List of Third Parties (other than PayPal Customers) with Whom Personal Information (PI) May be Shared Outside of South Korea (SK)
Effective Date: 7 September 2022
| Entrusted Party | Purpose of retention and use by the recipient | All specific PI items transferred | Period of retention and use by the recipient(s) | Destination country | Date, time and method of transmission | Contact information of the person in charge of the PI within the recipient(s) | Users’ right to refuse transfer of PI to the recipient(s) and any disadvantages resulting from such refusal |
| OCR Labs Global Ltd. | To verify identity; automatic data extraction from images of documents, comparison of customer selfie with document image and document validation / forgery detection. Training of document recognition. | Address, Date of Birth, Geolocation Information, Name, Other | For as long as necessary to provide the services or as otherwise agreed in the service contract | Great Britain | At the time of customer identity validation over the network | privacy@ocrlabs.com | https://ocrlabs.com/legal/privacy-policy |
| Sinch Interconnect LLC | To optimize SMS message routing | Phone Number | For as long as necessary to provide the services or as otherwise agreed in the service contract | US | At the time of transacting over the network | dpo@sinch.com | https://www.sinch.com/privacy-policy/ |
| Acoustic, L.P. | To provide mass mailing service used for operational and transactional customer matters | Email Address, Name | For as long as necessary to provide the services or as otherwise agreed in the service contract | US | At the time of transacting over the network | privacy@acoustic.com | https://acoustic.com/privacy-notice |
| Salesforce.com, Inc. | To store merchant contact information and other supporting information about the business relationship | Email Address, Name, Phone Number | For as long as necessary to provide the services or as otherwise agreed in the service contract | US | At the time of merchant account creation over the network | privacy@salesforce.com | https://www.salesforce.com/company/privacy/ |
| ON24, Inc. | To host webinars, capture registrations, and enable live and on- demand viewing on its webinar platform. | Email Address, Name, Phone Number | For as long as necessary to provide the services or as otherwise agreed in the service contract | US | At the time of signup on the webinar site over the network used by user to sign up | privacy@on24.com | https://www.on24.com/privacy-policy/ |
| Stroz Friedberg, LLC | To provide forensic and penetration testing services | Address, Date of Birth, Email Address, IP Address, Name, Other, Phone Number | For as long as necessary to provide the services or as otherwise agreed in the service contract | US | At the time of transacting over the network | privacy@aon.com | https://www.aon.com/cyber-solutions/privacy-notice/ |
| Genpact (UK) Limited | To setup, execute and measure marketing campaigns | Name, Address, Date Of Birth, Email Address, Gender, Geolocation Information, Phone Number, Unique Device Identifier | For as long as necessary to provide the services or as otherwise agreed in the service contract | Great Britain | At the time of marketing campaign execution over the network | DPO@Genpact.com | https://www.genpact.com/about-us/privacy |
| Qualtrics Labs, Inc. | To provide forensic and penetration testing services | IP Address, Name, Unique Device Identifier | For as long as necessary to provide the services or as otherwise agreed in the service contract | US | At the time of transacting over the network | privacy-dsr@qualtrics.com | https://www.qualtrics.com/privacy-statement/ |
| CallPoint New Europe JSC | To operate refunded returns service | Email Address, Name | For as long as necessary to provide the services or as otherwise agreed in the service contract | Bulgaria | At the time of transacting over the network | DPO.EU@telusinternational.com | https://www.telusinternational.com/privacypolicy |
| IDchecker, Inc. | To verify identity; automatic data extraction from images of documents, and document validation / forgery detection. Research and testing as to appropriateness of new products and services; training of document recognition | Address, Date Of Birth, Geolocation Information, Name | For as long as necessary to provide the services or as otherwise agreed in the service contract | US | At the time of customer identity validation over the network | privacy@MitekSystems.com | https://www.miteksystems.com/privacy-policy |
| Payfone, Inc | Telephony-based authentication service to validate telephone numbers, verify identity and carry out checks for the prevention and detection of crime, including fraud and/or money laundering. | Address, Date of Birth, Name, Phone Number | For as long as necessary to provide the services or as otherwise agreed in the service contract | US | At the time of customer identity validation over the network | privacy@prove.com | https://www.prove.com/legal/privacy |
| NeuroID Inc | To capture user behavior during sign- up for predicting potential fraudulent ID creations. | Address, Date of Birth, Email Address, IP Address, Name, Other, Unique Device Identifier | For as long as necessary to provide the services or as otherwise agreed in the service contract | US | At the time of PayPal account sign up over the network | webmaster@neuro-id.com | https://www.neuro-id.com/privacy-policy |
| AU10TIX Limited | To verify identity; automatic data extraction from images of documents, comparison of customer selfie with document image and document validation / forgery detection. Training of document recognition. | Address, Date of Birth, Name, Other | For as long as necessary to provide the services or as otherwise agreed in the service contract | Cyprus | At the time of customer identity validation over the network | ContactSecurity@AU10TIX.com | https://www.au10tix.com/security-compliance/ |