Information note on the processing of personal data collected by I’Velo Relax rental centers
Version dated May 24, 2018.
The personal data you provide us is collected and processed by the personal data operator Asociaţia Green Revolution, an association registered and operating in accordance with Romanian legislation, based in Avrig Street no. 21-31, bl. U2, sc. 1, 10th floor, apt. 43, district 2, Bucharest, registered in the Register of Associations and Foundations attached to the Bucharest district 2 Court of Law under no. 36 of March 25, 2009 (hereinafter referred to as “AGR” or “We”), registered in the Register of Personal Data Operators under no. 17259/2012.
This information concerns all personal data collected by the I’Velo Relax centers, in the process of renting bicycles to users („I’Velo Relax Service”).
For us, AGR, the security and privacy of your personal data are of significant importance. Therefore, we will take all necessary measures to ensure the security and confidentiality of personal data processed and to process personal data according to the applicable legal provisions and solely for the purposes specified below.
Personal data processed by us
In order to conclude the rental agreement related to the I’Velo Relax Service (“I’Velo Relax Agreement“), we will collect the following personal data from you:
- Identification data: full name, place and date of birth, domicile, personal identification number, ID Card series and number, as shown in the identity document provided by you;
- Contact details: phone number and e-mail address.
Also, through the video surveillance system installed in the renting centers, we will collect video recordings with you.
How we collect personal data
We collect only those personal data you provide to us on a voluntary basis in order to conclude the rental agreement. Thus, we scan your identity card and your identification data, except for the photo, are extracted from its electronic copy by means of an OCR software and are transferred to the AGR management application. Your contact details (i.e. phone number and/or e-mail address) and bank card data are verbally communicated by you and entered directly into the AGR management application. The copy of the identity document is deleted as soon as your identification data has been inserted in the application.
Furthermore, video recordings are automatically collected by the private video surveillance system and stored locally in the I’Velo Relax centers where are stored for up to 30 days from the time of recording.
Please note that there is no negative effect on you if you decide not to provide us with these personal data. However, your identification data are necessary to conclude the I’Velo Relax Agreement, since it can not be concluded without the accurate and complete identification of the contracting parties.
Purposes and legal grounds for processing
Personal data collected from you are processed solely for the purposes specified in this Information Note and only under a legal ground for processing as specified by the applicable legal provisions on the protection of personal data:
- Your identification data, contact details and bank card data will be processed by Us for the conclusion and execution of the I’Velo Relax Agreement, as well as for your identification and contact, in order to be able to send and get back, if you do not give back voluntarily, the bicycle handed over to you pursuant to the I’Velo Relax Agreement concluded. The processing of your personal data is based on the legal basis related to the execution of an agreement, all the data collected being indispensable for its valid conclusion.
- Video recordings captured through the video surveillance system are processed for our legitimate interest, in order to ensure the security of the premises and assets belonging to AGR.
- If you give your express consent, we will be able to process your personal data and for direct marketing purpose, to send you promotional offers on our products and services, as well as to send you information and / or newsletter regarding various events, campaigns and initiatives aligned with the purpose pursued by AGR. At any time you may withdraw your consent to such processing by email at ivelo@greenrevolution.ro and so AGR with cease any processing of your personal data for direct marketing purposes.
Taking into consideration that you are entitled to know the purpose for which we process your personal data, we will inform you before processing your personal data for any purpose other than those for which you have entrusted your personal data to us, unless this subsequent purpose is incompatible with the original purpose, in which case we will also require your consent for that subsequent processing.
Furthermore, we protect your interests, rights and freedoms in an appropriate manner. Personal data is stored in a secure location and it is also protected while in transit. Data that is no longer necessary to reach the goal is deleted.
Personal data minimization
Collection of your personal data is limited to what is strictly necessary for the attainment of the goals described above.
Duration of storage
Your identification data, contact details and bank card data will be stored for the entire duration of the I’Velo Relax Agreement, exactly for the entire period in which you will have the status of I’Velo Relax user.
Video recordings with you will be stored for up to 30 days, being automatically deleted after the expiration of this period.
Your personal data will be processed for the purpose of direct marketing and in order to provide customized services, for a period of not more than 2 (two) years from the time you have given your consent in this respect, being automatically deleted after the expiry of this period. If you withdraw your consent at any time for the processing of personal data for the purposes of direct marketing or for the provision of personalized services, we will cease any activity of processing for that purpose and we will proceed to delete the processed personal data, as soon as possible, but not later than 30 days, with the exception of personal data the processing of which is necessary for the execution of the rental agreement.
Similarly, if the storage of other personal data is necessary under express legal provisions, we may still store your personal data for the time period provided for by those legal provisions.
Recipients of the personal data
Subject to your consent, your contact details will be disclosed to Raiffeisen Bank S.A. and Kaufland Romania, for marketing purposes, so that the latter can send offers and other promotional messages with regard to the products and services offered.
We will not disclose or transfer your personal data to other persons, except for the cases where such disclosure or transmission is made under mandatory legal obligations, in which case we will inform you as soon as possible of their transmission.
Security of personal data
For us, AGR, the security and privacy of your personal data are very important. Therefore, we will take all necessary measures in order to ensure the security and confidentiality of the personal data processed. The security measures implemented are in accordance with Order no. 52/2002 concerning the approval of the minimum security requirements for the processing of personal data issued by the Ombudsman. If we find an incident about the security of personal data posing a risk to your rights and freedoms, we will notify the National Supervisory Authority for Personal Data Processing (ANSPDCP) within 72 hours. Also, you will be personally informed about the security incident if it is likely to pose a high risk to your rights and freedoms.
Know your rights
You have the following rights with regard to the processing of personal data which concerns you: (1) the right of access to personal data; (2) the right to obtain rectification or erasure of personal data; (3) the right to obtain restriction of the processing of personal data; (4) the right to the portability of personal data; (5) the right to object to the processing of personal data.
Exercise your rights
If you have any questions about the processing of your personal data or if you want to make any request to us, and to exercise any of your rights regarding the processing of your personal data, please contact us at the e-mail address: ivelo@greenrevolution.ro, telephone number: 021 327 57 78 or at our location at the following address: Intrarea Valului no. 2, district 1, Bucharest.
We will review each request as soon as possible, but no later than one month. In case we need more information from you or we have difficulties in solving your request, we will inform you without delay that we need extra time to properly analyze your request.
In the event that you consider that we have not resolved all your requests or you are dissatisfied with our answers, you can file a complaint against us to ANSPDCP.
You can also make an appeal against us directly to the competent courts.
Thank you for entrusting us with your personal data and for making time to read the information about how we process those data. If you have any questions, please do not hesitate to contact us.
—————————————————————————————————————————————-
o I declare that I am aware of the provisions of this information note on the processing of personal data.
o I agree to the processing of my contact details for direct marketing purposes and I am aware of the provisions of this information note on the processing of personal data for direct marketing purposes.
o I agree that my contact details can be transferred to Raiffeisen Bank S.A. and Kaufland Romania for direct marketing purposes, in order to receive offers and other promotional materials on the services and products they offer.