Privacybeleid
July 22, 2022
Introduction
As part of the operation of the website https://www.dashboard.packaly.com (hereinafter the “Dashboard Service”) and Packaly’s Rider application (hereinafter the “Rider App”) for connecting natural or legal persons in need of a goods delivery service (hereinafter the “Store Dashboard User”) with independent couriers (Hereinafter the “Riders”) available to provide such service (hereinafter the “Riders” or “Rider applicants”), operated by Packaly B.V (“we”, “our”, “us” or “Packaly”). This privacy policy applies to everyone to all of the entities mentioned before. In this case Packaly will be in charge and responsible for controlling the data we collect about you.
This privacy policy applies to Rider applicants, Riders, Rider substitutes, Store Dashboard Users (“you” or “your”). We strongly recommend you to read the following privacy policy, which explains how and why we collect, use and protect your information.
Contact detail
In case you have any concerns or questions regarding this privacy policy or how we handle your data more generally, please get in touch with us using the following details:
1. By contacting our Data Protection department: privacy@packaly.com.
We collect app data
The Rider App
The moment when you or someone else is applying to become a Packaly Rider or already using the Rider app, we collect information in a variety of ways. It is listed below how this is done:
Account setup
The moment you start your Rider application for Packaly, we request necessary information about yourself. This includes your name, contact details, data of birth, postcode, your right to work, and whether you have any unspent criminal convictions.
During the application, we will ask you to provide further information and documents. These are a copy of your passport and if needed a work permit, in order to do a (criminal) background check. Furthermore, we will track and record the progress of your application and record the results of your criminal background check.
To finalize your account set-up, we will ask you to provide your financial credentials (including bank details), VAT and business registration information, and further information related to your services for Packaly, such as the contact details of the person we should contact for emergency purposes, where you want to work and a photo. Once this is done we record your Packaly Rider payment arrangement and a copy of your signed Rider agreement with us (“Rider Agreement”).
Your location
When your status is “inactive” (i.e. not available for orders), we do not track your location. When being offline it is not possible to get offers, accept offers, nor proceed deliveries.
When your status is set to “active” (i.e. available for orders) on the Rider App, we intermittently collect your location data. If you do not want us to view your location, please change your Rider status to offline.
Payments and ride planning
We record your deliveries, your tips if obtained via the Rider App, your calculated fees and the calculated fee statement.
We collect your most recent Rider activity relating to your attendance of booked sessions (where you make bookings) and participation level.
Your use of Rider Support and the Rider App
When you use the Rider App we collect usage data of the Rider App, including about your Rider status and (when online) your order progress swipes. The same we do when there is an interaction with our Rider support function via email, phone, post, chat or on the Rider App (“Rider Support”), including when you report any incident.
All these communications will be stored in order to improve our service. It is possible we use chats for internal Support training and improvement purposes.
Information about your services
We receive information about you from third parties in the following ways that we may collect. These are related to the services or any incident you may have been involved, with the following person(s):
Retailer(s) who work(s) with us (our “Partner Retailers”);
Customer(s);
Other Rider(s);
Citizen(s).
If you take advantage of the perks offered by a third party partner, the partner will share information with us about your interest in those perks.
We may collect information about you from the feedback you send us or provide to us through focus groups or surveys.
When you use Dashboard Services or applications of third parties in connection with your services for Packaly, including during the application and onboarding process, those sites or applications may collect and process your information independently of Packaly.
We may request your personal data to verify your right to work, such as copies of your identification documents, work permit and/or a photograph of you.
Cookies
We use cookies or other similar technologies, to enable auto-login for you into the Rider App, but also to obtain technical information about your device to improve the Rider App. These can be certain characteristics of your device, for example performance data, operating system, device type, app version, platform and screen size.
You have the right to reject or remove these cookies with your device settings, however please be aware that if you do this, the Rider App will not function correctly and it will negatively affect your performance as a Packaly Rider.
The Dashboard Service
The moment when You or someone else is applying to get an Store Dashboard User account, we collect information in a variety of ways. The data we collect is listed below:
Account setup
The moment you start to create an account for Packaly, we request necessary information about yourself. This includes your last name, first name, postal address, email address, phone number, date of birth and whether you have any unspent criminal convictions.
To finalize your account set-up, we will ask you to provide your financial credentials (including bank details), VAT and business registration information, and further information related to your services for Packaly. Once this is done You become a Store Dashboard User, with your personal username and password.
Your location
We record the location of the location where the Rider has to pick up and where to drop off the delivery.
