Privacy Statement of Mobypark

Last updated: 19 June 2026

During the processing we conform to the requirements of the applicable data protection legislation. This means we:

• clearly specify our purposes before we process personal data, by using this Privacy Statement;
• limit our collection of personal data to only the personal data needed for legitimate purposes;
• first ask for explicit permission to process your personal data in cases where your permission is required;
• take appropriate security measures to protect your personal data and we demand the same from parties who process personal data on our behalf;
• respect your right to inspect, correct or delete your personal data held by us.

Mobypark is the party responsible for all data processing. In this privacy statement, we will explain which personal data we collect and for which purposes. We recommend that you read it carefully.

Statistics and profiling
We keep statistics on the use of our service. These statistics help us to, for example, only show you information that is relevant to you. We may combine personal data to get to know more about you. We will of course respect your privacy at all times. If you do not want us to do these statistics, please let us know.

For this purpose, we use your name, phone number, IP address and email address. We do this on the basis of your consent. We store this information for one year.

Contact Form and Newsletter

You can use our contact form to ask us questions or make any request.

For this purpose, we use your email address and name. We need this data in order to respond to your contact request. We store this information until we are sure that you are satisfied with our response and six months thereafter. This way we can easily access the information in case you have any following questions and train our customer service to improve even more.

We have a newsletter to inform those interested of our products and/or services. Each newsletter contains a link with which to unsubscribe from our newsletter. You can also use your account to do this. You can also use our portal to do this.

Your email address is added to the list of subscribers only with your permission. We store this information for three months after you have cancelled your subscription.

Note that these newsletter retention periods apply when you unsubscribe from the newsletter. If you delete your Mobypark account, your marketing preferences are removed immediately as part of the deletion process described below.

Handling your reservation order
We will use your personal data when handling your reservation. We may share your data with the parking provider in order to make sure your parking reservation can be handled. Consult their privacy policy for more information. We may also obtain information on your payment from your bank, credit card company or our payment processor.

For this purpose, we use your payment details, phone number, email address, name and licence plate. We need this data because of our agreement with you. While your account is active, we use it to handle your reservations and for invoicing and payment. If you delete your account, we anonymise the personal fields linked to your bookings, including your name, email address, phone number and licence plate, after the 30-day grace period, unless there is an open financial claim. See “Pending payouts and open claims” below. Booking history, invoices and other accounting records are retained for 7 years where required by Dutch fiscal law, the Boekhoudplicht, but in anonymised form where possible. Once anonymised, the remaining transactional fields, such as amount, VAT, dates and car park address, are no longer personal data. Payment is handled by our payment processor. See “Payment processing” below.

Who we share reservation data with
We collaborate with other organisations that may receive your personal data in order to handle your reservation.

To handle your reservation, we work together with parking providers, payment providers, email service providers, customer support tools, analytics providers and other service providers that help us operate Mobypark.

Of these parties, some may be established outside the European Economic Area. Where this is the case, we take appropriate measures to protect your personal data in accordance with applicable data protection legislation.

Access to portal
Within our portal, you can access a management environment where you can set, specify and change settings.

We use your email address and name to give you access to your Mobypark account and portal. We need this data to perform our agreement with you. If you request account deletion, we keep this data for a 30-day grace period so you can cancel the request if it was made by mistake. After this period, your personal account data is anonymised, unless we are legally required to retain certain information for longer.

Registration
Certain features of our service require you to register beforehand. You will have to provide some information about yourself and choose a username and password for the account that we will set up for you.

When you create an account, we use your name, email address, password, profile picture if added and phone number if added. We need this data to create and manage your account, to contact you about bookings, invoices and payments, and to provide an overview of the products and services you use through Mobypark.

If you delete your account, it enters a 30-day grace period during which you can cancel the deletion request. After 30 days, we anonymise your personal account data: your name is replaced, your email address is removed from your account and replaced by an internal deleted-user address, your profile photo is deleted, saved licence plates are removed, and stored payment methods are revoked where applicable.

Deleting your account

You can delete your account at any time from your account settings, or ask our support team to do it for you. Because we are legally required to keep certain invoice and accounting records for 7 years under Dutch Boekhoudplicht, we cannot erase everything instantly. Instead, we follow a clear lifecycle:

• When you request deletion, day 0. We confirm your identity, sign you out of all sessions, and hide your profile, any listings and any reviews you wrote from public view. New bookings are blocked. We send you a confirmation email with a link to cancel the deletion.
• Grace period, days 0–30. If you change your mind, you can use the link in that email to restore your account in full. This protects you against accidental or mistaken deletion.
• Anonymisation, day 30. If you have not cancelled, we permanently remove your personal data: your name, email address, phone number, password, profile photo, saved licence plates and marketing preferences. Reviews you wrote are kept, but the author is anonymised. Booking records are anonymised so that only non-personal transactional fields remain.
• Retention and deletion, after 7 years. The anonymised booking records are kept for 7 years to satisfy Dutch fiscal law, after which they are permanently deleted and retained only as anonymous aggregate statistics that cannot identify you.

