Date of last revision: 16th of March, 2023
1. About Valyuz
2.1.1. Account or Valyuz Account has the meaning of the account created byValyuz to the Client
2.1.2. Client has the meaning of an individual or legal entity holding ValyuzAccount;
2.1.3. Mobile APP has the meaning of Valyuz mobile applications used forprovision of Services.
2.1.5. Personal data has the meaning of information that can be used to directlyor indirectly to identify You.
2.1.6. Services has the meaning of the services provided by VALYUZ to itsClients;
2.1.8. Website or Valyuz Website has the meaning of the website availableat https://www.Valyuz.com/;
2.1.9. We has the meaning of Valyuz;
2.1.10. You has the meaning of the person whose Personal data is processed byValyuz.
2.1.11. Valyuz partners has the meaning ofthird-party companies, that take partin serving Valyuz Clients based on relevant contracts between the parties
4. Personal data we collect
4.1.1. In order to provide You with Valyuz Account and Services thereof, Valyuzcollects various types of Your Personal Data.
4.1.2. Personal Data is collected and used during 3 principal steps: registration, identity verification and the use of Valyuz Account and Services.
4.2. Processing of registration data
4.2.1. In the registration process we collect some important details about You, such details may include: name, surname, email address, mobile phone number. Submission of herein mentioned Personal data is mandatory for Your registration. Failure to provide any of this data or decision to delete or object to processing of any of such data will result in dismissal of Your registration.
4.2.2. In case You have not finished Your registration and have not deleted all Your Personal data submitted in the registration form we will understand it as Your request for us to take steps before entering into contract and we will contact You in order to assist You with registration for opening the Account process.
4.2.3. Finalizing Your registration You will have to confirm Your email address and/or phone number provided after the respective message is sent to it.
4.2.4. After providing Personal data for registration You can continue with application for opening the Account. For this purpose we need to request more information in order to meet legal and regulatory obligations. Therefore proceeding with the Account opening You should provide us Your additional Personal Data, which may include data as such: Residential address, Correspondence address for delivery of Debit card (if different from residential address), ID document number (national identificationcard/ Passport number), Passport expiry date, Passport nationality, Occupation, Employment status and details of employment, Reason foropening the account, Source of funds, copy of identification document (ID,Passport, utility bill), personal description and photograph and any otherinformation You provide us in order to prove Your eligibility to use ourServices. Submission of herein mentioned Personal data is mandatory for Account to be created and opened. Failure to provide mentioned Personal data will lead to dismissal of application for Account opening.
4.2.5. In order to open the Account we need to know what expected activities on it are. Therefore during the process of opening Your Valyuz Account You must determine and indicate such activities and provide details of it. Such information is collected and processed in order to comply with legal and regulatory obligations. Sometimes we need to request more information to identify You or to meet legal and regulatory obligations. When that is necessary, You will be prompted to provide such information.
4.2.6. If You contact us, we will keep a record of that correspondence.
4.2.7. Personal data collected by Valyuz in the Registration step is used for the following purposes:
188.8.131.52. Account opening;
184.108.40.206. Client identification;
220.127.116.11. Client risk assessment mandatory under the applicable laws;
18.104.22.168. Provide Clients with support, letting them know about upcoming changes or improvements of Website and/or Mobile APP;
22.214.171.124. Provide Clients with information regarding changes of any terms or conditions applicable to them or Services they use as well as other important information;
126.96.36.199. Provide and/or exchange Clients personal data with Valyuz partners that provides the services requested by Clients in accordance with the Client’s consent.
4.2.8. Valyuz processes Client’s registration data on the legal basis of:
188.8.131.52. Your consent, expressed when voluntarily submitting and fillingYour Personal Data details in our registration form which are notmandatory to fill in; and
184.108.40.206. Conclusion and performance of contractual arrangements and obligations between Valyuz and/or Valyuz partners and the Client; Compliance with a legal and regulatory obligations to which Valyuz is subject. You may at any time edit, update ordelete Your contact details contacting our service centre thoughinternal messaging system in Your Account. Please note that Youwill be able to request deletion of Your contact details and otherregistration data only if there is no legal obligation for Valyuz topreserve such data by the applicable laws.
