Gaiyo believes it is important that your personal data is handled with care. That is why we have set out in this statement how we handle your personal data and what rights you have.
Why do we collect personal data?
Gaiyo collects, processes, and manages personal data for communication with participants, as well as for measuring, analyzing, and improving the Gaiyo app, and may provide a start-up fee to participants. Whether a participant is eligible for a start-up fee can be found in the terms and conditions of participation, which include the rights and obligations that apply to participants who receive compensation.
We obtain this personal data from sources including:
All data requested from you during registration. In addition, all data collected during use of the Gaiyo app (Android and iOS). Data is also requested from the Mobility Providers that are booked with the Travel Credit. Below, we explain exactly what data we process.
What data about me is processed?
When you create an account within the Gaiyo app, the following data will be processed:
- Name, address, and place of residence as obtained during account registration;
- License plate number, driver’s license number, payment details, age group, email address, and smartphone operating system (iOS or Android) as provided by the participant when registering an account;
During the term of the agreement, the Gaiyo app collects the following data after obtaining the participant’s consent:
- GPS location records
- User interaction through screen logging while using the app
- Check-in and check-out behavior with timestamp from the Mobility Providers, obtained via the Mobility Providers.
For retention periods of participant data, please refer to the section “Retention of your personal data.”
How is responsibility assigned with regard to your personal data?
The processing of personal data is carried out in accordance with the General Data Protection Regulation (hereinafter GDPR). The party responsible for the processing of your personal data, which you can contact if you have any questions or wish to exercise your rights, is Gaiyo.
This means that Gaiyo must, in any case:
- Your personal data will be processed in accordance with the purpose for which it was provided;
- Processing of your personal data is limited to only those data that are minimally necessary for the purposes for which they are processed;
- Requests your explicit consent if we need it to process your personal data;
- Has taken appropriate technical and organizational measures to ensure the security of your personal data;
- No personal data will be passed on to other parties, unless this is necessary for the purposes for which it was provided;
Is aware of your rights regarding your personal data, we would like to point these out to you and respect them.
Who will my data be shared with?
Your personal data (name and address) will be used by Gaiyo to communicate with participants and improve the Gaiyo app. Gaiyo also uses the services of Amazon Cloud Services, Mapbox, MailChimp, SurveyMonkey, and, when contacting the Customer Contact Center (KCC), OTRS.
Your personal data (name, email, address, telephone number, and driver’s license) may also be shared by Gaiyo with affiliated Mobility Providers (see current list in the Gaiyo Terms and Conditions of Use). Personal data will only be shared when a rental or reservation is made. Only data that is strictly necessary for the use of this Mobility Provider will be shared with this Mobility Provider.
Processing agreements have been concluded between Gaiyo and its partners, service providers, and mobility providers (where necessary) to ensure the protection of your data.
Your personal data (name and bank account number) may also be shared by Gaiyo with the payment provider Mollie. With regard to the processing of this Personal Data, both Mollie and Gaiyo are responsible within the meaning of the General Data Protection Regulation. Read here how Mollie handles your privacy.
Your personal data will not be provided to third parties other than those mentioned above, unless you give your consent or there is a legal obligation to do so, for example on the basis of a legitimate claim by competent authorities.
If you also use the Gaiyo app within a third party’s account (e.g., your employer), Gaiyo will receive certain Personal Data from this third party, such as your name and email address, and Gaiyo will share certain Personal Data with this third party, such as your business travel information (e.g., locations, times, and dates). This is done, among other things, to be able to invoice this third party for the costs associated with using the Gaiyo app in a specified manner. Where necessary, a processing agreement has been concluded between Gaiyo and this third party to ensure the protection of your personal data.
Gaiyo’s partners may process your personal data in countries within the EEA. If our partners process your personal data outside the aforementioned countries, Gaiyo has ensured that such (additional) agreements are in place to guarantee the security of your personal data. The processing of your personal data will therefore always take place in accordance with the GDPR.
