE COLLECT PERSONAL INFORMATION FROM
Personal Information Obtained from You
We collect Personal Information from you directly in a variety of ways. Some examples are when you:
Personal Information Obtained from Third Parties
We may collect your Personal Information from third parties. Some examples are when we collect information from:
Personal Information Obtained Passively
When you access our Websites, we and our service providers may collect Personal Information related to you, as well as processes and programs that are running on your device, through automated means, such as cookies, web beacons, and web server logs. A cookie is a small data file that a website transfers to your computer’s hard drive. Web beacons (sometimes called transparent GIFs, clear GIFs, or web bugs) are small strings of code that provide a way for us to deliver a small graphic image (usually invisible) on a web page or in an email. Web beacons can recognize certain types of information on your computer such as cookies, the time and date a web page is viewed, and a description of the web page where the web beacon is placed. A web server log is a simple text file that records activity on the server, such as when and how visitors are accessing a website.
We may use cookies, web beacons, and web server logs to improve your experience on our Websites, including to troubleshoot and perform analytics on the Services, provide you with content customized to your interests, and understand whether users read email messages and click on links contained within those messages so that our Websites can deliver relevant content. We may also use web beacons, web server logs, and similar standard technologies to track your use of our Websites or to track your response to email messages that we send you in connection with our Websites.
By using our Websites, Apps, and Services, you consent to the placement of cookies, web beacons, and similar technologies in your browser and on emails in accordance with this Privacy Policy. To learn more about our use of cookies and how to set your preferences, please see our “Cookies” section below.
3. HOW WE USE YOUR PERSONAL INFORMATION
We may use Personal Information provided to us as follows:
In some instances, we may combine Personal Information and other information we collect with offline information, including information from third parties. We may also transfer or disclose your information within our corporate family of companies for these purposes.
We will not use your Personal Information for any other purposes unless we notify you, or for which you have specifically consented to at the time of collection, or as otherwise described in this Privacy Policy, or as permitted or required by law, rule, regulation, subpoena, or other legal process.
4. HOW WE DISCLOSE YOUR PERSONAL INFORMATION
We disclose your Personal Information to third parties when we have your prior consent and under the following limited circumstances:
5. LINKS TO OTHER SITES
Our Websites may contain third-party links, include third-party integrations, or offer a co-branded or third-party-branded service (collectively, “Other Links and Sites”). Through these Other Links and Sites, you may be providing information (including Personal Information and other information) directly to the third party (which may include certain service providers), us, or both. Because these Other Links and Sites may not be hosted or controlled by us, however, we are not responsible for the privacy practices of those Other Links and Sites or the content provided thereon.
This Privacy Policy does not apply to the information practices of those Other Links and Sites, provided that this Privacy Policy does apply to the extent we receive or use Personal Information provided though Other Links and Sites. We encourage you to review the privacy policies of each of those Other Links and Sites carefully. We are not responsible for third-party websites.
6. ANALYTICS SERVICES
The Websites may use analytics services provided by third parties, such as Google Analytics, Adobe Analytics, and Moz, among others (collectively, “Data Analytics Providers”). These Data Analytics Providers may use collection technologies to collect and store information about the use of our Websites and the use of other websites, apps, and online resources.
You can read Googles’ privacy policy, which applies to Google Analytics, at http://www.google.com/intl/en/policies/privacy/. You also can opt out from being tracked by Google Analytics in the future by downloading and installing Google Analytics Opt-out Browser Add-on for your current browser https://tools.google.com/dlpage/gaoptout. You can learn more about Adobe and opt out by visiting http://www.adobe.com/privacy/opt-out.html. You can read Moz’s privacy policy, which applies to Moz analytics, at http://moz.com/privacy-policy.
7. CROSS DEVICE TRACKING
If you use different devices, such as your home computer, laptop, mobile device, and/or other smart device, to access our Websites, Apps, and Services, we may use cross device tracking tools provided by third parties, such as Adobe Marketing Cloud Device Co-op. The Adobe Marketing Cloud Device Co-op allows us to better understand how you use our Websites, Apps, and Services across the various smart devices you use and to deliver tailored promotions. You can visit https://cross-device-privacy.adobe.com to learn more about how Adobe does this and to manage your choices relating to linking of devices.
8. THIRD-PARTY ADVERTISERS
We may use third-party advertising companies to serve advertisements regarding goods and services that may interest you when you access and use our Websites or Apps, other websites or apps, or other online services. To serve such advertisements, these companies place or recognize a unique cookie on your browser, including through use of pixel tags. If you would like more information about this practice, and to learn about your choices in connection with it, please visit http://www.networkadvertising.org/managing/opt_out.asp and http://www.aboutads.info/. To opt out of the practice, you may download the AppChoices app at www.aboutads.info/appchoices.
9. COOKIES
We use cookies to collect information about your activity, browser, and device when you visit our Websites or websites where our ads appear. Cookies allow us to collect information such as browser type, time spent on the Websites, pages visited, referring URL, language preferences, and other aggregated traffic data. Below is a summary of the types of cookies we use.
This Privacy Policy covers the use of cookies and other tracking devices by us. This Privacy Policy does not cover the use of cookies or other tracking technologies by any of our advertising partners. We encourage you to review the privacy policies or statements of these third-party advertising companies carefully. If you would like to learn more about the third-party advertisers that may be aware of the fact that you visit our Websites, and to understand your choices about having such advertisers’ cookies turned off, please visit www.networkadvertising.org.
If you want to remove or block cookies on your device, you can update your browser settings (your browser manufacturer has information on changing the default setting for your specific browser). You can find simple instructions on how to manage cookies on the different types of web browsers at www.allaboutcookies.org. You can also learn more about interest-based advertising and how to opt out of our vendors’ and other advertisers’ use of cookies and similar technologies to collect information to tailor content or advertising to you by visiting http://www.networkadvertising.org/managing/opt_out.asp and http://www.aboutads.info/.
10. SECURITY
We store your Personal Information and other information using reasonable physical, technical, and administrative safeguards. While we use industry standard means to protect our Websites, Apps, Services, and your information, no transmission of data over the internet is guaranteed to be completely secure. The measures we use are appropriate for the type of information we collect. However, it may be possible for third parties not under the control of us to intercept or access transmissions or private communications unlawfully. We cannot promise that your use of our Websites or Apps will be completely safe, nor can we ensure or warrant the security of any information you transmit to us over the internet. We encourage you to use caution when using the internet.
11. PRIVACY RIGHTS OF CALIFORNIA RESIDENTS
Under the California Consumer Privacy Act (“CCPA”), consumers have the right to request that a business not sell their personal information. We do not share your information with third parties in exchange for money. We do share your Personal Information with third parties to enhance your experiences with us, to improve our ability to serve you, and to keep you aware of our products, services, and offers.
In addition, the CCPA provides California residents with the following privacy rights:
If you are a California resident, or an authorized agent acting on behalf of a California resident, and would like to exercise one of these rights, please visit our website here or call us at +1 (888) 914-9661 (PIN 261782). When submitting such a request, please indicate the type of request you are making and provide the consumer’s first name, last name, email address, county, state, and the product or service the consumer has used. Once you submit a request, we will use that information to contact the consumer and attempt to verify the consumer’s identity by requesting a declaration and comparing the information provided to the information collected and/or maintained by us.
Please note there may be circumstances where we will not honor your request, as permitted under the CCPA. For example, if you request deletion, we may need to retain certain personal information to comply with our legal obligations.
California Sensitive Information Disclosure:
The table below describes the categories of sensitive personal information (as defined under California law) we collect and why. It also indicates whether we “sell” or “share” such information (as those terms are defined under California law). We do not “sell” sensitive personal information for purposes of cross-context behavioral advertising. We may share information as described below:
To contact us with questions about our compliance with the CCPA, email us at privacy@storedvalue.com. Please note that consumers will not receive discriminatory treatment for the exercise of privacy rights conferred by the CCPA.