4.3. Processing of Client verification data
4.3.1. In order for the Account to be created You must verify Your identity. Weverify You by the Personal data You provide during registration. However,such Personal data must be confirmed, therefore in addition, forverification purposes we also rely on verification services, managed andprovided to us by our service providers.
4.3.2. While exercising this verification step, You will be requested to upload YourID document and proof of address. You will undergo facial verification. Forthe mentioned purposes we receive and rely on a certain confirmation fromour service providers that Your identity is verified. Please note, that underthe applicable laws Valyuz is obligated to collect and store all data receivedduring Client identification and verification process therefore scannedcopies of ID documents, proof of address, data related to facial recognitionand other information will be stored by Valyuz in accordance to this Privacypolicy and applicable legislation.
4.3.3. May request to provide further information that will allow Valyuz toreasonably identify You and verify Your identity. Valyuz reserves the rightto contact You and request to provide more information or confirm thatprovided information is up-to-date and valid.
4.3.5. Processing of Your ID document, address proof, facial verification data, uploaded to third-party database as described above, is covered by third parties’ privacy policies. You shall be notified about exact third party performing Your verification process before starting such process. All Personal data You provide for verification process shall be provided directly by You to our service provider performing Your verification and therefore processing of such data shall be covered by the policies of such Service provider. You should carefully review privacy policies of such Service provider before starting the verification process.
4.4. Processing of data generated while using our Mobile App
4.4.1. To provide quality user experience for You we create a possibility to use our Services through the Mobile App. For installing purposes of such Mobile App we do not process any of Your Personal data. While You are using our Mobile App we collect and process:
220.127.116.11. Your login history for the security purposes.
18.104.22.168. History and other information of Your actions while using Mobile app in order to: (i) ensure the functionality of Mobile App and toprovide further updates and improvements, (ii) ensure compliance with a legal and regulatory obligations.
4.4.2. Processing of data generated while using Valyuz Account
22.214.171.124. While You are using our Services and Account we are collecting the following information:
126.96.36.199.1. History of transactions (date, information of payer andpayee, amount of transaction) is processed in order to: (i)ensure the functionality of Mobile App and to providefurther updates and improvements, (ii) ensurecompliance with a legal and regulatory obligations;
188.8.131.52.2. Internal messaging history on Account, including, but not limited to, claims and complaints made by You is processed in order to: ensure duly performance of obligations regarding provision of Services. Please note that You should limit personal information and details provided during internal massaging to the extent necessary for Service provision or asked by us;
184.108.40.206.3. Your behavior while using Account (Your clicks, visited sections) is processed in order to ensure the improvements of functionality of Website;220.127.116.11.4. Your payment card information (date of issue and expiry date) is processed in order to provide You Services;
18.104.22.168. Valyuz processes Personal Data collected while using Services and Account on the following legal basis:
22.214.171.124.1. Conclusion and performance of contractual arrangements and obligations between Valyuz and You; and
126.96.36.199.2. Pursuance of legitimate interests of Valyuz, as controller and manager of Webpage and Mobile app;
188.8.131.52.3. For compliance with a legal obligation to which Valyuz is subject.
184.108.40.206. Personal data of other individuals by providing personal data ofany individual other than Yourself to us during the use of ourServices, You confirm that You have obtained consent from suchindividual to disclose their personal data for collection and use. Byproviding such Personal data to us You bear all the responsibilitytowards such individual if You have not received proper consentsfor such provision and You undertake to indemnify us for anyliability which may appear due to unlawful provision and/ordisclosure of personal data made by You.
5. Other purposes for use of Personal Data
5.1. Developing the Website and Mobile App
5.1.1. We use Personal data to conduct research and development of our Website, Mobile App and Services in order to provide You and others with a better, more intuitive and personalized experience, drive membership growth.
5.2. Client support
5.2.1. We use Personal data to keep in touch with You to provide You with customer service, notify You on news and updates, provide You with the security notices or information.
