We are pleased that you are visiting our website https://www.uryde.de/ and are interested in the flexible carpooling app uRyde. Since the protection of your data is very important to us, this data protection declaration serves to explain to you what information we collect, how we use data and how we use data when using our website in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 what choices you have as a visitor to this website.

1. Controller
The person responsible within the meaning of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union and other provisions of a data protection nature is:

CONNECT Mobility GmbH

2. Data Protection Officer
John Andree
Customs yard 7
90443 Nuremberg

Email: info@uRyde.de

Telephone: +49 163 2061393

3. Data Collected
Processing of automatically transmitted information is necessary for the technical provision, flawless use and display of the website in the browser.

The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies in such cases in which it is not possible to obtain prior consent for actual reasons and the processing of the data is permitted by statutory provisions.

When you visit our website, the following data is automatically collected via our web server:

• the address (URL) of the accessed website;
• the reference address (URL);
• browser type and browser version;
• the operating system used;
• Cookies On / Off;
• the hostname and IP address of the device being accessed from;
• Date and Time;

This information is automatically recorded each time our website is accessed and stored in our server log files.

As a rule, web server log files are stored for two weeks and then automatically deleted. We do not pass on this data, but cannot rule out that this data will be viewed in the event of illegal behavior.
According to Article 6 paragraph 1 f GDPR (lawfulness of processing), the legal basis is that there is a legitimate interest in enabling the error-free operation of this website by recording web server log files.

4. Newsletter & email contact
If you register for a newsletter on our website or contact us by email, contact form or chat function, your request, including all personal data resulting from it (name, request) will be stored and processed by us for the purpose of processing your request .

4.1 Newsletters
In the newsletter you will receive information on current events, promotions or occasions. For an effective registration we need a valid e-mail address. In order to check that the owner of an e-mail address is actually registering, we use the "double opt-in" procedure. To do this, we log the order for the newsletter, the sending of a confirmation email and the receipt of the response requested. You can revoke your consent to the storage and processing of your personal data for the newsletter dispatch at any time. There is a corresponding link in every newsletter. You can also inform us of your request using the contact option given at the end of this data protection notice. After you unsubscribe from the newsletter, your data will be deleted from our servers. The legal basis for the processing of personal data in connection with sending the newsletter is Article 6 (1) (a) GDPR. The statistical surveys are based on our legitimate interests in being able to offer you the best possible newsletter in accordance with Article 6 Paragraph 1 Letter f GDPR.

4.2 Email Contact
Personal data that you transmit to us electronically on this website, such as name, e-mail address, address or other personal information as part of the transmission through the contact form, will be processed by us together with the time and the IP address used only for the specified purpose, stored securely. The legal basis for the processing of data that is transmitted in the course of sending an e-mail is Article 6 (1) (f) GDPR.

4.3 Integration of a CRM system
The data for processing the newsletter registration and the contact form can be stored in a customer relationship management system ("CRM system"). We use the following third-party providers for this:

4.4 Hubspot CRM
We use Hubspot CRM on this website. The provider is Hubspot Inc. 25 Street, Cambridge, MA 02141 USA (hereinafter Hubspot CRM).

Hubspot CRM enables us, among other things, to manage existing and potential customers as well as customer contacts. With the help of Hubspot CRM, we are able to collect, sort and analyze customer interactions via email, social media or telephone across different channels. The personal data recorded in this way can be evaluated and used for communication with potential customers or for marketing measures (e.g. newsletter mailings). With Hubspot CRM we are also able to record and analyze the user behavior of our contacts on our website.

The legal basis for the processing of personal data in connection with sending the newsletter is Article 6 Paragraph 1 Letter a GDPR. The statistical surveys are based on our legitimate interests in being able to offer you the best possible newsletter in accordance with Article 6 Paragraph 1 Letter f GDPR.

Details can be found in Hubspot's data protection declaration: https://legal.hubspot.com/de/privacy-policy .

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.hubspot.de/data-privacy/privacy-shield .

We have concluded an order processing contract with Hubspot CRM. This is a contract required by data protection law, which ensures that Hubspot CRM only processes the personal data of our website visitors according to our instructions and in compliance with the GDPR.

5. TLS Encryption
We use https to transmit data securely on the Internet (data protection through technology design Article 25 paragraph 1 GDPR). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the Internet, we can ensure the protection of confidential data. You can recognize the use of this protection of data transmission by the small lock symbol in the top left corner of the browser and the use of the https scheme (instead of http) as part of our Internet address.

6. Cookies & Plugins
For the purpose of statistical analysis of the use of our website, we use analytical tools and cookies that enable an analysis of your surfing behavior. This enables us to improve the quality of our website and its content. We learn how the website is used and can thus constantly optimize our offer.

The information obtained as part of the statistical analysis of our website will not be merged with your other data recorded on the website.

