Privacy statement

Amaze cares about your privacy. Read more in our privacy statement.

Amaze Mobility B.V. (Amaze) provides mobility services to end users (services) through the Amaze Mobility application (app).

 

This privacy statement applies to all persons who use the app and/or visit the Amaze website (end users / you).

 

We understand the importance of privacy and consider the protection of your personal data important. It goes without saying that we process your data in accordance with the laws and regulations and qualify as a data controller.



  • On what legal basis does Amaze process your personal data?

Personal data is processed on the basis of the following legal bases:

  1. Permission;
  2. Execution of an agreement;
  3. Legal obligation;
  4. Legitimate interest (e.g. security, fraud and crime prevention, IT management, research and analysis of products or services, business administration, legal affairs and internal data management).



  • What personal data are involved? 

Amaze processes the following personal data: 


  • Data required for you to use the app:

 

To create a profile within Amaze we process: name and e-mail address.

 

If you subsequently wish to make use of the services, we will process them:

  • For administration, invoicing and to be able to reach you if necessary: address, telephone number, payment details (account number and debit/credit card numbers); 
  • To make the use of the app technically possible: IP address, location data and app usage data; 
  • In order to improve your use of the app and to provide you with good customer service: travel data (booking data and transaction data), which tells us about your travel behaviour (such as travel frequency, frequently used stations and routes, the time elapsed since your last trip and whether you travel during or outside rush hours).

 

These processes take place on the basis of your consent (basis 1) and because it is necessary for the performance of the contract (basis 2). 




  • Details of your driving licence

If you want to rent a scooter or car through the app, we need to verify that you have a (valid) driving licence. To do this, we ask you to upload photos of your driving licence (front and back) and a selfie in the app. 

 

The validation itself is not done by Amaze, but by the sub-processor specialised in this, Rentalcheck. We do not save this data ourselves: once every 24 hours, this data is removed from our systems and only the conclusion as to whether someone has a valid driving licence remains. Rentalcheck stores the personal data for 90 days, with the aim of preventing fraud.

 

This processing is based on your consent (basis 1), but also because it is simply necessary for the performance of the contract (basis 2) and we have a legitimate interest in combating fraud (basis 4).

 

  • Usage data

Finally, when using the app, we process: click behaviour, viewing and buying tickets, booking and paying for shared transport, adding or not adding your driving licence details, using the planner and the 'near me' function, and adding and using a voucher (if applicable). We need these details in order to provide you with appropriate information. 

 

We analyse travel and booking data for product and service development, app usage data for presentation improvement, better user experience, market research and management information. 

 

Your data is also processed to keep the app safe and to enable product and service development.

 

These processes are carried out on the basis of your consent (basis 1) and because it is necessary for the performance of the contract (basis 2).



  • With whom does Amaze share your data?

Amaze shares your data with the following parties in the following cases:


  • Mobility providers

If you book and/or pay for a trip via the app, Amaze shares certain information about you and your booked trip with your selected mobility provider (via so-called APIs). These mobility providers are independently responsible for processing the shared (personal) data. 

 

Exactly what information this involves varies from one mobility provider to another, but is always limited to the data the provider needs in order to allow you to make the journey and to deal with any damage or traffic fines.

 

These processing operations take place because they are necessary for the performance of the contract (basis 2) and on the basis of a legitimate interest (basis 4).

However, this only applies to mobility providers that are fully integrated into the app (i.e. where you can plan, book and pay within the app). Mobility providers that require you to download their own app are beyond the scope of this Privacy Statement.


  • Other Service Providers

In order to provide our services, we may need to share your data with other service providers, such as payment providers, hosting and analytic tools and authentication checkers. 




  • How long does Amaze keep your personal data?

Amaze never keeps user data longer than necessary. How long we keep data depends on the type of data, the category of user to which the data relates and the purposes for which we have collected the data:

 

  • The data that we need to enable you to use the app will be stored for as long as you continue to use it. In this regard, we may process your location data, but we do not store it at all.

 

  • We do not keep your driving licence data longer than 24 hours: once every 24 hours, this data is deleted from our systems. Our sub-processor Rentalcheck stores this data for a period of 90 days in order to prevent fraud.

 

  • We save the usage data for a period of 6 months. 

 

Users may request the deletion of their account at any time via DPO@amazemobility.nl. Following an account deletion request, Amaze will delete the user's account and data within 3 months, unless certain data needs to be retained due to legal requirements, for safety, security and fraud prevention purposes, or due to an issue related to the user's account, such as an outstanding credit or an unresolved claim or dispute.



  • How do we protect your personal data?

We use appropriate technical, organisational and administrative security measures to protect all information in our files from loss, misuse and unauthorised access, disclosure, alteration and destruction. 

 

Amaze anonymises travel data, booking data and transaction data to perform analyses for the following purposes: 

  • The development of products and services;  
  • the improvement of the user experience;
  • Compiling anonymous management information and dashboards for Amaze;  
  • advice on subscriptions and discount schemes that may apply.



  • International Data Transfers 

Your personal data will not be transferred to parties located outside the EU/EEA, except with your consent and under one of the approved mechanisms for such transfer, based on the applicable laws and regulations.



