INFORMATION ON PERSONAL DATA PROCESSING
D-Mobility Czech Republic s.r.o. has taken the liberty of informing you in this document of the manner and extent of processing personal data and of the extent of your rights, as data subjects, in relation to the processing of your personal data according to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – “GDPR”).
1. WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?
The controller of your personal data is the company D-Mobility Czech Republic s.r.o. having its registered office at Krocínova 333/3, Staré Město, 110 00 Prague 1, Czech Republic, Company ID No.: 07584466, entered in the Commercial Register maintained at the Metropolitan Court in Prague, file number C 303544, telephone: +420 253 253 007, e-mail: info@anytimecar.cz (hereinafter also referred to as “D-Mobility“).
2. WHICH PERSONAL DATA DO WE PROCESS, TO WHAT EXTENT AND FOR WHICH PURPOSES?
We only process those personal data, and to such an extent, that enable us to be able to provide you with our services, adhere to our statutory obligations and protect our legitimate interest. We collect the personal data of our clients, including former clients, who have given consent to use continuing to contact them with the offer of our services.
We may process your personal data for the following purposes:
(a) Processing for the provision of performance according to a contract on the temporary use of a vehicle that you have entered into with us
We process the following categories of your personal data for the purposes of performing the contract we have together:
(1) identification data, such as first name, surname, date of birth, Personal Number or other personal identification number;
(2) contact details, including mobile telephone number and e-mail addresses;
(3) data arising from your proof of identity and driving licence, such as card number, the date on which it was issued, the term of validity, an indication of the body that issued it, information about permanent residence (place of residence) and place of actual residence, scope of the driving licence and information about the existence (absence) of medical contra-indications relating to the use of a vehicle, and a photograph;
(4) payment data, including the number of your payment card and the identification numbers required for executing a payment;
(5) other personal data and documents arising within the bounds of the administration and performance of our contract with each other, including any penalties, insurance benefit, etc.
We primarily process these data for the purpose of verifying your identity and your authorisation to drive a motor vehicle and for the purpose of ensuring communication to concern the performance of our contract with each other. We process your payment data for the purposes of ensuring payment for the services provided.
The provision and processing of your personal data is required to be able to enter into a contract and subsequently perform that contract according to Article 6(1)(b) GDPR.
(b) Processing for the statutory obligations of D-Mobility
Some processing of your personal data is imposed on us by the law. For example, accounting and tax documents with which we bill you for the services provided might also contain certain personal data (for example, your first name and surname, the type of service provided). We only store such documents for the purposes of fulfilling the obligations laid down by the relevant legal regulations to concern accounting and tax, for the length of time dictated by these regulations.
Such processing is required in order that D-Mobility may fulfil its legal obligations according to Article 6(1)(c) GDPR.
(c) Processing in our legitimate interest
We process some personal data in our legitimate interest in the defence of claims and for the purpose of protecting our property. The data involved is primarily your identification data, geolocation data of the vehicle and data to concern the administration of the contract, including documents from administrative bodies and insurance companies or other personal data required for the purposes specified above.
Such processing is in our legitimate interest according to Article 6(1)(f) GDPR.
(d) Marketing
We also process your personal data for the purposes of our marketing campaigns, for example for sending out individual offers of the services which we provide, if you have not expressed your disagreement to such personal data processing. We may process your personal data for marketing purposes even following the expiration of our contract with each other, if you have given us your express consent to such processing.
Processing the personal data of our clients for the purposes of direct marketing is in our legitimate interest (Article 6(1)(f) GDPR); however, you may refuse their sending at any time using our contact e-mail address, see below, or in the way described in the marketing e-mail.
Processing in relation to our former customers is based on consent, according to Article 6(1)(a) GDPR.
3. DO WE CARRY OUT THE AUTOMATED PROCESSING OF YOUR PERSONAL DATA?
The verification of your age and length of your driving practice will be a subject to automatic decision-making process. It is necessary for the purposes of conclusion of our contract, within the meaning of Section 22/2 a) of GDPR. The age and driving practice check will be carried out automatically, and provided that at least one of the parameters show up to be unsatisfying your request for registration will be refused. If this is the case, then you shall have the right to apply for a verification of the result by the human. We will proceed to human verification in case you approach us by raising the objection against the automatic processing.
