2.2. We are also registered with the Information Commissioner under registration number: ZA219393.
2.3. You may contact us at: email@example.com
3.1. Amazon Web Services (AWS). Amazon Web Services (AWS). AWS is an appointed Data Processor by Oval. AWS provides the processing service of the Data collected through the use of the App. The processing of Data is carried out in respect of AWS Security Standards at all times. If personal data is transferred outside of the EEA, we always require that appropriate safeguards are in place to protect the information when it is processed.
3.2. Additionally, the Data may be accessible to certain types of persons in charge, involved with the operation of the App (administration, sales, marketing, legal, system administration) or external parties (such as third party technical service providers, mail carriers, hosting providers, IT companies, communications agencies). Apple Health Kit data and Google Fit data will not be used for any marketing purposes. The updated list of these parties may be requested from the Data Controller at any time.
4.1. Oval collects the information you provide when you: correspond with us; fill in any forms; register to use the Oval app; take part in online discussions, surveys or promotions; open an account or use any of our services; enter a competition; speak with a member of our customer support team; or contact us for other reasons.
4.2. Oval will, by itself or through third parties, collect the following information: your name, address, and date of birth; your username, password and other registration information; your email address, phone number and details of the device you use (for example, your phone, computer or tablet); details of your bank account, including the account number, sort code and IBAN; records of our discussions, if you contact us or we contact you; and identification documents (such as your passport or driving licence number), copies of any documents you have provided for identification purposes, and any other information you provide to prove you are eligible to use our services.
4.4. Failure to provide Personal Data may make it impossible for the App to provide its Service.
5.1. If you have location services in the Oval app switched on, we track your location using GPS technology and your IP address. This information may be used to improve and personalise our service.
5.2. Whenever you use our website or the Oval app, we collect the following information: information about your visit, including the links you have clicked on, through and from our site (including date and time), services you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling and clicks), and methods used to browse away from the page; technical information, including the internet protocol (IP) address used to connect your computer to the internet, your log-in information, the browser type and version, the time-zone setting, the operating system and platform, the type of device you use, a unique device identifier (for example, your device identifier, number, or the mobile phone number used by the device), mobile network information, your mobile operating system, the type of mobile browser you use and so on; information stored on your device, including if you give us access to contact information from your address book, log-in information, photos, videos or other digital content, check-ins. The Oval app will regularly collect this information in order to stay up to date; and information on transactions (for example, payments into and out of your account), including the date, time, amount, currencies, exchange rate, beneficiary details, details of the merchant or ATMs associated with the transaction, IP address of sender and receiver, sender's and receiver's name and registration information, messages sent or received with the payment, details of device used to arrange the payment and the payment method used.
5.3. We collect information from third parties, such as credit reference agencies, fraud-prevention agencies and partners who help us to provide our services. This includes your credit record, information to help us check your identity, and information relating to your transactions.
5.4. In cases where, in order to provide our service, personal data is to be collected from third parties who can be considered as autonomous data controllers, such as, for instance, likes on Facebook, Instagram or Twitter put by the Users, we guarantee to process this data exclusively for the fulfilment of contractual obligations related to our service.
6.1. The Service requires the processing in read only mode of your bank account details and financial data such as your transaction history and balance. To ensure the maximum level of protection of your Data, Oval collaborates with the following service providers that store and process User’s Data:
6.2. Salt Edge Inc. is an account aggregation service that allows the User to store its credit card and bank accounts’ credentials. Oval has signed up for the Global Data Aggregation API offered by Salt Edge Inc. and to get the most out of the App you may link your bank account(s) to the App by using Salt Edge’s platform service. Salt Edge will allow you to connect with your bank account(s) using your online login credentials and will store them through a bank-level security system. Oval will never store User’s personal online login credentials and will receive from Salt Edge only the information required to provide the service.
7.1. The Platform Services requires us to collaborate with various service providers (Issuers) in order to offer a variety of options (Platform Products) for users to choose from. For each Platform Product offered on the Platform, the Issuer of each product is the Data Controller, and AWS is our appointed Data Processor.
