Legal · EU / Netherlands
Under the General Data Protection Regulation (GDPR), you have clear rights over your personal data. Here is what they mean in plain language.
Last updated: 26 June 2025
You can request a copy of all personal data we hold about you. We will provide this in a readable format within 30 days of your request.
If any of the data we hold about you is inaccurate or incomplete, you can ask us to correct it at any time.
You can request that we delete your personal data — the "right to be forgotten". We will comply unless we are required to retain it by law (e.g. financial records).
You can ask us to pause processing of your data while a dispute is resolved, or where you believe the processing is unlawful.
You can request your data in a structured, commonly used, machine-readable format and have it transferred to another controller.
You can object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will stop immediately.
Where processing is based on your consent (e.g. newsletters, birthday offers), you may withdraw consent at any time by contacting us or using the unsubscribe link in emails.
If you believe we have processed your data unlawfully, you have the right to lodge a complaint with the Dutch Data Protection Authority: Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
Exercise Your Rights
To make a data request — access, erasure, portability, or any other right listed above — email us with your name and the email address associated with your loyalty pass or merchant account.
Frequently Asked Questions
OnUsClub B.V., incorporated in the Netherlands, is the data controller for personal data collected through our platform. For consumer loyalty data, the relevant merchant may also act as a joint controller.
When you use an OnUsClub loyalty pass, we may collect your name, email address, phone number, date of birth (if you opt in to birthday rewards), and your stamp/reward history. See our Privacy Policy for full details.
Date of birth is only collected if you explicitly opt in to receive birthday rewards from a merchant. It is used solely to trigger a birthday reward notification. You can withdraw consent at any time.
We use the Google Pay Passes API to provision and update loyalty passes on your device. Your name and email are shared with Google to create the pass. We do not receive any payment data from Google Wallet.
Consumer loyalty data is retained for the duration of the programme plus 12 months. You can request deletion at any time by emailing support@onusclub.com.
No. OnUsClub does not sell personal data to any third party. Data is shared only with the merchant whose programme you participate in and with our sub-processors (e.g. Google, Stripe) as necessary to operate the service.