To: Cogo ApS
Att: Data protection officer Bibi Blomqvist
Address: Nørregade 28D, 1165 København K, Denmark
2. APP USERS & WEBSITE VISITORS
This website’s hosting services are offered by Wix.com Ltd (“Wix”). Wix is committed to observing the EU data protection law. Wix.com participates in, and has certified its compliance with, the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework. More information on Wix terms can be found here:
We also use Google Analytics to measure the use of our web services. Google Analytics may place cookies on the user’s device to collect data, for example on website’s visitor numbers. More information on Google Analytics’ terms are found here:
“Personal Data” means any information relating to an identified or identifiable natural person. Personal Data may include information such as personal and professional contact details, address, payment information, and cookies placed on a device;
“Processing” means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction; and
“Cogo”, “Cogo services”, “Services” “Us”, “We”, means any services provided by the Company to its app users or website visitors, for example in our app, once you have given us your consent to track your location, we keep track of your location and movement, including your latitude, longitude, time and speed of travel, in accordance with the order terms and conditions, which can be found at www.cogoapp.io/privacy.
“Mobility services”, “Services in general”, “Provider”, “Operator”, “Mobility Operator”, “Mobility Provider”, means the company (other than Cogo) and services related to the transport of people offered and supplied by the Mobility Operators independently and autonomously with regard to Cogo.
5. TYPES OF PERSONAL DATA
If you use our Services, you may provide Personal Data to us. The types of Personal Data that we collect may, depending on the context, include:
name and contact information including address, phone number and email address;
delivery and billing information, payment information and other information that you provide in connection with the use or purchase of a product or service;
information about preferences and interests based on the use of our app or websites;
Your location and movement, including your latitude, longitude, time and speed of travel;
Photos of vehicles which You upload in the Cogo App;
Selfies (Photos of yourself) to validate that You are wearing a helmet to apply to local laws, increase safety or earn bonuses such as free ride minutes or free unlocks.
If you are claiming a discounted rate as a low-income user, receiver of income support / universal credit / health care contributions, key worker or student evidence of your status, staff card, student campus card or other documentation that can evidence your status;
collection of location data only happens while Cogo is in the foreground (unless explicitly stated otherwise) and if you’ve granted access to your device’s location services;
username and password for our services;
unique ID of the device
usage details, including the country of origin, the searches you make, the routes you interact with, the type of phone or OS you are using, etc.
other information that is relevant for customer surveys, advertisement/marketing or offers; and/or
other user-generated information that you actively choose to share through our website.
We may collect your Personal Data from the following sources:
any of Cogo’s app or websites, when you use our Services; or
from third parties in the form of business partners, such as payment service providers, and companies that the Company engages for marketing purposes.
Cogo does not require personal information to be entered in order to conduct a search on our application. We may collect personal information when our on-demand Services are used, or when the User registers with a Mobility Operator or for our newsletter.
In order to allow a User to access the Mobility Services of a third-party Provider through Cogo, we may ask the User for certain data which is sent to the Provider, who will process it as independent data controllers. The personal data may include, but not limited to: name, address, age, nationality, select information on an identity document or driving license, payment information, password, PIN, etc. This data is processed confidentially and stored securely, and is only transmitted to the Provider of a Mobility Services if the User asks Cogo to access those Mobility Services through Cogo. The communication of that data to the Mobility Operator is necessary to enable the User’s request, and without it, Cogo is not able to provide the Service requested.
6. PURPOSE AND LEGAL BASIS FOR THE PROCESSING
In relation to our users, it is necessary for us to Process their Personal Data for the handling and administration of purchases, to make payments, to give access to our app and websites as well as to provide, operate and improve the Services. Consequently, the legal basis for this Processing is that it is necessary for the performance of a contract.
We may also Process your Personal Data in order to improve our Services, e.g. customer service, and to provide you with relevant information and marketing. Such Processing is based on our legitimate interests.