5.3. Security and investigations
5.4. Providing information on similar products and services
5.4.1. We use Personal data to provide You with information about other goods and services we offer that are similar to those that You have already purchased or enquired about.
5.5. Third party information
5.5.1. We will combine Personal data with information we have collected about You and we will use this information to help us better understand Your financial circumstances and behavior so that we may make decisions about how we manage Your Account and in order to make a decisions about whether to agree to approve application on Account opening.
5.6. Providing information to Valyuz partners
5.6.1. We may provide to and/or exchange the Personal data we have collected about You with our partners that intends to provide or already provides the services to You based on Your request.
6. Personal Data received from third parties
6.1. We collect and receive Your Personal data from Yourself, as well as from the following sources:
6.1.1. We work closely with third parties in order to deliver our Service to You. These third parties are business partners, sub-contractors in technical, payment services, advertising networks, analytics providers, search information providers, credit reference agencies, fraud prevention agencies, customer service providers and developers. Information we may collect about You from such parties can include credit search information, information which helps us to verify Your identity or information relating to Your payment transactions.
6.1.2. Other legal sources, such as public registers, internet search engines, public sources such as social media.
7. How we share personal data
7.1. In order to provide You with the Services and meet our legal and regulatory obligations, we use third parties’ services, and such third parties use personal data in delivering their services to us. Therefore, we may share the information we collect about You with our service providers (Data processors) such as:
7.1.1. Cloud storage/server’s providers. We use their service in order to store Your data safely and securely.
7.1.2. Card issuing institutions. For the purpose of providing, You with a card in order to use our Services.
7.1.3. Auditors, accountants and lawyers: In order to complete financial, technical and legal audits of Valyuz operations or provide us with respective services, we may need to share some information about You as part of such audit or in service.
7.2. We only use the services of those Data processors which ensure safeguards and use technical and organizational security measures equivalent to the ones required by EU General Data Protection Regulation. In order to provide You with related services provided by our partners, such as card issuing institutions, we act as a personal data processor and collect and process Your personal data on behalf of card issuing institution. Please be informed that card issuing institutions are independent service providers and the controller of Your personal data. We advise You to carefully read privacy policies of such service providers
7.3. Processing personal data inside and outside the EEA
7.3.1. The data that we collect from You will be stored at a destination inside the European Economic Area (EEA).
7.3.3. Please note that Your Personal data may be transferred outside EEA. Your personal data is transferred outside the EEA if the following conditions are met:
220.127.116.11. Personal data is transferred only to our reliable partners that ensure the provision of our services to You;
18.104.22.168. Data processing agreements are sign and partners have made obligations to ensure the security of Your personal data as required by law;
22.214.171.124. The commission of the European Union has made decision of security level adequacy of the country in which our partner is established, an appropriate level of security is ensured;
126.96.36.199. Partners ensure the level of security of Personal data in accordance with the “EU-US privacy shield”.
7.3.4. Our Legal Obligation to Use or Disclose Personal Data when we are legally required to provide information or when we need to take legal action to defend our rights, as well as the cases, where we have a belief in good faith that access, use, preservation or disclosure of the information is reasonably necessary to meet any applicable law, regulation, legal process or enforceable governmental request, enforce applicable Terms of Services, including investigation of potential violations, detect, prevent or otherwise address fraud, security or technical issues.
188.8.131.52. Valyuz may partner with other financial institutions, such as credit and financial services partners, including banking partners, banking intermediaries, credit companies and international payments services providers. With their help we are able to provide You Services and in order to meet legal and regulatory requirements we might be obligated to share Your Account details with such partners to the extent You actually transact or interact with customers of such partners.
8. Your rights
8.1. You are entitled to the following rights regarding the protection of Your Personal Data:
8.1.1. The right to request access information we process about You: this right enables You to receive a copy of the personal data we hold about You;
8.1.2. The right to request to correct incorrect / inaccurate information about You: this right enables You to have any incomplete or inaccurate Personal data we hold about You to be corrected. Please note that we may need to verify the accuracy of the new data You provide to us.