4. WHO PROCESSES YOUR PERSONAL DATA?
Your personal data is processed by D-Mobility or by selected processors, who also provide sufficient and credible guarantees of the safeguarding of your personal data protection (for example, providers of IT services and services in the area of security, accountants, providers of analytical services and other suppliers).
Your personal data may, under certain conditions, be provided to state bodies (courts, police, notaries, tax authorities, Czech National Bank, etc., within the bounds of them executing their legal powers) or we may provide them directly to other subjects to the extent laid down by special law. Personal data to the extent laid down by law may also be transferred to insurance companies.
Personal data may be transferred for processing within the European Union, European Economic Area and other countries where companies from the D-Mobility group are present. In case your Personal data are transferred to countries outside the European Union or European Economic Area, it will be done strictly in accordance with the legal regulations and only when sufficient protection of the Personal Data is ensured, among others, by 1) Resolution of the European Commission on reasonable protection in country or countries receiving Personal data, 2) appropriate internal legally binding regulations, 3) approved code of conduct along with legally binding and enforceable obligations by the data controller and processor within the EU and EEA countries, 4) based on specific situation exempt, or 5) standard contract clause in accordance with the EU regulations by the EU Commission.
5. HOW DO WE ENSURE THE SAFEGUARDING OF YOUR PERSONAL DATA?
We take the measures required to ensure secure storage of information in electronic format and on paper and to prevent unauthorised access, changes or disclosure of information. Our information security is supported by a number of security standards, processes and procedures. We store information in areas with restricted access or in electronic databases which require login data and passwords. We demand that the providers of our data storage sites and other processors comply with the relevant standards of industrial security. All partners, employees and providers of services that have access to confidential information are subject to the obligation of confidentiality.
6. HOW LONG DO WE STORE YOUR PERSONAL DATA?
We only store your personal data for the length of time required to achieve the set purpose. We process your personal data for the provision of our services for the duration of your contract and thereafter for the duration absolutely required by legal regulations for the duration of our legitimate interest. If we have consent, we process your personal data only until such consent is withdrawn, and for a maximum of 5 years after consent has been given.
7. WHAT RIGHTS DO YOU HAVE IN CONNECTION WITH THE PROCESSING OF YOUR PERSONAL DATA?
The right to information on the processing of and access to your personal data
You have the right to receive from us confirmation of whether personal data which concerns you are or are not processed and if so, you have the right to access such personal data and to further information about processing. You also have the right to provision of copies of processed personal data.
The right of rectification
You have the right to demand that we rectify inaccurate personal data that concern you or supplement incomplete personal data, without undue delay. Please inform us of all changes to concern your personal data at the address provided below.
The right to restriction of processing
As the data subject, you have the right to demand that we restrict the processing of your personal data if:
you contest the accuracy of the personal data which we process about you, for the period of time required for us to verify the accuracy of your personal data;
the processing of your personal data is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
the processing of your personal data is no longer required by us, but you request them for the establishment, exercise or defence of legal claims; or
you have lodged a complaint against processing on the ground of decision making purely on the basis of automated process, until it is verified whether our legitimate interests prevail over your justified grounds.
If processing has been restricted based on any of the grounds specified above, the concerned personal data may only be processed (save storage) with your consent or on the ground of the establishment, exercise or defence of legal claims , on the ground of protecting another natural person or legal person or on the ground of a significant public interest or the Union or a Member State; We are obliged to inform you of ending the restriction of processing your personal data in advance.
The right to object
If you believe that the processing of your personal data is proceeding contrary to the protection of your privacy or contrary to legal regulations, you have the right to lodge an objection to such personal data processing. In the same way you may lodge an objection to automated decision-making.
The right to data portability
You have the right to obtain your personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller such that personal data are transferred directly by D-Mobility to another controller, if this is technically feasible.
The right to erasure
You have the right to demand that we erase without delay personal data that concern you, if at least one of the following conditions is satisfied:
the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; you withdraw consent to the processing of your personal data and no further legal grounds for their processing exist on our part; you object to the processing of your personal data and there are no overriding legitimate grounds for their processing on our part; personal data have been processed unlawfully; personal data must be erased in order to fulfil our legal obligations; personal data have been collected in connection with the offer of services of the information society.
The conditions specified above do not apply if the processing of personal data is required:
to exercise the right of freedom of expression and information; for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us; for reasons of public interest in the area of public health; for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in so far as the right of erase is likely to render impossible or seriously impair the achievement of the objectives of that processing; or for the establishment, exercise or defence of legal claims.
