OUTSIDE OF THE UNITED STATES (GDRP)

1. APPLICATION

This subpage (“Subpage”) applies if you reside outside the United States and supplements our Privacy Policy. It contains important information we are required by the General Data Protection Regulation (“GDPR”) to disclose, including (i) the controller(s) of your personal information; (ii) legal bases, (iii) your legal rights, (iv) safeguards we rely on for transferring your personal information outside the EEA; and (v) the contact details of the controller and Data Protection Officer. This page also contains important information about the Payments Controller (defined below) and the information processed in connection with the Payments Services. Please read this page carefully. If you have any questions, you can contact us at the details below.

2. WHO CONTROLS MY PERSONAL INFORMATION

2.1 Controller

Where this Subpage mentions “ExploringNotBoring,” “we,” “us,” or “our,” it refers to the ExploringNotBoring company that is responsible for your information under this Privacy Policy (the “Controller”). The designated Controller is set out in Schedule 1.

2.2 Payments Controller

The Privacy Policy also applies to the Payment Services provided to you by ExploringNotBoring Payments pursuant to the Payments Terms of Service (“Payments Terms”).

When using the Payment Services, you will also be providing your personal information, to one or more ExploringNotBoring Payments entities, which will be the responsible (the "Payments Controller" as outlined in Schedule 1), for your information related to the Payment Services, generally depending on your country of residence.

2.3 Changing Your Country of Residence

If you change your country of residence, the Controller and/or Payments Controller will be determined by your new country of residence as specified above, from the date on which your country of residence changes. To this end the Controller and/or Payments Controller that originally collected your personal information will need to transfer such personal information to the new applicable Controller and/or Payments Controller. The new Controller and/or Payment Controller will continue to process your personal information as described in the Privacy Policy and Subpage (when applicable).

3. PROCESSING OF PAYMENTS INFORMATION

 

3.1 Information Necessary For Use of Payment Services

The Payments Controller needs to collect the following information necessary for the adequate performance of the contract with you and to comply with applicable law (such as anti-money laundering regulations). Without it, you will not be able to use Payment Services:

  • Payment Information. When you use the Payment Services, the Payments Controller requires certain financial information (such as your bank account or credit card information.) in order to process payments and comply with applicable law.

  • Identity Verification and Other Information. The Payments Controller may require identity verification information (such as images of your government issued ID document(s), passport, national ID card, tax ID or driving license) or other authentication information (such as your date of birth, your address, email address, phone number) and other information in order to verify your identity, provide the Payment Services to you, and to comply with applicable law.

3.2 How the Payments Controller Uses Personal Information Collected

We may use the personal information as a part of Payment Services to:

  • Enable or authorize third parties to use the Payment Services

  • Detect and prevent money laundering, fraud, abuse, security incidents

  • Conduct security investigations and risk assessments

  • Comply with legal obligations (such as anti-money laundering regulations)

  • Enforce the Payment Terms and other payment policies

  • With your consent, send you promotional messages, marketing, advertising, and other information that may be of interest to you based on your preferences

  • Provide and improve the Payment Services

4. LEGAL BASES FOR PROCESSING PERSONAL INFORMATION

We process personal information for the purposes described in the Privacy Policy in line with the lawful bases set out below. For more information on the processing activities, please refer to the relevant section of the Privacy Policy.

4.1 Processing of Payments Information (Section 3, this Subpage)