Privacy Statement

Texaco PILOT Mobile App – Privacy Statement

Effective: November 2024

  • Introduction

We (EG Retail (Netherlands) B.V.) are committed to protecting your privacy. This privacy statement (the “Statement”) explains the steps we, as the data controller, take to protect personal data collected through this mobile app and our corresponding website https://texaco.nl/.  It describes what categories of personal data we collect, the purposes for which we use those data, your choices regarding use of personal data about you, our security measures, and how you can review and correct data about you.  By accessing this mobile app (the “App”), you acknowledge and understand this Statement.

  • Data Collection

We collect and use the following types of personal data about you:

  • Account Registration Data (i.e., personal data you provide to sign up for and use the App, which includes only your name and email address);
  • Voluntary Mobile Data (e.g., with your consent, we collect additional personal data from your mobile device (e.g., your precise mobile device location) to provide you with features/functionality that will enhance your experience with the App);
  • Payment Data (e.g., personal data associated with purchases you make through the App, which includes information such as name; credit or debit card type, expiration date, and certain digits of your card number; postal code; mobile phone number; and details of your transaction history through the App);
  • Marketing Data (e.g., personal data you provide so that we can send you marketing communications via email, while using the mobile app and/or direct from a third party);
  • Transaction Information (e.g., we collect transaction details related to your use of our services, including the type of service requested, date and time the service was provided, amount charged, distance traveled, and other related transaction details; and
  • Log Information (e.g., when you interact with the App, we collect server logs, which includes information like device IP address, access dates and times, app features or pages viewed, app crashes and other system activity, type of browser, and the third-party site or service you were using before interacting with our App).

 

NOTE: We do not process biometric data.  If you elect to log in to the App using biometric data, we will ask your device’s operating system (to the extent this functionality is supported and authorized by you in your operating system settings) to verify your identity (or, as applicable, reject unauthorized users).  If you elect to log in to the App using biometric data, you consent to our relying on your device’s operating system in this manner.

  • Use of Personal Data (purpose and legal bases)

When you use or interact with the App, we and our service provider(s) use a variety of technologies to process the personal data you provide and that we collect about you for various reasons.  The purposes and the legal bases relied upon when we process your personal data include the following:

Purpose Legal bases
To understand how you access and use the App to ensure the App’s technical functionality, to develop new products and services, and to analyze your use of the App, including your interaction with applications, advertising, products, and services that are made available, linked to, or offered through the App Legitimate interests to run, develop and customize your experience on our website and our App
To deliver and communicate with you on App-related products and services Is necessary for performance of a contract so that you can use the App
To process your payments to prevent or detect fraud including fraudulent payments and fraudulent use of the App Compliance with legal obligations and our legitimate interests to ensure the security of our website and App
To provide you with features, information, advertising, or other content which is based on your specific location Legitimate interests to send direct marketing to existing customers for similar services/products.

Explicit consent to send direct marketing for other services/products or to potential customers.
To comply with legal obligations, legal process and protect our rights and/or those of third parties Compliance with legal obligations

 

  • Disclosure of Personal Data

Any and all of your personal data that we have in our possession will be shared only with the categories of recipients outlined below (as required):

  • Service Providers and Others (e.g., we use (i) technical service providers which operate the technical infrastructure for the App, and which host, store, manage, and maintain the App, its content, and the data we process; (ii) marketing and advertising partners to show you more tailored content, or to help us understand your use of the App to provide you with a better service; and (iii) certain marketing and advertising partners to send you promotional communications about us);
  • Our Partners (e.g., (i) if you access the App through an offer that you received or purchased from a third party, we share personal data with that third party about your use of the App, such as whether and to what extent you have used the offer, activated an account on the App, or actively used the App; (ii) we also share your personal data in an anonymized or pseudonymised format with our industry partners to help them understand how the products they sell are performing via the App; and (iii) we also share your personal data in an anonymized or pseudonymised format with marketing partners who help us with promotional efforts and with advertisers);
  • Law Enforcement and Data Protection Authorities (e.g., we will share your personal data when we in good faith believe it is necessary for us to do so to comply with a legal obligation under applicable law, or respond to valid legal process, such as a search warrant, a court order, or a subpoena, or believe that it is necessary for our own, or a third party’s legitimate interest relating to national security, law enforcement, litigation, criminal investigation, protecting the safety of any person, or to prevent death or imminent bodily harm); and
  • Purchasers of our business (e.g., if we share your personal data in those cases where we sell or negotiate to sell our business to a buyer or prospective buyer, we will continue to ensure the confidentiality of your personal data and give you notice before your personal data is transferred to the buyer or becomes subject to a different privacy statement or privacy policy).

