NCR VOYIX CORPORATION

This NCR Voyix Privacy Policy (“Privacy Policy”) explains your privacy rights and provides information regarding the NCR Voyix’s collection, use, retention and sharing of Personal Data in its Controller capacity, as applicable, including associated processing activities performed by sub-processors operating on our behalf, and explains your privacy rights with respect to your Personal Data. This Privacy Policy governs NCRVoyix Corporation and its global subsidiaries worldwide for all operations.

‍

Definitions

‍

‍“Contract Data” means any Personal Data about our customers, our customers’ customers, or our customers’ personnel that NCR Voyix Processes in connection with providing products or services to a customer under a contract.

‍

“Controller” means a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the Processing of Personal Data.

‍

“Personal Data” or “Personal Information” means information relating to an identified or identifiable natural person to the extent such information is afforded the protection of law. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identification number, location data, an online identifier or to one or more factors specific to the individual’s physical, physiological, mental, economic, cultural, or social identity. In the state of California, Personal Information may also include categories of information that identify or could be linked to a particular consumer or household such as identifiers, bank account and payment card numbers, protected class characteristics, commercial information, biometric information, professional, educational or employment-related information, Internet or electronic network activity, and inferences used to create a profile about a consumer in accordance with applicable law.

‍

“Process” means any operation or set of operations that is performed upon Personal Data, whether or not by automatic means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, blocking, erasure, or destruction.

‍

“Processor” means a natural or legal person, public authority, agency or other body which Processes Personal Data on behalf of a Controller. “You” means any individual about whom NCR Voyix collects, uses, or discloses Personal Data except as described in this Privacy Policy.

‍

How we Obtain Personal Data

‍

‍‍How we collect and Process your Personal Data will depend on your relationship with NCR Voyix, the nature of our interactions, and at times requirements under applicable law. Depending on such factors, we may obtain your Personal Data in the following ways:

• Creating an Account, Becoming a Channel Partner, Setting Up a Merchant Account or Entering into an Agreement with us. This may include by registering for an account or event and supplying your name, title, company, business function, physical and email addresses, telephone number, social security number, tax identification number, financial account information, user IDs, and/or password.  We may also collect contact information, financial data, and other similar data to manage our relationship with you or your business, your employer, take orders, or process and deliver products and services to you or your business, including complaint and dispute resolution.
• Communicating with Us. When you contact us to join a mailing list, inquire about or purchase a product or service, apply for employment, fill out an information form, or otherwise contact/interact us with a question, comment, or request, and supply your name, title, company, physical and email addresses, telephone number, resume, user IDs, and/or password.
• Completing Surveys. If you decide to participate, you may be asked to provide certain information, which may include Personal Data.
• Engaging with us on Social Media. We may offer forums, blogs, or social media pages. When you engage with us on social media, we may collect any Personal Data you choose to provide while engaging with us on social media.
• Visiting Our Facilities. When you visit our physical facilities, you may provide us with certain information about you for identification and security purposes, such as, contact information, government ID. We may also employ closed-circuit video recording (i.e., “CCTV”) that may capture your image.
• Registering for Sweepstakes or Contests. Contact information you provide may be used to reach you about the sweepstakes or contest and for other promotional, marketing and business purposes, if permitted by applicable law. In some jurisdictions, we are required to publicly share information of winners.
• Contacting our Customer Support Center. When you contact us to request support, we may collect your contact information, voice recordings and chat transcripts, problem description, possible resolutions and any other information shared with us. We may record the information that is provided to handle the support query, for administrative purposes, to authenticate you, to foster our relationship with you, for staff training, and for quality assurance purposes.