  • Rights of the data subject

You have the following rights with regard to the processing of your personal data:


  • Access to your personal data

You have the right to access and copy your personal data. We will provide this personal data free of charge unless your request is unwarranted, excessive or repetitive, in which case we are entitled to charge a reasonable fee. To access your personal data stored with us, please send us a data access request by e-mail. We will provide you with the personal data you have requested as soon as possible. To ensure that we are providing your personal information to the correct person, we may ask you test questions to validate your identity. 


  • Rectification of your personal data

If you believe that any personal information we are holding on you is inaccurate or incomplete, you may request that we correct that information. We will correct your information within one month of receiving your request for correction. 


  • Deletion of your personal data (right to be forgotten)

You may, in certain circumstances, exercise your right to have any personal data we hold about you deleted. You can exercise this right when we have collected your personal data on the legal basis of consent and you withdraw consent, when we no longer need the data for the purpose for which it was collected, when you object to the processing and when we have no compelling legitimate interest in continuing to process the data. Under certain circumstances, we will not be able to comply with your request if there is a legal basis for doing so. If this is the case, we will inform you. 


  • Restriction of processing

You have the right to restrict the processing of your personal data. If you believe that the personal data we hold about you is incorrect or incomplete, the processing is unlawful, Amaze does not need your data for its original purpose, or in the context of a deletion request, you can ask us to restrict the use of your personal data. This right blocks the use of your personal data by Amaze for a certain period of time. 


  • Transferability of your personal data

You have the right to data portability where we collect your personal data on the basis of your explicit consent or when it is necessary for the performance of a contract with us or our service providers. By exercising this right, we can transfer personal data to you in structured, commonly used and machine-readable formats. We have processes in place to ensure that we respond to a data transfer request without undue delay and within one month of receipt.



  • Right to withdraw consent

As explained above, the processing is largely based on your consent. Naturally, you can withdraw your consent at any time. This may result in you no longer being able to use the app. Withdrawing your consent will not call into question the legitimacy of past processing based on consent.  



  • Children

Amaze does not knowingly process personal data of persons under the age of 16. If you are under 16, please do not attempt to register with Amaze and do not enter any personal data. If we become aware that we have collected personal data from a child under 16, we will delete that data as soon as possible. If you believe that a child under 16 has provided us with personal data, please contact our DPO at DPO@amazemobility.nl.



  • Cookie Statement

Amaze uses functional, analytical and tracking cookies on its website. A cookie is a small text file that is stored in the browser of your computer, tablet or smartphone when you first visit our website. Amaze uses cookies with (i) a purely technical functionality; these ensure that the website works properly and that, for example, your preferences are remembered, (ii) to make the website work properly and to be able to optimise it and (iii) to track your surfing behaviour, so that we can offer you tailor-made content and advertisements.

When you first visited our website, we informed you about these cookies and asked you for your permission to place them. You can disable cookies by configuring your internet browser in such a way that it does not store any more cookies. In addition, you can delete all information previously stored using your browser settings. An explanation can be found at: https://veiliginternetten.nl/themes/situatie/wat-zijn-cookies/

Cookies are also placed on our website by third parties. These are for example advertisers and/or media companies. If you access the website or application of a third party via Amaze, the conditions and privacy rules of that organisation will apply. We advise you to consult the privacy statement of this partner or third party in these cases.



  • Changes to the Privacy Statement

We are constantly trying to improve our website and services. It is therefore possible that we also have to change this privacy statement from time to time. We will notify you of any material changes, for example, by posting a notice on our website when we are required to do so by law or regulation. 

You can see when this Privacy Statement was last updated by checking the date at the bottom of this page. You are responsible for reviewing this privacy statement periodically.

 

Contact us

If you have a question or complaint about the way your personal data is processed by Amaze, you can send an e-mail to our DPO, DPO@amazemobility.nl. You can also send us your complaint in writing to Stadsplateau 11, 3521 AZ Utrecht.

 

If you are not satisfied with Amaze's response, you can lodge a complaint with the Personal Data Authority.

 

Last amended: 9 June 2022

 

Privacy Statements of the Mobility Providers:

 

Public transportation:

NS: https://www.ns.nl/privacy

CFP: https://www.gvb.nl/privacy-verklaring

RET: https://www.ret.nl/home/reizen/reisregels-voorwaarden/privacy.html

HTM: https://www.htm.nl/privacy

EBS: https://www.ebs-ov.nl/waterland/over-ebs-in-waterland/privacy

Connection: https://www.connexxion.nl/nl/privacy

Arriva: https://www.arriva.nl/privacy.htm

Keolis: https://www.keolis.nl/privacyverklaring

QBuzz: https://www.qbuzz.qnet.net/privacy-policy/

 

Partial mobility:

Check: privacystatement.pdf (ridecheck.app)

Felyx: Microsoft Word - Felyx privacy statement_UPDATED_EN-translated-EN

Donkey Republic: https://www.donkey.bike/privacy-policy/

Amber: https://driveamber.com/nl/privacy/

 

Taxi:

TCA: https://www.tcataxi.nl/privacy-policy/

Want to receive Amaze news directly to your inbox?

By clicking subscribe you will receive occasional emails from Amaze. You can always unsubscribe directly from the emails you receive.