Privacy Statement

Amaze Mobility B.V. (Amaze) provides mobility services to end users (services) through the Amaze Mobility application (app).

 

This privacy statement applies to all individuals who use the app and/or visit the Amaze website (end users / you).

 

We understand the importance of privacy and consider the security of your personal data important. Of course we process your data in accordance with the laws and regulations and qualify as a data controller.



  • On what legal basis does Amaze process your personal data?

The processing of personal data takes place on the basis of the following legal bases:

  1. Consent;
  2. Execution of an Agreement;
  3. Legal obligation;
  4. Legitimate interest (including security, fraud and crime prevention, IT management, research and analysis of products or services, corporate governance, legal matters and internal data management).



  • What personal data is involved? 

Amaze processes the following personal data: 


  • Data needed for you to use the app:

 

To create a profile within Amaze, we process: name and email address.

 

If you subsequently wish to use the services we process:

  • For administration, invoicing and to be able to reach you if necessary: address, telephone number, payment details (account number and debit/credit card numbers); 
  • To make the use of the app technically possible: IP address, location data and app usage data; 
  • To improve your use of the app and provide you with good customer service: travel data (booking data and transaction data), which tells us something about your travel behavior (such as frequency of travel, frequently used stations and routes, the time that has passed since your last trip and whether you travel during or outside rush hour).

 

These processing operations take place on the basis of your consent (basis1) and because it is necessary for the performance of the agreement (basis 2). 




  • Details of your driver's license

If you wish to rent a scooter or car through the app, we need to verify that you have a (valid) driving license. To do this, we ask you to upload photos of your driver's license (front and back) and a selfie in the app. 

 

The validation itself is not done by Amaze, but by the sub-processor specialized in this, Rentalcheck. We do not save this data ourselves: once every 24 hours this data is removed from our systems and only the conclusion as to whether someone has a valid driver's license remains. Rentalcheck retains the personal data for 90 days, with the aim of preventing fraud.

 

This processing is based on your consent (basis 1), but also because it is simply necessary for the performance of the contract (basis 2) and we have a legitimate interest in combating fraud (basis 4).

 

  • Usage data

Finally, when using the app we process; click behaviour, viewing and buying ticket, booking and paying for shared transport, adding (or not) your driver's license details, using the planner and the 'near me' function, and adding and using a voucher (if applicable). We need this information to provide you with appropriate information. 

 

We analyze travel and booking data for product and service development, app usage data to improve presentation, better user experience, market research and management information. 

 

Your data is also processed to keep the app secure and enable product and service development....

 

These processing operations take place on the basis of your consent (basis 1) and because it is necessary for the performance of the agreement (basis 2).



  • Who does Amaze share your data with?

Amaze shares your data with the following parties in the following cases:


  • Mobility Providers

If you book and/or pay for a trip via the app, Amaze shares (via so-called APIs) certain information about you and your booked trip with your selected mobility provider. These mobility providers are independently responsible for processing the shared (personal) data. 

 

Exactly what information this involves varies from one mobility provider to another, but it is always limited to the data the provider in question needs in order to allow you to carry out the trip and handle any damages and traffic fines.

 

These processing operations take place because they are necessary for the performance of the contract (basis 2) and on the basis of a legitimate interest (basis 4).

By the way, this only applies to mobility providers that are fully integrated into the app (i.e. where you can plan, book and pay within the app). Mobility providers that require downloading their own app are beyond the scope of this Privacy Statement.


  • Other Service Providers

In order to provide our services, we may need to share your information with other service providers, such as payment providers, hosting and analytic tools and authentication checkers. 




  • How long does Amaze keep your personal data?

Amaze never keeps user data longer than necessary. How long we retain data depends on the type of data, the category of user to which the data relates, and the purposes for which we collected the data:

 

  • We store the data we need to enable you to use the app for as long as you continue to use it. In this regard, we may process data about your location, but we do not store it at all.

 

  • We do not keep your driver's license data longer than 24 hours: once every 24 hours, this data is deleted from our systems. Our sub-processor Rentalcheck keeps this data for a period of 90 days, with the aim of preventing fraud.

 

  • We keep the usage data for a period of 6 months. 

 

Users may request removal of their account at any time via DPO@amazemobility.nl. Following an account deletion request, Amaze will delete the user's account and data within 3 months, unless certain data must be retained due to legal requirements, for safety, security and fraud prevention purposes, or due to an issue related to the user's account, such as an outstanding credit or an unresolved claim or dispute.



  • How do we secure your personal data?

We use appropriate technical, organizational and administrative security measures to protect all information in our files from loss, misuse and unauthorized access, disclosure, alteration and destruction. 

 

Amaze anonymizes travel data, booking data and transaction data to perform analytics for the following purposes: 

  • The development of products and services;  
  • The improvement of the user experience;
  • Compiling anonymous management information and dashboards for Amaze;  
  • Advice on subscriptions and discount schemes that may apply.



  • International Data Transfers 

Your personal data will not be transferred to parties located outside the EU/EEA, except with your consent and under one of the approved mechanisms for such transfer, based on applicable laws and regulations.



