Privacy
Your association is the controller of its member data. We process it on your behalf, under a processing agreement.
Who is responsible
Under the GDPR (AVG) your association is the controller and we are its processor. We sign an Article 28 processing agreement (verwerkersovereenkomst) with each association, usually on the NLdigital Data Pro Code model, including what happens at the end and how data is deleted.
What we store
- Per member, what the card shows: name, membership type, status, role, design, member number and stamps.
- Group and committee memberships, read from Genkgo to work out the role on the card.
- The trips and events a member took part in, and door check-ins.
- Partner scans: which partner, when, and the result.
- For Apple Wallet updates: device registrations and their push tokens.
- A member’s own answer about their graduation year, if they give one.
- No member contact details: no email address, phone number or postal address. Email addresses, including extra lookup addresses, are kept only as keyed hashes (HMAC), so a member can ask for their card link by email. The address itself is fetched from Genkgo when a mail is sent.
- Staff logins (admins and partner staff): their email address and a password hash.
Read-only access to Genkgo
We read through a service account that your association creates and can revoke. Nothing is written back to Genkgo.
Genkgo snapshots
A full Genkgo snapshot does hold contact details, so it is off unless you ask for it. If you switch it on, the agreement states how long snapshots are kept.
Sub-processors
- Hetzner
- Runs the server, in Nuremberg, Germany (EU).
- Mail provider
- Sends card links and the launch mail. Agreed per association: your own mail domain, or ours with your name.
- Apple
- Tells iPhones that a card changed. Apple sees push tokens only.
- Stores the Google Wallet card: the fields shown on its front and back (such as name, membership, member number, role, committee, trips and events, member since, and the graduation year on alumni cards) and the stamp banner. Nothing more: no email address or other contact details. Google’s terms let it use submitted information to improve its products.
This website
No cookies, no analytics and no requests to other servers: even the font is served from here. The configurator reads your logo in your browser and never uploads it.
When you stop
At the end of the agreement we delete your association’s data, as the processing agreement sets out.