Last updated on September 23, 2024
Last updated on September 23, 2024
Annex 1: Cross-border transfer of personal information
Recipient Name and Contact Info | Purpose of the use and retention of Personal Information (PI) by the Third Party | All specific PI items transferred | Period of Retention by the Third Party | Destination Country | Date, time, and method of transmission | Users right to refuse transfer of PI to the recipient(s) and disadvantages resulting from such refusal | Sub-processors |
adjust Inc.
https://www.adjust.com/terms/privacy-policy/
| Mobile App tracking and analytics software to analyze and optimize mobile advertising campaigns. | IP addresses, Device IDs including Advertising IDs, HTTP Header, User Agent (country, language, local settings, (version of the) operating system) and App-version, User’s device and App/Web Activity Information, App and Event Token | For as long as necessary to provide the services or as otherwise agreed in the service contract. | US, DE, NL | At the time customer engages with the mobile app | Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
|
AU10TIX Limited
https://www.au10tix.com/security-compliance/
| Identity verification, enhancements, and training of document recognition. | Images of customer documents used for proof of identity/address (e.g. Passport, Driver’s License, etc.), Data within these images (e.g.: First Name, Last Name, Date of Birth, Address, Document Number, Social Security Number/ National ID Number, Image of Customer), Image Metadata, which may include Geolocation image was taken | For as long as necessary to provide the services or as otherwise agreed in the service contract. | CY | At the time of customer identity validation over the network. | Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
|
commonFont, LLC
https://www.commonfont.com/privacy-policy/
| System configuration and advisory services for customer experience survey vendors (i.e. Medallia and Qualtrics). | Email Address, Name, Phone Number, Account ID
| For as long as necessary to provide the services or as otherwise agreed in the service contract. | US | When providing implementation or consulting services. | Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
|
Daon
| Evaluating, testing, and optimizing the algorithms used in the identity authentication software products relevant to PayPal. | Identity documents and Facial images | For as long as necessary to provide the services or as otherwise agreed in the service contract. | IE | At the time of providing the service via secure link. | Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
|
Discover Network
https://www.discoverglobalnetwork.com/privacy-policy/
| Card/Payment Network, enables processing card payments. | Payment/ transaction details | For as long as necessary to provide the services or as otherwise agreed in the service contract. | US | At the time of processing the payment via network. | Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
|
DocuSign Inc.
https://www.docusign.com/privacy
| Electronic signature solution. | Name, Email, Job Title | For as long as necessary to provide the services or as otherwise agreed in the service contract. | Globally | At the time of signing the documents over the network. | Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
|
Veriff
https://www.veriff.com/privacy-notice
| Subscription software for image and documentation capture and verification. | Personal data contained within verification documents (e.g.: Names and Contact Details, Identification Documents details, including Document Type, Photo of the document, Document Number, Date of Issue and Expiry, content of extracted fields) Photographs, Videos and Audio Recordings of end users captured by the Services; Biometric Data relating to end users; Results of the Identity Verification / Authentication process conducted through the Services; data available in external registries when applicable, End User’s devices and the Services Usage Data, including the duration of end user's use of the Services, Activity in the Services, IP-address, Domain Name, Software, and Hardware Attributes, General Geographic Location (e.g. city, state, country); Any other Personal Data that Vendor processes on behalf of PayPal during the Term in connection with PayPal's use of and access to the Services | For as long as necessary to provide the services or as otherwise agreed in the service contract. | EU, US | At the time of providing the service via utilized software. | Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
|
Epsilon Data Management, LLC
https://legal.epsilon.com/eu/privacy-policy
| Execution and Analytics of Marketing Campaigns. Email Marketing management tools and technology. | Identification and Contact Data (Name, Date of Birth, Gender, General, Occupation or other Demographic Information, Address, Title, Telephone Number and Other Contact Details, Including Email Address), Personal Interests or Preferences (including Marketing Preferences and Purchasing and Transactional History), Communications Data (including Time/Date of Communications, and Communications Content sent and received through the services), Cookie IDs, Device IDs, IP Address and other relevant for the campaign | For as long as necessary to provide the services or as otherwise agreed in the service contract. | US, UK, SG, IN | At the time of providing the service via SFTP and API. | Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
|
Genpact UK Limited
https://www.genpact.com/privacy
| Provides contingent workforce to support setting up, executing and measuring marketing campaigns. | Access to all in-house marketing specific data (e.g.: Name, Address, Date of Birth, Email Address, Gender, Geolocation Information, Phone Number, Unique Device Identifier, etc. | For as long as necessary to provide the services or as otherwise agreed in the service contract. | N/A | At the time of providing the service. | Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted |
|
Google LLC
https://policies.google.com/privacy
| Google Marketing Campaign Tools (e.g.: Google Campaign Manager & Search Ads 360, Google Analytics 360, Display and Video 360, Google Ads / Customer Match API, Google Ads Data Hub). | Information captured from users’ engagement on our websites when marketing cookies are enabled | For as long as necessary to provide the services or as otherwise agreed in the service contract. | Globally | At the time when users engage our websites or log into their account. | Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
|
IDM Global Inc. (Identity Mind Global)
https://www.idology.com/about-us/general-privacy-policy/
| Customer Document Verification solutions for Hyperwallet. | Name, Date of Birth, Age, Gender, Address, Document type, Document ID, Portrait, etc. | For as long as necessary to provide the services or as otherwise agreed in the service contract. | US, DE | At the time of providing the service over the network. | Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
|
Medallia
https://www.medallia.com/privacy-policy/
| Customer experience survey consulting and management. | Name, Email Address, Phone, Transactional Information, Surveys Responses | For as long as necessary to provide the services or as otherwise agreed in the service contract. | US | At the time of providing the service over the network. | Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
|
MoneyGram International
https://www.moneygram.com/intl/privacy-center/global-privacy-notice
| Solution for processing payouts to users. | ID Number, Username, Passwords | For as long as necessary to provide the services or as otherwise agreed in the service contract. | US | At the time of providing the service over the network. | Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
|
Payfone (now Prove Inc.)
https://www.prove.com/legal/overview#Privacy-Policy
| Telephony-based authentication service to validate telephone numbers, verify identity and carry out checks for the prevention and detection of crime, including fraud and/or money laundering. | Address, Date of Birth, Name, Phone Number | For as long as necessary to provide the services or as otherwise agreed in the service contract. | US | At the time of customer identity validation over the network. | Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
Prove Identity Ltd |
PPRO Financial Ltd (UK)
| Payment processing and fraud checking for alternative payment methods. | Customer and Merchant Transactional Data and Merchant account / verification information, such as: name, date of birth, address, telephone number, tax number, national personal identification number, place of birth, website, email address, registration number, beneficial owners, identification document information and any other identity information requested by PayPal for risk, compliance and credit purposes. | For as long as necessary to provide the services or as otherwise agreed in the service contract or required by a local regulator. | UK, DE | When onboarding the merchant via secure API and when processing the payments. | Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
|
Qualtrics, LLC
https://www.qualtrics.com/privacy-statement/
| Customer survey software service provider. | IP Address, Name, Email, Unique Device Identifier, Information provided within the survey | For as long as necessary to provide the services or as otherwise agreed in the service contract. | Global | At the time of transacting over the network. | Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
|
Salesforce
https://www.salesforce.com/company/privacy/
| B2B Marketing automation and CRM solution. To store merchant contact information and other supporting information about the business relationship. | Email Address, Name, Phone Number, Relationship details, First and last name, Title, Position, Employer Contact information (Company Name, Email, Phone, Physical Business Address), ID data, Professional life data, Personal life data, Localization data | For as long as necessary to provide the services or as otherwise agreed in the service contract. | Global | At the time of merchant account creation over the network or manually entered into the system. | Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. | Click here |
Trulioo Information Services, Inc.
https://www.trulioo.com/privacy
| To verify customer identity information (individual & non-individual) based on the input by the customers. | Full Name, Date of birth, Address, Government ID, Phone Number, Email Address | For as long as necessary to provide the services or as otherwise agreed in the service contract. | CA, AU, IE, US | At the time of customer identity validation over the network. | Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
|
Thunes
https://www.thunes.com/privacy-notice/
| Payouts solution to mobile wallets for Xoom customers | Transaction/ Payout Information e,g.: First and Last Name, Address, Phone Number, Date of Birth, National Identification Number, Bank Account Number | For as long as necessary to provide the services or as otherwise agreed in the service contract. | SG | At the time of transaction via API. | Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
|
Hyperwallet Systems Inc.
| To fulfill our legal or regulatory obligations and for our business purposes. | PI related to registration and use, transaction and experience, participant, etc. | For as long as necessary to provide the services or as otherwise agreed in the service contract. | US | At the time of transacting over the network. | Contact us at the number and email provided in the Our Contact Info section.
