Customer’s use of the “Abandoned Cart and Browse” entails additional processing of personal data by the Supplier, as follows:

"When using Abandoned Cart, personal data is transferred either directly via an API or via a tracking script placed by Customer on its website.

A cookie on Customer’s website will identify the end-customer’s tenant and information regarding the end-customer’s applicable web browser, the time when the end-customer placed the product in the cart, which URL the end-customer was on, which previous URL the end-customer visited, language and quantity of product. This personal data is processed in Voyado Engage, and Customer can use it to set up an automation and send e-mails to end-customers.

For Abandoned Browse, Supplier will also process products viewed, when the product was viewed, the product URL, and the external referral (origin of visitor)."

Customer is reminded of its obligation as a data controller to update any privacy policy information, consents (if applicable), cookie settings and cookie declarations that are necessary under the applicable privacy legislation.

For Connected Capability (Engage & Elevate), the following additional processing of personal data applies:

“The purpose of the processing is to enable a unified end-customer experience across Voyado Engage and Voyado Elevate, achieved by sharing and maintaining a synchronized unified identifier between the two platforms. The unified identifier enables Voyado to (i) recognize the same end-customer across systems through end-customer keys, where “end-customer keys” means the identifiers used to recognize the same end-customer across systems, namely DiscoveryKey in Voyado Engage and customerKey in Voyado Elevate (which represent the same value), and ContactID (an Engage-specific key that is also shared with Voyado Elevate where a DiscoveryKey/customerKey is present, and (ii) to power the Connected Capabilities, including:

• Audience-based promotions: The purpose of the processing is to enable a more personalized end-customer experience by utilizing audiences and segments (e.g. membership status or demographic segments such as women aged 20–25) built in Voyado Engage and activated in Voyado Elevate. These audiences may be used to influence product exposure, such as boosting or burying products in category listings, search results, or recommendations for identified end-customers within a given segment. End-customer keys and audience memberships are processed and synchronized between the systems via a maintained matching structure, enabling consistent identification of the end-customer.
• Intent-driven personalization: The purpose of the processing is to enable a more personalized end-customer experience by leveraging purchase and behavioral data (e.g. viewed products, categories, or purchase history) collected in Voyado Elevate and transferred to Voyado Engage. This data enriches the end-customer profile and may be used to create segments for targeted communication and marketing automation. End-customer keys and associated intent data are processed and synchronized between the systems via a maintained matching structure, enabling consistent identification of the end-customer.
• In-store purchase synchronization: The purpose of the processing is to enable a unified view of the end-customer by linking and synchronizing in-store purchase data to the same end-customer across systems using the unified identifier. This allows in-store purchases to be reflected in the end-customer profile and used for personalization and segmentation. End-customer keys and associated purchase data are processed and synchronized between the systems via a maintained matching structure, enabling consistent identification of the end-customer.

By linking end-customer data across platforms through synchronized identifiers and matching structures, Voyado ensures that personalization, segmentation, and targeting are based on a consistent and holistic view of the end-customer.

End-customer keys (DiscoveryKey/customerKey and ContactID) will be processed and stored by Voyado AB and Voyado Lund AB.”

For Connected Recommendations, the following additional processing of personal data applies:

“The purpose of the processing is to personalize product recommendations in Voyado Engage email communication based on behavioral data in Voyado Elevate, ensuring that recommendations are based on the same end-customer profile and behavior across systems. This is achieved by sharing and storing a unified identifier between the two platforms, as further described under “Connected Capability (Engage & Elevate)” above. Connected Recommendations supports the following types of recommendations:

• Top seller, where Voyado Engage submits a category type to Voyado Elevate and Voyado Elevate returns the best-selling products within that selection (note: this feature does not use any end-customer keys); and
• Contextual, where Voyado Engage submits a product to Voyado Elevate to return related or similar products. Where a customerKey is available in Voyado Engage, it may also be submitted to Voyado Elevate so already purchased products are excluded from the email recommendations.

End-customer keys (DiscoveryKey/customerKey and ContactID) will be processed and stored by Voyado AB and Voyado Lund AB.”

Digital Wallet

The "Digital Wallet" Component enables Customer to provide a Digital Wallet experience to its end-customers both in-store and digitally, including identification of loyalty program members, display and use of loyalty benefits, rewards and wallet passes, and delivery of wallet-based communications such as reminders and promotional push notifications. Customer’s use of the Digital Wallet Component entails additional processing of personal data by the Supplier, as follows:

"For the purpose of providing the Digital Wallet, Supplier will process personal data pertaining to individuals enrolled in Customer’s membership or loyalty program who have actively requested to download and use a Digital Wallet pass. 

The personal data processed consists of (i) any personal data available in Voyado Engage that Customer elects to use for the Digital Wallet pass, which may include, e.g., name, email address, membership or tier level, membership ID, points balance and other membership-related attributes; and (ii) IP address and any other technical data generated through use of the Digital Wallet to the extent necessary to provide, maintain and secure the Digital Wallet.

The specific categories of personal data in the Digital Wallet pass in (i) above are determined and configurable by Customer. The personal data will be processed until the individual opts-out from the Digital Wallet services. IP addresses are processed for six (6) weeks after signup or claim, whichever is later.

For additional sub-processors, see the list of sub-processors at https://voyado.com/legal/."

Extended AI

The “Flexible BI” Component allows Customer to access a data model suitable for reporting via a third-party analytics tool, such as Power BI, Qlik or any other software supporting Delta Share, allowing more flexible data exploring. Customer’s use of the Flexible BI Component entails additional processing of personal data by the Supplier, as follows:

"Supplier will process end-customer data for export into a data architecture suitable for BI-purposes.

