EUMOSA Privacy Policy

• Account and contact data: name, email, international telephone number, language, country and city.
• Membership and transaction data: brand memberships, orders, points, coupons and activity.
• Role and work data: registrations, qualifications, organisations, Workspaces, tasks, documents and reviews.
• Technical and security data: IP address, device, browser, sessions, login records and audit logs.
• Communications and consent records: support, invitations, notifications, terms versions and marketing preferences.

We process data to create and maintain accounts, provide My EUMOSA, operate membership and project features, verify eligibility, manage permissions, process transactions, support users, prevent fraud, improve services and comply with law.

Depending on the context, we rely on contract performance, consent, legal obligations, legitimate interests in security and service operation, or another available lawful basis. Marketing consent may be withdrawn at any time.

Telephone numbers support account contact, security verification, notifications and future optional quick-identification features. The last four or five digits alone are not secure authentication. If QR quick sign-in is introduced, it will be combined with an OTP, PIN or another verification method.

Data is shared only as necessary with the brands, branches, organisations or project participants you join, and with bound IT, payment, email, cloud, analytics and professional-service providers. Brand A should not access detailed Brand B data without a lawful basis and appropriate authority.

Where data is transferred outside the EEA, we use an EU adequacy decision, Standard Contractual Clauses or another lawful safeguard and assess supplementary measures where required.

We keep data only as long as needed for its purpose, account maintenance, contracts, disputes, security or legal retention. Retention varies by data type. When no longer needed, data is deleted, anonymised or restricted.

Subject to applicable law, you may request access, correction, deletion, restriction, objection, portability and withdrawal of consent, and complain to a supervisory authority. Some rights depend on the legal basis and statutory exceptions.

EUMOBOT may assist with summaries, matching, reminders, risk signals and ranking. Where automated decisions would have significant legal or similar effects, we will provide appropriate information, human intervention and a way to contest them.

Essential cookies support login, session, language and security. Analytics or marketing cookies are used with consent where required. Preferences can be managed through browser or future cookie settings.

We use reasonable measures such as access control, transport encryption, password hashing, audit logs, backups and anomaly monitoring. No system is absolutely secure. If a personal-data incident requires notification, we will handle it in accordance with applicable law.

We may update this policy for feature or legal changes. Material updates will be communicated reasonably. You may also complain to the data-protection authority in your country or in the Netherlands.

The data controller for the EUMOSA platform is EUBRANCH BV, Willem Elsschothove 12, 3437BN Nieuwegein, the Netherlands; KVK 30276777; VAT NL821701587B01.

Data-controller contact: Mr. Chang Chih-Kuang; email: hc@eubranch.eu; telephone: +31621713000. A brand, branch or professional partner may separately act as a controller for data it independently collects.