URBER – PRIVACY POLICY
Last updated May 25, 2018
INTRODUCTION
At Urb-it AB (publ) (“Urb-it” or “we”), we protect your personal integrity and always strive for a high level of data protection (e.g. we would never sell your personal data to another company). This Privacy Policy explains how, why and for how long we collect, process, store, share and use your personal information. It also describes your rights and how you can exercise them. It is important that you understand the privacy policy and feel safe in our treatment of your personal data. You are always welcome to contact us for any questions. This Data Protection Policy applies to being part of the company as an Urber.
WHAT IS PERSONAL DATA AND WHAT IS PROCESSING OF PERSONAL DATA?
Any information related to a natural person or ‘Data Subject’, that can be used to directly or indirectly identify the person. It can be anything from a name, a photo, an email address, bank details, posts on social networking websites, or a computer IP address. Encrypted data and different types of electronic identities (e.g. IP number) are personal data if they can be linked to a person. Processing of personal data is all that happens with personal data. Each action taken regarding personal data is a treatment, regardless of whether it is performed automated or not. Examples of common processing are collection, editing, registration, organization, structuring, storage, transmission and deletion.
WHO IS RESPONSIBLE FOR THE PERSONAL INFORMATION WE COLLECT?
URB-IT AB (publ), Org.nrcompany number: 556959-9755, Vattugatan 17, 111 52 Stockholm, Sweden, and its subsidiaries, including Urb-it Paris SAS, company number 350 261 152, 5 Boulevard de la Madeleine, 75001 Paris, France, and Urb-it London Ltd, company number 0999823, 10 Margaret Street, London W1W 8RL, United Kingdom. Please contact us at dataprotection@urbit.com if you have any questions or would like further information about how and why we collect, process and store data and how you can exercise your rights as a data subject. Urb-it has dedicated professionals that are responsible for handling and architecting all the processes and solutions used by our products, systems and services, providing security of information.
HOW DO WE HANDLE YOUR PERSONAL DATA?
The Urber agrees that Urb-it will (taking into account the nature of the processing and the information available to Urb-it) assist the Urber in ensuring compliance with any obligations of the Urber in respect of data protection impact assessments and prior consultation, including if applicable the Urber’s obligations pursuant to Articles of the GDPR, by providing the Additional Security Controls – Urb-it has a controlled environment, with an access restriction policy and authenticated integrations with processors and sub-processors.
WHY DO WE COLLECT, STORE AND PROCESS PERSONAL DATA?
- All data is used to…
- …provide, operate and improve Urb-it’s services.
- …provide work and the necessary tools and support to our Urbers to successfully execute the task at hand. Urb-it processes personal data for the following purposes and based on the following legal bases:
WHAT PERSONAL DATA DO WE COLLECT ABOUT YOU AS AN URBER AND FOR WHAT PURPOSE?
PURPOSE |
DATA COLLECTION PROCESSES |
CATEGORIES OF PERSONAL DATA |
In order to process deliveries and disputes. | To be able to handle information about delivery address, current status of delivery and about the consumer who will receive it. To be able to be identified by the consumer and proceed with the delivery process. To be able to create a more personal connection with the consumer during the delivery process. To be able to collect information that could help in solving process of reclamation and warranty errands. |
|
LAWFUL BASIS FOR PROCESSING |
||
Contractual Necessity Purchase agreement. This collection of personal data is necessary for us to fulfill our commitments according to the purchase agreement. | ||
DATA MINIMIZATION (LIFETIME FOR THE COLLECTED INFORMATION) |
||
We store the data for a period as long as the Urber is part of the Urber Community and is necessary to comply with booking laws, customer protection laws, directive on distance selling, etc. |
PURPOSE |
DATA COLLECTION PROCESSES |
CATEGORIES OF PERSONAL DATA |
In order to be able to process transactions regarding the financial aspects of the relationship with the Urber. | To be able to pay salaries and related financial transactions. To be able to have a report of working hours to then calculate the salaries correctly. |
|
LAWFUL BASIS FOR PROCESSING |
||
Contractual Necessity The treatment of the informations is necessary to fulfill the contract between the sub-processor company and employee when to the rights and duties of the employment contract (the work assignment between Urber / Urb-it). (Rec.30; Art.7(1)(b), Rec.44; Art.6(1)(b)) | ||
