Visa Click to Pay; joint controller arrangement
Visa Click to Pay – Overview of the Joint Controller arrangement between the Bank and Visa
When you use Click to Pay, the Bank and Visa work together to provide you with a fast and secure online checkout experience. For this reason, the Bank and Visa act as joint controllers of your personal information for Click to Pay.
How Click to Pay works;
- The Bank shares your details with Visa to enrol your card in Click to Pay
- Visa creates and manages your Click to Pay profile on its secure systems
- When you shop online:
- Visa verifies you (for example, using a one time passcode),
- shows your available cards in a secure way, and
- if you choose to pay, shares the necessary information with the retailer to complete the transaction smoothly.
How responsibilities are shared;
The Bank and Visa have agreed how responsibilities are divided between them, in line with GDPR.
The Bank is responsible for; collecting your personal information, sending it to Visa and keeping it up to date, managing your opt out options as applicable, providing you with information about how your data is used and handling your questions and requests.
Visa is responsible for; securely storing your personal information required for Click to Pay, operating the Click to Pay system, verifying your identity, displaying your cards in a masked (partially hidden) form, sharing the required details with the merchant when you choose a card to pay.
Your data protection rights;
In Europe, this joint arrangement operates in accordance with Articles 13, 14 and 26 of the GDPR. This means both the Bank and Visa are responsible for protecting your personal information and ensuring your rights are respected.
For more information about how Visa handles your personal data when providing Click to Pay, including its lawful basis for this processing, see their privacy policy.