Right to withdraw consent
If we process personal data based on your consent, you may withdraw such consent at any time, free of charge. However, the withdrawal of such consent shall not affect the lawfulness of processing personal data based on consent before its withdrawal. You may withdraw consent at any time, in writing, by sending an e-mail or letter to the contact address specified below, without any consequences for our contractual relationships with each other, either current or future.
The right to lodge an initiative or complaint
If you have doubts as to adherence to the obligations associated with personal data processing, you may contact us or Úřad pro ochranu osobních údajů (Office for Personal Data Protection), having its principal office at Pplk. Sochora 27, 170 00 Prague 7, e-mail: posta@uoou.cz, WWW: ˂https://www.uoou.cz˃.
We provide you with all communications and statements without charge and as soon as possible (not later, however, than within one month).
8. HOW CAN YOU CONTACT US?
You may exercise your rights, make inquiries or submit remarks to us by telephone, on +420 253 253 007, by e-mail, to info@anytimecar.cz, or in writing, to the mailing address of D-Mobility: Krocínova 333/3, Staré Město, 110 00 Prague 1.
Privacy Policy during use of mobile application anytime carsharing cz a web site www.anytimecar.cz
We thank you for your interest in Anytime carsharing CZ app and web site www.anytimecar.cz (jointly referred to as the “app”). We are committed to protecting your privacy as an app user. This document explains how we handle personal data with regard to the app. “Personal data” means all information that relates to an identified or identifiable natural person.
1. Who is responsible for processing your personal data?
D- Mobility Czech Republic s.r.o., a limited liability company, ID number: 07584466, with its registered office at Krocinova 333/3, Prague 1, Stare Mesto, 110 00, Czech Republic.
2. For what purposes do we process your personal data and what legal permission do we have for this?
We process personal data pursuant to the applicable data protection laws. Data is processed for the following purposes: for the fulfilment of the contract with you for the use of the app (provision of the app and its functionalities) in each case to the extent necessary for this. When you register to the app, we will collect your name, email and email address to match the request to your user account. We process the information and data provided by you to respond to your request through our customer service. We delete the personal data as soon as further processing for the purpose of contract fulfilment is no longer necessary. Further storage or processing shall only be carried out as envisaged herein below. If you have opted in to the processing of personal data for other purposes this data processing is conducted on the basis of your consent. Consent is always voluntary, and you can opt out at any time. You can also declare your optout by sending an email to info@anytimecar.cz and specify the extent of the optout. We collect, process and use your personal data in order to provide the App and its functionalities only to the extent necessary or as far as you have consented to an additional use. In particular we use data that you enter and, if you release them, data that is existent on the mobile device or is being generated through the use of device functionalities (location data). The use of the App is possible without access to this data. The access maybe deactivated and reactivated at any time by/at Settings Android: > Apps > Anytime carsharing CZ > App permissions > Location Off; iOS: > Privacy > Location Services > Anytime carsharing CZ > Off. However, if the access of the App to the data is deactivated, this might lead to limitations on functionalities. Opting out has no effect on the lawfulness of data processing based on your consent until your optout. Nor does it have an effect on further processing of this data on another legal basis, such as to fulfill legal obligations. If required, we process your personal data beyond contractual fulfillment in order to pursue legitimate interests of the publisher or of third parties. Legitimate interests include maintaining the functionality and security of our IT systems. This app generates a permanent reference number and transmits this to us. This reference number allows us to determine which end device uses your user account. We will only use this data for the purpose of identifying possible misuse of your account. This enables us to inform you via text message if another end device logs in to your account for the first time. We generally delete this personal data once further processing or archiving is no longer needed to protect the respective legitimate interest. Further storage or processing shall only be carried out as envisaged herein below. Our company is subject to legal obligations and requirements, such as retention obligations under commercial and tax laws. Therefore, we also process personal data of the users if needed to comply with legal obligations. We disclose personal data of a user only if there is a legal obligation to law enforcement and criminal prosecution authorities.
3. What content do we send to and store on your device?
The app uses cookies and similar technologies such as HTML5 storage (hereinafter referred to collectively as “Cookies”) for optimal design of the app. This enables easier navigation and a high level of user-friendliness in the app. Cookies are small files that are stored on your device. These can be used to determine whether your device has already communicated with us. Only the cookie on your device is identified. Personal data can be stored in cookies if you have provided your consent or this is absolutely required for technical reasons to fulfill the contract, e.g. to enable secure login.
