This privacy notice (the “Notice”) applies to Ryde Technology AS’ and its subsidaries (the “Company”, “we”, “our” or “us”) processing of our customers personal data in connection with their i) use of our mobile application service Ride (the “Service”) and ii) visits to and communication with us through our website (the “Website”).
For booking of vehicles owned by our business partners through our mobile application (“Third-Party Service”), please note that separate terms and conditions apply. For more information, see section 9 below.
Personal data means any information relating to an identified or identifiable natural personal. This Notice, include information on how we process your personal data and your data protection rights in connection with your use of the Service and Website.
In relation to the use of our Service, please note that this Notice together with our terms and conditions comprise of our contractual relationship with you. It is therefore important that you read this Notice in light of the terms and conditions. In any event, this Notice and any other information we may provide on specific occasion in connection with our collection and use of your personal data should be read carefully, so that you are aware of how and why we are using such information.
The protection of your personal data is important to us, and we will therefore process your personal data only to the extent permissible under the applicable data protection legislation, including the EU General Data Protection Regulation (“GDPR”).
Ryde Technology AS is the controller of the personal data that we process in connection with the Service and Website. This means we are legally responsible for ensuring that such processing comply with applicable data protection legislation.
For our contact details, please see section 10 below.
The terms used in this Notice when describing the type of personal data being processed, shall have the following meaning:
(a) Contact Information means phone number and e-mail address.
(b) GPS Location Data means GPS location data collected from your mobile phone or the vehicle when using it.
(c) Payment Information means credit card details.
(d) Order History means information regarding such as payment method, time of the rides, where the trip started and ended and amount paid for each ride.
(e) Ride Information means information about your rides on our vehicles, including ride duration, location and vehicle information.
(f) Service Usage Data means such as Contact Information, GPS Location Data, Payment Information, Ride information, Vehicle Pictures and information you voluntary provide us in connection with a customer support process or other communication with us related to the Service.
(g) Vehicle Pictures means pictures of the vehicles that you upload to our application.
(h) Application Usage Data means information about how you use our application, e.g. time and duration of use, pages visited and functions used.
(i) Website Data means your name, phone number, e-mail address and the information you voluntary provide us when using the electronic contact form available on our Website.
Below is an overview of why we process your data and the type of personal data being processed in relation to each purpose.
(a) Contact Information
When you sign up for a user account with us, you will need to provide us with an active phone number. We use your registered phone number to verify your identity and communicate with you. When creating a user account or using our Service, you may also register your e-mail address. This will enable us to more effectively be able to communicate directly with you when administering the contractual relationship, such as sending necessary information related to our Service.
(b) GPS Location Data
We collect GPS Location Data from your mobile phone or the vehicle at the beginning and in the end of a trip, and every 30 seconds during the trip. The information is necessary in order to provide you with our Service, e.g. give you access to nearby vehicles and calculate payment costs for the rides.
(c) Payment Information
You are required to add a credit card, or another payment method to pay for your rides. We will use payment information to complete the required transactions. We will, however, not store any of your credit card details. All transactions are handled safely by Adyen and your credit details will therefore be disclosed to them in order for the transactions to be completed.
(d) Vehicle Pictures
In certain cities we are obligated to require a picture of the vehicles when ending a trip and parking the vehicle in order to e.g. prevent parking that could be dangerous to the pedestrians or others in traffic. Uploading a picture of the vehicle is thus required in these cities in order to be able to end the trip.
Our legal basis for the processing of your personal data for this purpose is the contract with you (GDPR article 6 no.1 letter b).
The listed type of personal data is processed by us in order to be able to provide the Service to you. If we are not able to process such personal data, we are not able to offer you the Service.
(a) Ride Information
When you use any of our vehicles, we process information about your rides for the purpose providing you with information about the trips you have made, and to enhance the Service and our customers experience of the Service. By using this information, we can for example ensure better redeployment of vehicles.
(b) Order History
An overview of your order history for the last three (3) years is made available for you in your user account, in order for you to have an overview of your use of the Service and give you the opportunity to ensure that all payments are correct. You will also find information about your available credits in your profile.
The legal basis for our processing for this purpose is our legitimate interest in providing good customer care for the benefit of our customers (GDPR article 6 no. 1 letter f).
(a) Service Usage Data
We may use all personal data we have collected about you during our delivery of the Service to you to the extent it is necessary to respond to your inquiries or complaints. If needed, we will need you to identify yourself to verify that you are who you say you are.
(b) Website Data
We will use Website Data in order to respond to your inquiries or complaints.