8.2. If you have been affected by the automated decision making, you may request human intervention or challenge the decision of the algorithm which results in the automated decision making by sending an email to firstname.lastname@example.org with the words ‘automated decision making’ in the subject.
8.3. In addition to this we will use your personal information to help prevent fraud in a more general manner, by: trying to stop you from becoming a victim of fraud; confirming you are eligible to use our services; and complying with financial crime laws. The data we will use for these purposes comes from the information you have provided us, the information from your device, and/or the information from third parties. Our legal basis for this activity is in complying with our legal obligations, complying with agreements between you and us, and/or legitimate interests (to develop and improve how we deal with financial crime and meet our legal responsibilities).
The Data we collect from Users are also used for the following purposes:
10.1. Security Measures
10.1.1 Oval processes Users’ Personal Data in a proper manner and shall adopt appropriate security measures to prevent unauthorised access, disclosure, modification, or unauthorised destruction of the Data. Even where all precautions are adopted we cannot guarantee complete security in all events.
10.1.2. The Data processing is carried out using computers and/or IT enabled tools, following organisational procedures and modes strictly related to the purposes indicated.
10.2. Place of processing
10.2.1. The Data is processed at the Data Controller's operating offices and where the Data Processor’s operating offices or other parties involved with the processing are located. If we or our service providers transfer personal data outside of the EEA, we always require that appropriate safeguards are in place to protect the information when it is processed.
10.3. Retention time
10.3.2 The User may always request that the Data Controller suspend or remove the Data.
11.1. The User consents to the transfer of the collected Data through the Service in the event of rearrangement, merger, sale, joint venture, transfer or any other arrangement method of the whole or part of the Company, of its goods and shares, according to the purpose and the limits of this document.
12.1. Your Personal Data may be used for legal purposes by the Data Controller, in Court or in the stages leading to possible legal action arising from improper use of this App or related services.
12.2. You acknowledge to be aware that the Data Controller may be required to reveal personal data upon request of public authorities.
You have the right, at any time, to:
13.1. Know whether your Personal Data has been stored and may consult the Data Controller to learn about their contents and origin (right of access);
13.2. Verify your Personal Data accuracy or ask for them to be supplemented, updated or corrected (right to rectification);
13.3. Request the erasure of your Personal Data or their transformation into anonymous format (right to erasure);
13.4. Request the restriction of processing of your Personal Data for any and all legitimate reasons (right to restriction of processing);
13.5. Receive your Personal Data in a structured, commonly used and machine-readable format and to transmit those data to another controller (right to data portability);
13.6. Withdraw the consent to the processing of your Personal Data at any time, without prejudice to the lawfulness of the processing based on consent before its withdrawal;
13.7. Object to the direct marketing activities carried out by Oval Money, including any segmentation for marketing purposes.
Requests should be sent to the Data Controller at: email@example.com
Any information regarding a natural person, which is, or may be, identified or identifiable, even indirectly, by reference to any other information, including a personal identification number.
Information collected automatically from this App (or Third Party services employed in this App), which may include: IP addresses or domain names of the computers used by the Users, URI addresses (Uniform Resource Identifier), time of the request, method of request submission to the server, size of the file received in response, numerical code indicating the status of the server's answer (successful outcome, error, etc.), Country of origin, features of the browser and the operating system utilised by the User, various time details per visit (e.g., time spent on each page within the App) and details about the process followed within the App, specifically the visited pages sequence and other parameters about the device operating system and/or the User's IT environment.
The natural person, legal person, public administration or any other body, association or organisation, also jointly with another Data Controller, having the right to make decisions regarding the purposes and the methods of processing of Personal Data and the means used, including the security measures concerning the operation and use of this App. The Data Controller, unless otherwise specified, is the Owner of this App.
The individual using this App, which must coincide with or be authorised by the Data Subject, to whom the Personal Data refers.
As defined in Paragraph 1 of Section 2 (Platform Terms) of our Terms and Conditions.
Entities which provide the Platform Products.
The products offered and provided by the Platform and which are made available through the Oval Services.