We use the following cookies in the app:
RememberMe Token to allow authenticated calls
Session ID for the Anytime carsharing CZ backend uses.
The app may use third party code and libraries that use “cookies” to collect information and improve their services as well as to ascertain information about your location, for marketing and analytical purposes and for redirection to other sites, as the case may be. You have the option to either accept or refuse such when “cookies” are being sent to your device. If you choose to refuse our “cookies”, you may not be able to use some portions of this Service. The use of “cookies” setting is part of your Internet browser. Most browsers automatically accept cookies as the default setting. You may set your web browser in such a way as to ban or block the storing of “cookies” on your device, including the “cookies” of third parties. You can also block or permit the storage of “cookies” for certain websites only. You can delete the “cookies” that are already stored on your device at any time and make the corresponding changes to the settings of the relevant Internet browser. You will find the specific procedure for the most commonly used web browsers here:
The data which we obtain in this way may be disclosed to other processors that provide sufficient and credible guarantees of safeguarding the protection of your Personal Information, in particular to the operators of other services and platforms. Collected “cookies” are mainly processed via:
4. Which services do we use to evaluate usage data and how can they be deactivated?
Use of AppsFlyer Technology
We use the services of AppsFlyer Ltd., 14 Maskit St., Herzliya, Israel (“AppsFlyer”, www.appsflyer.com) to learn more about how users reach and use our app. When using these services, certain information about the devices used by the users, their online behavior and the page content accessed is collected, processed and used. This applies in particular to information such as: unique identifiers such as IP address, user agent, IDFA (Identifier For Advertisers), Android ID (in Android devices), Google Advertiser ID technical data regarding the device’s operating system, device attributes and settings, applications, advertising optout signals, downloads, impressions, clicks and installations of mobile applications, in-app behavior, device motion parameters and carrier. AppsFlyer uses these data on our behalf to evaluate and analyze the performance of our marketing measures and channels, to find out how users respond to specific campaigns, how they use the app and interact with it. The data described above is not used to individualize individual users or to assign them to a specific person. Furthermore, the data are used to detect and prevent cases of so-called “mobile fraud”, i.e. manipulative and fraudulent actions relating to our marketing measures. On the basis of the collected data which are aggregated in the course of the process, AppsFlyer can identify for us, if certain actions relating to our app (e.g. download or installation) have been manipulated. This also serves our business interests as we have to consider such mobile fraud actions in the invoicing process with our cooperating partners (advertising networks/ partner websites which display our advertisements). The processing of these data is therefore based on the so-called balancing of interests clause in Art. 6(1) lit. f GDPR and our legitimate interest as described above.
iOS device
If the app offers services from service providers and other third parties, especially Apple Maps”, Apple Inc. 1 Infinite Loop, Cupertino, CA 95014, USA, we transfer the users’ personal data to them. This occurs only as necessary for the availability and use of the app and its functions, to pursue legitimate interests of the publisher or third parties, or if you have previously opted in to the transfer. We have carefully selected the service providers and monitor them regularly, particularly with regard to the diligent handling of and security for the personal data accessible to them. We require that all providers agree to confidentiality and compliance with the legal obligations. Data recipients in third-party countries: We transfer users’ personal data to recipients in countries outside the EU / the EEA as follows: USA Apple Maps”, Apple Inc. 1 Infinite Loop, Cupertino, CA 95014, USA
Android device
If the app offers services from service providers and other third parties, especially Google Maps”, Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, we transfer the users’ personal data to them. This occurs only as necessary for the availability and use of the app and its functions, to pursue legitimate interests of the publisher or third parties, or if you have previously opted in to the transfer. We have carefully selected the service providers and monitor them regularly, particularly with regard to the diligent handling of and security for the personal data accessible to them. We require that all providers agree to confidentiality and compliance with the legal obligations. Data recipients in third-party countries: We transfer users’ personal data to recipients in countries outside the EU / the EEA as follows: USA Google Maps”, Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
