Privacy Policy

November 29, 2021

This privacy policy (the “Privacy Policy”) is adopted by Vok Bikes (Optigon OÜ, registry code 14424376, address Kassi 17, 12618 Tallinn, Estonia telephone +372 56 64 2861, email hello@vokbikes.com) (“Vok Bikes”, “we”, “us” and “our”). 

This Privacy Policy sets out the principles of processing Your personal data by Vok Bikes when You use our services, including when You make bookings (the “Booking”) for renting the Vehicles in accordance with our General Terms (available here for the UK and here for Estonia and Lithuania) on the Vok booking site provided by Cachet OÜ (the “Vok Site”). If You have any questions about how we process Your personal data or if You wish to submit an application for exercising Your rights related to processing Your personal data, please contact us through the contact information provided in the section “Contacts” below.Unless defined in this Privacy Policy, the terms used in Privacy Policy are used in the meaning given to them in our General Terms or in Article 4 of the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”).

Definitions

  1. Why we process personal data and what personal data do we process?
    1. When You have opted to use our Services, we need to process Your personal data to enable the Services to You.
    2. We process personal data that is submitted to us directly by You in the course of using our Services or that we obtain in the course of Your use of the Services.
    3. We may also process personal data that is submitted to us directly by You also if You contact us with a query or question via Website or via any other channel (by sending an e-mail, for example). In such a case we process Your personal data included in the inquiry to the extent that is necessary to respond to You.
    4. Personal data we process about You in the course of using our Services may include the following data about You:
      1. general personal information: first name and last name that You disclose to us when You purchase our Services;
      2. login details: login details for Your account;
      3. contact details: email address, phone number;
      4. payment data: if Your use of the Services is subject to a fee, then the payment data related to the Services purchased by You;
      5. usage data: we also collect information about how You use our Services, to amend and better adapt the Services to You;
      6. Company data: we may collect information about Your employer or service provider with whom You are associated (if applicable);
      7. Geolocation data: our Vehicles are equipped with GPS devices. As a rule, we keep personal data and GPS data separate, and we do not track locations of Vehicles in real-time. However, we may have access to this information if necessary, for example, if a Vehicle is lost, stolen or when we are in doubt the vehicle is not being used according to its purpose..
  2. What is the legal basis for processing your personal data?
    1. We process Your personal data to provide Services to You (please read Vok Bikes General Terms). The legal basis for such data processing is GDPR Article 6-1-(b), i.e. processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
    2. We process Your personal data when processing is necessary for compliance with a legal obligation to which we are subject, for example for accounting purposes under applicable accounting legislation. The legal basis for such data processing is GDPR Article 6-1-(c).
    3. In certain specific situations, we might also process Your personal data where this is necessary for the purpose of our legitimate interests pursued by us. The legal basis for such data processing is GDPR Article 6-1-(f). For example, for the purpose of our legitimate interest, we may analyse how our Services are used by our customers so we can provide better service.
    4. In certain specific situations, we may also process Your personal data based on Your consent. The legal basis for such data processing is GDPR Article 6-1-(a). In those situations, we process Your personal data on the terms provided in the consent that You have granted to us.
    5. More specifically, we rely on the following legal bases when processing Your personal data:
  1. When do we share your personal data?
    1. To the extent this is necessary for the provision of our Services, we may share Your personal data with certain third parties.
    2. We may also share Your personal data with third party suppliers providing services to us, e.g. IT suppliers or other service providers. At the moment of adopting this Privacy Policy, the most important service providers we use are the following:
      1. Cachet OÜ (a limited liability company, established and existing under the laws of Estonia under commercial register code 14560702, with the registered address at Kohtu 2-21, 10130 Tallinn, Estonia) to enable a virtual environment (Vok Site) to enable You to rent Vehicles.
      2. Mailchimp service by Rocket Science Group LLC d/b/a Mailchimp, to send newsletters and marketing; privacy terms for Mailchimp are available here: https://mailchimp.com/legal/; we are aware the Mailchimp is located outside the EEA and have entered a DPA including Standard Contractual Clauses as adopted by European Commission, available here: https://mailchimp.com/legal/data-processing-addendum/
    3. We may also transfer Your personal data to third countries, i.e. countries outside the EU/EEA area, for the purposes explained in this Privacy Policy. When transferring Your personal data to third countries, we will ensure that the transfer is subject to appropriate safeguards under GDPR and that Your rights are protected, such as the Commission’s model contracts for the transfer of personal data to third countries (i.e., the standard contractual clauses. You may request a copy of the safeguards we have put in place with respect to the transfer of personal data by contacting us via the contact details below.
