MasterCard respects your privacy. In the context of the Priceless Cities program (“Priceless Cities” or “Program”), this Privacy Notice describes how we process personal data, the types of personal data we collect, for what purposes we use that personal data, with whom we share it, and the choices you can make about our use of the personal data. We also describe the measures we take to protect the security of the personal data and how you can contact us about our privacy practices.
MasterCard International Incorporated is the entity responsible for the processing of your personal data in the context of the Program websites operated in North America, Latin America, Asia Pacific, Middle East and Africa found at www.priceless.com (the “Site(s)”).
MasterCard Europe sprl, MasterCard UK, and MasterCard France are the entities responsible for the processing of your personal data in the context of the Program for our Sites operated in the European Economic Area, Switzerland, Russia and Turkey.
Children and minors (under the age of 18) are not eligible to use Priceless Cities.Back to top
Personal Data We Collect And How We Use It
We collect personal data in the context of Priceless Cities. By personal data we mean “any information relating to an identified or identifiable natural person.” The personal data we process is either provided directly by you or collected automatically.Back to top
Personal Data You Provide To Us Directly
The personal data you provide to us directly via Priceless Cities are processed and used only for the purposes described in this Privacy Notice. The personal data that you provide in the context of Priceless Cities are never obligatory, unless marked otherwise for the purpose of providing you with our services. If you choose not to give some data, this may affect the way you navigate on the Site(s) or the services that we can offer you. Please find below information on how you may provide this data, the types of data you may submit, and how we may use the data.
Some Sites may allow you to login, register, access or otherwise connect to Priceless Cities via a social media network. If you choose to login, register, access or otherwise connect to Priceless Cities, through a social media network such as Facebook, we may receive your first and last name, and email address (should you elect to provide your email information to us). In that case, your social media network will require you to agree that we receive your personal data from your social network provider in order to verify your credentials, populate your registration form and for future logins into your account. If you provide any personal data to us through a social media network, including through social media plugins located on Priceless Cities, and including by authorizing such social media network to provide information to us, then we may collect such information, and our use and disclosure of such information will be subject to this Privacy Notice. Note that we do not receive or store your social media password from these social media networks.
Sign up Process for Communications: You may sign up on the Sites to receive communications informing you about the Priceless opportunities via email, text or social media (“Communications”). In addition to signing up for Communications for Priceless, you may consent to receive information via email, text or social media about other MasterCard products and services including rewards, loyalty or privileges programs related products and services, opportunities or private events that become available. In order to send you Communications or information about Priceless Cities and/or MasterCard products and services, we use your personal data such as your name, e-mail address or mobile number, if applicable. You can, at any time and free of charge, choose not to receive any of those email Communications or information by clicking on the unsubscribe link within the e-mail or by e-mailing us using this link: https://www.mastercard.com/us/personal/en/general/email-opt-out.html. For other methods of Communications (i.e. text or social media), we will advise you of ways to opt-out of those Communications at the time that you receive those Communications or by other means. We will not use your personal data for sending marketing Communications unless we have received your consent.
Your account: At any time after activating your registration and/or logging-in you can access your account by clicking on "My Account" where you can review or change your personal details (e.g., name, email address, country, password, etc.) or manage your e-mail subscriptions or preferences.
Personalized Services and Recommendations: If you sign up for Communications we may use your personal data to provide you with personalized services and recommendations. For example, we may suggest products or other special marketing activities that would be of particular interest to you.
In order to provide you with personalized content and the most relevant offers, content or messages, we will gather the personal data that you have provided directly and the personal data that we have collected automatically in order to create a user profile.
Other Features: We offer users of our Program various features for their information and enjoyment (e.g., sweepstakes, promotions, contests, blog), which we may change from time to time. We may ask you to submit certain personal data so we can provide you with these features. For more information about how your data will be processed for these specific features, please refer to the relevant privacy notice, if any.Back to top
Personal Data We Collect Automatically
We may collect certain information by automated means (e.g., cookies, log-file, web beacons) when you participate in Priceless Cities. The data collected automatically are processed in order to improve the Program and to provide you with the best information and services. The information we collect in this way tells us, for example, how many users visited our website and the pages accessed, whether you have visited us before or if you are a new visitor, and helps us to identify features in which you may have the greatest interest. This information also allows us to make improvements and to enhance your experience.