5. How long does Anytime carsharing CZ stores your data?
We store and process your personal data only as long as needed for the respective purpose. Moreover, data is stored and processed only if required for another purpose, such as to comply with legal requirements (such as retention obligations under tax or commercial laws). In this case, we limit further data processing to this purpose and the legal basis of further processing. Legal basis for the processing of data is performed on the following legal bases: Data processing for contract fulfillment: Article 6 Section1 b) GDPR. Data processing based on your consent: Article 6 Section1 a) GDPR. Data processing for the pursuit of legitimate interests: Article 6 Section1 f) GDPR. Data processing for compliance with legal requirements: Article 6 Section1 c) GDPR Storage by providers in third-party countries “Appropriate safeguards” as defined by Art. 46 GDPR when using service providers as set forth in the section “Recipients of personal data” are provided by standard data protection clauses as approved or adopted by the European Commission, binding corporate rules, or similar instruments. Rights of data subjects: As a data subject affected by data processing, you have the right to information (Art. 15 GDPR), rectification (Art. 16 GDPR), data erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). Right to object For reasons relating to your particular situation, you have the right to file an objection at any time to processing of your personal data based on Art. 6 Section 1 e) GDPR (data processing in the public interest) or Art. 6 Section 1 f) GDPR (data processing based on a consideration of interests). If you file an objection, we will continue to process your personal data only if we can document mandatory, legitimate reasons that outweigh your interests, rights and freedoms, or if processing is for the assertion, exercise or defense of legal claims. To exercise your right of objection send us an email to info@anytimecar.cz.
6. Complaints
If you feel that the processing of your personal data is in breach of legal requirements, you have the right to file a complaint with the responsible data protection supervisory authority (Art.77 GDPR).
7. More information on personal data processed
While using Anytime carsharing CZ service, we may require you to provide us with your (1) last name, first name, other names or patronymic (if specified in the ID-card), (2) date, month and year of birth, (3) place of birth, (4) individual identification number if applicable, (5) the issuing authority, the date of issue and validity period, the series and number of the ID-card (or its substitute), (6) information about the registration address at the place of residence, (7) driver’s license data (issuing authority, issuance date and validity period, series and number of the driver’s license, category driver’s license, (8) contact details, including but not limited to mobile phone number, e-mail address, (9) information on the presence (absence) of medical contra-indications to the use of the vehicle, (10) photography, (11) data on the place of work and position held, (12) geolocation data (navigational data), (13) advertising ID for the purposes of identification of the user´s devise at starting the rent, un/locking the vehicle, and (14) any other personal data related or which may be created in connection with the conclusion and performance of a contract to which you are party. The information that we request will be retained by us and used as described in this Privacy Policy.
8. More information on personal data processing purposes
Fraud prevention and identification check
Anytime carsharing CZ checks your personal customer data against sanction lists and compliance lists within the framework of legal requirements and within its own legitimate interests. For fraud prevention purposes, Anytime carsharing CZ carries out an identity check which is done by our service provider Sum and Substance Limited, incorporated and registered in England with company number 09688671, whose registered office is at 80 Wood Ln Central Working White City London W12 0BZ, as part of a manual reconciliation process. If you decide to validate your driving license and ID card via our Anytime carsharing CZ App, the images you have taken of your driving license, ID card and the portrait picture you have taken yourself will be collected and processed for the purposes of validating your driving license and ID card. The driving license data and ID card are read out electronically from the pictures of your driving license you have taken, and the pictures of your face are compared with the driving license/ID card pictures (face match). These images are stored as permanent proof of driving license/ID card control. These image files are verified by our service provider Sum and Substance Limited, incorporated and registered in England with company number 09688671, whose registered office is at 80 Wood Ln Central Working White City London W12 0BZ, as part of a manual reconciliation process. Anytime carsharing CZ processes the position data (start and end position) of its vehicles in order to analyze the use of its fleet. Such data is also used to develop a statistical model which is able to predict a possible future demand for Anytime carsharing CZ vehicles. For such purposes only data without a direct link to a natural person is being processed. To the extent data processing is based on the balance of interest test and thus legitimate interests (Art. 6 para. 1 f GDPR), more information about the balance of interest test is available upon request.
