Permalink
Branch: master
Find file Copy path
Fetching contributors…
Cannot retrieve contributors at this time
132 lines (131 sloc) 140 KB
{
"organisationInformation": {
"name": "PayPal",
"number": "B118349",
"registrationCountry": "lu",
"description": "Payment initiation service provider"
},
"organisationUrls": [],
"privacyNoticeUrl": {
"url": "https://www.paypal.com/uk/webapps/mpp/ua/privacy-full"
},
"dataProtectionOfficer": {
"present": "present",
"role": "Data Protection Officer",
"contactInfo": {
"emailAddress": "dpo@paypal.com",
"postalAddress": "PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal L-2449, Luxembourg"
}
},
"rights": {
"isMissing": false,
"general": {
"contactInfo": {
"emailAddress": "dpo@paypal.com",
"url": "https://www.paypal.com/uk/selfhelp/contact/email/privacy"
},
"observations": "PayPal note that customers should contact them if they wish to exercise their rights but do not provide any specific contact details for exercising individual rights."
},
"access": {
"contactInfo": {}
},
"rectification": {
"contactInfo": {}
},
"erasure": {
"contactInfo": {}
},
"restrictProcessing": {
"contactInfo": {}
},
"dataPortability": {
"contactInfo": {}
},
"object": {
"contactInfo": {}
},
"automatedDecisionMaking": {
"contactInfo": {},
"observations": "\"Please contact us if you require more information on automated-decision making.\""
}
},
"dataCategoriesCollected": {
"isMissing": false,
"list": [
"bank_transactions",
"credit_history",
"device_information",
"email_address",
"location",
"names",
"postal_address",
"telephone_number"
],
"sourceText": "* Registration and use information – When you register to use our Services by establishing an Account, we will collect Personal Data as necessary to offer and fulfil the Services you request. Depending on the Services you choose, we may require you to provide us with your name, postal address, telephone number, email address and identification information to establish an Account. We may require you to provide us with additional Personal Data as you use our Services.\n* Transaction and experience information – When you use our Services or access our Sites, for example, to make purchases from merchants, to receive money, to process payments, or to send money to friends and family, we collect information about the transaction, as well as other information associated with the transaction such as amount sent or requested, amount paid for products or services, merchant information, including information about any funding instruments used to complete the transaction, Device Information, Technical Usage Data, and Geolocation Information.\n* Participant Personal Data – When you use our Services or access our Sites, we collect Personal Data you provide us about the other participants associated with the transaction.\n - Send or request money: When you send or request money through the Services, we collect Personal Data such as name, postal address, telephone number, and financial account information about the participant who is receiving money from you or sending money to you. The extent of Personal Data required about a participant may vary depending on the Services you are using to send or request money. \n - Pay or request someone else to pay a bill: If you use our Services to pay a bill for the benefit of someone else, or if you request a User to pay a bill for you, we collect Personal Data from you about the account holder such as name, postal address, telephone number, email address, and account number of the bill that you intend to pay or request to be paid.\n - Add value to your accounts: If you use our Services to add value to your Account or any other account you may have, or if you ask a User to add value to any of these accounts, we may collect Personal Data from you about the other party, or from the other party about you to facilitate the request. For example, if you use our Services to reload a mobile phone, or to request value be added to your mobile account, we may collect Personal Data and other information including mobile account number from the other participant.\n* Personal Data about your friends and contacts – It may be easier for us to help you transact with your friends and contacts if you provide Personal Data such as name, email address and telephone number about your friends and contacts while using a Service or if you connect your contact list or friend list to your Account. If you choose to connect your contact list information on your device with your Account and/or establish an account connection between a social media platform and your Account, we will collect and use your contact list or friend list information to improve your experience when you use the Services.\n* Personal data that you choose to provide us to obtain additional Services or specific online Services – If you request or participate in an optional Site feature, or request enhanced Services or other elective functionality, we may collect additional information from you. We will provide you with a separate notice at the time of collection, if the use of that Personal Data differs from the uses disclosed in this Privacy Policy. \n* Personal Data about you if you transact as a guest – Certain limited Services are available without being required to log in to or establish an Account, also referred to as Guest Transactions. We will collect Personal Data, information about any funding instrument used to complete a Guest Transaction, Device Information, Technical Usage Data, and Geolocation Information as necessary to provide the requested Guest Transactions. If you are an Account holder and choose to make a Guest Transaction, we will collect information about the transaction and associate it with your Account as part of our compliance and analytics operations. If you are not an Account holder and choose to make a Guest Transaction, we will collect and store all information you provide and use and share such information in accordance with this Privacy Policy. \n* Personal Data about you from third-party sources – We obtain information from third-party sources such as merchants, data providers, and credit bureaus, where permitted by law.\n* Other information we collect related to your use of our Sites or Services – We may collect additional information from or about you when you communicate with us, contact our customer support teams or respond to a survey."
},
"unusualProcessingPurposes": {
"isMissing": false,
"present": "not_present"
},
"thirdParties": {
"isMissing": false,
"list": [
"Payment processors",
"Auditing services",
"Customer service outsourcing",
"Credit reference and fraud agencies",
"Financial products services",
"Commercial partnerships",
"Marketing and public relations",
"Operational services",
"Other PayPal Group companies",
"Legal services",
"Agencies"
],
"specificity": "specific",
"observations": "PayPal provide a breakdown of specific named third-parties with which data may be shared. This list is very long and is available at: https://www.paypal.com/uk/webapps/mpp/ua/third-parties-list",
"sourceText": "Category,Party Name and Jurisdiction (in brackets),Purpose,Data Disclosed\n1. Payment Processors,,,\n,\"Barclays Bank Plc (UK), HSBC Bank Plc (UK, Ireland), HSBC Merchant Services LLP (UK), Bank of America N.A. (EMEA, USA), BA Continuum India Private Limited (India), Discover Financial Services (USA), JPMorgan Chase Bank (UK, USA), BNP Paribas (France), Netgiro (Sweden), StarFinanz (Germany), Wells Fargo (Ireland, USA), American Express (USA), National Westminster Bank PLC (UK), OmniPay Limited (Ireland), Australia and New Zealand Banking Group Limited (Australia), ANZ National Bank Limited (New Zealand), Transaction Network Services (UK) Limited (UK) and Vocalink Limited (UK)\",\"To allow payment processing settlement services, and fraud checking.\",\"Name, address, details of user funding instruments, and details of payment transactions.\"\n,BNP Paribas (France),\"To allow payment processing, fraud checking and dispute handling for transactions of PayPal users when those users transact with a merchant who uses the PayPal service via the BNPP service.\",\"Name, address, details of user funding instruments and details of payment transactions.\n\"\n,\"\nVTB24 (Russia)\n\",\"To allow payment processing, fraud checking and dispute handling for transactions of PayPal users when those users transact with a merchant who uses the PayPal service via the VTB 24 service.\",\"Name, address, details of user funding instruments and details of payment transactions.\"\n,\"Deutsche Bank AG (Germany, Netherlands, France, Spain)\",To allow the processing of direct debits in the SEPA region.,\"Name, date of transaction, amount, currency and users bank account information.\"\n,Royal Bank of Scotland plc (UK) (RBS),To allow payment processing and dispute handling for transactions of PayPal users when those users transact with a merchant who uses the PayPal service via the RBS service.,All account information except details of user financial instruments.\n,Visa Europe Ltd (UK) including Visas VMAS system; Mastercard Europe (Master Card International Incorporated. (USA)) including Mastercards MATCH system,To share risk and fraud information in the mandatory credit card companys database regarding the conduct of a merchants account thereby reducing exposure to fraud and breaches of scheme rules and standards.,\"All account details of merchant account, and circumstances and conduct of the account.\"\n,Global Payments UK LLP (UK),\"To allow payment processing, fraud checking and dispute handling for transactions of PayPal users when those users transact with a merchant who uses the PayPal service via the Global Payments service.\",\"Name, address, details of user funding instruments and details of payment transactions.\"\n,\"WorldPay (UK) Limited, Worldpay AP Limited, (UK) Worldpay . (The Netherlands)\",\"To allow payment processing, fraud checking and dispute handling for transactions of PayPal users when those users transact with a merchant who uses the PayPal service via Worldpay service.\",All Account information except details of user financial instruments.\n,\"American Express Travel Related Services Company, Inc.\",\"To allow payment processing settlement services, and fraud checking.\",\"Unique Seller ID.\nSeller MCC\nSeller DBA\nAuthorized signer\nSeller address, postal and country code\nSeller telephone number.\nSeller email address\nSeller URL\nDate of birth (for sole proprietors only)\nFor non-publicly traded Sponsored Merchants only (e.g. privately held company, sole proprietor), the following information for a Significant Owner (as defined below):\nFirst and last name\nHome address, postal code and country code\nSSN or date of birth\nSignificant owner means an individual who has 25% or greater ownership of a business.\nUnique seller ID*\nSponsored Merchant MCC\nSponsored Merchant DBA\nSponsored Merchant location (city, street, postal code and country code)\nSponsored Merchant telephone number.\"\n,\"JPMorgan Chase Bank, N.A. London Branch\",\"Anti-money laundering, sanctions list checking and compliance checks.\",\"Name of merchant, country of domicile, and business activity.\"\n,Adyen B.V. (Netherlands),To allow payment processing and settlement services globally.,\"Name, address, details of payment instruments, and details of payment transactions.\"\n,Allied Irish Bank PLC (UK),To allow payment processing and settlement services in Europe.,\"Name, address, details of payment instruments, and details of payment transactions.\"\n,Cardinal Commerce Corporation (USA),To facilitate 3DSecure checking for payment processing globally.,Standard transaction data for 3DSecure.\n,Coinbase Inc. (USA),To allow payment processing and settlement services globally.,\"Name, address, details of payment instruments, and details of payment transactions.\"\n,\"Heartland Payment Systems, Inc. (USA)\",To allow payment processing and settlement services in the United States.,\"Name, address, details of payment instruments, and details of payment transactions.\"\n,\"Merchant e-Solutions, Inc. (USA)\",To allow payment processing and settlement services in the United States.,\"Name, address, details of payment instruments, and details of payment transactions.\"\n,Moneris Solutions Corporation (Canada),To allow payment processing and settlement services in Canada.,\"Name, address, details of payment instruments, and details of payment transactions.\"\n,National Australia Bank Ltd. (Australia),To allow payment processing and settlement services in Australia.,\"Name, address, details of payment instruments, and details of payment transactions.\"\n,\"Network Merchants, LLC. (USA); Network Merchants Inc. (USA)\",To allow payment processing and settlement services in the United States.,\"Name, address, details of payment instruments, and details of payment transactions.\"\n,Stockholms Enskilda Bank AB (Sweden),To allow payment processing and settlement services in Europe.,\"Name, address, details of payment instruments, and details of payment transactions.\"\n,\"WorldPay, Inc. (USA); WorldPay Ltd. (UK)\",To allow payment processing and settlement services globally.,\"Name, address, details of payment instruments, and details of payment transactions.\"\n,Carta Worldwide (UK),Processing of Payments and Marketing forVodafone Wallet.,\"First Name, Last Name, e-mail Address, Mobile Number, Billing Address (Street Name, House Number, City, State, Postal Code, Country), Payer ID, Billing Agreement ID, Given Payment Method, CMID / Client Metadata ID.\"\n,Nostrum Group Limited (UK),To process PayPal customer applications for credit products.,\"Name, address, telephone number, email address, date of birth, length of time at address, proof of identity, legal form, length of time in business, company registration number,VAT number, funding instrument including bank account and credit /debit card details (if appropriate)and relevant transaction information (if appropriate). All information supplied when applying for a product or account functionality (including information obtained from social media accounts or online reputation data).\"\n,\"TSYS (UK), TSYS (Germany))\",System of the record for the revolving credit line (UK) and instalment product (Germany).,\"Customer name, date of birth, home address, email address, telephone numbers, income.\"\n,Amex Multi-Currency (via Digital River),\"To enable access and use of PayPal when using French PLCs, Amex International, Maestro, Cielo, Redecard, Bancomer.\",Authorisation and settlement data.\n,Sofort GmbH (Germany),\"To allow payment processing settlement services, and fraud checking.\",\"Name, telephone number.\"\n,Currence (Netherlands),\"To allow payment processing settlement services, and fraud checking.\",\"Name, address, details of user funding instruments, and details of payment transactions.\"\n,J.P. Morgan AG.(Germany),To allow the processing of direct debits in the SEPA region.,\"Name, date of transaction, amount, currency and users bank account information.\"\n,\"Scotiabank (Canada), Citibank (US), Westpac (US)\",\"To allow payment processing settlement services, and fraud checking.\",\"Name, address, date of birth, national identity number and purpose of transaction.\"\n,Swish (SE),To enable services for payment processing,Phone number\n,\"Klarna (SE),\",To enable services for payment processing and fraud control,\"Name, address, social security number, ip-number\"\n2. Audit,,,\n,PricewaterhouseCoopers Srl (Luxembourg),To test PayPals Anti Money Laundering (AML) and Know Your Customer (KYC) controls and to carry out professional auditing services for PayPal Inc. and its subsidiaries.,\"For a sample of individual customer accounts:\nname, PayPal account number (Customer ID), total amount received on the PayPal account, total amount sent from the PayPal account, type of PayPal account, and, as the case may be, any other relevant account information.\"\n3. Customer Service Outsourcing,,,\n,\"Sutherland Global Services Inc. (USA and Philippines), BFS finance Mnster GmbH (Germany), Sitel GmbH (Germany), Transcom Worldwide SAS (France, Tunisia), Transcom Worldwide France SAS (France), Transcom Worldwide SpA (Italy), Competence Call Center Leipzig GmbH (Germany), Convergys Customer Management Group Inc. (USA), Arvato Direct Services GmbH (Germany), Concentrix Europe Limited (UK), Arvato Polska sp. z o.o (Poland)\",To allow telephone and email customer support and marketing services.,\"Name, address, telephone number, email addresses, truncated and limited or full funding source information (case dependent), funding source expiration dates, type of PayPal account, proof of identity, account balance and transaction information, customer statements and reports, account correspondence, shipping information, and promotional information.