Privacy policy

1. Introduction

This Privacy Policy (the “Policy”) concerns GIFTIFY S.A., having its registered office at 1000 Brussels, Cantersteen 47, Belgium, registered under the number BE 0820.246.648.

Hereinafter referred to as “Giftify”, “we” or “us”

All capitalised terms not defined in this Policy shall have the meaning given to them in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the Processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“General Data Protection Regulation” or “GDPR”).

Your Personal data and your privacy are protected by Giftify in accordance with Belgian and European regulations on the protection of privacy.

Please read this Policy very carefully. The following describes not only your rights, but also the way in which you can exercise these rights.

2. Scope

2.1. Our Commitment to Privacy

Giftify considers the protection of privacy to be of fundamental importance. We are committed to enabling you to retain full control over your personal data throughout all your interactions with us.

2.1. Services and platforms operated by Giftify

Giftify operates, owns and/or uses, without limitation, the following platforms and services:

• MyPortal
• E-commerce sales platform (eShop)
• Giftify App
• Vending Machine RapidCard Slim

2.3. Personal dataprocessing

2.3.1. B2C Customers

Giftify does not collect, store, or use the personal data of B2C customers.

2.3.2. B2B Clients and Prospects

Giftify may collect, store, and use certain personal data of B2B Clients and prospects—including, but not limited to, names, addresses, email addresses, and telephone numbers—when they visit or use our platforms, solely for their own business activity purposes.

B2B Clients may object to the processing of their personal data at any time by clicking the unsubscribe button included in the communications they receive.

3. Who processes your personal data and how can you contact Giftify?

Giftify SA may act as the data controller for the processing of personal data carried out through the platforms and services. That is, for example, the case for the Giftify App.

Giftify may also process personal data on behalf of its clients or commercial partners, who may act as independent data controllers. In such cases, Giftify acts as a data processor in accordance with applicable data protection laws and contractual arrangements.

Depending on the services used, personal data may therefore be processed either:

• directly by Giftify as data controller; or
• with Partners, both acting as independent controllers; or
• by Giftify acting as processor on behalf of a client or partner; or
• where Giftify acts as a processor, the relevant client or partner remains responsible for determining the purposes and means of the processing.

For any questions regarding this Privacy Policy or the processing of your personal data, you may contact giftify-legal@giftify.me

4. Types of information Giftify may collect from you

Giftify may collect, store and use personal data when you visit our website, use our platforms, access our application, use our services, or when we carry out marketing activities.

The personal data collected may vary depending on the context of your interaction with Giftify and the nature of the services provided, and may include, but is not limited to, the following categories of data: identification data (such as name and business name), contact details (such as address, email address and telephone number), professional or business-related information (such as business identification number), and financial information (such as IBAN and other data necessary to process gift card transactions or related services).

Giftify may also collect any additional information that is relevant and necessary for the purposes described in this Policy.

5. How can we collect your personal data and what do we do with it?

5.1 Collection of your personal data

We may collect your personal information via cookies or when you:  

• Visit our websites and platform;
• Contact us via an email, via telephone or via our website;
• Complete a voluntary customer satisfaction form;
• Complete a voluntary customer testimonial form;
• Use our services;
• complete a book a demo form;
• complete a sample request form;
• complete the “contact” us form;
• enter your email address to subscribe for the Giftify newsletter and to receive direct marketing messages.

5.2 Actions of Giftify

5.2.1 Processing of your personal data

Giftify may process your personal data to:

• provide you with information and/or services that you request from us;
• answer your questions;
• provide you with improved product offerings and client services;
• improve your customer and/or user experience.

5.2.2 Potential sharing of your personal data

Giftify will only share your personal data in a minimal manner.

However, in order to follow up on your request or action on the platforms and services, Giftify may share personal data with trusted third parties, including service providers, subprocessors, commercial partners, payment providers, and clients,where necessary for the provision of its services.

Depending on the context of the processing:

• such third parties may act as processors acting onbehalf of Giftify;
• Giftify may act as processor on behalf of its clients;or
• the parties may each act as independent datacontrollers for their respective processing activities.

Where required under applicable law, Giftify ensures that appropriate contractual arrangements are implemented in accordance with Article 28 GDPR.

Giftify does not rent or sell your personal datawith other persons.

Giftify will use all reasonable efforts to ensure that your personal data is not disclosed to regional/ national institutions and authorities, unless required by law or other regulations.

6. Legal basis on which we process your personal data

Giftify processes your personal databased on the following legal grounds:

• The processing of certain of the above-mentioned personal data by us and other information you might disclose, is necessary for the performance of the platforms and of the services we provide. In the event you refuse to provide this personal data, we will not be able to comply with certain obligations (e.g. responding to your questions, processing your demo booking or sample request, etc).
• The consent you provide is always free, and you have the right to withdraw this consent at any time. Withdrawal of consent does not affect the processing of personal data (i) prior to such withdrawal, (ii) based on a legitimate ground for processing personal data, and (iii) in case of a legitimate interest of the processing.
• Legitimate interest as a legal basis for the lawfulness of processing is justified with regard to the personal data to improve your user experience, to improve the services and the products we develop, operate and own. The fact that Giftify processes this personal data also benefits you as a user of our platforms and services and products. A processing of personal data on such ground may not override your fundamental rights.
• The compliance with legal obligations.

