Effective date September 15, 2018.
Introduction
When you use the services of VTC Vallée d'Ossau, you entrust us your information. The SAS VTC VALLEE D'OSSAU on which depends the service VTC Vallée d'Ossau is committed to honor your trust.
This policy describes the information we collect, how it is used and shared, and your choices in this regard. We advise you to read on to understand the limits with which we use your data in compliance with the GDPR (European General Data Protection Regulation).
SCOPE
This policy applies, unless otherwise stated, to all users of the VTC Vallée d'Ossau services, regardless of their country of origin, whether they use web applications, telephones or data collected during transportation (credit card receipts, etc.). This policy applies to the following persons
- Passengers: users who order or use our transportation services.
- Family or person responsible for passengers who order or use our transportation services.
- Establishments or companies using the services of VTC Vallée d'Ossau
- Drivers: Users who provide transportation services independently or through a partner transportation company.
The practices described in this policy are subject to the relevant European laws. This means that we follow the practices described in the GDPR.
This policy also applies to individuals who provide information to VTC Vallée d'Ossau as part of an application that uses our services, or whose information is transmitted to VTC Vallée d'Ossau by another means in connection with its services (for example, the contact information of users associated with partner restaurants or hotels). All persons subject to this policy are referred to herein as "users".
Legal data controller
It is the manager of the SAS VTC VALLEE D'OSSAU who is legally responsible for data processing.
SIRET: 83226699300019
RCS PAU: 832 266 993 R.C.S. Pau
TVA INTRA COMMUNAUTAIRE
FR39832266993
Questions, comments and complaints concerning the practices of VTC Vallée dOssau relating to data can be made by post to the company's head office, VTC VALLEE D'OSSAU 41 chemin Lauga 64290 Lasseubetat.
What data is collected
- registration data
- personal contact information
- location and demographic data
- transaction information
- Usage and interaction data between drivers and users
- information on the equipment used
- communication data, dates, times, phones, etc.
- data from various third-party sources
- user comments
How the collected data is used, stored and destroyed
VTCVO collects and uses information so that you can enjoy convenient and reliable transportation, delivery and other products and services. We also use the information we collect for the following purposes:
- to improve the security of our users and our services
- for customer support
- to enable communication to users or between users and drivers or between users.
- to organize discounts or customer benefits
- in relation to possible legal requirements
- VTC Vallée d'Ossau does not sell or share your personal information with third parties for direct marketing purposes.
Cookies and related technologies
Cookies are small text files stored on your browser or device by websites, applications, online media and advertisements. VTC Vallée d'Ossau uses cookies and similar technologies in particular for the following purposes:
- User authentication
- Saving user preferences and settings
- Evaluation of the popularity of a content
- Improving and measuring the effectiveness of advertising campaigns
- Analysis of trends and traffic patterns, and an overall understanding of the online behavior and interests of people who interact with our services We may also allow third parties to provide audience measurement and analysis services on our behalf, to serve advertisements on our behalf across the Internet, and to track and report on the performance of those advertisements. These specialized organizations may use cookies, web beacons, software development kits, and other technologies to identify your device when you visit our site and use our services, as well as when you browse other sites and online services. This data remains anonymous and is not resold for direct marketing purposes.
Information sharing and disclosure
Within the framework of VTC activities, we may receive your information from third parties (limousine service of certain hotels, user associations using our services for their members, tourist offices or similar, etc.)
We may also share certain contact information and content for the proper operation of our service.
Any information shared will be the responsibility of the third party organization that received the data and will therefore be subject to their own privacy policy.
These information shares are done for the following reasons:
- At your request, to your relatives or to other users
- To our business partners in close relation with the particular service we provide
- To the general public when you post a comment open to the general public
- To the VTC platforms with which we collaborate. Please note that this is at your request and for your personal use.
- For legal reasons in the event of a dispute
VTC Vallée d'Ossau may communicate your information in ways other than those described in this policy after having informed you and received your consent.
Data retention and destruction
VTC Vallée d'Ossau retains user profile information as well as other information to enable better operation of our personalized regional service.
VTCVO retains transaction, location, usage and other information for seven years, in accordance with applicable tax, regulatory, insurance and other requirements. VTCVO then deletes or anonymizes such information in accordance with applicable laws.
Users may request the deletion of their account at any time. Following this request, VTCVO will delete the information that it is not necessary to keep and limit access to the information to be kept, as well as its use.
Legislation specific to the European RGPD
As of May 25, 2018, the processing of users' personal data within the European Union is subject to the European Union's General Data Protection Regulation (GDPR).
This section summarizes the purposes for which VTCVO may process personal information under the RGPD, as well as the rights of users in the E.U. regarding the processing of their personal information by VTC Vallée d'Ossau
1. User rights within the E.U.
In the European Union, you have the following rights regarding the processing of your personal data. To exercise these rights, please see the data below.
Users outside the EU may also request details, rectification or deletion of their personal data or copies of such data from our company's headquarters.
- a. Details and copies of your data
- You have the right to ask what information we have about you and how we use that information.
- You also have the right to receive a copy of the information we collect about you, if it is collected with your consent or because we need it to provide the services you request.
- b. Rectification
- If you believe that we have inaccurate information about you, you have the right to request that it be corrected.
