Privacy Policy for Passengers

1. Personal data we process

• Name, phone number, e-mail address.
• Geolocation of the passenger, the time and the destination of a journey.
• Payment information (We don’t store payment data, we only process it).
• Any personal data that could be exchanged whilst addressing inquiries or complaints raised by users of the service.
• Profile information from Facebook and Google if registration is done through Facebook or Google.
• Identification data of the device on which the Ryde app has been installed.

2. Purpose of the process

• We collect and process personal data for the purpose of connecting passengers with drivers to help them move around cities more efficiently.
• We display geolocation data and the phone number of passengers to drivers to enable efficient pick-up. Geolocation data is collected only when the Ryde app is activated. The collection of geolocation data stops after closing the Ryde app.
• We may use geolocation data to resolve quality issues related to transportation services.
• We use contact details to notify passengers of updates to the Ryde app.
• We collect data of the routes taken by drivers and passengers to analyse the geographic coverage in order to provide recommendations to the drivers about most efficient routes.
• Your name, phone number and email address will be used to communicate with you and provide you with customer support service.
• We obtain payment details to process passengers’ payment on behalf of drivers for transportation services.
• Customer support data is collected on a case-by-case basis and stored for the purpose of resolving disputes and service quality issues.

3. Legal Basis

• Personal data is processed in order to provide the service contracted with passengers. We collect and process the personal data submitted by the passengers in the course of installation and use of the Ryde app. The prerequisite for the use of Ryde services is passengers agreeing to the processing of identification and geolocation data.
• Personal data may also be processed on legitimate interest grounds, for example in investigating and detecting fraudulent payments.

4. Recipients

• The personal data of passengers is disclosed to the driver who has activated the Ryde app; in such cases, the driver will see the name, phone number and geolocation data of the passenger.
• We may also share data with other categories of recipients including service providers, partners or other entities to provide you with customer care services, for legal reasons or in connection with claims or disputes. After providing the transportation service, the name and the telephone number of the passenger will not remain visible to the driver via the Ryde app.
• Feedback given by passengers regarding the quality of the service is and drivers do not receive names and telephone numbers of the passenger who provided rating and feedback.

5. Security and access

• Only authorized employees of RYDE Technologies Limited have access to the personal data and they may access the data only for the purpose of resolving issues associated with the use of the services (including disputes regarding transportation services).
• RYDE Technologies Limited can access personal data to the extent necessary to provide customer support, or for Direct Marketing purposes, if consent to do so is given by you.
• Geographical data is processed in pseudonymized form and personalised only if the geographical location data is needed to be linked to a passenger for resolving disputes or fraud.
• For research and scientific purposes, the data is used in unidentified form (pseudonymized).
• If you choose to link, connect, or login to your Ryde Account with a third party service (Google, Facebook), the third party service may send us information such as your registration and profile information from that service. This information varies and is controlled by that service or as authorized by you via your privacy settings at that service. This Privacy Policy applies only to our service, so if you choose to link with another website, you should read their Privacy Policy about their use of your personal data.
• We use third-party data processors to process limited personal data on our behalf. Such service providers support Ryde, especially relating to hosting and operating the app, marketing, analytics, improving the app, and sending email newsletters, where this is applicable, or we have the consent to do so. Where processors are based outside the EEA or a white list jurisdiction, there are contractual agreements in place to bind the third party to maintain a data protection level equivalent to GDPR or those stipulated by the EU.
• Our content may link to third party websites to provide relevant references. We are not responsible for such external content, which may contain separate privacy policies and data processing disclosures. This Privacy Policy applies only to our service, so if you choose to link with another website, you should read their privacy policy about their use of your personal data.

6. Access and correction

• You can access and update your personal data via the Ryde app.

7. Retention

• Your personal data will be stored as long as you have an active passenger account. If your account is closed, personal data will be deleted (according to the policies set out in this section) from the databases, unless such data is required to be retained for accounting, dispute resolution or fraud prevention purposes in line with Ryde’s Data Retention policies.

8. Your rights under the Data Protection Laws

• Your Right of Access
  • You may, at any time request us to confirm whether or not we are processing Personal Data that concerns you and, if we are, you shall have the right to access that Personal Data and to the following information:
    • What Personal Data We have
    • Why We process them
    • Who We disclose them to
    • How long We intend on keeping them for (where possible)
    • Whether We transfer them abroad and the safeguards We take to protect them
    • What Your rights are
    • How You can make a complaint
    • Where We got Your Personal Data from
    • Whether We have carried out any automated decision-making (including profiling) as well as related information.
  • Upon request, we shall (without adversely affecting the rights and freedoms of others including our own) provide you with a copy of the Personal Data undergoing processing within one month of receipt of the request, which period may be extended by two months where necessary, taking into account the complexity and number of the requests. We shall inform you of any such extension within one month of receipt of the request, together with the reasons for the delay.
    
