Privacy

Last updated: December 13, 2024

Coride Sweden AB (“Coride,” “we,” “us,” or “our”) is committed to protecting your privacy and ensuring that your personal data is handled in accordance with applicable laws, including the EU General Data Protection Regulation (GDPR). This policy outlines how we collect, use, share, and protect your personal data when you use our website (“Website”), ridesharing app (“App”), and the desktop version of the App (collectively, the “Products”).

1. What Personal Data We Collect

We may collect the following types of personal data:

Identifying information: Name, email address, phone number, and personal identity number to verify your identity and create secure user accounts.
Location data: Information about your geographic location to enable ridesharing services and enhance user experience.
Device data: Information about your operating system, browser, and device settings.
Usage data: Log files, cookies, and tracking technologies to analyze user behavior and improve our services.
Payment data: Transaction details for wallet deposits and withdrawals (we do not store credit or debit card information).

2. How We Use Your Personal Data

We use your personal data to:

Provide and improve our Products.
Enable ridesharing by connecting drivers and passengers.
Manage payments via our Wallet.
Communicate with you about important updates, features, or marketing (with your consent).
Fulfill legal obligations and prevent fraud.

3. How We Protect Your Personal Data

We take technical and organizational measures to safeguard your data, including:

Encryption: Data is encrypted during transmission and storage.
Access control: Only authorized personnel have access to personal data.
Regular security reviews: Our systems are regularly updated to prevent security risks.

4. Cookies and Similar Technologies

Cookies are small text files stored on your device. We use cookies and similar technologies (e.g., beacons, local storage) to:

Enhance the user experience.
Analyze user behavior using tools such as Google Analytics.
Display relevant advertisements on other platforms.

Categories of Cookies:

Essential cookies: Necessary for the proper functioning of the Products.
Analytics cookies: Help us understand user behavior.
Marketing cookies: Used to display personalized ads.

Managing Cookies:

You can manage cookies via your browser settings or through our cookie banner. Note that disabling cookies may affect certain features of the Products.

5. Your Rights Under GDPR

You have the following rights:

Access your data: Request a copy of the data we hold about you.
Correct inaccuracies: Request correction of incorrect or incomplete data.
Request deletion: Request deletion of your data unless we are legally required to retain it.
Object to processing: Stop certain uses of your data, such as for marketing purposes.
Data portability: Request your data in a machine-readable format.

To exercise your rights, contact us at info@coride.se. We will respond within five business days.

6. Third-Party Services

We may share your personal data with:

Employers (under corporate subscriptions): See section 7 below.
Parking companies and security services: See section 8 below.
Service providers: Payment processors such as Swish or analytics platforms like Google Analytics.
Authorities: When required by law.
In connection with business acquisitions: Personal data may be transferred to a new owner in the event of a sale of Coride.

We ensure that all third parties comply with GDPR and use data only for the purposes specified.

7. Data Sharing with Employers

In cases where Coride provides a corporate solution, certain data may be shared with the user’s employer to support and enhance ridesharing initiatives. Data sharing occurs as follows:

Data that may be shared:

Personal data: Name, email address, and activity status (e.g., active or inactive). This facilitates communication, user administration, and onboarding.
Anonymized data: Aggregated statistics on service usage (e.g., number of trips, estimated CO₂ savings, total distance).

Data that will not be shared:

Coride will never share detailed trip information, such as routes, specific times, or locations, without the user’s explicit consent.

Purpose of data sharing:

To help employers introduce and support ridesharing for their employees.
To provide anonymized statistics to evaluate corporate climate initiatives and sustainability goals.

User consent:

Data will only be shared with employers if the user has explicitly consented during the corporate onboarding process.
Users may withdraw their consent at any time by contacting Coride at info@coride.se.

Limitations on data use:

Employers may only use shared data to support ridesharing programs and sustainability goals.
Coride ensures that employers cannot identify individual trips or access detailed user data.

8. Data Sharing with Parking Companies and Security Services

To enable parking benefits for ridesharers, Coride offers a verification feature to external actors such as parking companies and security services.

Data that may be shared:

Confirmation of whether a vehicle is registered in Coride’s ridesharing program (yes/no).
Verification that a ridesharing trip occurred (e.g., at least two occupants in the vehicle) during the relevant period.
No personal information about drivers or passengers, such as names, emails, or detailed trip data, is shared with parking or security companies.

Purpose of verification feature:

To provide benefits such as discounted or free parking for ridesharers.

Limitations on use:

Parking or security companies’ access is strictly limited to verifying a vehicle’s ridesharing status.

9. Data Retention

We retain data as follows:

User account data: Stored as long as your account is active.
Transaction data: Retained according to accounting laws (up to seven years).
Cookies: Typically retained for 12 months.

When data is no longer needed, it is deleted or anonymized.

10. Account Termination

You may terminate your Coride account at any time by:

Navigating to Menu > Terms & Privacy in the App.
Selecting “Delete my account” and following the account deletion process.

Alternatively, you may request account deletion by contacting us at info@coride.se.

When an account is terminated, your data will be deleted or anonymized, except for information required by law.

11. Changes to the Privacy Policy

We may update this policy as necessary. Significant changes will be communicated via email or through our Products. We encourage you to review the policy periodically to stay informed.

12. Contact Information

If you have questions or wish to exercise your rights, contact us at:

Email: info@coride.se
Postal Address: Coride Sweden AB, Surbrunnsvägen 5, 271 40 Ystad, Sweden