6.1 Google Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC. Responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies, which enable an analysis of your use of our website. Part of the information collected using cookies can be transmitted to Google servers in the USA. As the basis for data processing by recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or data transfer there, Google uses so-called standard contractual clauses (= Art. 46 Para. 2 and 3 DSGVO). Through these clauses, Google undertakes to comply with European data protection standards when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementation decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which correspond to the standard contractual clauses and also apply to Google Analytics, can be found at https://business.safety.google/adsprocessorterms/ .

Google Analytics cookies are stored on the basis of your consent in accordance with Article 6 (1) (a) GDPR. In addition to consent, we have a legitimate interest in analyzing the behavior of website visitors and thus improving our offer technically and economically. With the help of Google Analytics, we can identify errors on the website, identify attacks and improve profitability. The legal basis for this is Article 6 (1) (f) GDPR. However, we only use Google Analytics if you have given your consent.

6.2 IP Anonymization
We use the 'anonymizeIP' function (so-called IP masking): Due to the activation of IP anonymization on this website, your IP address will be shortened by Google within member states of the European Union or in other specific third countries via the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

6.3 Storage Duration
The data sent by us and linked to cookies are automatically deleted after 14 months. Data that has reached the end of its retention period is automatically deleted once a month.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google
a. Do not give your consent to the setting of the cookie or
b. Download and install the browser add-on to disable Google Analytics HERE .

You can also prevent the storage of cookies by setting your browser software accordingly. However, if you configure your browser so that all cookies are rejected, functionalities on this and other websites may be restricted.

6.4 Browser Plugin
You can prevent the storage of cookies by setting your browser software accordingly, but we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: https://tools.google.com/dlpage/gaoptout?hl=de

6.5 Order Processing
We have concluded a contract with Google for the processing of personal data and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

6.6 Objecting to Data Collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: Disable Google Analytics .

You can find more information on how Google Analytics handles user data in Google's privacy policy:
https://support.google.com/analytics/answer/6004245?hl=de .

6.7 Embedded YouTube Videos
We embed YouTube videos on subpages of our website. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page with the YouTube plugin, a connection to the YouTube servers is established. YouTube is informed which pages you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.

If a YouTube video is started, the provider uses cookies that collect information about user behavior.

Anyone who has deactivated the storage of cookies for the Google Ad program will not have to reckon with such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in the browser.

Further information on data protection at "Youtube" can be found in the provider's data protection declaration at:
https://www.google.de/intl/de/policies/privacy/

7. Your Rights
You have the following rights towards us with regard to your personal data:

• Right to information: You are entitled at any time within the scope of Art. 15 GDPR to request confirmation from us as to whether we are processing personal data relating to you; if this is the case, you are also entitled under Art. 15 GDPR to obtain information about this personal data and certain other information (including processing purposes, categories of personal data, categories of recipients, planned storage period, the origin of the data, the use of an automated decision-making and, in the case of third-country transfers, the appropriate safeguards) and to receive a copy of your data.
• Right to rectification: You have the right under Art. 16 GDPR to request that we correct your personal data if it is inaccurate or incorrect.
• Right to erasure: According to Art. 17 GDPR, you are entitled to demand that we erase your personal data immediately. This claim must only be implemented if further processing is no longer necessary. This right does not exist if the processing of your personal data is still required, in exercising the right to freedom of expression and information, in fulfilling a legal obligation to which we are subject (e.g. statutory retention requirements) or in asserting, exercising or defending legal claims .
• Right to restriction of processing: You are entitled, under the conditions of Art. 18 GDPR, to request that we restrict the processing of your personal data.
• Right to object to processing: You have the right under Art. 21 GDPR to object to the further processing of your personal data by us, so that we must stop processing your personal data. The right to object only exists within the limits provided for in Art. 21 GDPR. If you can provide evidence of compelling legitimate reasons for processing that outweigh your interests, rights and freedoms, we are entitled to process your personal data despite your objection.
• Right to data portability: You have the right under Art. 20 GDPR to request that we transfer your personal data to you in a structured, common and machine-readable format.
• Right to complain to a supervisory authority: You have the right, under the conditions of Art. 77 GDPR, to complain to a data protection supervisory authority about the processing of your personal data in our company, assuming an alleged violation of the GDPR.

If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated in any way, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI) .

8. Social Media Links
On our website we use links to the social media platforms Instagram, Facebook, LinkedIn and Twitter. After clicking on the link, you will be redirected to the website of the respective provider, only then will user information be transmitted to the respective provider. Information on handling your data when using the websites of other providers can be found in the respective data protection regulations of these providers.

9. Changes to our privacy policy
We reserve the right to change this privacy policy at any time. Any future changes to our privacy policy will always be posted on our website. Such changes will take effect immediately. We encourage you to periodically review our privacy policy for the most current version.

Status of the data protection declaration: December 2021