7. Transfer of personal data to countries outisde the European Economic Area (EEA)

In principle, Giftify does not transfer your personal data to countries outside the EEA.

It is, however, possible that Giftify, through its processors or sub-processors, does transfer your personal data to countries outside the EEA.

Should a less strict protection for personal data apply in a specific country than within the EEA, Giftify will then ensure that the same level of protection is achieved (e.g. by concluding an agreement with the Processor located in a country outside the EEA).

8. Cookies

Please refer to our Cookies Policy available here.

9. How long will Giftify retain your personal data?

Giftify retains personal data only for as long as necessary to fulfil the purposes set out in 5. HOW CAN WE COLLECT YOUR PERSONAL DATA AND WHAT DO WE DO WITH IT? and to comply with applicable legal and regulatory obligations. 

In general, personal data is kept for the duration of the business relationship - whether with customers, partners, or service providers - and, where required, for additional statutory periods (e.g. accounting, tax, and regulatory requirements). 

Transaction data related to Gift Cards may be retained for up to seven (7) years. 

Data processed for customer support or claims is kept as long as necessary to handle the request and for evidentiary purposes. In the event of disputes or litigation, data may be retained until full resolution. 

Thereafter, personal data is anonymized in accordance with applicable laws.

10. How does Giftify safeguard you personal data?

Giftify has developed appropriate technical and organisational measures, safeguards and assurances to process your personal data in accordance with applicable Belgian and European regulations, in particular to protect your personal data against loss, misuse, or unauthorised alteration.

Giftify makes all reasonable and appropriate efforts to protect the confidentiality of your personal data.

Despite the technical and organisational measures taken by Giftify, you should be aware that there are always risks associated with sending personal data over the Internet. The security and protection of your personal data can never be fully guaranteed.

11. Your rights in regard to the processing of your persona data

In as far as provided for in the applicable Belgian and European regulations, you have the following rights:

Object: You have the right to object at any time to the processing of your personal data based on a legitimate interest of Giftify, for example when used for (direct) marketing purposes, for profiling to send you targeted advertising, or for sharing your data with third parties or with other entities within the Giftify.

Withdrawal: In cases where you have given your previous consent for your personal data to be processed, you can withdraw that consent at any moment. This does not affect the lawfulness of processing based on consent before its withdrawal.

Access: You can request access to or a copy of your personal data we maintain about you. You may also request information on the purposes of the processing, categories of data, categories of recipients, data retention terms, etc.

Portability: You may have the right to obtain a copy of any personal data that we hold about you in our records in a compatible format to allow you to exercise your right to data portability.

Restriction: You have the right to request a restriction of the processing of your personal data in the following cases:

• for a period enabling Giftify to verify the accuracy of your personal data in the event you contest the accuracy of your personal data;
• if the processing is unlawful and you wish to restrict the use of your personal data rather than deleting it;
• if you wish Giftify to keep your personal data because you need it for your defence in the context of legal claims;
• if you have objected to the processing but Giftify needs to check whether it has legitimate grounds for such processing which may override your own rights.

Rectification: You may also have the right to correct inaccurate personal data and to complete incomplete personal data.

Erasure: You may have the right to request the deletion of your personal data in the following cases: 

• if your personal data is no longer necessary for the purpose of the data processing;
• if you have withdrawn your consent and there is no other legal ground for the processing;
• if you have objected to the data processing and there is no overriding legitimate ground for Giftify;
• if the personal data have been unlawfully processed;
• if the personal data must be erased to comply with a legal obligation applicable to Giftify. 

In case of erasure, we will take reasonable steps to inform other Giftify entities which might be involved in the data processing of such erasure.

If and to the extent provided for in the applicable Belgian and European regulations, you have the right to file a complaint with the competent supervisory authority should the Processing of your personal data violate the applicable regulations. In Belgium where Giftify is incorporated, this is the Data Protection Authority (Data Protection Authority, Rue de la Presse 35, 1000 Brussels, Belgium, contact@apd-gba.be, www.dataprotectionauthority.be) .

12. Amendments to this policy

Giftify may amend this Policy at any time. Any amendments Giftify may make to this Policy in the future will be posted on this page and, where appropriate, you may be notified by email. Amended versions of this Policy take effect ten (10) days after their publication on the platforms and services. Where required they will always be submitted for approval.

13. Disclosure

Giftify may disclose your personal data if this is required by law, or if Giftify determines in good faith that such disclosure is required in order:

• to comply with any pending judicial inquiry, judicial order or litigation pertaining to platforms and the services;
• to compel observance of the general terms and conditions of Giftify accepted by you ;
• to respond to claims against Giftify regarding personal data that violate any rights of third parties; 
• to safeguard the rights, property and safety of Giftify, its employees, users, and the general public.

Giftify may disclose your personal data to competent police or judicial authorities or other official government authorities if Giftify deems this useful or necessary, in its sole discretion, for the investigation of fraud, intellectual property infringement or any other harmful activity, or if Giftify reasonably suspects that such activity may expose Giftify or you to any liability.

14. Whow to contact for questions regarding the processins of your personal data?

Giftify has appointed a person in charge of data protection matters whom you can always contact for questions and concerns about your privacy and the Processing of your personal data and to exercise your rights as mentioned in Section 11. The above mentioned person can be reached by email at : privacy@giftify.me