\"\n,Nuance Communications Inc. (USA),To calibrate and optimise speech recognition performance for telephone customer support services.,\"Recordings of a sample of customer support telephone calls, which may include any or all account information transmitted during the call.\"\n,ICT Group Inc. (USA),To perform and facilitate telephone customer support.,\"Name, address, telephone number, and PayPal account number.\"\n,Lithium Technologies Inc. (USA),To provide customer services arising from customer contacts to PayPal on social media channels.,\"Information provided by the customer via social media channels which may include name, address, telephone number, email addresses, social media user names, truncated and limited or full funding source information (case dependent), funding source expiration dates, type of PayPal account, proof of identity, account balance and transaction information, customer statements and reports, account correspondence, shipping information and promotional information.\"\n,Attensity Europe GmbH,To provide customer services arising from customer contacts to PayPal on social media channels.,\"Information provided by the customer via social media channels which may include name, address, telephone number, email addresses, social media user names, truncated and limited or full funding source information (case dependent), funding source expiration dates, type of PayPal account, proof of identity, account balance and transaction information, customer statements and reports, account correspondence, shipping information, and promotional information.\"\n,\"ILinc Communications, Inc. (USA)\",To provide webinars (online seminars) to merchants on ILincs platform.,\"Name, email address of merchants.\"\n,\"ePerformax Contact Centers & BPO (USA), Genpact International Inc. (USA), LatentView Analytics Pte. Ltd\",To provide customer services regarding payments globally.,\"Name, address, telephone number, email addresses, truncated and limited or full funding source information (case dependent), funding source expiration dates, type of PayPal account, proof of identity, account balance and transaction information, customer statements and reports, account correspondence, shipping information, and promotional information.\"\n,Authentify Inc.,Telephony based authentication service. To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products.,\"Name, address, phone number, email address\"\n,CallPoint New Europe AD dba TELUS International Europe (Bulgaria),To operate refunded returns service.,\"Name, email address, PayPal transaction ID, return information (returned item category, reason for return, amount of return, currency, country of return, type of return) and shipping documentation evidence.\"\n,\"Key Performance Group SAS, France\",Administration of PayPal member referral program.,\"First name, last name, email, customer ID, transaction information related to referral rewards.\"\n,\"New Relic, Inc. (USA)\",To provide analytics allowing us to troubleshoot errors in the service globally.,Log Data and Aggregated data on the service performance.\n,\"PagerDuty, Inc. (USA)\",To alert on-call technicians that an email has arrived globally.,Subject of the Email at issue.\n,\"Sumologic, Inc. (USA)\",To provide analytics allowing us to troubleshoot errors in the service globally.,Log Data and Aggregated data on the service performance.\n,IPSA International,\"To support investigation of suspicious activities related to money laundering, terrorist financing, and/or violation of Global Sanctions and corresponding reporting to regulatory agencies.\",\"Name, aliases, address, e-mail address, telephone numbers, time zone location, passport ID, nationality, date of birth, place of birth, gender, marital status, drivers license ID, social security number or other government ID, transactional and account activity data, funding instrument (bank account, credit card number).\"\n,\"CCC Leipzig (Germany)\nCCC GmbH (Germany)\",Global Ops Customer service outsourcing for the German market.,\"Full Name, Date of Birth, Email address, Physical address, Telephone number, Financials-bank, debit, and credit, Transaction history, Business details including URLs, SSN/TIN/EIN, IP Address\nCounterparty details.\n\"\n,Telus international Europe,Customer service contact centre to check reasons for inactivity and investigate any technical issues or problems,\"Name, telephone number, user type (based on number of transactions), email address, user technical historical data.\"\n,\"\n24/7 (Phillippines)\n\",\"\nLive chat and lead generation\",\"Information provided by the customer which may include name, address, telephone number, email addresses, previous chat histories.\"\n,\"Teleperformance (SE)\n\",\"To service our customers questions through phone, chat and email\",all account details\n,\"Kundo (SE)\n\",To enable customer service through email,\"name, e-mail address, ip-numbers and email content\"\n,\"Servit (SE)\n\",To enable customer service through email,\"name, e-mail address, ip-numbers and email content\"\n,Livechat (PL),Live chat and lead generation,\"Information provided by the customer which may include name, address, telephone number, email addresses, previous chat histories.\"\n,Giesecke & Devrient GmbH (UK),Manufacture of Debit Cards,\"Name, Address, Postal Code, MasterCard Account Number (PAN), Visa Account Number (PAN), Expiry Date\"\n4. Credit Reference and Fraud Agencies,,,\n\"Please note that in addition to the stated purposes below, PayPal uses your personal information to detect, prevent, and/or remediate fraud or other illegal actions, or to detect, prevent or remediate violations of policies or applicable user agreements.\",,,\n,\"Telefonica UK Ltd (UK), Telefonica Digital Ltd (UK)\n\n\",To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address and telephone number.\"\n,\"Socure, Inc. (USA)\",To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address, telephone number, email address, date of birth and IP address\"\n,\"Pipl, Inc. (USA)\",To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address, telephone number, email address and date of birth\"\n,\"White Pages, Inc. (USA)\",To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address, telephone number, email address and IP address\"\n,\"Full Contact, Inc. (USA)\",To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,Email address\n,\"CRIF S.p.A (Italy), Cerved B.I (Italy), Synectics Solutions Limited (UK), MCL Hunter (UK), GB Group plc (UK), Graydon (UK), Capita Plc (UK),UK Data Limited (UK), ICC Information Limited (UK), Payment Trust Limited (UK), 192.com (UK), 192.com Limited (UK), i-CD Publishing (UK) Limited (UK), Experian Netherlands BV (Netherlands), Experian Bureau de Credito SA (Spain), Informa D&B SA (Spain), and CRIBIS D&B S.r.l. (Italy). y), Ellisphere (France)\",\"To verify identity, verify linkage between a customer and its bank account or credit/debit card, assist in making decisions concerning a customers credit worthiness (including without limitation, in relation to credit products offered by PayPal), carry out checks for the prevention and detection of crime including fraud and/or money laundering, assist in debt recovery, manage PayPal accounts and undertake statistical analysis, undertake research and testing as to appropriateness of new products and services and system checking.\n\nTo verify identity; automatic data extraction from images of documents, and document validation / forgery detection. Research and testing as to appropriateness of new products and services; training of document recognition.\n\nPlease note that data disclosed to these agencies may be retained by the applicable credit reference and fraud agency for audit and fraud prevention purposes.\",\"Name, address, telephone number, email address, date of birth, length of time at address, proof of identity, legal form, length of time in business, place of birth, company registration number, VAT number, unique business identifier reference, funding instrument including bank account and credit /debit card details (if appropriate) and relevant transaction information (if appropriate) and tax ID or national identity number (if appropriate).\"\n,\"Callcredit plc. (UK) including the SHARE database administered by Callcredit, Experian Limited (UK) including databases administered by Experian used for consumer and commercial referencing including CAPS credit searches and CAIS credit account performance data, Equifax Ltd (UK) including the Insight database administered by Equifax, Dun & Bradstreet Limited (UK), Equifax Ibrica S.L. (Spain)\",\"To verify identity, verify linkage between a customer and its bank account or credit/debit card, make decisions concerning a customers credit worthiness (including without limitation, in relation to credit products offered by PayPal), carry out checks for the prevention and detection of crime including fraud and/or money laundering, assist in debt recovery, manage PayPal accounts and undertake statistical analysis, undertake research and testing as to appropriateness of new products and services and system checking.\n\nFor users of the UK products Website Payments Pro, Virtual Terminal and PayPal Here and UK merchants only:\nto report defaults and supply monthly account performance information, where the account shows an amount owing to us (reflected as a negative balance) for three or more consecutive months, to the databases of these third parties; and\nfor the purposes set out in section 8 of this Privacy Policy.\n\nPlease note that data disclosed to these agencies and databases may be:\nretained by the applicable credit reference agency or database for audit and fraud prevention purposes;\ndisclosed to other financial institutions for the purpose of gauging creditworthiness; and\ntransferred outside of the EU and on a global basis.\",\"Customer name, address, telephone number, name of authorised user, email address, national identity number (if appropriate), date of birth, length of time at address, proof of identity, legal form, length of time in business, company registration number, VAT number, funding instrument including bank account and credit /debit card details (if appropriate), account number,relevant transaction information (if appropriate), account balance, all information supplied and used for your application for the UK products Website Payments Pro, Virtual Terminal and PayPal Here and the financial instrument used to pay for your PayPal Here- enabled device.\"\n,CIFAS (UK) and the CIFAS database,\"For users with UK PayPal accounts only: to prevent and detect fraud (which may include checking details on job applicants and employees and on proposals and claims for all types of insurance).\n\nPlease note that data disclosed to this database may be:\nretained by the database for audit and fraud prevention purposes;\ndisclosed to other financial institutions for the purpose of fraud prevention and detection (including to prevent money laundering) for example, when checking details on applications for credit and other facilities, managing credit and credit related accounts or facilities, recovering debt, checking details on claims for insurance and checking details of job applicants or employees;\nused to determine your risk profile and for cooperation with the relevant authorities in compliance with the requirements of the Luxembourg Law of 5 April 1993 on the financial sector and laws relating to the prevention of money laundering, terrorism and fraud (excluding the treatment of personal data in relation to solvency of the persons referred to in article 14(1)(d) of the Luxembourg Law of 5 April 1993 on the financial sector); and\ntransferred outside of the EU and on a global basis.\",All account details and circumstances of the conduct of the account.\n,DueDil Limited (UK),\"To receive business information for risk assessment, and compliance with anti-money laundering requirements, such as establishing the corporate structure and beneficial ownership.\",\"Company registration number, name and address of business, name, address, date of birth of directors.\"\n,Deltavista GmbH (Germany),\"Establish risk associated with address, identity; assist in making decisions concerning a customers credit worthiness; carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products and services.\",\"Name, address, date of birth, email address and telephone number.\"\n,\"Accumio Finance Services GmbH (Germany), CEG Creditreform Boniversum GmbH (Germany), Brgel Wirtschaftsinformationen GmbH & Co. KG (Germany), Infoscore Consumer Data GmbH (Germany), Informa Solutions GmbH (Germany)\",\"To verify identity, address and telephone number and retrieve contact telephone numbers and addresses, establish risk associated with address, identity; research and testing as to appropriateness of new products and services.\n\nTo assist in making decisions concerning the credit worthiness of consumers (if they have a German PayPal account and have specifically consented to such check) and merchants, including without limitation, in relation to credit products offered by PayPal and offering direct debit payments as payment method.\n\nThe creditworthiness scores that we request from these agencies that include scores that are calculated according to mathematical-statistical procedures.\n\nPlease note the fact that PayPal requested such information, and any negative account performance data disclosed to these databases in relation to customers who have a German PayPal account may potentially be:\nretained by the database for audit purposes and for scoring of such customers creditworthiness;\nany such score may be disclosed to other third parties for the purpose of gauging creditworthiness.\n\nand\ntransferred outside of the EU and on a global basis.\",\"Name, address, date of birth, telephone number, email address, account status, account balance, and in case the transfer of such information is legally justified, also certain information on negative account performance of a customer with a German PayPal account, for which PayPal has requested a creditworthiness check from the respective database, web address, umsatzsteuerid/VAT ID and data vendor reference number (if relevant).\"\n,\"SCHUFA Holding AG (Germany), Infoscore Consumer Data GmbH (Germany)\",\"To verify a customer's identity and address, carry out checks for the prevention and detection of failing direct debit payments, and of crime including fraud and/or money laundering, including checks on the linkage of the customer and its bank account, to help determine creditworthiness of consumers (if they have a German PayPal account and have specifically consented to such check) and of merchants, and for research and testing as to appropriateness of products and services.\n\nThe creditworthiness scores that we request from these agencies include scores that are calculated according to mathematical-statistical procedures.\nPlease note the fact that PayPal requested such information, and any negative account performance data disclosed to these databases in relation to customers who have a German PayPal account may potentially be:\nretained by the database for audit purposes and for scoring of such customers creditworthiness;\nany such score may be disclosed to other third parties for the purpose of gauging creditworthiness\n\nand\ntransferred outside of the EU and on a global basis.\nFurther, in relation to customers who have a German PayPal account, the information on a failed direct debit payment may be:\nretained by the Infoscore database for audit purposes; and\n(without linkage to the customers identity) disclosed to other third parties for the purpose of preventing failed direct debit payments.\",\"Name, address, email address, date of birth, gender, bank account details, information on failed direct debit payments from a bank account (without linkage to the identity of the customer), and in case the transfer of such information is legally justified, also certain information on negative account performance of a customer with a German PayPal account.\"\n,\"Creditreform Berlin Wolfram KG (Germany), Verband der Vereine Creditreform e.V. (Germany), Axesor (Spain), Ignios (Portugal). UC AB (Sweden), Dynamic Business Information Limited (UK), Trillium (USA),\",To determine creditworthiness of merchants. To carry out checks for the prevention and detection of crime including fraud and/or money laundering and for the evaluation of verification process improvements. For the research and testing as to appropriateness of new products and services.,\"Name, (including trading as names), address, email address, telephone number, unique business identifier reference.\"\n,World-Check (UK),To verify identity.,All account information.\n,Global Data Corporation (USA),\"To verify identity, carry out checks for the prevention and detection of crime including fraud, research and testing as to appropriateness of new products and services.\",\"Name, address, date of birth, telephone number, email address.