Customer’s use of the “Abandoned Cart and Browse” entails additional processing of personal data by the Supplier, as follows:

"When using Abandoned Cart, personal data is transferred either directly via an API or via a tracking script placed by Customer on its website.

A cookie on Customer’s website will identify the end-customer’s tenant and information regarding the end-customer’s applicable web browser, the time when the end-customer placed the product in the cart, which URL the end-customer was on, which previous URL the end-customer visited, language and quantity of product. This personal data is processed in Voyado Engage, and Customer can use it to set up an automation and send e-mails to end-customers.

For Abandoned Browse, Supplier will also process products viewed, when the product was viewed, the product URL, and the external referral (origin of visitor)."

Customer is reminded of its obligation as a data controller to update any privacy policy information, consents (if applicable), cookie settings and cookie declarations that are necessary under the applicable privacy legislation.

For Connected features (Engage+Elevate), the following additional processing of personal data applies:

"The purpose of the processing is to enable a unified end-customer experience across Voyado Engage and Voyado Elevate. This is achieved by sharing and storing a unified identifier between the two platforms. 

The unified identifier allows connected features, such as audience-based promotions, intent-driven personalization, and personal email recommendations, to recognize the same end-customer across systems and provide consistent, personalized communication. End-customer keys will be processed and stored by Voyado AB and Voyado Lund AB."

Digital Wallet

The "Digital Wallet" Component enables Customer to provide a Digital Wallet experience to its end-customers both in-store and digitally, including identification of loyalty program members, display and use of loyalty benefits, rewards and wallet passes, and delivery of wallet-based communications such as reminders and promotional push notifications.d secure the Digital Wallet. Customer’s use of the Digital Wallet Component entails additional processing of personal data by the Supplier, as follows:

"For the purpose of providing the Digital Wallet, Supplier will process personal data pertaining to individuals enrolled in Customer’s membership or loyalty program who have actively requested to download and use a Digital Wallet pass. 

The personal data processed consists of (i) any personal data available in Voyado Engage that Customer elects to use for the Digital Wallet pass, which may include, e.g., name, email address, membership or tier level, membership ID, points balance and other membership-related attributes; and (ii) IP address and any other technical data generated through use of the Digital Wallet to the extent necessary to provide, maintain and secure the Digital Wallet.

The specific categories of personal data in the Digital Wallet pass in (i) above are determined and configurable by Customer. The personal data will be processed until the individual opts-out from the Digital Wallet services. IP addresses are processed for six (6) weeks after signup or claim, whichever is later.

For additional sub-processors, see the list of sub-processors at https://voyado.com/legal/."

Extended AI

The “Flexible BI” Component allows Customer to access a data model suitable for reporting via a third-party analytics tool, such as Power BI, Qlik or any other software supporting Delta Share, allowing more flexible data exploring. Customer’s use of the Flexible BI Component entails additional processing of personal data by the Supplier, as follows:

"Supplier will process end-customer data for export into a data architecture suitable for BI-purposes.

When Customer loads the Power BI file, personal data is stored in the file. Keep in mind that this file is stored locally on the computer if Power BI desktop is used, and consequently will not be updated automatically by Supplier. Keep the file refreshed when working with the file."

The “Omni” Component allows Customer to integrate their POS system, enabling them to capture and store Contact and transactional data from its physical stores. This allows for an enhanced end-customer overview and ability to segment and communicate with end-customers based on their omnichannel interactions. Customer’s use of the Omni Component entails additional processing of personal data by Supplier, as follows:

"For the purposes of the Omni Component, Supplier will process additional personal data related to in-store purchases to enhance segmentation capabilities and deliver personalized end-customer experiences through tailored communication, informed by their omnichannel interactions.

When using the Omni Component, personal data is transferred either directly via an API or by an import from Customer’s POS system to Voyado Engage. The POS system provides physical store information linked to each transaction, which Supplier uses to update the Contact with details on the end-customer’s purchase location and preferred store."

