Privacy policy

1. Who we are

Skanare is a digital loyalty card platform for shops. For any privacy question, contact us at hello@skanare.gr.

2. Who is responsible for the data

If you hold a shop’s loyalty card: the controller is the shop that gave you the card. Skanare processes the data on its behalf as a processor (Article 28 GDPR), only to run the card.

If you are a shop using Skanare or a visitor to skanare.gr: Skanare is the controller.

3. What data we process

For card holders:

• Full name and mobile number (and email, if you give it).
• Card history: stamps, points and rewards, with date and time.
• Whether and when you agreed to receive offers.
• Whether the card is in Google Wallet, and a technical notification identifier if you turn on phone notifications.
• Your preferred language.

We do not ask for your address, date of birth or payment details, and we do not record your location. If a shop turns on the “nearby reminder”, the shop’s location is sent to Google Wallet and your phone checks on its own whether you are close; your own location never reaches us or the shop.

For shops: email, password (stored only as an Argon2id hash), shop details, staff names and an activity log for security.

For security we temporarily record IP addresses in system logs, to prevent attacks and abuse.

4. Purposes and legal basis

• Running the card (stamps, rewards, showing the card): performance of the agreement between you and the shop (Art. 6(1)(b) GDPR).
• Offers and notifications: only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• Security and abuse prevention: legitimate interest (Art. 6(1)(f) GDPR).

5. Who we share it with

We do not sell data and do not use it for advertising. We only use the following providers, as far as needed to run the service:

• ProHoster: hosting of our servers in the Netherlands (EU).
• Google: if you add the card to Google Wallet, Google receives your full name, card balance and the card’s QR code.
• Apple, Google, Mozilla, Microsoft: if you turn on notifications, your phone’s or browser’s push service delivers them. The content is sent encrypted.
• Cloudflare: DNS service for our domain name.

Some of these providers may process data outside the EU. In that case the transfer relies on GDPR safeguards such as the European Commission’s Standard Contractual Clauses or the EU-US Data Privacy Framework.

6. How long we keep it

Card data is kept while the card is active. The shop can delete your personal details at any time; we then keep only anonymous statistics (e.g. that a stamp was given, without showing to whom). Encrypted backups are deleted automatically after 14 days. System logs are kept for a limited period.

7. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, and you can withdraw your consent to offers. You can turn off notifications directly from your card.

For your card, contact the shop, or us at hello@skanare.gr and we will pass it on. You can also lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

8. Cookies

The skanare.gr website uses no cookies and no analytics. The app at app.skanare.gr uses only one essential sign-in cookie for shops and their staff. There are no advertising or third-party cookies.

9. Minors

The card is intended for people aged 15 and over, in line with the age limit that applies in Greece to information society services.

10. Changes

If this policy changes, we will publish the new version on this page with a new date.