Rent
To start and terminate the individual lease of our Anytime carsharing CZ vehicles, it is necessary that we record the starting position and final position, the distance driven, the quantity of fuel used and the time and date of lease. Anytime carsharing CZ processes your personal data provided in course of the registration for our services in order to set up your customer account and to contact you for contract related purposes. This also includes the validation of a driving license with one of our validation partners. In this context, we collect your driving license data to ensure that you have the appropriate driving license. If you contact our customer service by email or telephone, Anytime carsharing CZ collects the information and data (including personal data) provided by you in order to be able to process your request. A further collection and processing of your personal data, such as a call recording for improving our customer service, will only take place if you have given your consent. If you use a vehicle of another Anytime entity in another country, Anytime carsharing CZ transfers your personal data provided by you during the registration and validation to this Anytime entity to enable the rental. In the event of an accident with the Anytime carsharing CZ vehicle, we process the personal data collected in connection with the accident in order to settle damage claims with the other party involved in the accident and/or with our and/or the other party’s insurance company. The aforementioned processing of personal data may also be based on the legitimate interests of Anytime carsharing CZ (Art. 6 para. 1 f GDPR). We process personal data from you on the basis of Art. 6 para. 1 f GDPR, on the basis of the legitimate interests of Anytime carsharing CZ with regard to the processing. Anytime carsharing CZ also processes your personal data collected during the individual lease process in order to identify and rectify possible errors and malfunctions in the rental process and in the overall operation of services. Anytime carsharing CZ may transfer your personal customer data (name, address) to third parties, if this is necessary to enable the respective third parties to establish contact with the respective customer and to directly raise claims towards the customer in the case of not obviously unfounded claims of such third parties asserted against Anytime carsharing CZ, which arise from parking violations in private space. Anytime carsharing CZ may transfer your personal customer data to governmental authorities, courts, external advisors, and similar third parties that are public bodies or authorized third parties (e.g. mobility platform providers) as required or permitted by applicable law e.g. if the processing is necessary for the purposes of the legitimate interests pursued by Anytime carsharing CZ. This may for example be the case, if you have committed an administrative offense during an individual lease.
Marketing
To provide you with information and advice from Anytime carsharing CZ about our products and services and to provide you with individualized offers (e.g. on events or special offers) in writing, in a personal conversation, or by electronic mail (email, SMS, messenger, push messages). If you have consented, your personal data may also be collected and processed to apply analytical methods including profiling to measure and evaluate your interests. This is done or the purpose of further individualizing the contact between Anytime carsharing CZ and you. The processing may include that online usage behavior and social media usage is being collected and processed. Based on your consent we may also provide you with information of cooperation partners of Anytime carsharing CZ about their products and services. Creation of user profiles to improve our services and adapt our products even better to your needs. Anytime carsharing CZ links data about the use of our products and services with your profile and can thus inform you according to your interests. This also includes, for example, that your use of our website or our app is recorded and evaluated together with your personal customer data. Conducting personalized market research and opinion surveys for quality assurance purposes and improving our own services and products. In order to improve its own services and products, personal customer data resulting from the use of Anytime carsharing CZ vehicles with customer consent. It also includes position and transaction data that arise during the use of mobility services. If you use corresponding mobility or networked vehicle services, position and movement data (in particular GPS data) are generated. We can process the data transmitted to us from the vehicle for this purpose to evaluate, for example, in which area and when you use mobility offers or track your vehicle position. This way we can point out suitable promotions or show you available mobility offers in your area when you park your vehicle. Collecting and processing this data, enables Anytime carsharing CZ to better analyze its own products and to ultimately improve them for all Customers.
9. Are you obligated to provide your personal data and what happens if you do not provide it?
The provision of the personal data necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract is mandatory, otherwise we would not be able perform such a contract or in a position to take steps at your request. The provision of other personal data is voluntary. If, for example, you do not wish to provide your personal data as part of your consent, you can still use our services. However, it may then not be possible for Anytime carsharing CZ to offer you services and products requiring your consent. Anytime carsharing CZ transfers your personal data to the recipients and/or categories of recipients described below:
10. More information of third parties involvement
Anytime carsharing CZ uses external IT service providers who provide server infrastructure, IT maintenance tasks or extensive IT solutions (such as cloud services) and software solutions on behalf of Anytime carsharing CZ. Anytime carsharing CZ uses external service providers for invoice archiving purposes. Governmental authorities, courts, external advisors, and similar third parties that are public bodies or other authorized third parties, provided that the facts described above are present (e.g. parking offence or administrative offences or a legal obligation to provide information or account suspension due to unauthorized use). For the organization of marketing activities and promotions, personal customer data are partly transferred to service providers used for these purposes. Anytime carsharing CZ uses external service providers for market research purposes. Anytime carsharing CZ transfers your personal data to shipping companies if processing is required for communication by post. In the event of an accident with an Anytime carsharing CZ vehicle, customer data is transferred to insurance companies and if applicable, to the other party involved in the accident. Anytime carsharing CZ uses external service providers to ensure the safety and cleanliness of the vehicles and to find any lost objects. For this purpose, vehicle related and in some cases driver related data are transferred to these service providers. Anytime carsharing CZ uses external service providers to provide our customer service. For this purpose, personal customer data is transferred to these service providers. For the validation of driving licenses at Anytime carsharing CZ validation partners, Anytime carsharing CZ uses these partners as service providers. For this purpose, personal customer data is transferred to these service providers. Anytime carsharing CZ processes your data in countries where the EU Commission has established an adequate level of data protection. In the following cases, processing takes place in countries where the EU Commission has not established an adequate level of data protection. We have ensured an adequate level of data protection by providing for appropriate safeguards, in particular, by entering into agreements with the recipients of personal data based on so called EU standard contractual clauses issued by the European Com mission pursuant to Art. 46 para. 2 GDPR.