The legal basis for our processing for this purpose is our legitimate interest in providing good customer service in order to help our customers (GDPR article 6 no. 1 letter f). Without processing said personal data we may not be able to assist you when you contact us.
(a) GPS Location Data and Vehicle Picture
This information enables us to detect, investigate and prevent or take action regarding illegal activities such as misuse, situations with a potential threat to the safety of a person or entity, and breach of our contract terms, e.g. see that a vehicle has been used on a restricted area or parked in accordance with local legislation.
(b) Contact Information:
We will use this information for communication when managing any misuse of the Service or breach of contract terms.
The legal basis for our processing for this purpose is our legitimate interest in protecting our business interests and responsibilities as a supplier within rental of vehicles to the public. It is also in the general public’s interest that the traffic is safe and roads passable (GDPR article 6 no. 1 letter f).
(a) Service Usage Data
We will use this information in pseudonymous or anonymised form to improve, optimise and develop the Service. This includes such as the technical and operational aspects of the Service. The fact that information is pseudonymised means that, for example, telephone numbers are removed and replaced with a unique indicator (e.g. a number code), before the information is processed as described above. Technically, however, the indicator can be “traced” back to the individual. Personal data is anonymised when it is no longer possible to re-identify the individual.
(b) Application Usage Data
The information we use is pseudonymous or anonymised and necessary in order to ensure the functionality of the application, conduct troubleshooting and sufficient security, and enables us to ensure that the Service is of the highest quality.
(c) Cookie Information
The legal basis for our processing for this purpose is our legitimate interest in improving and developing the Service and Website for the benefit of both our business and our customers (GDPR article 6 no. 1 letter f).
(a) Service Usage Data
The information will be used to the extent necessary to fulfill our legal obligations under law, regulations or legal orders. This includes such as our book keeping obligation, and obligations to respond to court order and requests by supervisory authorities.
The legal basis for this purpose our processing is our legal obligations (GDPR article 6 no. 1 letter c).
(a) Service Usage Data
To the extent necessary, we will use this information to protect our or third parties’ interests. These interests may include such as legal, commercial and business interests, e.g. to protect our Service and business operations, for the purpose of the establishment, exercise or defence legal claims, or reorganisation of the Company in connection with a merger or acquisitions.
The legal basis for our processing for this purpose is our legitimate interest in protecting interests of importance to our business or a third party (GDPR article 6 no. 1 letter f).
The personal data we process is collected directly from you, for example when you provide information to us directly during the registration of a user account or through your use of the Service or Website.
We may share your personal data with third parties delivering services to us, e.g. within operation, administration, maintenance or technical solutions.
In order to secure your personal data and privacy, we have signed data processing agreements with these parties to ensure that your data is not used for any other purpose than what is stated in this Notice.
We use service providers that are domiciled or may process personal data in a country outside the EEA without an adequacy decision by the European Commission. This means that these countries may not provide the same data protection as in the EEA. For more information on the relevant appropriate safeguards we have implemented to ensure an adequate level of protection for your personal data, please contact us.
Together with our group companies, we ensure that the Service is delivered where our group companies are established and operates. This requires that your personal data will be transmitted within the group. The legal basis for this is our legitimate interest in ensuring effective internal administration of the Service, hereunder to improve, optimise and develop the Service.
Since the Company stands for most of the operational parts of the Service delivery for its group companies, we have concluded a joint controllership with the relevant group company in these situations. We have therefore also agreed on an internal responsibility in accordance with GDPR article 26. In this agreement it is agreed that internally we have the main responsibility for the personal data being processed in the application, while the relevant group company is responsible for the local activities.
Your personal data will be processed in accordance with this Notice and for the purposes stated in section 4. Since we are all required to process your personal data in according with this Notice, you will not receive a separate privacy notice from our group companies unless special national rules apply in the country you are located and use the Service.
Your primary contact for your data protection rights (as described in section 8), is us. For our contact details, please see section 10. However, please note that you can assert your data protection rights both against us and the other group companies. The contact details of our group companies are available in the relevant national addendum to this Notice for your country.
We will not disclose your personal data to other third parties unless there is a legal basis for such disclosure. Below is an overview of categories of third parties we may share your personal data with:
We are required to disclose data related to the use of our vehicles, e.g. trips distance, durations and trip areas to the municipality as a supplier within rental of vehicles. The data we disclose is pseudonymised, which means that personal identifiable information is removed. The data is used by the municipalities to regulate the market for rental of vehicles, and city planning. The legal basis for our processing is our legitimate interest in assisting the municipalities in their work related to city planning (GDPR article 6 no. 1 letter f).
