URBER – PRIVACY POLICY

Last updated May 25, 2018

INTRODUCTION 

At Urb-it AB (publ) (“Urb-it” or “we”), we protect your personal integrity and always strive for a high level of data protection (e.g. we would never sell your personal data to another company). This Privacy Policy explains how, why and for how long we collect, process, store, share and use your personal information. It also describes your rights and how you can exercise them. It is important that you understand the privacy policy and feel safe in our treatment of your personal data. You are always welcome to contact us for any questions. This Data Protection Policy applies to being part of the company as an Urber.

WHAT IS PERSONAL DATA AND WHAT IS PROCESSING OF PERSONAL DATA?

Any information related to a natural person or ‘Data Subject’, that can be used to directly or indirectly identify the person. It can be anything from a name, a photo, an email address, bank details, posts on social networking websites, or a computer IP address. Encrypted data and different types of electronic identities (e.g. IP number) are personal data if they can be linked to a person. Processing of personal data is all that happens with personal data. Each action taken regarding personal data is a treatment, regardless of whether it is performed automated or not. Examples of common processing are collection, editing, registration, organization, structuring, storage, transmission and deletion.

WHO IS RESPONSIBLE FOR THE PERSONAL INFORMATION WE COLLECT?

URB-IT AB (publ), Org.nrcompany number: 556959-9755, Vattugatan 17, 111 52 Stockholm, Sweden, and its subsidiaries, including Urb-it Paris SAS, company number 350 261 152, 5 Boulevard de la Madeleine, 75001 Paris, France, and Urb-it London Ltd, company number 0999823, 10 Margaret Street, London W1W 8RL, United Kingdom. Please contact us at dataprotection@urbit.com if you have any questions or would like further information about how and why we collect, process and store data and how you can exercise your rights as a data subject. Urb-it has dedicated professionals that are responsible for handling and architecting all the processes and solutions used by our products, systems and services, providing security of information.

HOW DO WE HANDLE YOUR PERSONAL DATA?

The Urber agrees that Urb-it will (taking into account the nature of the processing and the information available to Urb-it) assist the Urber in ensuring compliance with any obligations of the Urber in respect of data protection impact assessments and prior consultation, including if applicable the Urber’s obligations pursuant to Articles of the GDPR, by providing the Additional Security Controls – Urb-it has a controlled environment, with an access restriction policy and authenticated integrations with processors and sub-processors.

WHY DO WE COLLECT, STORE AND PROCESS PERSONAL DATA?

    All data is used to…

  • …provide, operate and improve Urb-it’s services.
  • …provide work and the necessary tools and support to our Urbers to successfully execute the task at hand. Urb-it processes personal data for the following purposes and based on the following legal bases:

 

WHAT PERSONAL DATA DO WE COLLECT ABOUT YOU AS AN URBER AND FOR WHAT PURPOSE?

PURPOSE

DATA COLLECTION PROCESSES

CATEGORIES OF PERSONAL DATA
In order to process deliveries and disputes. To be able to handle information about delivery address, current status of delivery and about the consumer who will receive it. To be able to be identified by the consumer and proceed with the delivery process. To be able to create a more personal connection with the consumer during the delivery process. To be able to collect information that could help in solving process of reclamation and warranty errands.
  • First & last name
  • Private phone
  • Picture
  • Geographical location (Only collected when you set yourself as Active in the Urber app or from 1 hour before expected delivery time of an assigned task to completion of the assigned task.)
  • Urber feedback
LAWFUL BASIS FOR PROCESSING
Contractual Necessity Purchase agreement. This collection of personal data is necessary for us to fulfill our commitments according to the purchase agreement.
DATA MINIMIZATION (LIFETIME FOR THE COLLECTED INFORMATION)
We store the data for a period as long as the Urber is part of the Urber Community and is necessary to comply with booking laws, customer protection laws, directive on distance selling, etc.

 

PURPOSE

DATA COLLECTION PROCESSES

CATEGORIES OF PERSONAL DATA
In order to be able to process transactions regarding the financial aspects of the relationship with the Urber. To be able to pay salaries and related financial transactions. To be able to have a report of working hours to then calculate the salaries correctly.
  • Complete name
  • Address (street, street number, postcode, city)
  • Private email
  • Private phone
  • Personal number, Social security number or National insurance number
  • Bank account details
  • Payment history details
  • Assignment history details

LAWFUL BASIS FOR PROCESSING
Contractual Necessity The treatment of the informations is necessary to fulfill the contract between the sub-processor company and employee when to the rights and duties of the employment contract (the work assignment between Urber / Urb-it). (Rec.30; Art.7(1)(b), Rec.44; Art.6(1)(b))

DATA MINIMIZATION (LIFETIME FOR THE COLLECTED INFORMATION)
We store the data for a period as long as the Urber is part of the Urber Community and is necessary to comply with booking laws, customer protection laws, directive on distance selling, etc.

