Privacy Policy - eClub Leden

Last updated: 27-05-2025

1. Introduction

This privacy policy explains how we handle personal data within our mobile application ("eClub Leden"). We value your privacy and process your data in accordance with applicable privacy legislation, including the General Data Protection Regulation (GDPR).

2. Access to the App

The app is not publicly accessible. Only users who are created by system administrators can gain access. Access is granted exclusively through secure, pre-configured user accounts, using a login procedure that meets high security standards.

3. Personal Data We Process

The following categories of personal data may be processed within the app:

• First and last name
• Email address
• Login credentials (processed securely via an identity management platform)
• Contact details
• Subscription information
• Contract details
• Reservations (including dates and locations)
• Invoice details
• Messages sent or received through the platform

4. Purposes of Data Processing

We process your data for the following purposes:

• Enabling access to the app via secure login
• Displaying and allowing updates to your personal details
• Managing reservations (creating, viewing, deleting)
• Providing insight into subscriptions, contracts, and invoices
• Delivering system and service-related messages
• Generating QR codes for secure physical access, where applicable

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data against loss, unauthorized access, or unlawful processing. Authentication and login procedures are handled through a secure identity management system that follows industry-standard security protocols.

6. Data Retention

We retain personal data only as long as necessary for the purposes mentioned above, unless a longer retention period is required or permitted by law.

7. Sharing Data with Third Parties

The personal data displayed in this app is accessed via an API provided by a third-party SaaS platform. This platform enables various organizations to manage and expose their customer data. However, the third-party provider of the platform is not the data controller for the personal data itself.

Each organization using the SaaS system is independently responsible for the personal data of its own customers. Our app serves solely as a user interface, acting as a conduit between the user and the data stored in those systems. We do not alter, enrich, or store the data beyond what is required for authentication and secure access.

If you have questions about the content of your data, or if you wish to exercise your rights under the GDPR, please contact the organization that granted you access to the app, as they are the data controller responsible for your information.

8. Data Processors

To provide our services, we make use of external service providers who process personal data on our behalf and under our instructions, in compliance with Article 28 of the GDPR.

Current data processor:

• Xploration - Provides the infrastructure and API used to access user data through the app. This provider acts strictly as a processor and does not determine the purposes or means of processing.

9. Your Rights

Under the GDPR, you have the following rights:

• The right to access your data
• The right to rectify or erase your data
• The right to restrict processing
• The right to data portability
• The right to object to processing

You can submit a request to exercise these rights via privacy@kuqiware.nl

10. Changes to this Privacy Policy

We reserve the right to update this privacy policy at any time. We recommend that you review this policy regularly.

11. Contact

If you have any questions about this privacy policy or the processing of your personal data, please contact us at:

Kuqiware

De Veldkamp 12
8172 XE Vaassen
The Netherlands

privacy@kuqiware.nl