Cabonline will act as a data controller, unless otherwise is agreed in a separate agreement. In case of questions regarding Cabonline’s processing of data, please contact Cabonline at email@example.com or at such contact details that are posted from time to time on our platforms.
Your privacy is important to us. For that reason we are committed to protect and safeguard your information and to minimize the amount of personal data we collect. In this document we describe how we use and process your personal data. This Policy provides users with information about the nature, scope and purpose of our collection and usage of personal data. Our intention is to provide the information in an understandable and transparent way.
We might amend this Policy from time to time. If you care about your privacy read the Policy regularly and you will know exactly what we do and why. If we make changes to the Policy which will have an impact on you (for example, if we intend to process your personal data for other purposes than communicated in the past in this Policy), we will notify you of these changes before the new activities begin.
If you disagree with this Policy, you should discontinue using our services. If you agree with our Policy, then you are all set to book your next taxi ride through us.
1. What information is collected?
If are familiar with our services since before, you’ll know that we offer taxi-related services through our own websites and mobile apps. Unless otherwise is agreed in a separate written agreement with us, we only offer a platform that makes it possible to reserve taxi transportation with taxi companies (“Suppliers”). The Suppliers can advertise their transportation services in the platform, and the users can use the platforms to make reservations with the Suppliers. By making a reservation through us you enter into a legally binding agreement regarding transportations with the Suppliers. We then act as an intermediary between you and the Supplier, sending your reservation details to the Supplier and sending you the booking confirmation and other relevant information related to the booking. We also provide an overview of previous trips.
In order for our services to function we need to collect some personal data from our users:
a. You are therefore required to provide name and phone number at registration.
b. You are also requested to submit additional personal data, e.g. e-mail address, age and payment details.
c. We may also register additional information depending on your usage of the services, e.g. frequently used addresses, transactional information, troubleshooting, information submitted when in contact with service staff, submitted ratings etc.
d. We will also collect data regarding the date and time you accessed our platforms, the hardware and software (including choice of browser, language settings etc.) used when visiting our platforms, call and SMS data for contacts between driver and user, user pattern (clicks, taps, visited pages, cookies or similar), IP-addresses.
e. If you are booking through our mobile application we will also collect information regarding your gps-position, device specific settings and other characteristics of your phone, information regarding app crashes and other system activity.
f. We may also collect information during your trip in order to facilitate payment through the app. If your employer has entered into an agreement on taxi transportation with us, we may receive information about you from your employer.
g. When using our services, the driver may provide us with an user rating after completed trip.
Should you want to minimize the amount of personal data that is collected we refer you to bookings through our call centres. When booking through our call centres we will only store information regarding the phone number used to make the booking. Please note however that the phone call may be recorded.
You always have the right to review the personal information we keep about you. You can request an overview of your personal data by contacting us on firstname.lastname@example.org or at such contact details that are posted from time to time on our platforms. If you find any personal data registered by us to be incomplete, inaccurate or misleading we are obligated to correct such erroneous information.
1. What is the purpose of us collecting and using personal data?
We use the information for various purposes; the overall purpose is to provide you with a world-class booking service. Your personal data may be used for the following reasons:
I. Administrating booking requests and offering transportation services. This includes the possibility to swiftly book transportation, for users to follow a booked car as it is dispatched to pick-up as well as for drivers to identify the location of the users and to contact the user, to facilitate a swift and smooth payment of the trip as well as to have a complete overview of previous trips all services provided through one application. To provide you with our services, we will need to collect and use your personal data and share it with our Suppliers.
II. Customer service. In order to ensure that you get the customer service you deserve we may share your personal data with our customer service staff, e.g. to assist you with amending a booking request, getting in touch with the driver etc.
III. Account administration. By collecting and storing your personal data we can create personal accounts for our customers. Through the personal account you are able to file booking requests, get an overview of previous trips, register payment details in order to ensure a smooth ride and much more.
IV. Marketing activities. Based on the information you share with us we can create personalised offers, offer discounts or other promotional activities. These activities may include:
a. Regular news letters to your e-mail. In case you do not want to receive these e-mails you can always click the “unsubscribe” link included in each mail.
b. Individualised offers which entitles you to discounts etc. In case you do not want to receive these e-mails you can always click the “unsubscribe” link included in each offer.
c. Market research. We sometimes ask you to participate in market research in order to improve our services.
V. Reviews of driver, car etc. During and after a completed taxi ride you may be invited to submit a review. In order to improve our services and ensure that the Suppliers are in compliance with our quality standards we store your reviews. But please note that our Suppliers never receive information on the identity of the customers that gave a specific review.
