Last updated: 6 August 2025
1. Introduction
This privacy notice sets out how we will handle your personal data when you use our ATMs or are otherwise caught by the CCTV systems in use at our ATMs.
2. Who is responsible for processing my personal data?
Revolut Bank UAB (referred to as “Revolut”, “we” or “us” throughout this notice) is the organisation responsible for collecting and using your personal data for the purposes set out in this notice.
Revolut is a Lithuanian company having its registered address at Konstitucijos ave. 21B, 08130 Vilnius, the Republic of Lithuania.
3. What personal data do you collect about me?
The personal data we collect about you could include:
- contact details (such as your phone number);
- CCTV recordings;
- selfies and biometric data, if you voluntarily choose to authenticate yourself using our selfie check solution; and
- ATM usage information.
4. How do you use my personal data?
As a controller, we need to have a legal basis to process your personal data for any purpose under data protection laws. The purposes for which we use your personal data and the corresponding lawful bases for this are set out in the table below.
What we use your personal data for | Our legal basis for using your personal data |
For security purposes, namely to prevent and detect crime. | Legitimate interests (to protect you and our business against harm and theft). |
To help you sign up for an account if you use the card dispensing feature of our ATMs. | Performance of a contract. |
To authenticate you to allow you to use the services we offer through our ATMs. | Performance of a contract. If you choose to authenticate yourself through a biometric selfie check, our lawful basis for processing your biometric data will be explicit consent. |
To understand how you use our ATMs to allow us to carry out research and analytics, as well as to troubleshoot any issues. | Legitimate interests (to maintain and improve our services). |
To comply with our regulatory obligations, including reporting any details regarding counterfeit notes to relevant banking authorities. | Compliance with laws. |
5. Do you share my personal data with anyone else?
We may share your personal data with the following third parties:
- Other members of the Revolut group to the extent necessary to provide our service.
- Our third party service providers who help us to provide our ATM services, including the card schemes.
- Our CCTV service providers.
- Law enforcement authorities and governmental authorities, where necessary to comply with laws or if we have CCTV recordings which they require access to for the purpose of investigating crimes.
6. How long will you keep my personal data for?
We will retain your personal data for as long as necessary to achieve the relevant purposes for which we process it or to comply with our legal obligations. When it comes to CCTV recordings in particular, these will be stored for a period of 30 days (unless they need to be preserved for investigation or evidentiary purposes), following which they will be deleted.
6. Additional information
Please refer to the relevant sections of our Customer Privacy Notice for more information about:
- your rights as a data subject;
- your right to complain to your local data protection supervisory authority;
- international transfers of your personal data outside the UK or EEA (as applicable); and
- how we protect your personal data.
8. Updates
We may update this privacy notice from time to time. Any changes will be posted on this page.