Date of last revision: 04/09/2019 (minor updates to articles 2. (i) & 3. b. (iii))
Skipr SA/NV is committed to protect your privacy and takes its responsibilities regarding the security of customer personal information very seriously. For more detailed information about privacy legislation, please do not hesitate to read the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC) (the “GDPR”).
Your personal data are handled by:
SKIPR SA/NV (hereafter: “Skipr”)
Rue du Mail/Maliestraat 50
Enterprise number: BE0712.537.551
To contact us: privacy@Skipr.co
As used in this Policy, the terms "using" and "processing" of Personal Data (as defined below) include subjecting the personal information to statistical or other analysis and using or handling personal information in any way, including, but not limited to collecting, storing, evaluating, modifying, deleting, using, combining, disclosing and transferring as detailed in this Privacy.
Skipr ("we" or "us") provides this Policy to inform you of our procedures regarding the collection, use and disclosure of Personal Data of any person who uses the Application and the services provided thereon or who participates in a contest organized by Skipr (the “Users”).
Skipr collects and processes two types of information: (i) information Users provide to us and (ii) information relating to the User’s use of the Application (collectively the “Personal Data”). Personal Data shall have the meaning as ascribed to it in applicable Belgian and European law.
When you decide to sign up to our Application, we will ask you to provide your phone number and your email address. This is required by several of our partners to, for example, allow you to book a train ticket, receive your ticket or obtain a payment confirmation. We might also use your email address to send you more information about our services or to assist you in case of a problem. Do not hesitate to check paragraph 3 below for more information on why we collect your data and how you can customize that.
When you actually sign up to the Application and create an account, buy a transportation ticket, proceed to a booking, send us an email or communicate with our customer service, you are voluntarily providing us with certain individually identifiable information that we collect and process. Such personal information may include but is not limited to your name, date of birth, gender, physical address, email address, telephone number, billing information, bank account or other payment details. Should you give us details about another person, you hereby confirm that you fully respect the GDPR doing so and that you received every necessary authorization therefor.
We may also process additional information you may choose to provide to us on your account (i.e. personal data which must not compulsorily be given through the subscription process), such as photos, descriptions of your interests, commuting habits, languages spoken, who you are, where you live and where you work.
Location and travel timings:
In order to improve the Application and the services offered thereon and to help calculate distances and timing between two locations or the time needed to park in a given area, your location, places of departure and destination, the start and finish times, the date of the travel and the duration of the use may be collected.
Bancontact, Paypal and/or Credit card details:
We might collect personal data relating to your purchases such as the purchased products, the date of purchase or your potential complaints.
When you contact our customer service or anyone of the Skipr staff, we may keep a record of that correspondence and collect the necessary information to classify your question, respond to it and, if applicable, investigate any breach of our Terms and Conditions or this Policy.
When you participate in a contest organized by Skipr, we will ask you for the necessary Personal Data to manage the concerned contest such as a name, email address, phone number, age or place of residence.
We may collect or process your IP address and certain non-personal information or aggregated data about how and when you use the Application and/or the Website. This information is usually of a technical nature (device settings and information, including but not limited to the type of browser, operating system, keyboard language, screen resolution, IP address, location, etc.) and of a behavioral nature (the actions taken by you on the Application and/or the Website, including but not limited to access times, pages requested, actions executed, etc.) and is used to compile statistical data about the use of our Application and/or Website.
We may also collect additional information in connection with your participation in any promotions offered by us and information you provide when giving us feedback.
Skipr only processes Personal Data for the following purposes:
a. Execution of a contract (art. 6, § 1, b) of the GDPR):
We process certain Personal Data (name, phone number, gender, email address, date of birth, driving license number, location, travel timings) to execute the contract between you and us allowing us and the concerned service providers to process your purchases and bookings on the Application, to allow you to use your tickets through the Application, to confirm such purchases and bookings, to inform you in case of problem, to treat your requests through our customer service or troubleshoot any problems. As we work with various service providers, your Personal Data shall be disclosed to the concerned service providers to enable them to perform the contract you have with them (see provision 4 hereinunder).