The Company may as well Process your Personal Data if there is a legal obligation to do so, for example in accordance with the Danish Book-keeping Act (DK. Bokføringslov 1998:1006).
App and Website users
If you provide us with your contact information through the contact form in our app or on our website, we will Process your Personal Data in order to respond to your request.
If you have chosen to receive our newsletter or any promotional material from the Company, as set out below, we Process your Personal Data, i.e. your contact information, based on your consent, for the purpose of sending you the requested material.
Further, the Company may Process Personal Data in order to improve its Services, e.g. customer service. Such Processing is based on the Company’s legitimate interest.
Furthermore, after you have submitted your Personal Data for our newsletter, in our job application form, feedback submission or the registration form, we will have the option to contact you with marketing or promotional materials and other information, unless you choose not to receive such materials, by ticking the appropriate checkbox when providing us with your Personal Data in the above-mentioned forms. You will also have the option to opt out or unsubscribe, from receiving marketing or promotional materials at any time, by choosing the “unsubscribe” option in the emails we send you. If you receive any promotional materials by mail, the material will include specific contact information for unsubscribing from this service.
To process the payment, we use external service providers to whom we transmit the data required for payment processing (first and last name, email address, telephone number, start and end time of the trip, payment ID, payment method, any further data about the means of payment, invoice number, language, zone/region).
For the legal basis of the data processing carried out by the payment service providers under their own responsibility, please refer to the data protection policies of the respective payment service providers:
Depending on the country, the payment options and service providers offered may vary.
In sum, we Process your Personal Data for the following purposes:
To facilitate your use of our app, the website, our Services, and products
At the request of the User, allow them to book, register, or pay for the Mobility Services offered by the Third-Party Mobility Operators; the booking of those mobility Services requires the User to enter their authentication credentials pertaining to the account activated with the Supplier of the Mobility Service selected on each occasion; those credentials will be stored on our server as well as on the User’s device, following the application of adequate security measures by the Data Controller
The provision of the services may also require the sending of service messages and communications, devoid of advertising content, via e-mail, SMS/MMS/USSD or notification within the mobile application. These messages are considered part of our Services and therefore it may not be possible to disable receipt of them.
To contact you as part of the ordinary customer relationship
To send you newsletters or other marketing material, including surveys and event invitations
To provide general customer service and support
To gain customer insights and knowledge of how our various services, including app and websites, are used as well as evaluation and improvement thereof
To comply with any applicable law
Specifically about consent as the legal basis for the Processing
In the event that a service that we provide requires your consent, we will always explicitly ask you to give your consent to such a service and to the Processing of your Personal Data in such a case. For example, we will ask for your consent if you would like to subscribe to any of the Company’s newsletters.
In the event that we Process your Personal Data based on your consent, e.g. regarding subscription to newsletters, you may withdraw your consent, in whole or in part, at any time by contacting us at firstname.lastname@example.org. Further, if you do not wish to receive marketing and special offers sent by email from us you may withdraw your consent through a link in the email footer.
The Company takes all reasonable steps to ensure that your Personal Data is processed and stored securely. Your Personal Data will never be stored longer than permitted by applicable law or longer than necessary to fulfill the above-stated purposes. Your Personal Data will be processed by us during the following time periods.
The Company will only store and Process your Personal Data for the following periods of time:
Personal Data that has been provided to us through the contact form on our website: Depending on the character of the specific matter but as a general rule, until the specific matter has been handled. There may be instances in which Cogo stores this contact form data for longer periods, specifically to analyze the data and improve our customer support.
Personal Data relating to promotional materials: Until you unsubscribe from this service.
Personal Data for direct marketing purposes: If you are a customer, we may process your Personal Data for direct marketing purposes for as long as two years after the customer relationship has ended, unless you object to your Personal Data being used for direct marketing purposes.
