UNI CYCLE SOLUTIONS LIMITED
Last updated on November 1st, 2020
The Right of Access
Data subjects have the right to access all data a business holds about them at any time. This includes session and payment data.
What if a customer demands to see their data?
As a data processor, we’re under a legal obligation to assist the data controller to provide this information.
One thing to bear in mind is that there’s a big risk around Data Subject Right Requests: They can be used for fraud. We have to be careful to authenticate the customer before providing the information. We don’t want an identity thief to exploit your system in order to steal consumer information.
The Right to be Forgotten – what data you can (and can’t) delete
Another important Data Subject Right is the Right to be Forgotten. In a marketing context, this means deleting every record of the consumer and never contacting them again. This is straightforward. But it’s not so clear-cut when it comes to payment and bookkeeping data, and there are situations when certain data can’t be revoked.
There are situations when certain data can’t be revoked.
For example, in a product sales scenario, where there are statutory warranties in place, e.g. if your customer has an annual subscription, which hasn’t been cancelled, you need to keep the data in order to continue billing or store data for bookkeeping.
Who the GDPR applies to
The GDPR applies to all organisations operating in the EU or processing “personal data” of EU and Switzerland residents.
What data the GDPR applies to
Under the GDPR, the concept of “personal data” is very broad and covers any information relating to an identified or identifiable individual (also called a “data subject”). Personal Data is anything that you could conceivably use to identify a person within a larger group. That includes name, address, email, IP address, cookies, location etc.
The type of information we collect
We collect or receive information in different ways. The types of information we collect or receive depends on how you use and interact with our Services. In many cases, you can choose the information you provide to us, although certain information is required for us to provide the Services. We use and disclose this information for the purposes described further below. The types of information we collect include:
Account Information: such as your name, e-mail address, telephone number, home postcode and payment information such as your credit card details.
Location data: when you sign up and use the Services. For example, to show you Uni Cycle Solutions bicycle rack near your location, it is necessary to collect and record the physical location of your device to provide the services.
Service data: When the service is used, we collect the type of service used, such as bicycle rack booking, the time length of that service, as well as the price paid.
Third Party Service: If you link, or login to Uni Cycle Solutions with a third party, such as Facebook. The third-party service may send us information such as your profile information.
Contact information: When you ask for customer service, support or other assistance, you can choose to provide us with your contact information so we can better respond to your requests and we may keep information about your engagement with our support services.
How we use the information we collect
We use your information to:
Provide the services to you at your request including to manage your account and parking history;
Monitor and service the smart bicycle racks;
Process payments, subscriptions, discounts or special offers such as free parking time;
Communicate with you about your account, interactions, or transactions including service-related announcements such as changes to our policies. As allowed by local law, we may also send to you surveys or marketing communications, including information about features and enhancement to our services;
Optimise, develop and improve our services
Where necessary, to comply with our legal obligations including to meet regulatory or local law requirements.
Who do we share your information with
We share your information with Lime’s affiliated companies, our service providers, other third parties where it is necessary to perform the Terms and Conditions and as described in this GDPR Notice. In particular we share your information with:
Our service providers and partners. We share your information with our trusted service providers and partners who provide services to Uni Cycle Solutions such as hosting data and our infrastructure, processing payments, supporting and improving the Services, performing customer service, or providing marketing and advertising services. For example, we share information with credit card issuers in order to process your payments and refunds.
Collaborations with third parties. After removing certain identifiers, such as your name, phone, and e-mail address (where provided), and combining the resulting information with similar information from other users, Uni Cycle Solutions may use, license, and share your information, including parking location history, with third parties for research, business or other purposes. For example, Uni Cycle Solutions partners with universities and local government authorities to collaborate on research projects such as understanding traffic and travel patterns in a city.
How long we keep your information
We keep your information for as long as is reasonably necessary to provide the Services to you or until your account is deleted, whichever is longer, subject to any longer period as may be required by applicable law or notified to you.
When you delete your account, it may take us additional time to fully delete your information from our databases and system logs. We may also retain information from deleted accounts to prevent fraud, collect fees, to comply with our legal obligations or enforce our legal rights.
If you are habitually located in the EEA, Switzerland or the UK, you benefit from a number of rights in relation to your information. While some of these rights apply generally, certain rights apply only in limited cases. These rights do not necessarily apply to you if you are based outside these regions.
Right of access. You can access much of your information by logging into your account. You can also request a copy of the information we have about you and information explaining how the information is used.
Right of rectification. You have the right to request that we rectify inaccurate information about you.
Right of erasure. You have the right, in certain cases, to request that we delete your information, provided there are valid grounds for doing so and subject to applicable law.
Right to restrict processing. You have the right, in certain cases, to temporarily restrict the processing of your information by us, provided there are valid grounds for doing so.
Right to data portability. You may have the right to receive certain of your information in a structured, commonly used and machine-readable format and to transmit such information to another controller.
Right to withdraw consent. Where you have previously provided your consent, such as to send you direct marketing, you have the right to withdraw consent at any time. However, this will not affect the lawfulness of the processing based on consent before its withdrawal. Furthermore, even in case of a withdrawal, we may continue to use your information as permitted or required by law.
Emails and Other Communications
If you would like to change the types of communications you receive from us, including opting out of promotional communications from us, you may do so at any time by updating the communication preferences specified in your account profile. We may continue to send non-promotional communications such as staffing confirmations, and other information about your use of the Service. If you refer others to us using our email functionality, please note that they may choose not to receive any promotional emails from us in the future by following the opt-out instructions in the email invitation.
Accessing and Managing Your Information
If you have an account with Uni Cycle Solutions, you can review, change or delete your information by logging into your account and editing your profile. You can change your mobile phone number or email address by using our in-app change feature. You can delete your Uni Cycle Solutions account at any time by submitting a request to us at firstname.lastname@example.org.