Mastercard Donation Service Privacy Notice

Mastercard · agreement dated May 7, 2020 · Official agreement

Read the agreement

41 of 41 cards

Legal Rights & Agreement Rules · Context

This notice is dated May 7, 2020

The notice for the Mastercard Donation Service carries an effective date of May 7, 2020.

Details not recorded for this card

Supporting quotations

Effective Date: May 7, 2020

Use & Processing · Context

Mastercard runs the donation Program and is responsible for processing your data

The Mastercard Donation Service website is a Program offered by Mastercard International Incorporated and hosted by Goodworld Incorporated. Mastercard says it is the entity responsible for processing your personal data in the context of the Program, which is the channel for donating to selected charities and causes identified on the Site.

Details not recorded for this card

Supporting quotations

is hosted by Goodworld Incorporated
Mastercard is the entity responsible for the processing of your personal data in the context of this Program

Not stated here

  • The notice says Goodworld Incorporated hosts the Site but does not describe whether or how Goodworld processes personal data.
Also annotated in the same passage (1)

Legal Rights & Agreement Rules · Restriction or exception

The notice does not cover other Mastercard sites, your bank or communications outside the Program

This notice applies to the Site in connection with your participation in the Program. It says it does not cover collection and use of your personal data on other Mastercard-branded websites, by your Mastercard issuers (for example your bank), or in other information or communications that refer to Mastercard outside the Program (for example communications from banks). For Mastercard privacy practices outside the Program, the notice points to a separate Global Privacy Notice.

Details not recorded for this card

Supporting quotations

it does not cover the collection and use of your personal data on any other Mastercard branded websites or by your Mastercard issuers (e.g. your bank) or any other information or communications that may refer to Mastercard outside Program (e.g. communications from banks)
For more information about Mastercard's privacy practices outside the scope of the Program, please visit our

Qualifications & exceptions

  • Applies to personal data "in connection with your participation in Program" on this Site.

Not stated here

  • The linked Global Privacy Notice is not part of the supplied text, so its content is not described here.
Also annotated in the same passage (2)

Legal Rights & Agreement Rules · Context

Your visit to the Site is also subject to the Terms of Use

The notice says your visit to the Site is subject to this Privacy Notice and to the Site Terms of Use, which it links.

Details not recorded for this card

Supporting quotations

Your visit to the Site is subject to this Privacy Notice and the

Not stated here

  • The linked Terms of Use are not part of the supplied text, so their content is not described here.
Also annotated in the same passage (2)

Account & Service Control · Restriction or exception

Children and minors under 18 are not eligible to use the Program

The notice states that children and minors under the age of 18 are not eligible to use the Program.

Details not recorded for this card

Supporting quotations

Children and minors (under the age of 18) are not eligible to use the Program.
Also annotated in the same passage (2)

Data Access & Collection · Company practice

Mastercard collects what you give it at registration and later, such as email, name, password and payment card details

Mastercard may collect personal data it receives directly from you through the Site, at registration and through your later interactions with it in connection with the Program. In connection with participating and using the Site it asks for personal data such as your email address, first name, last name, password and payment card information.

Details not recorded for this card

Supporting quotations

We may collect personal data we receive directly from you through the Site, upon registration and via your subsequent interactions with us in connection with the Program
we ask for certain personal data such as your:
E-mail Address
First Name
Last Name
Password
Payment Card Information

Qualifications & exceptions

  • The list is introduced with "such as", so it gives examples and is not stated as a complete list.

Data Access & Collection · Company practice

Mastercard also collects information about your donation transactions

Mastercard also collects information about your transactions while you take part in the Program, such as in the course of processing the transactions for donations you make through the Site.

Details not recorded for this card

Supporting quotations

We also collect information about your transactions while participating in the Program, such as in the course of processing transactions in respect of the donations you make via the Site.

Not stated here

  • The notice does not list the specific transaction details collected here; later sections name donation details among what is shared with charities and acquirers.

Account & Service Control · Company practice

If you do not provide requested data, Mastercard may be unable to register you, run your participation or answer you

If you do not give Mastercard the personal data it requests, it says it may not be able to register you for or properly administer your participation in the Program, you may not be able to make donations, and it may not be able to respond to your inquiries or requests for assistance.

