Privacy statement

Privacy Policy

Guzco B.V. and all its affiliated companies ("Guzco", "we", "us" or "our") take the careful handling of your ("User" or "you") personal data very seriously.

As a data processor for the processing of personal data, we ensure that personal data is handled and protected with the utmost care.

Guzco complies with applicable laws and regulations, of which the General Data Protection Regulation (GDPR) is the most important.

Please read this privacy statement ("Privacy Statement") before you use the Guzco services ("Services") consisting of: the website guzco.ai ("Website"), the Guzco platform for dispute management, chargeback handling and fraud prevention ("Platform"), and all related dashboards, integrations and applications (Website and Platform together "Services").

By using the Services through the organization you work for or trade with ("Customer") you agree to the contents of this Privacy Statement. Through this Privacy Statement, you are provided with insight into the data we collect, why we collect this data and what we do with this data.

1. The data Guzco processes, on which grounds and for which purposes

To provide the Services and enable Customer to manage disputes and chargebacks and prevent fraud, we process personal data on the grounds and for the purposes set out below.

A. Grounds

Guzco acts as a data processor, while Customer acts as data controller. We have concluded a data processing agreement between Guzco and Customer. Therefore, we rely on the legal grounds that Customer has determined for the personal data we process.

B. The data we process, and the purposes for processing

We process the following data to provide the Services. If you do not wish to provide (some of) this information, you will not be able to use (part of) the Services.

B1. Purpose: creating a user account

In order to provide Customer with access to the Platform and the associated dashboards, we process the following personal data of Customer's employees:

Name
E-mail address
Job title or role within the Customer's organization

B2. Purpose: dispute management, chargeback handling and fraud prevention

In order to handle disputes and chargebacks on behalf of Customer, build evidence packages, and perform risk analysis, we process the following personal data of Customer's customers:

Name and contact details (address, phone number, e-mail address)
Order, transaction and payment information
Delivery and shipping information
IP address and device information
Communications between Customer and its customers relevant to disputes
Personal data retrieved from integrated systems, such as order management systems, payment service providers, carriers, and customer support tools

B3. Purpose: improving risk models and fraud detection

To improve the quality of our risk prediction and fraud detection, we use the data mentioned in B2 in anonymized or aggregated form. Personal data is not used for this purpose unless it cannot be traced back to an individual.

B4. Purpose: monitoring & analysis

We use personal data to monitor the availability and security of the Platform, to prevent fraud, to analyze how the Platform is used, and to detect and correct bugs in the Platform. For this purpose we process the personal data mentioned in B1 and B2, and IP address.

B5. Purpose: compliance with legislation

Guzco may be required to process personal data for purposes other than those set out in this Privacy Statement in order to comply with applicable local legislation, for example for law enforcement or in case of a court order. Guzco will contact Customer regarding these requests in accordance with the data processing agreement.

B6. Purpose: customer service

Depending on your question, we may use personal data mentioned in this section to provide customer service.

2. Retention period of personal data

We retain personal data in accordance with the data processing agreement between Guzco and Customer, and in any case no longer than is permitted under applicable law. During the contract term between Guzco and Customer, personal data will be retained to provide the Services. After termination of the agreement with Customer, personal data will be returned or deleted within a period of 30 days. This period is required for fraud prevention and abuse detection, and to ensure that the full deletion and/or anonymization process has been completed. If you have any questions about the retention period of your personal data, please contact us.

Please note that Guzco may keep collected data in an aggregated and anonymous form for (market) research, analysis and/or fraud prevention, as long as it is guaranteed that the data cannot be traced back to a natural person.

3. Subprocessors and data residency

To provide the Services, we have engaged service providers who operate parts of the Platform. If those service providers process personal data under our agreement with them, they are listed as subprocessors and we have concluded a data processing agreement with them.

Our services are mainly managed and operated from the European Economic Area (EEA). If, however, personal data is provided to a third party outside of the EEA, this will only be done to a third party in a country which, according to the European Commission, provides a level of protection that is appropriate for personal data. If this level of protection is not adequate, Guzco shall ensure that the legally required safeguards are in place, such as the EU Standard Contractual Clauses.

The current list of subprocessors is available on request. To request our most recent list of subprocessors, or for further information about the transfer of personal data abroad, please contact info@guzco.ai

By using our Services, or otherwise providing information to us, you agree to the transfer of your personal data to countries outside the Netherlands where applicable safeguards are in place.

