The document states that Marqeta supplements internally collected data with personal data obtained from data providers and aggregators, social media sources, co-branded marketing partners, third-party service providers acting on Marqeta's behalf, and public sources including social networking websites.
This analysis describes what Marqeta's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The use of data providers and aggregators to supplement first-party data collection is a practice that may require evaluation under applicable law, particularly regarding notice and consent obligations in jurisdictions where data subjects have not directly provided their information to Marqeta. GDPR's transparency requirements under Article 14 apply where personal data is not obtained directly from the data subject.
Interpretive note: The document identifies categories of third-party data sources but does not name specific vendors or aggregators; the specific data types obtained from each source category cannot be determined from the document language alone.
Under this provision, Marqeta's profile of an individual may include personal data sourced from data brokers, aggregators, social media platforms, marketing partners, and public sources in addition to data the individual directly provided, without requiring the individual to have a direct interaction with those third-party sources.
Cross-platform context
See how other platforms handle Third-Party Data Sources and Supplementation and similar clauses.
Compare across platforms →"Certain personal data may be collected or obtained from third-party sources, such as marketing vendors, social media sources, participation in industry conferences and events, and other sources to the extent permitted by applicable law, including: 1) data providers and aggregators from whom we obtain personal data to supplement the information we collect; 2) third-party applications and services, including social networks you choose to connect with or interact with through our Services; 3) partners with whom we offer co-branded services or engage in joint marketing activities; 4) third parties that collect or provide information in connection with work they do on our behalf; and 5) public sources of information, such as social networking websites.Excerpt from Marqeta's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The use of data providers and aggregators to supplement first-party data collection is a practice that may require evaluation under applicable law, particularly regarding notice and consent obligations in jurisdictions where data subjects have not directly provided their information to Marqeta. GDPR's transparency requirements under Article 14 apply where personal data is not obtained directly from the data subject.
Under this provision, Marqeta's profile of an individual may include personal data sourced from data brokers, aggregators, social media platforms, marketing partners, and public sources in addition to data the individual directly provided, without requiring the individual to have a direct interaction with those third-party sources.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Marqeta.