12. OUR WEBSITES AND CHILDREN
We do not knowingly collect or sell information regarding anyone under the age of 13. If you are a parent or guardian and believe we may have inadvertently collected personal information from your child, please notify us immediately by sending an email to privacy@storedvalue.com.
13. MARKETING COMMUNICATIONS
If you no longer want to receive marketing-related emails from us on a going-forward basis, you may opt out by contacting us by email at privacy@storedvalue.com or by following the instructions in any such email you receive from us. We will try to comply with your request as soon as reasonably practicable. If you opt out of receiving marketing emails from us, we may still send you important administrative messages, from which you cannot opt out.
California Civil Code § 1798.83 further permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. If you are a California resident, you may ask us to refrain from sharing your personal information with certain of our affiliates and other third parties for their direct marketing purposes. Please tell us your preference by contacting us at privacy@storedvalue.com.
14. CUSTOMER TESTIMONIALS
From time to time, we post customer testimonials on our Websites which may contain Personal Information, such as the customer’s name. We do obtain the customer’s consent prior to posting the testimonial. If you wish to update or delete your testimonial, you can contact us by sending an email to privacy@storedvalue.com.
15. UPDATING YOUR PERSONAL INFORMATION
In certain circumstances, you may be able to review and request changes to your Personal Information on the Website or by send an email to privacy@storedvalue.com.
16. CUSTOMER REQUESTS
SVS will coordinate with its U.S. subsidiaries, divisions, affiliates, and operations to respond to any requests, questions, or concerns that you submit to us.
From time to time, SVS may also request the assistance from its international subsidiaries, divisions, affiliates, and operations in responding to certain requests. For example, certain requests that you send to us may be fulfilled by Buyatab Online Inc., a Canadian company owned by Comdata Inc.. This assistance will not change the Privacy Policy that governs.
17. INTERNATIONAL VISITORS
Our Websites, Apps, and Services are hosted in the United States, which means Personal Information we collect will be processed by us in the United States where data protection and privacy regulations may be different or less stringent than other parts of the world, such as the European Union. If you use or visit our Websites, Apps, and Services, you consent to the collection and/or processing in the United States of Personal Information we collect from you.
18. INDIVIDUALS WITH DISABILITIES
If you have a disability and need access to our privacy policy in a different format, please contact us at privacy@storedvalue.com.
19. CHANGES TO THIS PRIVACY POLICY
The Privacy Policy may be revised from time to time. The “Last Updated” legend at the bottom of this page indicates when this Privacy Policy was last revised. Any changes will become effective when we post the revised Privacy Policy on our Website. Your use of the Services following these changes means that you accept the revised Privacy Policy.
20. CONTACT US
If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at privacy@storedvalue.com.
Last Updated: May 4, 2023
STORED VALUE SOLUTIONS, A DIVISION OF COMDATA INC.
ONE OXMOOR PLACE, SUITE 305, 101 BULLITT LANE
LOUISVILLE, KY 40222-5465
Stored Value Solutions, a division of Comdata Inc. takes the privacy of your personal information seriously. In the course of operating our business in Canada and interacting with you, we collect, use, and share personal information. This Privacy Policy provides you with information about how we collect, use, and share personal information, and describes choices and rights available to you regarding your personal information. If you have any questions, please contact us via the channels listed below.
ABOUT THIS PRIVACY POLICY
This Privacy Policy applies to Stored Value Solutions, a division of Comdata Inc. for its Canadian operations, and its Canadian affiliates, including, but not limited to Stored Value Solutions Canada, Ltd. (“SVS,” “we,” “our,” or “us”). In this Privacy Policy, the words “you” and “your” refer to you, the user of our Services, as the party agreeing to this Privacy Policy. This Privacy Policy does not apply to Buyatab Online Inc., a Canadian company owned by SVS, or your use of the Buyatab Online Inc. websites.
This Privacy Policy describes our privacy practices for information that we collect from your interactions with us, including, but not limited to:
The Websites, the Apps, the Services, the Communications, and the Participation Opportunities are collectively referred to as the “Company Activities and Interactions.”
This Privacy Policy also applies to personal information that we receive from business partners and other third parties. You can find more information about our collection of personal information below.
Please read this Privacy Policy and any additional privacy disclosures or policies to understand our views and practices. This Privacy Policy does not apply to third-party websites accessible through our Websites, unless we advise you otherwise.
1. ACCEPTANCE
Please read the following carefully to understand our views and practices. By using, visiting, or participating in the Company Activities and Interactions, you are accepting and consenting to the practices described in this Privacy Policy.
2. PERSONAL INFORMATION WE COLLECT
"Personal Information" means any data that identifies you as an individual or relates to an identifiable individual. We obtain various categories of Personal Information relating to you from various sources described below.
2.1 CATEGORIES OF PERSONAL INFORMATION WE COLLECT
The categories of Personal Information that we may collect include:
2.2 WHERE WE COLLECT PERSONAL INFORMATION FROM
Personal Information Obtained from You
Except where an affirmative opt-in selection is required by applicable law, when you visit our Websites or Apps and/or otherwise use our products and services, you consent to our collection and use of non-public information about you, as described in this Privacy Policy and subject to applicable law, including but not limited to using your data to conduct our business, develop web statistics and make available products and services that may be of interest to you.
We collect Personal Information from you directly in a variety of ways. Some examples are when you:
Personal Information Obtained from Third Parties
We may collect your Personal Information from third parties. Some examples are when we collect information from:
Personal Information Obtained Passively
When you access our Websites, we and our service providers may collect Personal Information related to you, as well as processes and programs that are running on your device, through automated means, such as cookies, web beacons, and web server logs. A cookie is a small data file that a website transfers to your computer’s hard drive. Web beacons (sometimes called transparent GIFs, clear GIFs, or web bugs) are small strings of code that provide a way for us to deliver a small graphic image (usually invisible) on a web page or in an email. Web beacons can recognize certain types of information on your computer such as cookies, the time and date a web page is viewed, and a description of the web page where the web beacon is placed. A web server log is a simple text file that records activity on the server, such as when and how visitors are accessing a website.
We may use cookies, web beacons, and web server logs to improve your experience on our Websites, including to troubleshoot and perform analytics on the Services, provide you with content customized to your interests, and understand whether users read email messages and click on links contained within those messages so that our Websites can deliver relevant content. We may also use web beacons, web server logs, and similar standard technologies to track your use of our Websites or to track your response to email messages that we send you in connection with our Websites.
By using our Websites, Apps, and Services, you consent to the placement of cookies, web beacons, and similar technologies in your browser and on emails in accordance with this Privacy Policy. To learn more about our use of cookies and how to set your preferences, please see our “Cookies” section below.
3. HOW WE USE YOUR PERSONAL INFORMATION
We may use Personal Information provided to us as follows:
In some instances, we may combine Personal Information and other information we collect with offline information, including information from third parties. We may also transfer or disclose your information within our corporate family of companies for these purposes.
We will not use your Personal Information for any other purposes unless we notify you, or for which you have specifically consented to at the time of collection, or as otherwise described in this Privacy Policy, or, as permitted or required by law, rule, regulation, subpoena, or other legal process.
4. HOW WE DISCLOSE YOUR PERSONAL INFORMATION
We disclose your non-public Personal Information to our affiliates, and third parties when we have your prior consent and under the following limited circumstances:
5. LINKS TO OTHER SITES
Our Websites may contain third-party links, include third-party integrations, or offer a co-branded or third-party-branded service (collectively, “Other Links and Sites”). Through these Other Links and Sites, you may be providing information (including Personal Information and other information) directly to the third party (which may include certain service providers), us, or both. Because these Other Links and Sites may not be hosted or controlled by us, however, we are not responsible for the privacy practices of those Other Links and Sites or the content provided thereon.