(b) Insurance companies
In connection with insurance cases we may disclose personal data about you to insurance companies. The legal basis for our processing is our legitimate interest in handling insurance cases (GDPR article 6 no. 1 letter f).
(c) Supervisory authorities and police
The Company may be obligated to assist supervisory authorities or the police requiring disclosure of your personal data. In these cases, the processing is based on our legal obligation (GDPR article 6 no. 1 letter c). Further, in certain cases we may also have a particular legitimate interest in assisting the police in the law enforcement (GDPR article 6 no. 1 letter f).
(d) Potential buyers or sellers
In the event that the Company is involved in a potential business transaction, personal data about you may be disclosed to potential buyers or sellers. The legal basis for our processing is our legitimate interest in completing the relevant transactions (GDPR article 6 no. 1 letter f).
(e) Courts, counterparties and lawyers
In connection with legal matters, we may need to disclose personal data about you to courts, counterparties and lawyers. The legal basis for our processing is our legitimate interest in establish, exercise or defence legal claims (GDPR article 6 no. 1 letter f).
We will at all times ensure that only strictly necessary information is disclosed to any third parties in accordance with this section 6.3.
We will only process your personal data as long as it is necessary in relation to the specific purpose the relevant personal data was collected for, unless we have a legal obligation to retain the said data for a longer period or longer storage is necessary in order to establish, protect or defend legal claims.
This means inter alia that with regard to personal data processed for the purpose of enter into, fulfil and administer our contractual relationship with you, we will process these personal data as long as you have a user account for our Service. GPS Location Data will, however, always be anonymised after 60 days. Personal data processed in relation to customer support service, will be anonymised once the request or complaint have been handled satisfactory.
We will also delete your user account for the Service upon request or in the event of inactivity for a period of 3 years, and all personal data we have collected about you will be anonymized.
Note, however, we may not comply with requests for deletion if it regards personal data necessary for us to deliver the Service you still want to use, we are required to retain the data or in order to establish, protect or defend legal claims.
Applicable data protection legislation gives you various rights related to the personal data we have collected about you and use in our processing in connection with the Service and Website.
You have the following data protection rights. Please note, these rights are not absolute and in certain cases are subject to conditions set out in applicable law:
You can read more about the data protection legislation and your rights on the webpage of the Data Protection Authority (Datatilsynet): https://www.datatilsynet.no/rettigheter-og-plikter/den-registrertes-rettigheter/
According to the applicable data protection law we are, if appropriate, obligated to inform whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the personal data and of the possible consequences of failure to provide such data. In this context, and as referred to above under section 4, please note that the main part of the personal data referred to in this document is processed by us in order to be able to provide the Service to you (GDPR article 6 (1) b). If we are not able to process such personal data, we are not able to offer you the Service.
We have entered into a cooperation agreement with ShareBike AS, Cats AS and Bydue AS (“Partners”) which entails, among other things, that Ryde provide the technical platform for these companies’ rental of vehicles. This means that our mobile application can be used to book vehicles owned by these third parties (“Third-Party Service”). Use of the Third-Party Service requires that you specifically accept their terms and conditions for use of their service. Your use of a Third-Party Service is made visible in the application by the use of different icons and the vehicles are marked with their logos. Your personal data will be collected and processed by us.
We have on the basis of the above concluded a joint controllership with our Partners in these situations, and agreed on an internal responsibility in accordance with GDPR article 26. In this agreement it is agreed between us that internally we have the main responsibility for the personal data being processed in order to deliver the Third-Party Service. Your personal data will be processed in accordance with this Notice and for the purposes stated in section 4. Since we are all required to process your personal data in according with this Notice, you will not receive a separate privacy notice from the Partners.
Your primary contact for your data protection rights (as described in section 8), is us. For our contact details, please see section 10. However, please note that you can assert your data protection rights both against us and our Partners. The contact details of our Partners are available in their terms and conditions.
The Company has the following contact details:
If you have any questions about this Notice and our processing of personal data, or want to utilise any of your data protection rights, please contact us at firstname.lastname@example.org.
We have appointed a data protection officer, which also can be contacted email@example.com.
We reserve the right to make changes in the Service and Website, e.g. to meet new needs. Thus, this Notice may be subject to alterations because of changes in our processing activity or in the applicable legislation. You will be informed of any changes. The latest version of the Notice will always be available on our Website and in our mobile application.