Details not recorded for this card

Supporting quotations

If you do not provide us with your personal data when requested, this may mean we are not able to register you for, or properly administer your participation in the Program, and you may not be able to make donations to the Program.
We may also not be able to respond to your inquiries or requests for assistance in connection with the Program if you do not provide us with relevant personal data.

Qualifications & exceptions

  • Stated as "may" consequences, not automatic ones.

Data Access & Collection · Company practice

The Site uses cookies; you can set your browser to refuse them, but some Site features may not work

Mastercard says it uses cookies or similar technologies on the Site. It describes them as pieces of information a website transfers to your computer for record keeping, useful to estimate its number of visitors and overall traffic patterns. If you do not want cookies you may set your browser to refuse them, which may mean you cannot take full advantage of the services on the Site.

Details not recorded for this card

Supporting quotations

We also use cookies or similar technologies on this Site.
Cookies are useful to estimate our number of visitors and determine overall traffic patterns through the website.
If you do not wish to receive any cookies you may set your browser to refuse cookies. This may mean you will not be able to take full advantage of the services on the Site.

Not stated here

  • This section does not name specific cookies or say who sets them.
Also annotated in the same passage (1)

Data Access & Collection · Company practice

Mastercard does not respond to browser do-not-track signals at this time

Mastercard says there is not yet a consensus on how companies should respond to web browser do-not-track (DNT) mechanisms, so it does not respond to browser-based DNT signals at this time.

Details not recorded for this card

Supporting quotations

Mastercard does not respond to web browser-based DNT signals at this time.

Qualifications & exceptions

  • Stated as the current position ("at this time"), tied to the lack of a consensus on how to respond.

Use & Processing · Company practice

Your data is used to manage your account, calculate your donation and validate your payment card

Mastercard says it may use the information it obtains about you to create and manage your online account, identify your eligible transactions, calculate the donation amount, respond to your inquiries, and validate your payment card information.

Details not recorded for this card

Supporting quotations

We may use the information we obtain about you to:
Create and manage your online account, identify your eligible transactions, calculate the donation amount and respond to your inquiries
Validate your payment card information

Qualifications & exceptions

  • Stated as uses Mastercard "may" make.

Use & Processing · Company practice

Mastercard may contact you about the Program and future donation campaigns

Mastercard says it may use your information to communicate with you about the Program and about future donation campaigns.

Details not recorded for this card

Supporting quotations

Communicate with you regarding the Program and future donation campaigns

Not stated here

  • This list item does not say whether such messages are marketing; section 6 separately describes unsubscribing from marketing emails.

Security & Safeguards · Company practice

Your data may be used to prevent fraud, unauthorized transactions, claims and other liabilities

Mastercard says it may use your information to protect against and prevent fraud, unauthorized transactions, claims and other liabilities, and to manage risk exposure and franchise quality. The fraud-prevention purpose appears twice in the list, once with the added risk and franchise-quality wording.

Details not recorded for this card

Supporting quotations

Protect against and prevent fraud, unauthorized transactions, claims and other liabilities, and manage risk exposure and franchise quality
Protect against and prevent fraud, unauthorized transactions, claims and other liabilities.

Use & Processing · Company practice

Your data may be used to run, analyze and improve Mastercard's business, websites and services

Mastercard says it may use your information to operate, evaluate and improve its business, including developing new products and services, analyzing its products, services and websites, making its websites work, and performing accounting, auditing, billing, reconciliation and collection. It also lists monitoring and improving its interactive assets, and auditing, research and analysis to maintain, protect and improve its services.

Details not recorded for this card

Supporting quotations

Operate, evaluate and improve our business (including developing new products and services; analyzing our products, services and websites; facilitating the functionality of our websites; and performing accounting, auditing, billing, reconciliation and collection activities)
Monitor the use of and improve our interactive assets
Perform auditing, research and analysis in order to maintain, protect and improve our services

Qualifications & exceptions

  • The wording refers to "our business", "our products, services and websites" and "our services" and does not limit these to the Program.

