Source: https://www.oply.com/privacy-policy/?lang=en
Timestamp: 2019-04-18 23:49:03+00:00

Document:
Processing to fulfill legal obligations under Article 6 para. 1 (c) GDPR,, this means that a processing of the data is required by law or other regulations.
If you purchase goods or services on our website and deposit your e-mail address, we may subsequently use this information to send you product information by e-mail regarding the booked product or similar products of the processor. In such a case, only direct advertising for our own similar goods or services will be sent by e-mail. We will also send you emails related to your bookings, such as: Reservation confirmations, warnings before the expiration of reservations, changes regarding bookings etc.
When sending the product information, your e-mail address will be forwarded to the external service provider “Braze Inc.”, who will be responsible for sending the newsletter on our behalf. Any further use is not made by the service provider. The service provider is located outside the European Union in the United States of America.
The legal basis for the transfer of the data to the shipping service provider is Article 28 para. 3, (6 and 7, Article 46 para. 2 (c) GDPR. The standard data protection clauses of the EU Commission are used in contractual relation with the provider.
You may object or revoke your consent to the use of the e-mail address for advertising purposes at any time, without incurring any costs beyond the charges of your communications tariff. You can object to the use of any advertising mail by clicking on a link provided there with effect for the future. You may also opt-out of advertising for future use by emailing service@oply.com. In the case of opposition by e-mail, the implementation of the cancellation or blocking can take up to 3 working days; In this period, you may still receive advertising emails. You can not contradict the use of the e-mail address for addressing in the context of the performance of the contract or storing of business letters. If you no longer wish this, you would have to delete the account at Oply or have it deleted, otherwise we would not be able to properly fulfil the contract.
The Oply website has a contact form which can be used for electronic contact. If you enter data in the input mask, these are transmitted to us and stored. This data is: your name, your e-mail address, if necessary your telephone number, the nature of your request and your individual message to us. In addition, the date and time of your message is automatically recorded.
The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 para. 1 (f) and if necessary also (a) GDPR. If the e-mail contact aims to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 (b) or (c) GDPR.
You have the option at any time to revoke your consent to the processing of personal data with effect for the future or to object to further use. The contradiction can be explained by email to: service@oply.com. A deletion can only take place, as far as no legal storage period is given; in this case, the data will be locked for another use. In such a case, the conversation cannot continue.
links, the length of stay on individual pages and the order of use of the website, the frequency of the page request.
Analytics will not be merged with other Google data.
Agreement on the European Economic Area prior to retransmission to the USA.
Insofar as you use the services of our call center, our employees will collect the information necessary for the fulfilment and answering of your request. This includes in particular your first and last name, e-mail address, telephone number, any reservation number and other information about the booking process.
If you agree to a recording, we will record and evaluate individual calls for quality assurance purposes.
The data is collected and processed by a call center service provider based in the European Union Your data may also be transmitted to our parent company, Examotive S.A., based in Luxembourg, and processed there on our behalf.
The legal basis for the collection of personal data and your concerns is Art. 6 para. 1 sentence 1(b) and (c) GDPR.
The legal basis for the record of the talks is Art. 6 para. 1 (a) and (f) GDPR.
The legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR is in the quality control of the Call Center.
of Article 28 para. 1 and para. 3 GDPR.
The legal basis for the transfer of the data to Zendesk Inc. is Article 28 para. 3, 6 and 7, Article 46 para. 2 (c) GDPR. The standard data protection clauses of the EU Commission are used in contractual relation with the provider.
The purpose of the data processing is the initiation or execution of bookings and reservations, as well as the solutions of any problems in the use of the services of Oply. With regard to the recording of the calls, the purpose is to ensure a consistently high quality of customer service. The sent messages are archived as business letters and stored for the duration of the legal retention period. Data that are not required for the execution of the contractual relationship will be deleted immediately.
You may withdraw your consent to the recording of the discussions at any time, after which we will promptly delete the recording, as long as there is no other reason for continued storage.
