This Privacy Statement governs the collection, use and other forms of processing of personal data by Bike Mobility Services GmbH (“BMS”) that operates its bike lease service with the Lease a Bike ("LaB") brand that uses the “Lease a Bike Platform” (“Platform”).
BMS (Siemensstraße 1-3, 49661 Cloppenburg) is the legal entity responsible for all collection and all processing of your personal data in connection with the Platform.
BMS is part of Pon Holdings B.V. its affiliates and its subsidiaries (“Pon”). BMS and Pon are committed to respecting and safeguarding your privacy and the security of your personal data you share with us.
Personal data is information that identifies you as an individual or relates to an identifiable individual. When you choose to register your personal data or contact us, we will process some personal data about you. We process these personal data for the following purposes:
In the table below we describe per way of processing: the personal data and the purposes for which we process the personal data as well as the legal basis for the processing:
|Ways of processing||Personal data processed||Purposes for processing the personal data||Legal basis|
|Lease a Bike account creation||Name, address, e-mail address and phone number. Possible: personnel number or department code||The above described purposes: 1, 2, 3, 4, 5, 6, 7 and 8||Consent or performance of a contract|
|Lease contract ending offer||Address, phone number, In case of buying the bike: bank account number||The above described purposes: 1, 2, 4 and 6||Performance of a contract, legitimate interest|
Our legitimate interests related to the Platform only include: providing fonts, security, (crime) prevention, IT management, research and analysis of our products or services, legal affairs, internal management. Google Fonts is used for providing fonts but is hosted locally on the server so the IP addresses are not shared with Google.
You have the right to withdraw your consent which you may have given to the processing of your personal data at any time by sending your withdrawal request to email@example.com.
BMS will share the minimum personal data with the Customer Company as your employer (to handle the lease itself and the related payroll processing), and with the involved Leasing Company (to be able to provide the Lease a Bike service), and with the bike dealer (only the name to identify the person responsible).
BMS may share your personal data also with third parties to perform certain processing activities on behalf of BMS and to facilitate services they provide to us. These can include providers of services such as website hosting, data analysis, order fulfillment, information technology and related infrastructure provision, customer service, email delivery, auditing, and other services. BMS requires these third parties to process and protect your personal data diligently. BMS will not sell your personal data to third parties.
You should be aware that BMS is part of a business group within Pon and that departments (like IT, Marketing) can be located in Pon companies around the world. As a consequence your personal data may be shared within and/or transferred to other business group companies or other Pon companies around the world.
BMS or Pon might reorganize, merge or in any other way sell or dispose (part of) a business company to another company. Where such business relates to Lease a Bike, such transfer of ownership may include the transfer of your personal data to the new owner and its advisors. We will otherwise only disclose your personal data if so required or authorized by law, where necessary for preventing or combating fraud, where necessary for dispute resolution, or for any other pressing legitimate need which under the circumstances must outweigh your privacy interests, such as the security of our business and the safety of our staff.
BMS will take appropriate technical and organizational security measures against loss or unlawful processing of personal data. This may include using secure registration forms, encryption of data, and restricting access to your personal data.
The data in the LaB platform is located on servers in the EEA. In rare cases personal data need to be transferred to third countries that do not provide an adequate level of protection for your personal data. However, you can be assured that BMS will take appropriate safeguards for the confidentiality and protection of your data. For transfers from the EEA to countries not considered adequate by the European Commission, we have put in place adequate measures, standard contractual clauses adopted by the European Commission, to protect your personal data. You may obtain a copy of these measures by contacting firstname.lastname@example.org.
We retain personal data for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law.
The criteria used to determine our retention periods include:
If you would like to request to review, correct, update, suppress, restrict or delete personal data, object to the processing of personal data, or if you would like to request to receive an electronic copy of your personal data for purposes of transmitting it to another company (to the extent these rights are provided to you by applicable law), you may contact us via email@example.com.
As BMS and Pon are committed to respecting and safeguarding your privacy and the security of your personal data, a special Security & Privacy Office department is in place to handle your request and to ensure we respond to your request consistent with applicable law.
In your request, please make as clear as possible what personal data your request relates to. For your protection, we may only implement requests with respect to the personal data associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable and in any event within any applicable legally required timeframes.
If you have any questions about this Privacy Statement, please contact us at: firstname.lastname@example.org.
You may also contact our Data Protection Officer (DPO) via email@example.com. You have the right to lodge a complaint with a data protection authority for your country or region or where an alleged infringement of applicable data protection law occurs.
We may change this Privacy Statement from time to time. Any changes will become effective when we post the revised Privacy Statement. If necessary, we will inform you when we change the Privacy Statement. This statement was last modified on date: 17 June 2022. You can contact us if you want to retrieve previous versions.