Not stated here

  • The notice does not define "interactive assets" or say which data these uses involve.

Use & Processing · Company practice

Mastercard may use your information in other ways it tells you about when it collects it

Beyond the listed uses, Mastercard says it may use your information in other ways for which it provides specific notice at the time of collection.

Details not recorded for this card

Supporting quotations

We may also use the information in other ways for which we provide specific notice at the time of collection.

Qualifications & exceptions

  • Applies where specific notice is given at the time of collection.

Inference & Profiling · Company commitment

No decision based solely on automated processing, with three exceptions

Mastercard says it will not subject you to a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you. The exceptions are where you explicitly consented, where the processing is necessary for entering into or performing a contract between you and Mastercard, or where Mastercard is legally required to use your personal data this way, for example to prevent fraud.

Details not recorded for this card

Supporting quotations

We will not subject you to a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you
unless you explicitly consented to the processing, the processing is necessary for entering into, or performance of a contract between you and Mastercard, or when we are legally required to use your personal data in this way, for example to prevent fraud

Qualifications & exceptions

  • Covers decisions based solely on automated processing with legal or similarly significant effects.

Sharing & Disclosure · Company commitment

Mastercard says it discloses your data only as described, and does not sell it as defined by the CCPA

Mastercard says it does not disclose the personal data it collects about you except as described in the notice or as otherwise disclosed to you when the data is collected. It also says it does not sell personal data as the California Consumer Privacy Act defines selling.

Details not recorded for this card

Supporting quotations

We do not disclose personal data we collect about you, except as described herein or otherwise disclosed to you at the time of the data collection.
We do not sell personal data we collect about you, as defined by the California Consumer Privacy Act.

Qualifications & exceptions

  • The no-disclosure statement has two exceptions: disclosures described in the notice and disclosures made known at the time of collection.
  • The statement about selling is tied to the California Consumer Privacy Act definition of sale.

Not stated here

  • The notice does not set out the CCPA definition of a sale, so what that definition covers is not stated here.

Sharing & Disclosure · Company practice

Information is shared with Mastercard affiliates to operate the Program and Site

Mastercard says it shares information with its affiliates to operate the Program and the Site.

Details not recorded for this card

Supporting quotations

We share information to operate the Program and this Site with our affiliates.

Not stated here

  • The notice does not list the affiliates or say which information is shared with them for this purpose.

Sharing & Disclosure · Company practice

Your name, email, country and donation details go to the charity you choose

Mastercard shares information about your donation with the charity organization you select to receive your donation (a Donation Recipient). The information includes your name, your registered email address, your country, and details of your donation. The notice says Donation Recipients may use it to contact you to thank you and to give you information about their activities, including how they propose to use or have used your donation, and any tax receipts or certificates required for the donation.

Details not recorded for this card

Supporting quotations

We share information regarding your donation to the charity organization associated with the Program which you select to receive your donations ("Donation Recipients").
The information we share with Donation Recipients includes: your name, your registered email address, your country, and details of your donation.
Donation Recipients may use this information to contact you to thank you for your donation and provide you with information regarding their activities (including the use the Donation Recipient proposes to make, or has made, of your donation) and any tax receipts or certificates which may be required in connection with your donation.

Qualifications & exceptions

  • Applies to the charity you select to receive your donations.
  • The notice lists what Donation Recipients "may use" the information for: thanks, information on their activities and donation use, and required tax receipts or certificates.

Not stated here

  • The notice does not say whether Donation Recipients may use the information for other purposes or what privacy terms bind them.

Sharing & Disclosure · Company practice

Information is shared to carry out payment card transactions and the services you request

Mastercard says it shares information to perform payment card transactions and the services you request. It may share the personal information it collects with its headquarters, affiliates, financial institutions that issue payment cards or process payment card transactions, entities that assist with payment card fraud prevention, and merchants. As an example, it says it gives financial institutions information about their cardholders' transactions that Mastercard processes.