This Privacy Policy does not apply to the information practices of those Other Links and Sites, provided that this Privacy Policy does apply to the extent we receive or use Personal Information provided though Other Links and Sites. We encourage you to review the privacy policies of each of those Other Links and Sites carefully. We are not responsible for third-party websites.
6. ANALYTICS SERVICES
The Websites may use analytics services provided by third parties, such as Google Analytics, Adobe Analytics, and/or Moz, among others (collectively, “Data Analytics Providers”). These Data Analytics Providers may use collection technologies to collect and store information about the use of our Websites and the use of other websites, apps, and online resources.
You can read Googles’ privacy policy, which applies to Google Analytics, at http://www.google.com/intl/en/policies/privacy/. You also can opt out from being tracked by Google Analytics in the future by downloading and installing Google Analytics Opt-out Browser Add-on for your current browser https://tools.google.com/dlpage/gaoptout. You can learn more about Adobe and opt out by visiting http://www.adobe.com/privacy/opt-out.html. You can read Moz’s privacy policy, which applies to Moz analytics, at http://moz.com/privacy-policy.
7. CROSS DEVICE TRACKING
If you use different devices, such as your home computer, laptop, mobile device, and/or other smart device, to access our Websites, Apps, and Services, we may use cross device tracking tools provided by third parties, such as Adobe Marketing Cloud Device Co-op. The Adobe Marketing Cloud Device Co-op allows us to better understand how you use our Websites, Apps, and Services across the various smart devices you use and to deliver tailored promotions. You can visit https://cross-device-privacy.adobe.com tolearn more about how Adobe does this and to manage your choices relating to linking of devices.
8. THIRD-PARTY ADVERTISERS
We may use third-party advertising companies to serve advertisements regarding goods and services that may interest you when you access and use our Websites or Apps, other websites or apps, or other online services. To serve such advertisements, these companies place or recognize a unique cookie on your browser, including through use of pixel tags. If you would like more information about this practice, and to learn about your choices in connection with it, please visit http://www.networkadvertising.org/managing/opt_out.asp and http://www.aboutads.info/. To optout of the practice, you may download the AppChoices app at www.aboutads.info/appchoices.
9. COOKIES
We use cookies to collect information about your activity, browser, and device when you visit our Websites or websites where our ads appear. Cookies allow us to collect information such as browser type, time spent on the Websites, pages visited, referring URL, language preferences, and other aggregated traffic data. Below is a summary of the types of cookies we use.
This Privacy Policy covers the use of cookies and other tracking devices by us. This Privacy Policy does not cover the use of cookies or other tracking technologies by any of our advertising partners. We encourage you to review the privacy policies or statements of these third-party advertising companies carefully. If you would like to learn more about the third-party advertisers that may be aware of the fact that you visit our Websites, and to understand your choices about having such advertisers’ cookies turned off, please visit www.networkadvertising.org.
If you want to remove or block cookies on your device, you can update your browser settings (your browser manufacturer has information on changing the default setting for your specific browser). You can find simple instructions on how to manage cookies on the different types of web browsers at www.allaboutcookies.org.www.allaboutcookies.org. You can also learn more about interest-based advertising and how to opt out of our vendors’ and other advertisers’ use of cookies and similar technologies to collect information to tailor content or advertising to you by visiting http://www.networkadvertising.org/managing/opt_out.asp and http://www.aboutads.info/.
10. SECURITY
We store your Personal Information and other information using reasonable physical, technical, and administrative safeguards. While we use industry standard means to protect our Websites, Apps, Services, and your information, no transmission of data over the internet is guaranteed to be completely secure. The measures we use are appropriate for the type of information we collect. However, it may be possible for third parties not under our control to intercept or access transmissions or private communications unlawfully. We cannot promise that your use of our Websites or Apps will be completely safe, nor can we ensure or warrant the security of any information you transmit to us over the internet. We encourage you to use caution when using the internet.
11. OUR WEBSITES AND CHILDREN
We do not knowingly collect or sell information regarding anyone under the age of 13. If you are a parent or guardian and believe we may have inadvertently collected personal information from your child, please notify us immediately by sending an email to privacy@storedvalue.com.
12. MARKETING COMMUNICATIONS
If after you previously opted in, you no longer want to receive marketing-related emails from us on a going-forward basis, you may opt out by contacting us by email at privacy@storedvalue.com or by following the instructions in any such email you receive from us. We will try to comply with your request as soon as reasonably practicable. If you opt out of receiving marketing emails from us, we may still send you important administrative messages, from which you cannot opt out. If you email privacy@corpay.com a non-privacy related message, we may not respond, as such mailbox is dedicated to privacy matters.
13. CUSTOMER TESTIMONIALS
From time to time, we post customer testimonials on our Websites which may contain Personal Information, such as the customer’s name. We do obtain the customer’s consent prior to posting the testimonial. If you wish to update or delete your testimonial, you can contact us by sending an email to privacy@storedvalue.com.
14. UPDATING YOUR PERSONAL INFORMATION
In certain circumstances, you may be able to review and request changes to your Personal Information on the Website or by sending an email to privacy@storedvalue.com.
15. CUSTOMER REQUESTS
SVS will coordinate with its applicable subsidiaries, divisions, affiliates, and operations to respond to any requests, questions, or concerns that you submit to us.
From time to time, SVS may also request the assistance from its international subsidiaries, divisions, affiliates, and operations in responding to certain requests. For example, certain requests that you send to us may be fulfilled by Buyatab Online Inc., a Canadian company owned by Comdata Inc. This assistance will not change the Privacy Policy that governs.
16. INTERNATIONAL USERS OF OUR SERVICES
Our Websites, Apps, and Services offered in Canada are hosted either in Canada or in the United States, which means Personal Information we collect will be processed by us in Canada or the United States where data protection and privacy regulations may be different or less stringent than other parts of the world such as the European Union. If you use or visit our Websites, Apps, and Services, you consent, to the collection and/or processing in Canada or the United States of Personal Information we collect from you.
17. INDIVIDUALS WITH DISABILITIES
If you have a disability and need access to our privacy policy in a different format, please contact us at privacy@storedvalue.com.
18. CHANGES TO THIS PRIVACY POLICY
The Privacy Policy may be revised from time to time. The “Last Updated” legend at the bottom of this page indicates when this Privacy Policy was last revised. Any changes will become effective when we post the revised Privacy Policy on our Website. Your use of the Services following these changes means that you accept the revised Privacy Policy.
19. CONTACT US
If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at privacy@storedvalue.com. This is also the contact should you wish to exercise (as applicable) the right to withdraw your consent. This is also the contact to reach our Privacy Officer who is accountable for our compliance with applicable privacy laws.
Last Updated: March 21, 2024
STORED VALUE SOLUTIONS, A DIVISION OF COMDATA
ONE OXMOOR PLACE, SUITE 305, 101 BULLITT LANDE
LOUISVILLE, KY 40222-5465
This policy was lasted updated on 18 June 2021.
At Stored Value Solutions International B.V. (Netherlands), through our affiliates Stored Value Solutions GmbH, Stored Value Solutions UK Limited, and Stored Value Solutions France SAS (collectively, “SVS”, “we”, “our” or “us”), we respect your privacy. We have implemented this privacy policy to outline how SVS uses personal data relating to its customers, prospective customers, web users and other individuals who interact with us. Please note that this privacy policy does not apply to any information you provide to us for the purchase of a gift card on one of our websites. The privacy policy applicable to the purchase of gift cards is contained on the website where the gift cards are purchased.
If you are applying for a role at one of our companies, then please see our dedicated job applicant privacy policy instead.