  2. How long is your personal data retained?
    1. Vok Bikes does not retain personal data longer than it is necessary for the purposes of processing personal data or pursuant to applicable law.
    2. Personal data related to contracts can be retained during the term of the contract and based on our legitimate interest pursuant to Article 6 (1) (f) of the GDPR until the end of the statutory limitation periods under applicable law. Accordingly, as a general rule, Vok Bikes retains Your personal data as long as it is necessary for the provision of the Services during the term of the contract concluded between You and Vok Bikes and for three years after the term of the contract. In this regard, as a general rule, if You have not used our Services for 3 years, Your profile and all personal data therein will be deleted, unless we have a legal basis for retaining Your personal data for a longer time period. 
    3. Pursuant to the Accounting Act, we may retain accounting documents for 7 years.
    4. More specific terms concerning the retention periods of Your personal data are outlined in the table in Section 3 above.
  3. How do we protect your personal data?
    1. To protect Your personal data from unauthorized access, unlawful processing or disclosure, accidental loss, modification or destruction, we use appropriate technical and organisational measures that comply with applicable laws. These measures include but are not limited to the implementation of appropriate computer security systems, protection of paper and electronic format files by technical and logical means, controlling and limiting access to documents and buildings.
  4. Cookies
    1. Our Services and website www.vokbikes.com (the “Website”) use cookies. This section incorporates our cookie policy (the “Cookie Policy”).
    2. Cookies are small data files stored on Your hard drive by a website. Cookies help us monitor and improve the functionality and usage of our Website and Your experience when using our Services. We can use cookies to see which areas and features are popular and to count visits to our Website to recognise You as a returning visitor and to tailor Your experience of the Website according to Your preferences. We may also use cookies for targeting or advertising purposes.
    3. Cookies may be session cookies or persistent cookies:
      1. session cookies are temporary cookie files, which are erased when You close Your browser;
      2. persistent cookies remain in the browser’s subfolders until You delete them manually or Your browser deletes them based on the duration period contained within the persistent cookie’s file.
    4. Cookies may be first-party cookies or third-party cookies:
      1. first-party are cookies set by the website You’re visiting and only that website can read them;
      2. third-party cookies are cookies set by external services.
    5. You can delete or block cookies on the Website through Your browser settings at any time. However, some cookies might be necessary for the functionality of the Website. Therefore, You understand that when blocking or deleting the cookies some features of the Website might not function correctly.
    6. For more general information about cookies including the difference between session and persistent cookies please see www.allaboutcookies.org.
    7. In case You have any questions concerning Cookie Policy, You may contact us via the contact details provided below.
    8. The specific cookies we use are the following:
  1. Your rights
    1. Vok Bikes is dedicated to ensuring that all data subject rights arising under applicable law are always guaranteed to You. In particular, any data subject has:
      1. the right to access the personal data that Vok Bikes processes about You;
      2. the right to request that Vok Bikes rectify any inaccurate personal data about You;
      3. the right to request Vok Bikes to erase Your personal data and/or restriction of processing of Your personal data if we do not have a valid legal basis for processing;
      4. the right to receive Your processed personal data in a structured, commonly used and machine-readable format and have the right to transmit Your personal data to another controller;
      5. the right to object to the processing of Your personal data.
    2. If You believe that Your rights have been infringed, You may contact and lodge a complaint to the supervisory authority applicable for Your jurisdiction (Data Protection Inspectorate in Estonia address Tatari 39, Tallinn 10134, info@aki.ee or other competent authority in Your jurisdiction).
  2. Governing law and jurisdiction
    1. This Privacy Policy shall be governed by the laws of the Republic of Estonia. Any disputes arising from this Privacy Policy shall be settled in the Harju County Court in the Republic of Estonia unless You have a right to turn to the court of Your residence pursuant to statutory law.
  3. Contacts
    1. If You have any questions about this Privacy Policy or Cookie Policy or if You have any concerns about how we use Your personal or if You want to exercise Your rights as described above, You may contact us via e-mail or in writing using the following contact information:

Vok Bikes OÜ

E-mail: hello@vokbikes.com. Address: Kassi 17, 12618 Tallinn, Estonia.

Eestikeelne teave

Vok Bikes (Optigon OÜ) toodab elektrilisi kaubajalgrattaid, millega on kulleritel ja postitöötajatel mõnus sõita ning mis aitavad tarne- ja postiettevõttetel oma tööd efektiivsemalt ja keskkonnasõbralikumalt korraldada. Ettevõttes töötab 22 inimest, kelle tehtud Voki rattad kihutavad täna Tallinna Vilniuse ja Londoni tänavate