Privacy Policy for Drivers

1. Personal data we process

• Data you provide us, such as during account creation. This includes:
  • User profile information such as Name, e-mail, phone number, place of residence, information about vehicles (including registration number), Driver’s license, photo, profession, and identity documents.
  • Police Conduct and other documents requested by Ryde.
  • Transaction information related to the use of our services, including trip details, vehicle information, date and time the service was provided, amount charged, distance travelled and payment method.
  • Usage data: We collect data about how users interact with our services. This includes data such as access dates and times, app features or pages viewed, app crashes and other system activity, type of browser, and third-party sites or services used before interacting with our services. In some cases, we collect this data through cookies, pixels, tags, and similar tracking technologies that create and maintain unique identifiers.
• Data created during your use of our services, including:
  • Geolocation of drivers and driving routes.
  • App usage and device data:
  • Passenger feedback regarding driver’s efficiency and ratings.

2. Purpose of the processing

• We collect and process your personal data for the purpose of connecting passengers with you in order to help them move around cities more efficiently.
• Geolocation and driving routes are processed to analyse the geographical area and give suggestions to the drivers. (​If you do not want to disclose your geolocation for passengers, you must indicate in the Ryde Driver app that you are offline and currently are not providing transportation services).
• Driver’s license, profession, identity documents and criminal convictions and offences are processed to determine criminal background checks in compliance with local laws and regulations governing rideshare drivers, as well as Ryde Technologies Limited’s internal safety standards. 
• Through our app we also collect your photo, name and vehicle details for the passengers to identify driver and vehicle.

3. Legal Basis

• Personal data may be processed for the following reasons:

  • For the performance of the contract concluded with you. The prerequisite for the use of the Ryde services include qualification from Ryde’s criminal background checks and the processing of driver’s identification and geolocation data.

• Where it is in our legitimate interests to do so and this is not overridden by your rights and freedoms. Examples include where necessary to investigate and detect fraudulent transactions.
• Where necessary to meet a legal obligation.

4. Recipients

• Your personal data (your name, vehicle registration number, phone number, photo and geolocation data) is disclosed to passengers via the Ryde app once you have accepted the order.
• We may also share data with other categories of recipients including service providers, partners or other entities to enable us to provide our Services (including customer care), for legal reasons or in connection with claims or disputes.

5. Security and access

• RYDE Technologies Limited employees ​can access personal data to the extent necessary to provide customer support or investigate claims, disputes or fraudulent activity
• We use third-party data processors to process limited personal data on our behalf. Such service providers support Ryde, especially relating to hosting and operating the app, marketing, analytics, improving the app, and sending email newsletters, where this is applicable, or we have the consent to do so. Where processors are based outside the EEA or a white list jurisdiction, there are contractual agreements in place to bind the third party to maintain a data protection level equivalent to GDPR or those stipulated by the EU.

6. Processing passengers’ personal data

• You may not process the personal data of passengers without the prior written permission from us. You may not contact any passenger or collect, record, store, grant access, use or cross-use the personal data provided by the passenger or accessible to you via the Ryde Driver app for any reason other than for the purposes and instructions provided by us in delivery of our Services.
• You must comply with the rules and conditions for processing of personal data of passengers as set forth in the Privacy Policy for Passengers. Failure to observe the data protection principles within this Policy may result in your incurring personal criminal liability. It may also result in disciplinary action up to and including dismissal where there are significant or deliberate breaches of this Policy, such as inappropriate use of passenger or customer personal data without authorization or a legitimate reason to do so.

7. Retention

• Your personal data will be stored as long as you have an active driver’s account. If your account is closed the personal data will be stored for an additional 3 year period.
• In the event that there are suspicions of a criminal offence, fraud or false information having been provided, the data will be stored for 10 years.