Personal Data relating to purchases: For as long as the customer relationship lasts, which corresponds with the expiration of ride credits, and for two years after that. However, when the customer relationship ends, only your name and information about what purchases and/or what kind of requests you have made will be stored.
Legal obligation: The Company saves any documentation that constitutes accounting information in accordance with applicable accounting legislation.
Consent: In cases where we process your Personal Data based on your consent, we will only save your Personal Data for as long as we still have your consent.
8. TRANSFER OF DATA
For instance, when you purchase or access services from a third party (e.g. a Mobility Operator) through our app, we will share the information required to ascertain your lawful use of those services (including tokenized payment information, relevant personally identifiable information, and any relevant location data). For example, if you try to unlock an electric scooter, we may verify your location to ensure that you’re near the station before you unlock the electric scooter.
Further, in case of a prospective business transaction, you agree that Cogo may disclose anonymous and aggregate information to another corporation in order for the parties to determine whether to proceed with such a transaction. In case a business transaction is completed, you agree that any information may be transferred to the corporation that owns Cogo or the relevant part of it in order to carry its business. A “business transaction” includes, but is not limited to, a reorganization, merger, purchase, sale or other acquisition or disposition of a corporation or any of its assets.
Further, in case we are required to comply with applicable law and regulations and lawful requests or orders or if it is otherwise permitted by law (i.e., protect and defend our rights, situations that threaten life, health or safety, etc.).
We also disclose anonymous and aggregate information to certain third parties for research, product development or other business purposes. For instance, we may share information with Mobility Operators to help them analyze and improve their services.
Third-party service providers
While using Cogo, we may be using third-party software and/or service for various needs, inter alia, in order to collect and/or process the information detailed herein (the "Third Party Service Provider"). Note that these are independent software and/or service providers and we do not take any liability for the information collection policies of these providers, or about any kind of issue, legal or otherwise, relating thereto.
A cookie is a small file of letters and numbers that we store on your phone or browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer’s hard drive.
We use the following cookies:
A) Strictly necessary cookies
These are cookies that are required for the operation of our app and website. They include, for example, cookies that enable you to log into secure areas of our app and website, use a shopping cart or make use of e-billing services.
We collect information about your location if you enable the location service using the settings on your mobile device or with your consent that may be required by law. You can change the privacy settings of your device at any time by disabling location information sharing with our services. Choosing to disable the location services will affect certain features of our services (such as “finding rides near me”). If you have questions about the privacy settings of your device, we recommend contacting the manufacturer of your device or your mobile service provider for assistance.
B) Analytical/performance cookies
They allow us to recognize and count the number of visitors and to see how visitors move around our app and website when they are using it. This helps us to improve the way our app and website works, for example, by ensuring that users are finding what they are looking for easily.
Google LLC (“Google Analytics”)
Cogo is using Google Analytics in order to gain further understanding of how the website and app is used. Data such as pages viewed and time on site is stored in Google Analytics. You can opt-out of having your site activity available to Google Analytics by installing the Google Analytics opt-out browser add-on:
Microsoft Corporation (“Microsoft App Center”)
Apple Inc. (“Apple App Store”)
Google LCC (“Google Play Store”)
The Rocket Science Group LLC d/b/a MailChimp (“MailChimp”)
HubSpot, Inc. (“Hubspot”)
C) Functionality cookies
These are used to recognize you when you return to our app or website. This enables us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region). They are not used to track visitors on sites that are not hosted by Cogo.
D) Targeting cookies / Third party advertising
These cookies record your visit to our app or website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose. If you choose not to provide Personal Data Cogo will not be able to personalize advertising targeted towards you in the same way.
Facebook, Inc (“Facebook”)
It is also possible to opt-out of all targeted Facebook advertising here:
LinkedIn Corporation (“LinkedIn”)
Cogo is using a so-called LinkedIn Insight Tag to gather information about visitors to be used for marketing purposes. The LinkedIn Insight Tag creates a unique LinkedIn browser cookie on a visitor’s browser and enables the collection of the following data for that cookie: metadata (such as IP address, timestamp, page events (like page views), and LinkedIn demographic information if there is an active LinkedIn.com member cookie present. For more information see: https://www.linkedin.com/help/linkedin/answer/65521.
