STIW PRIVACY POLICY

STIW offers you the possibility to use various STIW functionalities through its STIW platform. This includes, among other things, the easy execution of transactions in the areas of refueling or parking.

You can access the STIW platform through your browser, through one of our own apps, or through apps of other providers. You can also make purchases from providers that are affiliated with us (Sellers).

In order to offer our products and services, as well as those of third parties, we process certain personal data about you. In this Privacy Policy, we explain which personal data we process, for what purposes we do so, and how you can exercise your rights under privacy legislation. Insofar as processing is carried out by third parties, we refer you to the privacy policies of those parties.

We may amend this Privacy Policy from time to time. We therefore recommend that you consult this Privacy Policy regularly so that you are aware of any changes. The date of the latest version is shown at the top of this Privacy Policy. More information about the terms for using STIW can be found in our General Terms and Conditions.

Who does this Privacy Policy apply to?

This Privacy Policy applies to you when you use STIW and, via that platform, purchase products or services from us or from the providers with whom we collaborate.

Who is the controller responsible for processing my personal data?

STIW is the data controller responsible for processing your personal data within the STIW platform.

Insofar as parties other than STIW also process your personal data for their own purposes within the STIW platform, they are, in addition to us, each independently responsible data controllers. There is therefore a differentiated allocation of responsibility. STIW is not responsible for the privacy or cookie policies as implemented by these other controllers.

Other app providers

We work together with providers of other apps, who may also offer STIW functionalities within their own apps. An overview of these providers can be found here: STIW.nl/verkopers. Examples of STIW functionalities offered through these apps include the ability to make mobile payments easily. You can recognize the STIW payment functionalities in these providers’ apps by our STIW logo.

Providers of products and services: Sellers

In addition, we cooperate with service providers affiliated with us who offer their products and services within STIW (Sellers).

Which personal data is processed within STIW?

Which personal data we process about you depends on how you use STIW and which products and services you purchase.

Creating a STIW account

We offer you the opportunity to create an account so that your data is stored within the STIW platform and you can easily use the STIW functionalities and those of our Sellers. Through your location, you can easily see which Sellers are near you.

You can create an account in different ways: via Facebook, via Google, and via your email address. When you create an account, you gain access to a personal profile page in which you can enter and modify your personal data. If you create an account, we will process the following personal data about you (some of these fields are optional):

Name
Contact details such as your email address, telephone number, home and/or delivery address
Login details such as username and password
Vehicle details
Your location (GPS)

Once you have created an account, we also offer you the option to add information about your vehicle. By linking your license plate number, you can use it when, for example, making use of parking services.

When you use STIW through your account, we process the data specified below for each functionality in combination with your account data. We process your data in an overview that you can consult afterwards within the STIW platform.

If you prefer not to create an account, it is also possible to use a limited number of services within the app.

Online payments

When you make an online payment via STIW, we process the personal data necessary to execute, administer, and secure the payment. This may include your name, contact details, payment method, payment status, transaction reference, amount, date and time of the payment, and, where necessary, data relating to a refund, reversal, or dispute of a payment.

For the processing of online payments, STIW uses Buckaroo. Buckaroo acts as a payment service provider and processes personal data for handling the payment. Depending on the chosen payment method, banks, credit card companies, or other payment service providers may also be involved in the processing.

We process this personal data in order to facilitate the payment, maintain our records, prevent misuse and fraud, handle refunds and complaints, and comply with legal obligations. The legal basis for this processing is generally the performance of the contract, our legitimate interest in security and fraud prevention, and, where applicable, compliance with a legal obligation.

STIW does not store full credit card details unless this has been explicitly stated and a valid legal basis exists for doing so. Insofar as payment data is processed by Buckaroo or other involved payment service providers, the privacy policy of those parties also applies.

We do not retain payment and transaction data longer than necessary for the purposes for which it was collected and for as long as we are legally required to do so.

Personal data we process when we are in contact with you

When you use STIW, you can always contact us through our customer service or via social media. In that case, we process the personal data that you provide to us during that contact.

Data about your use of STIW

When you visit our websites or use our STIW apps, we process data about your browsing behavior, such as the type of device you use to visit our websites or use our apps, the browser type, the date and time of the session, and information about the parts of our website or apps that you visited.

For what purposes is my personal data processed?

We process your personal data so that you can make the best possible use of STIW functionalities. More specifically, we process your personal data for the following purposes:

4.1 To give you access to STIW, manage your account, and allow you to use the desired STIW functionalities.

4.2 To enable Sellers with whom we work to provide you with the services you request.

4.3 To improve our services, including the effective placement of information in our STIW apps and websites.

4.4 For internal management, security of the STIW platform, and the detection of fraud.

4.5 To maintain contact with you, provide you with information, and handle your questions and requests.

4.6 Handling complaints, disputes, and legal proceedings.

4.7 To comply with legal obligations and to protect our rights and interests.

4.8 To compile visitor statistics and user profiles so that we gain insight into the behavior and preferences of our (potential) users and can tailor content to their interests.

4.9 For direct marketing purposes.

How are user statistics compiled and processed?

We track how users use the STIW apps and website, which pages they visit most frequently, where they come from, what they click on, and which browser they use. With this information, we can compile visitor statistics. We use automatic tools for this in order to identify general trends in the use of STIW and social media and to gain insight into the behavior and preferences of our (potential) users.