|
|
Operadora PayPal de México, S. de R.L. de C.V. | To fulfill our legal or regulatory obligations and for our business purposes. | PI related to registration and use, transaction and experience, participant, etc. | For as long as necessary to provide the services or as otherwise agreed in the service contract | MX | At the time of transacting over the network. | Please contact us if you want to exercise these rights: paypal@generalagent.co.kr |
|
PayPal Data Services, Inc. | To fulfill our legal or regulatory obligations and for our business purposes. | PI related to registration and use, Transaction and experience, participant, etc. | For as long as necessary to provide the services or as otherwise agreed in the service contract. | US | At the time of transacting over the network. | Please contact us if you want to exercise these rights: paypal@generalagent.co.kr |
|
PayPal do Brasil Instituição de Pagamento Ltda. | To fulfill our legal or regulatory obligations and for our business purposes. | PI related to registration and use, transaction and experience, participant, etc. | For as long as necessary to provide the services or as otherwise agreed in the service contract. | BR | At the time of transacting over the network. | Please contact us if you want to exercise these rights. paypal@generalagent.co.kr |
|
PayPal Europe Services Limited | To fulfill our legal or regulatory obligations and for our business purposes. | PI related to registration and use, transaction and experience, participant, etc. | For as long as necessary to provide the services or as otherwise agreed in the service contract. | IE | At the time of transacting over the network. | Please contact us if you want to exercise these rights: paypal@generalagent.co.kr |
|
PayPal India Private Limited | To fulfill our legal or regulatory obligations and for our business purposes. | PI related to registration and use, transaction and experience, participant, etc. | For as long as necessary to provide the services or as otherwise agreed in the service contract. | IN | At the time of transacting over the network. | Please contact us if you want to exercise these rights: paypal@generalagent.co.kr |
|
PayPal International S.à r.l. | To fulfill our legal or regulatory obligations and for our business purposes. | PI related to registration and use, transaction and experience, participant, etc. | For as long as necessary to provide the services or as otherwise agreed in the service contract. | LU | At the time of transacting over the network. | Please contact us if you want to exercise these rights: paypal@generalagent.co.kr |
|
PayPal Israel Ltd. | To fulfill our legal or regulatory obligations and for our business purposes. | PI related to registration and use, transaction and experience, participant, etc. | For as long as necessary to provide the services or as otherwise agreed in the service contract. | IL | At the time of transacting over the network. | Please contact us if you want to exercise these rights: paypal@generalagent.co.kr |
|
PayPal Network Information Service (Shanghai) Co., Ltd. | To fulfill our legal or regulatory obligations and for our business purposes. | PI related to registration and use, transaction and experience, participant, etc. | For as long as necessary to provide the services or as otherwise agreed in the service contract. | CN | At the time of transacting over the network. | Please contact us if you want to exercise these rights: paypal@generalagent.co.kr |
|
PayPal Philippines, Inc. | To fulfill our legal or regulatory obligations and for our business purposes. | PI related to registration and use, transaction and experience, participant, etc. | For as long as necessary to provide the services or as otherwise agreed in the service contract. | PH | At the time of transacting over the network. | Please contact us if you want to exercise these rights: paypal@generalagent.co.kr |
|
PayPal, Inc. | To fulfill our legal or regulatory obligations and for our business purposes. | PI related to registration and use, transaction and experience, participant, etc. | For as long as necessary to provide the services or as otherwise agreed in the service contract. | US | At the time of transacting over the network. | Please contact us if you want to exercise these rights: paypal@generalagent.co.kr |
|
Soluciones BK, Sociedad Anonima | To fulfill our legal or regulatory obligations and for our business purposes. | PI related to registration and use, transaction and experience, participant, etc. | For as long as necessary to provide the services or as otherwise agreed in the service contract. | GT | At the time of transacting over the network. | Please contact us if you want to exercise these rights. paypal@generalagent.co.kr |
|
Annex 2: Third-party provision to a domestic third party
Recipient Name | Purpose of using PI | PI items transferred | Period of retention and use by the recipient | Users right to refuse transfer of PI to the recipient(s) and disadvantages resulting from such refusal |
Paygate (Xoom service) | To provide payout via deposit to bank accounts in South Korea. | Payment / transaction details | For as long as necessary to provide the services or as otherwise agreed in the service contract. | Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
Annex 3: Delegation (outsourcing) to a domestic delegatee/outsourcee
Recipient Name | Description of Recipient’s Function |
General Agent Co. Ltd | Domestic Agent for PayPal in South Korea |
PayPal Korea Services LLC | Acts on behalf of 3PL to fulfill legal or regulatory obligations and for our business purposes |