SVS considers your privacy to be important. We are committed to protecting the privacy of the information you provide to us, including your personal data. This policy describes the types of personal data we collect, how we use that data, with whom we share it, the choices you can make about our use of such data, your privacy rights and how the law protects you. We also describe the measures we take to protect the security of your personal data and how you can contact us about our privacy practices.
Who we are
To understand who your data controller is please see the section entitled “How to reach us”.
We have appointed a representative who is responsible for overseeing questions in relation to our privacy policy and how we handle your personal data. Details about how to contact this representative can be found in the “How to reach us” section of this privacy policy.
Information we collect
You may choose to provide personal data to us in connection with a relationship or potential relationship with us for gift card processing or related services or we may collect it via other means. The data we collect about you may include:
§ Contact information
§ Login details
§ Financial information
§ Know your client information.
§ Content you provide to us
§ Technical information about your device and website usage
§ Transaction history
§ Information about your characteristics and preferences
How we collect your information
We use different methods to collect data from and about you, depending upon the nature of our relationship. This may include through direct interactions we have with you, through the use of automated technologies (e.g. cookies) and from third parties or publicly available sources.
To find out more please click here.
How we use your data
Depending on the nature of our relationship with you, we may use your data to:
§ Respond to your request for more information.
§ Process an application for an account you apply for.
§ Provide the services our customers have signed up for.
§ Process your transactions.
§ Administer your online account.
§ Protect ourselves against fraud and money laundering, verify your identity and to detect, investigate and prevent crime.
§ Provide you with information about our products and services.
§ Allow you to participate in interactive features e.g. via the website such as via our live chat function, if applicable.
§ Operate, evaluate and improve our business.
§ Perform analysis (including anonymization) of your data.
§ Comply with our legal obligations, applicable industry standards and our policies.
§ Administer the contracts we have with our customers, including to update contracts and to correspond with our customers about our services and the contracts.
§ Other ways which we notify you of at the time of its collection or use.
Data we share and receive
We do not sell or otherwise disclose your data, except as described in this privacy policy. We may share your data with the following parties:
§ Other members of the SVS group, including Corpay, Inc., Comdata Inc., Stored Value Solutions GmbH, Stored Value Solutions UK Limited, Stored Value Solutions France SAS, Stored Value Solutions Hong Kong Limited, Shanghai Stored Value Solutions Information Technology Co., Ltd, Stored Value Solutions Canada Ltd., and Buy a tab Online Inc. (“SVS Group”).
§ Providers of transaction services, such as payment processors and other suppliers to assist with the transactions and administration of the services.
§ Providers of fulfilment services, customer support services, and eCommerce services.
§ Marketing and data analytics companies.
§ Our commercial partners who sell similar or related products and services.
§ Partners who provide features on our websites.
§ IT suppliers.
§ Risk and fraud prevention agencies and monitoring providers.
§ Our insurers and professional advisers.
§ Regulators and other government agencies including, but not limited to, public authorities, regulators, the police and other law enforcement agencies.
§ Any company to whom we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets, along with its professional advisers.
We do not authorize any third parties that we share data with to use or disclose your data except as necessary to perform certain services on our behalf, or to comply with legal requirements. We require these third parties, through our contractual arrangements with them, to appropriately safeguard the privacy and security of the data they process on our behalf.
We may also receive data about you from the following third parties:
§ Social media platforms.
§ Your employer.
§ Our commercial partners.
§ Public databases.
§ Regulators and other government agencies.
If you would like to receive a full list of our suppliers and other third parties who we share your data with or receive your data from then you can get in touch with us using the details provided in the section “How to reach us?”.
Where your data may be sent
As with any multinational organization, we are often required to transfer data internationally. Accordingly, your personal data maybe transferred globally (if your data is collected within the European Union, this means that your data may be transferred outside of it).
This includes transfers that have been identified in the previous section “Who do we share your data with and for what purposes”.
How we keep your information secure
SVS will take appropriate technical and organizational security measures to secure your personal data and to protect it from loss, misuse or alteration. Personal data that we hold about you is stored on our secure servers or those of our appointed suppliers. Our web pages that collect your data are secured with Secured Socket Layers (SSLs).
Where we have given you (or where you have chosen) a password which enables you to access certain services we provide, you are responsible for keeping this password confidential. We ask you not to share this password with anyone.
SVS maintains an information security program that is designed to:
§ Secure and maintain confidentiality of your personal data.
§ Protect against anticipated threats or hazards to security or integrity of your data.
§ Protect against unauthorized access to or use of your data that could result in substantial harm or inconvenience to you or your entity if compromised.
§ Comply with applicable laws.
How long we may keep your data
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
Details of retention periods for different aspects of your personal data can be requested by contacting us at GDPR@storedvalue.com.
In some circumstances you can ask us to delete your data, please see “Your Rights and Choices”.
In some circumstances we may anonymize your personal data(so that it can no longer be associated with or be used to identity you) for research or statistical purposes in which case we may use such data indefinitely without further notice to you.
Children’s privacy
SVS’ websites are not intended for use by children, especially those under the age of 18. No one under the age of 18 should provide any personal data or participate in any forums, chats, or online discussions. Minors under the age of 18 are prohibited from applying for emails, newsletters and/or products or services, on our websites. If we identify that we have received any such personal data we will delete it.
Your rights and choices
You may have some or all of the following rights in respect of personal data about you that we hold:
· Request us to give you access to it.
· Request us to rectify it, update it, or erase it.
· Request us to restrict our using it, in certain circumstances.
· Object to our using it, in certain circumstances.
· Where legally possible, withdraw your consent to our using it.
· Data portability, in certain circumstances.
· Optout from or objecting to our using it for direct marketing.
· Lodge a complaint with the supervisory authority in your country(if there is one).
You are able to exercise these rights by contacting us using the details set out at in the “How to reach us” section below.
Please visit our cookie policy to learn about how you can also exercise your rights in relation to our use of cookies, web beacons and similar technologies.
How to reach us
If you have any questions about our privacy policy, including any requests to exercise your legal rights in relation to the data we hold on you, then please contact us at GDPR@storedvalue.com.
If your country of residence has a data protection authority, you have a right to contact it with any questions or concerns. If we cannot resolve your questions or concerns, you also have the right to seek judicial remedy before a national court.
Updates to this privacy policy
We will update this policy from time to time to reflect changes in our business. We will inform you of these changes as required under applicable laws.
SVS Europe Privacy Policy (Long Form)
This policy was lasted updated on 18 June 2021.
At Stored Value Solutions International B.V. (Netherlands), through our affiliates Stored Value Solutions GmbH, Stored Value Solutions UK Limited, and Stored Value Solutions France SAS (collectively, “SVS”, “we”, “our” or “us”), we respect your privacy. We have implemented this privacy policy to outline how SVS uses personal data relating to its customers, prospective customers, web users and other individuals who interact with us.
If you are applying for a role at one of our companies, then please see our dedicated job applicant privacy policy instead.
SVS considers your privacy to be important. We are committed to protecting the privacy of the information you provide to us, including your personal data. This policy describes the types of personal data we collect, how we use that data, with whom we share it, the choices you can make about our use of such data, your privacy rights and how the law protects you. We also describe the measures we take to protect the security of your personal data and how you can contact us about our privacy practices.
Who we are
To understand who your data controller is please see the section entitled “How to reach us”.
We have appointed a representative who is responsible for overseeing questions in relation to our privacy policy and how we handle your personal data. Details about how to contact this representative can be found in the “How to reach us” section of this privacy policy.
Information we collect
You may choose to provide personal data to us in connection with a relationship or potential relationship with us for gift card processing or related services or we may collect it via other means. The data we collect about you may include:
§ Contact information
§ Login details
§ Financial information
§ Know your client information
§ Content you provide to us
§ Technical information about your device and website usage
§ Transaction history
§ Information about your characteristics and preferences
Contact information
If you are a customer of ours or otherwise interact with us(e.g. through our website) then we will collect certain basic contact information about you. This may include your name, postal address, email address, phone number and fax number.