11. More information on the term of storage of the data
Anytime carsharing CZ stores your personal data for as long as this personal data is necessary for the fulfilment of the purpose the data has been collected for. In addition, Anytime carsharing CZ stores personal data if this is required by legal regulations. In addition, Anytime carsharing CZ stores personal customer data until the expiry of applicable limitation periods in order to be able to assert any existing legal claims.
12. Please take note that you have the following rights according to legal regulations:
to demand information from us about which of your personal data we process; to demand an explanation from us regarding the processing of personal data; to request access to such data and to have these data updated or rectified; to demand that we erase personal data – the company will erase such data if this is not contrary to valid legal regulations and the legitimate interests of the company. You have the following rights under data protection law: You have the following rights in connection with the processing of your personal data which, however, might be limited under the applicable national data protection law: In accordance with Art. 15 GDPR, you have the right to information about the personal data stored by Anytime carsharing CZ. This means that you have the right to obtain from us confirmation as to whether or not personal data concerning you is processed, and, where that is the case, to request access to the personal data. The access information includes –inter alia –the purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipients to whom the personal data have been or will be disclosed. However, this is not an absolute right and the interests of other individuals may restrict your right of access You have the right to obtain a copy of the personal data undergoing processing. For further copies requested by you, we may charge a reasonable fee based on administrative costs. The right to access may be limited in accordance with applicable laws. You may have the right to have incorrect personal data corrected in accordance with Article 16 GDPR. This means that you have the right to obtain from us the rectification of inaccurate personal data concerning you. Depending on the purposes of the processing, you may have the right to have incomplete personal data completed, including by means of providing a supplementary statement. You have the right to have your personal data erased in accordance with Art. 17 GDPR. This means that under certain circumstances, you may have the right to obtain from us the erasure of personal data concerning you and we may be obliged to erase such personal data. The right to erasure may be limited in accordance with applicable laws. Protection Act In accordance with Art. 18 GDPR, you have the right to request a restriction on the processing of your personal data. This means that, in this case, the respective data will be marked and may only be processed by us for certain purposes (e.g. with your consent or to raise legal claims). In accordance with Art. 20 GDPR, under certain circumstances, you may have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you may have the right to transmit those data to another entity without hindrance from us. If you have given Anytime carsharing CZ consent to data processing, you can withdraw this consent at any time with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal. You also have the right to lodge a complaint with the competent data protection supervisory authority, in particular in the EU Member State of your habitual residence or of an alleged infringement of the GDPR. Under certain circumstances, you may have the right to object, on grounds relating to your particular situation, or where personal data are processed for direct marketing purposes at any time to the processing of your personal data by us and we can be required to no longer process your personal data. Moreover, if your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. In this case your personal data will no longer be processed for such purposes by us. To exercise your right of objection, if possible, please send us an email to info@anytimecar.cz. To exercise the above rights, please (if possible) send us an email to info@anytimecar.cz. Ïf you have doubts as to whether we are adhering to the obligations associated with personal data processing, to contact us or Office for Personal Data Protection, with its principal office at Pplk. Sochora 27, 170 00 Prague 7, e-mail: posta@uoou.cz, WWW: ˂https://www.uoou.cz˃.
13. Changes to the Privacy Policy
This Privacy Policy may require an update from time to time –e.g. due to the implementation of new technologies or the introduction of new services. We reserve the right to change or supplement this Privacy Policy at any time. We will publish the changes on www.anytimecar.cz and inform you via email accordingly.