 

PURPOSE

DATA COLLECTION PROCESSES

CATEGORIES OF PERSONAL DATA
In order to measure the performance and reach of advertising campaigns, to optimize advertising of the job as an Urber, enabling our community to grow. To be able getting insights and reports about our ads from our sub-processor, who collects and analyses the data.
    Social media profile according to your personal settings, example of this is could be:

  • Age
  • Gender
  • Pages you like
  • Mobile device preference

LAWFUL BASIS FOR PROCESSING
Legitimate interests The treatment of the information is necessary for us to grow, engage and activate the crowdsourced Urber Community in order to enable more assignment opportunities.

DATA MINIMIZATION (LIFETIME FOR THE COLLECTED INFORMATION)
Urb-it does not collect personal data, only the anonymised user statistics, for more info see Facebook Privacy Policy.

 

PURPOSE

DATA COLLECTION PROCESSES

CATEGORIES OF PERSONAL DATA
In order to start the recruitment process. To be able to collect and transfer candidate information.
    Could include one or several of the following categories:

  • Complete name
  • Private email
  • Private phone
  • Social and professional profile
  • Mobile device preference
  • Any information the candidate includes in the application

LAWFUL BASIS FOR PROCESSING
Consent By sending in the application through a Facebook lead ad you agree with both Facebook and Urb-it to process your information. Legitimate interests The treatment of the information is necessary for ours and the candidate’s wish to proceed with the recruitment process, then becoming a part of the company’s subcontractors.

DATA MINIMIZATION (LIFETIME FOR THE COLLECTED INFORMATION)
We store the data as long as the recruitment process is ongoing. When a candidate is no longer eligible for the position all personal data will be deleted.

 

PURPOSE

DATA COLLECTION PROCESSES

CATEGORIES OF PERSONAL DATA
In order to proceed with the recruitment process understanding the profile of the candidates and their will to be part of our mission. To be able to proceed with the recruitment of a candidate evaluating their synergy with the company, mission and vision. To be able to process and inform our sub-processor about next steps in recruitment.
  • Complete name
  • Address (street, street number, postcode, city)
  • Private email
  • Private phone
  • Document valid as a personal identification or copy of passport
  • Birth data
  • Work history
  • Study history
  • Typical movements around the city
  • Social and professional profile
  • Mobile device preference
  • Any information the candidate includes in the application
  • Electronic communication history during the recruitment process, mainly email and text messages

LAWFUL BASIS FOR PROCESSING
Consent The treatment of the additional information of the CVs will be kept during the recruitment process and sending the CV itself is to agree with that. Legitimate interests The treatment of the information is necessary for ours and the candidate’s wish to proceed with the recruitment process, then becoming a part of the company’s subcontractors.

DATA MINIMIZATION (LIFETIME FOR THE COLLECTED INFORMATION)
We store the data as long as the recruitment process is ongoing. When a candidate is no longer eligible for the position all personal data will be deleted.

 

PURPOSE

DATA COLLECTION PROCESSES

CATEGORIES OF PERSONAL DATA
Creating and maintaining the Urber Community To be able to assess and ensure capacity to handle different order volumes. To be able to create engagement and a sense of belonging to the social environment of Urb-it through personal interaction and access to other Urbers activity. To be able to provide relevant and motivating opportunities of work to our Urbers.
  • First & last name
  • Private email
  • Private phone
  • Communication history
  • Birth date
  • Pictures
  • Urb-it assignment history
  • Feedback about the work given by consumers
  • Feedback about the work given by Urbers.
  • Urb-it activity details

LAWFUL BASIS FOR PROCESSING
Legitimate Interests The treatment of the information is necessary for us to engage and activate the crowdsourced Urber Community and for us to provide opportunities of work to the Urbers.

DATA MINIMIZATION (LIFETIME FOR THE COLLECTED INFORMATION)
We store the data for a period as long as the Urber is part of the Urber Community

 

PURPOSE

DATA COLLECTION PROCESSES

CATEGORIES OF PERSONAL DATA
In order to ensure support to Urbers, retailers and consumers. To be able to ensure staffing during all service hours. To be able to ensure the desired level of quality for our service. To be able to provide work history insight in different financial or legal matters.
  • First & last name
  • Private phone
  • Availability
  • Urb-it work history
  • Assessment of skills

LAWFUL BASIS FOR PROCESSING
Legitimate Interests The treatment of the information is necessary for us to ensure staffing during all service hours, improve the professional skill set of the person functioning as support and to develop the quality of our service.

DATA MINIMIZATION (LIFETIME FOR THE COLLECTED INFORMATION)
We store the data for at least twelve (24) months or beyond that to ensure compliance with legal obligations such as booking laws, tax legislation laws etc.