In the event that you are a representative or employee of one of our customers then we may also collect the name of your employer/the company you represent, your role at the company and job title.
Login details
If you have an online account with us, then we will store your username and password in order to manage your access to our platforms.
Financial information
This may include your name, address, date of birth, home phone number, personal tax identification number, and personal financial statements if you are considered a new or small business and we conduct a credit review.
Know your client information
If you are a director or beneficial owner of a prospective customer then we may capture and use your personal data to conduct credit and anti-money laundering checks.
Please bear in mind that we may collect and consult your personal data in public registers and public sources (e.g. via the internet) as part of the know your client process.
Content you provide to us
For instance, you may get in touch with us via our website or by telephone, we may email you or vice versa or you may send us feedback via a survey form.
Technical information about your device and website usage
If you use our website or mobile applications then we will install certain cookies and web beacons on your device. The details of how we use these technologies is further outlined in our cookie policy.
Through cookies, web beacons and similar technologies we may collect details about your device, such as IP address, internet browser type and operating system. We may also collect information about your browsing activity, such as how you use our website, the pages you have visited, the date and time of each visit and the URLs of any websites that re-directed you to our website.
Transaction history
If you are a customer, then we will collect records of your transactions using our gift card services.
Information about your characteristics and preferences
We may collect certain details about you and your preferences(as a prospective customer, customer and/or card holder). This may include your purchasing behavior and preferences.
How we collect your information
We use different methods to collect data from and about you, depending upon the nature of our relationship. This may include through direct interactions we have with you, through the use of automated technologies (e.g. cookies) and from your employer, third parties or publicly available sources.
Direct interactions
You may provide us with your data by completing forms (e.g. through our website) or by corresponding with us by post, phone, email or otherwise. This includes data you provide when you:
§ Ask for information on a product or service on our website or through one of our sales associates.
§ Create an account on our websites or service portals.
§ Sign up to receive information(e.g. subscribe to our email marketing list).
§ Participate in promotions or surveys.
§ Provide us with feedback.
§ Otherwise communicate with us.
Automated technologies
In connection with certain services, decisions may be made by automated means. This means we may automatically decide that a request is fraudulent. You have rights in relation to automated decision making: if you want to know more please contact us at GDPR@storedvalue.com.
If we, or a fraud prevention agency, determine that your request is fraudulent, we may refuse to provide the services requested. As you interact with our website, we may automatically collect technical information about your equipment, browsing actions and patterns. We collect this personal data by using cookies, and other similar technologies. We may also receive technical data about you if you visit other websites employing our cookies. Please see our cookie policy for further details.
Third party or publicly available sources
We may receive personal data about you from various third parties and public sources, including credit institutions and commercial information services. For further details about the third parties that SVS may collect and provide your personal data to see the section of this privacy policy entitled ”Data we share and receive”.
How we use your data
Depending on the nature of our relationship with you, we may use your data to:
§ Respond to your request for more information.
§ Process an application for an account you apply for.
§ Provide the services our customers have signed up for.
§ Process your transactions.
§ Administer your online account.
§ Protect ourselves against fraud and money laundering, verify your identity and to detect, investigate and prevent crime.
§ Carry out checks in relation to your creditworthiness.
§ Provide you with information about our products and services.
§ Allow you to participate in interactive features e.g. via the website such as via our live chat function, if applicable.
§ Operate, evaluate and improve our business.
§ Perform analysis (including anonymization) of your data.
§ Comply with our legal obligations, applicable industry standards and our policies.
§ Administer the contracts with our customers, including to update contracts and to correspond with our customers about our services and the contracts.
§ Other ways which we notify you of at the time of its collection or use.
The table below sets out further information about the purposes for which we use data about you, with the corresponding categories of data processed in each case and the legal basis that we rely upon for its use.
Purpose:
Process an application for a customer account
§ Initiate applications for accounts you request, notify you of the application status or request additional information in relation to your application.
§ Obtain know your client and credit information when you apply for a product or subsequently.
Categories of data processed and legal basis for processing:
Categories of data processed
§ Contact information
§ Financial information
§ Know your client information
Legal basis
It is in our legitimate business interests to process your personal data as part of the customer application process.
Purpose:
Provide the services our customers have signed up for
§ In order for our customers to receive the service(s).
Categories of data processed and legal basis for processing:
Categories of data processed
§ Contact information
§ Financial information
§ Know your client information
Legal basis
It is in our legitimate business interests and in the legitimate business interests of our customers to process your personal data as part of the customer application process and as part of the services, including to correspond with you about the contract and the services being provided to our customers.
Purpose:
Administer our customer’s online accounts
§ Allow us to authenticate your user credentials when you login to your online account.
§ Respond to enquiries you may make in relation to your account.
§ Allow you to access certain information about your account with us.
Categories of data processed and legal basis for processing:
Categories of data processed
§ Contact information
§ Login details
§ Transaction history
Legal basis
It is in our legitimate interests to administer and manage the account of our customer as provided for under our contract with our customer.
Purpose:
Protect ourselves against fraud and money laundering, verify your identity and to detect, investigate and prevent crime.
§ Review and monitor your history to identify any potential fraud, money laundering or other unlawful behavior in relation to your account.
§ Carry out know your client and sanctions checks on a request basis.
§ If fraud is detected, you could be refused certain services.
Categories of data processed and legal basis for processing:
Categories of data processed
§ Contact information
§ Transaction history
§ Financial information
§ Know your client information
Legal basis
It is necessary for compliance with legal obligations to which we are subject to.
Purpose:
Provide you with information about our products and services
§ If you have requested to receive such information from us, then we may contact you from time to time by email, post, telephone and/or SMS about our products and services and any products and services of third parties.
Categories of data processed and legal basis for processing:
Categories of data processed
§ Contact information
§ Transaction history
Legal basis
We will only send you information about our products and services if you have consented to receiving them or based on our legitimate interests (where we are permitted to do so under applicable law).
Purpose:
Allow you to participate in interactive features
§ If you interact with the “chat” function on our websites.
§ If you interact with us via our Facebook, Twitter or Linked In accounts.
Categories of data processed and legal basis for processing:
Categories of data processed
§ Contact information
§ Information about your characteristics and preferences
Legal basis
It is our legitimate business interest to provide such features which you may choose to take up for your enjoyment and convenience.
Purpose:
Operate, evaluate and improve our business, products and services
§ Recording of telephone calls and online chats that we have with you for training or quality assurances.
§ Monitor the use of and improve our interactive assets.
§ Perform data analyses (including anonymization) of your data.
Categories of data processed and legal basis for processing:
Categories of data processed
§ Contact information
§ Transaction history
§ Content you provide to us
§ Technical information about your device and website usage
§ Information about your characteristics and preferences
Legal basis
It is our legitimate business interest to review and improve our business, products and services to ensure that customer satisfaction is as high as possible. We will conduct data analyses (including benchmarking and reporting to enable us to do so).
Purpose:
To share information with third parties
§ See the section entitled “Data we share and receive” for more information.
Categories of data processed and legal basis for processing:
Categories of data processed
§ All personal data we hold about you
Legal basis
It is our legitimate business interest to share your personal data with trusted third parties. We may share your personal data with third parties who provide us with services relevant to our business, such as those outlined in the “Data we share and receive” section of this privacy policy.
In the case of third party marketing we only share your personal data if you have provided consent.
Purpose:
Comply with our legal obligations, applicable industry standards and our policies
§ To audit compliance with our legal obligations including regulatory requirements.
Categories of data processed and legal basis for processing:
Categories of data processed
§ All personal data we hold about you
Legal basis
It is necessary for compliance with legal obligations to which we are subject.
