Guest Privacy Notice

Who is responsible

The café you joined. It's their loyalty programme, their reward, and their decision what to collect. Under Serbian data protection law they are the controller.

Looppass is the machinery behind it. The platform is run by EARTH PR, Tošin Bunar 116, Novi Beograd, Serbia. We handle your data on the café's instructions and never for our own purposes.

In practice: if you want your data deleted, write to either of us (the café, or us) and we'll pass it to whoever needs to act on it.

What we collect

When you join: the name and email address you type in.

As you use the card: how many visits you've made and when, whether you've earned a reward and when you claimed it, and whether you agreed to hear about offers.

If the café asks you to review it: we record that the ask went out and, if you tap it, that a tap happened and where from (the email or the card). We never learn what you wrote, or whether you wrote anything at all; Google doesn't tell us. The QR code on the table records only that someone tapped, with nothing that leads back to you.

Automatically, to make it work: your card's identifier (the random string behind the QR code) and, if you add the card to a wallet, a technical device identifier, so we know where to send the update when you earn a stamp.

That's the lot. No phone number, no date of birth, no home address. We don't track you around the web and we run no advertising cookies.

Why, and on what basis

• Issuing your card and recording stamps: performance of a contract, it's the service you asked for.
• Emailing you the card: performance of a contract.
• Checking an address is really yours when it's already enrolled: legitimate interest, so nobody else walks off with your card.
• Rate limits and abuse prevention: legitimate interest.
• Sending you the café's offers: your consent, and only if you gave it.
• Asking you once to review the café: your consent, the same one as for offers, and only if you gave it. We ask at most once, and never again.

Consent to offers is separate from the card itself. Your stamps work without it, and you can withdraw it whenever you like: from the button on the back of the card in your wallet, or by replying to any email we send.

Who else sees it

The café you joined sees your name, your address and your visit count. Other cafés on Looppass see nothing about you; the data is separated per venue.

To run the platform we use service providers who process data on our behalf: Vercel (hosting and image storage, Frankfurt), Neon (database, Frankfurt), Upstash (rate limiting, EU), Resend (sending email, Ireland) and Clerk (café owner sign-in).

If you add the card to Apple Wallet or Google Wallet, the card's contents also reach Apple or Google. From that point they handle it under their own privacy policies, which we don't control.

We do not sell your data and we don't hand it to anyone for advertising.

Where it lives

On servers in the European Union, in Germany and Ireland. EU member states are on the Serbian Government's list of countries providing an adequate level of protection, so no separate consent is needed for that transfer.

Apple and Google process the card outside the EU, under their own terms.

How long

For as long as you're a member of that café's programme. Ask for deletion and we delete without delay. If a café stops using Looppass, its data is deleted within 30 days.

Visit records may survive in anonymised form, with nothing that leads back to you, because the café uses them as statistics.

Your rights

You have the right to:

• know what we hold about you and get a copy,
• correct anything wrong,
• delete your data,
• restrict or object to the processing,
• take your data elsewhere,
• withdraw consent at any time, without giving a reason.

Write to the café or to us. We answer within 30 days. hello@looppass.app

If you think something's wrong, you can complain to the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11120 Belgrade, office@poverenik.rs.

Children

Looppass isn't meant for children. If we find that someone under 15 has joined without a parent's consent, we delete the record.

Changes

If we change this notice, we change the date at the top. If a change is significant, we'll email you about it.