Privacy policy

Who processes your data

The business you are a customer of is the data controller: it decides on the programme. Fidelio acts as a processor, on its behalf and following its instructions.

What we collect

Only what the loyalty programme requires:

• Your first name — to personalise the card;
• Your phone number — to recognise you at the counter and avoid duplicates;
• Your date of birth, optional — only if the business offers something for your birthday;
• Your activity in that business — stamps, visits, amounts and rewards.

No app is installed on your phone: the card is added to Apple Wallet or Google Wallet, which are already there.

Why, and on what basis

• Running the programme — crediting visits, triggering rewards: this is the performance of the service you asked for at the counter;
• Notifying you on your card — reward available, birthday offer, reminder before expiry: the business's legitimate interest, which you can stop at any time by removing the card from your wallet;
• Improving the service, from aggregated statistics that cannot identify you.

Cookies

The site uses one technical cookie remembering your answer to the banner, and analytics cookies only if you accept them. Refusing degrades nothing: the site works just the same.

Who has access

Your data is neither sold nor rented. Access is limited to: the business you are a customer of, and our strictly necessary technical providers — hosting, Apple and Google wallet, payment — bound by the same confidentiality obligations.

For how long

As long as you remain a member of that business's programme. After that, your data is deleted within a reasonable time — when the business closes its account, or at your request.

Your rights

The GDPR gives you rights of access, rectification, erasure, restriction, objection and portability. To exercise them, contact the business concerned, or write to us directly at fidelio.carte@gmail.com.