What you cannot do. Because of the 7-year fiscal-retention obligation, you cannot require us to destroy everything immediately. Our approach is: you can delete your account; we anonymise your personal data within 30 days; the anonymised invoice records remain for 7 years as required by law.

This is irreversible. Once anonymisation has happened we cannot recover your old data. If you return to Mobypark afterwards, you sign up as a new user with a fresh account. We deliberately do not rebuild your old profile, because that would mean reconstructing personal data you asked us to erase.

Where we reasonably suspect fraud, we may retain the relevant account data for up to 10 years on the basis of our legitimate interest in preventing and detecting fraud, even after a deletion request.

How long we keep your data after account deletion

Pending payouts and open claims

If there is a pending payout, unpaid amount, overstay charge, dispute or other open financial claim linked to your account when you request deletion, anonymisation may be postponed until that claim has been settled. This protects both you and the other party while the matter is resolved. Once the claim is settled, your account continues automatically through the deletion lifecycle described above.

Payment processing

Payments are handled by our payment processor. When your account is anonymised, we revoke any payment methods stored with us. Our payment processor may retain transaction records independently for up to 7 years to meet its own legal obligations. Please consult its privacy policy for details.

Promotion
Other than the advertisements on the website, we can inform you about new products or services.

You can object at all times against this promotional communication. Every email contains a cancellation link. You can also inform us through your account. Further, you can inform us through the portal.

Location data
If necessary, we may collect your location data, such as GPS data. If that is the case, you will be asked to grant consent beforehand.

This location data and other data can also be stored and processed by the provider of the navigation or mapping software, such as Google Maps, but the data could also be used by, for example, Google or Apple itself. We have no control over their actions. We recommend that you read the applicable privacy statement of the provider in question.

Publication
We will not publish your customer data, except where publication is part of the service and you have provided the relevant information yourself, such as reviews or parking listings. If you delete your account, your profile, listings and reviews are hidden from public view during the deletion process. Reviews may later remain visible with the author anonymised.

Providing Data to Third Parties
Except for the parties mentioned above, we do not under any circumstance provide your personal data to other companies or organisations, unless we are required to do so by law, for example when the police demands access to personal data in case of a suspected crime.

Our website features social media buttons. These buttons are used by the providers of these services to collect your personal data.

In some cases, a parking booking may involve a partner system, for example a parking access, barrier, garage or payment partner. A Mobypark account deletion request removes or anonymises data in Mobypark's own systems as described above. If your data has also been processed by a partner system, that partner may have its own legal obligations and retention periods. For partner-side deletion requests, you may need to contact the relevant partner directly; we can point you to the right contact on request.

Statistics
We keep statistics on the use of our service.

Cookies
Our service makes use of cookies. Cookies are small files in which we can store information, so that you do not have to fill in that information again. We can also use them to see whether you are visiting us again.

The first time you visit our service, we will show you a notification explaining our cookies and ask for your permission for the use of these cookies.

You can disable the use of cookies through your browser setting, but some parts of our website may not work properly as a result of that.

Google Analytics
We use Google Analytics to track visitors on our website and to get reports about how visitors use the website. We accepted the data processing agreement from Google. We do not allow Google to use information obtained by Analytics for other Google services, and we anonymise IP addresses.

Security
We take security measures to reduce the misuse of and unauthorised access to personal data.

Changes to this Privacy Statement
We reserve the right to modify this statement. We recommend that you consult this statement on a regular basis so that you remain informed of any changes.

Inspection and Modification of your Data
You can always contact us if you have any questions regarding our privacy policy or wish to review, modify or delete your personal data.

You have the following rights:

• the right to access the personal data we process about you;
• the right to rectification of incorrect or incomplete personal data;
• the right to deletion of your personal data, where legally possible;
• the right to restriction of processing;
• the right to data portability, where applicable;
• the right to object to processing based on legitimate interest or direct marketing;
• the right to withdraw your consent, where processing is based on consent.

Please note that you must always make clear who you are, so that we can assure that we do not modify or remove the data from the wrong person.

Complaints
If you think that we are not helping you in the right way, you have the right to lodge a complaint with the authority. For the Netherlands, this is the Autoriteit Persoonsgegevens.

Contact details
Mobypark
Piet Heinkade 95 B
1019 GM Amsterdam
contact@mobypark.com
+31202335400