\"\n,RSA Security Inc. (USA) and RSA Security Ireland Limited (Ireland),To verify identity.,All account information.\n,ID Checker.nl BV (Netherlands) (Ireland),\"To verify identity; automatic data extraction from images of documents, and document validation / forgery detection. Research and testing as to appropriateness of new products and services; training of document recognition\",\"Name, address, email address, date of birth, legal form, company registration number, VAT number, proof of identity, address, ownership of a funding instrument or other documents requested by PayPal and the data contained therein for Risk / Compliance/ Credit purposes.\"\n,\"Aristotle International, Inc. (USA)\",To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address, date of birth and telephone number.\"\n,\"Acxiom Ltd (UK), Acxiom Deutschland GmbH (Germany) and Acxiom France SAS (France)\",To verify identity.,\"Name, address, telephone number, email address and date of birth.\"\n,Creditinfo Decision (Czech Republic) and DecisionMetrics Limited (UK),To assist with PayPals assessment of merchant risk.,All merchant account information.\n,ThreatMetrix Inc. (USA),\"To retrieve risk information regarding the IP and device from which customers are accessing PayPal, research and testing as to appropriateness of new products and services.\",\"IP and hardware information about the device (device ID, User IP address and cookies). Email address and other information collected during sign up.\"\n,TeleSign Corporation (USA),\"To validate telephone numbers, verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering. Research and testing as to appropriateness of new products and services.\",\"Name, address, phone number, email address,\"\n,\"AddressDoctor GmbH (Germany),\",To re-structure address data into normalized format.,\"Name, address, email address.\"\n,\"Deutsche Post Direkt GmbH (Germany), AZ Direct GmbH (Germany), Deutsche Post Adress GmbH & Co. KG (Germany)\",To validate and re-structure address data into normalized format and to verify name and address.,\"Name, address, email address.\"\n,Mitek Systems Inc. (USA),To validate images of identity documents and research and testing as to appropriateness of new products and services; research and testing as to appropriateness of new products; training of document recognition.,\"Name, address, email address, date of birth, legal form, company registration number, VAT number, shipping information, documents proving identity and address, ownership of a funding instrument, or other documents requested by PayPal and the data contained therein for Risk / Compliance/ Credit purposes.\"\n,Jumio Inc (USA),To capture and validate proofs of identity and address.,All data recorded on the customers identity and address documents.\n,\"Au10tix Limited (Cyprus), AuthenticID LLC\",\"To verify identity; automatic data extraction from images of documents,and document validation / forgery detection. Research and testing as to appropriateness of new products and services; training of document recognition\",\"Name, address, email address, date of birth, legal form, company registration number, VAT number, shipping information, documents proving identity and address, proof of address images, ownership of a funding instrument, or other documents requested by PayPal and the data contained therein for Risk / Compliance/ Credit purposes.\"\n,Telovia SA (Luxembourg),Identity validation and Know Your Customer (KYC) controls conducted for anti money laundering purposes.,\"Name, address, date of birth, proof of ID and address.\"\n,\"Syniverse Technologies, LLC (USA)\",Validate and apply data quality checks to telephone numbers. To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address, email address, telephone number.\"\n,Signicat AS (Norway),To verify and authenticate identity.,\"Name, address, date of birth and e-id reference number.\"\n,BankersAccuity Inc. (USA),Research and testing as to appropriateness of new products and services in relation to the validation of the account data provided to us by the user and conversion of national account data information into IBAN.,Customers bank account number and sort code and / or IBAN.\n,ArkOwl LLC (USA),To verify email address.,Email address.\n,Fraudscreen Ltd (UK),To evaluate level of fraud risk. Research and testing as to appropriateness of new products and services.,\"Name and address, Customer ID, Date of Birth, Address, Postcode, E-mail address, Telephone numbers, all account details and circumstances of the conduct of the account, relevant transaction information, decisioning information and all information supplied and used for your application for UK products.\"\n,Trustev Ltd (Ireland),\"To establish identity through customers social media data, connections and credentials.\",\"Name, address, date of birth, email address and account number.\"\n,Tracesmart Ltd (UK),\"To identify customers and assist with fraud detection, prevention, and or remediation of fraud, or other illegal actions or to detect, prevent or remediate violations of policies or the applicable user agreements. . For the evaluation of verification process improvements and for the research and testing as to appropriateness of new products and services.\",\"Title, name, address, date of birth and telephone number.\"\n,\"Zoot Enterprises, Inc. (USA), Zoot Deutschland GmbH (Germany), Zoot Enterprises Limited (UK)\",\"To process technical applications and to provide a data and document gateway for account review, testing and vetting purposes, and to exchange user information and images of documents proving identity, address and ownership of funding instrument with contracted fraud and credit reference agencies. To also aggregate data from internal and external data sources and provide statistical analysis in order to assess the risk of fraud.\",\"All account information and documents supplied by customers, to include information used to provide identity and address, ownership of a funding instrument, or other documents requested by PayPal and the data contained therein for Risk / Compliance / Credit purposes. This information may also include IP addresses.\"\n,First Data Corporation (USA),\"To process merchant-initiated and customer-authorized transactions and to provide account/card processing services, to store transaction, payment and other customer data related to those transactions.\",\"All account information and documents supplied by customers, to include information used to provide identity and address.\"\n,\"La Banque de France (France), GB Group plc (UK), SysperTec Communication (France)\",\"Research and testing as to appropriateness of new products and services used to establish risk associated with address, identity, and associated with a customers credit worthiness.\n\nTo verify identity; automatic data extraction from images of documents, and document validation / forgery detection. Research and testing as to appropriateness of new products and services; training of document recognition\",\"Name, address, date of birth, telephone number, email address.\"\n,\"MaxMind, Inc. (USA)\",\"To detect fraud.\nPlease note that data disclosed to this service provider may be:\nretained by it for audit and fraud prevention purposes;\nused by it for the purpose of optimising its fraud detection services provided to PayPal and other third parties; and\ntransferred outside of the EU and on a global basis.\",\"All account information and IP address, credit card information.\"\n,Future Route Ltd (UK),To carry out accounting data analysis of our commercial users for real time credit-risk evaluation.,\"Name, address, email address and date of birth.\"\n,\"Kount, Inc. (USA)\",To facilitate fraud checking for payment processing globally.,\"Name, address, device fingerprint data, details of payment instruments, and details of payment transactions.\"\n,Artefacts Solutions LLC (USA),To detect fraud and mitigate risk related to transaction processing.,\"Truncated card number, amount of transaction, chargeback ratio, credit ratio, and decline ratio.\"\n,\"Experian Information Solutions, Inc. (USA)\",\"To verify identity, assist in making decisions concerning a customers credit worthiness, carry out checks for the prevention and detection of crime including fraud and/or money laundering.\n\nPlease note that data disclosed to these agencies may be retained by the applicable credit reference and fraud agency for audit and fraud prevention purposes.\",\"Name, address, social security number, date of birth, business name, legal name of business, tax ID, business telephone number.\"\n,\"Trulioo Information Services, Inc. (USA)\",\"To verify identity, carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products\nPlease note that data disclosed to these agencies may be retained by the applicable credit reference and fraud agency for audit and fraud prevention purposes.\",\"Name, date of birth, address, telephone number, tax ID, national identity number, place of birth, identity document information and any other identity information requested by PayPal for Risk / Compliance/ Credit purposes.\"\n,\"Soda Software Labs Limited (UK), Aire Labs Limited (UK), Biz Equity LLC (USA), Bizequity Limited (UK), DueDil Limited (UK), Creditsafe (UK), Creditsafe Business Solutions Limited (UK), Creditsafe USA Inc. (USA), Creditsafe Deutschland GMBH (Germany), Solvabilite Enterprise (France), Creditsafe I Sverige AB (Sweden), Creditsafe Ireland Limited (Ireland), Creditsafe (SE) Safe Information Group NV (Netherlands), MiiCard Limited (UK),Yodlee Inc. (USA), Imagini Europe Limited (trading as VisualDNA) (UK); Bureau Van Dijk Electronic Publishing Ltd (UK).\",\"To verify identity, verify linkage between a customer and its bank account or credit/debit card, to make decisions concerning a customers credit worthiness (including without limitation, in relation to credit products offered by PayPal). To carry out risk assessment on the customer (individual or legal entity). To carry out checks for the prevention and detection of crime including fraud and/or money laundering and in compliance with anti-money laundering requirements such as establishing the corporate structure and beneficial ownership. To assist in debt recovery, manage PayPal accounts and undertake statistical analysis, undertake research and testing as to appropriateness of new products and services and system checking. For the evaluation of verification process improvements.\",\"Name, address, telephone number, email address, date of birth, place of birth, tax ID, passport ID, or other government issued identification number. Length of time at address, proof of identity, legal form, length of time in business, company name including doing business as or trading as names, company address, company tax or other government ID such as company registration number, company owners, controlling managers and beneficial owners. Name, address, date of birth of directors. Funding instrument including bank account and credit /debit card details (if appropriate) and relevant transaction information (if appropriate). All information supplied when applying for a product or account functionality (including information obtained from social media accounts or online reputation data).\"\n,National Credit Bureau (Russia),\"To receive business information for risk assessment, and compliance with anti-money laundering requirements, such as establishing the corporate structure and beneficial ownership. To assist in making decisions concerning a customers credit worthiness (including without limitation, in relation to credit products offered by PayPal), carry out checks for the prevention and detection of crime including fraud and/or money laundering, assist in debt recovery, manage PayPal accounts and undertake statistical analysis, undertake research and testing as to appropriateness of new products and services and system checking.\",\"Company registration number, name, and address of business, name, address, date of birth of directors, any 'trading as' names, list of companies that directors are involved in, date company established/registered.\"\n,\"Intuit Inc. (USA), Intuit Limited (UK), The Sage Group plc (UK), Xero (UK) Limited, Xero Inc. (USA)\",\"To receive information for risk assessment and assist in making decisions concerning a customers credit worthiness (including without limitation, in relation to credit products offered by PayPal), carry out checks for the prevention and detection of crime including fraud and/or money laundering, assist in debt recovery, manage PayPal accounts and undertake statistical analysis, undertake research and testing as to appropriateness of new products and services and system checking.\",\"Name, address, telephone number, email address, date of birth, length of time at address, proof of identity, legal form, length of time in business, company registration number, VAT number, funding instrument including bank account and credit /debit card details (if appropriate) and relevant transaction information (if appropriate).\"\n,\"Yodlee Inc. (USA), Intuit Inc. (USA), Intuit Limited (UK), The Sage Group plc (UK), Xero (UK) Limited, Xero Inc. (USA) Ethoca Limited (Canada)\",\"To receive information for risk assessment and assist in making decisions concerning a customers credit worthiness (including without limitation, in relation to credit products offered by PayPal), carry out checks for the prevention and detection of crime including fraud and/or money laundering, assist in debt recovery, manage PayPal accounts and undertake statistical analysis, undertake research and testing as to appropriateness of new products and services and system checking.\",\"Name, address, telephone number, email address, date of birth, length of time at address, proof of identity, legal form, length of time in business, company registration number, VAT number, funding instrument including bank account and credit /debit card details (if appropriate) and relevant transaction information\"\n,Focum Solutions B.V. (Netherlands),To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products.,\"Name, address, date of birth, identity document number, identity document type and telephone number.\"\n,ID Scan Biometrics Ltd (UK),\"To verify identity; automatic data extraction from images of documents, and document validation / forgery detection. Research and testing as to appropriateness of new products and services; training of document recognition\",\"Name, address, email address, date of birth, legal form, company registration number, VAT number, shipping information, documents proving identity and address, ownership of a funding instrument, or other documents requested by PayPal and the data contained therein for Risk / Compliance/ Credit purposes.\"\n,Paycasso Verify Limited (UK),To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products and services; training of document recognition.,Photo of customer and document images supplied by customer including all information they contain. Information from documents embedded RF chip (when applicable).\n,\"LexisNexis, LexisNexis Risk Solutions UK Limited (UK), LexisNexis Risk Solutions (USA)\",To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; to assist with customer authentication. Research and testing as to appropriateness of new products and services; training of document recognition and for the evaluation of verification process improvements.,\"Name, address and date of birth and telephone number. Photo of customer and document images supplied by customer including all information they contain.Tax ID, national identity number, place of birth, identity document information and any other identity information requested by PayPal for Risk / Compliance/ Credit purposes\"\n,QGen Limited (Malta),To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering.,Photo of customer and document images supplied by customer including all information they contain.\n,SmartKYC Ltd (UK),To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering.,\"Name, address and date of birth.\"\n,\"Dun & Bradstreet Limited (UK), Dun & Bradstreet, Inc. (USA)\",To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address, date of birth and telephone number.\"\n,\"Global Data Consortium, Inc. (USA)\",To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address, date of birth and telephone number. Tax ID, national identity number, place of birth, identity document information and any other identity information requested by PayPal for Risk / Compliance/ Credit purposes\"\n,\"\nCRIF GmbH (Austria)\nCRIF Ltd (Switzerland),\nCRIF AG (Switzerland)\",To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering. Research and testing as to appropriateness of new products,\"Name, address, date of birth and telephone number.\"\n,UPC BVK (Belgium),To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address, date of birth and telephone number.\"\n,\"Regulatory Data Corporation (USA), Livingston International (Canada), LSSI Europe Ltd (UK)\",To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; to screen for watch lists and adverse media;research and testing as to appropriateness of new products,\"Corporate name or individual name, address, telephone number\"\n,Soliditet AB (Sweden),To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address, date of birth and telephone number.\"\n,Publicis Groupe (France),To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering.,\"Name, address and date of birth.\"\n,Blue Shape SRL (Italy),To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address, date of birth, telephone number, , tax ID, place of birth, identity document information and any other identity information requested by PayPal for Risk / Compliance/ Credit purposes.\"\n,PostNL (Netherlands),To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address, date of birth and telephone number.\"\n,Compta S.A. (Portugal),To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address, date of birth and telephone number.\"\n,Deyde Calidad de Datos S.L. (Spain),To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address, date of birth and telephone number.\"\n,\"Kyckr, (Australia)\nGlobal Business Register Limited, T/A Kyckr (Ireland)\",\"To verify identity and provide ongoing due diligence of customer data. Research and testing as to appropriateness of new products and services.\n\nProvision of business register data and information for the onboarding of new customers.\nProvision of third party data for the screening and validation of new and existing customers.\nTo carry out risk assessment on the customer. To carry out checks for the prevention and detection of crime including fraud and/or money laundering and in compliance with anti-money laundering requirements such as establishing the corporate structure and beneficial ownership.\nTo undertake research and testing as to appropriateness of new products and services. For system checking and for the evaluation of verification process improvements.\",\"Name, address, email address, date of birth, legal form, company registration number, VAT number, tax ID or other government issued identification number, proof of identity, address legal status, company name, known aliases, trading as name, telephone number, company owners, controlling managers and beneficial owners. Name, address, date of birth of directors.\n.\n\"\n,Simunix Ltd (UK),\"To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products\n\",\"Name, address, date of birth and telephone number.\"\n,\"Royal Mail Group Ltd (UK)\n\",\"To validate and re-structure address data into normalized format and to verify name and address. Research and testing as to appropriateness of new products and services.\n\",\"Name, address, email address, telephone numbers\"\n,\"Credit Kudos Limited (UK)\n\",\"To evaluate level of fraud risk and credit risk, verification of income and expenditure. Research and testing as to appropriateness of new products and services.\n\n\",\"Name and address, Customer ID, Date of Birth, Address, Postcode, E-mail address, Telephone numbers, all account details and circumstances of the conduct of the account, relevant transaction information, decisioning information and all information supplied and used for your application for UK products.\n\"\n,Acton International Ltd (USA),\"To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products\n\",\"Name, address, date of birth and telephone number. Tax ID, national identity number, place of birth, identity document information and any other identity information requested by PayPal for Risk / Compliance/ Credit purposes\"\n,\"Bisnode Norge AS (Norway)\n\",To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address, date of birth, telephone number.\"\n,Bisnode Belgium NV/SA (Belgium),\"To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products\n\",\"Name, address, date of birth and telephone number.\"\n,Bisnode Danmark A/S (Denmark),\"To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products\n\",\"Name, address, date of birth, telephone number and civil registration number.\"\n,\"Bisnode Sverige AB (Sweden)\n\",\"To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products\n\",\"Name, address, date of birth, telephone number and Swedish identification number.\"\n,Bisnode Deutschland GmbH (Germany),\"To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products\n\",\"Name, address, date of birth and telephone number.\"\n,Deltavista International AG (Switzerland),\"To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products\n\",\"Name, address, date of birth and telephone number.\"\n,KAPITOL S.A. / NV (Belgium),\"To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products\n\",\"Name, address and telephone number.\"\n,Orange Espagne S.A.U,\"To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products\n\",\"Name, address, date of birth and telephone number.\"\n,SDS (Holland),\"To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products\n\",\"Name, address, date of birth and telephone number.\"\n,Dataxcel Ltd.(Ireland),\"To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products\n\",\"Name, address, date of birth. Tax ID and national identity number (if appropriate)\"\n,Telefnica SA (Spain),To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address, date of birth and telephone number.\"\n,CDDN - Communicatie Data Diensten Nederland (Holland),To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address, date of birth and telephone number.\"\n,\"FrescoData LLC (USA)\n\",To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address, date of birth and telephone number.\"\n,\"Precision Marketing Information Ltd. (Ireland)\n\",To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,Name and address.\n,\"Opplysningen 1881 AS (Norway)\n\",To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address, date of birth and telephone number.\"\n,\"Liteshell Holdings Ltd (Russia)\n\",To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address, date of birth and national identity number.\"\n,\"Infocore, Inc. (USA)\",To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address and date of birth.\"\n,LexisNexis Risk Solutions FL Inc. (USA),Support ID and Credit Verification of Customers and potential Customers.,\"Name, address, date of birth, national identity number, telephone number, images of government issued ID documents: passports, national identity documents and driver licenses.\"\n,Neustar Inc. (USA),To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, Address, Telephone Number, Email Address, IP Address\"\n,Tradle Inc (USA),\"To receive customer information for risk assessment, and compliance with anti-money laundering requirements, such as establishing the corporate structure and beneficial ownership. To verify identity; automatic data extraction from images of documents,and document validation / forgery detection. Research and testing as to appropriateness of new products and services.\",\"Name, address, telephone number, email address, date of birth, length of time at address, proof of identity, legal form, length of time in business, company registration number, VAT number, unique business identifier reference, funding instrument including bank account and credit /debit card details (if appropriate) and relevant transaction information (if appropriate) and tax code (if appropriate). Documents proving identity and address, ownership of a funding instrument, or other documents requested by PayPal and the data contained therein for Risk / Compliance/ Credit purposes.\"\n,BankID (SE),To enable verification of identity,\"Social security number\n\"\n,Synnex-Concentrix Limited (UK),To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address, email address, date of birth, legal form, company registration number, VAT number, documents proving identity and address, ownership of a funding instrument, or other documents requested by PayPal and the data contained therein for Risk and Compliance Purposes.\"\n,BBB.org (US),\"Provision of business data and information for the onboarding of new customers.\nProvision of third party data for the screening and validation of new and existing customers.\nTo carry out risk assessment on the customer. To carry out checks for the prevention and detection of crime including fraud and/or money laundering and in compliance with anti-money laundering requirements such as establishing the corporate structure and beneficial ownership.\",\"Business name, address, telephone number email, URL and other supporting information about the business such as (without limitation) name of contact person, business category, BBB rating score\"\n,AgFe LLP (UK),\"Undertake statistical analysis, research and testing as to appropriateness of new products and services and system checking. Financial consulting support services in particular with regard to making decisions concerning a customers credit worthiness (including without limitation, in relation to credit products offered by PayPal); carrying out checks for the prevention and detection of crime including fraud and/or money laundering and assisting in debt recovery.\",\"Company name including doing business as or trading as names, company address, company tax or other government ID such as company registration number, company owners, company directors, beneficial owners. Name, address and date of birth of directors. Name, address and date of birth of PayPal account applicant. All information supplied when applying for a product or account functionality.\"\n5. Financial Products,,,\n,Argus Information and Advisory Services (USA),\"Providing financial analysis, scoring solutions and advisory services.\",\"Merchant Information, Customer Information and Transaction data including encrypted PayPal ID\"\n,La Poste (France),To resolve technical issues and user claims (when PayPal is being offered by the merchant through La Postes payment solution).,Any Account information necessary to resolve the issue or claim.\n,Santander UK Cards Limited (UK),\"To conduct joint marketing campaigns for PayPal Credit, and PayPal MasterCard, risk modelling, enforce terms and conditions for PayPal Credit and PayPal MasterCard.\",\"Name, address, email address and account information (including, without limitation, account status).\"\n,PrePay Technologies Limited (trading as PrePay Solutions) (UK),To conduct joint marketing campaigns for PayPal pre-paid card and risk and fraud modelling and to enforce terms and conditions for PayPal prepaid card.,\"Name, address, email address, date of birth and account information.\"\n,\"Socit Gnrale (France), La Banque Postale (France), BNP Paribas (France) and Crdit Mutuel (France)\",Billing purposes.,\"Only for merchants using PayPal through the partners payment solution: merchant ID, number of PayPal transactions, transaction volume with PayPal and, as the case may be, termination of the PayPal account.\"\n,\"Findomestic Banca (Italy), Cetelem S.A., Cofidis (France) and Cofinoga S.A. (France)\",Registration of the credit card issued by the credit company on the users PayPal account and the processing of funding requests made by the same user.,\"Name, email address, date of birth (as the case may be), credit card number, expiry date, three digit Card Security Code (as the case may be) and amount of the funding request and any account information necessary for fraud or dispute resolution.\"\n,Cofidis (France),\"To allow payment processing, fraud checking and dispute handling for transactions done with Cofidis\",\"Name, email address, delivery and billing address, telephone number, date of sign-up, the number of payments received from verified PayPal users, whether the customer has been verified to have a bank account, details of transactions and details of unsuccessful payments\"\n,\"Total System Services, Inc. (USA)\",\"To process merchant initiated and customer authorised payments (including customer direct debit information) to provide account/card processing services, to store transaction, payment and other customer data related to those transactions. To provide call centre services, card printing, and statement printing services.\",\"Name, address, email address, date of birth (where required), all account information and documents supplied by customers, to include information required to prove identity and address.\"\n,\"United Kapital Limited (UK) and United Kapital Limited, LLC (USA)\",To enable you (or the merchant with which you transact) to use products issued by United Kapital with PayPal.,\"Only for PayPal merchants applying for and using products issued by United Kapital Limited: Name, business name, address, date of birth, copies of identification documents, PayPal identification (merchant ID), email address, telephone number, transaction information (including, without limitation, number of PayPal transactions and transaction volume with PayPal), length of time as a PayPal user and, as the case may be, termination of the PayPal account.\n\nFor customers of those merchants: transaction information, name, email address, telephone number, address and PayPal identification number.\"\n,Deloitte Consulting Inc. (USA),Financial consulting support services.,\"Customer name or business name, customer or business address, tax payer identification number, email address, telephone number, account number, account balance, account create date, type of legal entity, citizenship status.\"\n,Paga ms Tarde (Spain),\"To allow payment processing, fraud checking and dispute handling for transactions done with Paga ms Tarde.\",\"(Same information disclosed with a merchant)\nFull Name\nDate of Birth\nAge Range\nEmail address\nStreet Address\nCity\nState\nCountry\nZip Code\nAccount Status (verified)\nAccount Type\nAccount Creation Date\nTime Zone\nLocale\nLanguage\"\n,Oney (Italy) (France),\"To allow payment processing, fraud checking and dispute handling for transactions done with Oney\",\"Name, email address, delivery and billing address, phone number, date of sign-up, the number of payments received from verified PayPal user, whether the customer has been verified to have control of a bank account number, details of transaction and details of unsuccessful payment\"\n6. Commercial Partnerships,,,\n,Royal Mail Group Plc. (UK) and Pitney Bowes Inc. (USA),\"To provide automated label printing for sellers using PayPal and eBay to facilitate postal and delivery services, payment reconciliation services and to assess risk, or to help detect, prevent and/or remediate fraud, or other potentially illegal acts and violations of policies\",\"Name, address, telephone number, email address, postage transaction amount, account details, IP address, information on shipping label printing, sales history and purchase history\"\n,Trustwave (USA),\"To provide customised services and assistance to Merchants using PayPal, and to facilitate the process of becoming PCI DSS compliant.\",\"Name, email address and PayPal account number.\"\n,Stubhub Services S..r.l. (Luxembourg),For the purposes of its AML and KYC requirements.,\"First and last name, date of birth, residential address, nationality, national ID/passport number.\"\n,Harrow Council (UK),Pay out funds to benefit recipients using PayPal.,All Account Information.\n,Vodafone sales & Services Limited (UK),Processing of Payments and Marketing for Vodafone Wallet.,\"First, Last Name, e-mail Address, Mobile Number, Billing Address (Street Name, House Number, City, State, Postal Code, Country), Billing Agreement ID, Payer ID, Given Payment Method, CMID / Client Metadata ID.\"\n,Cloud IQ(UK),Providing assistance with PayPal services to business customers.,\"Customer name, business name, telephone numbers, contact email addresses, website, business industry, number of PayPal transactions, transaction volume with PayPal, domestic / international transaction volume split, shipping details, card details for the payment.\"\n,Borderlinx (UK),To provide customised services and assistance to business customers using PayPal.,\"Customer name, business name, telephone numbers, contact email addresses, website, business industry, number of PayPal transactions, transaction volume with PayPal, domestic / international transaction volume split, shipping details, card details for the payment.\n\"\n,WebInterpret (France),Providing assistance with PayPal services to business customers.,\"Customer name, business name, telephone numbers, contact email addresses, website, business industry, number of PayPal transactions, transaction volume with PayPal, domestic / international transaction volume split, shipping details, card details for the payment.\"\n,Apple Inc. (USA),\"To verify identity and carry out checks for the management of risk, prevention and detection of crime including fraud.\",\"First Name, Last Name, Email, Whether email is verified, Telephone number, Address, Account Status Account Type, When account was opened, Whether customer purchased anything using PayPal within the last 30 days (Yes or No), Whether billing information changed within the last thirty days (Yes or No),\"\n,Schenker (SE),To facilitate shipping and make it easier to ship sold / bought items on the site,\"Name, address, e-mail address, phone number\"\n,DHL (SE),To facilitate shipping and make it easier to ship sold / bought items on the site,\"Name, address, e-mail address, phone number\n\"\n,Sello (SE),\"To service larger sellers, enable shop items, enable bulk listing and order management\",\"Name, address, e-mail address, phone number, alias\n\"\n,Twilio (SE),\"To enable SMS to customers in order to verify identities\n\",\"First name, phone number\n\"\n7. Marketing and Public Relations,,,\n,Northstar Research Partners (USA),To conduct customer service surveys.,\"Name, email address, type of account, type and nature of the PayPal services offered or used, and relevant transaction information.\"\n,\"Ipsos Mori UK Limited (UK), Ipsos GmbH (Germany), Ipsos SAS (France) and FactWorks GmbH (Germany), TNS Deutschland GmbH (Germany), The Tryst Market Research Limited (UK), The Modellers LLC (USA), Hall and Partners Europe Ltd. (UK), Hall and Partners LLC (USA), Factworks LLC (USA)\",To conduct customer service and marketing surveys.,\"Name, email address, telephone number, country of residence/business, encrypted ID, transaction frequency, recency and volume, type of account, exposure to marketing materials, exposure to product flows, type and nature of the PayPal products/services offered or used, customer service contact, merchant/consumer classification, number of merchant transactions, number of months active, other relevant account/transaction information, and all information obtained from surveys.\"\n,Lieberman Research Worldwide LLC (USA),To conduct customer service and marketing surveys.,\"Name, email address, telephone number, country of residence/business, encrypted ID, transaction frequency, recency and volume, type of account, exposure to marketing materials, exposure to product flows, type and nature of the PayPal products/services offered or used, customer service contact, merchant/consumer classification, number of merchant transactions, number of months active, other relevant account/transaction information, and all information obtained from surveys.\"\n,\"Forrester Research, Inc. (USA), Forrester Switzerland GmbH/Forrester Research BV (CH)\",To conduct customer service and marketing surveys.,\"Name, email address, telephone number, country/city of residence/business, encrypted ID, transaction frequency, recency and volume, type of account, exposure to marketing materials, exposure to product flows, type and nature of the PayPal products/services offered or used, customer service contact, merchant/consumer classification, number of merchant transactions, number of months active, other relevant account/transaction information, and all information obtained from surveys.\"\n,\"Opinion Labs Inc. (USA), Sky Cconsulting (FR), Acuity ETS Ltd. (UK),I + E Research (Germany)\",To conduct customer service and marketing surveys.,\"Name, email address, telephone number, country/city of residence/business, encrypted ID, transaction frequency, recency and volume, type of account, exposure to marketing materials, exposure to product flows, type and nature of the PayPal products/services offered or used, customer service contact, merchant/consumer classification, number of merchant transactions, number of months active, other relevant account/transaction information, and all information obtained from surveys.\"\n,Adwise (France) and Axance (France),To conduct marketing surveys.,\"Name, email address, telephone number, type of account, type and nature of the PayPal services offered or used, and relevant transaction information.\"\n,\"BD Network Limited (UK), Tullo Marshall Warren Limited (UK), and MyCash (France)\",To develop and execute customer promotions.,\"Name, address and email address.\"\n,\"Salesforce.com, inc. (USA)\",To store merchant contact information as well as other supporting information about the business relationship.,\"Name, address, telephone number and email address, business name, URL PayPal Account ID and other supporting information about the business relationship, such as (without limitation) name of contact person and contact information at merchant and/or partner through which merchant has been onboarded, description of products sold through PayPal, communication notes and onboarding information, internal decisions about the merchant, revenue calculations and other information on the merchants business as made available by the merchant, and information relevant for special integrations of merchants, name and address of bank.\"\n,\"Clue PR (Poland), Daniel J Edelman Ltd (UK), Edelman.ergo GmbH (Germany, Austria, Switzerland), Edelman Spain, S.A. (Spain), Edelman S.A. (France), Edelman S.r.l. (Italy), Edelman Public Relations Worldwide B.V. (Netherlands), Southpaw Productions, s.r.o. (Czech Republic), Clue PR (Hungary), Georgia-Niki Christoula, Public Relations Consultant (Greece) Comit Communications & Marketing Limited (Ireland), F.I.K Social Industries AB (Sweden, Norway, Denmark)\",To answer media enquiries regarding customer queries and assist PayPal in social media activities.,\"Name, address, and all customer account information relevant to customer queries.\"\n,Alchemy Worx Ltd (UK),To allow management reporting of marketing campaigns.,\"Name, email address and details of customer campaign interaction.\"\n,Carrenza Limited (UK),To hose a marketing database,\"Name, address, email address, business name, domain name, account status, account preferences, type and nature of the PayPal services offered or used, and relevant transaction information.\"\n,Dataprovider B.V (Netherlands),To obtain marketing and business information for sales and Marketing purposes by acquiring and enriching business information and data profiles of new and existing customers,\"Merchant name, customer id, email address, account number, postal address, telephone number, URL.\"\n,1000Mercis SA (France) and 1000Mercis Ltd (UK),To store user data to conduct marketing campaigns on behalf of PayPal.,\"Name, email address, telephone number, type of account, type and nature of the PayPal services offered or used, and relevant transaction information.\"\n,\"A McLay & Company Limited (UK), TNT Post Italia (Italy)\",To assist in the execution of offline direct mail and marketing campaigns.,\"Name, address, email address, business name, domain name, account status, account preferences, type and nature of the PayPal services offered or used, and relevant transaction information.\"\n,\"Datacolor Dialog-Medien GmbH (Germany), MEILLERGHP GmbH (Germany) and W & J Linney Ltd (UK)\",To assist in the execution of offline direct mail and marketing campaigns.,\"Name, email address, address, business name, domain name, account status, account preferences, type and nature of PayPal services offered or used.\"\n,\"Medallia, Inc. (USA)\",To conduct customer service surveys.,\"Name, email address, type of account, type and nature of the PayPal services offered or used, and relevant transaction information.\"\n,Endlichsommer- werbung in bester gesellschaft mbh (Germany) and Crossover Communication GmbH (Germany),To assist in the execution of offline direct mail and marketing campaigns.,\"Name, address, business name, type and nature of PayPal services offered or used.\"\n,optivo GmbH (Germany),To send emails; email marketing.,\"Name of the merchant, name of the contact person, email address, address, status, client ID and shop system.\"\n,\"Acxiom France SAS (France), Acxiom Ltd (UK) and Acxiom GmbH (Germany)\",To collect additional user information and better target marketing campaigns.,\"Name, address, email address, date of birth and telephone number.\"\n,\"Rapp (France), Rapp (UK), Antics (USA), Partner Path\",\"To develop, measure and execute marketing campaigns.\",\"Name, business name, address and registration number of merchant/partner, name, job, title, email address, telephone number of merchants contact person, merchant website URL, PayPAl account number, third party applications used by the merchant, behaviour on PayPal Serviceswebsite.\"\n,Rapp (UK),\"To develop, measure and execute marketing campaigns.\",\"First name, Last name, Address, Email address, Telephone number, Gender, Date of Birth, Date of PP account opening, Business name, Domain name, Account status, Account preferences, Type and nature of the PayPal services offered or used, Relevant transaction information.\n,\"\n,DemandGen AG (Germany),To execute e-mail marketing campaigns.,\"Name, email address, telephone number, type of account, type, and nature of PayPal Services offered or used and relevant transaction information.\"\n,\"Business support services - b2s, SAS (France), Foule Access SAS (France)\",To store merchants' contact information for marketing communications to those merchants.,\"Name of the merchant, name of the contact person, address, email address, telephone number, merchant website URL.\"\n,Consultix (France and Spain) and Quadro Srl (Italy),To host information provided by merchants and display part of this information on the pages of the PayPal website listing websites accepting PayPal and proposing special offers to PayPal users.,\"All information provided by merchants in connection with their use of these pages of the PayPal website (including in particular name of the merchant, name of the contact, email address, logo and information relating to the promotion(s) offered to PayPal users).\"\n,\"Appnexus, Inc. (USA), BlueKai, Inc. (USA), Adobe Systems Incorporated (USA), Mediamath Inc. (USA), Criteo SA (France), TubeMogul Inc (USA), AdaptTV\",To execute retargeting campaigns in order to deliver personalised advertising.,\"Anonymous ID generated by cookies, pixel tags or similar technologies embedded in webpages, ads and emails delivered to users. Encrypted e-mail address associated with PayPal users (without indicating account relationship).\"\n,\"Google Inc., Google Ireland, Ltd. (Ireland), Google (SE), DoubleClick Europe Ltd (UK), DoubleClick, a division of Google, Inc, Google Asia Pacific Pte. Ltd. (SG)\",Help identify behaviour on PayPal websites and the mobile app in order to guide decision about targeted marketing; to help efficiently handling and optimising desktop and mobile campaigns and elsewhere in the web and execute retargeting campaigns in order to deliver personalised advertising.,\"Anonymous ID generated by cookies, pixel tags or similar technologies embedded in webpages, ads and emails delivered to users. Advertising ID and Device ID, encrypted e-mail address, Encrypted Customer ID, Encrypted Merchant ID, Transaction Value.\"\n,\"Conversant Inc. (USA), Commission Junction (USA), Conversant GmbH (Germany), Conversant International Ltd. (Ireland)\",To execute and measure retargeting campaigns in order to identify visitors and redirect them though personalised advertising campaigns.,\"Hashed PayPal Account ID (as appropriate) as well as ,device ID used by a specific person, content of advertisements to be delivered, and segmentation in a user group for advertisement purposes.\"\n,\"Criteo (FR), (SE)\",To execute retargeting campaigns in order to deliver personalised advertising.,\"Anonymous ID generated by cookies, pixel tags or similar technologies embedded in webpages and emails delivered to users.\"\n,\"LinkedIn Ireland Unlimited Company (Ireland), LinkedIn Corporation (US), LinkedIn Singapore Pte. Ltd. (SG)\",To execute retargeting campaigns in order to deliver personalised advertising.,\"Business Name, Encrypted e-mail address associated with PayPal users (without indicating account relationship)\"\n,Conversant Inc. (USA),To execute and measure retargeting campaigns in order to identify visitors and redirect them though personalised advertising campaigns.,\"PayPal Account ID (as appropriate) as well as device ID used by a specific person, content of advertisements to be delivered and segmentation in a user group for advertisement purposes.\"\n,\"StrikeAd UK Ltd. (UK), Criteo Ltd. (UK), Criteo Singapore Pte. Ltd (SP), Tapjoy Inc (USA)., Supersonic Ltd., StrikeAd Inc. (USA), Exponential Interactive Inc (USA), InMobi (USA), MoPub Inc. (USA), AdMob Inc (USA), Millenial Media Inc (USA), Tapad Inc, Drawbridge Inc, Mobkoi, (UK) Fiksu, Inc. (USA), Nanigans, Inc. (USA), Eloqua, a division of Oracle Inc.,Criteo SA (France), Rocket Fuel, StrikeAd Inc. (USA)\",To execute and measure retargeting campaigns in order to segment users for marketing campaigns.,\"Anonymous cookie ID, Advertising ID, and/or device ID to segment user groups for marketing purposes.\"\n,\"Fiksu, Inc. (USA)\",To execute and measure retargeting campaigns in order to segment users for marketing campaigns involving PayPal mobile applications.,\"Device ID used for Apples iOS operating system when a user installs an application, signs up for the PayPal Services, logs in, checks in, or sets a profile picture.\"\n,\"Nanigans, Inc. (USA)\",To execute retargeting campaigns in order to deliver personalised advertising.,\"Advertising ID associated with Apple iOS devices when a user installs an application, relaunches an application, signs up for the PayPal Services, logs in, checks in, checks their balance, saves an offer, successfully completes a transaction, sets a profile picture, or makes other account changes in or related to the use of the application.\"\n,Heaven SAS (France),To execute marketing campaigns for merchants.,\"Name of merchant, merchant website URL, description of item purchased and price of item.\"\n,Wire Stone LLC (USA),\"To select, notify winners and prize fulfillment for winners of survey sweepstakes.\",\"Name, email address, encrypted ID and country.\"\n,Sotiaf Telematiques Associes SAS (France),To store user data for marketing campaigns and to execute direct marketing campaigns.,\"Name, email address, and telephone number.\"\n,2engage (Germany) and Quo Vadis (Germany),To conduct market surveys.,\"Name, company name, address, telephone number, domain name, e-mail address, type and nature of use of PayPal services, market segment and generalised categorisation of company size and information on participation in earlier surveys.\"\n,\"Facebook, Inc (US), Facebook Ireland Limited (Ireland), Twitter, Inc. (US),(Ireland) AdRoll, Yahoo, Facebook Business Manager (SE).\",To execute retargeting campaigns in order to deliver personalised advertising.,\"Advertising ID and device ID to segment user groups based on app behaviour, encrypted e-mail address associated with PayPal users (without indicating account relationship), IP Address, Anonymous ID generated by cookies, pixel tags or similar technologies embedded in webpages, ads and emails delivered to users. Mobile advertiser ID, IP Address and other metadata via Facebook SDK in mobile apps.\"\n,\"SurveyMonkey Spain, Sucursal em Portugal (Portugal) and SurveyMonkey.com, LLC (USA)\",To assist in carrying out user surveys.,\"Name, email address and details of customer campaign interaction.\"\n,\"Marketing and Planning Systems, LLC. USA (USA), Dynamic Logic, Inc. (USA), GfK Custom Research LLC (USA), GfK Polonia Sp. z o.o. (Poland), Millward Brown, Inc. (USA) and Radius Global Market Research, LLC (USA)\",To conduct customer service and marketing surveys.,\"Name, email address, telephone number, country/city of residence/business, encrypted ID, transaction frequency, recency and volume, type of account, exposure to marketing materials, exposure to product flows, type and nature of the PayPal products/services offered or used, customer service contact, merchant/consumer classification, number of merchant transactions, number of months active, other relevant account/transaction information, and all information obtained from surveys.\"\n,\"Oracle America Inc. (USA),\nOracle Corporation UK Ltd\",\"To develop, measure and execute marketing campaigns.\",\"Name, business name, address and registration number of merchant, name, job title, email address, telephone number of merchants contact person, merchant website URL, PayPal account number, third party applications used by the merchant, behaviour on PayPal website.\"\n,\"Nanigans, Inc. (USA), Fiksu, Inc. (USA), Ad- X Limited (UK); Criteo Ltd. (UK), Criteo Singapore Pte. Ltd\",Help identify behaviour in the mobile app in order to guide decision about targeted marketing; to help efficiently handling and optimising mobile campaigns on social networks and elsewhere in the web.,\"Anonymous cookie ID, Advertising ID, and Device ID used by a specific person, events in the mobile app about the use of the mobile app by a specific user (including, without limitation, login, successful completion of the transaction), but no payment and financial information details.