Dyme Privacy Policy

Latest version: October 2021.

Dyme always puts your privacy first. In this privacy statement you will be informed, among other things, about the personal data that Dyme processes, for what purposes it is processed and what rights you have regarding your data.

Dyme ensures that:

• We always clearly state with what purposes we process personal data. We do this via this privacy statement;
• We limit our collection of personal data to only the personal data necessary for the stated and approved (by you) purposes;
• We always ask for explicit permission to process your personal data in cases where your permission is required;
• We take appropriate security measures to protect your personal data and also require this of third parties that process your personal data in regards to our service;
• We respect your right to and will provide your personal data for inspection, correction or deletion at all times.

About Dyme

By linking your bank account once, you get a clear and concise overview of your financial situation. Dyme will look for better options, when you want, on all your favourite subscriptions. When you want to cancel, switch or negotiate a contract, you just have to indicate this in the application. Dyme does the rest!

Dyme B.V. is a private company with limited liability with the address Amstel 228, 1017AK Amsterdam, the Netherlands, registered with the Chamber of Commerce under number 71904387.

From whom are personal data processed?

Dyme processes personal data from:

• Dyme users.

For which goals are which personal data processed?

Creating an account

Dyme processes the following personal data to create an account on the Dyme platform:

• E-address
• First Name
• Last name

Providing an overview of the financial situation

To make a link with your bank and to show an overview your financial situation, Dyme processes the following personal data:

• Financial data regarding your transactions, balance or bank account
• Information related to your income and expenses (such as the description, counterparty or time of the transactions)

Cancelling a subscription

Dyme processes the following personal data for terminating subscriptions:

• Name, address and place of residence
• E-mail address and telephone number
• Financial transactions
• Financial data relating to your recurring expenses
• Specific details of subscriptions you want to cancel

The purpose of this is to cancel subscriptions by Dyme on behalf of the user. In addition to personal data, specific data are sometimes required per subscription type that only relate to the relevant subscription. Examples of specific data include: energy consumption, amount of people in the household, membership number, gym location code, amount of lottery tickets (this list is not an exhaustive list). The information required to cancel a subscription is shared with the provider where the subscription is running if this is necessary to process the cancellation. Users are informed about this and permission is requested when they want to use this service. In addition, users give permission to Dyme to perform this service.

Transfer subscriptions to other providers

Dyme processes the following personal data for the switching of subscriptions:

• Name, address and place of residence
• E-mail address and telephone number
• Financial transactions
• Financial data relating to your recurring expenses
• Specific details of subscriptions that you want to transfer

The purpose of this is to switch subscriptions to another provider on behalf of the user. In addition to Personal Data, additional information is sometimes required to handle this request. The information needed to switch will be shared with these parties if this is necessary to process the switch. All parties are held by Dyme to this privacy agreement.

Transfer subscriptions to other providers

Dyme processes the following personal data for the switching of subscriptions:

• Name, address and place of residence
• E-mail address and telephone number
• Financial transactions
• Financial data relating to your recurring expenses
• Specific details of subscriptions that you want to transfer

The purpose of this is to transfer subscriptions to another provider by Dyme on behalf of the user. In addition to personal data, specific data are sometimes required per subscription type that only relate to the relevant subscription. Examples of specific data include: energy consumption, amount of people in the household, membership number, gym location code, amount of lottery tickets (this list is not an exhaustive list). The information required to switch the subscription is shared with the provider where the subscription runs if this is necessary to process the switch. Users are informed about this and permission is requested when they want to use this service. In addition, users give permission to Dyme to perform this service.

Negotiate subscriptions with your current provider

Dyme processes the following personal data for the negotiation of subscriptions:

• Name, address and place of residence
• E-mail address and telephone number
• Financial transactions
• Financial data relating to your recurring expenses
• Specific details of subscriptions that you want to negotiate

The purpose of this is to negotiate subscriptions with Dyme on behalf of the user with the current provider. In addition to personal data, specific data are sometimes required per subscription type that only relate to the relevant subscription. Examples of specific data include: energy consumption, amount of people in the household, membership number, gym location code, amount of lottery tickets (this list is not an exhaustive list). The information needed to negotiate the current subscription is shared with the provider where the subscription is in progress if necessary to process the negotiation. Users are informed about this and permission is requested when they want to use this service. In addition, users give permission to Dyme to perform this service.