You have the option at any time to revoke your consent to the processing of personal data from your telephone or to object to further use. You can explain the objection by e-mail to: service@oply.com or call the call center. A deletion can only take place, as far as no legal storage period is given; in this case, the data will be locked for another use. In such a case, the processing of your request can not be continued. You may not revoke or withdraw consent or object to the storage of any business letters.
To use Oply’s car-sharing service, you must first register as a user. To carry out the registration, you will collect and process the following personal data; First name and surname, address, e-mail address, date of birth, if applicable telephone number as well as a user name and a password assigned by you. These data are stored together under a user profile (account). The data are recorded in a database of our parent company, Examotive S.A., based in Luxembourg, and processed there on our behalf. The Examotive S.A. uses the cloud service of Amazon Web Services, Inc. (“Amazon”), headquartered in the United States of America, to store the data.
The legal basis for the aforementioned data is Article 6 para. 1 sentence 1 (b) GDPR. The registration process is the execution of a pre-contractual action, namely the conclusion of the contract with us. The permanent registration as a user enables the fulfilment of the contract, namely the performance of contractual obligations.
The transfer of the data to the Examotive S.A. and their processing by them takes place on the legal basis of Article 28 para. 1 and para. 3 GDPR.
The legal basis for the transfer of the data to Amazon are Article 28 para. 3, Article 45 para. 3, and Article 46 para. 2 (c) GDPR. Amazon is certified under the Privacy Shield Framework and is therefore subject to the EU Commission’s decision on adequacy (Implementing Decision 2016/1250), this means that the level of privacy at Amazon is recognized as equivalent to the GDPR, although Amazon is based in the US. In addition, the standard data protection clauses of the EU Commission are used in a contractual relationship with the provider.
The data processing takes place for the purpose of the execution of pre-contractual measures as well as the contract fulfilment. Without receiving this information, we will not be able to contact you as a user to complete a contract and identify the user. Furthermore, we need this information in order to perform our contractual obligations (for example, to provide you personally with the booked rental car).
There is no right of objection to the processing of data during the registration and during the period of ownership of your Oply account, as the data processing is required to initiate the conclusion of the contract with you or to fulfil the contract. An objection or revocation therefore automatically leads to the termination of the contractual relationship.
The conclusion of single rental agreements with Oply requires that you have provided proof in the course of driving license validation that you hold a valid driving license. To carry out the driving license validation we have commissioned the company Jumio Corporation (“Jumio”). As part of your driving license validation process, Jumio will process data about you at the company’s headquarters in California, USA, including the photograph of you which you have made and sent, and the details printed on the front and back of your driver’s license, such as the validity of the driver’s license, vehicle classes and the photo of you. Jumio only gives us the driving license number, the information about the validity of the driving license and your date of birth.
The processing of the data takes place on the legal basis Art. 6 para. 1 (b) GDPR, as the determination of the existence of a driving license is absolutely necessary for the performance of the contract.
The transfer of the data and its processing by Jumio is based on Articles 28 para. 3, 6 and 7, Art. 46 para. 2 (c) GDPR. The standard data protection clauses of the EU Commission are used in contractual relation with the provider.
The data processing is carried out for the safety of the general public, the driver (renter) and the smooth flow of traffic, as a driver without a valid driving license is a higher risk for road safety – both for themselves and for other road users – and the driver may also cause obstructions to the smooth flow of traffic. Furthermore, the processing of the relevant data serves to limit potential liability risks for Oply.
The data will be stored by Jumio solely for the duration of the use of the Oply services for the purpose of proving the driving license test.
You may object to the use of the driver’s license validation data at any time with future effect, without incurring any charges beyond the charges of your communication rate. The objection can be explained by email to: service@oply.com. In case of objection the data will be deleted or blocked. The implementation of the cancellation or blocking can take up to 3 working days; during this period, processing of the driver’s license validation data may still occur. If the driving license validation is not possible due to an objection to the data processing, you cannot conclude any (further) single rental agreements with us before a driving license validation is carried out again.