Details not recorded for this card

Supporting quotations

We share information to perform payment card transactions and to perform the services that you request.
We may share the personal information we collect with our headquarters, affiliates, financial institutions that issue payment cards or process payment card transactions, entities that assist with payment card fraud prevention, and merchants.
For example, in this context we provide financial institutions with information about their cardholders' transactions that Mastercard processes.

Qualifications & exceptions

  • Stated purpose is performing payment card transactions and the services you request.

Not stated here

  • The notice does not say which of the listed recipients receive donor information from this Program, or whether the cardholder-transaction example applies to donations made through the Site.

Sharing & Disclosure · Company practice

Acquirers that process your donation receive your country, credit card details and donation details

Mastercard says it shares information with acquirers who process donations made to the Program. The information shared with acquirers includes your country, your credit card details and details of your donation, which acquirers use to process transactions for donations made through the Program website.

Details not recorded for this card

Supporting quotations

We also share information with acquirers who process donations made to the Program.
The information we share with Acquirers includes: your country, your credit card details and details of your donation.
Acquirers use this information to process transactions in respect of your donations made via the Program website.

Qualifications & exceptions

  • Stated purpose is processing transactions for donations made through the Program website.

Not stated here

  • The notice does not define "acquirers" or name them.

Sharing & Disclosure · Company practice

Service providers may receive your data to perform services for Mastercard, under contract safeguards

Mastercard says it may share information with service providers who perform services on its behalf. It says it does not authorize those providers to use or disclose the information except as necessary to perform certain services for it or to comply with legal requirements, and that it requires them by contract to appropriately safeguard the privacy and security of the personal data they process for it.

Details not recorded for this card

Supporting quotations

We also may share the information with our service providers who perform services on our behalf.
We do not authorize these service providers to use or disclose the information except as necessary to perform certain services on our behalf or comply with legal requirements.
We require these service providers by contract to appropriately safeguard the privacy and security of personal data they process on our behalf.
is hosted by Goodworld Incorporated

Qualifications & exceptions

  • Provider use and disclosure is limited to what is necessary to perform services for Mastercard or to comply with legal requirements.

Not stated here

  • The notice does not list the service providers or the services. It states that Goodworld Incorporated hosts the Site, but does not say whether Goodworld is one of these service providers.
Also annotated in the same passage (1)

Sharing & Disclosure · Permission or license

Your data may be transferred if Mastercard sells or transfers its business or assets

Mastercard reserves the right to transfer the personal data it has about you if it sells or transfers all or part of its business or assets. If that happens it says it will use reasonable efforts to direct the transferee to use the data you provided consistently with this notice, and afterwards you may contact the transferee with inquiries about processing of that information.

Details not recorded for this card

Supporting quotations

We also reserve the right to transfer personal data we have about you in the event we sell or transfer all or a portion of our business or assets.
Should such a sale or transfer occur, we will use reasonable efforts to direct the transferee to use personal data you have provided to us in a manner that is consistent with this Privacy Notice.

Qualifications & exceptions

  • Applies if Mastercard sells or transfers all or a portion of its business or assets.
  • The commitment on how the transferee uses the data is limited to "reasonable efforts" to direct it.

Not stated here

  • The notice does not say whether you would be notified of such a transfer in advance.

Sharing & Disclosure · Company practice

Your data may be sent outside your country, where protections may differ

Mastercard says it may transfer personal data to recipients outside your country, that such transfers may be subject to restrictions, and that it will take all necessary steps to ensure compliance with applicable data protection law, in particular the legal requirements on adequate protection for transfers. It also warns that the destination countries may not have the same data protection laws as the country where you provided the information, and that you may not have access to mechanisms to protect the data under that country's law.

Details not recorded for this card

Supporting quotations

Mastercard may transfer personal data to recipients outside of your country.
Mastercard will take all necessary steps to ensure compliance with applicable data protection law
the countries which Mastercard transfers the personal data to may not have the same data protection laws as the country in which you initially provided the information, and you may not have access to mechanisms to protect the data under the data protection law in that country

Qualifications & exceptions

  • The compliance commitment is to steps to ensure compliance with applicable data protection law, and the notice itself warns that protections abroad may differ.

