The Revolut company which is the controller responsible for your personal data is the entity listed in the footer of the notification email you have received from Revolut (“Revolut”).
This privacy notice applies when you are:
- the recipient of a payment from a Revolut customer; and
- that customer has asked us to send you a notification email about an incoming payment.
1. The data we collect about you
We will collect and use your email address if a Revolut customer asks us to send you a notification email about a payment which they have sent to you (“Notification Email”).
2. How we collect this personal data about you
When a Revolut customer makes a payment through the Revolut app, they can ask us to send you a Notification Email by providing us your email address at the point of payment.
3. How we use your personal data
We will only use your personal data for the purpose for which we collected it, which is to send you a Notification Email. Your email address will not be used for any other purposes.
4. What is the legal basis for using my personal data?
Our lawful basis for this processing is legitimate interests. In particular, we think it is important to keep you informed about when you will receive the payment.
You can opt out of receiving Notification Emails in future by contacting us at [email protected].
5. How we share your personal data
We may share your personal data within the Revolut group to the extent necessary to achieve the purpose set out above. We will also share your email address with our communications provider so that we can send you the Notification Email.
6. How long will we store your personal data?
We will keep your email address for as long as necessary to achieve the original purpose we collected it for and in line with relevant laws.
7. International transfers
We may transfer, store and process your personal data outside the country or region where you are resident. If we transfer your personal data to another country that doesn’t offer a standard of data protection equivalent to that provided under EEA, UK or Swiss laws, we will take steps to make sure that your personal data is sufficiently protected. For example, we’ll make sure that a contract with strict data protection safeguards is in place before we transfer your personal data.
If you would like any more information about the safeguards we put in place when transferring your personal data internationally, please contact our DPO at [email protected].
8. Your legal rights
You have a number of rights under data protection laws in relation to your personal data. You have the right to:
- Request access to your personal data. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
- Request correction of the personal data that we hold about you.
- Request erasure of your personal data in certain circumstances.
- Object to processing of your personal data in certain circumstances where we are relying on the lawful basis of legitimate interests for our processing.
- Object to the processing of your personal data for direct marketing purposes at any time.
- Request restriction of processing of your personal data in certain circumstances.
If you wish to exercise any of the rights set out above, please see the Contact details in Section 9 below.
If you’re unhappy with how we’ve handled your request, you can complain to your local data protection authority. In the United Kingdom, this is the Information Commissioner’s Office (website) and in Switzerland, this is the Federal Data Protection and Information Commissioner (website). In the European Economic Area, our cross-border data protection authority is the Lithuanian State Data Protection Inspectorate (website).
9. Contact details
We have appointed a data protection officer (DPO). If you have any questions about this privacy notice or our data protection practices then please contact the DPO using the following email address: [email protected].