PLEASE NOTE: This Policy only applies to the territory of Portugal.
Therefore, it will not be legally binding in any other state.
December 2, 2021Last updated: December 2, 20211. ABOUT WHOOSH
1.1. Under the terms of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("General Data Protection Regulation" or "GDPR"), Whoosh (TIN: 516690116; Address: Largo Machado de Assis, No. 5 V – Roma Park Building, District: Lisbon Council: Lisbon Parish Alvalade 1700 116 Lisbon) acts as a controller; i.e. the entity that determines the purposes and means of the processing of personal data, and that processes the data for its own purposes and in order to comply with legal obligations.
Use our services; b)
Submit a job application; c)
Are browsing our webpage; d)
Are sending a business inquiry; e)
Are already a partner from promotions or other projects; f)
Are a media representative.
(hereinafter referred to as T&C).
1.5. We reserve the right to change this Policy from time to time. If changes are made to this document, an updated version will be immediately published on the Platform; in the event of significant changes, we will notify users by e-mail or other means.
1.6. If you have any additional questions, don't hesitate to get in touch with us at email@example.com. We have also appointed a Data Protection Manager, that can be contacted by using the email address above. *https://whoosh.bike/ 2. LEGAL BASIS FOR USING THE DATA
2.1. Under the General Data Protection Regulation, personal data means any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person
2.2. The processing of personal data must have a legal basis (as provided for in Articles 6, 9 and 10 of the GDPR). As per the data retention periods, the data will be deleted after the term defined according to the GDPR unless there is a pending dispute, in which case, Whoosh will keep the data until the decision is final.
2.3. The General Data Protection Regulation defines processing of personal data as any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction
2.4. The processing of personal data for a specific purpose must meet one of the legal grounds listed in the GDPR. We may process your personal data on the following grounds: a)
if data subject has given consent to the processing of their personal data for one or more specific purposes (Article 6(1)(a)). Data subjects can withdraw their consent at any time by sending an e-mail to firstname.lastname@example.org, or by sending a written request to the address of the Controller; b)
if the processing is necessary for the performance of a contract to which the Data subject is party or to take steps at their request before entering into a contract (Article 6(1)(b)), such as when data is needed to provide the service and fulfil Whoosh's obligations under Terms & Conditions
(e.g. billing information);c)
if the processing is necessary for compliance with a legal obligation to which we are subject (Article 6(1)(c)), such as the obligation to provide information to public authorities; d)
if the processing is necessary for the purposes of the legitimate interests pursued by Whoosh or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data (Article 6(1)(f)). Such interests may include, without limitation, an interest in the development of our Platform or the establishment/development of partnerships with contractors.
2.5. Neither users nor any other persons mentioned in this Policy are obliged to provide us with specific personal data; however, you should bear in mind that in some cases, we will not be able to perform particular actions in the absence of personal data.3. PURPOSES OF THE PROCESSING HOW DO WE USE THE INFORMATION?
3.1. We process personal data of users, including information about the user's location, to execute Terms & Conditions
a) at the request of the user, to provide a service, including for managing the account and travel history;
b) to control, track and maintain our electric scooters or electric bicycles, including while receiving a service;
c) to process payments and provide discounts, for example, not paying for the start of a ride;
d) upon the users' request, provide information about their accounts, such as transactions, and communicate with users as needed. For example, if necessary, to provide information about changes in Terms & Conditions
of the Platform. Under the legislation in the territory where services are provided, we may also send a request for a survey or marketing messages, including information about new features and improvements to the Platform;
e) if necessary, to comply with our legal obligations, including compliance with legal requirements;
g) to cooperate with third parties as described below.
3.2. We process personal data of job seekers, Whoosh parking lot owners, media representatives and potential partners based on the content of the request, for example:
a) prompt communication upon request;
b) approval and signing of documents;
d) exchange of information, including records on a specific project.
3.3. We process the personal data of the website visitors to find out which pages of the website were visited, which links on the website were followed, and other data of user activity on the website to personalize the services and improve them.4. CATEGORIES OF PERSONAL DATA WHAT PERSONAL DATA DO WE PROCESS?
