Login and security Cookies rest on contract, legitimate interests or legal duty
For activities that help a Site function properly and securely, including registration, authentication, fraud prevention and login, the table lists three legal bases: that it is necessary for performance of a contract (where Cookies support a registration or login process you started); Mastercard's legitimate interests in a reliable, secure Site experience and in preventing fraud or misuse; and compliance with a legal obligation, where certain security or auditing activities are mandated by law.
Details
Why
Make the Site function properly and securely, support registration, authentication, fraud prevention and login
Condition
Contract basis only for registration or login you initiate; legal obligation only where mandated
Supporting quotations
Activities to help the Site to function properly and securely, including supporting registration, authentication, fraud prevention, and login functionalities.
Necessary for performance of a contract (where we use Cookies to support registration or login processes initiated by you).
Legitimate interests in measures intended to provide a reliable, secure Site experience and preventing fraud or misuse.
Compliance with a legal obligation, where certain security related or auditing activities are mandated by applicable law.
Qualifications & exceptions
The contract basis applies where Cookies support registration or login processes initiated by you.
The legal-obligation basis applies where certain security-related or auditing activities are mandated by applicable law.
Security & Safeguards · Company practice
Integrity and deliverability tracking rests on legitimate interests, with consent where required
For Cookies that support system integrity, detect technical issues, or measure deliverability or system performance, including certain Email Trackers used for security, authentication or deliverability diagnostics, the table lists legitimate interests in the security and stability of Mastercard's Sites, systems and communications, and compliance with a legal or regulatory obligation relating to security and fraud prevention. It also lists consent, where required under applicable law for any technology that stores or accesses information on your device.
Details
Why
System integrity, detecting technical issues, measuring deliverability or system performance
Condition
Consent where required under applicable law
Supporting quotations
Using Cookies that support system integrity, detect technical issues, or measure deliverability or system performance (including certain Email Trackers used for security, authentication, or deliverability diagnostics).
Legitimate interests in measures intended to promote the security and stability of our Sites, systems, and communications.
Compliance with legal or regulatory obligation relating to security and fraud prevention.
Consent, where required under applicable law for any technology that stores or accesses information on your device.
Qualifications & exceptions
Consent is listed only where required under applicable law for technology that stores or accesses information on your device.
Only certain Email Trackers are covered: those used for security, authentication or deliverability diagnostics.
Security & Safeguards · Procedure
How information is protected is in Section 6 of the Global Privacy Notice
On protecting Personal Information, the Notice only refers you to Section 6, How We Protect Your Personal Information, in the Global Privacy Notice, or the corresponding section of a Site's own privacy notice. It states no protection measures itself.
Details
What it covers
Protection of Personal Information
Supporting quotations
See Section 6 How We Protect Your Personal Information in our Global Privacy Notice (or if a Site has its own privacy notice, the corresponding section in that notice).
Qualifications & exceptions
A Site's own privacy notice's corresponding section replaces it where the Site has its own notice.
Not stated here
The protection measures are not stated in this Notice. The cited Section 6 is in the Global Privacy Notice, which is not supplied.