We may also collect Personal Data about you in the following ways:

• Information from Other Sources. NCR Voyix may collect information about you or obtain Personal Data about you from third parties for the purposes of providing you with information about NCR Voyix products and services that may be of interest to you, or to take steps to maintain the accuracy of the information we have about you. We may also obtain Personal Data about you from other sources, including through third party services and organizations to supplement information provided by you. For example, if you access our website, applications, products and services through a third-party application, such as an app store, a third-party login service, or a social networking site, we may collect information about you from that third-party application that you have made public via your privacy settings. Information we collect through these services may include your name, your user identification number, your username, location, gender, birth date, email, profile picture, and your contacts stored in that service. This supplemental information allows us to verify information that you have provided to us and to enhance our ability to provide you with information about our business, products, and services
• Automatic Data Collection. NCR Voyix may also use certain technologies to automatically collect information about you while you are visiting an NCR Voyix website, application, product, or service. For more information, refer to the “Cookies and Other Tracking Technologies” Section of this Policy.
• Contract Data. NCR Voyix may collect Personal Data about your based on the direction of its customer(s). In such cases, it is our customers’ responsibility to ensure that their directions to NCR Voyix are consistent with the terms of any privacy policies or other guarantees they have made to you consistent with applicable contractual obligations with its customers and applicable law. NCR Voyix also may use Contract Data to facilitate compliance with regulatory and legal requirements.

‍

Why we Process Personal Data

‍

‍NCR Voyix Processes Personal Data when reasonably necessary to support NCR Voyix’s business operations, ensure compliance with legal, regulatory, or security requirements, or as otherwise permitted under applicable privacy laws. Further, we will collect Personal Data for specified and legitimate purposes, limit its Processing to the stated purpose, and not Process that data further in a manner incompatible with such purpose. This may include:

• To perform a contract with you, your company or employer, take steps prior to entering a contract, or fulfilling a business transaction with our customers, suppliers and business partners. NCR Voyix may use your Personal Data to fulfil business transaction requests with you or your organization. With respect to our customers, such requests may include, but are not limited to, maintaining or servicing accounts, verifying customer information, processing payments, providing advertising and marketing services, providing analytics services, undertaking internal research of technological development and demonstration, providing products or services including delivering notifications of product issues, fixes or updates, or contacting you in response to your questions, comments, or requests. With respect to our suppliers, such requests may include issuing purchase orders, receiving invoices, or providing other information such as forecasts
• To comply with a regulatory or legal obligation. NCR Voyix may use your Personal Data where such Processing is required by the applicable laws and regulations.
• To market our products and services, and to tailor our marketing and sales activities to your or your company’s interests. NCR Voyix may use your Personal Data for sales and marketing purposes, including contacting you for feedback in customer satisfaction surveys or for market research purposes, providing you with marketing literature on products and services, notifying you of events, and providing you with information about NCR Voyix. You may always change your privacy preferences as set forth in this Privacy Policy. From time to time, NCR Voyix may co-brand an offering or a communication with a third party, which may also collect your Personal Data. In such cases, the use of your Personal Data by such third parties is covered by their respective privacy policies, and not this Privacy Policy. In cases where you choose to forward a page from this website to another individual (where such option is available), NCR Voyix may request certain Personal Data about that individual to complete your request, such as name and email address, but NCR VOYIX will not make further use of such information. NCR Voyix's use may include, but is not limited to, making sales calls, sending marketing communications, delivering or completing requested services or transactions, and tracking and analyzing a series of transactions. If NCR Voyix uses social networking widgets or tools to provide information to you, your information will be governed by the terms of use and the privacy policy for the applicable social networking platform.
• To protect your vital interests or that of another natural person.
• To perform a task carried out in the public interest.
• Based on your Consent. We may carry out Processing with your consent, which you may withdraw at any time as described below.
• To further a legitimate interest of NCR Voyix or a third party. We may Process your Personal Data to further a legitimate interest of NCR Voyix or a third party. This may include:
  
