Privacy statement account

Innovactory International B.V. (hereinafter referred to as: Innovactory) considers it important that your personal data is handled with care. That is why we have explained in this statement how we handle your personal data and what rights you have. Why do we collect personal information? Innovactory collects, processes and manages personal data for communicating with participants as well as measuring, analyzing, improving the Gaiyo app and possibly giving a starting fee to participants. Whether a participant is eligible for a startup fee can be found in the terms of participation, which set out the rights and obligations that apply to participants who receive a startup fee.   We obtain this personal information, among other things: All data requested from you during registration. In addition, all data collected during the use of the App Gaiyo (Android and iOS). Usage is also requested from the mobility providers which are booked with the travel credit. Below is explained which data we process exactly. Welke gegevens worden van mij verwerkt? When you create an account within Gaiyo, the following data about you will be processed: Name, address and place of residence as obtained during account registration; Name, ZIP code+home number, age group, email address, whether you have a car and operating system of smartphone (iOS or Android) as specified by the participant when signing up for an account; The Gaiyo App collects during the running time with the consent of the participant: – Gps ride registrations – GPS motion registrations – Userineraction through screen logging while using the App Check-in and check-out behavior with timestamp from the Mobility Providers, obtained through the Mobility Providers. For retention periods of participants’ data, please refer to subsection “Retention of your personal data”. How is the person responsible invested with regard to your personal data? The processing of personal data is carried out in accordance with the General Data Protection Regulation (hereinafter AVG). The party responsible for the processing of your personal data to which you can turn for questions or for exercising your rights is Innovactory. This implies that Innovactory in any case: Process your personal data in accordance with the purpose for which it was provided; Processing of your personal data is limited to those data that are at least necessary for the purposes for which they are processed; Requests your explicit consent if we need it for the processing of your personal data; Has taken appropriate technical and organizational measures to ensure the security of your personal data; No personal data will be passed on to other parties, unless this is necessary for carrying out the purposes for which they have been provided; Is aware of your rights regarding your personal data, wants to inform you about them and respects them. To whom will my details be provided? Your personal data (name and address) will be used by Innovactory and marketing partners (i.e. Roorda) to communicate with participants and to improve the Gaiyo app. Gaiyo also uses the services of Amazone Cloud services, Mapbox, MailChimp, SurveyMonkey and Helpscout. Innovactory may also share your personal information (name, email, phone number, and driver’s license) with affiliated Mobility Providers (see current list in the Terms and Conditions). Personal information is shared only when a rental or reservation is made. Data will only be shared with this Mobility Provider that is strictly necessary for the use of this Mobility Provider. Processing agreements have been concluded between Innovactory and its partners and service providers and Mobility Providers (where necessary) to ensure the protection of your data. Your personal data will not be disclosed to third parties other than those mentioned above, unless you give your consent or there is a legal obligation to do so, e.g. based on a legitimate claim from competent authorities. Innovactory’s partners may process your personal data in countries within the European Union, Norway, Liechtenstein and Iceland. If our partners process your personal data outside the aforementioned countries, Innovactory has ensured that (additional) agreements are made to ensure the security of your personal data. In all cases, your personal data will be processed in accordance with the General Data Protection Regulation. Addtional consent sharing data “TNO research” If you use Gaiyo you will get information about movements. This data is shared by Gaiyo with TNO, commissioned by the Ministry of Infrastructure and Public Works to research Mobility as a Service (MaaS). Gaiyo makes part of this program MaaS. Through an addtional permission in the settings menu you can give permission to share your Gaiyo travel data with TNO. The aim of MaaS is to offer all types of transport to travellers in one service. The ministry and the MaaS service providers want to understand how different types of transport (own car, public transport, own bike, shared bikes and motorbikes, rental and shared cars, cabs, etc.) can be better connected. They also want to investigate the effects of the Gaiyo app on, for example, CO2 emissions, traffic jams and other policy goals and services. In addition, the results of the research will be used to improve the services provided to travellers (and therefore also the service through Gaiyo to make it better for you. These actions take place through TNO. You can revoke the additional permission at any time in the settings menu, from that moment on no data will be shared with TNO anymore. Data provided to TNO will NEVER be directly traceable to you. In addition, TNO secures your data so that your privacy is properly protected. (More information about the TNO research can be found here)   Security of your data The database containing your personal information has security features that ensure that information is not lost, misused, or altered without your consent. Only authorized personnel have access to your data. The database and the website are adequately protected in accordance with the AVG. This ensures that your personal data is handled correctly and carefully. Personal data will be stored in a pseudonymized manner and therefore cannot be directly traced to the person. Your data will be protected by the following technical and organizational measures: Logical access control, using passwords; Automatic logging of all operations concerning personal data; Physical access security measures; Encryption of digital files containing personal data; Organizational measures for access security; Random check of compliance policies; Security of network connections via Secure Socket Layer (SSL) technology; A secure internal network; Rapid correction of inaccuracies in your personal information; Collaboration with reputable security systems for online payments and transactions; you can see this by the padlock at the bottom of your internet browser. Innovactory has appointed a data protection officer within its organization, who oversees the security of your data and compliance with the provisions of the AVG. You can contact the data protection officer at   Access your data You can request your personal data, as known to us, in writing via Innovactory, Bolderweg 2, 1332 AT Almere. Use the subject ‘PG Gaiyo’ and send a copy of your registration certificate and identity card or passport. On the copy you need to shield the passport photo and the BSN. The Customer Contact Center will inform you in writing within four weeks whether your personal data will be processed. If applicable, you will be provided with a copy of the personal data being processed. You may, in accordance with the GTC, request the Client Contact Centre to correct, supplement, delete or block the personal data in question if they are factually inaccurate, incomplete or irrelevant for the purpose or purposes of your participation, or are otherwise processed in violation of a statutory provision. You can send your request for this in writing to Innovactory, Bolderweg 2, 1332 AT Almere. Use ‘PG Gaiyo’ as subject. Enclose a copy of your registration certificate and identity card or passport and state the changes to be made or your request regarding your personal data. On the copy you need to shield the passport photo and the BSN.   Retention of your personal data Personal data of participants who have created an account will be kept for a maximum of 8 weeks after the end of the account, subject to your explicit permission to keep the data longer. The goal is to keep the data for a maximum of 8 weeks: Determine analysis and learning moments of the Gaiyo app; Improvement services Innovactory; Data used for learning applications may be retained longer for statistical purposes. This data is anonymized and can therefore not be traced back to a person.   Cookies Cookies are placed on our Gaiyo website. Cookies are small text files These cookies are used to make our website function better and to monitor web visits. This allows us, among other things, to track how many people have visited the website in a certain period of time. We only use this data in an aggregated, and therefore anonymized, way, so that this data cannot be traced back to a person. Tracking cookies of ourselves With your permission, we place a cookie on your equipment, which can be retrieved as soon as you visit a website from our network. This allows us to know that you have been on other websites in our network in addition to our website. The resulting profile is not linked to your name, address, email address, etc., but only serves to tailor advertisements to your profile so that they are as relevant to you as possible”. Cookie settings in your browser You can adjust the cookie setting of your browser to refuse or accept certain cookies. In almost all browsers, you can find the information to adjust the cookie settings via the ‘Help’ function of that browser. Questions and more information For all your questions about Gaiyo, including related questions about the General Data Protection Regulation, please contact Gaiyo’s Customer Contact Center at An overview with answers to frequently asked questions can be found at This Privacy Statement was last amended on: 22 March 2022.