DATA MINIMIZATION (LIFETIME FOR THE COLLECTED INFORMATION) |
||
We store the data for a period as long as the Urber is part of the Urber Community and is necessary to comply with booking laws, customer protection laws, directive on distance selling, etc. |
PURPOSE |
DATA COLLECTION PROCESSES |
CATEGORIES OF PERSONAL DATA |
In order to measure the performance and reach of advertising campaigns, to optimize advertising of the job as an Urber, enabling our community to grow. | To be able getting insights and reports about our ads from our sub-processor, who collects and analyses the data. |
|
LAWFUL BASIS FOR PROCESSING |
||
Legitimate interests The treatment of the information is necessary for us to grow, engage and activate the crowdsourced Urber Community in order to enable more assignment opportunities. | ||
DATA MINIMIZATION (LIFETIME FOR THE COLLECTED INFORMATION) |
||
Urb-it does not collect personal data, only the anonymised user statistics, for more info see Facebook Privacy Policy. |
PURPOSE |
DATA COLLECTION PROCESSES |
CATEGORIES OF PERSONAL DATA |
In order to start the recruitment process. | To be able to collect and transfer candidate information. |
|
LAWFUL BASIS FOR PROCESSING |
||
Consent By sending in the application through a Facebook lead ad you agree with both Facebook and Urb-it to process your information. Legitimate interests The treatment of the information is necessary for ours and the candidate’s wish to proceed with the recruitment process, then becoming a part of the company’s subcontractors. | ||
DATA MINIMIZATION (LIFETIME FOR THE COLLECTED INFORMATION) |
||
We store the data as long as the recruitment process is ongoing. When a candidate is no longer eligible for the position all personal data will be deleted. |
PURPOSE |
DATA COLLECTION PROCESSES |
CATEGORIES OF PERSONAL DATA |
In order to proceed with the recruitment process understanding the profile of the candidates and their will to be part of our mission. | To be able to proceed with the recruitment of a candidate evaluating their synergy with the company, mission and vision. To be able to process and inform our sub-processor about next steps in recruitment. |
|
LAWFUL BASIS FOR PROCESSING |
||
Consent The treatment of the additional information of the CVs will be kept during the recruitment process and sending the CV itself is to agree with that. Legitimate interests The treatment of the information is necessary for ours and the candidate’s wish to proceed with the recruitment process, then becoming a part of the company’s subcontractors. | ||
DATA MINIMIZATION (LIFETIME FOR THE COLLECTED INFORMATION) |
||
We store the data as long as the recruitment process is ongoing. When a candidate is no longer eligible for the position all personal data will be deleted. |
PURPOSE |
DATA COLLECTION PROCESSES |
CATEGORIES OF PERSONAL DATA |
Creating and maintaining the Urber Community | To be able to assess and ensure capacity to handle different order volumes. To be able to create engagement and a sense of belonging to the social environment of Urb-it through personal interaction and access to other Urbers activity. To be able to provide relevant and motivating opportunities of work to our Urbers. |
|
LAWFUL BASIS FOR PROCESSING |
||
Legitimate Interests The treatment of the information is necessary for us to engage and activate the crowdsourced Urber Community and for us to provide opportunities of work to the Urbers. | ||
DATA MINIMIZATION (LIFETIME FOR THE COLLECTED INFORMATION) |
||
We store the data for a period as long as the Urber is part of the Urber Community |
PURPOSE |
DATA COLLECTION PROCESSES |
CATEGORIES OF PERSONAL DATA |
In order to ensure support to Urbers, retailers and consumers. | To be able to ensure staffing during all service hours. To be able to ensure the desired level of quality for our service. To be able to provide work history insight in different financial or legal matters. |
|
LAWFUL BASIS FOR PROCESSING |
||
Legitimate Interests The treatment of the information is necessary for us to ensure staffing during all service hours, improve the professional skill set of the person functioning as support and to develop the quality of our service. | ||
DATA MINIMIZATION (LIFETIME FOR THE COLLECTED INFORMATION) |
||
We store the data for at least twelve (24) months or beyond that to ensure compliance with legal obligations such as booking laws, tax legislation laws etc. |
WILL URB-IT SHARE OR TRANSFER MY PERSONAL DATA?
We may transfer to or share your information with selected third parties, this might be services we as a company need and use to carry out our services and products, i.e.
Consumers. Some personal information will be shared with the consumer, this information is necessary to fulfill the delivery. Your information will be safely used and will be accessible only during the time needed to complete the delivery.
