Payerbee

Platform

Solutions

Resources

Company

Careers

Book demo

GDPR

Protecting cardholder privacy is essential. Read about key GDPR requirements and their implications for card issuers using Payerbee’s engagement platform.

GDPR

Protecting cardholder privacy is essential. Read about key GDPR requirements and their implications for card issuers using Payerbee’s engagement platform.

GDPR

Protecting cardholder privacy is essential. Read about key GDPR requirements and their implications for card issuers using Payerbee’s engagement platform.

Key focus areas

Understand the essential aspects of GDPR and how they relate to using Payerbee’s platform for cardholder engagement.

Principles

Uphold fairness, transparency, and data minimization in all cardholder data processing activities.

Principles

Uphold fairness, transparency, and data minimization in all cardholder data processing activities.

Principles

Uphold fairness, transparency, and data minimization in all cardholder data processing activities.

Lawful purposes

Ensure every campaign has a clear legal basis—such as consent or legitimate interest—for processing personal data.

Lawful purposes

Ensure every campaign has a clear legal basis—such as consent or legitimate interest—for processing personal data.

Lawful purposes

Ensure every campaign has a clear legal basis—such as consent or legitimate interest—for processing personal data.

Rights of data subject

Support cardholders’ rights to access, correct, erase, or object to the use of their personal data.

Rights of data subject

Support cardholders’ rights to access, correct, erase, or object to the use of their personal data.

Rights of data subject

Support cardholders’ rights to access, correct, erase, or object to the use of their personal data.

Controller and processor

Clarify roles and responsibilities between card issuers (controllers) and Payerbee (processor) with robust agreements.

Controller and processor

Clarify roles and responsibilities between card issuers (controllers) and Payerbee (processor) with robust agreements.

Controller and processor

Clarify roles and responsibilities between card issuers (controllers) and Payerbee (processor) with robust agreements.

Principles

Only relevant data is shared

GDPR’s core principles require that personal data is processed lawfully, fairly, and transparently; collected for specified, legitimate purposes; limited to what is necessary; kept accurate and up to date; stored only as long as needed; and handled securely.

Payerbee uses only relevant cardholder data
Issuer should maintain records of what data is processed and for what purpose

Payerbee uses only relevant cardholder data
Issuer should maintain records of what data is processed and for what purpose

Payerbee uses only relevant cardholder data
Issuer should maintain records of what data is processed and for what purpose

Lawful purposes

Issuer determines legal basis

GDPR requires a valid legal basis for processing personal data (e.g., consent, contract, legitimate interest). The basis must be documented and communicated to data subjects.

Issuer determines and documents the appropriate legal basis (e.g. legitimate interest or marketing consent)
Payerbee acts on the issuer’s instructions

Rights of data subject

Payerbee supports data subject requests

Cardholders have rights under GDPR, including access to their data, correction, erasure (the “right to be forgotten”), restriction of processing, data portability, and the right to object to certain uses (such as marketing).

Payerbee supports card issuers in fulfilling data subject requests
Issuers should have processes in place to handle requests from cardholders regarding their data

Principles

A DPA governs Payerbee's responsibilities

GDPR distinguishes between the data “controller” (who determines purposes and means of processing) and the “processor” (who processes data on the controller’s behalf). Controllers must ensure processors comply with GDPR and formalize the relationship with a Data Processing Agreement (DPA).