Privacy Policy

Last updated: 5 August 2026

This policy explains how Wiskerke Onions B.V. handles personal data in the Wiskerke customer app and the associated web portal at app.wiskerke-onions.nl. It applies to the iOS and Android apps and to the website they display.

Who we are

Wiskerke Onions B.V. is the data controller.

For any question about this policy or about your personal data, contact ict@wiskerke-onions.nl.

What we collect

The app is a business tool for existing customers. We only process data that is needed to give you access to your own orders and documents.

• Account details — your email address, user name, customer code, a cryptographic hash of your password, and, if you use a passkey, the credential identifier and public key. We never store your password itself, and a passkey's private key never leaves your device.
• Session details — the IP address and browser or app identification (user agent) of each sign-in, with the time it took place. We use this to keep you signed in and to detect misuse.
• Push notification token — if you allow notifications, we store the token your device receives and whether it is an iOS or Android device, so we can send you updates about your shipments.
• Business data — the shipments, invoices and documents that belong to your customer account. These come from our order administration, not from your device.

Camera

The app can scan the QR code on a shipment's ribbon. Scanning happens entirely on your device; the camera image is not stored and is never sent to us or to anyone else. Only the scanned code is used, to look up the matching shipment. You can refuse camera access and still use the rest of the app.

Why we process this data

• To perform our contract with you: giving you access to your orders, shipments and documents.
• Our legitimate interest in keeping the service secure: sign-in records and abuse detection.
• Your consent: push notifications, which you can withdraw at any time in your device settings.

Who we share it with

We do not sell your personal data, we do not use it for advertising, and the app contains no advertising or tracking software. We share data only with parties that process it on our behalf:

• Google — Firebase Cloud Messaging delivers push notifications. Google receives the device token and the message content.
• Our hosting provider — stores the application and its database on servers in the European Union.

How long we keep it

Account data is kept for as long as you have an account with us, and afterwards only where the law requires it — order and invoice records are subject to a statutory retention period of seven years. Sign-in records are kept for a limited period for security purposes. A push token is removed once it is no longer valid or you turn notifications off.

Your rights

Under the General Data Protection Regulation you can ask us to give you a copy of your personal data, to correct it, to erase it, to restrict or object to its use, or to transfer it to another party. Write to ict@wiskerke-onions.nl and we will respond within one month. If you are not satisfied, you may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Security

All traffic between the app and our servers is encrypted with TLS. Passwords are stored as salted hashes. We support passkeys, which authenticate you without any shared secret leaving your device, and two-factor authentication.

Children

The app is intended for our business customers and is not directed at children.

Changes to this policy

If we change this policy we will update the date at the top of this page. Significant changes will be announced in the app.