4.1. User data
You are a user if you have installed the Whoosh mobile application on your device and have accepted Terms & Conditions and this Policy. The amount of user data processed depends on the purpose of the processing (for example, contacting customer support, registering in the mobile application). We process this data for the purposes described below. The personal data we may collect includes
a) Account creation data: name, e-mail, telephone, bank card details, day, month and birth year;
b) When users register on or use the Platform, we receive and process their location data. For example, to locate Whoosh electric scooters closest to the user, it is necessary to collect, record and process information about where the user's device is located right now. We track the location of electric scooters and bicycles during the trip, along with the route and other trip data;
c) We may offer features designed to help you use the services, such as to locate vehicles available through the network, including in whole or in part based on your location. You will be asked to give consent to location-based services, normally through an opt-in screen on the app. If you choose to enable location-based services, we may collect your location based on information provided by you or your mobile device, including, if available, GPS, IP address or cell tower information. It you choose to not opt-in to location-based services, you may not have access to the features necessary to use the services;
d) In case of contacting customer support or communication in any other way, we request contact information (contact phone number and e-mail) to answer the question or help. We store the history of communication with customer support and the information transmitted during this communication, including records of phone calls;
e) If we need to confirm the user's age, we may ask the user to send us a photograph taken with the device the user is using (for example, a mobile phone).4.2. Website visitors' data
if you visit our website, you are a visitor.
b) You can disable cookies in your browser settings if you do not want us to process the above information.4.3. Jobseeker data
You are a job seeker if you have submitted a job application to Whoosh by using the feedback form in the relevant section of the website.
a) The job seekers enter and send their data to Whoosh via our webpage.
b) Data submitted by job seekers may include name, contact information, city and desired position and other data at the discretion of the job seeker or if necessary.4.4. Whoosh parking lot owners
You fall into this category if you intend to host a Whoosh parking lot or, on the contrary, want to remove a previously equipped parking lot.
a) We request and use data of this category (name, telephone, e-mail, city, organization, intended parking address, and additional information at the discretion of the applicant).4.5. Potential partners for promotions and other projects
If you are interested in working with Whoosh in marketing, advertising, bonus programs, or other partnerships, you fall into this category.
a) Whoosh requires data, including name, contact information (telephone, e-mail), city, organization name, and other information at the discretion of a potential partner4.6. Media representatives
You fall into this category if you contact Whoosh on behalf of the media.
a) Media representatives provide their contact details, name of the media. They may also offer other information depending on the nature of the communication, for example, the city, the position of the contact person, etc.4.7. Third party data
By providing us with the personal data of third parties when using the Platform, you confirm that the party has consented to such a transfer.5. RECIPIENTS AND INTERNATIONAL TRANSFERS WHEN CAN WE TRANSFER DATA TO RECIPIENTS?
5.1. Also, sometimes, in order to fulfill our obligations, including within the framework of T&C, we transfer user data to affiliates and partners, service providers, and third parties. We make sure that this process is safe. Here are those with whom we can partially share the data:
a) Partners and service providers. To provide the service, we engage trusted and reliable partners and suppliers. This includes payment processing, customer support, insurance, marketing or promotions. For example, we share information with banks for processing payments and refunds, and with an insurance company when a user chooses an insurance service. Please check section 5.2. below to find out specifically what recipients we may share your data with.
b) Third parties. After removing identification data such as name, telephone and e-mail (if any), and combining the information received with similar information from other users, we may use, license and share the aggregated anonymized data (in such cases the data is always anonymized first). This may be travel information provided by third parties for research, business or other purposes. For example, Whoosh works with local authorities to study the specifics and volume of transport traffic within the city. In case of business reorganization, we may transfer user information as part of a sale, merger, or preparation for any of these events. In any case, we will bind the recipients to adopt adequate measures if personal data is involved.
c) State, regulatory and law enforcement authorities. We can transmit information only on the grounds stipulated by the law in response to official requests, in order to comply with the requirements of the applicable law in the territory of the services' provision. This is done to detect, investigate, prevent and eliminate cases of fraud and other illegal actions related to security, as well as to prevent harm to the property or health of users of the Platform, members of the public, employees of the Platform or third parties. The information may be transmitted to State bodies and for the protection of the legitimate rights or property of the Platform, for taking measures in cases of illegal actions or violations of traffic rules, for ensuring the fulfilment of the conditions of use of the service specified in Terms & Conditions
5.2. We may share your data with the following recipients:
- Payment service providers;
- Live chat software providers;
- Marketing platforms;
- Cloud storage providers We also use metric programs (Yandex.Metrica, Google Analytics) to measure website traffic and analyze user behavior, which helps us to constantly improve our service