8.1.3. The right to request to transfer all or part of the Personal data: This right enables You to ask us to provide You with Your Personal data in a structured, commonly used, machine-readable format, which You can then transfer to other appropriate data controller. Note that this right only applies to automated information which You initially provided for us to use and consented for it use or where we used the information to perform a contract with You.
8.1.4. The right to request erasure of Personal data: This right enables You task us to delete or remove personal data where there is no good reason focus to process it, or if You have successfully exercised Your right to object to processing (as described in clause 9.1 herein below). Please note that Valyuz as a regulated financial institution is obligated under the applicable laws regarding prevention of money laundering and terrorist financing aswell as of Law on Electronic Money and Electronic Money Institutions of Valyuz UAB is a company registered in Lithuania No. 304782929, Correspondence address: Konstitucijos ave. 7,Vilnius, Lithuania; Registered office address: Gedimino ave. 44A-201, Vilnius, Lithuania.. Valyuz UAB holds an unlimited electronic money institution license issued by the Bank of Lithuania (license No. 34) under the Law on Electronic Money and Electronic Money Institutions of the Republic of Lithuania. www.valyuz.com the Republic of Lithuania to retain certain information You have provided for several years, as indicated per clause 8.6.4 below, therefore we may not always be able to comply with Your request of erasure for the mentioned reasons. We will notify You at the time of Your request if it the situation isas described.
8.1.5. The right to request restriction of data processing: This right enables You to ask us to suspend the processing of Your personal data. Please note that such requests may lead to a situation that we may not be able to perform our contractual obligations towards You or enter into a contract with You. If this would be the case, we will notify You about it.
8.1.6. The right to object to processing of Personal Data when processing is carried out based on legitimate interest: This right can be exercised in a situation where we are relying on our legitimate interest (or those of a third party) but in Your particular situation such processing impacts on Your fundamental rights and freedoms. You also have the right to object where we are processing Your personal data for direct marketing purposes. Please note that Valyuz as a regulated financial institution is obligated under the applicable laws regarding prevention of money laundering and terrorist financing as well as of Law on Electronic Money and Electronic Money Institutions of the Republic of Lithuania to process Your certain Personal data for compliance purposes, therefore in some cases, we may demonstrate that we have compelling legitimate grounds to process Your Personal data which override Your rights. Requirements of the mentioned laws supersede any right to objection under applicable data protection laws. If You object to the processing of certain data, then we may not be able to provide You Services and it is likely we will have to terminate Your Account.
8.1.7. To exercise any of the rights mentioned above, please reach out to our client support team via the internal massaging available in Your Account or contact our Data Protection Officer as indicated below. We may ask You to verify Your identity and provide us with more information regarding Your request.
9. How long do we keep Personal data
9.1. Valyuz as a regulated financial institution is obligated under the applicable laws regarding prevention of money laundering and terrorist financing as well as of Law on Electronic Money and Electronic Money Institutions of the Republic of Lithuania to retain Your Personal data for a number of years:
9.1.1. Client identification data and verification data – 8t years after termination of the contract relations;
9.1.2. History of transactions – 5 years after terminations of the contract relations.
9.2. We therefore use this retention requirement as a benchmark for all personal data that we receive from You. In order to not hold Your information for longer than itis strictly necessary we will not hold any of Your personal data for more than 8 years after the termination of our business relationship.
10.1. We would appreciate the chance to deal with any of Your concerns regarding Personal data and we will try to find a solution at Your satisfaction. So please contact us in the first instance. Also know that You have the right to lodge a complaint to the national Data Protection Agency (DPA) in the country of Your residence in the event where Your rights may have been infringed.
11. Valyuz’s Data Protection Officer
11.1. Data Protection Officer (email: DPO@valyuz.com) is responsible for matters relating to privacy and data protection.
11.2. If You have any further questions regarding the Personal data Valyuz collects, or how we use it, then please feel free to contact Data Protection Officer at the details as indicated above hereof.