Data protection declaration

We at Donkey Republic take the protection of your personal data very seriously. We shall therefore handle your personal data with due care, conscientiously and in accordance with the applicable laws. 

The purpose of this document is to provide you with information about the data we collect and process when you use our services.

Section 1: Information on the collection of personal data

1. Personal data means any information relating to you personally, e.g. name, address, e-mail addresses, user behaviour, location.
2. The data controller within the meaning of Article 4 (7) of the EU General Data Protection Regulation (GDPR) is 

Donkey Republic Admin ApS

Christian IXs gade 7, 5.sal

Kopenhagen K, 1111

Denmark 

Directors: Mr. Erdem Ovacik and Mr. Rune Thorenfeldt Kokholm

Central business register (Denmark), CVR-number: 38049488

VAT-ID: DK 38049488 

E-Mail: [email protected]

Telephone: (+45) 89 88 7227

You can contact our data protection officer at [email protected] or through our postal address, stating clearly: “Data protection officer”.

1. When you contact us by email, chat, Facebook messenger, contact form or via phone, we store and process the data you provide (e.g. email address, name and any telephone number, contents of your message, etc.) in order to be able to respond to your inquiry. Data processing for purposes of contacting us is done in accordance with Article 6 (1) (1) point (a) of the GDPR, based on the consent you have given voluntarily. We shall erase the data we collected on this basis when it is no longer required.
   
2. To prevent unauthorised access by third parties to your personal data and in particular, financial data, the ordering process is encrypted using SSL (Secure Socket Layer). We also take reasonable physical, technical and administrative security measures to protect your personal data from loss, misuse, unauthorised access, disclosure and alteration. These security measures include firewalls, data encryption, physical access restrictions to our data centres, and access authorisation controls.
3. We store all the personal data in data centres in EU countries.

Section 2: Collection of personal data when visiting our website

1. If you use the website for information purposes only, we only collect the personal data that your browser transmits to our server. This information is temporarily stored in a so-called log file. If you would like to visit our website, we shall collect the following data:

• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/ HTTP status code
• Amount of data transferred
• The referring website
• Browser
• Operating system and its interface
• Language and version of the browser software

We process this data for the following purposes:

• To ensure smooth connectivity of the website,
• To ensure that our website is user-friendly,
• To evaluate the security and stability of the system, and
• for other administrative purposes.

The aforementioned data will be deleted no later than 30 days after you visited our website. 

1. On various pages of our website, we use cookies to make our website more user-friendly and to enable the use of certain functions and features to display needs-based products or for market research purposes. Cookies are small text files that are automatically stored on your device.

Use of cookies

1. This website uses the following types of cookies, the scope and functionality of which will be explained below:

• Transient cookies
• Persistent cookies.

1. Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies. They save a so-called session ID which is used to assign different requests from your browser to the common session. This allows your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close the browser.
2. Persistent cookies are automatically deleted after a specified period, which may differ, depending on the cookie. You can delete cookies at any time in the security settings of your browser.
3. You may configure your browser settings according to your preferences and, for example, block the acceptance of third-party cookies or all cookies. Please note that if you do this, you may not be able to use all the functions and features of this website.
4. For information about the length of storage, please refer to the overview in the cookie settings of your browser.
5. We use tracking software to track your behaviour on the website for example clicking a button to download the Donkey Republic app. It helps us to improve our services. . For an overview of how we process our data, please look at our GDPR page.
6. The legal basis for aforementioned data processing is Article 6 (1) (1) point (f) of the GDPR. The purposes of data processing named above constitute our legitimate interests.

Section 3: Collection of personal data when renting a Vehicle or becoming a member

1. If you like to rent a bike, ebike, etc. (“Vehicle”) or becoming a member, you will need to provide personal data (e.g. name, email address, mobile number, payment method, credit card number etc.) in order to conclude the contract. In addition, we need this personal information in order to process your order. The legal basis for this is Article 6 (1) (1) point (b) of the GDPR. We store these data as long as you are our customer with an active account. Your account is regarded inactive, if you have not made use of the account for 36 consecutive months, after which point in time the order data will be erased, if we are not obliged to retain the data as described below. 
2. Under the provisions of the applicable commercial and tax laws, we are obliged to retain your order data for the legally prescribed period. The legal basis for this is Article 6 (1) (1) point (c) of the GDPR. At the end of the statutory retention periods stipulated by the commercial and tax laws, we shall erase your order data. 
3. We also collect and process the following data when you use a Vehicle:

• Location and route of the Vehicle
• Duration of the use of the Vehicle
• Vehicles locks and unlocks
• Occurred errors

We collect and process this data at various cities and periods, analyse the resulting data to drive our strategic and operations decisions such as where to place hubs or how many mechanics to employ to take care of the Vehicles. We also use the data to optimise our App.