Storage of personal data

Dyme processes personal data on the basis of your permission. You can withdraw your consent at any time. Dyme never stores your personal data for longer than is necessary to achieve the aforementioned goals. Furthermore, when you delete your account, Dyme automatically removes all data. Dyme will delete your personal data when the account is deleted or the consent is withdrawn

Special categories of personal data and personal data relating to criminal convictions and offences

Dyme obtains explicit consent to process personal data for a specific purpose. This purpose is to provide an overview of the financial situation and to provide insight into all fixed costs that you pay on a weekly, monthly or annual basis. Within the GDPR legislation, a distinction is made between different categories of personal data. Special categories of personal data and personal data relating to criminal convictions and offences have an important position within this legislation. The following personal data falls within these categories:

• personal data showing political views;
• personal data showing religious or ideological beliefs;
• personal data showing membership of a trade union;
• payment details showing that a fine must be paid;
• information about a person's health;
• data about a person's sexual behaviour or sexual orientation;
• personal data showing race or ethnic origin;
• Genetic data; and
• biometric data for the purpose of uniquely identifying a person.

Transaction data may contain special personal data or personal data relating to criminal convictions and offences, if this can be deduced from the counterparty or the description at the payment. For example; a payment for membership of a political party or workers' union or a gift to a church authority. In addition, any administrative sanctions such as fines could also be visible in the transaction data.

Dyme's activities are not aimed at processing special or criminal personal data. However, it cannot be ruled out that such data may be among the data received by Dyme via the bank connection.

Sharing personal data with third parties

Dyme will never sell or misuse your personal information. To cancel, negotiate or switch plans, information is shared with the subscription provider. To establish a link with banks that are not registered in the Netherlands, Dyme uses the technology of Tink AB. Tink is a PSD2 certified company from Sweden that ensures that transaction data is received through a secure connection.

Improving our services and product

We solely collect event data in order to improve our service. To this end we automatically collect information from your browser or device when you visit our Service. This information could include your IP address, device ID and type, your browser type and language, the operating system used by your device, access times, and the referring website address. This makes it possible to customise and improve your user experience on both our web and app platform.

We embed so-called pixel tags (also called web beacons or clear GIFs) on web pages, ads, and emails. These tiny, invisible graphics are used to access cookies and track user activities (such as how many times a page is viewed). This technology enables us to learn which blogs and pages are most popular, so that we can generate more relevant content. We also use it to determine which email messages are most appreciated by our users.

When you use the Dyme application, we use mobile device IDs (the unique identifier assigned to a device by the manufacturer), or Advertising IDs (for iOS 6 and later), instead of cookies, to recognize you. Unlike cookies, device IDs cannot be deleted. Platforms that we might share this data include Firebase, Mixpanel, Hotjar and Microsoft. Analytics companies use device IDs to track information about app usage. This enables us to store your preferences and track your use of our app. We use this data to determine which features of our application are most often used. We then try to develop features that are similar.

Data obtained through Account Information Services ("connecting to your bank account") will never be shared.

Evaluating the effectiveness of our advertisements

We may share data with a number of service providers, advertising companies and ad networks, in order to optimize our advertisements. Platforms that we might share event data with include Facebook, Airship, Pinterest, Apple, Appsflyer, Amplitude, Google, Snapchat and Adtraction. This concerns, for example, the ID number of your mobile device or your e-mail address. Platforms that we might share this data with include Facebook, Airship, Pinterest and Snapchat. This enables us to make sure we only show advertisements to people who are actually interested in using our product.

Data obtained through Account Information Services ("connecting to your bank account") will never be shared.

Your rights

Users have a number of important rights:

Right of access, correction, deletion

You have the right to view, correct or delete your personal data.

Right to be forgotten

In certain cases you have the right to be forgotten. Dyme will then delete your personal data and any third parties to whom personal data have been provided will also be request to do this.

Right to object

In certain cases you have the right to oppose the processing of your personal data. Dyme will no longer process your personal data when you invoke the right to object.

Right to data portability

You have the right to transfer your personal data to for example other services. When you request this, Dyme will provide you with your digital data in a transferable and machine-readable form.

Revoke permission

Once you have given permission for the processing of your personal data, you can revoke the consent given by you at any time. Please note that withdrawing your consent does not have retroactive effect.

If you wish to submit a request regarding the above rights, you can send an email to support@dyme.app. State in the mail exactly what your request is and, if possible, what personal data it concerns.

Dyme will handle a request within one month. When it comes to a complex request, however, up to two months extra can be taken. If this is the case, you will be informed about this within one month.

Automated decision making and profiling

There is no automated decision making or profiling.

Cookies

Dyme uses cookies for the website. More information regarding these cookies can be found in our Cookie Policy.

Contact

support@dyme.app.

Complaints

In the case of a complaint, contact can be made via support@dyme.app. In case of complaints regarding data, you can also contact the Autoriteit Persoonsgegevens.

Changes to this privacy statement

Dyme reserves the right to change this privacy policy when there are internal or external developments. The most recent version can always be found at https://dyme.app/en/privacy-policy. Users will always receive a notification when this privacy statement is changed.