  • Researching and developing products, services, marketing or security procedures to improve their performance, resilience, reliability or efficiency.
  • Auditing related to transactions, short-term transient use in accordance with applicable law, debugging to identify and repair errors that impair existing intended functionality and undertaking activities to verify or maintain the quality or safety of a service or device.
  • Detecting security incidents, protecting NCR Voyix personnel, property and assets from malicious, deceptive, fraudulent or illegal activity including threats or harm including to NCR Voyix's information technology infrastructure, Intellectual property, or goodwill or reputation and prosecuting those responsible for that activity.
  • Ensuring compliance with relevant corporate policies and terms; or
  • Optimizing utilization of global corporate resources including the administration of business transactions, personnel and information technology systems.
• Processing of Deidentified Data. In addition to the foregoing, NCR Voyix may Process Personal Data in a deidentified or aggregated form, which was formerly Personal Data, but which can no longer identify individuals. For deidentified or aggregated data, which was formerly Personal Data, but which can no longer identify individuals, NCR Voyix may conduct research and development, statistical, trend or pattern analysis in order to continuously improve our products, services, processes, and security procedures.
• Recruitment. If you seek employment with NCR Voyix, you may provide us with information about yourself, such as a resume. We may utilize automated processing techniques for candidate applications for qualitative scoring or ranking to optimize the efficiency of our recruiting practices. In such cases, however, this Processing is overseen by our Human Resources personnel. We may use this information throughout NCR Voyix to consider you for employment purposes and may keep your information on file for future consideration, to support NCR Voyix's compliance with applicable legal requirements, and as otherwise set forth in this Privacy Policy or in a separate notice that may be provided to you.

‍

Cross-Border Personal Data Transfers

‍

NCR Voyix is a global company with global operations, partners and suppliers. Where it is necessary for the efficient and effective performance of a business transaction or the fulfilment of one of the uses of Personal Data outlined above, NCR Voyix may need to transfer Personal Data from the country of collection to other countries, including those with data protection laws that are different from those in your country of residence. Transfers to countries or territories deemed by the relevant data protection authority (such as the European commission for transfers from the EEA), to provide an adequate level of protection may occur without additional safeguards.  This includes transfers relying on the EU-US Data Privacy Framework (“DPF”), where the recipient is certified under the DPF.

‍

For transfers to countries not deemed to provide an adequate level of protection (“Restricted transfers”), NCR Voyix implements appropriate safeguards to ensure that Personal Data receives a level of protection essentially equivalent to that guaranteed within the EEA or other exporting jurisdiction.  These safeguards include NCR Voyix’s Intra-Group Data Transfer Agreement (which incorporates Standard Contractual Clauses) for transfers within the NCRV Voyix group, and Standard Contractual Clauses approved by the European commission (or other equivalent clauses approved by other relevant authorities) for transfers to partners and suppliers, unless the recipient is certified under the DPF.

‍

‍Disclosures of Your Personal Data

‍

We may disclose your Personal Data to:

• ‍Affiliates. We may share Personal Data within NCR Voyix’s entities.
• ‍Service Providers. We may share Personal Data with third-party suppliers and service providers that help us Process Personal Data, such as. IT suppliers (including IT and related services, security product providers, email providers, and application providers), customer service providers, contingent workers, consultants, and other vendors to support the provision of our products and services. It is NCR Voyix's practice to enter into contracts with our suppliers and service providers that require them to handle your information in a manner consistent with this Privacy Policy  and applicable law.
• ‍Business Partners. We may provide Personal Data to business partners with whom we jointly offer products or services. In such cases, our business partner’s name may appear along with ours.
• ‍Advertising Partners. Third parties do not advertise on NCR Voyix's websites. NCR Voyix, however, may contract with third parties who collect information about your online activities over time and across different devices and websites (including NCR Voyix websites). These third parties use cookies or web beacons across multiple websites, including NCR Voyix's websites, to collect certain information about you (e.g., your IP address, mobile identifiers, page(s) visited, location, time of day) to provide you with targeted ads based on your interests. We engage with these third parties to help us deliver targeted advertisements about NCR Voyix on other websites you visit. If we need to facilitate these third parties to place cookies on your device to enable this functionality, we will do so in accordance with this Privacy Policy. However, the third parties’ collection, use, and disclosures of your information is governed by their own privacy policies and statements. You have several choices to control the delivery of targeted ads to you by NCR Voyix, as described below. In certain jurisdictions, you have the right to opt out of targeted advertising.
• ‍Disclosure in the Event of Merger, Sale or Other Asset Transfer. From time to time, NCR Voyix may contemplate entering various business development activities which may include the sale, purchase, merger, or reorganization of one or more of its businesses. These business development activities may require the disclosure of Personal Data to the prospective or actual purchaser(s). When such disclosures are required, NCR Voyix will seek appropriate protections of your Personal Data.
• Disclosures to Protect Us or Others. In certain circumstances, NCR Voyix may use or release Personal Data to third parties when disclosure is required or permitted by law (e.g. statute, judicial proceeding, court order, or subpoena). We also reserve our right to use or provide your Personal Data to third parties, including law enforcement, auditors, consultants, and government officials, to protect NCR Voyix's rights, property, or safety, and/or the rights or property of our customers, business partners, suppliers, or other third parties. We may also disclosure Personal Data to enforce our policies or contracts; collect amounts owed to us; or assist with an investigation or prosecution of suspected or actual illegal activity.

‍

Cookies and other tracking technologies

‍

NCR Voyix websites, applications, and services may employ a variety of tools, including cookies, web beacons and other tracking technologies to help us improve your experience and determine the effectiveness of certain of our marketing initiatives.

• Cookies. A “cookie” is a small element of data that a website can send to a web browser, which is then stored on the browser user’s computing device. We may use cookies, alone or in combination with other data we may collect from other technologies (such as server logs) to make our websites work or operate more efficiently, to personalize a user’s experience, or to make our websites more useful to our visitors. You can learn more about cookies by  visiting https://www.consumer.ftc.gov/articles/0042-online-tracking or       www.youronlinechoices.eu.
• Other Technology NCR Voyix May Use to Improve Your Experience. NCR Voyix, and our service providers, may also use other technology to improve your experience. As described below, these technologies include analysis tools, log file information, web beacons, web links, and local shared objects.
• Analytics Tools. NCR Voyix may use third-party analytics tools like to help us analyze how visitors use our websites. Among other things, these tools use cookies to collect data about the number of visitors to the site, the web page that referred visitors to the site, and the pages that visitors view within the site. You can opt out of this Processing by (i) using the ‘Cookie Preferences’ link located at the bottom of NCR Voyix web pages, (ii) by managing your privacy settings at the browser level or (iii) adjusting your preferences through tools such as Google Analytics opt-out functionality available at https://tools.google.com/dlpage/gaoptout.
• Log File Information. NCR Voyix records log file information whenever you access our websites. Examples of log file information include your IP address, your browser type, the page from which you accessed our website, the pages you viewed while visiting our website, the last page you viewed before you exited our website, and the page you accessed after leaving our website.
• Web Beacons, Pixel Tags, Clear GIFs, and Other Technologies. These technologies involve placing electronic (and usually transparent) images on a website or in an email. These images place certain information on your device such as cookies, the time and date of a page you viewed and the length of time you viewed the page, the IP address of the device that retrieved the image, the time the web beacon was viewed and for how long, and the type of browser that retrieved the image. We may use these technologies, for example, to determine whether you have opened or accessed links included in marketing communications from NCR Voyix. These technologies often work with cookies; therefore, if you do not want us to associate your cookie information with your visits to our website, you must turn off cookies in your browser.
• Web Links. Emails from NCR Voyix may contain links that are designed to take you to a web page after redirection through NCR VOYIX’s servers (or those of its suppliers). We use the information we obtain during the redirection process to determine whether a particular marketing initiative is effective and may collect information connected to your identity. If you do not want NCR Voyix to collect information about the links that you click, you can choose a text-based version of the message (if the option is available). You may also choose not to click the links we provide in the emails we send to you and search online for the relevant resource independently.
• Notice Regarding APIs and SDKs. We may use third-party APIs and software development kits (“SDKs”) as part of the functionality of our applications. APIs and SDKs may allow third parties including analytics and advertising partners to collect your Personal Data for various purposes including to provide analytics services and content that is more relevant to you. For more information about our use of APIs and SDKs, please contact us as set forth below.
• Managing Cookies Preferences and Interest-Based Advertising. You may limit the use of cookies and other tracking technologies through a combination of (i) your browser or device settings and (ii) the preferences you select within our Cookies Preference Center, accessible via the Cookie Preferences link at the bottom of NCR Voyix’s websites. Please note that the Cookies Preference Center controls the deployment of certain categories of tracking scripts tags on our sites; it does not remove cookies that were previously placed on your device. If you wish to delete existing cookies, you must do so through your browser’s privacy settings.
  If you disable or block certain categories of cookies, some website features may not function properly, and certain pages may not display as intended. Strictly necessary cookies cannot be disabled through the Cookies Preference Center because they are required for the site to operate.