    
• Your Right to Rectification
  • You have the right to ask us to rectify inaccurate Personal Data and to complete incomplete Personal Data concerning you. We may seek to verify the accuracy of the data before rectifying it.
    
    
• Your Right to Erasure (The Right to be Forgotten)
  • You have the right to ask us to delete your Personal Data and we shall comply without undue delay but only where:
    • The Personal Data are no longer necessary for the purposes for which they were collected; or
    • You have withdrawn your consent (in those instances where we process on the basis of your consent) and – we have no other legal ground to process your Personal Data; or
    • You shall have successfully exercised your right to object (as explained below); or
    • Your Personal Data shall have been processed unlawfully; or
    • There exists a legal obligation to which we are subject; or
    • Special circumstances exist in connection with certain children’s rights
  • You should also bear in mind that any request to delete your personal data is possible only if we delete your account. As a result of that you will not be able to use the Ryde app via an account which has been deleted.
  • In any case, We shall not be legally bound to comply with your erasure request if the processing of your Personal Data is necessary for the fulfilment of any other individual right request set out in this policy.
    
    
• Your Right to Data Restriction
  • You have the right to ask us to restrict (that is, store but not further process) your Personal Data but only where:
    • The accuracy of your Personal Data is contested (see the Your Right to Rectification), for a period enabling us to verify the accuracy of the Personal Data; or
    • The processing is unlawful and you oppose the erasure of your Personal Data; or
    • We no longer need the Personal Data for the purposes for which they were collected but You need the Personal Data for the establishment, exercise or defense of legal claims; or
    • You exercised your right to object and verification of our legitimate grounds to override your objection is pending.
  • Following your request for restriction, except for storing your Personal Data, we may only process your Personal Data:
    • Where We have Your consent; or
    • For the establishment, exercise or defence of legal claims; or
    • For the protection of the rights of another natural or legal person; or
    • For reasons of important public interest.
      
      
• Your Right to Data Portability
  • You have the right to ask us to provide your Personal Data (that you shall have provided to us) to you in a structured, commonly used, machine-readable format, or (where technically feasible) to have it ‘ported’ directly to another data controller, provided this does not adversely affect the rights and freedoms of others. This right shall only apply where:
    • The processing is based on your consent or on the performance of a contract with you; and
    • The processing is carried out by automated means
  • The customer’s personal data includes: contact information, last 3 years’ journey history and payment information.
    
    
• Your Right to Withdraw Consent (when we rely on consent)
  • For the avoidance of all doubt, we would like to point out that in those limited cases where we cannot or choose not to rely on another legal ground (for example, our legitimate interests), we will process Your Personal Data on the basis of your consent. In those cases where we process on the basis of your consent (which we will never presume but which we shall have obtained in a clear and manifest manner from you), you have the right to withdraw your consent at any time and this, in the same manner as you shall have provided it to us.
  • Should you exercise your right to withdraw your consent at any time, we will determine whether at that stage an alternative legal basis exists for processing your Personal Data (for example, on the basis of a legal obligation to which we are subject) where we would be legally authorized (or even obliged) to process your Personal Data without needing your consent and if so, notify you accordingly. When we ask for such Personal Data, you may always decline, however should you decline to provide us with necessary data that we require to provide requested services, we may not necessarily be able to provide you with such services (especially if consent is the only legal ground that is available to us).
  • Just to clarify, consent is not the only ground that permits us to process your Personal Data. In Sections 1 & 2, we pointed out the various grounds that we rely on when processing your Personal Data for specific purposes.
    
    
• Your Right to Object to Certain Processing
  • In those cases where we only process your Personal Data when this is: 1.) necessary for the performance of a task carried out in the public interest or 2.) when processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, you shall have the right to object to processing of your Personal Data by us. Where an objection is entered, the processing of data shall cease, unless we as data controller provide compelling and legitimate grounds requiring the continuation of the data processing which outweigh the objections you may have raised.
  • When your data is processed for direct marketing purposes, you have the right to object at any time to the processing of your Personal Data, which includes profiling to the extent that it is related to such direct marketing.
  • For the avoidance of all doubt, when we process your Personal Data when this is necessary for the performance of a contract, when necessary for compliance with a legal obligation to which we are subject or when processing is necessary to protect your vital interests or those of another natural person, this general right to object shall not subsist.
    
    
• Your Right to lodge a Complaint
  • You also have the right to lodge complaints with the appropriate Data Protection Supervisory Authority. The competent authority in Malta is the Office of the Information and Data Protection Commissioner (IDPC).

9. Direct marketing

• We will only use your e-mail address and/or phone number to send direct marketing messages if you have given us permission to do so via the Ryde app.
• If you no longer wish to receive direct marketing messages, please opt-out from receiving notifications in the ‘Privacy Preferences’ section inside your profile on the Ryde app.