Thanks!

I finally looked at "Credit Card Spend Analysis" due to a note on the top of my AwardWallet window. I'm a little dismayed to find that they've been downloading and analyzing my credit card purchases.

I guess this is the era of big data and I shouldn't be surprised.

But it does mean I'll disconnect some of these accounts.

Where is that feature ? I had the orange pop up about it but can not find where it is.

Edit: I found it, you need to have a valid credit card (a simple Amex MR account is not enough it seems) and there is a tab. I wonder how compliant with GDPR it is. I guess I will ask the relevant European regulatory agency.

Is there a way to have an MR login that doesn't allow viewing of charge info?

Hi, this is Alexi from AwardWallet.
[MENTION=106470]josephstern[/MENTION]: At the moment we don’t have a way to disable the gathering of historical transactions. BTW, I am not sure if you realize it, but we gather historical transactions for most of the programs that we support. In other words, if you look at the details of your Hilton account you will see a “HISTORY” tab that shows individual transactions on your account. This is basically an extension of that. I assume your request is to not gather historical transactions on your MR account only, but you still want us to gather your Hilton transactions, right? At the moment this is not a feature we have, but we are open to implementing it. Right now you can choose not to have AwardWallet track your MR account and therefore we obviously won’t track the history but I realize this is probably not the ideal solution for you. Also, when I say “analyze” I mean run it through our algorithm. No-one is actually looking at your transactions ;)

Side note. At AwardWallet we are always looking for ways to improve and for ways to provide more value to our users. Also, this is a premium feature, only available to AwardWallet Plus members. The idea behind it was that we can show you areas where you could optimize your spend and earn more points without changing how and where you shop. I got your feedback and I understand this is not something you want AwardWallet to do and this is valuable information for us, we will discuss this on our next development call. Also, if you ever want to provide feedback to us, the best way to do that is to send it directly to our support:

https://awardwallet.com/contact

Thanks,
-Alexi

[MENTION=618829]fransknorge[/MENTION], I understand your point of view and respect it. We definitely don't want to hold anyone hostage, you are well within your right to close your account, you can do that here: https://awardwallet.com/user/delete when you do that all of your data gets fully deleted, so you can feel safe we are not storing your information.

it's not a point of view - he's asking you to prove that you haven't broken the law for your EU customers.

if you can't confirm - *you* may need to suspend all EU customer accounts until you amend your processes to be GDPR compliant.

[MENTION=23302]fartoomanyusers[/MENTION] I am not a lawyer so I can't properly answer that question, I personally did read the GDPR documentation and did not see any violations, our lawyer did review our practices also in light of GDPR and we did update our Privacy Notice at the time. If you see a specific violation of GDPR that we missed please report it to us via https://awardwallet.com/contact and we will address it.

I will reformulate the question: under which of the 6 legal basis defined by the GDPR you feel is adequate to justify the processing of the financial data of a user ? Your Privacy Notice does not give that information as it simply says: "If you are from the European Economic Area (“EEA”), our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it."
You must explicitly specify the legal basis for each of the processing you are doing.

I am putting this discussion public to give you a chance to show to your EU customer you are actually willing to follow regulations.

[MENTION=618829]fransknorge[/MENTION], unfortunately, I am not a lawyer so I can't answer this question for you. As I mentioned before if someone doesn't want to use our service they don't have to. If someone started using our service and decided they want to leave they have a way to completely purge all the data (delete their account and leave). Unfortunately, I can't answer your question beyond that.

I'm not a lawyer either - but my GDPR expert friend tells me that the regulation doesn't work that way !

It sounds like you really need to refer this question to *your* lawyer, and look at suspending collection of financial data of EU citizens before you get reported to an EU information commissioner.
Your lawyer might find this useful:

https://ico.org.uk/for-organisations...or-processing/

Thanks for the link and for the tips, I will pass it over to legal, I suspect the basis in our case (out of the 6 presented) is: "Consent", meaning that the users choose to use our service, but again, since I am not a lawyer I will defer that to them.

Moderator's Note
 

Folks,

Unless you have something new to add to the GDPR discussion, please move on.

Thank you,

TWA884
Travel Tools moderator

So if you're sharing accounts with a connection, can the connection see all of your credit card charges also?