Piggy Loyalty Privacy Statement
This is the Privacy Statement of Piggy Loyalty B.V. (Piggy, we, our, us). Your privacy is important to us, and we
handle your personal data with great care. In this Privacy Statement, we will explain how we process or may process
your personal data and what your rights are.
Piggy is the largest loyalty programme in the Netherlands. Piggy offers a savings programme for customers of a range
of associated businesses (Piggy Locations).
You can take part in our savings programme by creating a Piggy account (Account) with us. You can create your
Account on our website (www.piggy.nl), via our app (Piggy App), or when you visit one of the Piggy Locations and
leave your e-mail address and/or other data for the purpose of the savings programme we administer on behalf of the
You can opt to use a physical loyalty card (Piggy Card) and/or to save via the Piggy App. Both the Piggy Card and
the Piggy App contain a unique QR code that is linked to your Account. You can use your Account by scanning the QR
code when making purchases at the Piggy Location. In this way, you will be saving points to redeem against
interesting deals and/or free products from the Piggy Locations.
We are an innovative organisation which is constantly improving and expanding its service range. We also offer you
the option to buy gift cards and stripcards through us, whether via your Account or otherwise, which cards can be
used at a variety of shops and service providers.
We will process personal data when you create and use your Account and when you make purchases through us. We will
also process personal data when you use the Website. In addition, we may process your personal data when you contact
us, for instance if you have questions about our services.
We also process personal data of the contact persons at Piggy Locations when they procure our services and use our
savings programme in offering deals to their customers.
Who is the data controller?
Piggy, having its registered office at Bisonspoor 8003, 3605LV Maarssen (the Netherlands), is the data controller
with regard to the personal data processed via the Website, the Piggy Card and the Piggy App, as well as the other
services we offer. You can reach us by telephone on +31 (0)85 7737177 and by email via firstname.lastname@example.org.
What personal data do we process?
What personal data we process depends on the services you are using and the capacity in which you are using our
Creating and using an Account
- Registration: creating an Account. You can create an Account via the Website or at one of our Piggy Locations.
Alternatively, you can do so by downloading the Piggy App and creating an Account within this environment. When
create an Account, we will in any case process your email address. In addition, we may process the following
personal data: name, telephone number, postcode, country, date of birth, gender, language and the password you
provided. We will also create a unique account number and a QR code that will be linked to your Account.
- Use of the Account: processing when products are purchased. If you use your Account when purchasing products
scan your Piggy Card or the QR code in your Piggy App), we will process the following data: your account number
and/or your QR code, data about the Piggy Location (name, address and branch), time when the Piggy Card or the
App is scanned, what purchases you made, the price of the purchases and the number of points or coupons earned
- Use of the Account: Piggy App. If you use your Account via the Piggy App, we may process your location data if
enabled this option on your mobile device. It is up to you whether or not to enable location data, and you can
disable this option again at any desired moment. In addition, we process your technical data in order to run the
Piggy App on your mobile device, such as the type, operating system, app version and a unique identification
(such as an IP address or MAC address).
- Use of the Account: redeeming the points. On our Website, you can view a summary of your points balance. When
redeem your points, Piggy will record when you did so, where you redeemed your points and what products or
you purchased with your points.
Contact persons at Piggy Locations
- Registration. If you, as a Piggy Location, wish to include your promotion in our savings programme, you must
create an account. On that occasion, we will ask you to enter the following personal data: name, email address,
business name, business address and bank account number.
Use of gift cards and stripcards
- Gift cards and stripcards. We offer you the option to buy a gift card or stripscard through us. As a Piggy
Location, you can, for example, reward your regular customers with this gift card or stripscard, or you can buy
gift card or stripscard for yourself or someone else and use it to buy services or products at a later date.
gift card or stripscard contains a unique QR code. We will register the value of the gift card or stripscard,
relevant transactions and when and where the card is used. A gift card or stripscard is not linked to a specific
person but is a ‘bearer card’: it entitles its holder to the value associated with the card.
Visitors of our Website, readers of our mailings and telephone contacts
- Data which you disclose to us. When you visit our Website, send us a message or contact us by telephone, you may
disclose personal data to us, for example because you have a query or a request. In that context, we may process
your name, email address, telephone number or other contact details. In addition, we will process other personal
data insofar as you disclose such data in your query or request or during the chat.
- Personal data generated by our Website or via e-mails. When you visit our Website, particular data will be
and generated, such as your IP address, browsing behaviour data, the date and time of your visit and the manner
which you navigate our websites. For more information on placing cookies, please check our Cookie Statement. If
open a newsletter or commercial email from us, we may record when you opened it and which segments you clicked
For what purposes do we process personal data?
Primarily, we process your personal data so that you can make use of your Account and all its associated services
and functionalities, such as participation in our savings programme and thereby in promotions offered by the Piggy
Locations. More in particular, we process the personal data for the following purposes:
- Registration of users and Piggy Locations;
- Creation and updating of the Account;
- Dealing with queries and requests;
- Verification of the Account, completeness check.
- Providing the Account and the Website and the services and functionalities available on them, and
cards and stripcards;
- Transferring data about your Account to Piggy Locations for the purpose of the promotions and marketing
of the Piggy Locations;
- Keeping users and contact persons at Piggy Locations informed of our services;
- Making targeted offers and providing suggestions and advice, tailored to our service users;
- Fulfilling the arrangements made with our service users, implementing service agreements and other
- Improving our service provision, performing analyses in order to optimise our services.