 

  • International Transfers of Personal Data

In order to enable the App to function we share your personal data within the European Economic Area (“EEA”) with other companies in the group and/or to our service provider(s) to carry out the activities specified in this Statement.  We also subcontract processing to, or share your personal data with, third parties located in countries outside the EEA.

Where we do transfer, or store, personal data outside the EEA, we shall ensure that it is done in accordance with applicable data protection laws and will rely on appropriate transfer safeguards, including the Data Privacy Framework (US only) and EU Standard Contractual Clauses. Details of these appropriate transfer safeguards can be requested by contacting us using the details set out in Section 10 of this Statement.

For further details of the security measures we use to protect your personal data, please see Section 7 of this Statement.

  • Personal Data Retention

We keep your personal data only as long as necessary to provide you with the App and for our legitimate business purposes, such as maintaining the performance of the App and making data-driven business decisions about new features and offerings. We keep some of your personal data (e.g., your account information) for as long as you are a user of the App.

We may retain your personal data after the date it is no longer necessary to provide you with the App and after you have requested its deletion or anonymization in the following situations:

  • If there is an unresolved issue relating to your account, such as an outstanding credit on your account or an unresolved claim or dispute we will retain the necessary personal data until the issue is resolved;
  • Where we are required to retain the personal data for our legal, tax, audit, and accounting obligations, we will retain the necessary personal data for the period required by applicable law; and/or,
  • Where necessary for our legitimate business interests such as fraud prevention or to maintain the security of our users.

 

  • Security

We are committed to protecting our users’ personal data.  We implement appropriate technical and organizational measures to help protect the security of your personal data; however, please note that no system is ever completely secure.  We have implemented various policies including anonymization, pseudonymisation, encryption, access control, and retention policies to guard against unauthorized access and unnecessary retention of personal data in our systems.

Your password protects your user account, so we encourage you to use a unique and strong password, limit access to your device and browser, and log out after having used the App.

  • Children

Only persons aged 18 or older have permission to access the App. The App is not directed to children under the age of 18 years.

We do not knowingly collect personal data from children under 18 years of age.  If you are under 18 years of age, please do not use the App, and do not provide any personal data to us.

If you are a parent of a child under 18 years of age and become aware that your child has provided personal data to us, please contact us to exercise your applicable rights detailed in the “YOUR RIGHTS” Section 9 of this Statement.

If we learn that we have collected the personal data of a child under the age of 18 years, we will delete the personal data, which requires us to delete the App account for that child.

  • Your Rights

To the extent provided by the law of your jurisdiction, you may have the right to (i) access your personal information we maintain about you; (ii) request that we update, correct, amend, erase or restrict your personal information; and (iii) exercise your right to data portability.  Where provided by law, you may (iv) withdraw consent you previously provided to us and (v) object at any time to the processing of your personal information (where we rely on legitimate interests as the legal basis of processing) or in relation to marketing.  In the event that we are unable to apply your preferences, it may be necessary for us to disable and/or delete your App account and destroy and/or return to you the personal data that we have in our possession or control that relates to you.

To exercise these rights, please contact us via one of the means specified in the “How to Contact Us” Section 10 of this Statement.

To help protect your privacy, we take reasonable steps to verify your identity before granting access to your information.

In the event you consider our processing of your personal information not to be compliant with applicable data protection laws, you can lodge a complaint by sending an email to the Data Protection Officer at the addresses provided in the “How to Contact Us” Section 10 of this Statement.  Depending on your location, you may also have the right to file a complaint with a government regulator if you are not satisfied with our response.  The name and contact details of the Dutch Data Protection Authority is: Autoriteit Persoonsgegevens, Bentinck Huis; Hoge Nieuwstraat 8, 2514 EL Den Haag, Nederland, autoriteitpersoonsgegevens.nl/een-tip-of-klacht-indienen-bij-de-ap.

  • How to Contact Us

If you have any questions, complaints, or objections concerning this Statement and/or our processing of personal data, please contact us dpo@eg.group.

  • Changes to this Statement

We may occasionally update this Statement.  When we do, we will revise the “effective” date at the top of this Statement.  You should revisit this page periodically to become aware of the most recent privacy terms; your use of the App after such changes have been posted constitutes your agreement to such changes.

12) THIRD PARTY CONTENT

Our website and/or App may contain links to third party websites. The links are provided for your convenience. Please be aware that this Statement does not apply to those third party websites nor do we have control over the content of linked third party websites. We encourage you to read the data protection notices and terms and conditions of linked or refer