Privacy Policy

Loylogic Rewards FZE whose registered address is Dubai Airport Freezone Authority, PO Box 293805, Dubai United Arab Emirates is the controller with respect to processing pursuant to this Notice and the Site is owned and operated by it. For any questions you may have in relation with the processing of your personal data or when executing your data protection rights, you can contact us by email at: customersupport@loylogic.com.

Our EU representative for data related queries is Loylogic AG Latvia branch, registration number: 40103284489, legal address: Ernesta Birznieka-Upīša iela 21, Rīga, LV-1011.. If you have any questions about how we handle data with respect to this Notice you can contact us by email at: privacy@loylogic.com.

For our customers in Switzerland: Our Swiss representative for data related queries is Loylogic Inc, registration number: CHE.112.228.154, legal address: Seestrasse 78, 8703 Erlenbach, Switzerland. If you have any questions about how we handle data with respect to this Notice you can contact us by email at: privacy@loylogic.com.

In order to enable us to set up your account on our Site we have been provided with certain personal data by the organisation which has offered you Ultimate Points (the “Ultimate Partner”) who has provided us with certain personal data about you, including your name and email address. The Ultimate Partner is a data controller in their own right and by sharing this information with us, confirm that they have your consent to do so. We will provide you with an option to opt out of any communications with us if you do not wish to register as a Member of the Ultimate Program or for us to contact you.

If you register as a Member, we will collect certain other personal information about you, as described further in this Privacy Notice.

Depending upon your use of our Services, we may collect some or all of the following personal and non-personal data (please also see section 6 on our use of Cookies and similar technologies):

• personal details (e.g., name, date of birth, gender);
• contact information (e.g., telephone number, address details, country of residence, e-mail address);
• information on your use of Ultimate (e.g., your shopping behaviour, your payment behaviour and your use of points or cash portion, invoicing and reporting details);
• general payment information such as credit / debit card details;
• technical information (e.g., IP address, web browser type and version, operating system; list of URLs starting with a referring website, your activity on Our Site, and the website you exit to);
• other data you provide to us, for example by completing your account with us or through an online survey;
• data we collect from third parties or publicly available sources, for example the internet, data brokers etc.

Such data may also include sensitive data, i.e., data that requests higher protection. We will usually not process such information unless you give your prior explicit consent thereto.

You are at no time obliged to provide us with your personal data. However, should you not wish to provide the information we ask you for you may not be able to use all of our Services.

When provisioning our Services, we may use your data in order to:

• provide you with our Services (incl. payment card transactions within the Ultimate Program);
• co-ordinate with Ultimate Partners;
• allow us to improve our services to you or to develop new services;
• authenticate your identity;
• reply to communications you send to us;
• analyse your use of our Site and gather feedback to enable us to continually improve our Site and personalise user experience;
• provide you with personalised marketing materials by email, telephone, SMS and/or by post, but only where you have given us your permission to do so.

Our use of your personal data will only be processed on a lawful basis, either because it is necessary for entering into or the performance of a contract with you, because you have consented to our use of your personal data, or because it reflects a legal requirement or is necessary for legitimate interests. When we base processing of your personal data on legitimate interest, this primarily refers to our interest to provide you with our Services, to run, monitor and improve our business activities (incl. cooperating with business partners and our holding company, Loylogic Holding AG, and its affiliates and subsidiaries), generating statistics and anonymous data about your use of the Services, engaging in the sale purchase of assets or companies.

"Automated individual decision making" relates to decisions which are based solely on automated means and which result in negative legal effects or other similarly negative effects on you. We will inform you separately if we make automated individual decisions and provided that such information is required by law.

"Profiling" means a process by which personal data is processed automatically to evaluate, analyse or predict personal aspects, e.g. work performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements. We carry out profiling, e.g. when analysing purchasing behaviour, in the selection of job applicants, in the examination of contractual partners, etc.

We may process your personal data based on such processes, in particular in the context of our marketing activities or customer relationship management.

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer's hard drive. Our Site use cookies to distinguish you from other users of our Site. This helps us to provide you with a good experience when you browse our Site and also allows us to improve our Site.

Before cookies are placed on your computer or device, you will be shown a pop-up requesting your consent to set those cookies. By continuing to browse our Site or where you provide consent separately (for example for delivering targeted ads on other websites you may visit), you are agreeing to our use of cookies.