Compliance and security
- Observing and enforcing our General Terms and Conditions;
- Preventing and detecting illegal activities, fraud and breaches of our security measures;
- Observing laws and regulations, court rulings and orders, complying with requests from public
- Handling claims and complaints;
- Protecting our activities, our rights, privacy, security and property.
On what basis do we process personal data?
We process personal data only if there is a legal basis for doing so.
- Performance of the agreement. When you create an Account, you conclude an agreement with us. We offer you a
which you accept and which is subject to our General Terms and Conditions. We also make arrangements with the
Locations to which General Terms and Conditions apply. Based on these arrangements, we have to process personal
of contact persons at Piggy Locations.
- Consent. In certain situations, we may ask for your consent prior to the data processing. The Piggy App will ask
prior consent to use your location data. We will request your consent for particular direct-marketing activities
insofar as we are obliged to do so by law. We may also request your consent for placing cookies on our Website.
you grant us your consent, you will have the right to withdraw your consent. This will not affect the lawfulness
the processing based on consent granted before that consent was withdrawn.
- Legitimate interest. We may process personal data because we have a legitimate interest in doing so, or because
Piggy Location or other third party to which we disclose your personal data has a legitimate interest. For
we have a legitimate interest in securing our systems and detecting irregularities. Our interest in securing our
property and systems will not disproportionately infringe your rights and freedoms. The Piggy Location has a
legitimate interest in performing customary marketing activities insofar as this is not outweighed by your
We find it important to tailor our services to your preferences where possible and to show you information which is
easy to find and relevant to you. To this end, we may draw up user profiles. This may have the effect that different
users are provided with different information.
We offer you the option to subscribe to our newsletters and to other direct-marketing communications from us. If you
have consented to this, we may also send you messages about initiatives of our associate partners.
You can easily unsubscribe from our communications by using the link in the e-mails or updating your preferences in
your Account environment at all times.
The Piggy Locations may also send you direct marketing communications, for example because you are a customer of the
Piggy Location. We have no involvement in these direct marketing communications. We have no control over them and
are not responsible or liable in this respect.
Who can access your personal data?
Our staff members can access your personal data on a need-to-know basis. In certain situations, we may share personal
data with third parties. We will do so only if this is necessary for our services and if it is in line with the
purposes described in this Privacy Statement.
- We may share personal data with Piggy Locations at which you use your Account. We will share only the personal
with Piggy Locations which relates to your purchases from the Piggy Location concerned, as well as your card
QR code, name, gender, date of birth, email address, address and telephone number. The Piggy Locations are
independent data controllers with regard to the further processing of your personal data. This means that the
Locations decide themselves in what manner and for what purposes they will further process your personal data.
have no control over this and are not responsible for the manner in which the Piggy Locations further process
personal data. If you want to know how the Piggy Locations deal with your personal data, please do not hesitate
contact the Piggy Location concerned.
- We may share personal data with legal successors or investors (or proposed legal successors or investors) if
intend to continue or take part in the provision of our services.
- We make use of service providers for aspects such as managing the Website and the Piggy App and hosting. Insofar
these service providers process personal data on our behalf in the capacity of processors, we will lay down the
arrangements in a processing agreement.
- We will share personal data with supervisory authorities, competent authorities and investigating bodies only if
insofar as we are obliged to do so by law.
Will your personal data be safe?
We have taken appropriate technical and organisational security measures in order to protect the personal data we
process against loss or unlawful use. For example, we secure our systems and applications in accordance with the
information security standards currently in force. In addition, we have made arrangements with our service providers
and obliged them to take adequate security measures.
Will your personal data be processed outside the EEA?
In principle, we process your personal data within the European Economic Area (EEA). Because we may use the services
of processors who have their main establishment outside the EEA, it cannot be ruled out that we share personal data
with organisations outside the EEA, either directly or indirectly. Where this is the case, we will take appropriate
measures to legitimise such processing.
How long will we retain your personal data?
We will retain personal data only for as long as this is necessary for the purposes described in this Privacy
Statement. This means that we will process personal data in any case for as long as you make use of our services,
including the use of your Account. If you no longer wish to use your Account, or if you as a Piggy Location no
longer wish to take part in our savings programme and have ceased procuring our services, we may retain your
personal data for a period of up to two years after the end of our relationship, unless a specific law prescribes a
different minimum retention period.
If you have indicated that the Piggy App may use your location data, this will involve real-time information.
Accordingly, this data will not be stored.
Requests for access, rectification and erasure
Under the law, every data subject can exercise certain rights in respect of his or her personal data. You are
entitled to access, rectify and erase personal data relating to you. In addition, you can object to the use of your
personal data or ask us to restrict this use.
If you have an Account, you can easily view your data by logging on to your Account via our Website or via the Piggy
App. Within your Account environment, you can alter or erase particular personal data. If this is not possible or
not sufficient, please contact us in order to enforce your rights. Our contact details are shown at the top of this
Privacy Statement. Please indicate clearly in each request which data processing operations are involved. We may ask
you to provide additional information for the purpose of establishing your identity.
If you have any complaints about the manner in which we handle your personal data, please get in touch with us via
the contact details shown at the top of this Privacy Statement. We will be happy to help you find a solution. If
these attempts should be unsuccessful, you will be able to submit your complaint to the Dutch Data Protection
We constantly seek to optimise our services and offer innovative new services. This may entail that we make changes
to the personal data which we request from you and which we process further. Alternatively, there may be a change in
the regulations. We therefore adjust our Privacy Statement from time to time and we recommend that you check it on a
Update: 23 July 2018