In case you are participating to a contest organised by Skipr, we also process certain Personal Data to allow us to manage said contest.
b. Legitimate interests (art. 6, § 1, f) of the GDPR):
Beyond the collection of your Personal Data to provide our services or to organize a contest, we may collect and use your Personal Data for the following purposes:
i. Improve user experience:
Tracking your use of the Application and/or the Website will allow us to personalize our services to your needs and process uploaded data related to your profile such as tickets and booking preferences, trips history or favorite addresses. It will allow you to correctly use the Application and/or the Website. This will also allow us to learn more about User preferences and general trends on the Application and/or the Website in order to improve the quality of the Application and/or the Website.
ii. Provide customer service:
We may collect additional Personal Data to perform general customer administration of your account by providing you with specific information on available services and by sending you communications about the Application (e.g. upcoming changes or improvements) as well as our other products and services and respond to your questions, treat your requests or troubleshoot any problems.
iii. Perform marketing actions:
We may process your Personal Data to contact you with tailored suggestions and information exclusively about Skipr, such as events, app updates, contests or information about our Website or Application. We will not contact you regarding third parties and we will not provide your data to third parties for marketing purposes.
You can always choose to opt-out, at any time, of marketing promotions from Skipr and/or email correspondence from Skipr if you do not want your Personal Data to be used anymore for any of the aforementioned marketing purposes. If you do not want to receive commercial communications from us anymore, you can choose to unsubscribe from such commercial communications at any time by sending us an email at privacy@Skipr.co.
iv. Generate statistics and perform statistical analysis:
We may generate anonymous statistics about the (use and Users of the) Application and the Website in order to improve the Application and the Website and to perform statistical analysis.
v. Sharing anonymous information with third parties:
Anonymous visitor information about our Users and the Use of our Application can be disclosed to third parties for marketing, advertising and promotional purposes as well as for statistical purposes for mobility trends.
c. Compliance with legal obligations (art. 6, § 1, c) of the GDPR):
We may also process your Personal Data in order to comply with the law, to complete all legally mandatory paperwork in each country/region in which either the User or Skipr is active, in case of illegal use or when we receive orders from legal authorities.
We may also verify the respect of your obligations set out in our Terms & Conditions and our Policy and investigate fraud and infringements on all applicable rules and regulations.
d. Other processing:
We will ask for your consent before using any Personal Data for a purpose other than those that are set out in this Policy. However, if you decide to add or provide additional Personal Data to your personal settings which must not compulsorily be given through the subscription process, by doing so, you give Skipr your explicit consent to process this additional Personal Data in accordance with this Policy.
4. DISCLOSURE TO THIRD PARTIES
a. Data processors
We rely on third party service providers to offer our Services and enhance your experience. Only to the extent required (i.e. to perform specific tasks on our behalf such as the storage of data, the order of a transportation ticket, the processing of a booking, targeted communication on the Application or suggestions concerning possible travel journeys), such third-party service providers (including some located outside of the European Union) will have access to your Personal Data. Once such third-party service provider has completed its specific task and their legal relationship with Skipr, they will no longer have access to your personal data except as required by law.
Our subcontractors are listed in a register of processing activities (kept internally). We ensure that all our subcontractors provide the same level of protection for your Personal Data as we do (including subcontractors located outside the EU).
As such, for example, Intercom uses your Personal Data for the communication platform available on the Application, Segment for the organization of events and Adyen for your payments. Furthermore, your Personal Data is stored by Google in Europe and by mLab in Belgium (through a Google facility).
b. Service providers
In such a case, Skipr may transfer your Personal Data to the third party that offered the services you used (such as your email address, name or phone number) in the extent it is necessary to enable you to use the services provided by the concerned third party (confirmation of purchase or booking; tickets/codes necessary to travel; requests or claims you make; information in case of problem; control of your tickets/codes; etc.) and/or in case of illegal use of the third-party services.
Should you wish to know in more details to which third parties your Personal Data and which Personal Data have been disclosed, please refer to section 7 below (“your rights”).
5. SECURITY OF YOUR PERSONAL DATA
In order to prevent the loss, misuse and alteration of your Personal Data, Skipr has implemented a variety of appropriate technical and organizational security measures conform with or exceeding industry standard technologies, in order to safeguard the confidentiality of your Personal Data and ensure your online safety. However, Skipr cannot guarantee that unauthorized access will never occur.
Skipr uses its best efforts to protect the confidentiality and security of your Personal Data.
In case of violation of your Personal Data, Skipr undertakes to notify the Data Protection Authority without delay and, if possible, not later than 72 hours after becoming aware of such violation.
Skipr shall in no event be liable for any direct or indirect damages that result from a wrong or illegal handling by third parties.