4. Use of cookies

Guzco uses cookies on the Website. By clicking "Ok" on the cookie notification on our Website, you consent to the storage of cookies. A cookie is a small file that a website stores on your hard disk via the browser. Information is stored in a cookie. Different types of cookies can be used per visit. Below, you find more information about the cookies used by and via the Website and for what purposes.

5. What types of cookies are used on the Website and for what purpose

The Website uses the following types of cookies for the purposes listed below:

Analytical cookies: these cookies are anonymous and allow Guzco to improve the Website. These cookies collect information about the way visitors use the Website, such as information about the most frequently visited pages or the number of displayed error messages. The information collected by these cookies is not used for marketing purposes and will not be passed on to third parties.

Session cookies: session cookies are used during your visit and are automatically deleted when you close the browser. Through these cookies we can remember which parts of our Website you viewed during a visit and we coordinate our Services accordingly.

Social media cookies: these are cookies to share the content of our Website via social media. For the functioning of these buttons, social media cookies are used from the social media parties, so that they recognize you when you want to share a page of the Website. For the cookies that the social media parties place and the possible data they collect, we refer to the statements that these parties provide on their own websites.

Tracking cookies: with your consent, Guzco or a third party uses tracking cookies to track your visit to the Website and possibly other websites in order to build a profile of you. These cookies may be used to show ads tailored to your preferences.

Other/unforeseen cookies: due to the way the internet and websites work, Guzco may not always have insight into the cookies that third parties place via our Website. This is especially the case when our web pages contain so-called 'embedded elements' (texts, documents, images or films stored with another party but displayed on, in or via our Website).

6. Customize cookie settings or delete cookies

If you do not want Guzco to place cookies on your (mobile) device, you can refuse the use of cookies through the settings or options of your browser. For each browser and each (mobile) device, you have to adjust your settings separately. It is possible that after modifying the cookie settings, some parts of the Website can no longer be used (correctly). When Guzco has placed cookies, you can also delete them. How to do this differs per browser. If necessary, consult the help function of your browser. More information about cookies can be found at www.youronlinechoices.eu.

We kindly ask you to notify us if you find a cookie used on the Website that is not mentioned above.

7. Security

We do everything we reasonably can to protect your personal data. Guzco uses technical and organizational security measures to protect the personal data managed by Guzco against manipulation, loss, destruction and unauthorized access. These safety measures are continuously improved in line with technological developments. For example, all communication to and from the Platform is TLS protected. Personal data is encrypted at rest. Access to personal data is restricted on a need-to-know basis and protected by multi-factor authentication. The Platform is continuously updated with the latest security patches.

The Platform may contain links to external websites that are managed by other companies. It is possible that they collect personal information from people who visit their website. Guzco cannot offer any guarantees regarding the privacy policy of external websites and is not responsible for those websites.

8. Your rights

You have the right of inspection, correction or deletion of your personal data at any time. For any of these actions please contact us via the contact details described below. We would like to point out that, on the basis of European privacy laws, you have the following rights:

to get an explanation of what personal data of you we have and what we do with it
access to the exact personal data of you that we have
correcting erroneous data
the removal of obsolete personal data
withdrawal of consent
objecting to a particular use of your personal data

If, despite our efforts to ensure the accuracy of personal data, incorrect information is still stored, we will correct it at your request.

Please note that Guzco acts as a data processor for most personal data we hold. If your request relates to data processed on behalf of a Customer, we may need to forward your request to the relevant Customer (the data controller) for handling.

9. Complaints

Please feel free to contact us in case of complaints about our processing of your personal data. In case of a complaint, we ask you to contact us via the contact details described below. Under European privacy legislation you also have the right to file a complaint directly with the Dutch Authority for the Protection of Personal Data (Autoriteit Persoonsgegevens) about the way we process personal data.

10. Revisions

Guzco reserves the right to change this Privacy Policy. However, we will not limit your rights under this Privacy Statement without your express consent. You can find the most up-to-date version of this Privacy Policy at any time on the Website. We recommend that before using our Services you check whether an updated version is available.

11. Contact details

In case of any questions about this Privacy Policy or our processing of your personal data, you can contact us via the contact details described below. To learn more about our security, compliance, and privacy practices, or to request access to specific documentation including our subprocessor list, please contact us.

Guzco B.V.
Keizersgracht 264
1016 EV Amsterdam
The Netherlands
Chamber of Commerce: 97424854
Website: www.guzco.ai