Security

Members’ data, protected from the start

We store the minimum, show the minimum and log everything. And the data always belongs to the association.

The data

• In the European UnionThe database is on servers in the European Union.
• ID numbers, never in fullOnly the last digits and an encrypted fingerprint for manual checks are stored. The full number cannot be recovered.
• Only what’s neededThe card page shows what’s needed to identify the member: not the address, the phone number or the full ID number.
• Out of search enginesCard pages don’t show up in search engines, and each QR code carries a random code that can’t be guessed.

Who has access

• Personal accessEach board member has their own access and role. When someone steps down, one click removes it.
• Activity logWho changed what, and when, is logged, and so are card lookups.
• Support, only when neededIf you ask us for help and we need to enter your back office, it’s recorded in the activity log.
• Limits against abuseLookups and sign-in attempts are rate-limited, so nobody can try codes at random.

Your rights

• Your data is yoursYou can export all of it whenever you like.
• Data processing agreementThe association is the controller of members’ data and we are the processor, under an agreement that governs it.
• Members’ rightsWe help you handle members’ requests: access, correction or deletion.
• If you leaveWe hand over your data and delete it within the agreed period.

Frequently asked questions