Submitting a complaint to the Dutch Data Protection Authority (AP)
If you believe that your privacy rights are being violated or that we are acting in violation of them, you have the right to submit a complaint to the AP. Further information can be found on the website www.autoriteitpersoonsgegevens.nl.
Security of your data
The database containing your personal data has security measures in place to ensure that information is not lost, misused, or altered without your consent. Only authorized personnel have access to your data. The database and website are adequately protected in accordance with the GDPR. This ensures that your personal data is handled correctly and carefully. Personal data is stored in pseudonymized form and cannot therefore be traced directly back to the individual.
Your data is protected by the following technical and organizational measures:
- Logical access control, using passwords;
- Automatic logging of all actions involving personal data;
- Physical measures for access security;
- Encryption of digital files containing personal data;
- Organizational measures for access security;
- Random checks on compliance with policy;
- Securing network connections using Secure Socket Layer (SSL) technology;
- A secure internal network;
- Prompt correction of inaccuracies in your personal data;
- Collaboration with renowned security systems for online payments and transactions; you can see this, for example, by the padlock at the bottom of your internet browser.
Gaiyo has appointed a data protection officer within its organization who oversees the security of your data and compliance with the provisions of the GDPR. You can contact the data protection officer at privacy@gaiyo.com.
Access to your data
You can request your personal data, as known to us, in writing via Gaiyo, Bolderweg 2, 1332 AT Almere. Please use ‘PG Gaiyo’ as the subject line and enclose a copy of your vehicle registration certificate and identity card or passport. You must cover the passport photo and social security number on the copy. The KCC will inform you in writing within four weeks whether your personal data is being processed. If so, you will be provided with a copy of the personal data being processed.
In accordance with the GDPR, you may request the KCC to correct, supplement, delete, or block the personal data in question if it is factually incorrect, incomplete or irrelevant for the purpose or purposes of your participation, or if it is otherwise processed in violation of a legal provision. You can send your request in writing to Gaiyo, Bolderweg 2, 1332 AT Almere. Please use ‘PG Gaiyo’ as the subject line. Include a copy of your vehicle registration certificate and identity card or passport and state the changes to be made or your request regarding your personal data. You must shield the passport photo and social security number on the copy.
You can delete your account in accordance with the terms and conditions of the app stores. After submitting a request to the helpdesk, your account will be blocked in the Gaiyo app within 7 working days, and your data will then be handled in accordance with the “storage of your personal data” policy.
Storage of your personal data
Personal data of participants who have created an account will be stored for up to 10 weeks after the end of the account, unless you explicitly consent to the data being stored for longer.
The purpose of retaining the data for another 10 weeks is:
- Identify analysis and learning moments of the Gaiyo app;
- Improvement of Gaiyo services;
- Processing payments,
Depending on the reversal conditions of the payment provider used, this retention period may be extended to a maximum of 26 weeks after the last transaction.
Data used for learning applications may be retained for longer for statistical purposes. This data is anonymized and therefore cannot be traced back to an individual.
Cookies
Cookies are placed on our Gaiyo website. Cookies are small text files. These cookies are used to improve the functioning of our website and to monitor web traffic. This allows us to determine, among other things, how many people have visited the website in a given period. We use this data exclusively in aggregate form, and therefore anonymized, so that it cannot be traced back to any individual person.
Our own tracking cookies
With your permission, we place a cookie on your device, which can be retrieved as soon as you visit a website from our network. This allows us to know that you have visited other websites in our network in addition to our website. The profile built up in this way is not linked to your name, address, email address, etc., but only serves to tailor advertisements to your profile so that they are as relevant to you as possible.
Cookie settings in your browser
You can adjust your browser’s cookie settings yourself to refuse or accept certain cookies. Almost all browsers have a ‘Help’ function that provides information on how to adjust your cookie settings.
Questions and further information
For all your questions about Gaiyo, including related questions about the General Data Protection Regulation, please contact Gaiyo’s KCC at support@gaiyo.com.
An overview of answers to frequently asked questions can be found at https://gaiyo.com/faq/.
This Privacy Statement was last amended on: March 5, 2026.
Download the privacy statement in Dutch here.