Payments
We record your deliveries and the hours requested.
We collect your payment activities via the Dashboard Service.
Your use of the Dashboard Service and support
When you use the Dashboard Service we collect usage data. The same we do when there is an interaction with our Rider support function via email, phone, post, chat.
All these communications will be stored in order to improve our service. It is possible we use chats for internal Support training and improvement purposes.
Information about your services
We receive information about you from third parties in the following ways that we may collect. These are related to the services or any issue you may have been involved with, with the following person(s): Rider(s).
If you take advantage of the perks offered by a third party partner, the partner will share information with us about your interest in those perks.
We may collect information about you from the feedback you send us or provide to us through focus groups or surveys.
When you use Dashboard Services or applications of third parties in connection with your services for Packaly, including during the application and onboarding process, those sites or applications may collect and process your information independently of Packaly.
We may request your personal data to verify You are meeting our requirements for being a Packaly Store Dashboard User, such as copies of your Chamber of Commerce registration.
Cookies
We use cookies or other similar technologies, to enable auto-login for you into the Rider App, but also to obtain technical information about your device to improve the Rider App. These can be certain characteristics of your device, for example performance data, operating system, device type, app version, platform and screen size.
You have the right to reject or remove these cookies with your device settings, however please be aware that if you do this, the Rider App will not function correctly and it will negatively affect your performance as a Packaly Rider.
Use of your information, and why
When we process data about you, there is a permitted reason (Data protection law) for doing so. We will have a lawful basis for processing your information if we need to process your information for the performance of a contract with you, or at your request before we enter into a contract. Therefore we have your consent and we have a justifiable reason for processing your data. When we do this it is in the public interest for us to process your data or we are under a legal obligation to do so.
Where we need to process your information for the performance of a contract with you, or at your request before we enter into an account, we use your information:
To provide and manage your application, which includes your account and onboarding process, all in order to execute to execute the agreement;
To provide you with access to and use of the Dashboard Service or Rider App, as a means of Packaly engaging your services, which enables you to send or accept orders;
To communicate with you about operational information, relating to your services to Packaly. These can be closed zones, important changes or developments to the service;
To enable Support to communicate with you via all possible channels and to support your services;
To offer you order-specific fees and pricing when applicable, calculate and administer payments for your services and requests, but also referrals.
Justifiable reasons for tracking your data are which are listed below:
For communications
To help you with the application procedure;
To contact you for your feedback on your application procedure and your Packaly experience;
To inform you about opportunities
To send you news and help you to know more about Packaly. This can be information in connection with your Rider or Dashboard services, such as by sending you newsletters, event invitations, tech updates and helping you to find appropriate equipment.
For onboarding and operations
To perform right to work, insurance checks, and to audit and store evidence of these, to ensure that you are legally compliant when providing the services and to comply with our internal policies, protect our reputation and reduce legal risks;
We whether or not check, if you have unspent criminal convictions. This by using a VOG check, which is in our legitimate interests (and the legitimate interests of our customers, Riders and Retailer Partners) to try to prevent our platform from being used for any unlawful purpose and to protect the safety of our customers, other Riders and Dashboard service Partner staff, with whom you will work closely when providing the services.
To make the most efficient decisions when offering you orders based on factors like your location, and to determine your level of priority access to booking using your “Statistics” data. Data protection law describes this as profiling;
To enable you to use or benefit from the insurance policy offered by Packaly;
To enable our Support, tech and engagement teams to help you with any issues, enquiries or complaints efficiently and effectively, including to fix any bugs or other technical issues in the Dashboard Service or Rider App. This requires the use of technical information relating to your device;
To provide live order progress updates using your order progress swipes, which gives a positive experience to our Store Dashboard Users.
For developing Packaly its systems and services
To train our algorithms to make the most effective and efficient decisions, which will lead to the best experience. For example improving our order dispatch algorithm; Lubertus
Improving the Packaly experience for Riders and Store Dashboard Users by understanding your data (such as your Rider App and Dashboard Service usage, feedback you give about orders and your location data) as well as the data of other Riders, what attributes to a positive or negative experience with Packaly. To prevent from inefficient deliveries, we use this data to responsibly design, develop, test and implement new tools, processes, and relationships to improve our business, systems and services;
To analyse data about your rides to make certain assumptions about the types of promotional offers that may be particularly beneficial for you, when providing services to Packaly. This will lead to personal notifications, that are based on your Rider behavior, for example hours being online, start location and which days you are online. The Data protection law describes this as profiling;
To interact with you to encourage Packaly’s network efficiency, which is all based on our analysis of your services.