The “Online Ads” Component allows Customer to target its online ads on social media platforms and includes “Custom Audiences” provided by Meta, “Customer Match” provided by Google, and “Custom Audiences” provided by TikTok:

• Meta Custom Audiences: A connection for automatically exporting segments from Voyado Engage to Meta’s advertising platform.
• Meta Leads: Customer may import leads from Meta’s advertising platform to Voyado Engage.
• Google Customer Match: A connection for automatically exporting segments from Voyado Engage to Google’s advertising platform.
• TikTok Custom Audiences: A connection for automatically exporting segments from Voyado Engage to the TikTok Ads Platform.

Customer’s use of the Online Ads Component entails additional processing of personal data by Supplier, as follows:

"Supplier may transfer hashed personal data (segments/target audiences) from Voyado Engage to Meta, Google and/or TikTok, as instructed by Customer, for performance of the Online Ads Component. The personal data processed are the following (as applicable):

• For Meta: Engage Contact ID for the target audiences set up by Customer, name, e-mail, and telephone number.
• For Google: Engage Contact ID or the target audiences set up by Customer, name, e-mail, zip code, city, and country code. Zip code, city and country code are not hashed. The personal data are transferred to the ad account associated with the target audience.
• For TikTok: Email and Telephone number. TikTok will attempt to match the hashed data to user profiles on its platform. If a match is found, TikTok may use additional data it holds to improve targeting accuracy and optimize Customer’s advertising results, based on the custom audience parameters which Customer defines in Voyado Engage."

Supplier may further import personal data (name, address, email address, gender etc.) pertaining to leads from Meta, as instructed by Cystomer, for performance of the Online Ads Component. Customer retains sole discretion to determine which categories of personal data are transferred to Voyado Engage."

Note that Meta Custom Audiences, Meta, Leads, Google Customer Match and TikTok Custom Audiences constitute Third Party Services under the terms of the Agreement.

Supplier is not liable or responsible in any manner for the processing carried out by Meta, Google and/or TikTok. For more information on their data processing activities, please refer to the information and applicable policies of Meta, Google and TikTok.

Supplier has released beta functionality expanding the Online Ads Component, provided subject to a separate Beta Functionality Supplement with the Customer. The Online Ads (BETA) functionality includes the following functionality (as applicable):

• TikTok Leads: A connection for importing leads from the TikTok Ads Platform to Voyado Engage.

Customer’s use of Online Ads (BETA) functionality entails additional processing of personal data by Supplier, as follows:

"For performance of the Online Ads (BETA) functionality, Supplier is instructed to import personal data (name, address, email address, gender etc.) pertaining to leads from the TikTok Ads Platform (as applicable). Customer retains sole discretion to determine which categories of personal data are transferred to Voyado Engage."

The “Onsite Messaging” Component includes functionality for referrals and on-site pop-ups. Customer’s use of the Onsite Messaging Component entails additional processing of personal data by Supplier, as follows:

"Supplier will process (i) contact information for individuals, as provided by the data subject, who sign up for membership and/or other benefits and (ii) device and session information, as collected by Supplier, in order to control message visibility based on user activity and preferences.

For additional sub-processors, see the list of sub-processors at https://voyado.com/legal/."

The “Product Recommendations” Component offers the ability to present personal product suggestions in email and on web pages (via API) for Contacts with the required data basis. Customer’s use of the Product Recommendations Component entails additional processing of personal data by Supplier, as follows:

"Product Recommendations uses purchase history and tracking data combined with a Contact ID to generate a table with Contact ID's consisting of calculated values per Contact, using machine learning. These values may then be used by Customer to send product recommendations by e-mail.

If Customer places a script on their webpage, and the end-customer agrees to the use of cookies when in logged-in mode, a Contact ID will also be connected, enabling the transmission of additional personal data consisting of information on products the end-customer has viewed on the webpage. If Customer also uses the Component “Abandoned Cart”, information on products placed in the cart will also be added.

Customer may further connect an API to enable product recommendations directly on the Customer’s webpage when an end-customer has signed in. Personal data is not shared with any third party (except for already approved sub-processors) unless Customer instructs Supplier of such processing, for example by instructing Supplier to allow access to one of Customer’s other business partners. Such instructions shall be documented in writing."

Customer is reminded of its obligation as a data controller to update any privacy policy information, consents (if applicable), cookie settings and cookie declarations necessary under applicable privacy legislation.