Phone location data is only collected when your phone has location services turned on. Turning off location services will automatically opt-out of the collection of location data. Unlocking and locking the Vehicle requires location services to be on for Android users as this is a requirement from the Android operating system. Ending rental also requires location services to be on so that we know where you dropped the Vehicle.

The legal basis for this type of data processing is Article 6 (1) (1) point (f) of the GDPR. The aforementioned purposes constitute our legitimate interests. We store this data for as long as it is necessary to improve our services.

1. We sometimes use external service providers, in particular payment service providers (e.g. credit card company etc.) to process your order. To process your order, we have to pass on your order data to these companies. The legal basis for data processing in this case is Article 6 (1) (1) point (b) of the GDPR. See details here.
   

Section 4: Newsletter

1. If you subscribe to our newsletter, we will regularly send you an email to inform you about interesting offers regarding renting Vehicles, among other things. Subscription to our newsletter is voluntary.
2. The only information we need from you for sending the newsletter is your email address. We store your email address for the purpose of sending you the newsletter. The legal basis for this is Article 6 (1) (1) point (a) of the GDPR.
3. In addition, we store your IP addresses and the date and time of your subscription and confirmation. This process allows us to prove that you have subscribed to the newsletter and to investigate any possible misuse of your personal data. The legal basis for this is Article 6 (1) (1) point (f) of the GDPR. The purposes listed above constitute our legitimate interests.
4. We use the so-called double opt-in process for subscriptions to our newsletter. This means that once you have subscribed to our newsletter, we will send you an email to the email address you have provided, in which we ask you to confirm that you wish to receive the newsletter.
5. You can withdraw your consent and unsubscribe from the newsletter at any time. To unsubscribe, you can use our contact details specified above to send us a message, or the unsubscribe link in our newsletters or you can send us an email to [email protected]
6. Once you have unsubscribed, we will erase your email address, unless you have consented to further use of your data or we reserve the right to continue using the data for purposes permitted by law and specified in this privacy policy.

Section 5: Surveys or ratings

1. If we ask for your opinion as part of a survey or rating, we shall store and process the personal data you provide to us in this context to improve our products and services. The legal basis for this is Article 6 (1) (1) point (a) of the GDPR. Your participation in such a survey or rating is voluntary.
2. We will store your personal data for as long as it is necessary to improve our products and services or until you withdraw your consent to this type of data processing.

Section 6: 3rd parties with whom personal information may be shared

1. We share personal data with 3rd party processors. For a complete list, please view our GDPR page.

Section 7: Transfer of personal data at specific rental locations

As each party decides for itself how it processes the personal data collected through the service, each party shall be considered a separate data controller and is individually responsible for complying with any data protection legislation applicable from time to time, including the GDPR for any processing of personal data carried out in connection with this Agreement.

When a customer rents a bike in the system administered by the partner then Donkey Republic will forward the following data to the partner for the purpose of the partner providing support locally to the customer if needed:

– Name

– Email

– phone number

If agreed between the parties, Donkey Republic can, through Donkey Republic’s system, provide an option for customers to opt-in to receive marketing material from the partner by submitting name and email address. This information will also be forwarded to the partner. The partner will hereafter be responsible for handling the consent with respect to the customers’ rights.

Section 8: Your rights

1. You have the following rights with respect to personal data concerning you:

• Right to information (Article 15 of the GDPR)
• Right to rectification of data (Article 16 of the GDPR)
• Right to erasure of data (Article 17 of the GDPR)
• Right to restriction of processing (Article 18 of the GDPR)
• Right to data portability (Article 20 of the GDPR)

1. In addition, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes against this regulation (Article 77 of the GDPR).
2. You have the right to withdraw the consent you once gave to us with regard to data processing any time (Legal basis: Article 6 (1) (1) point (a) of the GDPR). As a result, we shall no longer be allowed to process data based on this consent going forward. The withdrawal of consent shall not affect the legality of the processing done on the basis of this consent before its withdrawal.
3. Right to object to processing (Article 21 of the GDPR)

Right to object

1. You have the right, for reasons arising from your particular situation, to object to the processing of your personal data which is based on Article 6 (1) point (f) of the GDPR (Data collection for purposes of safeguarding legitimate interests), any time; this includes profiling based on those provisions. If you make use of this right to object, we shall no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or unless the processing is for purposes of asserting, exercising or defending legal claims.
2. Where we process your personal data for direct advertising purposes, you will have the right to object at any time to the processing of your personal data for such advertising purposes; this also includes profiling to the extent that it is related to such direct advertising. The existence of a special situation, as in (a), is therefore, not necessary for an effective objection to direct advertising. If you object to processing for direct advertising purposes, your personal data will no longer be processed for such purposes.

Donkey Republic, June 2021