Terms and conditions
1. Legal notice
In compliance with Spanish Law 34/2002 on information society services and e-commerce (LSSI-CE), we inform you that the rondafy.es website and the Rondafy service belong to:
- Owner: Ishaak Begua Zelmati
- Tax ID (NIF): 31047172R
- Address: C/ Covadonga, 21, 46680 Algemesí (Valencia), Spain
- Email: info@rondafy.es
Using this website and the service implies accepting these terms. The processing of personal data is explained in the Privacy policy.
2. What Rondafy is and who it's for
Rondafy is an online service that lets businesses (hospitality, retail and similar) create digital loyalty cards for Google Wallet and Apple Wallet, stamp them from a dashboard, view statistics for their programme and send notifications to customers who have their card.
The service is aimed at professionals and companies (hereinafter, «the business»), who subscribe to it for their activity. People who add a business's card to their phone (hereinafter, «end customers») don't contract anything with Rondafy; section 11 sets out the terms that apply to them.
3. Account and access
- You need an account to use the dashboard. The information you provide must be truthful and up to date.
- You're responsible for keeping your password safe and for what's done with your account and your staff's access. If you suspect misuse, tell us immediately.
- We may suspend an account if we detect fraudulent use, use contrary to the law or these terms, or use that puts the security of the service or other users at risk.
4. Plans, free trial and payments
- Rondafy is offered in different plans (Standard and Pro) with the features and prices published on the Plans page at the time of subscribing. Applicable taxes will be shown on the invoice.
- Free trial: new businesses can enjoy a 14-day trial at no cost. If no plan is taken out at the end, the account and cards may be deactivated.
- The price is paid in advance according to the chosen billing period (monthly or as otherwise agreed). In case of non-payment, we may suspend the service after notifying you, until it's settled.
- You can change plans at any time. When downgrading, features not included in the new plan will no longer be available.
- We may change prices with at least 30 days' notice. If you don't agree, you can cancel before the change takes effect.
5. Term, cancellation and termination
- No commitment: the service renews automatically each period and you can cancel whenever you like by writing to info@rondafy.es. Cancellation takes effect at the end of the period already paid; partial periods are not refunded.
- When you cancel, your customers' cards will stop updating. During the following 30 days you can ask us for a copy of your programme's data; after that we'll delete it, except what we're required to keep by law.
- We may terminate the contract if you seriously breach these terms, notifying you by email.
6. Business obligations
By using Rondafy, the business undertakes to:
- Be the controller of its end customers' data and comply with data protection law (GDPR and LOPDGDD), including clearly informing them (for example, in the venue or on the sign-up page) about who processes their data and why.
- Send notifications only to customers who have its card, without misleading, offensive or unlawful content, and at a reasonable frequency.
- Honour the promotions, rewards and conditions it announces on its cards and notifications. Rondafy is not party to the relationship between the business and its customers and is not liable for the rewards offered.
- Hold the rights to the logos, images, trademarks and texts it uploads, and hold Rondafy harmless from third-party claims regarding them.
- Check that its card information (reward, expiry, address, links) is correct.
7. Prohibited uses
It is not permitted to: use the service for unlawful purposes or to send unsolicited advertising; impersonate another business; attempt to access data from other accounts; fraudulently manipulate stamps or rewards; reverse-engineer, scrape data in bulk or overload the service; or resell the service without our permission.
8. Availability and third parties (Google and Apple)
- We work to keep Rondafy continuously available, but we can't guarantee it will work without interruptions or errors. There may be downtime for maintenance, which we'll try to schedule at low-usage times.
- Cards are displayed through Google Wallet and Apple Wallet, third-party services with their own terms. Rondafy doesn't control those services and isn't liable for changes, outages or restrictions that depend on them, although we'll do what's reasonable to adapt.
- We may improve, change or remove features of the service. If we remove an essential feature of your plan, we'll give you reasonable advance notice.
9. Content and intellectual property
The software, design, the Rondafy brand and the website content belong to their owner or licensors. Subscribing to the service gives you a personal, non-exclusive and non-transferable right of use for the duration of the contract; it doesn't transfer any other ownership to you.
The content you upload (logos, images, texts) remains yours. You give us permission to use it only to the extent necessary to provide the service (for example, to generate your cards).
10. Liability
- Rondafy is responsible for providing the service with due professional diligence.
- To the extent permitted by law, we won't be liable for indirect damages, loss of profits or lost business opportunities, nor for damages caused by the business's use of the service, by failures of third-party services (Google, Apple, network operators) or by force majeure.
- Rondafy's total liability to a business for any claim is limited to the amount paid by that business in the 12 months before the event giving rise to it.
- Nothing above limits liability in cases of wilful misconduct or gross negligence, nor liability that cannot be limited by law.
11. Terms for customers who add a card
- Adding a business's card is free and voluntary. The programme (stamps needed, rewards, expiry, welcome games) is defined and managed by the business, which is responsible for it.
- Cards are personal and have no monetary value redeemable for cash, unless the business states otherwise.
- You can delete the card from your Wallet whenever you like and turn off its notifications in your phone settings.
- The data processed and your rights are explained in the Privacy policy.
12. Changes and governing law
We may update these terms. We'll publish the current version on this page and, if the change is relevant to businesses, we'll notify them by email at least 15 days in advance; continuing to use the service afterwards means accepting it.
These terms are governed by Spanish law. For any dispute with businesses, the parties submit to the courts of the owner's place of residence, unless the law mandatorily establishes another jurisdiction.
Annex: data processing agreement (art. 28 GDPR)
This annex forms part of the contract between the business (controller) and Rondafy (processor) and is accepted when subscribing to the service.
1. Subject matter and duration
Rondafy will process, on behalf of the business, the personal data of its end customers necessary to provide the loyalty card service, for the duration of the contract.
2. Data and data subjects
Data subjects: end customers of the business who add its card. Data: card identifier, stamps, visits and rewards; Wallet technical data; and, if the customer provides them, name, email, date of birth and welcome game results. No special categories of data are processed.
3. Processing operations
Collection, recording, storage, consultation, card updates, sending notifications ordered by the business, generating statistics for the business, and erasure.
4. Rondafy's obligations
- Process the data only on the business's documented instructions (which include the settings it configures in the dashboard) and not use it for its own purposes. If an instruction seems contrary to the law, it will inform the business.
- Ensure that people authorised to process the data are committed to confidentiality.
- Apply appropriate security measures (art. 32 GDPR): encrypted communications, encrypted passwords, per-business access control, backups and minimal internal access.
- Help the business respond to its customers' rights requests and forward without delay any it receives directly.
- Notify the business, without undue delay and where possible within 48 hours of becoming aware, of any security breach affecting its data, with the information available so it can meet its obligations.
- Make available to the business the information needed to demonstrate compliance with this annex and allow reasonable audits it requests, with prior notice and at its expense.
5. Sub-processors
The business authorises Rondafy to use the sub-processors listed in the Privacy policy (hosting, database, Google Wallet, Apple Wallet, domain and email). Rondafy will contractually impose the same data protection obligations on them and will inform the business of any planned change, so it can object on justified grounds. International transfers will be carried out with the safeguards provided for in the GDPR.
6. End of processing
When the contract ends, Rondafy will return the data to the business if requested within the following 30 days and will then delete it, unless a rule requires it to be kept, in which case it will keep it blocked for as long as that obligation lasts.
7. Business obligations
The business guarantees that it has a legal basis for processing its customers' data, that it has properly informed them and that its instructions comply with the law.