Privacy declaration

Scope

This Privacy Statement Lease a Bike governs the collection, use and other forms of processing of personal data by Bike Mobility Services Group Austria GmbH. (“BMS”) related to our services, our Lease a Bike products and this website.

Who is responsible for processing your personal data?

BMS (Am Tabor 36, 1020, Vienna) is the legal entity responsible for all collection and all processing of your personal data in connection with the products, services and websites of Lease a Bike.

BMS is part of Pon Holdings B.V. its affiliates and its subsidiaries (“Pon”). BMS and Pon are committed to respecting and safeguarding your privacy and the security of your personal data you share with us.

Why do we process your personal data?

Personal data is information that identifies you as an individual or relates to an identifiable individual. When you choose to register your personal data, contact us, or visit our websites, we will process some personal data about you. We process these personal data for the following purposes:

communicate with you in a personal way or to inform you about Lease a Bike products or services, consistent with your choices;
provide customer service, including service around the purchase of services and products, fulfil warranty obligations and product recalls for our own services and those of related companies, and to deal with any enquiries or complaints;
administer and fulfil your purchases of Lease a Bike products including the financial and logistic handling;
administer your Lease a Bike account;
administer your participation in any contests, promotions, surveys or website features;
perform market research and improve our business, services and Lease a Bike products or to develop new business, services and products;
perform statistical analyses and reporting;
providing services on the internet;
communicating with participants and offering a loyalty program;
provide app functionality, including providing relevant commercial messages;
to communicate future promotional and marketing information including direct marketing purposes and retargeting;
to aggregate and/or anonymize personal data in order to generate other data for our use;
to comply with our legal obligations, resolve disputes, or enforce our agreements;
as otherwise stated at or about the time information is collected.

Which personal data we process?

Which personal data we exactly process, depends on which websites, products or services you use. We process the following personal data.

Personal data you provide
This is the personal data that you enter when you use our websites, products or services. This data includes e.g. your name, address, gender, email address, phone number, age, birth date, BMS products you bought, the account name and password that you create, bank details for buying BMS products etc.

Data collected via sensors
Many products are equipped with one or more sensors or use the sensors of the devices on which the products are provides. Examples of sensors are GPS receivers, Wi-Fi or Bluetooth receivers, a camera and touch screens.

In accordance with the purposes for processing the via the sensors collected data about you and the used devices will be send to BMS and other third parties that need the data for providing the agreed services to BMS.

Metadata
This is data that is collected or generated automatically when you use the websites, products or services of BMS. Metadata is often collected or generated when using a computer or device when you send data via a computer network, such as the Internet. This data contains data that may be used by the user interface or device activities, as well as IP addresses, unique device identifiers, MAC addresses of Wi-Fi and Bluetooth devices, cookies and data from computer activities itself. Please refer to our Cookie Policy Lease a Bike for further details.

How do we process your personal data?

In the table below we describe per way of processing: the personal data and the purposes for which we process the personal data as well as the legal basis for the processing:

Ways of processing	Personal data processed	Purposes for processing the personal data	Legal basis
Registration for our newsletter	Name, e-mail address	The above described purposes: 1, 2, 6, 7, 8, 11, 12, 13 en 14	Consent or legitimate interest
Contact form customer service	Name, e-mail address and telephone number	The above described purposes: 1, 2, 6, 7, 8, 11, 12, 13 en 14	Performance of a contract or legitimate interest
Lease a Bike account creation	Name, address, e-mail address and telephone number. Possible, personnel number or department code	The above described purposes: 1, 2, 4, 6, 7, 8, 9, 11, 12, 13 en 14	Consent, legitimate interest or performance of a contract
Product Lease a Bike registration	-	The above described purposes: 1, 2, 3, 6, 7, 8, 9, 11, 12, 13 en 14	Performance of a contract or legitimate interest
Buying Lease a Bike products on the website	Name, address, e-mail address and telephone number. Possible, personnel number or department code	The above described purposes: 1, 2, 3, 6, 7, 8, 9, 11, 12, 13 en 14	Performance of a contract or legitimate interest
Attend to product promotion, events or online forum	Name, e-mail address and telephone number	The above described purposes: 1, 5, 6, 7, 8, 11, 12, 13 en 14	Consent or legitimate interest
Visit our websites (cookies)	Metadata. NB: please refer to our Cookie Policy Lease a Bike for further details	The above described purposes: 6, 7, 8, 11, 12, 13 en 14	Consent or legitimate interest
Log on our websites via social media	Metadata NB: we never get access to your social media account	The above described purposes: 1, 6, 7, 8, 11, 12, 13 en 14	Consent or legitimate interest
Use of our app	-	The above described purposes: 1, 2, 6, 7, 8, 10, 11, 12, 13 en 14	Consent or legitimate interest

Our legitimate interests include: marketing, advertising, security, (crime) prevention, IT management, research and analysis of our products or services, business management, legal affairs, internal management.