8. Your rights under the Data Protection Laws

• Your Right of Access
  • You may, at any time request us to confirm whether or not we are processing Personal Data that concerns you and, if we are, you shall have the right to access that Personal Data and to the following information:
    • What Personal Data We have
    • Why We process them
    • Who We disclose them to
    • How long We intend on keeping them for (where possible)
    • Whether We transfer them abroad and the safeguards We take to protect them
    • What Your rights are
    • How You can make a complaint
    • Where We got Your Personal Data from
    • Whether We have carried out any automated decision-making (including profiling) as well as related information.
  • Upon request, we shall (without adversely affecting the rights and freedoms of others including our own) provide you with a copy of the Personal Data undergoing processing within one month of receipt of the request, which period may be extended by two months where necessary, taking into account the complexity and number of the requests. We shall inform you of any such extension within one month of receipt of the request, together with the reasons for the delay.
• Your Right to Rectification
  • You have the right to ask us to rectify inaccurate Personal Data and to complete incomplete Personal Data concerning you. We may seek to verify the accuracy of the data before rectifying it.
• Your Right to Erasure (The Right to be Forgotten)
  • You have the right to ask us to delete your Personal Data and we shall comply without undue delay but only where:
    • The Personal Data are no longer necessary for the purposes for which they were collected; or
    • You have withdrawn your consent (in those instances where we process on the basis of your consent) and – we have no other legal ground to process your Personal Data; or
    • You shall have successfully exercised your right to object (as explained below); or
    • Your Personal Data shall have been processed unlawfully; or
    • There exists a legal obligation to which we are subject; or
    • Special circumstances exist in connection with certain children’s rights
  • You should also bear in mind that any request to delete your personal data is possible only if we delete your account. As a result of that you will not be able to use the Ryde Driver app via an account which has been deleted.
  • In any case, We shall not be legally bound to comply with your erasure request if the processing of your Personal Data is necessary for the fulfilment of any other individual right request set out in this policy.
• Your Right to Data Restriction
  • You have the right to ask us to restrict (that is, store but not further process) your Personal Data but only where:
    • The accuracy of your Personal Data is contested (see the Your Right to Rectification), for a period enabling us to verify the accuracy of the Personal Data; or
    • The processing is unlawful and you oppose the erasure of your Personal Data; or
    • We no longer need the Personal Data for the purposes for which they were collected but You need the Personal Data for the establishment, exercise or defence of legal claims; or
  • Following your request for restriction, except for storing your Personal Data, we may only process your Personal Data:
    • Where We have Your consent; or
    • For the establishment, exercise or defence of legal claims; or
    • For the protection of the rights of another natural or legal person; or
    • For reasons of important public interest.
• Your Right to Data Portability
  • You have the right to ask us to provide your Personal Data (that you shall have provided to us) to you in a structured, commonly used, machine-readable format, or (where technically feasible) to have it ‘ported’ directly to another data controller, provided this does not adversely affect the rights and freedoms of others. This right shall only apply where:
    • The processing is based on your consent or on the performance of a contract with you; and
    • The processing is carried out by automated means
  • The customer’s personal data includes: contact information, last 3 years’ journey history and payment information.
• Your Right to Withdraw Consent (when we rely on consent)
  • For the avoidance of all doubt, we would like to point out that in those limited cases where we cannot or choose not to rely on another legal ground (for example, our legitimate interests), we will process Your Personal Data on the basis of your consent. In those cases where we process on the basis of your consent (which we will never presume but which we shall have obtained in a clear and manifest manner from you), you have the right to withdraw your consent at any time and this, in the same manner as you shall have provided it to us.
  • Should you exercise your right to withdraw your consent at any time, we will determine whether at that stage an alternative legal basis exists for processing your Personal Data (for example, on the basis of a legal obligation to which we are subject) where we would be legally authorised (or even obliged) to process your Personal Data without needing your consent and if so, notify you accordingly. When we ask for such Personal Data, you may always decline, however should you decline to provide us with necessary data that we require to provide requested services, we may not necessarily be able to provide you with such services (especially if consent is the only legal ground that is available to us).
  • Just to clarify, consent is not the only ground that permits us to process your Personal Data. In Sections 1 & 2, we pointed out the various grounds that we rely on when processing your Personal Data for specific purposes.
• Your Right to Object to Certain Processing
  • In those cases where we only process your Personal Data when this is: 1.) necessary for the performance of a task carried out in the public interest or 2.) when processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, you shall have the right to object to processing of your Personal Data by us. Where an objection is entered, the processing of data shall cease, unless we as data controller provide compelling and legitimate grounds requiring the continuation of the data processing which outweigh the objections you may have raised.
  • When your data is processed for direct marketing purposes, you have the right to object at any time to the processing of your Personal Data, which includes profiling to the extent that it is related to such direct marketing.
  • For the avoidance of all doubt, when we process your Personal Data when this is necessary for the performance of a contract, when necessary for compliance with a legal obligation to which we are subject or when processing is necessary to protect your vital interests or those of another natural person, this general right to object shall not subsist.
• Your Right to lodge a Complaint
  • You also have the right to lodge complaints with the appropriate Data Protection Supervisory Authority. The competent authority in Malta is the Office of the Information and Data Protection Commissioner (IDPC).
  • We kindly ask that you please attempt to resolve any issues you may have with us first (even though, as stated above, you have a right to contact the competent authority at any time).

Contact Information
We welcome your comments regarding this privacy statement at the contact address given at the App. Should there be any concerns about contravention of this Privacy Policy, we will employ all commercially reasonable efforts to address the same. The terms in this Policy may be changed by us at any time. Should you have concerns regarding this Policy or the Services that we offer, please feel free to write to us.

IN WITNESS WHEREOF, all users or visitors of the App agree that they have read the terms mentioned in this Privacy Policy and agree to be bound by them for as long as they continue to either use the App or avail Services of the Company.