Purpose:
Administer the contracts with our customers, including to update and to correspond with our customers about our services and the contracts
§ To provide contract updates and service(s) updates
Categories of data processed and legal basis for processing:
Categories of data processed
Legal basis
It is in our legitimate business interests and those of our customers to correspond with our customers (via you) in relation to their contract, any updates to such contracts (whether to reflect updates to the services or the law) and to correspond with them about the services.
It is necessary for compliance with legal obligations to which we are subject.
Purpose:
Defend ourselves against or issue legal claims
§ We may keep records of your data, such as your transactions for evidential purposes in order to defend ourselves against or issue one or more future legal claims.
Categories of data processed and legal basis for processing:
Categories of data processed
§ Contact information
§ Login details
§ Content you provide to us
§ Transaction history
Legal basis
It is our legitimate business interest to defend ourselves against and issue legal claims.
We may also share your personal data with third parties in the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets, along with its professional advisers.
If we use your personal data in ways that are not described above, we will provide you with notice of this before doing so.
Data we share and receive
We do not sell or otherwise disclose your data, except as described in this privacy policy. We may share your data with the following parties:
§ Other members of the SVS Group.
§ Providers of transaction services, such as payment processors and other suppliers to assist with the transactions and administration of the services.
§ Providers of fulfilment services, customer support services, and eCommerce services.
§ Marketing and data analytics companies.
§ Our commercial partners who sell similar or related products and services.
§ Partners who provide features on our websites.
§ IT suppliers.
§ Risk and fraud prevention agencies and monitoring providers.
§ Our insurers and professional advisers.
§ Regulators and other government agencies including, but not limited to, public authorities, regulators, the police and other law enforcement agencies.
§ Any company to whom we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets, along with its professional advisers.
We do not authorize any third parties that we share data with to use or disclose your data except as necessary to perform certain services on our behalf or to comply with legal requirements. We require these third parties, through our contractual arrangements with them, to appropriately safeguard the privacy and security of the data they process on our behalf.
We may also receive data about you from the following third parties:
§ Social media platforms.
§ Your employer.
§ Our commercial partners.
§ Public databases.
§ Regulators and other government agencies.
If you would like to receive a full list of our suppliers and other third parties who we share your data with or receive your data from then you can get in touch with us using the details provided in the section “How to reach us?”.
Where your data may be sent
As with any multinational organization, we are often required to transfer data internationally. Accordingly, your personal data maybe transferred globally (if your data is collected within the European Union, this means that your data may be transferred outside of it). This includes transfers that have been identified in the previous section “Who do we share your data with and for what purposes”.
When using personal data as described in this privacy policy, it may be transferred either within or outside the country or territory where it was collected, including to a country, territory or international organization that may not have EU equivalent data protection standards.
For example, we may transfer your personal data to our vendors based outside the European Union. In all cases, the transfer will be on the basis of a European Commission adequacy decision or we will implement adequate measures, for example the EU Model Contracts, and including appropriate security measures, for the protection of personal data in those countries, territories or international organizations in accordance with applicable data protection laws. If you would like more information about any of the data transfer measures on which we rely please contact us using the details provided in the section “How to reach us”?.
How we keep your information secure
SVS will take appropriate technical and organizational security measures to secure your personal data and to protect it from loss, misuse or alteration. Personal data that we hold about you is stored on our secure servers or those of our appointed suppliers. Our web pages that collect your data are secured with Secured Socket Layers (SSLs).
Where we have given you (or where you have chosen) a password which enables you to access certain services we provide, you are responsible for keeping this password confidential. We ask you not to share this password with anyone.
SVS maintains an information security program that is designed to:
§ Secure and maintain confidentiality of your personal data.
§ Protect against anticipated threats or hazards to security or integrity of your data.
§ Protect against unauthorized access to or use of your data that could result in substantial harm or inconvenience to you or your entity if compromised.
§ Comply with applicable laws.
How long we may keep your data
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
Details of retention periods for different aspects of your personal data can be requested by contacting us at GDPR@storedvalue.com.
In some circumstances you can ask us to delete your data, please see “Your Rights and Choices”.
In some circumstances we may anonymize your personal data(so that it can no longer be associated with or be used to identity you) for research or statistical purposes in which case we may use such data in definitely without further notice to you.
Children’s privacy
SVS’ websites are not intended for use by children, especially those under the age of 18. No one under the age of 18 should provide any personal data or participate in any forums, chats, or online discussions. Minors under the age of 18 are prohibited from applying for emails, newsletters and/or products or services, on our websites. If we identify that we have received any such personal data we will delete it.
Your rights and choices
You may have some or all of the following rights in respect of personal data about you that we hold:
· Request us to give you access to it.
· Request us to rectify it, update it, or erase it.
· Request us to restrict our using it, in certain circumstances.
· Object to our using it, in certain circumstances.
· Where legally possible, withdraw your consent to our using it.
· Data portability, in certain circumstances.
· Optout from or object to our using it for direct marketing.
· Lodge a complaint with the supervisory authority in your country(if there is one).
You are able to exercise these rights by contacting us using the details set out at in the “How to reach us” section below.
Please visit our cookie policy to learn about how you can also exercise your rights in relation to our use of cookies, web beacon sand similar technologies.
You have the rights set out in the table below:
Right in respect of the data about you that we hold
· To request us to give you access to it
Further detail (note: certain legal limits to all these rights apply)
This is confirmation of:
· whether or not we process data about you;
· our name and contact details;
· the purpose of the processing;
· the categories of data concerned;
· the categories of persons with whom we share the data and, where any person is outside the EU and does not benefit from a European Commission adequacy decision, the appropriate safeguards for protecting the data;
· (if we have it) the source of the data, if we did not collect it from you;
· (to the extent we do any, which will have been brought to your attention) the existence of automated decision-making, including profiling, that produces legal effects concerning you, or significantly affects you in a similar way, and information about the logic involved, as well as the significance and the envisaged consequences of such processing for you; and
· the criteria for determining the period for which we will store the data.
On your request we will provide you with a copy of the data we hold.
Right in respect of the data about you that we hold
· To request us to rectify or update it
Further detail (note: certain legal limits to all these rights apply)
This applies if the data we hold is inaccurate or incomplete.
Right in respect of the data about you that we hold
· To request us to erase it
Further detail (note: certain legal limits to all these rights apply)
This applies if:
· The personal data we hold is no longer necessary in relation to the purposes for which we use it;
· we use the data on the basis of your consent and you withdraw your consent (in this case, we will remember not to contact you again, unless you tell us you want us to delete all personal data about you in which case we will respect your wishes);
· we use the data on the basis of legitimate interests and we find that, following your objection, we do not have an overriding interest in continuing to use it;
· the data was unlawfully obtained or used; or
· to comply with a legal obligation.
Right in respect of the data about you that we hold
· To request us to restrict our processing of it
Further detail (note: certain legal limits to all these rights apply)
This right applies, temporarily while we look into your case, if you:
· contest the accuracy of the personal data we use; or
· have objected to our using the personal data on the basis of legitimate interests
(if you make use of your right in these cases, we will tell you before we use the data again).
This right applies also if:
· our use is unlawful and you oppose the erasure of the data; or
· we no longer need the data, but you require it to establish a legal case.
Right in respect of the data about you that we hold
· To object to our processing it
Further detail (note: certain legal limits to all these rights apply)
You have two rights here:
· if we use data about you for direct marketing: you can “opt out” (without the need to justify it) and we will comply with your request; and
· if we use the data about you on the basis of legitimate interest for purposes other than direct marketing, you can object to our using it for those purposes, giving an explanation of your particular situation, and we will consider your objection.
Right in respect of the data about you that we hold
· To withdraw your consent to our using it
Further detail (note: certain legal limits to all these rights apply)
This right applies to any data which we have collected and process based on your consent.
You have the right at any time to withdraw the consent you have provided to us.
