Privacy Policy Last updated: September 2026
Who Are We? Humming is a sustainable discount card platform operating in the Netherlands. We are responsible for the processing of your personal data as outlined in this privacy policy.
Contact Details • Website: https://hummingcard.com • Privacy Contact: [email protected]
What Personal Data Do We Process? When you use our app and services, we process the following information:
• Your full name, profile bio, and avatar/profile picture
• Your email address
• Location and address details (such as your city or faculty location)
• Your transaction history and accumulated sustainability points at partner locations
Why Do We Process Your Data? We use your information to:
• Provide and display your digital discount card and personal profile
• Process transactions and track your points at partner locations
• Display personalized content and partner offers
• Send our newsletter (exclusively when you have given explicit consent)
• Inform you of important updates regarding our services
How Long Do We Retain Your Data? • Account and administrative records: 7 years (due to legal and fiscal record-keeping obligations)
• Email address for the newsletter: Until you choose to unsubscribe
• Location data: Active during use; log data is retained for a maximum of 30 days
• App usage and preferences: Maximum of 2 years
Sharing Data with Third Parties We share your personal data exclusively with third parties if:
• It is strictly necessary for the execution of our services (such as secure cloud infrastructure via Supabase)
• We are legally obligated to do so
• You have given prior explicit consent
Data Processing Within the European Union All data processing takes place strictly within the European Economic Area (EEA). If data processing ever occurs outside the EEA in the future, it will be done solely under appropriate and legally recognized safeguards.
Cookies and Tracking We use functional cookies (retention period: 2 years) to remember your preferences and ensure the app functions smoothly. Additionally, we use analytical cookies (retention period: 26 months) to measure and improve our platform's performance. You can disable cookies at any time through your browser or device settings.
Minors Our services are not specifically targeted at individuals under the age of 16. If you suspect that we have collected information from a minor without parental consent, please contact us immediately at [email protected] so we can delete that data.
Your Privacy Rights Your rights under GDPR include:
• Accessing your personal data
• Correcting or updating your data
• Requesting the deletion of your data ("Right to be Forgotten")
• Withdrawing previously given consent
• Objecting to the processing of your data
• Requesting your data for transfer to another organization (data portability)
How to Exercise Your Rights For any requests or questions regarding your data, you can send an email to [email protected]. We respond to all requests within 1 month. For complex requests, this period may be extended by up to 2 months, and we will notify you within the first month if an extension is needed.
Complaints If you have a complaint regarding how we handle your personal data, you have the right to contact the national privacy regulator, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Security We implement appropriate technical and organizational measures to protect your personal data securely against loss, theft, misuse, or unauthorized access.
Changes to This Privacy Policy This privacy policy may be updated periodically to reflect new regulations or changes to our services. The most current version will always be available on our website.