You may be able to access, correct, restrict, object to, delete or anonymize your data
Depending on your country, Mastercard lists rights to access your Personal Information and obtain a copy, rectify it, restrict or object to its processing, or request its deletion, destruction or anonymization. It also lists a right to request access to and receive information about the Personal Information it maintains, to update and correct inaccuracies, to restrict or object to processing, to have information anonymized, destroyed or deleted as appropriate, and to data portability.
Details
What it does
Access, copy, rectify, restrict, object, delete, destroy or anonymize
Where
Depending on the country in which you are located
Supporting quotations
Access your Personal Information, obtain a copy of it, rectify it, restrict or object to its processing, or request its deletion, destruction or anonymization.
Depending on the country in which you are located, you may have the right to:
Request access to and receive information about the Personal Information we maintain about you, to update and correct inaccuracies in your Personal Information, to restrict or to object to the processing of your Personal Information, to have the information anonymized, destroyed or deleted, as appropriate
Qualifications & exceptions
Stated as rights you "may have" depending on your country; deletion or destruction is "as appropriate" in the second list.
Not stated here
The notice does not state timelines, exceptions or which data these rights apply to.
Mastercard keeps data for a limited period, then deletes or de-identifies it unless the law requires longer
Mastercard says it only retains Personal Information for a limited period of time. It says it takes measures to delete your Personal Information or keep it in a form that does not permit identifying you when it is no longer necessary for the purposes for which it was processed, unless the law requires it to keep the information longer. It says it takes into account criteria such as the type of products and services requested or provided, the nature and length of your relationship, possible re-enrolment, the impact on services if some information is deleted, mandatory retention periods provided by law and the statute of limitations.
Details
What it does
Delete or de-identify Personal Information when no longer necessary
Exception
Unless required by law to keep it longer
Supporting quotations
only retain it for a limited period of time.
We also take measures to delete your Personal Information or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it, unless we are required by law to keep this information for a longer period.
When determining the retention period, we take into account various criteria, such as the type of products and services requested by or provided to you, the nature and length of our relationship with you, possible re-enrolment with our products or services, the impact on the services we provide to you if we delete some information from or about you, mandatory retention periods provided by law and the statute of limitations.
Qualifications & exceptions
Deletion or de-identification applies when the information is "no longer necessary" for the purposes of processing, and legal retention requirements can extend the period.
Not stated here
The notice gives no specific retention periods for any category of data.
California section: data is deleted or de-identified when no longer needed, unless the law requires longer
The California section repeats that Mastercard takes measures to delete Personal Information or keep it in a form that does not permit identifying you when it is no longer necessary for the purposes for which it is processed, unless the law requires longer retention. It lists the same criteria for deciding retention periods.
Details
What it does
Delete or de-identify Personal Information when no longer necessary
Exception
Unless required by law to keep it longer
Supporting quotations
We take measures to delete your Personal Information or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it unless we are required by law to keep this information for a longer period.
When determining the retention period, we take into account various criteria, such as the type of products and services requested by or provided to you, the nature and length of our relationship with you, possible re-enrolment with our products or services, the impact on the services we provide to you if we delete some information from or about you, mandatory retention periods provided by law and the statute of limitations.
Qualifications & exceptions
Deletion or de-identification applies when the information is no longer necessary for the purposes of processing; legal retention requirements can extend it.