Privacy Notice

For the purpose of this Privacy Notice, “Personal Information” means any information relating to an identified or identifiable individual. In connection with the Campaign, we obtain Personal Information relating to you from various sources described below.
Where applicable, we indicate whether and why you must provide us with your Personal Information, as well as the consequences of failing to do so. If you do not provide Personal Information when requested, you may not be able to benefit from the Campaign if that information is necessary to provide you with it or if we are legally required to collect it.

• Communication via e-mail/telephone
• Communication via campaign specific landing page
• Social Media communication/support of campaign
• Interaction with campaign-specific banner ads

a. Personal Information Provided by You

In connection with the Campaign, we ask you to provide certain Personal Information, such as

• First name, surname
• E-mail address
• Telephone number
• Correct answer to the competition question
• Use of Mastercard for an online purchase (subject to free entry)

In case of winning, additional Personal Information of winner and his/her accompanying person will be collected due to the organization of the winner trip or for the purpose of transferring the travel credit to the other winners.

• Address
• Scan and validity of passport
• Date of birth

b. Personal Information Obtained from Your Interaction with the Landing Page and Social Media and the interaction with banner ads respectively

Landing Page:

• Type and version of browser
• Used software
• Referrer URL
• Host name
• Time of visit

Social Media (If you have commented on a post from Mastercard on Facebook / Instagram):

• Facebook / Instagram name
• Comment to post on Facebook / Instagram

Campaign-specific banner ads (if you interact with banner ads and are redirected to the landing pages):

• Type and version of browser
• Used software
• Referrer URL
• Host name
• Time of visit
• Conversion (redirection from the banner to the landing page and subsequent registration for the competition)

We may collect certain information by automated means, such as cookies and similar technologies. This information may include your IP address, MAC address, device ID, network information, information on actions taken on our website, dates and times of actions, and other mobile trackers. We use this information to improve the Campaign by assessing how many users access or use our service, which content, products, and features of our service most interest our visitors, what types of offers our customers like to see, and how our service performs from a technical point of view. For more information about the use of cookies, visit our Cookie Consent Tool in the bottom right corner of our website (the “Manage cookies” box).

We perform comparable analyses in connection with the use of our campaign-specific banners. By means of cookies or other technologies, we track the interaction with our banners, i.e., e.g., which landing page visitors were redirected to them via the banner, how many users interact with the banners, time of interaction, etc. With this analysis we check the success of the banner ads and use the findings for future banner campaigns. For more information about the use of cookies, visit our Cookie Consent Tool in the bottom right corner of our website (the “Manage cookies” box).

We may use the Personal Information we obtain about you to:

• Provide you with the prize and communicate with you
• Improve, develop and promote the Campaign
• Enforce our Terms and Conditions and comply with our legal obligations
• Organisation of the winner’s trip

We will only process your Personal Information for the above purposes when we have a valid legal ground for the processing, including if:

• You consented to the use of your Personal Information. For example, we may seek to obtain your consent for our uses of cookies or similar technologies, to send you marketing communications or to process Personal Information deemed sensitive pursuant to applicable law.
• We need your Personal Information to provide you with products and services, or to respond to your inquiries.
• The processing is necessary for compliance with a legal obligation such as to prevent and monitor fraud in payment transactions.
• We, or a third party, have a legitimate interest in using your Personal Information, such as to ensure and improve the safety, security, and performance of our products and services, to protect against and prevent fraud, to anonymize Personal Information and carry out data analyses.

We do not share or otherwise disclose Personal Information we collect about you, except as described in this Privacy Notice or otherwise disclosed to you at the time the data is collected.

We may share the Personal Information we collect with our headquarters and affiliates, including Mastercard International.

We may share the Personal Information we collect with

• Technical support / Data Agency
  MRM Germany GmbH support Mastercard in the raffle from a technical perspective.
• Performing Agency
  K+R GmbH is responsible for the organisation of the competition (winner support, organisation of the trip) and also coordinates the services of the various service providers. In particular, K+R is responsible for the hosting and content of the registration website and carries out the drawing of winners.
• Travel Organisation
  Reisebüro Eschborn Sabine Larisch GmbH is responsible for booking the individual winner's trips.