You may not disclose to or share with any third parties your account. If your phone has been stolen or if you change phone number, please immediately inform us by sending us an email at privacy@Skipr.co.
6. DATA RETENTION PERIOD
We do not process your Personal Data any longer than is necessary for the purposes set forth in this Policy: we do store your Personal Data as long as your account is active or when the processing of your Personal Data is necessary to allow you to make use of our Application.
Your Personal Data are deleted or anonymized maximum five years after your last use of our Application or deletion of your Account as some of our mobility providers request us to keep your Personal Data for such a period of time.
7. YOUR RIGHTS
Exercise of your rights is free of charge and can be done at any time provided that it is authorized by law. You may review, update, modify or delete your Personal Data at any time. Please promptly update your Personal Data if it changes. If you wish to delete your account or, more generally, exercise your right to be forgotten, you can send us an email at privacy@Skipr.co and we will process your request. Please however note that some of your Personal Data are necessary for the execution of the contract.
If and to the extent provided under applicable Belgian and European law, you shall have the right:
a) to obtain from Skipr confirmation as to whether or not your Personal Data is being processed and, where that is the case, you shall have the right to access such Personal Data being processed;
b) to obtain from Skipr, without undue delay, the rectification of inaccurate or incomplete Personal Data;
c) to obtain from Skipr the erasure of Personal Data;
d) to obtain from Skipr the restriction of processing of your Personal Data;
e) to receive the Personal Data in a structured and commonly used, machine-readable format and have such Personal Data transmitted;
f) to object to processing of your Personal Data and to object at any time and without any justification to the processing of your Personal Data and/or to the transmission of your Personal Data to third parties for direct marketing purposes (including profiling).
In many cases you can improve or modify your Personal Data yourself in your personal settings.
These rights can be exercised by sending an email to privacy@Skipr.co or by sending a letter to Skipr SA/NV, Maliestraat/rue du Mail 50, 1050 Elsene/Ixelles, Belgium.
If and to the extent provided under applicable Belgian and European law, you have the right to lodge a complaint with the authorized supervisory authority (the Data Protection authority) should you consider that the processing of your Personal Data infringes applicable law by sending an email to firstname.lastname@example.org or any other email address provided by the authorized supervisory authority (https://www.dataprotectionauthority.be/contact-us).
8. MODIFICATIONS TO THIS POLICY
We reserve the right to modify this Policy at any time. Any changes to the Policy will be published on the Application and on the Website and will be “popped-up” on the Application. In case of significant changes to the Policy that results in Skipr using your Personal Data in a manner materially different from that stated at the time of the collection, we will provide you with a notice on the Application and/or send you an email notification.
Following cookies are being stored when you visit and use Skipr Application and Skipr Website:
These are cookies that are required in order to use our Application and our Website. Without them certain sections will not function correctly, or not at all. In particular they enable navigation between the various sections of our Application and our Website, completion of forms and secure verification of your identity before granting access to your personal data.
Functional cookies are intended to facilitate operation of our Application and of our Website and make using it a more pleasant and personalized experience for you. These are cookies which, for example, store your preferences such as choice of language or your customer segment, collect information in forms for statistical purposes (number of unique visitors, etc.) or enable analysis of how visitors use the Application or the Website.
When you visit our Website and/or our Application, socio-demographic data and profile data are collected and stored anonymously in a marketing cookie. Marketing cookies do not contain any personal data and are placed by advertisers when their ad is posted. They prevent you being bombarded by the same advertisements over and over again and help to personalize publicity, but they also measure the effectiveness of our various marketing and publicity actions.
These cookies are placed via our Application and our Website by third parties, for example Google, Mixpanel, Intercom. In particular they improve our Application and Website's content and operation.
You can configure your internet browser in order to be informed of each cookie sent or systematically refuse them by modifying the parameters of your browser. Skipr cannot guarantee the access, use and operation of the Application and of the Website if the storage of cookies is disabled. If you want to refuse marketing cookies (including Google among others), you can do this with the help of the following website: http://www.youronlinechoices.com/
10. LEGISLATION AND COMPETENT COURTS
This Policy is governed by and construed in accordance with the Belgian legislation that is exclusively applicable to any potential dispute.
Any dispute arising under, or in connection with, this Policy shall be settled exclusively by the competent courts of Brussels, Belgium.
If you have any further questions about this Policy or its implementation, please contact privacy@Skipr.co.
Date of last revision: 04/09/2019