VI. Improving our services. We are always trying to improve our services. We may therefore use personal data for testing and analytical purposes, including e.g. troubleshooting or to improve functionality and the quality of our services.
VII. Call monitoring. When calling to us live listening may be done. Calls may also be recorded for quality control and training purposes which include the usage of the recordings for the handling of claims and fraud detection purposes. Recordings are kept for a limited amount of time and automatically deleted, unless we have a legitimate interest to keep such recording for a longer period, including for fraud investigation and legal purposes.
VIII. Legal purposes. In order to handle and resolve legal disputes or for regulatory compliance (including legal requirements relating to bookkeeping etc.) we may have to use personal data.
1. What is the legal basis for us to process the data as described above?
In view of purpose (I) and (II), we rely on the legal basis that the processing of the personal data is necessary for the performance of a contract, specifically to provide and administer the taxi ride you have booked. If the required personal data is not provided, we are unable to provide you with the taxi ride and we cannot provide you with customer service. In view of purposes (III) to (VII), we rely on our legitimate commercial business interest to provide our services, to prevent fraud and to improve our services. When using personal data to serve ours or a third party's legitimate interest, we will always balance your rights and interests in the protection of your personal data against our legitimate rights and interests or those of the third party.
For purpose (VIII), we rely on compliance with legal obligations (such as lawful law enforcement requests).
1. Will the personal data be shared with any third parties?
In order fulfil the purpose of the services we will share your personal data with the financial institutions necessary in order to process payment. We may also share personal data with third party analytics providers in order to improve our services. By using the services you also authorise us to share your personal data with the Suppliers. The Suppliers consist of dispatch centrals specialised in taxi transportation. Each dispatch central either have own licensed taxi cars or have entered into agreements with independent contractors with license to carry out transportation of passengers. The Suppliers may therefore, from time to time, need to show your personal data to independent contractors. Suppliers and their contractors will receive information only upon confirming your booking request. They will not have access to the overview of previous trips that is stored by us.
With the exemption of the above, personal data will only be forwarded to a third party if you have given your explicit consent, when it is necessary in order for us to fulfil the agreement with you, or when we are obliged to do so according to mandatory law or other regulation.
1. How long will the personal data be stored?
We will retain your personal data for as long as we deem it necessary to enable you to use our services, to provide our services to you (including maintaining the user account (if created)), to comply with applicable laws, resolve disputes with any parties and otherwise as necessary to allow us to conduct our business, including to detect and prevent fraud or other illegal activities.
Your account will be erased upon your termination of the account agreement. You also have the right to be forgotten, meaning that we will erase your personal data upon your request (except for such personal data that is necessary for us to keep in order for us to be compliant with legal requirements or for payment purposes, but in such case we will erase your data as soon as it is no longer necessary to keep). All personal data we retain will be subject to this Policy. If you have a question about a specific retention period for certain types of personal data we process about you, please contact us via the contact details provided below.
1. What kinds of security procedures are put in place to safeguard your personal data?
We take reasonable procedures to prevent unauthorised access to, and the misuse of, personal data.
We use appropriate business systems and procedures to protect and safeguard the personal data you give us. We also use security procedures and technical and physical restrictions for accessing and using the personal data on our servers. Only authorized personnel are permitted to access personal data in the course of their work.
1. What rights to I have in relation to the personal data you store and process about me?
You are by law entitled to a number of rights on how we use, store and process your personal data. In addition to the rights already explained above you may:
a. you can ask us for a copy of the personal data we hold about you;
b. you can inform us of any changes to your personal data, or you can ask us to correct any of the personal data we hold about you but, as explained below, you may be able to make such changes yourself;
c. As mentioned above, you can - with certain limitations - ask us to erase, or block or restrict the processing of, the personal data we hold about you, or object to particular ways in which we are using your personal data;
d. in certain situations, you can also ask us to send the personal data you have given us to a third party;
Where we process your personal data based on legitimate interest or the public interest, you have the right to object at any time to that use of your personal data subject to applicable law.
We rely on you to ensure that your personal data is complete, accurate and current. Please do inform us promptly of any changes to or inaccuracies of to your personal data by contacting us. If you have an user account, you can access a significant amount of your personal data through our website/apps. Our website/apps generally present you with the option to add, update or remove information we have about you.
If any personal data we have about you is not accessible through our website/apps, you can send us your request at no cost. For any of your requests in regards to this Policy and to exercise any of your rights or if you have a complaint, please contact us by emailing to email@example.com. You may also contact the Swedish Information Commissioner’s Office (Svenska: Integritetsskyddsmyndigheten). If you wish to object to the processing of your personal data on the basis of legitimate interest and no opt-out mechanism is available to you directly, please contact us at firstname.lastname@example.org.