When Customer loads the Power BI file, personal data is stored in the file. Keep in mind that this file is stored locally on the computer if Power BI desktop is used, and consequently will not be updated automatically by Supplier. Keep the file refreshed when working with the file."

The “Omni” Component allows Customer to integrate their POS system, enabling them to capture and store Contact and transactional data from its physical stores. This allows for an enhanced end-customer overview and ability to segment and communicate with end-customers based on their omnichannel interactions. Customer’s use of the Omni Component entails additional processing of personal data by Supplier, as follows:

"For the purposes of the Omni Component, Supplier will process additional personal data related to in-store purchases to enhance segmentation capabilities and deliver personalized end-customer experiences through tailored communication, informed by their omnichannel interactions.

When using the Omni Component, personal data is transferred either directly via an API or by an import from Customer’s POS system to Voyado Engage. The POS system provides physical store information linked to each transaction, which Supplier uses to update the Contact with details on the end-customer’s purchase location and preferred store."

The “Online Ads” Component allows Customer to target its online ads on social media platforms and includes “Custom Audiences” provided by Meta, “Customer Match” provided by Google, and “Custom Audiences” provided by TikTok:

• Meta Custom Audiences: A connection for automatically exporting segments from Voyado Engage to Meta’s advertising platform.
• Meta Leads: Customer may import leads from Meta’s advertising platform to Voyado Engage.
• Google Customer Match: A connection for automatically exporting segments from Voyado Engage to Google’s advertising platform.
• TikTok Custom Audiences: A connection for automatically exporting segments from Voyado Engage to the TikTok Ads Platform.

Customer’s use of the Online Ads Component entails additional processing of personal data by Supplier, as follows:

"Supplier may transfer hashed personal data (segments/target audiences) from Voyado Engage to Meta, Google and/or TikTok, as instructed by Customer, for performance of the Online Ads Component. The personal data processed are the following (as applicable):

• For Meta: Engage Contact ID for the target audiences set up by Customer, name, e-mail, and telephone number.
• For Google: Engage Contact ID or the target audiences set up by Customer, name, e-mail, zip code, city, and country code. Zip code, city and country code are not hashed. The personal data are transferred to the ad account associated with the target audience.
• For TikTok: Email and Telephone number. TikTok will attempt to match the hashed data to user profiles on its platform. If a match is found, TikTok may use additional data it holds to improve targeting accuracy and optimize Customer’s advertising results, based on the custom audience parameters which Customer defines in Voyado Engage."

Supplier may further import personal data (name, address, email address, gender etc.) pertaining to leads from Meta, as instructed by Cystomer, for performance of the Online Ads Component. Customer retains sole discretion to determine which categories of personal data are transferred to Voyado Engage."

Note that Meta Custom Audiences, Meta, Leads, Google Customer Match and TikTok Custom Audiences constitute Third Party Services under the terms of the Agreement.

Supplier is not liable or responsible in any manner for the processing carried out by Meta, Google and/or TikTok. For more information on their data processing activities, please refer to the information and applicable policies of Meta, Google and TikTok.

Supplier has released beta functionality expanding the Online Ads Component, provided subject to a separate Beta Functionality Supplement with the Customer. The Online Ads (BETA) functionality includes the following functionality (as applicable):

• TikTok Leads: A connection for importing leads from the TikTok Ads Platform to Voyado Engage.

Customer’s use of Online Ads (BETA) functionality entails additional processing of personal data by Supplier, as follows:

"For performance of the Online Ads (BETA) functionality, Supplier is instructed to import personal data (name, address, email address, gender etc.) pertaining to leads from the TikTok Ads Platform (as applicable). Customer retains sole discretion to determine which categories of personal data are transferred to Voyado Engage."

The “Onsite Messaging” Component includes functionality for referrals and on-site pop-ups. Customer’s use of the Onsite Messaging Component entails additional processing of personal data by Supplier, as follows:

"Supplier will process (i) contact information for individuals, as provided by the data subject, who sign up for membership and/or other benefits and (ii) device and session information, as collected by Supplier, in order to control message visibility based on user activity and preferences.

For additional sub-processors, see the list of sub-processors at https://voyado.com/legal/."

The "Ratings and Reviews" Component enables Customer to collect, display, and manage product reviews from end-customers. Customer's use of the Ratings and Reviews Component entails additional processing of personal data by Supplier, as follows:

"For the purpose of providing the Ratings and Reviews Component, Supplier will process personal data in connection with product reviews submitted by end-customers via Customer's channels.

The personal data processed may include contact identifiers (such as ContactID, name and email address), a display name chosen by the reviewer, review content (text and rating), and product metadata (such as product identifier, language, and channel). Where the reviewer is a known Contact in Voyado Engage, the display name defaults to the reviewer's first name; otherwise it is chosen by the reviewer where Customer has enabled this functionality. Where purchase verification is enabled, transaction data linked to the relevant Contact may also be processed.

Supplier will process the personal data to link reviews to the relevant Contact and product record and to moderate content. Where applicable, Supplier may also translate content and generate AI-powered summaries of reviews for the same product. The AI moderation functionality includes the ability to identify and flag review content, including content that may contain personal data, for Customer's review and action.

Published reviews, including the reviewer’s display name, may be made available in Customer’s channels. Review data may also be used to enable analytics and reporting and to trigger automated communications, such as review requests.

Personal data is stored in Voyado Engage, and linked to the relevant Contact, product and transaction data.”