Privacy Policy
Updated: 2024-02-13
Version: 1.1
Privacy Policy
Privacy and data security have an enormously high priority for wCARD. It is very important to us that you feel safe during your visit to our website and while using our services as well as over the course of all other business transactions with us. As soon as you make use of products and/or services of wCARD, you entrust us with the processing of your personal data. wCARD wants to give you the best possible experience with our platform to ensure that you enjoy the usage of our products and services now and in the future. That’s why we want to understand the user behavior on our platform in order to continuously improve it.
Therefore, in this Privacy Notice, we want to transparently inform you which personal data we collect from you and why and who might receive it. Furthermore, we would like to inform you which precautions we take to protect your personal data, which rights you have in this context and to whom you can turn for data protection concerns.
Regarding the terms used in this Privacy Notice, such as “Processing” or “Controller”, we refer to the definitions of the GDPR.
We have put together this privacy policy to let you know:
- Who we are
- When we collect your personal data
- How we collect your personal data
- What personal data we collect about you
- Why we process your personal data
- With whom we share your personal data
- For how long we store your personal data
- How do we protect your data?
- What your rights are
- Contact and complaints
- Changes to this privacy policy
1. Who we are
wCard Finance, UAB is a company organized under the laws of Lithuania with registration number 306288861 and having its registered address at Didžioji g. 18, LT-01128, Vilnius, Lithuania (“wCARD”, “we”, “us”, “our”).
wCARD has created the App and the https://wcards.com/ web portal (jointly the “Platform”) through which customers in the European Economic Area can access and use virtual and physical card services for the purpose of, among other things, enabling transactions with electronic money.
We have partnered with Intergiro Intl AB (“Intergiro”), a Swedish fintech company that provides electronic money account services and payment card services. Intergiro provides payment services, and we provide you with a first class Platform through which you access and use the payment services.
You sign up with wCARD and within our Platform you apply to become a customer of Intergiro to utilize the payment services. Generally, you are provided with a payment account and a payment card. You can read more about the payment services in the Payment Services Terms and Conditions of Intergiro. You need to accept the Payment Services Terms and Conditions and if you are onboarded as a customer of Intergiro in accordance with such terms and conditions, you will be able to access and use the payment services using our Platform. When you use the payment services within our Platform, Intergiro will process your personal data.
Intergiro is the controller and responsible for the processing of your personal data when you use the payment services, as further described in Intergiro’s privacy policy.
2. When we collect your personal data
wCARD will start processing your personal data when you access this website and/or the APP.
3. How we collect your personal data
We collect personal data about you from different sources, including:
- personal data received from you, such as when you sign up for a platform account, including contact information;
- personal data about you received from external sources, e.g. social media platforms like facebook; as well as information service providers like Intercom;
- personal data that is shared with us by Intergiro, mainly customer support information which we need to be able to assist you with customer support matters but also personal data related to your use of Intergiro’s payment services;
4. What personal data we collect
We have divided the personal data we process into the following categories:
- Contact information – such as name and other information about yourself (e.g. address, telephone number, e-mail address, etc.).
- Information about how you interact with wCARD – for example how you use the platform account.
- Device information – for example IP address, language settings, browser settings, time zone, operating system, platform and screen resolution.
- Customer support information – information that you provide to our customer support so we can help you with resolving your enquiries.
5. Why we process your personal data
According to the GDPR we need to have a purpose and a legal basis for the
processing of your personal data. Read more about our purpose for processing
your personal data below.
At wCARD, the legal basis for processing your personal data is either:
- the agreement you have, or is about to enter into, with us by accepting our terms and conditions or, the agreement you have, or is about to enter into, with the Intergiro by accepting Intergiro’s terms and conditions.
- legal obligations we are bound by, such asv anti-money laundering regulations.
- our legitimate interest, such as providing customer support or keeping you informed about product updates.
In very rare cases we may also process your personal data if we have received your explicit consent to do so. In such a case you can always withdraw your consent at any time.
We use the personal data we collect for the following purposes:
- the administration and management of our relationship with you, such as
reviewing your application to become wCARD’s customer, setting up your
platform account, conducting performance analytics and keeping you
informed about product updates.
- The legal basis for such processing is (i) the agreement you have entered into, or is about to enter into, with us or (ii) our legitimate interest. Our view is that keeping you up to date on the products and services available to you creates meaningful knowledge to you.
- Provision of our services.
- The legal basis for the provision of our services is the agreement you have entered into with us.
- Accounting and auditing requirements.
- The legal basis for such processing is mandatory law, such as the REPUBLIC OF LITHUANIA ACCOUNTING LAW and the LAW OF THE REPUBLIC OF LITHUANIA ON FINANCIAL REPORTING BY UNDERTAKINGS.