‍

Sale / Share of Personal Information

‍

NCR Voyix does not sell your Personal Data, that is provide it to third parties for monetary consideration. However, disclosure of device information and internet activity to third parties through cookies and other trackers may be considered “sharing” under some US state laws. You may opt-out by visiting the ‘Cookie Preferences’ and “Do not sell or share my personal information” links located at the bottom of NCR Voyix web pages.

‍

How Personal Data is Protected

‍

‍NCR Voyix aims to provide leading data privacy protections to safeguard Personal Data. We prioritize safety across our business and commit to operating in accordance with the laws applicable to the countries in which we conduct business and with our contractual requirements. Furthermore, NCR Voyix takes reasonable and appropriate steps designed to safeguard NCR Voyix Personal Data in accordance with these laws and requirements.

‍

‍Retention of Personal Data

‍

‍NCR Voyix retains Personal Data only for so long as it is necessary to support the overall purpose(s) for which NCR Voyix collected such information. We will retain and use your Personal Data as necessary to comply with our business and legal obligations, resolve disputes, protect our assets, and enforce our rights and agreements. We take steps to minimize access, use and retention of Personal Data to what is reasonably necessary.

‍

Managing your Privacy and Communications Preferences

‍

‍You have certain choices about your Personal Data. Where you have consented to the Processing of your Personal Data, you may withdraw that consent at any time and prevent further Processing as follows:

• Email and Telephone Communications. From time to time, you may sign up to receive information or access to NCR Voyix services, or where law permits, we may provide you with information we believe may be of interest to you. We provide you with options to manage marketing communications preferences, including on-page  unsubscribe (opt-out) options, visiting our Preference Center or contacting us directly as set forth in this Privacy Policy.
  
  • ‍Withdrawing a Consent. ‍Where you have previously provided your consent, you may withdrawal your consent at any time; however, doing so will not affect the lawfulness of NCR Voyix's Processing before your withdrawal of consent. Once you withdraw consent, we will no longer Process your information for the purpose(s) to which you originally consented unless we can rely upon another lawful basis for such Processing.
• Contract Data. With respect to Contract Data, the NCR Voyix customer is responsible for your Personal Data, and, where applicable, Processing your privacy rights requests.
• Mobile Devices. If you install an NCR Voyix mobile application, NCR Voyix may send you push notifications through our mobile applications. You may at any time opt-out from receiving these types of communications by changing the settings on your mobile device. We may also collect location-based information if you use our mobile applications. You may opt-out of this collection by changing the settings on your mobile device.
• Do Not Track (“DNT”) and Global Privacy Control (“GPC”). DNT and GPC are both a browser-based privacy mechanisms aimed at giving users more control over their Personal Data. NCR Voyix Websites are configured to recognize and honor DNT and GPC opt-out signals sent by browsers.