Not stated here

  • The notice does not name the destination countries or the legal mechanisms used for transfers.

Security & Safeguards · Company commitment

Mastercard says it keeps reasonable safeguards and uses SSL encryption on a number of its websites

Mastercard says it maintains reasonable administrative, technical and physical safeguards designed to protect the personal data you provide or it collects against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. It also says it uses SSL encryption on a number of its websites from which it transfers certain personal data.

Details not recorded for this card

Supporting quotations

We maintain reasonable administrative, technical and physical safeguards designed to protect the personal data you provide or we collect against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use.
We use SSL encryption on a number of our websites from which we transfer certain personal data.

Qualifications & exceptions

  • The safeguards are described as "reasonable" and "designed to" protect, not as a guarantee.

Not stated here

  • The notice does not say which websites use SSL encryption, including whether this Site does.

Retention & Deletion · Company practice

Data is deleted or de-identified when no longer needed, with no fixed retention period stated

Mastercard says it takes measures to delete your personal data or keep it in a form that does not permit identifying you when it is no longer necessary for the purposes for which it was processed, unless the law requires keeping it longer. It says that in deciding the retention period it considers criteria such as the products and services requested or provided, the nature and length of the relationship, possible re-enrolment, the impact on services if some information is deleted, mandatory legal retention periods and the statute of limitations.

Details not recorded for this card

Supporting quotations

We also take measures to delete your personal data or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it, unless we are required by law to keep this information for a longer period.
When determining the retention period, we take into account various criteria, such as the type of products and services requested by or provided to you, the nature and length of our relationship with you, possible re-enrolment with our products or services, the impact on the services we provide to you if we delete some information from or about you, mandatory retention periods provided by law and the statute of limitations.

Qualifications & exceptions

  • Deletion or de-identification happens when the data is no longer necessary for the purposes of processing, unless the law requires longer retention.

Not stated here

  • The notice gives no specific retention period for any category of data.

Account & Service Control · User right or choice

You can use the My Data Center portal or contact Mastercard to exercise rights and update preferences

Mastercard says you have certain rights over the personal data it maintains about you and certain choices about what it collects, how it uses it and how it communicates with you. It says it developed its "My Data Center" portal to facilitate the exercise of your rights to the extent permitted by law, and you may also submit a request using the contact details in the "How to Contact Us" section. To update your preferences, have it remove your information from mailing lists, or make a request to exercise your rights under applicable law, you contact it as that section specifies; section 9 gives an email address and a postal address for the Global Privacy Officer.

Details not recorded for this card

Supporting quotations

You have certain rights regarding the personal data we maintain about you and certain choices about what personal data we collect from you, how we use it, and how we communicate with you.
We have developed Mastercard's
to facilitate the exercise of your rights to the extent permitted by law. You may also submit a request as described in the
To update your preferences, ask us to remove your information from our mailing lists or submit a request to exercise your rights under applicable law, contact us as specified in the
If you have any questions, comments or complaints about this Privacy Notice, or about our handling of your personal data, you can contact us by e-mail

Qualifications & exceptions

  • The portal facilitates exercising rights only "to the extent permitted by law".

Not stated here

  • The notice does not say whether the My Data Center portal covers data held for the Donation Service, or how long Mastercard takes to act on a request.
Also annotated in the same passage (2)

Legal Rights & Agreement Rules · Company commitment

California residents are promised no denial or different pricing for exercising rights, with an exception

If you are located in California, Mastercard says it will not deny, charge different prices for, or provide a different level of quality of goods or services if you choose to exercise these rights, except where the different price or level of good or service is reasonably related to the value of the data it receives from you. It adds that in some instances it may not be able to provide the good or service you request if you choose to exercise certain rights.

Details not recorded for this card

Supporting quotations

If you are located in California, we will not deny, charge different prices for, or provide a different level of quality of goods or services if you choose to exercise these rights, except where the different price or level of good or service is reasonably related to the value of the data that we receive from you.
In some instances, we may not be able to provide you with the good or service that you request if you choose to exercise certain rights.

