Privacy policy for the taubermobil-App

We observe the regulations of the German Federal Data Protection Act (BDSG), the EU Basic Data Protection Regulation (DS-GVO), as well as other corresponding European regulations and would like to inform you in this data protection declaration in detail and transparently about the processing of your personal data.

Personal data are all data that can be related to you personally, e.g. name, address, e-mail addresses or user behaviour. With regard to the other terms used in the following, such as “responsible party” or “processor”, we refer to the catalogue of definitions in Art. 4 DS-GVO.

1. person responsible

The processing of personal data in connection with the mobilityHQ software used by the Taubermobil e.V. association and the “Car & Bike Sharing within the framework of the Taubermobil App” project is carried out by

Taubermobil Carsharing e.V.
Herrenmühlstr. 24
D-97980 Bad Mergentheim
Germany
Phone +49 (0) 7931 / 9 48 27 61
e-mail: info@taubermobil.de
(hereinafter “we”)

2. collection, processing or use of personal data

We process personal data exclusively within the scope of the service contract to enable the external service provider to use the Software-as-Service solution mobilityHQ used in our association. The legal basis is Art. 6 para. 1 lit. b DSGVO.

The purpose of data processing is the implementation and administration of our car & bike sharing offer of the Taubermobil App, in particular:

• Administration of bookings
• Generation of invoices
• Control of vehicle availability
• Communication with the user

3. nature of the personal data processed

Within the scope of using mobilityHQ, the following personal data may be processed, depending on the respective use:

a) User area

The following points apply to the user area of the booking portal, to which only the registered users of the Taubermobil App car & bike sharing offer have access.

(1) Login

To log on to the booking portal, you must enter your e-mail address and password.

(2) Homepage

The following data is displayed on the “home page” when using the optional modules “Carpooling Centre” or “Driver Search”:

(3) New booking

Users can make a new booking of a vehicle under the item “New booking”. The following data is processed:

• Name of the user making the booking
• booked vehicle
• Start and end of booking
• Start location
• Destination of the booking (optional)
• Estimated distance travelled
• Comment on the booking (optional)

(3) My bookings

All past, active and future bookings can be viewed and edited under “My bookings”. In principle, the following data can be viewed and partially edited:

• Name of the booking user
• Start and end of booking
• Costs of the booking
• Time of booking
• Status of the booking
• Comment on the booking (optional)

(4) My user account

You can view and edit your own user account under “My user account”. The following data is saved:

• Salutation
• First and last name
• E-mail address
• Address
• Landline number
• Mobile number
• Consent to public display of the fixed network number
• Consent to public display of the mobile number
• Date of birth
• Bill addressee
• Payment information (optional)
• Driving licence information (optional)

Vehicle access

If a corresponding device is installed in the vehicle, the following data is processed at the start and end of a booking and every time the vehicle is unlocked and locked in the meantime:

• Booked vehicle
• Current location of the user
• Current time

Administrative area

The following points apply to the administration area of the booking portal, to which only the administrators of the car & bike sharing offer of the Taubermobil App have access

• Homepage

On the “home page” future bookings are displayed (name of the driver, start and end of the booking). In addition, you can see which users are currently using the booking portal (name of the user and time of the last activity).

• Bookings

All past, active and future bookings can be viewed and edited under “Bookings”. The following data can be viewed and edited:

• Name of the booking user
• Start and end of booking
• Start location
• booked vehicle
• Costs of the booking
• Time of booking
• Status of the booking
• Distance travelled
• Destination (optional)
• Comment on the booking (optional)

If the optional modules “Driver Search” or “Carpooling Centre” are used, it is also shown whether this was selected when booking. In this case the destination and a comment are also displayed as additional data points.

a) User

All users registered in the software can be viewed and edited under the item “Users”. The following data is saved:

• Salutation
• First and last name
• E-mail address
• Address
• Landline number
• Mobile number
• Consent to public display of the fixed network number
• Consent to public display of the mobile number
• Date of birth
• Bill addressee
• Payment information (optional)
• Driving licence information (optional)

(b) Invoices

Under the item “Invoices” all past invoices can be viewed. Data that are displayed on an invoice:

• Identification numbers of the individual bookings
• Name of the invoice addressee
• Name of the booking user
• individual posting amounts
• the respective accounting periods
• respective distances covered
• Total amount of the invoice

c) Calendar

Under the item “Calendar” all bookings can be viewed in a calendar view. Basically you can see when the booking takes place (start, end). By clicking on an individual booking, a popup opens with further information (name of the user, booked vehicle).