· To data portability
This right applies:
(i) to personal data that you have provided to us; and
(ii) if we use that data on the basis either of your consent, or on the basis of discharging our contractual obligations to you.
If both (i) and (ii) apply, you have the right to receive the data back from us in a commonly used format, and the right to require us to transmit the data to someone else if it is technically feasible.
Right in respect of the data about you that we hold
· To lodge a complaint with the supervisory authority in your country
Further detail (note: certain legal limits to all these rights apply)
Each European Union country must provide for one or more public authorities for this purpose.
You can find their contact details here:
http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm
How to reach us
If you have any questions about our privacy policy, including any requests to exercise your legal rights in relation to the data we hold on you, then please contact us at GDPR@storedvalue.com.
If your country of residence has a data protection authority, you have a right to contact it with any questions or concerns. If we cannot resolve your questions or concerns, you also have the right to seek judicial remedy before a national court.
Updates to this privacy policy
We will update this policy from time to time to reflect changes in our business. We will inform you of these changes as required under applicable laws.
EU Applicant Privacy Policy Processing Your Personal Data - The Headlines
What categories of personal data does Stored Value Solutions International B.V. (Netherlands), through its affiliates Stored Value Solutions GmbH, Stored Value Solutions UK Limited, and Stored Value Solutions France SAS (collectively, “SVS”) collect about me and why?
"Personal data" means any information relating to you. During the application process, SVS will collect, process and use your personal data, for a range of different purposes. For example:
· Identification data
· Contact details
· Education and work experience
· Other application data (e.g. information contained in your CV and obtained from recruiters)
· Information collected as part of your interview process
· Background check information
· To process your application
· To determine your eligibility for the role you have applied for
· To conduct background checks as part of your application
· To communicate with you about future job opportunities
· To comply with the law and our obligations
· To communicate with you and with SVS employees and third parties
· To comply with our financial and regulatory obligations
It's important to know that SVS may also need to process sensitive personal data about you such as health and medical data and race or ethnicity data.
Who might SVS share my personal data with, and what happens if it's transferred out of your country?
As you know, we are part of the global Corpay Group - and entities across the Corpay network are involved in processing data. We might also need to transfer your data to other third parties - e.g. potential business partners, acquiring entities, suppliers, customers, or government bodies. Our policy is to limit who has access to that data as much as we can. If we need to transfer data out of your country, we will take all necessary measures to ensure your data is adequately protected and meet all legal obligations in doing so.
Find out more about who your data is shared with, and what steps we take to protect it here. How long will SVS keep my personal data for?
We won't keep it for any longer than we need to, either to comply with the law or to ensure that we are complying with our obligations to you and other third parties. Find out more here.
What rights do I have in respect of my personal data?
You have a number of rights in relation to your data. These include a right to access, correct and erase your data as well as more technical rights to restrict the way we process it, and to transfer your data.
Your rights are important, and we've set them out in detail here.
Who can I contact if I have questions?
If you have concerns or questions regarding your personal data, please contact us by email at gdpr@sotredvalue.com.
SVS has prepared this Applicant Privacy Policy ("Policy") for applicants to roles with SVS.
When we say "SVS", "we" or "us" in this document, we mean the SVS entity that you're applying to work for. In addition, you will see a number of references to the "Corpay Group", which includes Corpay, Inc. and all other Corpay, Inc. entities globally. We may update this document from time to time, for example if we implement new systems or processes that involve the use of personal data.
In connection with your application we have to process your personal data. We think that it is very important that you understand how we use your personal data, and we take our obligations in this regard very seriously. The purpose of this Policy is therefore to give you information about how SVS collects, processes, stores and otherwise uses information about you, and your rights in relation to that information.
SVS needs to process your personal data in order to process your application for employment. There are also statutory requirements we have to comply with in relation to your application. If we are not able to carry out the processing activities we describe in this Policy we may not be able to continue with your application. Of course, we hope it would never come to that, and this is simply information we are obliged to provide to you as part of this Policy.
We may need to ask for your specific consent to process your personal data in a particular way in certain circumstances, such as for the purpose of conducting background checks prior to you commencing employment with us, to enable relevant third parties to release information about you as part of those checks. If requested, please sign and complete the consent form at the end of this Policy to confirm your consent to us processing your data for the purposes of carrying out the background checks listed.
Although we are seeking your consent in relation to certain background checks, you should note that in most cases we will process your personal data for the reasons set out in this Policy and it won't be appropriate or necessary for you to provide consent as the legal basis for processing your personal data.
In this Policy you will see reference to "GDPR" - that refers to the European Union General Data Protection Regulation which is a European law governing your rights in relation to your personal data, and how organizations should protect it.
Index
To help you find information quickly on any particular question you might have, we have set out an index below. Just click on the question you would like answered and you will be taken to the relevant section:
What categories of personal data does SVS collect about me?.............................................................. 3
Got it - but who might SVS share my personal data with?...................................................................... 6
How long will SVS keep my personal data for?....................................................................................... 7
What rights do I have in respect of my personal data?........................................................................... 7
Who can I contact about this stuff?........................................................................................................ 8
"Personal data" means any information relating to you. SVS will collect, process and use the following categories and types of personal data about you:
· identification data, such as your name, date of birth, nationality, audio and visual data (e.g. from video interviews), and social media account;
· contact details, such as your home address, telephone number and email address;
· education and work experience, such as contact details for your current/former employer, information about your educational background and qualifications, your work experience and other experience;
· other application data, such as previous applications made to SVS, the information included in your application form/CV, skills, hobbies and interests, leaver details (maternity/dismissals/long term absences);
· information collected as part of the interview process, such as notes taken from your interview or information provided from recruitment agencies;
· background check information, such as information obtained through reference checks, and
confirmation about your work/educational background.
together "Applicant Data". This includes information we may collect through your LinkedIn account.
In addition to the collection, processing and use of the Applicant Data, SVS collects, processes and uses the following special categories of personal data about you which we describe as "Sensitive Applicant Data":
· health and medical data, such as information on disability; and
· race or ethnicity data.
Why does SVS need to collect, process and use my Applicant Data and Sensitive Applicant Data and what is the legal basis for doing so?
We collect and use Applicant Data and Sensitive Applicant Data for a variety of reasons linked to processing your application for a role with us (the "Processing Purposes").However, we can only collect and use this data if we have a valid legal basis for doing so, and we are required to explain the various legal bases that we rely on to you.
To give you the full picture, we have set out each of the reasons why we collect and use Applicant Data, i.e. the Processing Purposes, and mapped these against the different legal bases that allow us to do so. We appreciate that this is quite a lot of information to take in, so please bear with us:
Processing Purposes
1. Administering and processing your application (including processing a job offer should you be successful) including identification data, contact details, information about your qualifications and employment history, and information obtained during your interview and information contained in your CV.
2. To determine your eligibility for the role you applied for and any future vacancies, including identification data, contact details, information about your work and education experience, information obtained during your interview and information contained in your CV.
3. Conducting background checks as part of your application, including identification data, contact details, information about your qualifications, employment history and criminal records.
4. Complying with applicable laws and employment-related requirements along with the administration of those requirements, such as income tax, national insurance deductions, and employment and immigration laws which involves the processing of identification data and contact details.
5. Monitoring and ensuring compliance with applicable policies and procedures and laws, which involves the processing of your identification data and contact details, including the operation of a whistleblowing hotline.
6. Communicating with you, SVS employees(such as the hiring manager and our recruitment and HR teams) and third parties(such as existing or potential business partners and suppliers), including informing you of future opportunities with SVS, which involves the processing of identification data and your contact details.
7. Responding to and complying with requests and legal demands from regulators or other authorities in or outside of your home country which involves the processing of identification data and contact details.
8. Complying with corporate financial responsibilities, including audit requirements (both internal and external) and cost/budgeting analysis and control which involves the processing of identification data, contact details, and information about the role you have applied for, including the role's salary and benefits.