\n\nContent of advertisements to be delivered to specific users and, as appropriate, segmentation group to which such person belongs to for advertisement purposes.\"\n,\"Zeuner S.p.A. (Italy), Accueil Srl (Italy) and CallCenterNet Italy s.r.l. (Italy)\",To store merchants' contact information for marketing communications to those merchants.,\"Name of the merchant, name of the contact person, address, email address, telephone number, merchant website URL.\"\n,Purepromoter Ltd t/a Pure360,To send service related and (depending on opt-in settings) promotional SMS messages to PayPal users.,\"Mobile Number, name, address, email address, business name, business contact details, domain name, account status, account type, account preferences, type and nature of the PayPal services offered or used and relevant transaction and account information.\"\n,Iris (Germany),\"To develop, measure and execute marketing campaigns.\",\"Name, business name, address and registration number of merchant/partner, name, job title, email address, telephone number of merchants contact person, merchant website URL, PayPal account number, third party applications used by the merchant, behaviour on PayPal website.\"\n,OC&C Strategy Consultants Limited (UK),To conduct market research and developinsight.,Anonymized account and transaction information.\n,PaketPLUS Marketing GmbH (Germany),\"Managing marketing campaigns, distributing flyers to merchants and follow up of the campaigns.\",\"Consumer name, Location, Nature and scale of fraud on the account, Business name.\"\n,Eye square GmbH (Germany),To conduct customer service and marketing surveys.,To conduct customer service and marketing surveys.\n,\"Alliance Data FHC, Inc., trading as Epsilon International and/or Epsilon Communication Solutions, S.L\",\"To execute outbound communication campaigns including, but not limited to, email and push notifications.\",\"Contact information inluding, but not limited to, name, email, telephone number. Anonymous cookie ID, Advertising ID. Content of communications to be delivered to specific users and, as appropriate, segmentation group to which such person belongs to for communication purposes.\"\n,Adjust GmbH (Germany),Help identify behaviour in the mobile app in order to guide decision about targeted marketing; to help efficiently handling and optimising mobile campaigns on social networks and elsewhere in the web.,\"Anonymous cookie ID, Advertising ID, and Device ID used by a specific person, events in the mobile app about the use of the mobile app by a specific user (including, without limitation, login, successful completion of the transaction), but no payment and financial information details.\n\nContent of advertisements to be delivered to specific users and, as appropriate, segmentation group to which such person belongs to for advertisement purposes.\"\n,\"Visual IQ, Inc (USA), Visual IQ (Canada)\",Cross Device / Channel Measurement.,\"Advertising ID and device ID to segment user groups based on app behaviour, encrypted e-mail address associated with PayPal users (without indicating account relationship). Anonymous ID generated by cookies, pixel tags or similar technologies embedded in webpages,ads and emails delivered to users.\"\n,aklamio GmbH (Germany),aklamio implements referral marketing and cashback program to acquire new active PayPal consumers.,\"encrypted consumer ID, the time, when the sign-up and first transaction was made.\"\n,Rakuten (Global),To execute retargeting campaigns in order to deliver personalised advertising.,\"Anonymous ID generated by cookies, pixel tags or similar technologies embedded in webpages and emails delivered to users.\"\n,Realzeit GmbH (Germany),\"To execute and measure retargeting campaigns in order to segment users for marketing campaigns, deliver personalized advertising.\",\"Anonymous cookie ID, Advertising ID, and/or device ID.\"\n,Trademob GmbH (Germany),\"To execute and measure retargeting campaigns in order to segment users for marketing campaigns, deliver personalized advertising.\",\"Anonymous cookie ID, Advertising ID, and/or device ID.\"\n,\"Maple Team Limited (Israel), Unique Digital Marketing Limited (UK), Havas Media (France), Havas Media Limited, Webguerillas GmbH (Germany), Blue 449 GmbH (Germany)\",Online media agencies to buy digital media to advertise PayPal services and products.,\"These agencies often process anonymous cookie, device IDs, targeting lists, hashed email lists to reach our consumers via media networks.\"\n,Affiperf Conversion Tag (Havas Trading Desk) EMEA,To execute retargeting campaigns in order to deliver personalised advertising.,\"Anonymous ID generated by cookies, pixel tags or similar technologies embedded in webpages and emails delivered to users.\"\n,Pandora,To execute retargeting campaigns in order to deliver personalised advertising.,\"Anonymous ID generated by cookies, pixel tags or similar technologies embedded in webpages and emails delivered to users.\"\n,Affilio,To execute retargeting campaigns in order to deliver personalised advertising.,\"Anonymous ID generated by cookies, pixel tags or similar technologies embedded in webpages and emails delivered to users.\"\n,Resultados Digitais,To execute retargeting campaigns in order to deliver personalised advertising.,\"Anonymous ID generated by cookies, pixel tags or similar technologies embedded in webpages and emails delivered to users.\"\n,Netfluential Ltd. (UK),To conduct customer service and marketing surveys.,\"Name, email address, telephone number, country/city of residence/business, encrypted ID, transaction frequency, recency and volume, type of account, exposure to marketing materials, exposure to product flows, type and nature of the PayPal products/services offered or used, customer service contact, merchant/consumer classification, number of merchant transactions, number of months active, other relevant account/transaction information, and all information obtained from surveys.\"\n,Greenberg Inc. (USA),To conduct customer service and marketing surveys.,\"Name, email address, telephone number, type of account, type and nature of the PayPal services offered or used and relevant transaction information.\"\n,\"LatentView Analytics Corporation (US, UK, India)\",To conduct customer service and marketing surveys.,\"Name, email address, telephone number, country/city of residence/business, encrypted ID, transaction frequency, recency and volume, type of account, exposure to marketing materials, exposure to product flows, type and nature of the PayPal products/services offered or used, customer service contact, merchant/consumer classification, number of merchant transactions, number of months active, other relevant account/transaction information, and all information obtained from surveys.\"\n,Hall & Partners Europe Ltd. (UK),To conduct customer service and marketing surveys.,\"Name, email address, telephone number, type of account, type and nature of the PayPal services offered or used and relevant transaction information.\"\n,Firefish Ltd. (UK),To conduct customer service and marketing surveys.,\"Name, email address, telephone number, country/city of residence/business, encrypted ID, transaction frequency, recency and volume, type of account, exposure to marketing materials, exposure to product flows, type and nature of the PayPal products/services offered or used, customer service contact, merchant/consumer classification, number of merchant transactions, number of months active, other relevant account/transaction information, and all information obtained from surveys.\"\n,\"FocusVision Worldwide Inc. (USA), Focus Vision Inc (UK)\",To conduct customer service and marketing surveys.,\"Name, email address, telephone number, country/city of residence/business, encrypted ID, transaction frequency, recency and volume, type of account, exposure to marketing materials, exposure to product flows, type and nature of the PayPal products/services offered or used, customer service contact, merchant/consumer classification, number of merchant transactions, number of months active, other relevant account/transaction information, and all information obtained from surveys.\"\n,Clear Score Technology Ltd. (UK),To execute targeted campaigns in order to deliver personalised advertising.,\"Anonymous ID generated by cookies, pixel tags or similar technologies embedded in webpages, ads and emails delivered to users.\"\n,VivaKi GmbH (Germany),To collect anonymous user information to efficiently optimize marketing campaigns. Help identify behaviour on PayPal websites in order to guide decision about targeted marketing and personalized advertising.,\"Anonymous ID generated by cookies, pixel tags or similar technologies embedded in webpages, ads, apps and emails delivered to users. Information about device, browser, visited PayPal websites.\"\n,Adjust GmbH (Germany),Help identify behaviour in the mobile app in order to guide decision about targeted marketing; to help efficiently handling and optimising mobile campaigns on social networks and elsewhere in the web.,\"Anonymous cookie ID, Advertising ID, encrypted customer ID, and Device ID used by a specific person, events in the mobile app about the use of the mobile app by a specific user (including, without limitation, login, successful completion of the transaction), but no payment and financial information details.\n\nContent of advertisements to be delivered to specific users and, as appropriate, segmentation group to which such person belongs to for advertisement purposes.\"\n,Quiller Consultants (UK),Support UK Government Relations work.,PayPal marketing materials and product overviews. Occasional merchant case study. All other data shared will be public record e.g. consultation response. No customer or merchant specific data will be shared.\n,iProspect,Search engine optimization to support PayPal marketing teams and provide feedback on web-design and site issues.,\"Cookie ID, Customer ID, Country, account type, IP address.\"\n,\"Mozoo UK LTD, LoopMe Ltd., 4th Screen Advertising Ltd\",\"To execute and measure retargeting campaigns, to segment users for marketing campaigns, to deliver personalized advertising.\n\",\"Anonymous cookie IDs, Advertising IDs, Aggregated data on installs, signups, and conversions\n\"\n,Crispin Porter Bogusky CP+B (UK),To execute and measure advertising campaigns,\"Transaction Value (Donate only), Merchant ID\"\n,\"Altares D&B (EMEA), Informa (EMEA), Cerved (EMEA), Cribis D&B (EMEA),Coface (EMEA), Dun & Bradstreet (EMEA).\",\"Marketing and business information for sales purposes, acquire and enrich business info of new and existing clients.\n\",External leads (prospect business information).\n,Fiksu Inc(USA),To execute and measure retargeting campaigns in order to segment users for marketing campaigns involving PayPal mobile applications.,\"Device ID used for Apples iOS operating system when a user installs an application, signs up for the PayPal services, logs in, checks in, or sets a profile picture.\"\n,Market Bridge (USA),To segment customers to enable improved servicing,\"Account ID, address, post code, account history, growth data including product utilisation and all transaction data.\"\n,\"Select Media Ltd (UK), AdCompass Ltd (UK), Cheetah Mobile Inc. (China), Fyber GmbH (Germany)\",To execute and measure retargeting campaigns in order to segment users for marketing campaigns.,\"Anonymous cookie ID, advertising ID, and/or device ID to segment user groups for marketing purposes.\"\n,\"Debby and Ron digital LTD (IL)\nLLC Havas Digital (Havas Russia)\",Online media agency to buy digital media to advertise PayPal services and products.,\"These agencies often process anonymous cookie, device IDs, targeting lists, hashed email lists to reach our consumers via media networks.\"\n,\"Ogury Ltd (UK), Adara, Inc (USA), RadiumOne, Inc (USA),\nMicrosoft Online Inc, Commission Junction (USA)\",\"To execute and measure retargeting campaigns in order to segment users for marketing campaigns, deliver personalized advertising.\",\"Anonymous cookie ID generated by cookies, pixel tags or similar technologies embedded in webpages and emails delivered to users, Advertising ID, and/or device ID.\"\n,\"Integral Ad Science, Inc. (USA), Moat, Inc (USA)\",Third party ad verification services,Non-PII Behavioral signals with regards to online advertising activity\n,Hypothesis Inc.,To conduct customer service and marketing surveys.,\"Name, email address, telephone number, country of residence/business, encrypted ID, transaction frequency, recency and volume, type of account, exposure to marketing materials, exposure to product flows, type and nature of the PayPal products/services offered or used, customer service contact, merchant/consumer classification, number of merchant transactions, number of months active, other relevant account/transaction information, and all information obtained from surveys\"\n,Borek media GmbH (Germany),\"To assist in the execution of offline direct mail and marketing campaigns.\n\",\"Name, customer ID, email address, postal address, business name, domain name, account status, account preferences, type and nature of PayPal services offered orused.\n\"\n,LookBookHQ (Canada),To deliver services related to LookbookHQ content experience products,\"Customer and prospect IP address, customer email address\"\n,Purestone TFM Limited (UK),To perform customer and prospect interviews and research as input to the creation of marketing communication assets like testimonials and success stories,\"Customer business name, contact name, contact telephone number\"\n,Snap Inc. (USA),To execute retargeting campaigns in order to deliver personalised advertising.,\"Advertising ID and device ID used by a specific person, install and in-app data based on those IDs\"\n,Mobext (UK),To execute retargeting campaigns in order to deliver personalised advertising.,Advertising ID and device ID used by a specific person\n,Teads SA (France),To execute retargeting campaigns in order to deliver personalised advertising.,\"Advertising ID and device ID used by a specific person, install and in-app data based on those IDs\"\n,Spotify AB (Sweden),To execute retargeting campaigns in order to deliver personalised advertising.,\"Advertising ID and device ID used by a specific person, install and in-app data based on those IDs\"\n,Apple Search Ads (USA) (UK),\"To set up, execute and measure advertising campaigns on Apple Search Ads platform. Apple will deliver advertising content to users of Apple software applications and Apple devices.\",\"Advertising ID and device ID used by a specific person, install and in-app data based on those IDs\n\"\n,Batch Media GmbH (Germany),For ad verification and viewability measurement,\"Campaign based data (time, campaign information, location, geo information, browser information) as well as javascript readable creative data and IP address.\"\n,Qualtrics (U.S.),\"Collect users feedback on paypal.com website to get their satisfaction scores and specific site improvement recommendations, report site issues directly from the site visitors\",\"IP Address; User Agent; Browser; Device Type; Screen Resolution; Browser Size, Page URL; Page Referrer; Site Referrer; Page count; Time spent on site; time focused on site, date; day; time, Survey status (rendered, started, completed) and content filled if completed, Encrypted Cust_ID, Page name\"\n,RadiumOne (US),To execute and measure user behaviors (signups and transactions) and retargeting campaigns in order to identify visitors and redirect them through personalised advertising campaigns.,\"Anonymous ID generated by cookies, pixel tags or similar technologies embedded in webpages, ads and emails delivered to users. Advertising ID and Device ID, encrypted e-mail address, Customer ID, Merchant ID, Transaction Value, Transaction ID, loan approval amount.\"\n,XING AG (Germany),To execute retargeting campaigns in order to deliver personalised advertising.,Company names of existing merchants for matching them with the platforms user base\n,Cosine (UK),Marketing of PayPal Here,\"Name, surname, business name, TPV, number of transactions, address, email address\"\n,\"\nBlueshift (US)\n\",To enable marketing automation and personalization,\"Name, surname, e-mail, phone number, gender, birth date, member ID, city, country, page visited and purchase history\"\n,Smartly,To enable advertising on specific segments and find new potential customers,\"E-mail address\n\"\n,Precis digital,To enable personalized advertising through AdWords,Email address\n,Wunderman (Germany),Data analyses and CRM strategy.,\"Contact and account information including, but not limited to; name, address, email, telephone number, customer ID, DOB, anonymous cookie ID, advertising ID, segmentation group to which such person belongs to, transaction ID, number of PayPal transactions, domestic/ international transaction volume split, transaction frequency, recency and volume,type of account, exposure to marketing materials, exposure to product flows, type and nature of the PayPal products/services offered or used, customer service contact,merchant/consumer classification, number of merchant transactions, number of months active, other relevant account/transaction information.