Privacy Statement

Planvyo ("we", "us") takes your privacy seriously. In this statement we explain which personal data we collect, why, and what rights you have. This privacy statement applies to use of the Planvyo service and the website https://planvyo.com.

1. Who is responsible for your data?

Planvyo is a sole proprietorship and the data controller within the meaning of the General Data Protection Regulation (GDPR) for the processing of personal data described in this statement.

Contact details:

• Trade name: Planvyo
• Address: Palestinastraat 300, 6418 HS Heerlen, the Netherlands
• Chamber of Commerce no.: 88806642
• VAT no.: NL004656786B80
• General email: info@planvyo.com
• Privacy contact: privacy@planvyo.com
• Website: https://planvyo.com

For questions about this privacy statement or the processing of your personal data, you can always contact privacy@planvyo.com.

2. Which roles do we distinguish?

Planvyo is a scheduling and planning tool for employers and their staff. We distinguish three groups of users:

• Account holders (customers): employers or entrepreneurs who subscribe to Planvyo.
• Planners: persons who create and manage schedules on behalf of the account holder.
• Employees: persons for whom schedules are made and who have access to their own schedule and availability.

For account holders and planners who create an account themselves, Planvyo acts as data controller. For personal data that account holders enter into Planvyo about their employees, Planvyo acts as processor; in that case the account holder is the data controller. These arrangements are set out in our Data Processing Agreement.

3. Which personal data do we process?

3.1 From account holders and planners

• Name and email address
• Company name, Chamber of Commerce number and billing address
• Login credentials (password is stored encrypted)
• Payment data (processed by Stripe; we do not store full credit card numbers)
• Communication with our support team
• Service usage data (logins, actions in the app)

3.2 From employees (entered by the account holder)

• Name and email address
• Worked and scheduled hours
• Availability
• Schedule-related notes

3.3 From website visitors

• IP address
• Browser type and device information
• Pages viewed and click behaviour
• Data collected via cookies (see Cookie Policy)

4. Why do we process this data and on which basis?

Purpose	Legal basis (GDPR)
Providing and operating the Planvyo service	Performance of the agreement
Invoicing and collecting payments	Performance of the agreement / legal obligation
Customer service and support	Performance of the agreement
Improving our service	Legitimate interest
Security and fraud prevention	Legitimate interest
Compliance with legal obligations (such as tax retention)	Legal obligation
Marketing and analytics via cookies	Consent
Sending service emails (e.g. password reset, invoice)	Performance of the agreement

5. Where is your data stored?

Planvyo runs on our own hardware colocated at the Cellnex data centre in Amsterdam (the Netherlands). Our database also runs on this own hardware. This keeps your data within the Netherlands and within the European Economic Area (EEA).

For backups we use Hetzner, with backup storage within the EU.

6. With whom do we share your data?

We never sell your data. We only share with parties that are necessary for our service. These are our sub-processors:

Sub-processor	Purpose	Location
Stripe Payments Europe, Ltd.	Payments and subscriptions	EU/US (with Standard Contractual Clauses)
Hetzner Online GmbH	Backup storage	Germany (EU)
Google Ireland Ltd. (Google Analytics)	Website statistics	EU (with data routing via US, only with consent)
Meta Platforms Ireland Ltd. (Meta Pixel)	Advertising measurement	EU/US (only with consent)

In addition we may share data with competent authorities where legally required. A current list of sub-processors is available upon request via privacy@planvyo.com.

7. How long do we retain your data?

We do not retain personal data longer than necessary:

• Account data: as long as you have an active account, plus a maximum of 12 months thereafter.
• Employee data in the app: as long as the account holder manages it in Planvyo. Upon cancellation of the account, it is deleted within 30 days, unless requested earlier.
• Invoices and payment data: 7 years, pursuant to tax retention obligations.
• Support tickets: a maximum of 2 years after closure.
• Analytics data: in accordance with Google Analytics settings, with a default retention of a maximum of 14 months.

8. Security

We take appropriate technical and organisational measures to protect your data, including:

• Encrypted connection (TLS/HTTPS) for all traffic
• Encrypted storage of passwords (hashing)
• Role-based access control
• Regular backups
• Monitoring of suspicious activity
• Physical security of our hardware colocated at Cellnex Amsterdam

Should a data breach occur despite our measures, we report it within 72 hours to the Dutch Data Protection Authority and — where legally required — to the data subjects.

9. Your rights

Under the GDPR you have the following rights:

• Access: you may ask which data we hold about you.
• Rectification: you may have incorrect data corrected.
• Erasure: you may request deletion of your data ("right to be forgotten").
• Restriction: you may request processing to be restricted.
• Portability: you may receive your data in a common format.
• Objection: you may object to processing based on legitimate interest.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time.

Are you an employee and has your data been entered into Planvyo by your employer? Then direct your request to that employer first. That employer is the data controller for that data.

Send requests to privacy@planvyo.com. We respond within 30 days. We may ask to verify your identity before processing a request.

If you believe we are not handling your data properly, you can file a complaint with the Dutch Data Protection Authority at autoriteitpersoonsgegevens.nl.

10. Cookies

Our website uses cookies. Read more in our Cookie Policy.

11. Changes

We may update this privacy statement. The most recent version is always on https://planvyo.com. For material changes we inform account holders by email.