We may add to this data information that we receive from third parties with whom we collaborate or from public sources. We then further process this data in aggregated form. This means that, for business purposes, we prepare reports in which the information can no longer be traced back to individuals.

We use the results of our statistical research to evaluate STIW and improve our services. We may also further process data that we process in the context of statistical research for our direct marketing activities. We will only do the latter if you have also given consent to receive newsletters, offers, or other marketing messages.

We share aggregated reports with Sellers so that they can determine how many users ordered products and services from them via STIW during a certain period or to measure the effectiveness of an offer.

Are your personal data also used for direct marketing purposes?

When you create an account in STIW, we ask for your consent to use your personal data for direct marketing. These messages are sent by us and may relate to our own products or services, but also to products or services of third parties, such as the Sellers with whom we collaborate.

We send our messages through various digital channels, such as email, push notifications via STIW, and social media. In order to make targeted offers to you through one of these channels, we may use automatic tools to analyze your personal data. For this purpose, we use the personal data we already have about you, whether or not supplemented with data obtained through statistical research and data we receive from third parties or from public sources. In this way, we can, for example, draw your attention to promotions near you or make offers that may be of interest to you based on your purchasing behavior.

Without your consent, we will not send you direct marketing messages through any of the aforementioned digital channels. If, after having given your consent, you no longer wish to receive messages from us, you can easily unsubscribe at any time. You can do this via the link in the messages we send or by adjusting your settings in your profile. You can also contact us via support@stiw.nl.

Who has access to your personal data?

In addition to our authorized employees having access to your personal data, we may also grant third parties access to it. These parties include the following:

Other app providers

We may share your personal data with other app providers insofar as this is necessary to enable the STIW functionalities to operate within those providers’ apps.

Providers of products and services (Sellers)

When you purchase products or services from Sellers, they will be given access to the personal data necessary to fulfill your request.

In addition, the Seller receives (aggregated) statistics from us, enabling it, for example, to determine how many users checked in with it during a certain period and how many users make use of its loyalty program.

Hosting providers and other processors

In order to provide our services, we use services of third parties, for example for the hosting and management of the STIW apps and website. We have concluded processor agreements/data processing agreements with these service providers on the basis of which they may only process personal data in accordance with our instructions. We also require these service providers to adequately secure the personal data and protect it against security incidents.

Acquiring or purchasing parties

If STIW is involved in a merger, acquisition, or sale of (part of) our assets, the merging or acquiring party will have access to your data insofar as this is necessary for the merger or acquisition.

Police/judiciary/other public authorities

STIW may be required to provide your data on the basis of the law, a court ruling, or an instruction from a competent supervisory authority or public authority. For example, we may be required by the tax authorities to provide your personal data and data concerning your parking behavior.

What is the legal basis for processing your personal data?

We process your personal data in order to provide the services requested by you. The legal basis for the data processing can therefore be found in the performance of the agreement we have with you and to which our General Terms and Conditions apply. We also have a legitimate interest in processing your personal data for, for example, statistical purposes, so that we can continuously optimize our services, and we may process your personal data because we are legally obliged to do so, for example under certain tax laws.

Consent

For sending direct marketing messages, we ask for your consent. We also ask for your consent when we wish to process certain data from your phone, such as location data and the app installation ID (for push notifications), which is unique per installation. When we process your personal data on the basis of consent, you may withdraw that consent at any time. Please note, however, that if you do not give us consent for certain processing activities or if you withdraw your consent, you may not be able to use all functionalities of STIW and you may not qualify for all offers and promotions from Sellers.

Are cookies used?

We use cookies within the STIW app environment and on our websites. Because we wish to safeguard your privacy and improve the user-friendliness of your visits to STIW, we believe it is important that you know how and why we use cookies.

Are your personal data also processed outside the EU?

It may occur that we engage third parties who process personal data on our behalf (processors) and who are established in a country outside the EU, where the same level of protection of personal data as in the Netherlands may not apply. We have therefore concluded agreements with these processors in which they undertake to provide appropriate safeguards (so-called EU model contracts), or we ensure that these suppliers can rely on another appropriate instrument to guarantee the protection of personal data.

How are your personal data secured?

We ensure that your personal data are adequately secured so that your data are protected against unauthorized use, unauthorized access, alteration, and unlawful destruction. We take appropriate security measures for this purpose and have also made arrangements about this with our suppliers.

How long are your personal data retained?

We do not retain your personal data longer than necessary for the purposes stated in this Privacy Policy or for as long as required by law. We retain your personal data for a maximum of two years after you have terminated your account or for a maximum of two years after you last used one of our Services. Where a specific law requires this, we may retain your data for a longer period.

How can you exercise your rights?

Under privacy legislation, you have the right, at reasonable intervals, to access, correct, and delete your data. A large part of your data can be viewed and adjusted through the STIW apps or the settings of your phone. You may also email a specified request for access or correction to us at support@stiw.nl.

In principle, we will respond to such a request within four weeks. In the case of a request for deletion, we will remove the relevant personal data as soon as possible, unless and insofar as the law requires us to retain those personal data or there are other compelling reasons preventing deletion.

Right to lodge a complaint with the Dutch Data Protection Authority

If you believe that your privacy has been violated, you may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). More information can be found on the website www.autoriteitpersoonsgegevens.nl.

Contact

We are located at Suikersilo-west 25 in Halfweg. Our Chamber of Commerce number is 88035549. If you have questions about the way we handle your personal data or if you wish to exercise your rights, you can contact us via servicedesk@stiw.nl.