(b) calculation and presentation of vehicle locations

For the purpose of calculating and displaying vehicle locations, we use map services from Google (Google LLC, 1600 Amphitheatre Parkway Mountain View, California 94043 USA). The following personal data is processed that is required for the use of mobilityHQ. The legal basis is Art. 6 para. 1 sentence 1 lit. B DS-GVO (contract implementation.)

• Display of the vehicle location on a map
• Display of the own location on a map
• Conversion of the address to geographical coordinates when creating or editing a vehicle location

c) Logging of actions

For the purpose of secure operation of the booking software, as well as for traceability in the event of problems and for diagnostic purposes, various actions are logged in the user and administration area, i.e. time, type, content, exporter and result of the action are stored. This includes in particular the creation, editing and deletion of data such as bookings as well as the unlocking and locking of vehicles.

4. duration of storage of personal data or criteria for the storage period

We delete personal data after the storage is no longer necessary for the execution of the contract and no legitimate interests on our part or legal storage obligations (§ 147 German Fiscal Code, § 257 German Commercial Code) prevent a deletion.

5. protection of personal data

Through a bundle of technical and organizational measures in accordance with the state of the art, we secure both our website and the data stored in our area of responsibility against loss, destruction, unauthorized access, changes or publication by unauthorized persons.

The input and transmission of personal data is encrypted using the SSL (Secure Socket Layer) method.

What is SSL?

A website encrypted with SSL transmits personal data encrypted to the server so that it is impossible for third parties to intercept or read them. Our identity is verified by a certificate. Depending on your browser, you can tell that a secure connection exists by the green address bar and/or the lock. By clicking on the lock or the green address bar you can read our online proof of identity.

What are the benefits of SSL?

By encrypting the transmission, you can assume that the data you enter can only be read by us. You can see from the green address bar that you are connected to our server and that it is not the site of a third-party provider.

6. transmission to third parties, categories of recipients of data

We pass on your data to third parties in the context of fulfilling our obligations from the underlying contracts in accordance with Art. 6 Para. 1 letter b DS-GVO, insofar as this is necessary for the processing of the contractual relationship. In addition, we use external technical service providers as contract processors in accordance with Art. 28 DS-GVO, who are carefully selected and monitored by us.

7. use of cookies

In order to be able to offer all functionalities of our SaaS solution, we use so-called cookies on various pages. Cookies are text files that contain information to identify returning visitors exclusively for the duration of their visit to the website. Cookies are stored on the hard disk of your computer and do not cause any damage there. The website cookies contain personal data. Cookies save you from having to enter data more than once, facilitate the transmission of specific content and help us to identify particularly popular areas of our website. They thus enable us to continuously improve the structure and content of our website. The legal basis is Art. 6 Para. 1 lit. b DS-GVO.

8. rights of the persons concerned

You are entitled to the following rights in relation to personal data concerning you:

• Right to information in accordance with Art. 15 DS-GVO,
• Right of correction or deletion under Art. 16 DS-GVO or Art. 17 DS-GVO,
• Right to restrict processing under Art. 18 DS-GVO,
• Right to data transferability according to Art. 20 DS-GVO,
• Right to object to processing under Art. 21 DS-GVO.

You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

9. opposition or revocation of the processing

If you have given your consent to process your data, you can revoke it at any time. Such a revocation influences the permissibility of processing your personal data after you have given it to us.

Insofar as we base the processing of your personal data on the balancing of interests, you may object to the processing. This is the case if the processing is in particular not necessary for the fulfilment of a contract with you, which is described by us in the description of the functions.

In the event of such an objection, we ask you to explain the reasons why we should not process your personal data as we have done.

In the event of your objection, we will examine the facts of the case and will either discontinue or adapt the data processing or delete your data and release you from the contract in a timely manner or show you our compelling reasons worthy of protection, on the basis of which we will continue the processing in order to satisfy the various interests, if necessary with the help of an arbitration body.

10. amendment of the data protection declaration

We reserve the right to adapt this privacy policy to the underlying processes at regular intervals. We will inform you of any changes to the data protection declaration.

Translated with www.DeepL.com/Translator (free version)