What we process
Name, email, telephone and address of your customers, their orders and bookings, and what they paid. Nothing further.
What for
Only to make the product work: showing your orders, sending your customers their confirmation, showing your rider the way. We sell nothing on and use none of it to advertise.
Where it sits
In Europe: your data sits on a server in Germany and your mail goes through Frankfurt. Every business has a database of its own; yours cannot be read from another business. One exception: your payment provider. Stripe processes payment data outside Europe too, under the European Commission's standard contractual clauses.
Who else can reach it
Our sub-processors are on a list we maintain: our hosting party, our mail sender, and Stripe or Buckaroo for the payments. If a new one joins, we give thirty days' notice, and if you disagree you may cancel.
Who here may touch it
Only colleagues who need the data for their work, and they have signed a confidentiality undertaking.
Checking that we keep to it
You may have us audited once a year by an independent auditor, at your own cost, with notice beforehand. We answer questionnaires about our security at no charge.
If a customer of yours asks for their data
If somebody asks you for access, correction or deletion, we supply what you need for it. If such a request reaches us, we pass it on to you.
If something goes wrong
In the event of a data breach we tell you within 48 hours, with what happened and what we are doing about it. Reporting to the Dutch Data Protection Authority is your responsibility; we supply what you need for it.
If you stop
Then we delete the data, apart from the tax records we have to keep for seven years.
Questions about this document go to [email protected].