Legal Bases
Processing Purposes1 to 3:
· Necessary for performing a contract with you as the data subject;
· Legitimate interests of SVS;
· Compliance with legal obligations which SVS is subject to in relation to employment law; and
· Your consent as data subject.
Criminal records:
· Necessary to carry out the obligations and to exercise specific rights of SVS or you in the field of employment and social security and social protection law.
Processing Purposes 4 to 5:
· Compliance with legal obligations which SVS is subject to, particularly in relation to tax law, employment law, social security law and immigration law; and
· Legitimate interests of SVS.
Processing Purpose 6:
· Necessary for performing a contract with you as the data subject;
· Legitimate interests of SVS; and
· Compliance with legal obligations which SVS is subject to.
Processing Purpose 7:
· Compliance with legal obligations which SVS is subject to; and
· Legitimate interests of SVS.
Processing Purpose 8:
· Legitimate interests of SVS, i.e. we need to ensure that we manage our business effectively; and
· Compliance with legal obligations which SVS is subject to.
Below are the Processing Purposes and corresponding Legal Bases for Sensitive Applicant Data:
Processing Purposes
1. To accommodate your application and interview and for compliance with legal obligations, we may use health and medical data.
2. Equal opportunities monitoring and diversity monitoring and initiatives may involve us using race or ethnicity data.
Legal Bases
· Your explicit consent as allowed by local data protection law; and
· Necessary to carry out the obligations and to exercise specific rights of SVS or you in the field of employment and social security and social protection law as permitted by local data protection law
· Necessary for reasons of substantial public interest as permitted by local data protection law; and
· Your explicit consent as allowed by local data protection law.
We appreciate that there is a lot of information to take in, and we want to be as clear with you as possible over what this means. Where we talk about the "legitimate interests" of SVS or third parties, this can include:
· Assessing your suitability for employment/engagement with SVS;
· Implementation and operation of a group-wide organizational structure and group-wide information sharing;
· Right to freedom of expression or information, including in the media and the arts;
· Prevention of fraud, misuse of company IT systems, or money laundering;
· Operation of a whistleblowing scheme;
· Physical security, IT and network security;
· Internal investigations;
· Compliance with our legal obligations;
· Proposed mergers and acquisitions.
When relying on the legitimate interests basis for processing your personal data, we will balance the legitimate interest pursued by us and any relevant third party with your interest and fundamental rights and freedoms in relation to the protection of your personal data to ensure it is appropriate for us to rely on legitimate interests and to identify any additional steps we need to take to achieve the right balance.
As you may know, we are part of the global Corpay Group, and several entities in this group are involved in the Processing Purposes. To ensure that the Processing Purposes can be completed, your information may be shared with any of the entities within the Corpay Group network. Where we do share data in this way, however, it is our policy to limit the categories of individual who have access to that personal data.
SVS may transfer personal data to third parties, including to entities within and outside the Corpay Group located in any jurisdictions where Corpay Group entities are located, for the Processing Purposes as follows:
· Within the Corpay Group. As the SVS entity that you are applying to is part of a wider group headquartered in Georgia, United States with offices located across the globe, which all partially share management, human resources, legal, compliance, finance and audit responsibility, SVS may transfer the Applicant Data and Sensitive Applicant Data to, or otherwise allow access to such data by other entities within the Corpay Group, which may use, transfer, and process the data for the following purposes: to maintain and improve effective administration of the workforce; to communicate information about the Corpay Group; to maintain a corporate directory; to maintain IT systems; to monitor and assure compliance with applicable policies and procedures, and applicable laws; and to respond to requests and legal demands from regulators and other authorities.
· Regulators, authorities, and other third parties. As necessary for the Processing Purposes described above, personal data may be transferred to regulators, courts, and other authorities (e.g., tax and law enforcement authorities),independent external advisors (e.g., auditors), insurance providers, pensions and benefits providers, and internal compliance and investigation teams (including external advisers appointed to conduct internal investigations).
· Data processors. As necessary for the Processing Purposes described above, personal data may be shared with one or more third parties, whether affiliated or unaffiliated, to process personal data under appropriate instructions ("Data Processors").The Data Processors may carry out instructions related to recruitment, workforce administration, IT system support and maintenance, payroll and compensation, training, compliance, and other activities, and will be subject to contractual obligations to implement appropriate technical and organizational security measures to safeguard the personal data, and to process the personal data only as instructed.
For a full list of the Corpay Group entities and third parties that we may share your data with, please contact us as set out below ("Who can I contact about this stuff?").
As you may expect, some of the recipients we may share Applicant Data and Sensitive Applicant Data with may be located in countries outside of Europe. In some cases, this may include countries located outside the European Union and/or European Economic Area ("EEA").
Some countries where recipients may be located already provide an adequate level of protection for this data (e.g. Canada). If recipients, including other Corpay Group entities, are located in other countries without adequate protections for personal data, SVS will take all necessary measures to ensure that transfers out of the EEA are adequately protected as required by applicable data protection law. This will include using appropriate safeguards such as the EU Standard Contractual Clauses. You can ask for a copy of the such appropriate safeguards by contacting us as set out below ("Who can I contact about this stuff?").
It is our policy not to keep personal data for longer than is necessary. We may, for example, keep your personal data for a reasonable time after your application process is completed, in case we have future job opportunities that we consider you are suitable for. Where personal data is kept, that period will be determined based on the applicable local law. For further information, please refer to the SVS Records Retention Policy or contact us as set out below to request further details on how long SVS will retain different categories of personal data.
You have a number of rights in relation to your Applicant Data and Sensitive Applicant Data. These can differ by country, but can be summarized in broad terms as follows:
(i) Right of access
You have the right to confirm with us whether your personal data is processed, and if it is, to request access to that personal data including the categories of personal data processed, the purpose of the processing and the recipients or categories of recipients. We do have to take into account the interests of others though, so this is not an absolute right, and if you want to request multiple copies we may charge a fee.
(ii) Right to rectification
You may have the right to rectify inaccurate or incomplete personal data concerning you. We encourage you to review this information regularly to ensure that it is accurate and up to date.
(iii) Right to erasure (right to be forgotten)
You may have the right to ask us to erase personal data concerning you.
(iv) Right to restriction of processing
In limited circumstances, you may have the right to request that we restrict processing of your personal data, however where we process Applicant Data and Sensitive Applicant Data based on SVS's legitimate interest, such interest may override a request that you make or we may need to continue processing it to establish, exercise or defend legal claims.
(v) Right to data portability
You may have the right to receive personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you may have the right to transmit that data to another entity.
(vi) Right to object and rights relating to automated decision-making
Under certain circumstances you may have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data, including profiling, by us and we can be required to no longer process your personal data. This may include requesting human intervention in relation to an automated decision so that you can express your view and to contest the decision.
To exercise any of these rights, please contact us as stated under below (Who can I contact about this stuff?).
You also have the right to lodge a complaint with the competent data protection supervisory authority, which in the UK is the Information Commissioner’s Office (ICO)who can be contacted by post at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF; by email at casework@ico.org.uk; or by telephone at 0303123 1113.
If you have concerns or questions regarding this Policy or if you would like to exercise your rights as a data subject, you can get hold of the right person here:
by email at gdpr@storedvalue.com.
I understand that if SVS makes me an offer of employment, such offer will be conditional upon receipt of satisfactory references, criminal record checks and background screening and I hereby give my consent for SVS, and its designees on behalf of SVS to conduct the following background checks:
· Credit reference checks
· Anti-money laundering checks
· Address verification
· Proof of identity
I understand that SVS is not relying on consent as the legal bases for conducting the background checks under data protection law, but is obtaining consent for practical purposes, so that those providing responses to these checks will be able to do so.
Signed: Date:
