Information note on the processing of personal data for the I’Velo Urban service
Version dated May 24, 2018.
The personal data you provide us is collected and processed by the personal data operator Asociaţia Green Revolution, an association registered and operating in accordance with Romanian legislation, based in Avrig Street no. 21-31, bl. U2, sc. 1, 10th floor, apt. 43, district 2, Bucharest, registered in the Register of Associations and Foundations attached to the Bucharest district 2 Court of Law under no. 36 of March 25, 2009 (hereinafter referred to as “AGR” or “We”), registered in the Register of Personal Data Operators under no. 17259/2012.
This information concerns all personal data collected by the I’Velo rental centers, at the I’Velo Urban office and through the website www.ivelo.ro, with the view of the rental of bicycles through the I’Velo Urban service (“I’Velo Urban Sevice“).
For us, AGR, the security and privacy of your personal data are of significant importance. Therefore, we will take all necessary measures to ensure the security and confidentiality of personal data processed and to process personal data according to the applicable legal provisions and solely for the purposes specified below.
Personal data processed by us
In order to conclude the rental agreement related to the I’Velo Urban Service (“I’Velo Urban Agreement“), we will collect the following personal data from you:
- Identification data: full name, place and date of birth, domicile, personal identification number, ID Card series and number, as shown in the identity document provided by you;
- Contact details: phone number and e-mail address;
- Bank card data (to make payments by card, if applicable).
How we collect personal data
We collect only those personal data you provide to us on a voluntary basis in order to create the I’Velo Urban user account on the website www.ivelo.ro, as well as for accessing the I’Velo Urban Service. Your surname, name, contact details and bank card details are entered by you directly into your user account, or provided, directly to AGR representatives. Subsequently, in order to be issued the I’Velo Urban access card (“I’Velo Urban Card“), we scan your identity card and your identification data, except for the photo, are extracted from its electronic copy by means of an OCR software and are transferred to the AGR management application. The copy of the identity document is deleted as soon as your identification data has been inserted in the application.
Please note that there is no negative effect on you if you decide not to provide us with these personal data. However, your identification data are necessary to conclude the I’Velo Urban Agreement, since it can not be concluded without the accurate and complete identification of the contracting parties.
Purposes and legal grounds for processing
Personal data collected from you are processed solely for the purposes specified in this Information Note and only under a legal ground for processing as specified by the applicable legal provisions on the protection of personal data:
- Your identification data, contact details and bank card data will be processed by Us for the conclusion and execution of the I’Velo Urban Agreement, as well as for your identification and contact, in order to be able to send and get back, if you do not give back voluntarily, the bicycle handed over to you pursuant to the I’Velo Urban Agreement concluded. The processing of your personal data is based on the legal basis related to the execution of an agreement, all the data collected being indispensable for its valid conclusion.
- Your surname, name and contact details will be processed by Us according to your implied and unambiguous consent, expressed through the introduction of this data at the creation of the I’Velo Urban user account on the website ivelo.ro.
- If you give your express consent, we will be able to process your personal data and for direct marketing purpose, to send you promotional offers on our products and services, as well as to send you information and / or newsletter regarding various events, campaigns and initiatives aligned with the purpose pursued by AGR. At any time you may withdraw your consent to such processing by email at email@example.com and so AGR with cease any processing of your personal data for direct marketing purposes.
Taking into consideration that you are entitled to know the purpose for which we process your personal data, we will inform you before processing your personal data for any purpose other than those for which you have entrusted your personal data to us, unless this subsequent purpose is incompatible with the original purpose, in which case we will also require your consent for that subsequent processing.
Furthermore, we protect your interests, rights and freedoms in an appropriate manner. Personal data is stored in a secure location and it is also protected while in transit. Data that is no longer necessary to reach the goal is deleted.
Personal data minimization
Collection of your personal data is limited to what is strictly necessary for the attainment of the goals described above.
Duration of storage
Your identification data, contact details and bank card data will be stored for the entire duration of the I’Velo Urban Agreement, exactly for the entire period in which you will have the status of I’Velo Urban user.
Your personal data will be processed for the purpose of direct marketing and in order to provide customized services, for a period of not more than 2 (two) years from the time you have given your consent in this respect, being automatically deleted after the expiry of this period. If you withdraw your consent at any time for the processing of personal data for the purposes of direct marketing or for the provision of personalized services, we will cease any activity of processing for that purpose and we will proceed to delete the processed personal data, as soon as possible, but not later than 30 (thirty) days, with the exception of personal data the processing of which is necessary for the execution of the I’Velo Urban Agreement.
Similarly, if the storage of other personal data is necessary under express legal provisions, we may still store your personal data for the time period provided for by those legal provisions.
Recipients of the personal data
Your card details will be disclosed to the payment processor, Euro Payment Services SRL, for the purpose of processing payments by card for subscriptions or additional costs resulting from the fact that you took advantage of I’Velo Urban Services.
Subject to your consent, your contact details will be disclosed to Raiffeisen Bank S.A. and Kaufland Romania, for marketing purposes, so that the latter can send offers and other promotional messages with regard to the products and services offered.
We will not disclose or transfer your personal data to other persons, except for the cases where such disclosure or transmission is made under mandatory legal obligations, in which case we will inform you as soon as possible of their transmission.
Security of personal data
For us, AGR, the security and privacy of your personal data are very important. Therefore, we will take all necessary measures in order to ensure the security and confidentiality of the personal data processed. If we find an incident about the security of personal data posing a risk to your rights and freedoms, we will notify the National Supervisory Authority for Personal Data Processing (ANSPDCP) within 72 hours. Also, you will be personally informed about the security incident if it is likely to pose a high risk to your rights and freedoms.
Know your rights
You have the following rights with regard to the processing of personal data which concerns you: (1) the right of access to personal data; (2) the right to obtain rectification or erasure of personal data; (3) the right to obtain restriction of the processing of personal data; (4) the right to the portability of personal data; (5) the right to object to the processing of personal data.
Exercise your rights
If you have any questions about the processing of your personal data or if you want to make any request to us, and to exercise any of your rights regarding the processing of your personal data, please contact us at the e-mail address: firstname.lastname@example.org, telephone number: 021 327 57 78 or at our location at the following address: Intrarea Valului no. 2, district 1, Bucharest.
We will review each request as soon as possible, but no later than one month. In case we need more information from you or we have difficulties in solving your request, we will inform you without delay that we need extra time to properly analyze your request.
In the event that you consider that we have not resolved all your requests or you are dissatisfied with our answers, you can file a complaint against us to ANSPDCP.
You can also make an appeal against us directly to the competent courts.
Thank you for entrusting us with your personal data and for making time to read the information about how we process those data. If you have any questions, please do not hesitate to contact us.
o I declare that I am aware of the provisions of this information note on the processing of personal data.
o I agree to the processing of my contact details for direct marketing purposes and I am aware of the provisions of this information note on the processing of personal data for direct marketing purposes.
o I agree that my contact details can be transferred to Raiffeisen Bank S.A. and Kaufland Romania for direct marketing purposes, in order to receive offers and other promotional materials on the services and products they offer.