- c. Deletion
- Users may request deletion of their account at any time. They can do so by sending a letter to our company headquarters or simply by using our contact form. We may need to retain certain information about you to comply with legislation or for legitimate business purposes as permitted by law.
- d. Objections and claims
- Users within the E.U. have the right to object to the processing of their personal data by us, including for commercial purposes based on profiling and/or automated decision making. We may, however, continue to process your information despite your objection, within the limits set out in the GDPR.
- Users in the EU also have the right to complain about the way we handle their personal information to the Autoriteit Persoonsgegevens, the Dutch data protection authority, at the following address:Autoriteit PersoonsgegevensPostbus 933742509 AJ DEN HAAG(+31) - (0)70 - 888 85 00
- You can also send your questions, comments or complaints
- .2. Processing conditions
The GDPR requires companies that process personal data of users in the EU to do so under specific legal grounds. As described below, we process user information within the EU under one or more of the grounds set forth in the GDPR:
2. Processing conditions
- a. Processing is necessary to provide the services and features you request.
- We need to collect and use certain information to provide our services to you. This includes:
- user profile information necessary to create and maintain your account, including verifying your identity, communicating with you about your errands, orders and accounts, and allowing you to make payments or collect your income;
- Data necessary for security control, which allows drivers to offer transport services via our website or our partner apps;
- Driver location data, necessary to match drivers and passengers, track current trips and suggest routes;
- transactional information that is required to be generated and maintained in connection with your use of our services;
- Usage information necessary to maintain, optimize and improve our services, including assigning (sometimes using additional information) benefits, loyalty bonuses or matching drivers and passengers, and calculating fare prices and driver earnings.
- The collection and use of this information is necessary to use our applications.
- We need to collect and use certain information to provide our services to you. This includes:
- b. The processing is necessary to protect the vital interests of our users or others.
- We may process personal information, including providing data to law enforcement agencies when the safety of users or others is at risk.
- c. The processing is necessary for the legitimate interests of our services.
- We collect and use personal information to the extent necessary for our legitimate interests. This includes collecting and using information for the following purposes:
- To ensure and enhance the safety of our users. For example, we collect information related to security checks (where permitted by law) to prevent unsafe users from offering services through our applications. We also use personal information to prevent our services from being used by people who engage in inappropriate or unsafe behavior. For example, we maintain information about revoked users to prevent them from using our applications. We also rely on usage data to avoid matching drivers with passengers who present a high risk of conflict.
- To prevent, detect and combat fraud related to the use of our services. For example, we use information about users' profiles, locations, devices and use of the Services to detect and prevent unsafe situations for our users.
- Inform authorities of criminal acts or threats to public safety.
- Provide customer support.
- Optimize our services and develop new ones. This includes, for example, identifying the best pick-up or drop-off locations, recommending (new) features, improving navigation, fares and matching between drivers and passengers, or between courier-partners and delivery recipients.
- For research and analytical purposes. This includes, for example, analyzing usage patterns to improve the user experience and security of our services.
- For direct marketing purposes by us. This includes, for example, analyzing data to identify trends and tailor marketing messages to users' needs.
- To apply our General Conditions of Sale.
- We collect and use personal information to the extent necessary for our legitimate interests. This includes collecting and using information for the following purposes:
- d. The processing is necessary for the legitimate interests of other persons or parties.
- We collect and use personal information to the extent necessary to serve the interests of other individuals or the general public. This includes sharing information in connection with legal claims or insurance claims, to protect the rights and safety of others.
- We may also process personal information where this is necessary for demonstrable public interest reasons under applicable law.
- e. The processing of data is necessary to fulfill our legal obligations.
- VTC Vallée d'Ossau is subject to the legal obligations of the jurisdiction in which it operates, which involve the collection, processing, communication and storage of your personal data. For example, the collection of information about your journeys, its retention for long periods and the transmission of copies of this information to government bodies or other competent authorities. We use your information in accordance with these laws, as they apply to your use of our applications.
- We may also disclose information to law enforcement authorities or third parties in connection with legal proceedings.
- f. Consent
- We may collect and use your information with your consent. You may withdraw your consent at any time. If you withdraw your consent, you will no longer be able to use the services or features that require the collection or use of information previously collected or used with your consent.
- We require your consent to collect or use your data to improve the user experience, to enable optional services or features, or to communicate with you. Within the E.U., the following collections or uses of data are made with your consent.
- Location information (passengers)
- Real time position sharing (passengers)
- Notifications: account and race updates
- Notifications: discounts and news
- Accessibility features on iOS
- We may also collect personal information about you through voluntary surveys. Your responses to these surveys are collected with your consent and are deleted once they are no longer needed for the purpose for which they were collected.
Choice and transparency
We offer you the possibility of consulting and verifying the information collected about you, in particular by the following means
- privacy settings in the application
- device authorizations
- rating pages in the application
- refusal of marketing communications
You can also ask us to provide you with a copy of your data, to explain it to you or to correct it.
Updates to this Privacy Policy
We may update this policy from time to time. If there is a material change, we will notify you through our applications or other means, such as e-mail. To the extent permitted by applicable law, use of our services after such notice constitutes acceptance of updates to this policy.
We encourage you to periodically review this policy for the latest information on our privacy practices. We will also make previous versions of this policy available for review.