Google LLC (“Google”)
Apple Inc (“Apple”)
Cogo is using ad content (content we submit to the App Store, which Apple Search Ads use to generate paid search results). The ads may also be served based on visitor data. You can learn more about Apple's Ad content policies here: https://searchads.apple.com/policies. You can disable Personalized Ads on your iOS device by going to Settings > Privacy > Apple Advertising and tapping to turn off Personalized Ads
E) Blocking/deleting cookies
You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site. You can find out more about blocking/deleting cookies in specific browsers at http://aboutcookies.org.
10. YOUR RIGHTS
You may at any time and free of charge request a transcript of records regarding the Company’s Processed Personal Data regarding yourself. We will then, without undue delay, provide you with an adequate transcript of record.
You may at any time contact the Company in order to have us correct inaccurate or incomplete Personal Data regarding yourself. We will then, without undue delay, correct the information in question.
You may at any time contact the Company in order to withdraw your consent regarding the Company’s right to Process your Personal Data, as further set out in section 6. This will however not affect the lawfulness of the Processing for the time before your consent is withdrawn.
You may at any time request that your Personal Data is transmitted in an electronic format.
You may request that the Processing of your Personal Data is restricted or that the Company erase Personal Data regarding yourself. We will then, without undue delay, permanently remove the Personal Data in question from both our servers as well as from any third-party partners if one of the following grounds applies:
the Processed Personal Data is no longer necessary in relation to the purposes for which they were collected or otherwise Processed;
you withdraw consent on which the Processing is based and where there is no other legal ground for the Processing (if applicable);
the Processed Personal Data has been unlawfully Processed;
the Processed Personal Data has to be erased for compliance with legal obligations
You may file a complaint with the relevant data protection authority in Your country if you believe that the Company’s Processing of your Personal Data is not carried out in accordance with applicable laws.
In Sweden, please contact the Swedish Data Protection Authority (Sw. Integritetsskyddsmyndigheten).
In Denmark, please contact the Danish Data Protection Agency (Da. Datatilsynet).
In Norway, please contact the Norwegian Data Protection Authority (No. Datatilsynet).
In Finland, please contact the Finnish Data Protection Authority (Fi. Tietosuojavaltuutettu).
Sie haben das Recht, eine Beschwerde bei Ihrer lokal zuständigen Datenschutzbehörde einzureichen.
En España, sírvase ponerse en contacto con la Agencia Española de Protección de Datos.
En France, veuillez contacter la Commission Nationale de l’Informatique et des Libertés (CNIL)
Per l’Italia, si prega di contattare l’Autorità garante per la protezione dei dati personali italiana (It. Garante per la protezione dei dati personali)
In Switzerland :
veuillez Vous adresser au Préposé fédéral à la protection des données et à la transparence
wenden Sie sich bitte an den Eidgenössischen Datenschutz- und Öffentlichkeitsbeauftragten. (Dt. Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter)
si prega di contattare l’Incaricato federale della protezione dei dati e della trasparenza. (Dt. Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter)
In the United Kingdom, please contact the Information Commissioner’s Office (ICO).
All the above-mentioned requests to the Company shall be directed to email@example.com. Please note that we may require that you identify yourself in connection with our assistance, for the protection of your privacy and your Personal Data.
We do not knowingly collect, use or disclose information from children under the age of 13. If we learn that we have collected information of a child under 13 without first receiving parental consent, we will take steps to delete such information within a reasonable time. If you have reason to believe that a child under the age of 13 has provided information to us, please contact us and we will take steps to delete such information within a reasonable time.
13. CONTACT INFORMATION