Privacy Statement

This Lease a Bike Privacy Statement applies to the collection, use, and other forms of processing of personal data by Bike Mobility Services B.V. (“BMS”) in connection with our services, Lease a Bike branded products, and this website.

BMS (Stationsplein 19A, 3818 LE Amersfoort, the Netherlands) is the legal entity responsible for all collection and processing of your personal data in relation to Lease a Bike branded products, services, and websites.

BMS is part of Pon Holdings B.V. and its affiliated companies (“Pon”). BMS and Pon are committed to respecting and protecting your privacy and safeguarding the personal data you share with us.

Personal data means any information relating to an identified or identifiable natural person. If you choose to register your personal data, contact us, or visit our websites, we will process certain personal data about you. We process this personal data for the following purposes:

• to communicate with you in a personalized way or to inform you about Lease a Bike branded products and/or services in accordance with your preferences;

• to provide customer service, including services related to purchasing products and/or services, fulfilling warranty obligations and product recalls for our own services and those of affiliated companies, and handling complaints and requests for information;

• to process your purchase of Lease a Bike branded products, including financial and logistical handling;

• to process your Lease a Bike account;

• to process your participation in contests, promotions, surveys, or website features;

• to conduct market research and to improve our business operations, services, and Lease a Bike branded products, or to develop new business operations, services, and products;

• to perform statistical analyses and report on them;

• to provide services via the internet;

• to communicate with stakeholders and offer a loyalty program;

• to provide app functionalities, including sending relevant commercial messages;

• to communicate future promotional and marketing information to you, including direct marketing and retargeting purposes;

• to aggregate and/or anonymize personal data to generate other data for our use;

• to comply with our legal obligations, resolve disputes, and enforce our agreements;

• as otherwise indicated at or around the time the personal data is collected.

The exact data we process depends on which websites, products, or services you use and how you use them. We process the following types of personal data:

Data you provide to us
These are the details you enter yourself when visiting our websites or using our products or services. For example: your name, address, place of residence, gender, email address, phone number, age, date of birth, Lease a Bike products you have purchased, the account name and passwords you create, bank details for payments of Lease a Bike products, etc.

Data collected via sensors
Many products are equipped with one or more sensors or use the sensors of the devices on which the products are operated. Examples of sensors include GPS receivers, Wi-Fi or Bluetooth receivers, a camera, and touchscreens.

In line with the stated purposes, data collected via sensors about you and the devices used will be transmitted to BMS and other external parties that require the data to provide the agreed services to BMS.

Metadata
This refers to data that is collected or automatically generated while you use the websites, products, or services of BMS. Metadata is often collected or generated when you use a computer device or transmit data through a computer network such as the internet. This includes data you use in the user interface and during other device activities, as well as IP addresses, unique device IDs, MAC addresses of Wi-Fi and Bluetooth devices, cookies, and computer activity data. See the Lease a Bike Cookie Policy for more information.

Below, we specify per method which personal data we process, for which purposes we use it, and which legal basis applies:

Our legitimate interests include, among others: marketing, advertising, security, (crime) prevention, IT management, research and analysis of our own products or services, business operations, legal matters, and internal management.

If you have provided your consent for the processing of your personal data, you have the right to withdraw that consent at any time by sending a request to [email protected].

You should be aware that BMS is part of a business group within Pon and that departments (such as Marketing and IT) may be part of Pon’s global companies. As a result, your personal data may be shared worldwide with and/or transferred to other business group companies or other Pon entities. You can consult the list and location of our companies here: http://www.pon.com/nl-nl/our-business/bedrijven.

BMS may also share your personal data with external parties to perform certain activities on behalf of BMS and to facilitate services they provide to us. These may include service providers of services such as website hosting, data analysis, payment processing, order fulfillment, information technology and related infrastructure, customer service, email delivery, audits, and other services. BMS may also share your personal data with third parties so that they can send you marketing communications, in accordance with your preferences. BMS requires these external parties to handle and protect your personal data with care. BMS will not sell your personal data to third parties.

BMS or Pon may reorganize, merge, or otherwise sell or divest (part of) a business to another company. If such a business is related to Lease a Bike, such a transfer of ownership may include the transfer of your personal data to the new owner and its advisors.

We will only disclose your personal data if permitted or authorized by law, necessary for the prevention or combating of fraud, necessary for dispute resolution, or necessary for any other legitimate need that, in the circumstances, outweighs your privacy interests, such as the security of our business and the safety of our staff.

How do we protect your personal data?
BMS will take appropriate technical and organizational security measures against loss or unlawful processing of your personal data. This may include the use of secure registration forms, data encryption, and access restrictions to your personal data.

Certain countries do not provide an adequate level of protection for personal data. However, you can trust that BMS will take appropriate security measures regarding the confidentiality and protection of your data. For transfers from the EEA to countries that, according to the European Commission, do not provide an adequate level of data protection, we have taken adequate measures such as contractual agreements, as approved by the European Commission, concluded with third parties. You can request a copy of these measures by contacting us at [email protected].

How long do we retain your personal data?
We will retain personal data for as long as necessary or permitted within the framework of the purposes described in this Privacy Statement and in accordance with applicable law. The criteria used to determine our retention period include:

• The length of time we have an ongoing relationship with you and provide services to you (for example, as long as you have an account with us or continue to use our services).

• Whether there is a legal obligation we must comply with (certain laws require us to retain our transactions for a certain period before we can delete them).

• Whether retention is desirable given our legal position (such as with regard to statutes of limitations, disputes, or investigations by regulatory authorities).

Cookies, web beacons and similar technologies
When you visit or use our websites, services, applications, communication services (such as email), and tools, we may use cookies, web beacons, and other similar technologies to store information in order to provide you with a better, faster, and safer browsing experience.

Please refer to our Lease a Bike Cookie Policy for an explanation of cookies, web beacons, and similar technologies, how we use them, and how you can control them.

Your rights
If you would like to review, correct, update, restrict, or delete personal data processed by us, object to the processing of personal data, or if you would like to receive an electronic copy of your personal data to transmit it to another company (to the extent this right to data portability is provided to you under applicable law), you can contact us at [email protected]. We will respond to your request in accordance with applicable law.

We ask you to describe in your request as clearly as possible which personal data your request relates to. For your safety, we will only handle requests relating to the personal data associated with the specific email address you use to send us your request, and we may ask you to verify your identity before fulfilling your request. We will try to comply with your request as soon as reasonably practicable, and in any event within the legally required timeframes.

Contact, questions, feedback and data protection officer
Please send your questions and comments about this Privacy Statement to: [email protected].

Our Data Protection Officer (DPO) can also be reached via the above email address. You have the right to lodge a complaint with a data protection authority for your country or region or where an alleged breach of applicable privacy law occurs.

Policy changes
We may amend this Privacy Statement from time to time. Changes to this Privacy Statement will take effect when we post the revised statement. If necessary, we will inform you of changes to our Privacy Statement. This Privacy Statement was last updated on: February 9, 2021.