Log files and IP addresses: Log files are web server files (containing information such as the domain name or IP address, URL, the http response code, the website from where you visit us or the date and duration of your visit) that are automatically created when an Internet user visits a site. An IP address is a unique identifier that certain electronic devices use to identify and communicate with each other on the Internet. When you visit the Site(s), we may collect the IP address of the device you use to connect to the Internet. For example, when you request a page from the Site(s), our servers log your IP address. In combination with other data, this information helps us to learn what pages are most attractive to our visitors, which of our products most interest our customers, and what types of offers our customers like to see. In addition, log files help us to detect disruptions to telecommunication equipment and to detect abuse of our telecommunication services.
Information collection from mobile devices: If you access our Site(s), on your mobile telephone or other mobile device, we also may collect your unique device identifier and mobile device IP address (e.g. MAC address), as well as information about your device’s operating system, mobile carrier, mobile Internet browsers, and other information described in this Privacy Notice. In some regions, we may also have a Priceless Cities mobile application (“App”). Note that the App has a separate privacy notice that will apply to the data collection and privacy practices and this Privacy Notice shall not apply to the App.
Cookies, web beacons and tracking links: We may use third-party web analytics services on our Site(s). The analytics providers that administer these services use technologies such as cookies, web server logs and web beacons to help us analyze how visitors use our Site(s). The information collected through these means (including IP address) is disclosed to these analytics providers, who use the information to evaluate use of our Site(s). We offer users of our Site(s) choices to manage their preferences via our Cookie Consent Tool accessible via our AdChoices icon or via the Cookie Consent icon on our Sites. To learn more about Cookies, please visit http://www.aboutads.info/choices/ or http://www.adobe.com/privacy/opt-out.html or our Cookies Notice available on the Site(s) in the European Economic Region, Turkey, Switzerland and Canada.
Your Rights And Choices
You have the right to receive information about the data we store about you and to access your personal data by using the contact information provided in the “How To Contact Us” section below. You may also request at any time that your personal data be rectified, blocked or deleted if it is incorrect, inaccurate or outdated. Following any data request for access, rectification or deletion, we will accommodate your enquiry as required by applicable law. At any time, you may object on compelling legitimate grounds relating to your particular situation to the processing of your personal data by MasterCard, except when otherwise provided by the applicable law. We will not use any technical mechanism to subject you to a decision which produces legal effects and which is based solely on automated processing of data.
If you decide you no longer want MasterCard to process your personal data, at your request we will make information about you anonymous in the database, and any reference to you will be deleted.
You can, at any time and free of charge, choose not to receive any of those email Communications or information by clicking on the unsubscribe link within the e-mail or by e-mailing us using this link: https://www.mastercard.com/us/personal/en/general/email-opt-out.html. For other methods of Communications (text or social media), we will advise you of ways to opt-out of those Communications at the time that you receive those Communications or by other means. We will not use your personal data for sending marketing Communications unless we have received your consent.
If we fall short of your expectations in processing your personal data or you wish to make a complaint about our privacy practices, please tell us because it gives us an opportunity to fix the problem. You may contact us using the contact details provided in the “How To Contact Us” section below. To assist us in responding to your request, please give full details of the issue. We will review and respond to all complaints within a reasonable time.
If you are located in the European Economic Area or Switzerland, you may direct us not to share your personal data with third parties, except (i) with service providers we have retained to perform services on our behalf, (ii) in the event we sell or transfer all or a portion of our business or assets, (iii) if disclosure is required by law or legal process, or (iv) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual fraud or other illegal activity. If you are located in the European Economic Area or Switzerland, we use your personal data only for the purposes indicated in this Privacy Notice unless we have a legal basis, such as consent, to use it for other purposes. Where required by law, MasterCard obtains your prior opt-in consent at the time of collection for the processing of (i) personal data for marketing purposes and (ii) personal data deemed sensitive pursuant to applicable law.
If you are located in Latin America Countries, the procedure to exercise your personal data protection rights before MasterCard is the following:
In all cases, your request to exercise data protection rights must be made in writing and contain and/or enclose the following:
I. The name of the data owner and its domicile and/or other means to communicate to the same our response to the request received;
II. The documents needed to evidence the data owner’s identity or, when applicable its proxy’s identity and legal representation faculties;
III. The specific indication of the data protection right which you wish to exercise; and,
IV. A clear and precise description of the personal data for which the exercise of any data protection rights is pursued.
The validity of your request to exercise any data protection rights requires that the same meets all the requirements provided for it under the applicable legislation. In all cases the requestor shall accredit its status as owner of the personal data or alternatively its proxy condition with respect to the owner of the data as it may correspond.
MasterCard will communicate to you its decision within the term that is provided in the applicable law.