 

WILL URB-IT SHARE OR TRANSFER MY PERSONAL DATA?

We may transfer to or share your information with selected third parties, this might be services we as a company need and use to carry out our services and products, i.e.

Consumers. Some personal information will be shared with the consumer, this information is necessary to fulfill the delivery. Your information will be safely used and will be accessible only during the time needed to complete the delivery.

 

    • Retailers and Partners. Urb-it shares your information with the retailer where you claimed your order, when the personal data is necessary for the retailers/partners performance and administration of your order, including disputes. The personal data shared with the retailer/partner will be subject to the retailers/partners privacy policies and practices.

 

    • Authorities. Urb-it may disclose necessary information to authorities such as the police or other authorities if we are required by law or you agreed to it.

 

    • Divestment. We may disclose your personal information to third parties in the event that Urb-it sells or buys any business or assets, Urb-it may disclose your personal data to the prospective seller or buyer of such business or assets. In such a scenario, you will be informed so you have the possibility to exercise your rights, for example “the right to be forgotten”.

 

  • Suppliers and Subcontractors. The purpose might related to our infrastructure, for example a cloud database or a payment provider. We take all reasonable legal, technical, and organisational measures to ensure that your data is treated securely and with an adequate level of protection when transferred to or shared with such selected third parties, and only if it’s necessary to fulfil the purpose. See further information below.

 

INFRASTRUCTURE

We use the following sub-processors to provide our cloud infrastructure environment and storage of our Urber Data:

Subprocessor

Geographic Location
Amazon Web Services, Inc. USA, Ireland and Germany
Microsoft Azure (Reg Only) USA and Ireland

   

PROCESSING OF USER CONTENT

We work with various sub-processors that monitor, maintain and otherwise support the Services. In order to provide this functionality these sub-processors may, but not necessarily, have access to Urber Data:

Subprocessor

Country of Processing

Purpose
OnboardIQ, Inc. USA Urber Recruitment
MailChimp USA Email Delivery
Intercom, INC EU / ESS Customer Support
Frilans Finans Sverige AB EU / ESS Payments
Frilans Finans UK Ltd EU / ESS Payments
Frilans France Services EU / ESS Payments
Microsoft Ireland,Finland, Netherlands and Austria Cloud database, Tools and Communication
Google apps Ireland and Finland Cloud database and Tools
Apple Inc. (iCloud, iMessage) Ireland and Finland Communication and Contact Information
Slack Technologies, Inc USA Internal Communication
SAS Capitole Mobile France Communication
Doodle Ltd. Ireland and Germany Scheduling Tool
Zapier, Inc USA Email automation and automatic transfer of candidate data

   

WHAT RIGHTS DO YOU, AS A DATA SUBJECT, HAVE?

    • Right to access your data. You may request a transcript of records if you would like to know and verify the information we have on you. The transcript of records may be requested free of charge. However, this does not apply if requested multiple times in a short time, i.e. spamming.

 

    • Right to rectification. You have the right to correct inaccurate or incomplete information about yourself.

 

    • Right to be forgotten (Right to erasure). You have the right to request the deletion of your personal data insofar as this personal data is no longer necessary for the purpose it was collected. However, certain legal obligations prevent us from immediately deleting parts of your data. These obligations derive from accounting and tax laws and consumer rights laws. What we will do is block the data that we must keep from being used for any other purposes than meeting such legal requirements.

   

HOW CAN YOU EXERCISE YOUR RIGHTS PROVIDED UNDER THE GDPR?

Please contact us at dataprotection@urbit.com if you want to exercise any of your rights mentioned above.

HOW WILL WE NOTIFY YOU ABOUT CHANGES IN THIS POLICY OR SECURITY BREACHES?

We will notify you before we make changes to this policy and give you the opportunity to review the revised policy before you choose to continue working as an Urber. We will notify you in case of any security breach that we have identified as harmful for the personal data that we hold from you. The notification process will be done via email or SMS.

WHAT ABOUT COOKIES AND OTHER TRACKING TECHNOLOGIES?

We use cookies and similar technologies to deliver a tailored and smooth online experience. For detailed information about how Urb-it uses cookies and similar, please read our cookie policy. We also use geotracking when using map functionality on your device. Speaking of cookies, we also deliver them from Ladurée Paris and Ladurée London. If you read all the way here, you deserve a cookie.

HOW DO WE USE AND INTERACT ON SOCIAL MEDIA?

Urb-it uses different social media platforms. When posting and interacting with Urb-it on these platforms the platform itself is the controller of the data and you are responsible for what information you share. You can find us on the following social networks: Facebook, Instagram, Snapchat and LinkedIn. By being an Urber, you accept our Data Protection Policy and our processing of your personal information. You also agree that Urb-it uses electronic communication channels to send information to you. It is important that you read and understand our data protection policy before accepting to become an Urber