‍

Exercising Your Individual Rights

‍

‍You can exercise your privacy rights in accordance with applicable laws as specified in this Privacy Notice by filling out a Data Subject Request (“DSR” or “Request”) form here, by calling the US Toll-free number 800-225-5627 or by emailing ‍NCR Voyix Privacy Office in the manner set forth in the “How to contact NCR Voyix” section of this Privacy Policy.

• Access Personal Data about you consistent with legal requirements. In addition, you may have the right in some cases to receive or have your electronic Personal Data transferred to another party. Where permitted by law, NCR Voyix may charge a reasonable fee if we are required to provide information about you. You may have the right to request information about public and private entities with which the NCR Voyix has shared data.
• Request correction of your Personal Data where it is inaccurate or incomplete. In some cases, NCR Voyix may provide self-service tools that enable you to update Personal Data about you.
• Request deletion of your Personal Data where required by law, subject to certain exceptions prescribed by law.
• Request restriction of or object to Processing of your Personal Data, including the right to opt in or opt out of the sale or sharing of your Personal Data to third parties, if applicable, where such requests are permitted by law. You may request restriction of the Processing of your Personal Data while NCR Voyix undertakes to verify the accuracy of your data where you have contested its accuracy; where NCR Voyix's Processing is unlawful and you have the right to erasure, but request that we restrict Processing instead; where the data are no longer needed for the purposes of the Processing by us, but they may be required by you for the pursuit or defense of a legal claim, or by NCR Voyix where its legitimate interests override your request for restriction. NCR Voyix will notify you before we begin to Process any information about you that was restricted just prior to Processing.

You may log into your account or use the contact mechanisms specified below to make your request. We will process such requests in accordance with applicable laws. Where necessary to protect your privacy, NCR Voyix may take reasonable steps to verify your identity before acting on a request.

‍

Denying a Request

‍

‍In certain circumstances applicable law may permit NCR Voyix to deny such requests, for example, where an access request is manifestly unfounded or excessive, in particular where it is repetitive, where the burden or expense of providing access would be disproportionate to the risks to your privacy, or where the rights of other persons would be violated. You may appeal a denial by contacting NCR Voyix in the manner set forth in the “How to contact NCR Voyix” section of this Privacy Policy.

‍

Use of Automated Individual Decision Making and Statistical Analysis

‍

‍NCR Voyix may use statistical and analytic techniques to support automated individual decision-making processes, such as improving the quality, performance or efficiency of our products, services or processes, to facilitate compliance with law or policy, or to protect our information technology infrastructure. In such cases, final decisions involve meaningful human review and approval.

‍

‍Children's Information

‍

NCR Voyix's applications and websites are not directed to children under the age of 16. By your use of our applications and websites, you affirm that you are at least 16 years of age. If you are a parent or a guardian, and you believe your child has provided NCR Voyix with Personal Data without your consent, please contact us as described below.  If we learn that any Personal Data we collected has been provided by a child under the age of 16, we will delete that personal information.

‍

How to contact NCR Voyix

‍

‍We want to address any concerns you may have. You may send any comments or questions regarding this Privacy Policy or NCR Voyix's handling of your Personal Data by emailing [email protected], or by mailing your request to:

‍

NCR Voyix Corporation Privacy Office
864 Spring Street NW
Atlanta, GA 30308
US Toll-free: 800-225-5627

‍

We will respond to your request within the timeframe required by applicable law.

‍

If NCR Voyix does not satisfactorily address your concerns, you have the right to lodge a complaint with your any national data protection authority of competent jurisdiction.

‍

Changes to This Privacy Policy

‍

‍We reserve the right to update this Privacy Policy at any time, and we will make an updated copy of such privacy Policy available on our website. When we make any revisions that materially change the ways in which we use or share the Personal Data previously collected from you, we will give you the opportunity to consent to or opt-out of such changes before applying them to that Personal Data in accordance with applicable law.

‍

‍

‍

‍

‍

‍