Information We Share
We do not disclose personal data collected in the context of Priceless Cities, except as described here.
We may share your personal data with our headquarters and affiliates, including MasterCard International Incorporated, MasterCard Europe sprl, MasterCard UK, and MasterCard France. We may also share your personal data provided with service providers we have retained to perform services on our behalf and in relation to the purposes described in this Privacy Notice. Examples include our operating platform providers, platform hosting providers, redemption fulfillment providers and customer service providers. When we use third party service providers, we take all necessary steps to ensure a high level of data protection. We require them to only process the data in accordance with our instructions and to guarantee the security of the data. These service providers are not authorized by us to use or disclose the data, except as necessary to perform services on our behalf or to comply with legal requirements.
In addition, we may disclose personal data about you (i) if we are required to do so by law or pursuant to legal process, (ii) in response to a request from a court, law enforcement authorities or government officials, or (iii) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss or in connection with an investigation of suspected or actual criminal activity.
We reserve the right to transfer any data we have about you in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganization, dissolution or liquidation). Should such a sale or transfer occur, we will endeavor to use reasonable efforts to seek that the transferee uses the personal data you have provided through Priceless Cities in a manner consistent with this Privacy Notice.Back to top
Links To Other Websites
On the Site(s), we provide links to other websites (including partner or third party sites) for your convenience. In particular, Priceless Cities offers you the possibility to share, link to or mention on social media outlets, such as Facebook, Instagram, Pinterest or Twitter, anything you may find of interest. These sites operate independently from the Program and are not under our control. These sites may have their own privacy policies in place, which we strongly suggest you review when you visit them. We are not responsible for the content of these sites, any products or services that may be offered through these sites, the data processing activities that are conducted via those sites, or any other use of these sites.Back to top
MasterCard only retains personal data for as long as needed to fulfill the purposes for which they were collected, unless otherwise provided by law.Back to top
We may hold your personal data in a variety of ways, including in electronic form.
We maintain appropriate administrative, technical and physical safeguards to protect personal data against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse, and any other unlawful form of processing of the personal data in our possession.
When you provide personal data online, we use the industry standard for encryption on the Internet – Secure Socket Layer (SSL) technology – to help protect the information that you provide. This Internet encryption standard scrambles data as it travels from your device to our server. You will know that you are in a secure area of the Site(s) when a lock icon appears on your screen that the “http” prefix of our URL address changes to “https”. The “s” represents “secure”. We also use digital certificates to ensure that you are connected to the authentic Site(s).
Please note however that no collection or data transmission can be guaranteed to be 100% secure. Therefore, while we strive to protect your personal data, we cannot guarantee or warrant the security of any data transmission.
We will never ask you for your password in any unsolicited communication (including unsolicited correspondence, such as letters, phone calls or e-mail messages). If you believe your user name and password have been compromised, please contact us by following the instructions provided in the section on “How To Contact Us” below.Back to top
Browser Do Not Track Signals
Although the Site(s) currently do not have a mechanism to recognize the various web browser Do Not Track signals, we do offer users of our Site(s) choices to manage their preferences via our Cookie Consent Tool on our Sites and we will honor your preferences. To learn more about browser tracking signals and Do Not Track, please visit http://www.allaboutdnt.com.Back to top
Update To This Privacy Notice
This Privacy Notice may be updated periodically and without prior notice to you to reflect changes in our personal information practices. We will post a prominent notice on our Site(s) to notify you of any significant changes to our Privacy Notice and indicate at the top of the Privacy Notice when it was most recently updated.Back to top
How To Contact Us
If you are located in the Malaysia, the entity responsible for the collection and use of your personal data in the context of the Priceless Cities available at www.priceless.com (or such other Site(s) that we may develop from time to time in connection to a city located in the Malaysia) is MasterCard Malaysia. If you would like to (i) obtain more information on how we process your personal data or to access your personal data; (ii) rectify, block or delete any personal data relating to you; (iii) withdraw your consent given for certain types of data processing; (iv) remove your e-mail address from our mailing lists; or (v) if you have any questions, comments or concerns about our privacy practices, please contact us by emailing us at firstname.lastname@example.org or by addressing your mail to:
152 Beach Road | #35-00, The Gateway East
To assist us in responding to your request, please give full details of the issue. We will review and respond to all complaints within a reasonable time. If you are not satisfied with how we respond, you may take your complaint to the applicable regulator in your jurisdiction.
For all other enquiries about your MasterCard card and your purchase, you must contact your Issuing Bank or the Participating Merchant. More information about how to contact them can be found on their respective websites.Back to top