- Business development, such as compiling statistics and analysing
the data in order to improve our services.
- The legal basis for such processing is our legitimate interest in maintaining our relationship with you and to improve our services. Our view is that you as our customers benefit from improvements to the services.
- Assess or defend legal claims against us or to protect ourselves
from fraud and in connection with a reorganisation, transfer of
business, merger, IPO or acquisition.
- The legal basis for such processing is our legitimate interest to defend us against legal claims, to protect you and our company from fraud, and to be able to reorganise or scale-up our business.
6. With whom we share your personal data
We may share your personal data with our affiliates and trusted third party service providers in order to be able to provide our services. These trusted third party service providers may include services of delivery of goods, search engine facilities, advertising and marketing. In some cases, the third parties may require access to some or all of your personal data. Where any of your personal data is required for such a purpose, we undertake steps to ensure that your personal data is processed in accordance with the requirements of the applicable data protection laws.
- We also share data with our other trusted third party service providers, who act as our processors:
- Suppliers of payment processing services;
- Payment card personalisation bureau (if you have applied for a physical payment card);
- Suppliers of identification services;
- Suppliers of screening services to prevent anti-money laundering, fraud and similar crimes; and
- Suppliers of IT systems and cloud services.
We have carefully reviewed our service providers and secured that their processing of your personal data is compliant with EU standards and the GDPR.
Your personal data will also, when applicable, be shared with the following parties which themselves are data controllers of the processing of personal data:
- Intergiro, for the purposes of providing the second line customer support to you
- The legal basis is the agreement you have entered into with Intergiro
- Intergiro, for any specific purpose as further described in Intergiro’s Payment Services General Terms and Conditions and Intergiro’s privacy policy
- The legal basis is the agreement you have entered into with Intergiro
We are sometimes required to share personal data with parties operating
outside the EU. In these cases, we ensure that the data is transferred in
accordance with the applicable requirements of the GDPR, primarily the
standard contract clauses (SCC) and complementary safety measures, or if
available, other means in compliance with the GDPR.
If wCARD engages in a merger, acquisition, reorganisation or sale of some or
all of wCARD’s assets or shares, financing, initial public offering or similar
transactions or proceedings, or steps in contemplation of such activities
(such as due diligence), wCARD may share personal data with third parties,
subject to standard confidentiality arrangements.
7. For how long?
We store your personal data for the purposes set out above during the term of our contractual relationship with you, for as long as we otherwise have a meaningful contact with you or as may otherwise be required by law.
When the purpose for which your personal data was collected is no longer relevant, we will stop processing your personal data and either delete or anonymise it in a secure manner. We may retain your personal data for a longer period of time to the extent required by law, by our automated disaster recovery backup systems or if we deem it necessary to assess or defend legal claims.
Under mandatory law, we are required to keep your personal data due to:
- Bookkeeping legislation, for a period of 10 years according to REPUBLIC OF LITHUANIA ACCOUNTING LAW and the LAW OF THE REPUBLIC OF LITHUANIA ON FINANCIAL REPORTING BY UNDERTAKINGS.
8. How do we protect your data?
We take appropriate security measures in order to maintain the required security of your personal data and ensure its confidentiality, integrity and availability, and to protect it against unauthorised or unlawful processing, and to mitigate the risk of loss, accidental alteration, unauthorised disclosure or access.
9. Your rights
As a data subject, you have the right to request access to and information about the personal data that we process about you. Additionally, you may also request that we correct (rectify), complete, erase or restrict the processing of personal data regarding you. You also have the right to request a copy of the personal data we process regarding you free of charge.
Where wCARD processes your personal data on the legal ground of consent or fulfilment of contract, you have the right to data portability which means that you can receive the personal data in a commonly used, structured and machine-readable format and you have the right to transfer it to another controller.
You have an absolute right to object to personal data processing done for the purposes of direct marketing.
10. Do we use online tracking and online advertising techniques?
We use various techniques on our website that allow us and third parties engaged by us to recognize you during your use of our website, and possibly to track you across several visits. This includes the use of cookies and similar technologies to collect information about your browsing habits and preferences. For more detailed information on how we use these technologies, and how you can manage your settings, please refer to our Cookie Policy.
11. Contacts and Complaints
If you have any cause for complaint about wCARD’s processing of your personal data, please contact us using the details provided in this Privacy Policy and we will do our best to address your concerns. Customer support is accessible via email on info@wcards.com. Customer support is available in the English language.
Please be informed that you have the possibility to lodge a complaint with a supervisory authority if you are not satisfied with our processing of your personal data. You may find your local supervisory authority by following this link:
https://edpb.europa.eu/about-edpb/board/members_en
12. Changes to this privacy policy
This Privacy Notice is not part of a contract with you. We can change this Privacy Notice at any time. The version published on this website is the current version.