  • Rights of the data subject

You have the following rights with respect to the processing of your personal data:


  • Access to your personal data

You have the right to access and copy your personal data. We will provide this personal data free of charge unless your request is unwarranted, excessive or repetitive, in which case we are entitled to charge a reasonable fee. To access your personal data stored with us, please send us an access request by e-mail. We will provide the personal data you have requested as soon as possible. To ensure that we are providing the personal information to the correct person, we may ask you test questions to validate your identity. 


  • Rectification of your personal data

If you believe that any personal information we are holding on you is inaccurate or incomplete, you may request that we correct that information. We will correct your information within one month of receiving your request for correction. 


  • Deleting your personal data (right to be forgotten)

You may, in certain circumstances, exercise your right to have your personal data, which we hold about you, deleted. You may exercise this right where we have collected your personal data on the legal basis of consent and you withdraw consent, we no longer need the data for the purpose for which it was collected, where you object to the processing and we have no compelling legitimate interest in continuing to process the data. Under certain circumstances, we will not be able to comply with your request if there is a legal basis for doing so. If this is the case, we will inform you. 


  • Restriction of processing

You have the right to restrict the processing of your personal data. If you believe that the personal data we hold about you is incorrect or incomplete, the processing is unlawful, Amaze does not need your data for the original purpose, or in the context of a deletion request, you can ask us to restrict the use of your personal data. This right blocks Amaze's use of your personal data for a certain period of time. 


  • Transferability of your personal data

You have the right to data portability in which we collect your personal data on the basis of your explicit consent or when it is necessary to perform a contract with us or our service providers. Exercising this right allows us to transfer personal data to you in structured, commonly used and machine-readable formats. We have processes in place to ensure that we respond to a data portability request without undue delay and within one month of receipt.



  • Right to withdraw consent

As explained above, the processing is largely based on your consent. Naturally, you can withdraw your consent at any time. This may result in you no longer being able to use the app. Withdrawing your consent will not call into question the legitimacy of the processing done in the past on the basis of consent.  



  • Children

Amaze does not knowingly process personal data of persons under the age of 16. If you are under 16, please do not attempt to register with Amaze or enter any personal data. If we learn that we have collected personal data from a child under 16, we will delete that data as soon as possible. If you believe that a child under 16 has provided us with personal data, please contact our DPO at DPO@amazemobility.nl.



  • Cookie Statement

Amaze uses functional, analytical and tracking cookies on its website. A cookie is a small text file that is stored in the browser of your computer, tablet or smartphone when you first visit our website. Amaze uses cookies with (i) a purely technical functionality; these ensure that the website works properly and that, for example, your preferences are remembered, (ii) to make the website work properly and to be able to optimise it and (iii) to track your surfing behaviour, so that we can offer tailor-made content and advertisements.

During your first visit to our website, we have already informed you about these cookies and asked your permission to place them. You can opt out of cookies by setting your Internet browser so that it no longer stores cookies. In addition, you can also delete all information previously stored via your browser settings. An explanation can be found at: https://veiliginternetten.nl/themes/situatie/wat-zijn-cookies/

Cookies are also placed on our website by third parties. These are for example advertisers and/or media companies. If you arrive at the website or application of a third party via Amaze, the conditions and privacy rules of that organization will apply. We advise you to consult the privacy statement of this partner or third party in these cases.



  • Changes to the privacy statement

We are constantly trying to improve our website and services. It is therefore possible that we also have to change this privacy statement from time to time. We will notify you of any material changes, for example, by posting a notice on our website when we are required to do so by law or regulation. 

You can see when this privacy statement was last updated by checking the date at the bottom of this page. You are responsible for periodically reviewing this privacy statement.

 

Contact us

In case you have a question or complaint about the way your personal data is processed by Amaze, you can send an email to our DPO, DPO@amazemobility.nl. You can also send us a complaint in writing to Stadsplateau 11, 3521 AZ in Utrecht.

 

If you are not satisfied with Amaze's response, you can file a complaint with the Personal Data Authority.

 

Last modified: June 9, 2022

 

Privacy Statements of Mobility Providers:

 

Public transportation:

NS: https://www.ns.nl/privacy

CFP: https://www.gvb.nl/privacy-verklaring

RET: https://www.ret.nl/home/reizen/reisregels-voorwaarden/privacy.html

HTM: https://www.htm.nl/privacy

EBS: https://www.ebs-ov.nl/waterland/over-ebs-in-waterland/privacy

Connection: https://www.connexxion.nl/nl/privacy

Arriva: https://www.arriva.nl/privacy.htm

Keolis: https://www.keolis.nl/privacyverklaring

QBuzz: https://www.qbuzz.qnet.net/privacy-policy/

 

Partial Mobility:

Check: privacystatement.pdf (ridecheck.app)

Felyx: Microsoft Word - Felyx privacy statement_UPDATED_EN-translated-EN

Donkey Republic: https://www.donkey.bike/privacy-policy/

Amber: https://driveamber.com/nl/privacy/

 

Cab:

TCA: https://www.tcataxi.nl/privacy-policy/