\"\n8. Operational services,,,\n,\"Rackspace US, Inc. (USA)\",To provide hosting and storage services to assist and/or enable PayPal to provide services to customers.,\"Name, address, and email address.\"\n,\"arvato Financial Solutions LTD (UK), arvato Benelux B.V. (NL), arvato service France S.A.R.L. (France), arvato Financial Solutions LTD (Ireland), Kanzlei Dr. Seegers, Dr. Frankenheim & Partner Lawyers (Germany, Austria, Switzerland), Akinika Debt Recovery Limited (UK), Cabot Credit Management LTD (UK), Capita Plc (UK), Compagnie Francaise du Recouvrement (France), Clarity Credit Management Solutions Limited (UK),EOS Solution Deutschland GmbH (Germany), EOS Aremas Belgium SA/ NV (Belgium), EOS Nederland B.V. (Net herlands), Arvato Infoscore GmbH (Germany), infoscore Forderungsmanagement GmbH (Germany), infoscore austria GmbH (Austria), Infoscore Iberia (Spain), infoscore Inkasso AG (Switzerland), infoscore Nederland B.V. (Netherlands),SAS (France), Transcom WorldWide S.p.A. (Italy), Transcom Worldwide SAS (Tunisia), Transcom Worldwide (UK) Ltd (UK), Intrum Justitia S.p.A. (Italy), Wescot Credit Services Limited (UK)\",To collect debt.,\"Name, address, telephone number, account number, date of birth, email address, account type, account status, last four digits of financial instruments account, sort code, account balance, details of account transactions and liabilities, name of funding source provider and copies of all correspondence in each case relating to amounts you owe (or another person owes) to us.\"\n,\"KSP Kanzlei Dr. Seegers (Germany), BFS Risk & Collection GmbH (Germany),Infoscore Forderungsmanagement GmbH (Germany), Team 4 Collect (Spain), Arvato Polska (Poland), BCW Collections Ireland Ltd (Ireland), S.C. Fire Credit S.R.L. (Romania), Gothia Financial Group AB (Sweden), Gothia AS (Norway), Gothia A/S (Denmark), Gothia Oy (Finland), Credit Solutions Ltd (United Kingdom).\",\"To assist with debt collection processes, including sending of correspondence ; and reporting to credit reference agencies about defaulting customers.\",\"Name, address, telephone number, account number, date of birth, email address, account type, account status, last four digits of financial instruments account, sort code, account balance, details of account transactions and liabilities, name of funding source provider, applicable details of account behaviour and copies of all correspondence (including without limitation, all correspondence relevant for reporting to credit reference agencies) in each case relating to amounts you owe (or another person owes) to us.\"\n,\"Begbies Traynor Group plc (UK), Moore Stephens LLP (UK), Moore Stephens Ltd (UK), Moore Stephens International Ltd (UK), Moorhead James LLP (UK), Comas Srl (Italy), RBS RoeverBroennerSusat GmbH & Co. KG (Germany), LLC Elitaudit (Russia), National Recovery Service (Russia), TDX Group Limited (UK)\",\"To investigate (including, without limitation, to carry out asset and/or site inspections and/or business evaluations) and/or collect (and/or assist with the collection of) debt from potentially and actually insolvent customers.\",\"Name, address, telephone number, account number, date of birth, email address, account type, account status, last four digits of financial instruments account, sort code, account balance, details of account transactions and liabilities, name of funding source provider and copies of all correspondence, in each case relating to amounts you owe (or another person owes) to us.\"\n,Webbank (USA),\"Only for customers who are also customers of Bill Me Later, Inc.: to help with accounting and recovery services.\",\"Name, address, telephone number, account number, date of birth, email address, account type, account status, last four digits of financial instruments account, sort code, account balance, details of account transactions and liabilities, and name of funding source provider.\"\n,Research in Motion Limited (USA),To enable you to access and use PayPal via a mobile device (for example mobile telephone or PDA).,Applicable details of your account information which are transmitted as part of your use of PayPal via a mobile device.\n,Digital River Inc. (USA),\"To enable you to access and use PayPal when using French PLCs, Amex international, Maestro, Cielo, Redecard, Bancomer.\",Access to the authorisation and settlement data.\n,mediafinanz AG (Germany),\"To collect debt, to request and proceed information from and to Schufa, Buergel and other credit reference and fraud agencies for PayPal.\",\"Name, address, telephone number, account number, date of birth, business name, email address, account type, account status, last four digits of financial instruments account, account balance, details of account transactions and liabilities, name of funding source provider, credit score received from agency, account performance data.\"\n,\"Zyklop Inkasso Deutschland GmbH (Germany), PNO inkasso AG (Germany), Hanseatische Inkasso-Treuhand GmbH (Germany)\",\"To collect and manage debt, to support collections teams in case of insolvent customers.\",\"Name, address, telephone number, account number, email address, account type, account status, last four digits of financial instruments account, sort code and name of funding source provider, account balance, date and amount of last payment, results of creditworthiness checks.\"\n,Informa Solutions GmbH (Germany),\"To request and proceed information from and to Schufa, Buergel and other credit reference and fraud agencies in and from and to ID Checker.\",\"Name, date of birth business name, legal form, address, email address, company registration number and VAT number.\nFor the purpose of verification of identity also: other information contained in documents requested by PayPal for Risk / Compliance purposes.\nFor customers with a German PayPal account also: telephone number, length of time at address, length of time in business, length of time with PayPal, funding instrument including bank account and credit /debit card details and relevant transaction information, credit score received on behalf of PayPal from a credit reference agency, account number, account type, account status, account balance, details of account transactions and liabilities, negative account performance data.\"\n,P K Consultancy Limited (UK),To assess risk and help detect and prevent potentially illegal acts and violations of policies.,\"Name, address, telephone number, account number, email address, account type, last four digits of financial instruments account, account balance, details of account transactions and liabilities, account status and account performance information as required for the Purpose.\"\n,Robertson Taylor Insurance Brokers Limited (UK),Consultation with respect to risk assessment of specific merchants and merchant transactions.,\"Name, address, telephone number, account number, business contact details, domain name, email address, account type, account balance, details of account transactions and liabilities, account status and account performance information as required for the Purpose.\"\n,Accenture (UK),\"Consultation and data review / analysis with respect to Global Operational Customer Service KPI data and spend incorporating customer feedback and complaints, Teammate performance as it relates to such metrics as CSAT, Transfer Rate, Repeat Contacts.\n\",\"Name, address, telephone number, email address, account number, contact details, account type, account balance, details of account transactions and liabilities, account status and account performance information as required for the Purpose.\"\n,\"Yesmail Inc. (USA), Responsys (USA), Silverpop Systems Inc. (USA) and e-Dialog, Inc. (USA), Salesforce.com, Inc. (USA), Oracle America Inc. (USA), Adobe Systems Incorporated (USA), Teradata Corporation\",\"To fulfil email operations in respect of the PayPal services (including, but not limited to, operations, customer services, collections, marketing programmes and promotions).\",\"Name, address, email address, business name, business contact details, domain name, account status, account type, account preferences, type and nature of the PayPal services offered or used and relevant transaction and account information.\"\n,Blue Media S.A. (Poland),To verify identity and ensure that a user is a PayPal account holder. To process instant funding requests made by a user through the Blue Media services.,Name and email address.\n,Consultix GmbH (Germany),To assist in the creation of PayPal Business Accounts for merchants on-boarding through their bank's or other contract partner payment or service gateway.,\"All information provided by the merchant (directly or via his/her bank or other contract partner) for the purpose of creating his/her PayPal business account (including without limitation email address, address, business name, business contact details and bank account details).\"\n,Akamai Technologies Inc. (USA),\"Content delivery network to deliver PayPal page content from local servers to users. To also retrieve risk information regarding the IP and device from which customers are accessing PayPal, research and testing as to appropriateness of new products and services.\",\"IP and hardware information about the device (device ID, User IP address cookies). Circumstances of the conduct of IP.\"\n,azionare GmbH (Germany),To distribute prizes in prize promotions on Facebook.,\"Name, email address.\"\n,ITELLIUM mobile Solutions GmbH (Germany); CartaSi S.p.A - Gruppo ICBPI (Italy),To assist in the production of innovative payment methods (e.g. applications) and processing of payments through such innovative payment methods.,All account information.\n,Trustwave Holdings Inc. (USA),To provide PCI compliance validation services for merchant accounts and merchant integrations.,\"Business name, address, account number, merchant type, compliance program used, PCI Level, PCI Status, PCI Expiry, name, email address, telephone number of merchants contact person\"\n,\"Zoot Enterprises, Inc. (USA), Zoot Deutschland GmbH (Germany), Zoot Enterprises Limited (UK)\",\"To process technical applications and to provide a data and document gateway for account review, testing and vetting purposes, and to exchange user information and images of documents proving identity, address and ownership of funding instrument with contracted fraud and credit reference agencies.\",\"All account information and documents supplied by customers such as proofs of identity and address, ownership of a funding instrument, or other documents requested by PayPal and the data contained therein for Risk / Compliance Credit purposes.\"\n,RR Donnelley and Sons Company (USA),To provide printing services such as statements and other printed materials.,\"Name, address, email address, and account information.\"\n,Scorex (UK) Limited (UK),\"To provide a technology solution to allow PayPal to process, send and receive credit information of users via its contracted credit reference agencies.\",\"Name, address, email address, date of birth, length of time at address, telephone number, legal form, length of time in business, company registration number, VAT number (if appropriate).\"\n,OXID eSales AG (Germany),Services in connection with the development and operation of a payment system for stationary trade (point of sale).,All account information and transaction information (as appropriate).\n,\"Ordermotion, Inc. (USA)\",\"To collect data and create/deliver (direct to customer) orders for the PayPal Here product (including, without limitation, the PayPal Here-enabled device).\",\"Name, address, email, telephone number, credit card information and PayPal Payer ID.\"\n,\"Ingram Micro, Inc. (USA) and Ingram Micro (UK) Limited (UK)\",\"To act as PayPal's fulfilment distributor for the PayPal Here product (including, without limitation, the PayPal Here-enabled device).\",Name and address.\n,Interxion Datacenters B.V.,To provide data centre operations support for the Bill Safe credit product.,All relevant account information and transaction information (as appropriate).\n,\"Lattice Engines, Inc. (USA)\",To develop and optimize predictive models.,\"Name of the merchant, name of the contact person, address, email address, merchant website URL.\"\n,Interact CC Ltd (UK),Providing assistance with PayPal service to customers.,\"Customer name, business name, telephone numbers, contact email, website, business industry, shipping details, card details for the payment.\"\n,D+S communication center management GmbH(Germany),Providing assistance with PayPal services to business customers.,\"Customer name, business name, telephone numbers, contact email addresses, website, business industry, number of PayPal transactions, transaction volume with PayPal, domestic / international transaction volume split, shipping details, card details for the payment.\"\n,The unbelievable Machine Company GmbH,Hosting BillSafe application on its servers.,All Account information.\n,eBay Enterprise (GSI Commerce) (USA),Processing of PayPal payments and provision of customer support on merchants behalf.,\"Name, address, telephone number, email addresses, truncated and limited, funding source expiration dates, type of PayPal account, account status, last four digits of financial instruments account, sort code, account balance, details of account transactions.\"\n,Globalcollect (NL),Process PayPal transactions; facilitate settlement of funds outside of the PayPal system and reporting.,\"Name, address, telephone number, email addresses, truncated and limited or full funding source information, funding source expiration dates, type of PayPal account, account status, last four digits of financial instruments account, sort code, account balance, details of account transactions.\"\n,Zevas Communications Ltd (Ireland),Providing assistance with PayPal services to business customers.,\"Customer name, business name, telephone numbers, contact email addresses, website, business industry, number of PayPal transactions, transaction volume with PayPal, domestic / international transaction volume split, shipping details, card details for the payment.\"\n,VoiceSage UK (UK),To allow SMS contact support services.,\"Name, telephone number.\"\n,Trustly Group AB,To allow customers to instantly transfer money from their bank account to their PayPal account.,\"Name, e-mail and IP-address.\"\n,Mediamedics BV,To allow customers to instantly transfer money from their bank account to their PayPal account.,\"Name, e-mail and IP-address.\"\n,Giropay GMBH,To allow customers to instantly transfer money from their bank account to their PayPal account.,\"Name, e-mail and IP-address.\"\n,Trustly Group AB (Sweden),To verify identity and ensure that a user is a PayPal account holder. To process instant funding requests made by a user via the instant top up service provided by the partner.,\"Name, KYC/KYB status, account activity information.\"\n,\"Applause App Quality, Inc. (USA)\",To provide ability to download PayPal apps for beta testing,Email address and country where located\n,\"Google, Inc. (USA)\nAmazon Web Services (USA)\",\"To provide cloud-based hosting, storage and processing services to assist and/or enable PayPal to manage users Account Information as well as data generated through their use of Paypal Services and deliver, analyse and improve PayPal Services.\",\"All Account Information, data generated through the use, and/or necessary for the provision of, Paypal Services and, more generally, all information referred to in the Privacy Policy (in each case referred to in this (section 8) in redacted or encrypted form).\"\n,Accenture (Ireland),Optimise Call Routing Technology and Processes.,\"Customer country, teams that have accessed the customer,unique customer identifier of end customer of PayPal.\n\n\"\n,\"Deloitte Tax LLP (US, UK, LUX)\n\",Deloitte Tax LLP is PayPals third party compliance partner. Deloitte will review PayPal customer and merchant account information to determine if the account holder should be reported to the LUX authorities for FATCA purposes and facilitate the filing of the report with Lux authorities.,\"PayPal customer account and merchant, and bank information, name address, email address. Customer name or business name, customer or business address, tax payer identification number, customer account and tax documents (W-9, W8-BEN-E) email address, telephone number, account number, account balance, account create date, type of legal entity, citizenship status.\"\n,iManage LLC (United States),Document storage for legal department,\"The documents stored on the system would also contain customer information such as might be included in a customer compliant, for example.