We use the following cookies:

• Strictly necessary cookies: These cookies are necessary for the Site to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.
• Performance cookies: These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site and will not be able to monitor its performance.
• Functionality cookies: These cookies enable the Site to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies, then some or all of these services may not function properly.
• Targeting cookies: These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.
• Social Media Cookies: These cookies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies you may not be able to use or see these sharing tools.

Cookies are destroyed once they are no longer necessary for their purpose. You do not have to allow us to use cookies, and you can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, whilst our use of them does not pose any risk to your privacy or your safe use of Ultimate, it does enable us to continually improve Ultimate, making it a better and more useful experience for you, and if you block all cookies you may not be able to access all or parts of our site.

We may also use other technologies to collect information about the use of our Site, such as Local Storage, and similar technologies.

Our Site may contain links to third party website some of which may also use cookies and other technologies. This Notice does not cover third party website which will be subject to their own privacy and cookies policies. We do not have access to or control over cookies or other features used by such website. Please contact them directly for more information about their privacy practices.

This Site uses Google Analytics, a web analysis service of Google Inc. and Google LLC ("Google"). Google uses cookies and other technologies to collect and analyze information about the use of this Site and in order to provide services to us. Google may collect data about your browser, your provider, visited pages and duration of visits, your IP address, device identifiers (e.g., Android Advertising Identifier or Advertising Identifier for iOS), etc. The information generated about your use of this Site is usually transferred to a Google server in the USA and stored there. However, as IP anonymisation is activated on this Site, Google will shorten your IP address within the European Union or European Economic Area beforehand. In exceptional cases the full IP address will be transmitted to a Google server in the USA and shortened there. For these cases Google relies on the European Commission’s model contract clauses. On behalf of the operator of this Site, Google will use this information to evaluate your use of the Site, to compile reports on Site activities and to provide the website operator with further services associated with website and Internet use.

You may refuse the use of cookies by selecting the appropriate settings on your browser (sec. 6.4). You can also prevent Google from collecting the data generated by the cookie and relating to your use of the Site (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en

We use Google Analytics to analyse and regularly improve the use of our Site. Through the obtained statistics we can improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google relies on the European Commission’s model contract clauses.

Third Party Information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

• Terms of Use: https://marketingplatform.google.com/about/analytics/terms/us/
• Privacy Notice: https://policies.google.com/privacy?hl=en

Our websites use AddThis plug-ins. These plug-ins allow you to log in to our sites and to bookmark or share interesting content with other users. Through the plug-ins we offer you the possibility to interact with the following social media networks: Facebook, Google+, Twitter, LinkedIn and Pinterest. This allows us to improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6(1) sentence 1 lit. f GDPR.

Using these plug-ins, your Internet browser establishes a direct connection to the AddThis servers and the selected social networking or bookmarking service, if applicable. The recipients receive information that you have accessed the corresponding website of our online offer and the data mentioned under section 3 of this policy. This information is processed on AddThis servers in the USA. When you send content on our website to social networks or bookmarking services, a link can be established between visiting our website and your user profile on the relevant network.

The providers store this data as user profiles and use it for the purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation takes place in particular (even for unlogged-in users) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website.

If you do not wish to participate in this process, you can object to the collection and storage of data at any time by setting an opt-out cookie with effect for the future: http://www.addthis.com/privacy/opt-out. Alternatively, you can set your browser to prevent the setting of a cookie.

For more information about the purpose and scope of data collection and processing by the plug-in and social media providers please refer to their data protection declarations as noted below. They will also provide you with further information about your rights in this regard and setting options to protect your privacy.

• AddThis LLC, 1595 Spring Hill Road, Sweet 300, Vienna, VA 22182, USA, www.addthis.com/privacy
• Facebook Inc., 1601 S California Ave, Palo Alto, CA 94304, USA; http://www.facebook.com/policy.php
• Google Inc., 1600 Amphitheater Parkway, Mountainview, CA 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de
• Twitter, Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA; https://twitter.com/privacy
• LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA; http://www.linkedin.com/legal/privacy-policy
• Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland; https://policy.pinterest.com/en/privacy-policy

We may co-ordinate with third parties in the provision of your selected Services to you (e.g., your loyalty program provider(s), Ultimate Partners, payment service providers, financial institutions, and suppliers). These parties may process your personal data to supply services to you on our behalf as well as for their own purposes. In that case, these parties act as separate controllers, and you are invited to review their privacy notices to learn more about their processing.

