Global Cookie and Tracker Notice

Mastercard · Official agreement

Read the agreement

3 of 42 cards in Security & Safeguards

Security & Safeguards · Company practice

Login and security Cookies rest on contract, legitimate interests or legal duty

For activities that help a Site function properly and securely, including registration, authentication, fraud prevention and login, the table lists three legal bases: that it is necessary for performance of a contract (where Cookies support a registration or login process you started); Mastercard's legitimate interests in a reliable, secure Site experience and in preventing fraud or misuse; and compliance with a legal obligation, where certain security or auditing activities are mandated by law.

Details
Why
Make the Site function properly and securely, support registration, authentication, fraud prevention and login
Condition
Contract basis only for registration or login you initiate; legal obligation only where mandated

Supporting quotations

Activities to help the Site to function properly and securely, including supporting registration, authentication, fraud prevention, and login functionalities.
Necessary for performance of a contract (where we use Cookies to support registration or login processes initiated by you).
Legitimate interests in measures intended to provide a reliable, secure Site experience and preventing fraud or misuse.
Compliance with a legal obligation, where certain security related or auditing activities are mandated by applicable law.

Qualifications & exceptions

  • The contract basis applies where Cookies support registration or login processes initiated by you.
  • The legal-obligation basis applies where certain security-related or auditing activities are mandated by applicable law.

Security & Safeguards · Company practice

Integrity and deliverability tracking rests on legitimate interests, with consent where required

For Cookies that support system integrity, detect technical issues, or measure deliverability or system performance, including certain Email Trackers used for security, authentication or deliverability diagnostics, the table lists legitimate interests in the security and stability of Mastercard's Sites, systems and communications, and compliance with a legal or regulatory obligation relating to security and fraud prevention. It also lists consent, where required under applicable law for any technology that stores or accesses information on your device.

Details
Why
System integrity, detecting technical issues, measuring deliverability or system performance
Condition
Consent where required under applicable law

Supporting quotations

Using Cookies that support system integrity, detect technical issues, or measure deliverability or system performance (including certain Email Trackers used for security, authentication, or deliverability diagnostics).
Legitimate interests in measures intended to promote the security and stability of our Sites, systems, and communications.
Compliance with legal or regulatory obligation relating to security and fraud prevention.
Consent, where required under applicable law for any technology that stores or accesses information on your device.

Qualifications & exceptions

  • Consent is listed only where required under applicable law for technology that stores or accesses information on your device.
  • Only certain Email Trackers are covered: those used for security, authentication or deliverability diagnostics.

Security & Safeguards · Procedure

How information is protected is in Section 6 of the Global Privacy Notice

On protecting Personal Information, the Notice only refers you to Section 6, How We Protect Your Personal Information, in the Global Privacy Notice, or the corresponding section of a Site's own privacy notice. It states no protection measures itself.

Details
What it covers
Protection of Personal Information

Supporting quotations

See Section 6 How We Protect Your Personal Information in our Global Privacy Notice (or if a Site has its own privacy notice, the corresponding section in that notice).

Qualifications & exceptions

  • A Site's own privacy notice's corresponding section replaces it where the Site has its own notice.

Not stated here

  • The protection measures are not stated in this Notice. The cited Section 6 is in the Global Privacy Notice, which is not supplied.