Piggy Loyalty Privacy Statement

This is the Privacy Statement of Piggy Loyalty B.V. (Piggy, we, our, us). Your privacy is important to us, and we handle your personal data with great care. In this Privacy Statement, we will explain how we process or may process your personal data and what your rights are. Piggy is the largest loyalty programme in the Netherlands. Piggy offers a savings programme for customers of a range of associated businesses (Piggy Locations).

You can take part in our savings programme by creating a Piggy account (Account) with us. You can create your Account on our website (www.piggy.nl), via our app (Piggy App), or when you visit one of the Piggy Locations and leave your e-mail address and/or other data for the purpose of the savings programme we administer on behalf of the Piggy Location.

You can opt to use a physical loyalty card (Piggy Card) and/or to save via the Piggy App. Both the Piggy Card and the Piggy App contain a unique QR code that is linked to your Account. You can use your Account by scanning the QR code when making purchases at the Piggy Location. In this way, you will be saving points to redeem against interesting deals and/or free products from the Piggy Locations.

We are an innovative organisation which is constantly improving and expanding its service range. We also offer you the option to buy gift cards and stripcards through us, whether via your Account or otherwise, which cards can be used at a variety of shops and service providers.

We will process personal data when you create and use your Account and when you make purchases through us. We will also process personal data when you use the Website. In addition, we may process your personal data when you contact us, for instance if you have questions about our services.

We also process personal data of the contact persons at Piggy Locations when they procure our services and use our savings programme in offering deals to their customers.

Who is the data controller?

Piggy, having its registered office at Bisonspoor 8003, 3605LV Maarssen (the Netherlands), is the data controller with regard to the personal data processed via the Website, the Piggy Card and the Piggy App, as well as the other services we offer. You can reach us by telephone on +31 (0)85 7737177 and by email via info@piggy.nl.

What personal data do we process?

What personal data we process depends on the services you are using and the capacity in which you are using our services.

Creating and using an Account

  • Registration: creating an Account. You can create an Account via the Website or at one of our Piggy Locations. Alternatively, you can do so by downloading the Piggy App and creating an Account within this environment. When you create an Account, we will in any case process your email address. In addition, we may process the following personal data: name, telephone number, postcode, country, date of birth, gender, language and the password you have provided. We will also create a unique account number and a QR code that will be linked to your Account.
  • Use of the Account: processing when products are purchased. If you use your Account when purchasing products (you scan your Piggy Card or the QR code in your Piggy App), we will process the following data: your account number and/or your QR code, data about the Piggy Location (name, address and branch), time when the Piggy Card or the Piggy App is scanned, what purchases you made, the price of the purchases and the number of points or coupons earned with the purchases.
  • Use of the Account: Piggy App. If you use your Account via the Piggy App, we may process your location data if you enabled this option on your mobile device. It is up to you whether or not to enable location data, and you can disable this option again at any desired moment. In addition, we process your technical data in order to run the Piggy App on your mobile device, such as the type, operating system, app version and a unique identification number (such as an IP address or MAC address).
  • Use of the Account: redeeming the points. On our Website, you can view a summary of your points balance. When you redeem your points, Piggy will record when you did so, where you redeemed your points and what products or services you purchased with your points.
Contact persons at Piggy Locations
  • Registration. If you, as a Piggy Location, wish to include your promotion in our savings programme, you must first create an account. On that occasion, we will ask you to enter the following personal data: name, email address, business name, business address and bank account number. Use of gift cards and stripcards
  • Gift cards and stripcards. We offer you the option to buy a gift card or stripscard through us. As a Piggy Location, you can, for example, reward your regular customers with this gift card or stripscard, or you can buy a gift card or stripscard for yourself or someone else and use it to buy services or products at a later date. Every gift card or stripscard contains a unique QR code. We will register the value of the gift card or stripscard, the relevant transactions and when and where the card is used. A gift card or stripscard is not linked to a specific person but is a ‘bearer card’: it entitles its holder to the value associated with the card. Visitors of our Website, readers of our mailings and telephone contacts
  • Data which you disclose to us. When you visit our Website, send us a message or contact us by telephone, you may disclose personal data to us, for example because you have a query or a request. In that context, we may process your name, email address, telephone number or other contact details. In addition, we will process other personal data insofar as you disclose such data in your query or request or during the chat.
  • Personal data generated by our Website or via e-mails. When you visit our Website, particular data will be processed and generated, such as your IP address, browsing behaviour data, the date and time of your visit and the manner in which you navigate our websites. For more information on placing cookies, please check our Cookie Statement. If you open a newsletter or commercial email from us, we may record when you opened it and which segments you clicked on.

For what purposes do we process personal data?

Primarily, we process your personal data so that you can make use of your Account and all its associated services and functionalities, such as participation in our savings programme and thereby in promotions offered by the Piggy Locations. More in particular, we process the personal data for the following purposes:

Administration

  • Registration of users and Piggy Locations;
  • Creation and updating of the Account;
  • Dealing with queries and requests;
  • Verification of the Account, completeness check.

Services

  • Providing the Account and the Website and the services and functionalities available on them, and providing gift cards and stripcards;
  • Transferring data about your Account to Piggy Locations for the purpose of the promotions and marketing activities of the Piggy Locations;
  • Keeping users and contact persons at Piggy Locations informed of our services;
  • Making targeted offers and providing suggestions and advice, tailored to our service users;
  • Fulfilling the arrangements made with our service users, implementing service agreements and other agreements;
  • Improving our service provision, performing analyses in order to optimise our services.

