Loyyo respects the privacy of its clients, in particular their rights regarding the automatic processing of personal data. We have therefore formulated and implemented a policy on complete transparency with our customers with regard to the processing of personal data, its purpose(s) and the possibilities to exercise your legal rights in the best possible way.
If you require any additional information about the protection of personal data, please visit the website of the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):https://autoriteitpersoonsgegevens.nl/nl.
Article 1 - Legal definition
Party responsible for processing personal data (hereinafter: "the controller"): Loyyo B.V., established in Hobbemastraat 14, 1071 ZB Amsterdam, The Netherlands, Chamber of Commerce number: 78623707.
Article 2 - The processing of personal data
- Personal data means any information relating to an identified or identifiable natural person (‘data subject’).
- An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
- We process the following categories of personal data from you:
- Name(s), Username(s), address, emailaddress, phonenumber, date of birth
- Payment tokens, Bankrekeningnummer(s), Payment account reference (PAR), Personal Account Number (PAN), Shopper Reference, Apple & Android pay data.
Article 3 - Purpose of processing
We do not collect your personal information without a purpose. We collect account information, payment information, order information, and store and maintain your account and contents on our secure servers, partner services and on Google Cloud servers.
Your personal data are processed for:
- For a better service to you and our partners, and to maintain relationships with you
- Customer loyalty programs, payment-linked loyalty, automated loyalty programs
- Customer recognition
- Beter customer experience at our clients or partners
- Personalized offers and marketing
Article 4 - Registration of personal data
Your personal data are recorded in an (electronic) register.
Article 5 - Your rights regarding information
- Pursuant to Article 13 paragraph 2 sub b GDPR each data subject has the right to information on and access to, rectification, erasure and restriction of processing of his personal data, as well as the right to object to the processing and the right to data portability.
- You can exercise these rights by contacting us at firstname.lastname@example.org.
- Each request must be accompanied by a copy of a valid ID, on which you put your signature and state the address where we can contact you.
- Within one month of the submitted request, you will receive an answer from us.
- Depending on the complexity and the number of the requests this period may be extended to two months.
Article 6 - Legal obligations
Article 7 - Commercial offers
- You may receive commercial offers from the controller. If you do not wish to receive them (anymore), please send us an email to the following address: email@example.com.
- Your personal data may be used by our partners for commercial purposes. If you do not wish this to happen, please send us an email to the following address: firstname.lastname@example.org.
- We may send users of our services information related to their user account or associated services. Such information is critical for our services and therefore the user will not be given the opportunity to opt-out of receiving the most critical information regarding the service or their user account. The only option is to delete your account.
- Users can edit other message settings, or delete their account if they do not wish to receive anything.
Article 8 - Data retention
The collected data are used and retained for the duration determined by law. We store our data on servers in the EU. We store, but not share, our data on Google Cloud servers.
Article 9 - Applicable Law
These conditions are governed by Dutch law. The court in the district where the controller has its place of business has the sole jurisdiction if any dispute regarding these conditions may arise, save when a legal exception applies.
Article 11 - Contact
For requests, questions, product information or more information, please contact us: email@example.com.
This privacy statement applies since 01/01/2021 until further notice.