When booking a vehicle via the Oply app, we collect the data related to the booking, in particular in the case of the planned booking the time of booking, the desired zone in which the vehicle can be picked up, the desired vehicle type, and the desired booking duration; in the case of Flex -Booking the specific vehicle and reservation duration or the extension of the reservations. Likewise, all declarations and related acts related to the completion or termination of a booking are recorded and stored at the respective time, e.g. the cancellation of a booking, the completion of the journey and locking of the vehicle, opening of the vehicle.
These data are stored on the IT system of our parent company, Examotive S.A. processed in Luxembourg on our behalf.
The legal basis is Art. 6 para. 1 sentence 1 (b) GDPR.
The purpose of the processing of this data is the completion of individual bookings as well as the technical execution of the bookings and the proof of performance to the customer.
The billing-relevant data is stored for the duration of the retention periods for business letters in accordance with the Federal Tax Code and the Commercial Code. All other data will only be stored for as long as necessary to fulfill the purpose.
based in the European Union but may be transferred to the United States of America for processing.
The use of this analysis service we have contracted through our parent company, the Examotive S.A. with headquarters in Luxemburg.
In particular, we provide the provider of “Firebase” with inventory data that is required in the context of addressing by e-mail, push message or SMS. This includes data such as the customer number, first name and last name, date of birth, e-mail address, country of residence, last vehicle model booked, the zone in which the last vehicle was booked and its internal number, and the name and number of the zone in which you are when you open the app, the status (start time, end time, cancellation, etc.) of a current booking or reservation, the status of a driver’s license check.
The software of “Firebase” captures the following data: your geographical location, the geographical location of the booked vehicle, your customer number, booking numbers, the booked vehicle model, time, and notification of the service provider regarding the validity of the driver’s license.
This data is used in combination in order to send you messages via email, in the app, or as push messages in certain situations.
The legal basis is Article 6 para. 1 (b) and (c) GDPR, the latter as far as such emails are to be archived under mandatory law, e.g. tax law.
The transfer of the data to the Examotive S.A. and the data processing by Examotive S.A. takes place on the legal basis of Article 28 para. 1 and 3 GDPR.
The processing of this data serves the targeted addressing of the users for advertising purposes depending on their usage behaviour, or for the proper execution of the contract, as far as the user is to be informed on a contractual basis. Furthermore the purpose is the archiving of tax relevant business letters.
The data is not transferred to third parties with the exception of Google Inc. and the Examotive S.A..
The sent messages are archived as business letters and stored for the duration of the legal retention period. Data that are not required for the execution of the contractual relationship will be deleted immediately.
An objection is only possible in the context of the termination of the contractual relationship, since the dispatch of contract-related messages is mandatory for a proper execution of the contract. You can’t object to the storage of business letters.
In addition, the legal basis is also your consent to the processing pursuant to Art. 6 para. 1 sentence 1 (a) GDPR in the context of the special data usage conditions, in particular with regard to the storage of the start and end points of your bookings.
Oply works with an external payment service provider to process the payments for the Oply services. As part of the app usage the data you entered for payment (name, first name, bank, IBAN, BIC, credit card number, Paypal account, etc.) is transmitted to the payment service provider. Oply only stores the payment method and the last 4 digits of a credit card as well as their validity period or the IBAN.
The processing of payment data and settlement takes place solely through PayOne. PayOne also informs Oply whether a payment was successful or not.
The legal basis for the processing of data when using the Oply services is Article 6 para. 1 (b) GDPR.
PayOne is not working as an order data processor, but is itself responsible for the payment processing.
The purpose is the settlement of payments for the Oply services as well as the identifiability of the payment method by the user.
The data stored at Oply will be deleted as soon as your account is deactivated or deleted.
You may object to the usage of data by Oply at any time. The objection or revocation of consent can be e-mailed to: service@oply.com; Alternatively, you can also delete the respective payment method in the app or at the website. In the case of opposition or revocation of consent, the data will be deleted or blocked. The implementation of the cancellation or blocking can take up to 3 working days; during this period, data may still be processed.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 46
 Art. 6
 Art. 6