Privacy policy

Information about personal data filing system

1. Name of the filing system

Tampere city bike service (Tampereen kaupunkipyörät) customer register

2. Purpose of personal data processing

The data in the customer register of the city bike service is used to manage the customer relationship and to implement the service. The customer identification data is used to identify the person in case of problems, to contact him/her to send messages related to the operation of the system, to display user data to the user himself/herself in the Tampereen kaupunkipyörät mobile application of the service, where the user can also change his/her data. The data is also used for the controller's own planning and development needs and for statistics on the system's operation, where users are not identifiable.

The data collected from the payment card will show the user which payment card the user has connected to the city bike system. The full number of the payment card is not stored in the register and neither the controller nor the processors of personal data in the register have access to the payment card data.

Where a user provides information directly to a third party, such as a payment service provider, the processing of personal data is usually based on that third party's own privacy policy and processing principles.

3. Data controller

City of Tampere, business ID FI02116752

4. Individual responsible for the filing system: name, position and contact information

Mika Periviita, public transport director

City of Tampere

PO Box 487, FI-33101 Tampere

tel. +358 3 565 611 (City switcboard)

https://www.tampere.fi/yhteystiedot

5. Filing system contact person and contact information

Mika Periviita

6. Processing of personal data is outsourced on agreement

City bike system operator Tampereen Sarka Oy and service provider KaupunkiPyörä Vantaa Oy process data for the purposes set out in

section 2 purpose of processing personal data.

7. Legal basis for the processing of personal data

The legitimate basis for processing the data is the performance of a contract and the register is a public administration voluntary task register.

The data in the register will not be used for automated individual decision-making or profiling.

Personal data, data sources and data disclosure

8. Personal data in the filing system

Users of the city bike service

User contact and customer data: first name, surname, email address, telephone number, language, part of the payment card number provided by the payment service provider, expiry date of the payment card, payment card company, whether the user is over 15 years old, status (whether the user is now active), start and end date of the paid subscription period, consent to the processing of personal data, acceptance of the terms of use, consent to direct marketing, whether the user has been banned in accordance with the terms of use.

User transactions: actual usage, including information on departure and arrival points, distance travelled and route, time, city bike used, payment transactions, information on any outstanding charges.

Other information: Customer feedbacks and contacts

9. Filing system data maintenance systems (name(s) og system(s) or application(s))

Background system for city bike service is Urban Sharing Admin and Board.

FreshDesk is customer service ticketing system.

10. Filing system contains hard copy (paper) material

No.

11. Data sources

The data in the register is collected from the data subject and from the events generated by

the city bike system.

12. Data protection principles

The storage, archiving, deletion and other processing of data are governed by file plans, data protection guidelines and information security guidelines. Only authorised persons have access to data processed by electronic means. Each individual accepts a Non-disclosure/Secrecy agreement (an agreement on the non-disclosure and use of data and information systems) when granted user rights.

13. Disclosure of personal data

No regular disclosure of data.

14. Transfer of personal data to a third country or to an international organisation (outside the EU or European Economic Area (EEA))

Data will not be transferred outside the EEA.

15. Personal data storage periods/criteria for determining storage period

Storage is governed by the City of Tampere file plans.

16. Data subject´s rights

The rights of the data subject and instructions on how to exercise them are described at www.tampere.fi/tietosuojaselosteet and are also available at the City registry office.