This privacy policy applies to you as a user of Gjøvik Kommune city bikes. On this page you can read about our principles for privacy and your rights as a customer.
The data controller when you use our services is: Gjøvik Kommune, organisation number: 940 155 223, Postbox 630, 2810 Gjøvik.
Our Privacy Principles
- We shall process personal data in a lawful, fair, and transparent manner.
- We shall only collect personal data that is relevant to the customer relationship with us.
- We do not collect more personal data than necessary.
- Personal data we have collected shall be up to date and accurate.
- Personal data we have collected shall be deleted when it is no longer needed.
- Personal data we have collected shall be treated confidentially.
- We never sell personal data to third parties.
- Our customers have the right to access personal data linked to their customer relationship. They shall be able to receive a copy of this data, and may choose to have it deleted from our systems.
What Are My Rights?
Right of access and right to data portability. You have the right to receive information about what personal data we process and how we process it. As a customer of Gjøvik Municipality's city bikes, you have created a user profile in the Gjøvik Bysykkel app and can log in to the Gjøvik Bysykkel app to view the information we have stored about you. You also have the right to request a complete list of the information in a machine-readable format, so that you can transfer it to others. Such an overview can be obtained by contacting us at bysykkel@gjovik.kommune.no.
Right to rectification and erasure. You may require us to correct information about you if it is incomplete or inaccurate. You may also request that your user profile be deleted.
Right to restriction. You have the right to request a restriction on the processing of your personal data — for example, if you believe the processing does not comply with applicable laws and regulations, or that the data is incorrect.
Right to withdraw consent. It is straightforward to withdraw consent you have given for the processing of your personal data. Send an email to bysykkel@gjovik.kommune.no to change your consents.
Right to object. You have the right to object to our processing of your data.
What Is Personal Data Used For?
We collect the following personal data about you: name and contact information (email, phone number, and address), date of birth, gender (optional), account and order history, location data related to use of the bicycle, payment information, information about your use of our website and app, and information about your contact with us.
Rental of Gjøvik Municipality city bikes. When you create a user profile and rent a bicycle from us, we enter into an agreement with you. In order to fulfil the agreement, we need to know who you are. We also need your contact details to send you information about and related to the rental. To be able to administer and operate the service, we also need information about where the bicycle is located, which we obtain through GPS tracking of the bicycle. We may also use such location data for equipment troubleshooting and in connection with the execution of the rental. In order to charge for the service, we need your payment details.
Administration of your user profile and customer relationship. To administer the customer relationship, we need to process the personal data registered when your user profile was created with us — including, among other things, to be able to respond to enquiries from you as a customer through our channels. We must also be able to check your activity in the Gjøvik Bysykkel app in order to respond to enquiries about these services, for example during troubleshooting.
Improvement and troubleshooting. We continuously work to improve our digital solutions. This includes troubleshooting and bug fixing. If you contact us to report an error or suggest improvements, we may collect your contact details as well as information about your use of our app.
Your feedback and input about our services are important to us. We therefore conduct market research, create customer surveys, and contact customers directly to hear what they think of our services. To conduct high-quality surveys, we use personal data to select who to contact. In order to provide you with improved and new services, we have the right to carry out such surveys.
Development of new and existing services. We also process personal data to identify demand for new products and services and to improve existing products and services.
We use cookies to give you a better user experience when using the Gjøvik Bysykkel app. You can decide for yourself whether to allow the use of cookies.
Sharing of personal data. We may share certain personal data with our partners and suppliers. With our partners, we may share information relevant to the improvement or development of new products and services. With suppliers, we may share information they need to carry out an assignment given to them by us. This may include consultancy firms, advertising agencies, providers of analytics tools, and similar. When sharing as described above, we always enter into agreements that limit the supplier's access to and use of the data — including that the data may not be passed on further. We may also share data with relevant research projects we participate in. Personal data may be disclosed to public authorities upon request — for example, when there is suspicion that a crime has been committed in connection with the use of our services. We will not share or disclose personal data in any other way than described here. We do not sell your personal data to third parties.
How long is personal data stored? We do not store your personal data for longer than necessary. This means, for example, that personal data we process on the basis of your consent is deleted if you withdraw your consent. Personal data we process in order to fulfil an agreement with you is deleted when the agreement has been fulfilled and all obligations arising from the contractual relationship have been met. For example, profile data is retained for as long as you are an active customer and deleted after 3 years of inactivity. Order history is deleted 3 years after the last purchase (rental), though accounting records are retained for 5 years in accordance with the deadlines set by the Bookkeeping Act. Location history data is anonymised, normally after three months, when full history is no longer required.
Help and Contact
Do you have questions about what personal data we have collected about you as a customer, or would you like us to delete something about you? Log in to "My User Profile" in the app to manage your consents.
For enquiries regarding our processing of personal data, you can contact us by email at: bysykkel@gjovik.kommune.no
You also have the right to lodge a complaint about our processing of personal data with the Norwegian Data Protection Authority (Datatilsynet). Read more at Datatilsynet's website or send an email to postkasse@datatilsynet.no.