For protecting Packaly
For both the exercise and defence of legal claims and to exercise and protect the rights of Packaly, Partner retailers, customers, or others, including determining our liability;
To implement the terms of your Rider Agreement and keep records of such implementations, it is possible to analyse whether you have breached our rules set in the Terms and Conditions. This analysis may result in temporary disabling or permanently terminating your Rider agreement if we have the right to do so;
To investigate any complaints or incident reports relating to a Rider and to prevent fraud or other misuse of our systems and services.
For events and Rider initiatives
To administrate and develop Rider events and other Rider initiatives;
For Rider onboarding campaigns where you personally agree we may do so. Sometimes we use anonymous (you are not identifiable) and aggregated forms of your information in the media or in Rider onboarding campaigns;
Where we are under a legal obligation to do so we may use your information:
To keep your record of payments done by us;
To comply with any other legal obligation or regulatory requirement to which we are subject.
Direct marketing
Where we have a justifiable reason for doing so, or where you have given us the permission (and we are permitted to do so by law), we will use your information to let you know by email about Packaly’s products and services and/or any promotions from third parties which are supporting your Rider performance and experience with Packaly. These can be reducing the cost to you of providing services and by helping you to provide the services more safely. These can result in special deals we find for Riders, but also recommendations. Unsubscribing from these emails is always possible.
Automating processes
In the Rider agreement a completed delivery is equal to picking up one or more ordered orders at one of our Store Dashboard Users and delivering these. The Rider fee is only paid out when completed delivery is done. To analyse this, we collect your data and automatically confirm which deliveries you are due fees for.
In the Rider App you can choose to unassign from a delivery at any time or by contacting Rider Support. In addition, you can simply reject offers of orders freely. When you do not complete a delivery, without informing Packaly, but still claiming the delivery fee, is seen as a fraudulent activity and a serious breach of your Rider agreement.
If fraudulent activity is detected on your Rider account, our systems will automatically disable your access to the Rider App. When we temporarily disable your access, then our team is allowed to review this suspected fraudulent activity, whilst preventing it from recurring fraudulent activities. During this review, a minimum of two team members will decide in person whether the access will be reactivated or if the decision is made to end the Rider agreement due to a serious breach of the contractual terms.
Given the volume of deliveries we deal with, we use partly automated systems to improve processes described above. These automations provide a more accurate, fair and efficient way of identifying suspected fraud, preventing repeated breaches of your Rider agreement and limitate the impact of these violations. Human checks would simply not always be possible in the timeframes and given the volumes of deliveries that we deal with.
You have the right to contest the automated decisions referred to in this section by using the contact details set out in this privacy policy, in which case a person will review the decision.
With whom do we share information?
The information we collect about you will be transferred to and stored on our servers located within the EU. When sharing data globally, we are very careful and transparent about who else this data is shared with. When sharing your information internally, we may do that with other Packaly departments. Data will only be shared with external third parties, when necessary for the purposes set out in section 3.
We share your information with third party service providers who will store your information on their servers. The types of third party service providers with whom we share your information with includes:
IT service providers: including cloud, software, analytics, communications and data storage providers and software development kits.
Partner Retailers and customers: we provide limited information to Partner Retailers and customers whose orders you accept, for the purposes of our operations.
Insurance companies: if you decide to purchase third party products or services (such as insurance), or where you are enrolled into a Packaly insurance policy, you or the provider may request that we provide your information to the provider to enable them to provide the products, services or policy to you, so we will share this information for this purpose. We may also need to share your information with our insurers to establish whether we are liable for any incident you have been involved in whilst providing services to us.
Operational service providers: including feedback and survey providers, background and right to work verification and onboarding providers, our support service providers, payment providers, user research partners, professional advisors, financial services providers and other suppliers, business partners, contractors and subcontractors.
Anyone who refers you as a Rider, will be given updates about progress towards their referral fee in relation to you.
Where we have the legal right to do we will share data with the media, such as if you share any details about your Rider services for Packaly which are misleading or inconsistent with our records of your Rider services for Packaly. This is including regarding details about your earnings, we may share your information with the media (only in the form of a correction) .