-
- Retailers and Partners. Urb-it shares your information with the retailer where you claimed your order, when the personal data is necessary for the retailers/partners performance and administration of your order, including disputes. The personal data shared with the retailer/partner will be subject to the retailers/partners privacy policies and practices.
-
- Authorities. Urb-it may disclose necessary information to authorities such as the police or other authorities if we are required by law or you agreed to it.
-
- Divestment. We may disclose your personal information to third parties in the event that Urb-it sells or buys any business or assets, Urb-it may disclose your personal data to the prospective seller or buyer of such business or assets. In such a scenario, you will be informed so you have the possibility to exercise your rights, for example “the right to be forgotten”.
- Suppliers and Subcontractors. The purpose might related to our infrastructure, for example a cloud database or a payment provider. We take all reasonable legal, technical, and organisational measures to ensure that your data is treated securely and with an adequate level of protection when transferred to or shared with such selected third parties, and only if it’s necessary to fulfil the purpose. See further information below.
INFRASTRUCTURE
We use the following sub-processors to provide our cloud infrastructure environment and storage of our Urber Data:
Subprocessor |
Geographic Location |
Amazon Web Services, Inc. | USA, Ireland and Germany |
Microsoft Azure (Reg Only) | USA and Ireland |
PROCESSING OF USER CONTENT
We work with various sub-processors that monitor, maintain and otherwise support the Services. In order to provide this functionality these sub-processors may, but not necessarily, have access to Urber Data:
Subprocessor |
Country of Processing |
Purpose |
OnboardIQ, Inc. | USA | Urber Recruitment |
MailChimp | USA | Email Delivery |
Intercom, INC | EU / ESS | Customer Support |
Frilans Finans Sverige AB | EU / ESS | Payments |
Frilans Finans UK Ltd | EU / ESS | Payments |
Frilans France Services | EU / ESS | Payments |
Microsoft | Ireland,Finland, Netherlands and Austria | Cloud database, Tools and Communication |
Google apps | Ireland and Finland | Cloud database and Tools |
Apple Inc. (iCloud, iMessage) | Ireland and Finland | Communication and Contact Information |
Slack Technologies, Inc | USA | Internal Communication |
SAS Capitole Mobile | France | Communication |
Doodle Ltd. | Ireland and Germany | Scheduling Tool |
Zapier, Inc | USA | Email automation and automatic transfer of candidate data |
WHAT RIGHTS DO YOU, AS A DATA SUBJECT, HAVE?
-
- Right to access your data. You may request a transcript of records if you would like to know and verify the information we have on you. The transcript of records may be requested free of charge. However, this does not apply if requested multiple times in a short time, i.e. spamming.
-
- Right to rectification. You have the right to correct inaccurate or incomplete information about yourself.
-
- Right to be forgotten (Right to erasure). You have the right to request the deletion of your personal data insofar as this personal data is no longer necessary for the purpose it was collected. However, certain legal obligations prevent us from immediately deleting parts of your data. These obligations derive from accounting and tax laws and consumer rights laws. What we will do is block the data that we must keep from being used for any other purposes than meeting such legal requirements.
HOW CAN YOU EXERCISE YOUR RIGHTS PROVIDED UNDER THE GDPR?
Please contact us at dataprotection@urbit.com if you want to exercise any of your rights mentioned above.
HOW WILL WE NOTIFY YOU ABOUT CHANGES IN THIS POLICY OR SECURITY BREACHES?
We will notify you before we make changes to this policy and give you the opportunity to review the revised policy before you choose to continue working as an Urber. We will notify you in case of any security breach that we have identified as harmful for the personal data that we hold from you. The notification process will be done via email or SMS.
WHAT ABOUT COOKIES AND OTHER TRACKING TECHNOLOGIES?
We use cookies and similar technologies to deliver a tailored and smooth online experience. For detailed information about how Urb-it uses cookies and similar, please read our cookie policy. We also use geotracking when using map functionality on your device. Speaking of cookies, we also deliver them from Ladurée Paris and Ladurée London. If you read all the way here, you deserve a cookie.
HOW DO WE USE AND INTERACT ON SOCIAL MEDIA?
Urb-it uses different social media platforms. When posting and interacting with Urb-it on these platforms the platform itself is the controller of the data and you are responsible for what information you share. You can find us on the following social networks: Facebook, Instagram, Snapchat and LinkedIn. By being an Urber, you accept our Data Protection Policy and our processing of your personal information. You also agree that Urb-it uses electronic communication channels to send information to you. It is important that you read and understand our data protection policy before accepting to become an Urber