Qualifications & exceptions

  • Applies to people located in California.
  • Exception: a different price or level of service that is reasonably related to the value of the data Mastercard receives from you.

Not stated here

  • The notice does not say which rights count as "these rights" for California, or which choices could stop a service from being provided.

Data Access & Collection · User right or choice

You can choose not to give Mastercard personal data, at the cost of limited services

Mastercard says you can choose not to provide personal data by refraining from conducting payment transactions or from submitting personal data directly to it. If you do not, you may not be able to benefit from the full range of services, and it may not be able to provide you its services if the information is necessary to provide them or if it is legally required to collect it.

Details not recorded for this card

Supporting quotations

You can also choose:
Not to provide personal data to Mastercard by refraining from conducting payment transactions or from submitting personal data directly to us.
If you do not provide personal data, you may not be able to benefit from the full range of the services, and we may not be able to provide you with our services if that information is necessary to provide you with them, or if we are legally required to collect it in relation to the provision of such product or service.

Qualifications & exceptions

  • Stated consequence: limited services where the information is necessary for them or legally required.

Data Access & Collection · User right or choice

You can opt out of automated collection on this Site, including through the Cookie Consent tool where offered

Mastercard says you can opt out of the collection and use of certain information it collects about you by automated means when you visit this Site. In certain jurisdictions you can exercise your choice about cookies and similar technologies through the Cookie Consent tool displayed in the bottom right corner of the Site. Your browser may also tell you how to be notified of and opt out of certain types of cookies, and without certain cookies you may not be able to use all features of its websites, apps or online services. The earlier cookies section likewise says you may set your browser to refuse cookies.

Details not recorded for this card

Supporting quotations

To opt out of the collection and use of certain information, which we collect about you by automated means, when you visit this Site.
In certain jurisdictions, you can exercise your choice regarding the use of cookies and similar technologies via the Cookie Consent tool displayed in the bottom right corner of this Site.
Note that without certain cookies you may not be able to use all of the features of our websites, apps or online services.
If you do not wish to receive any cookies you may set your browser to refuse cookies.

Qualifications & exceptions

  • The Cookie Consent tool is stated for "certain jurisdictions".

Not stated here

  • The notice does not list the jurisdictions where the Cookie Consent tool appears.
Also annotated in the same passage (1)

Use & Processing · User right or choice

You can opt out of Mastercard ad targeting on third-party websites through its opt-out page or ad icons

Mastercard says you can opt out of certain uses of information it collects about you by automated means when you visit third-party websites and interact with its ads. It says it may use service providers to serve ads on those websites, that the ads may be customized based on data it and its partners have collected on its websites and apps, and that some service providers and partners may collect information about your online activities over time and across third-party websites to customize and serve ads. It says its ads are sometimes delivered with icons that help consumers learn how their data is used and exercise choices, and points to an opt-out page, or the icon in its targeted ads, to learn about opting out or limiting use of your browsing behavior for advertising.

Details not recorded for this card

Supporting quotations

To opt out of certain uses of information, which we collect about you by automated means, when you visit third-party websites and interact with our ads.
These ads may be customized and served based on the use of data we and our partners have collected on our websites and apps.
some of our service providers and partners may collect information about your online activities over time and across third-party websites to customize and serve these ads

Qualifications & exceptions

  • Applies when you visit third-party websites and interact with Mastercard ads.
  • The text describes opting out of or limiting "certain uses", not all uses.

Not stated here

  • The notice does not say whether these ads or the data behind them involve information from the Donation Service Site.

Use & Processing · User right or choice

You can stop marketing emails with the unsubscribe link or by contacting Mastercard

Mastercard says you can tell it not to send you marketing emails by clicking the unsubscribe link in those emails or by contacting it as indicated in the notice.

Details not recorded for this card

Supporting quotations

To tell us not to send you marketing emails by clicking on the unsubscribe link within the marketing emails you receive from us or by contacting us as indicated below.

