Which personal data do we collect from you?
- When you register and create a user account on the platform, we process the following data: Full name, user name, mobile phone number, street address, city, postal code, email address and password.
- When you register and create a user-courier account on the platform, we process the following data: Full name, user name, mobile phone number, street address, city, postal code, email address, password, tax identification number (TIN), copy of identity card/passport.
- Delivery & payment details: Details for creating delivery/pick-up requests (as specified in the relevant form) and delivery and payment history (transaction amount, transaction date, payment method). Loopster never receives nor processes card details.
- When you contact us, we process your full name, email address and the content of your message/communication.
- In the event of a complaint, reservation or compensation request, we process the claimant’s contact details and capacity, the shipment code and necessary shipment and payment details, the description of the incident, the relevant communication, the necessary evidence of damage or purchase or replacement value, any declaration designating another beneficiary and the decision and payment details. Bank account details are requested only if needed for payment. The data may concern a sender, recipient or beneficiary even without an account on the platform. Full card details, CVV or PIN are not requested as evidence for a claim. Where you do not provide them to us yourself, the necessary sender or recipient details originate from the user who registers the shipment.
- Data we collect through Cookies. For more information, please refer to our Cookies Policy.
Who controls and processes your pesonal data?
- The Data Controller of your data is “Loopster Private Company”, a company located in Marousi, Athens, Greece, at Grammou 71 Street, 15124 and with V.A.T. Number 802658620.
- Our platform is hosted by Microsoft Azure on servers located in the European Union. If you contact us via email, your data is stored within the European Union on Microsoft infrastructure.
- We use the services of Stripe Payments Europe Limited, which acts as a Data Processor for the execution of electronic transactions.
- The authorized company’s employees and associates process your data. Claim details are disclosed only to the extent necessary to authorized personnel, the Rider involved or a partner locker for the investigation, to the relevant payment provider for payment, to advisers and competent authorities and, where relevant coverage exists, to the insurer. Access is limited to the respective purpose and is protected in accordance with each recipient’s legal obligations.
All the above-mentioned parties are bound by confidentiality obligations.
Why and on what legal basis do we process your data?
- For the performance of a contract and to provide you with the requested services.
- To maintain our platform and the process through which we provide our service secure, based on our legitimate interests.
- To continuously improve our website and provide you with the best possible browsing experience, based on your consent.
- To contact you upon your request, based on our legitimate interests.
- To comply with any legal obligations (e.g. tax legislation). We process the necessary details for investigating complaints, calculating and paying regulatory compensation and lawfully cooperating with EETT and other competent authorities, on the basis of our relevant legal obligations. Performance of agreed additional coverage is based on the corresponding contract with the person who is a contracting party. Any additional necessary retention for legal claims is based on our appropriately balanced legitimate interest.
How long do we keep your data for?
- We retain your data until you delete your account. For shipment, complaint or claim data, the specific provision below applies.
- We will keep any payment records for 15 years, to comply with our legal obligations, stemming from the applicable tax legislation.
- If you contact us, we will retain the communication and its meta-data until you ask us to delete it, unless it needs to be retained for a longer period or for legitimate reason or for our compliance with a legal obligation.
- For shipment, complaint or claim data, account deletion or a request to delete communication does not entail deletion of details that remain necessary for the investigation, payment, compliance with a legal retention obligation or support of a pending legal claim. These details are retained with restricted access until completion of the respective purpose and the applicable legal periods and suspensions of deletion, with a review of necessity. The specific retention periods for shipment, complaint and incident records follow the applicable Postal Services Confidentiality Assurance Policy and the EETT and ADAE framework. After their expiry, the data are securely deleted or anonymized.
- For cookies retention periods, please refer to our Cookies Policy.
Which rights do you have?
You may ask us:
- To provide you with a copy of the personal data we keep for you
- To correct some data if it is not correct
- To erase your data
- To stop processing your data or delimit its processing to certain uses
- To send your data to another company or entity via logical means
- To withdraw your consent if you have provided it to us (e.g. for the use of cookies).
How can you exercise your data rights?
If, at any time, you would like to exercise your rights or ask any question regarding your personal data, please refer to us via email at info@loopster.gr
We will respond to you within 30 days from reception of your request.
If you believe that your personal data is not adequately protected, you may file a complaint with the Hellenic Data Protection Authority (www.dpa.gr)