\"\n,Syniverse ICX Corporation (United States),To deliver text messages to customers,\"Customers mobile telephone numbers, international mobile subscriber identity (IMSI) and content of text messages\"\n,\"McKinsey & Company, Inc. (United States)\",\"Customer service monitoring, operations review\",\"Name, address, email, telephone\"\n,VXI Global Holdings BV (UK),To obtain information to be able to answer customer service inquiries,\"Full Name\nDate of Birth\nEmail address\nPhysical address\nTelephone number\nFinancials-bank, debit, and credit\nTransaction history\nBusiness details including URLs\nSSN/TIN/EIN\nIP Address\nCounterparty details\"\n,Alorica Inc. (UK),To obtain information to be able to answer customer service inquiries,\"Full Name\nDate of Birth\nEmail address\nPhysical address\nTelephone number\nFinancials-bank, debit, and credit\nTransaction history\nBusiness details including URLs\nSSN/TIN/EIN\nIP Address, Counterparty details\"\n,BeRuby (Spain),To maintain and support an engagement platform,\"(Same information as disclosed with a merchant) Full Name Date of Birth, Age Range, Email address, Street Address, City, State Country Zip Code, Account Status, (verified), Account Type, Account Creation, Date, Time Zone, Locale, Language\"\n,Gevekom GmbH (Germany),Providing assistance with PayPal services to business customers.,\"Company name, Name and surname, Email address, Shop URL, Shop system, Industry, Telephone number, Sign up date for PP PLUS, Eligibility to PUI, PP account ID\n\"\n,US Direct E-Commerce Limited (Ireland),\"Provides PayPal merchants the ability to purchase Shipping Labels to ship goods domestically as well as Cross Border. Provides PayPal merchants and their buyers the facility to track the shipments in real time.\n\",\"Name, address, telephone number, email address, list of ready to be shipped transactions details, ready to be shipped transactions value, Item information,\n\"\n,\"Genesys Telecommunications Laboratories Inc (USA), Performance Technology Partners LLC (USA)\",To assist PayPal technical teams with resolving routing/telephony related issues.,\"Customer name, telephone number, account number\"\n,\"BFS Finance Mnster GmbH (Germany)\n\",To collect debt,\"Name, address, telephone number, account number, date of birth, email address, account type, account status, last four digits of financial instruments account, sort code, account balance, details of account transactions and liabilities, name of funding source provider and copies of all correspondence in each case relating to amounts you owe (or another person owes) to us.\n\"\n,\"\nTesch mediafinanz GmbH (Germany), Fire Spa Consulting & Debt Management (IT)\nLowell Investment GmbH (DE)\",\"To collect debt, to request and proceed information from and to Schufa, Buergel and other credit reference and fraud agencies for PayPal.\",\"Name, address, telephone number, account number, date of birth, business name, email address, account type, account status, last four digits of financial instruments account, account balance, details of account transactions and liabilities, name of funding source provider, credit score received from agency, account performance data.\"\n,figo GmbH (Germany),\"To verify identity, verify linkage between a customer and its bank account, make decisions concerning a customers credit worthiness, determine customers risk profile; carry out checks for the prevention and detection of crime including fraud and/or money laundering, manage PayPal accounts and undertake statistical analysis, undertake research and testing as to appropriateness of new products and services and system checking; to enable account information service and/or payment initiation service\",Onlinebanking-Credentials\n,\"BuiltWith Pty Ltd (Australia)\nAmazon.com Inc - Alexa Web Information Service (USA)\",Assess seller website trustworthiness,Website address (URL\n,Optima Legal Services Limited (UK),\"To collect debt, to request and proceed information from and to Schufa, Buergel and other credit reference and fraud agencies for PayPal.\",\"Name, address, telephone number, account number, date of birth, business name, email address, account type, account status, last four digits of financial instruments account, account balance, details of account transactions and liabilities, name of funding source provider, credit score received from agency, account performance data..\"\n,\"Behaviometrics AB t/a BehavioSec (Sweden)\n\",Assessment of fraud risk. Detection of fraudulent account takeover. Research and testing as to appropriateness of new products,\"Email address used for customer login, customer keyboard and cursor behavior when using PayPal website or App.\"\n,Onfido Ltd. (UK),\"To verify identity; automatic data extraction from images of documents, and document validation / forgery detection. Research and testing as to appropriateness of new products and services; training of document recognition\",\"Name, address, email address, date of birth, legal form, company registration number, VAT number, documents proving identity and address, ownership of a funding instrument, or other documents requested by PayPal and the data contained therein for Risk / Compliance/ Credit purposes.\"\n,Microsoft Inc. (US),Facial image comparison for fraud prevention. Research and testing as to appropriateness of new products,\"Image of customer supplied as photo, video or via image of identity document.\"\n,\"WNS Global Services Limited (UK)\n\",To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address, email address, date of birth, legal form, company registration number, VAT number, documents proving identity and address, ownership of a funding instrument, or other documents requested by PayPal and the data contained therein for Risk and Compliance Purposes.\"\n,Vaulto Technologies Ltd (Israel),To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address, phone number, email address, customers spoken voice, customer keyboard and cursor behavior when using PayPal website or App.\"\n,\"Gigya, Inc. (US)\n\",To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address, phone number, email address, customers spoken words, customer keyboard and cursor behavior when using PayPal website or App, Social media logins or identity tokens (at customer discretion).\"\n,\"Danal\n\",To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address, phone number, email address, customers spoken words, customer keyboard and cursor behavior when using PayPal website or App.\"\n,Early Warning Services LLC,Telephony based authentication service. To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products,\"Name, address, phone number, email address, customers spoken words, customer keyboard and cursor behavior when using PayPal website or App.\"\n,Intrum (SE),Debt collection of unpaid invoices,\"Name, address, social security number, invoice details\"\n,Crashlytics (US),\"To enable app analyzis, crash reports and statistics\n\",\"Member id, alias, e-mail address\"\n,LynkMobility (DE),To deliver text messages to customers,Customers mobile telephone numbers\n,Datanomers (US),Assessment of merchant risk. Research of social sentiments.,\"Name, registered business name, date of birth, address, phone number, tax ID, national identity number, email address, business website, business owner/relationships, business rating and social sentiments.\"\n,\"Booyami, Inc (dba Finagraph) (US)\",Assessment of merchant risk. Research of financial statements.,\"Business name, financial statements.\"\n,BESS Software Solutions GmbH (Germany),To provide software for PayPal to meet regulatory reporting obligations,\"Name, All account information, credit information for Merchants\"\n,\"Lowell Group (UK), Moorcroft Debt Recovery (UK), Robinson Way Limited (UK), ARC (Europe) Ltd (UK), Moreton Smith Receivables (UK), Fire Spa Consulting & Debt Management (Italy), HFG Inkasso GmbH (Germany)\",To collect debt,\"Name, address, telephone number, account number, date of birth, email address, account type, account status, last four digits of financial instruments account, sort code, account balance, details of account transactions and liabilities, name of funding source provider and copies of all correspondence in each case relating to amounts you owe (or another person owes) to us.\"\n9. Group companies,,,\n,PayPal Inc. (USA),Acting on behalf of PayPal for the purposes of storing and processing of Account information.,All Account information.\n,\"PayPal Europe Services Limited (Ireland), PayPal Malaysia Services Sdn Bhd (Kuala Lumpur), PayPal Israel Ltd (Israel), PayPal India Private Limited (India), PayPal (UK) Ltd (UK), PayPal France S.A.S. (France), PayPal Deutschland GmbH (Germany), PayPal Spain SL (Spain), PayPal Italia Srl (Italy), PayPal Nederland BV (Netherlands), PayPal European Marketing SA (Switzerland), PayPal Polska Sp Zoo (Poland), PayPal Bilisim Hizmetleri Limited Sirketi (Turkey), PayPal International S.r.l.(Luxembourg),PayPal International Treasury Centre S.r.l.PayPal SE (UK), Bill Me Later Inc. (Germany), PayPal Information Technologies (shanghai) Co., (China), PayPal Australia Pty Limited (Australia), PayPal Charitable Giving Fund (USA), PayPal Giving Fund UK (UK), Tradera AB (Sweden)\",\"Acting on behalf of PayPal for the purpose of customer support, risk assessment, compliance and/or other back office.\",All Account information.\n,PayPal Pte. Ltd. (Singapore),Acting for the account of PayPal by entering into and performing non-customer contracts which involve customer data.,All Account information.\n10. Commercial partners,,,\n,\"eBay Inc. (USA), eBay Europe S. r.l. (Luxembourg), eBay Services S. r.l. (Luxembourg), eBay International AG (Switzerland), eBay Corporate Services GmbH (Germany), eBay France SAS (France), eBay (UK) Limited (UK), eBay CS Vancouver Inc. (Canada), eBay Partner Network Inc. (USA), eBay Internet Support (Shanghai) Co Ltd (China), eBay Enterprise Marketing Solutions (USA) (formerly GSI Commerce, Inc (USA), VendorNet Inc (USA), PepperJam Network (USA), GSI Media Inc. (USA), M3 Mobile Co., Ltd. (Korea), MBS (USA), ClearSaleing (USA), True Action Network (USA), True Action Studio (USA)), GumTree.com Limited (UK), Kijiji International Limited (Ireland), Kijiji US Inc. (USA), mobile.de & eBay Motors GmbH (Germany), Shopping.com Inc. (USA), Shopping Epinions International Limited (Ireland), Marktplaats B.V. (Netherlands), Private Sale GmbH (Germany), StubHub, Inc. (USA), Viva Group, Inc. (USA), StubHub Europe S. r.l. (Luxembourg), StubHub Services S. r.l. (Luxembourg), Viva Group, Inc. (USA), ProStores Inc. (USA), MicroPlace, Inc. (USA), Internet Auction Co., Ltd. (Korea), Via-Online GmbH (Germany), Zong Inc.(USA) and X.commerce, Inc. (USA). eBay Europe Services Limited (Ireland), eBay GmbH (Germany)\",\"To provide joint customers content and services (including, but not limited to registration, transactions, failover for carrier billing accounts, and customer support), to assess risk, or to help detect, prevent and/or remediate fraud, or other potentially illegal acts and violations of policies, and to guide decisions about their products, services and communications, to enable eBay customer support to reach out to joint customers that have been identified as needing account support.\",\"First Name, Last Name, Name of Business, E-mail address, All Account information, Transaction ID, eBay Claim ID, Date of transaction, Claim Type (INR, SNAD, Remorse, Etc), Amount of claim, Currency Type, Recovery Amount, Loss Amount\"\n11. Legal,,,\n,\"Altep, Inc. (USA); Altep Europe Ltd. (UK); Consilio, Inc. (USA, UK, Netherlands, Belgium, Ireland, Germany, Luxembourg, Switzerland, India, China, Japan); eTERA Consulting, LLC (USA, UK, Belgium, France, Switzerland, Italy, Ireland, Hungary, Luxembourg); Avansic, Inc. (USA); Deloitte Touche Tohmatsu Limited(USA, UK, Netherlands, Sweden, Germany, Belgium, Ireland, France, Switzerland, Luxembourg, India, China, Japan); Superior Review (US, UK); Morae Legal (USA)\",\"Litigation Support to facilitate the preservation, collection, processing, analysis, review and production of electronically stored information to comply with requests from government agencies, third-parties, and adverse parties as required by law.\",\"PayPal customer account and merchant, and bank information, name address, email address, social media user names, (truncated redacted or limited depending upon the case and requestor), internal employee communications, including email communications with merchants, customers, clients, and other third parties, spreadsheets, PowerPoint and other business documents related to PayPal and its affiliates.\"\n12. Agencies,,,\n,\"CSSF (Luxembourg), Commission nationale pour la protection des donnes Luxembourg , Financial Ombudsman Service (UK), Altroconsumo (Italy), European Consumer Centre Network organisations (located in Austria, Belgium, Bulgaria Czech Republic, Cyprus, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, and the UK), Les Mediateurs du Net (France), Risolvi Online (Italy) and BaFin (Germany), Data Protection Agencies located in Austria, Belgium, Bulgaria Czech Republic, Cyprus, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, and the UK.\",To provide the Agencies listed with information within their authority (upon their request) and to respond to queries and/or investigations instigated by users or other stakeholders in the countries where they have jurisdiction.,All Account information."
},
"retentionRules": {
"isMissing": true,
"summary": "PayPal do not provide specific information on retention periods other than to state that they may retain personal data for longer than the law requires if it is in their legitimate interest.",
"specificityCategory": "general",
"specificityTime": "general",
"sourceText": "We may retain Personal Data for longer periods than required by law if it is in our legitimate business interests and not prohibited by law."
},
"lawfulBases": {
"isMissing": false,
"consent": "- To market to you by delivering marketing materials about PayPal products and online Services and the products and services of unaffiliated businesses\n- To provide personalised Services offered by PayPal on third-party websites\n- To provide you with location-specific options, functionality or offers\n- To make it easier for you to find and connect with others\n- To respond to your requests",
"contract": "- To operate the Sites and provide the Services",
"legalObligation": "- To comply with our obligations and to enforce the terms of our Sites and Services\n- To manage risk and protect the Sites, the Services and you from fraud by verifying your identity",
"legitimateInterests": "- To manage our business needs\n- To enforce the terms of our Sites and Services;\n- To manage our everyday business needs, such as monitoring, analysing\n- To anonymise Personal data in order to provide aggregated statistical data to third parties, including other businesses and members of the public, about how, when, and why Users visit our Sites and use our Services.\n- To manage risk and protect the Sites, the Services and you from fraud by verifying your identity",
"observations": "PayPal do not break down their justifications for processing data into individual interests."
},
"securityStandards": {
"present": "present",
"observations": "PayPal's privacy policy contains a section about securing personal data but it does not mention any of the specific measures they take to do so.",
"specificity": "general"
},
"dataProcessingAddendum": {
"present": "not_present"
},
"privacyShield": {},
"dataProtectionRegister": {},
"automatedDecisionMaking": {
"usesAutomatedDecisionMaking": "present",
"observations": "They indicate that automated decision making is used with user consent for decisions concerning credit, or where it is \"necessary for the entry into or performance of a contract\", or where it is authorised by Union or Member State law.",
"specificity": "specific",
"sourceText": "We may use automated decision-making for decisions concerning credit with your consent or where necessary for the entry into or performance of a contract or authorised by Union or Member state law.\n\nPlease contact us if you require more information on automated-decision making."
},
"complaintInformation": {
"present": "not_present",
"observations": "There is no specific information on where complaints should be directed. PayPal note that unsatisfied users can contact the supervisory authority for data protection in their country, but no links or contact details are provided.",
"specificity": "general",
"sourceText": "If you are not satisfied by the way in which we address your concerns, you have the right to lodge a complaint with the Supervisory Authority for data protection in your country."
},
"presentation": {
"plainLanguage": "pass",
"easyToFind": "pass",
"easyToFindInside": "pass"
}
}