We may also share your data with other companies in our group for the provision of some of the services, for example, payment processing as well as for their own purposes. This includes our holding company, Loylogic Holding AG, and its affiliates and subsidiaries.

Third parties (including Ultimate Partners and service providers) whose content appears on our Site may use third party cookies. Please refer to section 6 for more information on controlling cookies.

We may share your personal data with third parties based on your separate consent.

We may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of our business. Any personal data that you have provided will, where it is relevant to any part of our business that is being transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this Notice, be permitted to use that data only for the same purposes for which it was originally collected by is.

We may compile statistics about the use of our Site including data on traffic, usage patterns, user numbers, sales, and other information. We may from time to time share such data with third parties such as prospective investors, affiliates, partners, analytics service providers and advertisers. Data will only be shared and used within the bounds of the law.

In certain circumstances, we may be legally required to share certain data held by us, which may include your personal data, for example, where we are involved in legal proceedings, where we are complying with legal requirements, a court order, or a governmental authority.

In case that we share and transfer your personal data with third parties (incl. other group-companies) that are located outside of Switzerland and/or of the European Economic Area (“the EEA”) (e.g., United Arab Emirates or India, but potentially world-wide) we will take all reasonable steps to ensure that your data is treated as safely and securely as it would be under the data protection law applicable to respective processing in Switzerland or within the EEA. In such cases, we will ensure data protection with standard contractual clauses for data transfers to third countries issued and approved by the EU Commission and/or the Federal Data Protection and Information Commissioner (FDPIC), as accordingly amended and adapted to local circumstances. If you wish to receive a copy of these clauses, please contact us (cf. section 1 above). We may transfer personal data to such countries without standard contractual clauses where we are expressly authorized by applicable law, for example with your separate consent, where disclosure is directly connected with the conclusion or performance of certain contracts, for important reasons of public interest or to establish, exercise or defend legal claims.

According to the applicable law, you may have the right to:

• request access to your personal information.
• request correction of the personal information that we hold about you if it is inaccurate.
• request erasure of your personal information if there is no good reason for us continuing to process it.
• ask us to stop processing personal information (where we are relying on a legitimate interest) if you wish to object to processing on this ground.
• withdraw your consent to processing of your personal data.
• request the restriction of processing of your personal information.
• request the transfer of your personal information to another party.
• lodge a complaint with the competent data protection supervisory authority in the EEA or in Switzerland with the FDPIC.

If you wish to use one of your rights, you can e-mail us at privacy@loylogic.com. You can also contact us by mail, see sec. 1 above.

In particular, you may withdraw your consent in relation with direct marketing measures and request us to remove your information from our marketing database entirely by emailing, writing or calling us using at the contact details above. However, such withdrawal does not affect the lawfulness of former processing. Whenever we contact you for direct marketing communications (e.g. to send you an email newsletter which you have requested) you will normally find an email or other address at the bottom of the email, which you can use to tell us that you no longer wish to receive the newsletter or other communication in question.

Servicing emails sent to you are triggered automatically when you use the Site, for example, when you make a purchase or if you add items to a wish list. If you do not wish to receive service triggered emails, you must request stop using the Site and request deletion of your membership.

Securing your personal and non-personal information is very important to us and we take the necessary technical and organizational measures in order to ensure an adequate level of data protection appropriate to the risk that is related to a respective processing. In particular, all customer databases are held in a secure environment and (except for law enforcement authorities in limited circumstances), only our employees or other persons who need access to your information in order to perform their duties are allowed such access.

Where you are using our Site, we attempt to provide for the secure transmission of your information from your computer to our servers by utilising encryption software. However, due to the inherent open nature of the Internet, we cannot guarantee that communications between you and us will be free from unauthorised access by third parties, such as hackers.

Our Site utilise SSL certificate-based encryption on pages where secure information is transmitted over the Internet. All critical information is encrypted using AES 256 algorithm and stored.