You have the right to withdraw your consent which you may have given to the processing of your personal data at any time by sending your withdrawal request to [email protected].

How do we share or transfer your personal data?

You should be aware that BMS is part of a business group within Pon and that departments (like IT, Marketing) can be located in Pon companies around the world. As a consequence your personal data may be shared within and/or transferred to other business group companies or other Pon companies around the world. You can consult the list and location of our companies here: http://www.pon.com/nl-nl/our-business/bedrijven.

BMS may share your personal data also with third parties to perform certain processing activities on behalf of BMS and to facilitate services they provide to us. These can include providers of services such as website hosting, data analysis, payment processing, order fulfillment, information technology and related infrastructure provision, customer service, email delivery, auditing, and other services. BMS may also share your personal data to third parties, to permit them to send you marketing communications, consistent with your choices. BMS requires these third parties to process and protect your personal data diligently. BMS will not sell your personal data to third parties.

BMS or Pon might reorganize, merge or in any other way sell or dispose (part of) a business company to another company. Where such business relates to Lease a Bike, such transfer of ownership may include the transfer of your personal data to the new owner and its advisors. We will otherwise only disclose your personal data if so required or authorized by law, where necessary for preventing or combating fraud, where necessary for dispute resolution, or for any other pressing legitimate need which under the circumstances must outweigh your privacy interests, such as the security of our business and the safety of our staff.

How do we protect your personal data?
BMS AT will take appropriate technical and organisational security measures against the loss or unlawful processing of your personal data. This may include the use of secure registration forms, encryption of data and access restriction to your personal data.

Please note that some third countries do not provide for an adequate level of protection for your personal data. However, you can be assured that BMS will take appropriate safeguards for the confidentiality and protection of your data. For transfers from the EEA to countries not considered adequate by the European Commission, we have put in place adequate measures, standard contractual clauses adopted by the European Commission, to protect your personal data. You may obtain a copy of these measures by contacting [email protected].

How long do we retain your personal data?
We will retain personal data for as long as is necessary or permissible within the scope of the purposes described in this Privacy Statement and in accordance with applicable law. The criteria used to determine our storage period include:

The length of time we have an ongoing relationship with you and provide our services to you (for example, for as long as you have an account with us or keep using our services);
Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them); or
Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).

Cookies, web beacons and similar techniques
If you are using our websites, services, applications, communications (including email) and accessing or using tools, we may use cookies, web beacons and other similar technologies for storing information to provide you with a better, faster and safer browser experience.

Please refer to our Cookie Policy Lease a Bike for the explanation of cookies, web beacons and similar techniques, how we use these techniques and how you can control these techniques.

Your rights
If you would like to request to review, correct, update, suppress, restrict or delete personal data, object to the processing of personal data, or if you would like to request to receive an electronic copy of your personal data for purposes of transmitting it to another company (to the extent these rights are provided to you by applicable law), you may contact us via [email protected]. We will respond to your request consistent with applicable law.

In your request, please make as clear as possible what personal data your request relates to. For your protection, we may only implement requests with respect to the personal data associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable and in any event within any applicable legally required timeframes.

Contact, questions, feedback and Data Protection Officer
If you have any questions about this Privacy Statement, please contact us at: [email protected].

You may also contact our Data Protection Officer (DPO) [email protected]. You have the right to lodge a complaint with a data protection authority for your country or region or where an alleged infringement of applicable data protection law occurs.

Policy changes
We may change this Privacy Statement from time to time. Any changes will become effective when we post the revised Privacy Statement. If necessary, we will inform you when we change the Privacy Statement. This statement was last modified on date: April 7th, 2022.
Reviewed and confirmed on July 11, 2022.