Source: https://www.drive-now.com/be/en/privacy
Timestamp: 2020-05-25 04:50:40
Document Index: 485433165

Matched Legal Cases: ['Art. 6', 'Art.6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6']

DriveNow Privacy Policy Belgium
This data protection statement applies to DriveNow's website, which can be accessed under the domain https://www.drive-now.com/be/en/brussels ,and the various subdomains (hereinafter referred to as "our website").
The responsible party and service provider is DriveNow, Esplanade 1 box 57 1020 Bruxelles – Brussel (hereinafter referred to as "DriveNow").
3.5.1 Security, TLS technology
3.5.2 Login notification security action
To enable us to protect you better from the abuse of your data, you will receive an automatic notification by email if somebody logs into your DriveNow customer account using a device which we do not recognise. For this purpose, we save a device-specific ID in your customer profile on the DriveNow website or app and process the following data which we send to you in the notification addressed to you for identification purposes: device type, time, IP address and location on the basis of the IP. These data are naturally only used by us to enhance your security. They are not disclosed to third parties. This data processing is supported by our justified interest as described in Art. 6 Abs.1 letter f of the GDPR.
3.5.3 Risk.Ident
On our website / application (app) we use the services of the it-security-provider Risk.Ident GmbH. Every communication between us and Risk.Ident only happens for the purpose of preventing fraud cases whilst using our website / app.
Data storage: Risk.Ident collects and processes specific data from our users, via cookies and tracking technology, about the features of the device used by the customer (“device related data”), raw data out of the TCP/IP connection and data about the usage of our website / app. Thereby Risk.Ident also collects and processes the IP-address of the user. However, this is encrypted within a few seconds at Risk.Ident. The information will be saved in a databank by Risk.Ident for risk prevention purposes.
Data retrieval: When the user signed a contract that entails risk related terms on our websites /apps e.g. by creating a user account for the purchase of certain items we retrieve a risk score from the databank of Risk.Ident. The risk score was deposited there for the device used by the customer.
The risk score is based inter alia on information
a) whether the user’s device has communicated or communicated, current or past, via a proxy connection,
b) whether the device recently has dialed in via various internet service providers,
c) whether the device has shown or showed a frequently changing geo reference,
d) how many internet transactions have been executed via the device in the recent past (we cannot detect which kind of transaction it was), and
e) how probable it is, that the device, deposited in the Risk.Ident-databank, actually is the device of the user. The outcome of this risk score supports us in the purpose of preventing fraud attempts.
Data transmission: Furthermore, we transmit data to Risk.Ident to the extent of our knowledge that a user committed or attempted to commit fraud to us. Risk.Ident receives the information about this fact as well as the specific device related data of the user.
Legal basis for these processes is our legitimate interest in accordance with Art.6 par.1 lit. f GDPR. Our legitimate interest is the already mentioned fraud prevention.
We only store the data required for a specific purpose, and only as long as it is needed, not exceeding one year. In case of fraud, data can be stored for a longer term. The data concerned shall be deleted when they are no longer necessary for the purposes for which they were stored, in so far legal storage obligations and periods do not contradict this. In this case we will apply technical measures to ensure that the data will not be used for further processes.
Third party information: Google Dublin, Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, Fax: +353 (1) 436 1001. Usage conditions: https://www.google.com/analytics/terms/gb.html, Overview of data protection: https://support.google.com/analytics/answer/6004245?hl=en, as well as the privacy policy: https://policies.google.com/privacy?hl=en.
7.5.9.1 adjust.io App
App performance tracking: Our mobile apps use the app performance and analysis technology “adjust”, a service provided by adjust GmbH ("Adjust"). When you launch the DriveNow app, “adjust” collects install and event data our iOS and Android mobile apps in order to help us understand how our users are interacting with our apps and to optimize and analyze mobile ad campaigns. For such analysis, “adjust” uses your IDFA or Google Play Services ID, and your anonymized (hashed) IP- and MAC address. The hashes used are one-way hashes and it is not possible to identify you or your mobile device individually. The legal basis for the processing is based on Art. 6 para. 1 f) GDPR. The legitimate interest lies in the analysis and improvement of our mobile advertising campaigns. Your data will (not) be transferred transnationally.
You can opt out of the collection and storage of data at any time with future effect by sending an e-mail to optout@adjust.io.
7.5.11 Visual website optimizer (VWO)
Wingify Software Private Limited, Antriksh Apartments, Sector-14, Rohini, Delhi-110085, India: This enables us to analyse the behaviour of users on our website and the interaction with them, create versions of certain pages and test them by making them available to users selected at random or determined by target groups. For this purpose, VWO is capable, among other things, of recording the mouse movement of users and their interaction with boxes on our website in anonymised form. The anonymity of the users is guaranteed by the fact that no personal data, such as IP addresses, names or entries using the keyboard are recorded. VWO uses cookies to conduct tests and reproduce user behaviour. Further information about the use of cookies by VWO is available at https://vwo.com/knowledge/what-are-the-cookies-stored-by-vwo/.
Information about the general function of VWO is available at https://vwo.com/privacy-policy/.
If you wish to be excluded from VWO's analysis and test methods, you can arrange this at https://vwo.com/opt-out/.
8. Custom Audience / Customised marketing
8.1 Marketing on partner sites (Facebook, LinkedIn, Twitter and Google)
We use the Custom Audience process on our website. This process transfers our customers’ data to our partners Facebook, LinkedIn, Twitter and Google. Our partners compare these data with the data in existing user profiles and, if they match, can inform you specifically about our products and services tailored to your needs. The following categories of personal data are transferred: email address, mobile phone number. The hashing method is used to transfer the data. This method allows your data to be transferred in pseudonymised form.