The above-mentioned companies collect or process Personal Information solely in order to provide their services connected to the raffle. They will not process the Personal Information for any other purpose. The legal basis for the processing is therefore the performance of a contract, i.e. the performance of the raffle.

We also may share Personal Information with our service providers who perform services on our behalf and in relation to the purposes described in this Privacy Notice. We require these service providers by contract to only process Personal Information in accordance with our instructions and as necessary to perform services on our behalf or comply with legal requirements. We also require them to safeguard the security and confidentiality of the Personal Information they process on our behalf by implementing appropriate technical and organizational security measures and confidentiality obligations binding employees accessing Personal Information.

We also may disclose data about you: (i) if we are required to do so by law or legal process, (ii) in response to a request from a court, law enforcement authorities, or government officials, or (iii) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity.

We also reserve the right to transfer Personal Information we have about you in the event we sell or transfer all or a portion of our business or assets. Should such a sale or transfer occur, we will use reasonable efforts to direct the transferee to use Personal Information you have provided to us in a manner that is consistent with this Privacy Notice.

Subject to applicable law, you have the right to:

• Request access to and receive information about the Personal Information we maintain about you, to update and correct inaccuracies in your Personal Information, to restrict or to object to the processing of your Personal Information, to have the information anonymized or deleted, as appropriate, or to exercise your right to data portability to easily transfer information to another company. In addition, you may also have the right to lodge a complaint with a supervisory authority, including in your country of residence, place of work or where an incident took place.
• Withdraw any consent you previously provided to us regarding the processing of your Personal Information, at any time and free of charge. We will apply your preferences going forward and this will not affect the lawfulness of the processing before your consent withdrawal.

Those rights may be limited in some circumstances by local law requirements.
‍
If you are located in the EEA or Switzerland, you can exercise your rights by sending an e-mail to K+R GmbH (info@mc-promotion.ch) in accordance with the instructions in the “How to Contact Us” section.

We maintain appropriate administrative, technical, and physical safeguards to protect Personal Information against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse, and any other unlawful form of processing of the Personal Information in our possession. We restrict access to Personal Information about you to those employees who need to know that information to provide products or services to you.

We also take measures to delete your Personal Information or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it in the context of the Campaign or when you request their deletion, unless we are required by law to keep the information for a longer period. We complete periodic reviews of our databases, and have established specific time limits for data deletion, taking into account the type of data collected, the type of services provided in the context of the Campaign, the length of the customer relationship, possible re-enrolment with the program, mandatory retention periods, and the statute of limitations.

Mastercard is a global business. We may transfer or disclose Personal Information we collect about you to recipients in countries other than your country, including to the United States where our global headquarters are located. These countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer or disclose your Personal Information to other countries, we will protect that information as described in this Privacy Notice.

We comply with applicable legal requirements providing adequate safeguards for the transfer of Personal Information to countries other than the country where you are located. In particular, we have established and implemented a set of Binding Corporate Rules (“BCRs”) that have been recognized by EEA data protection authorities as providing an adequate level of protection to the Personal Information we process globally. A copy of our BCRs is available here . We may also transfer Personal Information to countries for which adequacy decisions have been issued, use contractual protections for the transfer of Personal Information to third parties, such as the European Commission's Standard Contractual Clauses, or rely on third parties’ certification to the EU-U.S. or Swiss-U.S. Data Privacy Framework where applicable. You may contact us as specified in the “How to Contact Us” section below to obtain a copy of the safeguards we use to transfer Personal Information outside of the EEA.

This Privacy Notice may be updated periodically to reflect changes in our Personal Information practices. We will notify you of any significant changes to our Privacy Notice and indicate at the top of the notice when it was most recently updated. If we update this Privacy Notice, in certain circumstances, we may seek your consent.

Mastercard Europe SA is the entity responsible for the processing of your Personal Information.

If you are based in the EEA or Switzerland, you can easily exercise your rights. You can send a request to exercise your rights or send questions, comments or complaints regarding this privacy policy or our handling of data protection to K+R GmbH (info@mc-promotion.ch) by e-mail at any time.