Privacy Policy for Visa Services from 300+ Platforms
Effective Date:25.09.24
Last Updated: 25.09.24
At Visa Affiliate Ltd, Visa Institute, Visa Summit, and Visa Submission GmbH (collectively referred to as “we,” “our,” or “us”), we are committed to protecting your privacy. This privacy policy outlines how we collect, use, and share your personal data across our visa services, which operate through over 300 platforms in partnership with affiliates and direct services from Europe. We comply with International Business Law, including the General Data Protection Regulation (GDPR), to ensure the protection of your personal data.
By using our services, you agree to the terms outlined in this privacy policy.
1. Data Controller Information
For the purposes of data protection laws, including the GDPR, the data controllers responsible for your personal data are:
2. Information We Collect
We collect various types of personal data to provide our visa services effectively. This includes:
- Personal Information: Full name, address, email address, phone number, date of birth, nationality, and identification documents (such as passport details, visa copies, or government-issued IDs).
- Financial Information: Payment details, transaction history, and billing information related to visa service fees.
- Travel Information: Visa application details, travel history, and supporting documents required for visa processing.
- Technical Data: IP address, browser type, operating system, and other technology on the devices you use to access our services.
- Usage Data: Information on how you interact with our websites and services, including visa application status, service preferences, and website activity.
3. How We Use Your Information
We process your personal data for the following purposes:
- Visa Application Processing: To process and submit visa applications to relevant government authorities, embassies, or consulates on your behalf.
- Service Delivery: To provide visa services and related assistance through our network of affiliates and partners, including consulting services, document preparation, and application tracking.
- Payment Processing: To process payments for visa services, including any taxes, fees, and transaction processing.
- Communication: To contact you with updates regarding your visa application, service inquiries, and other customer support needs.
- Compliance: To comply with international business laws, visa regulations, and legal requirements in various jurisdictions, including Europe.
- Marketing (with Consent): With your consent, we may send marketing communications regarding our services or promotions related to visa and immigration processes.
4. Legal Basis for Processing Personal Data
We process personal data based on the following legal grounds under the GDPR:
- Consent: Where you have provided your explicit consent, such as subscribing to marketing communications.
- Contractual Necessity: When processing is necessary to fulfil our contractual obligations with you, such as processing a visa application or providing services.
- Legal Obligation: To comply with legal obligations, such as tax, regulatory, and visa documentation requirements.
- Legitimate Interests: Where processing is required for our legitimate business interests, such as improving our services, preventing fraud, and maintaining operational security.
5. Sharing of Your Information
We do not sell or rent your personal data. However, we may share your information with the following third parties for the purposes outlined in this policy:
- Government Authorities and Embassies: To submit visa applications and supporting documentation.
- Affiliates and Partners: To provide visa services through our network of affiliates and partners, including Visa Affiliate Ltd, Visa Institute, Visa Summit, and Visa Submission GmbH, and other trusted service providers.
- Payment Processors: To process payments securely and ensure compliance with financial regulations.
- Legal Authorities: If required by law, we may disclose your personal data in response to lawful requests from public authorities, including meeting national security or law enforcement requirements.
6. International Data Transfers
As an international service provider, your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When transferring personal data outside the EEA, we take appropriate measures to ensure the protection of your data, such as:
- Standard Contractual Clauses (SCCs): We use SCCs approved by the European Commission to ensure that your data receives the same level of protection as it would within the EEA.
- Adequacy Decisions: For transfers to countries with adequacy decisions, we ensure that these countries provide a comparable level of data protection.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, and in accordance with legal, regulatory, and business requirements. Retention periods depend on the nature of the data and the purpose for which it was collected, including:
- Visa Application Data: Retained for the duration of the visa application process and any legally required period for record-keeping purposes.
- Payment Information: Retained in compliance with financial regulations and audit requirements.
- Marketing Data: Retained until you withdraw your consent to receive marketing communications.
8. Your Rights Under GDPR
As a data subject under the GDPR, you have certain rights concerning your personal data. These rights include:
- Right to Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request correction of any inaccurate or incomplete data.
- Right to Erasure: Under certain conditions, you can request the deletion of your personal data.
- Right to Restrict Processing: You can request to limit the processing of your personal data.
- Right to Data Portability: You have the right to request the transfer of your data to another service provider in a structured, machine-readable format.
- Right to Object: You may object to the processing of your data for specific purposes, such as direct marketing.