In applicable circumstances, we may also share your information:
If our business enters into a joint venture with, purchases or is sold to or merged with another business entity, your information may be disclosed or transferred to the target company, our new business partners or owners or their advisors;
If we are under a duty to disclose or share your information in order to comply with (and/or where we believe we are under a duty to comply with) any legal obligation or regulatory requirement. This includes where we’re under a legal obligation to respond to police data requests or to exchange information with other companies and organisations for the purposes of fraud protection and prevention;
Where we reasonably believe that you or another person has been harmed or is at risk of harm in connection with your Rider services for Packaly;
In order to implement our contractual terms with you;
In the event of a dispute relating to your services to Packaly, or to protect the rights of Packaly, Retailers partners, customers, or others, including to prevent fraud;
With such third parties as we reasonably consider necessary in order to detect or prevent crime, for example the police;
When a Rider engages a substitute, the Rider and substitute will have access to each others’ information shown in the Rider App, such as recent deliveries and tips. If a Rider makes a request to us for access to their personal data then in our response we may provide to the Rider some personal data about the substitute, for example data relating to deliveries the substitute has worked on.
International data transfers: your personal data we collect from will not be processed outside the European Economic Area (“EEA”).
Please contact us using the contact details above if you want further information on the countries with whom personal data may be shared with.
Retention of your information
We will not retain your information for any longer than we think is necessary.
Information that we collect will be retained for as long as needed to fulfil the purposes outlined in the ‘Use of your information and why’ section above, in line with our justifiable reasons for processing or for a period specifically required by applicable regulations or laws, such as retaining the information for regulatory reporting purposes.
When determining the relevant retention periods, we will take into account factors including:
Guidelines issued by relevant data protection authorities;
Our contractual obligations and rights in relation to the information involved;
Legal obligation(s) under applicable law to retain data for a certain period of time;
Statute of limitations under applicable law(s);
Disputes or potential disputes.
In all other cases, we securely erase your information where we no longer require your information for the purposes collected.
Security
We will not retain your information for any longer than we think is necessary.
Information that we collect will be retained for as long as needed to fulfil the purposes outlined in the ‘Use of your information and why’ section above, in line with our justifiable reasons for processing or for a period specifically required by applicable regulations or laws, such as retaining the information for regulatory reporting purposes.
When determining the relevant retention periods, we will take into account factors including:
Guidelines issued by relevant data protection authorities;
Our contractual obligations and rights in relation to the information involved;
Legal obligation(s) under applicable law to retain data for a certain period of time;
Statute of limitations under applicable law(s);
Disputes or potential disputes.
In all other cases, we securely erase your information where we no longer require your information for the purposes collected.
User Rights
Under data protection law, you have multiple rights concerning the data we hold about you, listed below. If you wish to exercise any of these rights, please contact us using the contact details set out below. For additional information on your rights, please contact your data protection authority.
The right to be informed: You have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights. This is why we’re providing you with the information in this policy.
The right of access: You have the right to obtain access to your information (if we’re processing it). This will enable you, for example, to check that we’re using your information in accordance with data protection law.
The right to rectification: You are entitled to have your information corrected if it is inaccurate or incomplete.
The right to erasure: This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request to delete all information that we hold about you. The right is not absolute and only applies (not) in certain circumstances.
The right to restrict processing: You have rights to ‘block’ or ‘suppress’ further use of your information. From the moment processing is restricted by you, we can still store your information, but will not use it further.
The right to data portability: You have the right to obtain your personal information in an accessible and transferable format so that you can re-use it for your own purposes across different service providers. Since this is not a general right, there are exceptions.
The right to file a complaint: You have the right to file a complaint about the way we handle or process your information with a competent data protection authority (see Complaints).
The right to withdraw consent: If you have given your consent to anything we do with your information, for example if we rely on consent as a legal basis for processing certain information, you have the right to withdraw that consent at any time.
The right to object to processing: You have the right to raise an objection to certain types of processing, including processing for direct marketing and profiling.
You have the right to claim these rights above and to object at any time, this can be done by contacting us (See Contact Details).
Modifications to our Privacy Policy
All changes made to our Privacy Policy, will be posted to the Rider App and if possible, through notification in the Rider App or by email.
This privacy policy was last updated: 22 July 2022
Complaints
If you are not satisfied with our response to any complaint or believe our processing of your information does not comply with data protection law, you can make a complaint to the Nederlandse Autoriteit Persoonsgegevens using the following details:
Visitor address: Bezuidenhoutseweg 30, 2594 AV Den Haag
Correspondence address: Postbus 93374, 2509 AJ Den Haag
Tel: 088 1805 250
Dashboard Service: www.autoriteitpersoonsgegevens.nl
Packaly B.V., Daalsesingel 51, Utrecht, Netherlands