Account & Service Control · User right or choice

Depending on where you are, you may have access, correction, deletion, objection and portability rights

Mastercard says that, depending on the jurisdiction you are in, you may have the right to request access to and information about the personal data it maintains about you, to update and correct inaccuracies, to restrict or object to its processing, to have the information anonymized or deleted as appropriate, and to data portability to transfer your data to another company. It adds that you may also have the right to lodge a complaint with a supervisory authority, including in your country of residence, your place of work or where an incident took place. It says those rights may be limited in some circumstances by local law requirements.

Details not recorded for this card

Supporting quotations

Depending on the jurisdiction in which you are located, you may have the right to:
Request access to and receive information about the personal data we maintain about you, to update and correct inaccuracies in your personal data, to restrict or to object to the processing of your personal data, to have the information anonymized or deleted, as appropriate, or to exercise your right to data portability to easily transfer your personal data to another company.
you may also have the right to lodge a complaint with a supervisory authority, including in your country of residence, place of work or where an incident took place
Those rights may be limited in some circumstances by local law requirements.

Qualifications & exceptions

  • Depends on the jurisdiction you are located in; stated as rights you "may have".
  • The rights may be limited in some circumstances by local law requirements.

Not stated here

  • The notice does not say which jurisdictions give which of these rights.
Also annotated in the same passage (1)

Account & Service Control · Company commitment

If you complain about privacy practices, Mastercard attempts to respond within a reasonable time

Mastercard invites you to tell it if it falls short of your expectations in processing your personal data or if you wish to make a complaint about its privacy practices, and asks for full details of the issue. It says it attempts to review and respond to all complaints within a reasonable time and as required under applicable law. The notice states that sentence twice.

Details not recorded for this card

Supporting quotations

If we fall short of your expectations in processing your personal data or you wish to make a complaint about our privacy practices, please tell us because it gives us an opportunity to fix the problem.
To assist us in responding to your request, please give full details of the issue.
We attempt to review and respond to all complaints within a reasonable time and as required under applicable law.
We attempt to review and respond to all complaints within a reasonable time and as required under applicable law.

Qualifications & exceptions

  • The commitment is to "attempt" a response within a reasonable time, not a fixed deadline.

Not stated here

  • The notice gives no fixed response time for complaints.

Legal Rights & Agreement Rules · Company commitment

The notice may be updated, with a notice on the Site for significant changes and the date shown at the top

Mastercard says the notice may be updated periodically to reflect changes in its personal data practices. It says it will post a notice on the Site to tell you of any significant changes and will indicate at the top of the notice when it was most recently updated; the version supplied is dated May 7, 2020.

Details not recorded for this card

Supporting quotations

This Privacy Notice may be updated periodically to reflect changes in our personal data practices.
We will post a notice on this Site to notify you of any significant changes to our Privacy Notice and indicate at the top of the notice when it was most recently updated.
Effective Date: May 7, 2020

Qualifications & exceptions

  • The commitment to post a notice applies to "significant changes".

Not stated here

  • The notice does not say how long before a change takes effect it will be announced, or whether other changes are announced.

Account & Service Control · User right or choice

You can update your information by changing the data you already entered on the Site

Mastercard says that if you want to update the information it has about you or your preferences, you can do so by accessing the data you have already entered on the Site and modifying it directly.

Details not recorded for this card

Supporting quotations

If you would like to update the information we have about you or your preferences, you may do so by accessing the data you have already entered on the Site and modifying it directly.

Qualifications & exceptions

  • Applies to data you have already entered on the Site.
Also annotated in the same passage (2)

Account & Service Control · Procedure

Questions, comments and complaints go to the Global Privacy Officer by email or post

For questions, comments or complaints about the notice or its handling of your personal data, Mastercard says you can contact it by email at privacyanddataprotection@mastercard.com or by writing to the Global Privacy Officer, Mastercard International Incorporated, 2000 Purchase Street, Purchase, New York 10577, USA.

Details not recorded for this card

Supporting quotations

9. How to Contact Us
If you have any questions, comments or complaints about this Privacy Notice, or about our handling of your personal data, you can contact us by e-mail
privacyanddataprotection@mastercard.com
Global Privacy Officer
Mastercard International Incorporated
2000 Purchase Street
Purchase, New York 10577
USA
Also annotated in the same passage (2)