This statement gives you information about UIP Drift AS (hereafter "UIP") and its processing of personal data in connection with the use of UIP's city bicycle services.
The Privacy Statement provides you with information about which personal data we collect, why we process your personal data, and your rights relating to the processing of your personal data.
UIP Drift AS (org.no: 920285376 ) operates and maintains Oslo Bysykkel, and is responsible for the processing of personal data in connection with the city bicycle services. As data controller, UIP is therefore responsible for the processing of your personal data. The person responsible for the data controller determines the purpose of the processing of the personal data, as well as how the data is used.
Our contact information is:
Address: Kværnerveien 5, 0192 Oslo
Phone: +47 915 89 700
UIP has a privacy representative who can be contacted at firstname.lastname@example.org.
Information about the use of the services which comes from legitimate interest includes:
The basis of the processing of the above information is in UIP's legitimate interest in providing its services and operating those services in the best possible manner. This includes identifying a user, giving the user access to scooters, communicating with the user on the platform, and notifying the user of their legal term expiration.
In order to fulfill our contract with a user, we need certain pieces of information, such as a credit card number and telephone number. We cannot meet an agreement with the user without this data.
We only give access to employees who need personal data to perform their duties. This mainly means our customer service team, as well as employees who follow up any disputes related to the services. A very limited number of our employees have access to our entire customer register to ensure its continuous operation.
UIP may disclose personal data to third parties if there is a legal basis for extradition. For example, UIP may disclose personal information to public authorities in order to comply with statutory requirements or orders (such as tax authorities or the police), or to safeguard our rights in connection with a dispute with a user (such as to the Consumer Disputes Committee).
We also share aggregated and anonymised data about our users and their use of the service - which cannot identify them as an individual - with research projects and institutions for statistical and research purposes. These research projects are available to the client, as well as open to the public. We also share personal information with partners who give our users membership benefits - such as OBOS. Delivery of this data is dependent on a user’s consent.
UIP uses external data processors to collect, store or otherwise process personal information on our behalf, such as in connection with our IT systems, payment services, email broadcasts, and chat services. The relationship with these suppliers is regulated by a data processing agreement (DPA), which, among other things, ensures information security for the personal information of our users. A list of providers with whom we have a DPA with can be provided upon request.
All processing of personal information about our users takes place within the EU / EEA area. If a users personal information is subject to processing or storage outside of the EU / EEA, UIP will ensure that your personal data is subject to adequate security guarantees, including through the use of EU standard terms of such transfer, transfer to companies subject to Privacy Shield certification, or by transfer to land which is pre-approved by the EU Commission.
For Facebook Pixles - please see separate section above.
A user has the right to demand access, correction or deletion of the personal data we process about them if the terms of this are met. They also have the right to demand limited processing, correct objection to the processing and, in some cases, the right to demand data portability. If the processing is based on a user’s consent, they may withdraw their consent at any time.
A user has access at all times to a list of consents and data we have stored about them in their user profile. There they can correct or delete data, as well as withdraw consent. If they have any questions about their rights, or wish to exercise their rights, they can contact the UIP or our Data Privacy Officer (DPO) via contact information provided on our website. The user also has the right to complain about our processing of their personal data to Datatilsynet
For Facebook Pixles - please see separate section above.
UIP stores your personal information as long as it is necessary to achieve the purposes for which the personal information was collected as defined in this statement. This means that we keep the personal data as long as you are registered with us, unless otherwise expressly stated.
If you delete your account at Oslo Bysykkel, you immediately lose access to the service, and our client managers will no longer be able to see you. For operational reasons, however, it may take up to 3 months before all information about you is gone from UIP's systems.
However, continued storage of your personal data may be necessary as a result of UIP's need to:
UIP takes its users 'privacy seriously, and has taken appropriate technical and organizational security measures to protect employees' personal information against violations of personal data security, unauthorized access to, and disclosure of personal information, including:
From time to time, UIP will make changes to this privacy statement. An updated version of UIP's privacy statement will be available at all times in the app and on our website. You are encouraged to visit this page regularly to keep up to date with our current privacy statement. If UIP makes changes to the processing of personal data, this statement will be updated. You will be notified of these changes via our app, on the website and / or through the contact information you have provided.