Compliance and security

  • Observing and enforcing our General Terms and Conditions;
  • Preventing and detecting illegal activities, fraud and breaches of our security measures;
  • Observing laws and regulations, court rulings and orders, complying with requests from public authorities;
  • Handling claims and complaints;
  • Protecting our activities, our rights, privacy, security and property.

On what basis do we process personal data?

We process personal data only if there is a legal basis for doing so.
  • Performance of the agreement. When you create an Account, you conclude an agreement with us. We offer you a service, which you accept and which is subject to our General Terms and Conditions. We also make arrangements with the Piggy Locations to which General Terms and Conditions apply. Based on these arrangements, we have to process personal data of contact persons at Piggy Locations.
  • Consent. In certain situations, we may ask for your consent prior to the data processing. The Piggy App will ask for prior consent to use your location data. We will request your consent for particular direct-marketing activities insofar as we are obliged to do so by law. We may also request your consent for placing cookies on our Website. If you grant us your consent, you will have the right to withdraw your consent. This will not affect the lawfulness of the processing based on consent granted before that consent was withdrawn.
  • Legitimate interest. We may process personal data because we have a legitimate interest in doing so, or because the Piggy Location or other third party to which we disclose your personal data has a legitimate interest. For example, we have a legitimate interest in securing our systems and detecting irregularities. Our interest in securing our property and systems will not disproportionately infringe your rights and freedoms. The Piggy Location has a legitimate interest in performing customary marketing activities insofar as this is not outweighed by your privacy interest.

Profiling

We find it important to tailor our services to your preferences where possible and to show you information which is easy to find and relevant to you. To this end, we may draw up user profiles. This may have the effect that different users are provided with different information.

Direct marketing

We offer you the option to subscribe to our newsletters and to other direct-marketing communications from us. If you have consented to this, we may also send you messages about initiatives of our associate partners.

You can easily unsubscribe from our communications by using the link in the e-mails or updating your preferences in your Account environment at all times.

The Piggy Locations may also send you direct marketing communications, for example because you are a customer of the Piggy Location. We have no involvement in these direct marketing communications. We have no control over them and are not responsible or liable in this respect.

Who can access your personal data?

Our staff members can access your personal data on a need-to-know basis. In certain situations, we may share personal data with third parties. We will do so only if this is necessary for our services and if it is in line with the purposes described in this Privacy Statement.

  • We may share personal data with Piggy Locations at which you use your Account. We will share only the personal data with Piggy Locations which relates to your purchases from the Piggy Location concerned, as well as your card number, QR code, name, gender, date of birth, email address, address and telephone number. The Piggy Locations are independent data controllers with regard to the further processing of your personal data. This means that the Piggy Locations decide themselves in what manner and for what purposes they will further process your personal data. We have no control over this and are not responsible for the manner in which the Piggy Locations further process your personal data. If you want to know how the Piggy Locations deal with your personal data, please do not hesitate to contact the Piggy Location concerned.
  • We may share personal data with legal successors or investors (or proposed legal successors or investors) if they intend to continue or take part in the provision of our services.
  • We make use of service providers for aspects such as managing the Website and the Piggy App and hosting. Insofar as these service providers process personal data on our behalf in the capacity of processors, we will lay down the arrangements in a processing agreement.
  • We will share personal data with supervisory authorities, competent authorities and investigating bodies only if and insofar as we are obliged to do so by law.

Will your personal data be safe?

We have taken appropriate technical and organisational security measures in order to protect the personal data we process against loss or unlawful use. For example, we secure our systems and applications in accordance with the information security standards currently in force. In addition, we have made arrangements with our service providers and obliged them to take adequate security measures.

Will your personal data be processed outside the EEA?

In principle, we process your personal data within the European Economic Area (EEA). Because we may use the services of processors who have their main establishment outside the EEA, it cannot be ruled out that we share personal data with organisations outside the EEA, either directly or indirectly. Where this is the case, we will take appropriate measures to legitimise such processing.

How long will we retain your personal data?

We will retain personal data only for as long as this is necessary for the purposes described in this Privacy Statement. This means that we will process personal data in any case for as long as you make use of our services, including the use of your Account. If you no longer wish to use your Account, or if you as a Piggy Location no longer wish to take part in our savings programme and have ceased procuring our services, we may retain your personal data for a period of up to two years after the end of our relationship, unless a specific law prescribes a different minimum retention period.

If you have indicated that the Piggy App may use your location data, this will involve real-time information. Accordingly, this data will not be stored.

Requests for access, rectification and erasure

Under the law, every data subject can exercise certain rights in respect of his or her personal data. You are entitled to access, rectify and erase personal data relating to you. In addition, you can object to the use of your personal data or ask us to restrict this use.

If you have an Account, you can easily view your data by logging on to your Account via our Website or via the Piggy App. Within your Account environment, you can alter or erase particular personal data. If this is not possible or not sufficient, please contact us in order to enforce your rights. Our contact details are shown at the top of this Privacy Statement. Please indicate clearly in each request which data processing operations are involved. We may ask you to provide additional information for the purpose of establishing your identity.

Complaints

If you have any complaints about the manner in which we handle your personal data, please get in touch with us via the contact details shown at the top of this Privacy Statement. We will be happy to help you find a solution. If these attempts should be unsuccessful, you will be able to submit your complaint to the Dutch Data Protection Authority.

Amendments

We constantly seek to optimise our services and offer innovative new services. This may entail that we make changes to the personal data which we request from you and which we process further. Alternatively, there may be a change in the regulations. We therefore adjust our Privacy Statement from time to time and we recommend that you check it on a regular basis.

Update: 23 July 2018