The aim of processing your personal data is to improve our marketing activities and to tailor them to your needs.
It is possible that your data will be processed in the USA by our partners. Facebook, LinkedIn, Twitter and Google are party to the EU-US Privacy Shield, an agreement which is sure is a reasonable level of data protection.
Your data will be stored and sent to our partners until you object.
You can object to your personal data being processed by Custom Audience. To do this, please send an email to the following email address:
If you object to your data being processed by Custom Audience, your data will no longer be sent to our partners.
We want to provide our customers with regular product recommendation e-mails. For this purpose, we use the e-mail address you specified as part of registration, your name and your date of birth. Our product recommendation e-mails are intended to inform you about products we offer, in which you may be interested on the basis of your most recent lease. In addition, we want to send you our confirmation notification regarding your registration and helpful product use instructions. You will receive these e-mails regardless of your subscription to our newsletter. Furthermore, we will use your data for the following purposes: Measures for the further development of services and products, reporting on the success of the utilised measures in the course of time, testing and optimisation of procedures for requirement analysis, benchmarking, and enrichment of our data, e.g. from publicly available sources or internal market research. We do not share data with third parties. Your data will be stored as long as we maintain a business relationship with you and you have not objected to this data processing. You have the right to object to this data processing, which is based on Art. 6 (1), lit. f, GDPR, at any time, either as a whole or for specific measures. In this case, we will no longer process your data. You may send your objection via e-mail to service@drive-now.com or via regular mail by writing to DriveNow, Esplanade 1 box 57 1020 Bruxelles – Brussel. There is also an unsubscribe link in all notifications, which will be considered an objection if activated.
Our goal is to continually improve our DriveNow customer experience and to make it more user-friendly. For the purpose of sending you such advertisements, we will use the e-mail address you specified as part of registration, your name and your date of birth. In order to send you interest-based advertising, we will use automatically generated information transmitted by your computer such as delivery and read receipts for messages, information on your device, your browser, your activities in our website, including the length of your visit on our website and your lease transactions. We will process this information in pseudonymised form. This ensures that our customers exclusively receive e-mail messages that match their interests relating to the advertising and/or special offers of DriveNow. You will receive these notifications regardless of your subscription to our newsletter. We do not share data with third parties. Your data will be stored as long as we maintain a business relationship with you and you have not objected to this data processing. You have the right to object to this data processing, which is based on Art. 6 (1), lit. f, GDPR, at any time, either as a whole or for specific measures. In this case, we will no longer process your personal data. You may send your objection via e-mail to service@drive-now.com or via regular mail by writing to DriveNow, Esplanade 1 box 57 1020 Bruxelles – Brussel. There is also an unsubscribe link in all notifications, which will be considered an objection if activated.
We would like to regularly provide interested parties and our customers with advertisements about our products and services about the following products and product categories of our contract partners via e-mail, text message and push. For this purpose, we will use the e-mail address you specified as part of registration, your mobile phone number and your name. Your data will be exclusively used for distributing our newsletter. The identification of your e-mail address and your mobile phone number takes place in a double-opt in process. That means you will receive a separate confirmation e-mail and a 4-digit code via text message after processing your data. You will only start to receive promotional e-mails after clicking on the link included in the e-mail and entering the code contained in the text message. In addition, we will store your IP address and time of registration and confirmation in each case. The purpose of this procedure is to prove your registration and to investigate any possible misuse of your personal data. We do not share data with third parties. Your data will be stored until you withdraw your consent. You have the right to withdraw your consent to this data processing, which is based on Art. 6 (1), lit. a, GDPR, at any time without citing any reasons. In this case, we will no longer process your personal data. You may send your notice to withdraw consent via e-mail to service@drive-now.com or via regular mail by writing to DriveNow, Esplanade 1 box 57 1020 Bruxelles – Brussel. There is also an unsubscribe link in all e-mails, which will be considered withdrawal of consent if confirmed.
9.7 Publicity communication and market research by BMW
On our website it is possible to obtain information about current products and services available from the BMW Group, Bayerische Motoren Werke Aktiengesellschaft (BMW), Petuelring 130, 80788 Munich (BMW). This is done on the basis of your consent. When you log in to the shipment section for customer care and to selected publicity communications and for market research, the data from the entry mask is sent to us and we then forward this information to BMW.
To unsubscribe, you can either send an e-mail to servicedatenschutz@drive-now.com at any time without citing any reasons or unsubscribe via the link at the bottom of any newsletter. You can also cancel your subscription by contacting the BMW Customer Service by phone at: +49 89 1250-16000 or by e-mail at: kundenbetreuung@bmw.de
Please see the data protection information included in Item 165 of our General Terms and Conditions, which you can access at https://www.drive-now.com/be/en/gtc. This section discusses how we process your personal data, which we need to implement individual lease contracts. In addition, we explain which personal data we must process, if applicable, in case of claims for recourse. Due to our legal liability as vehicle owners and to determine non-contractual and/or non-compliant use, we may also process your personal data. When you drive one of our vehicles, we use the so-called geo-fencing system, which involves the identification of your GPS location to provide you with valuable information. This does not involve creating a route profile. We process your personal data to send you additional push notifications for targeted communication. Finally, the section contains information about processing your personal data for identity verification and credit checks.
This privacy policy may be subject to change over time. We encourage you to regularly review the privacy policy for any changes. However, we will provide you with a corresponding notification in case of significant changes. This may involve e-mail notification if necessary. This privacy policy was last updated on September 28, 2018.