PRIVACY POLICY

The company [Three Antees s.r.o.] (hereinafter referred to as “Antees”) is the operator in Prague of the service of shared motorcycles - motorcycle scooters under the Antees brand (hereinafter referred to as the “Service”).

2. The service is provided on the basis of general business conditions (hereinafter referred to as "GBC").

The controller of the collected data is Three Antees s.r.o. [limited liability company], with its registered office at Jateční 1615/45, Holešovice (Praha 7), 170 00 Praha, Česko, registered under C 385502 vedená u Městského soudu v Praze under VAT number 19369158. Contact details: tel.: +420608449922, email: info@antees.cz.

Three Antees s.r.o. pays special attention to respecting the privacy of the users visiting websites in the *www.antees.cz domain. The data collected in logs are used only for the purposes of administration and management of the www.antees.cz website.


‍Data collection

‍In accordance with the established practice, the website stores the HTTP inquiries addressed to our server. The resources viewed are identified by the URLs. The exact list of information stored in the log files of the web server is as follows:
     1. the public IP address of the computer from which the inquiry was received (this may be the user's computer directly)
     2. the customer's station name - identification implemented by the http protocol, if possible,the user name given during the authorisation process,
     3. time of the inquiry,
     4. the first line of the http request,
     5. the http response code,
     6. the URL of the website previously visited by the user - in the case where the www.antees.cz website was accessed via a link,
     7. information about the user's browser,
     8. information about errors that occurred in the execution of the http transactions. To ensure the highest quality of the website, we occasionally analyse the files with logs in order to determine which websites are most frequently visited, which web browsers are used, whether the structure of the website does not contain errors, etc.


‍Registration on the website and in the application

‍In order to perform the services, the user shall register via the Antees mobile application. Access to the registration form is possible by clicking on the "Register" button. The data provided during the registration are necessary to perform the service. Registration procedure:

     1. creating a new account involves providing the registration data: "e-mail, password"
     2. next, the User confirms the registration by receiving an e-mail verifying the e-mail address and clicking on the link sent to the address given in the "e-mail" box,
     3. the system records the IP address, date and time of registration on the website,
     4. after confirming the registration and logging into the account, the user provides the following data:
           1. name,
           2. surname,
           3. phone number,
     5. And optionally, the data required to confirm the payment method:
           1. in the case of card:
                 1.number of the debit/credit card,
                 2. validity of the debit/credit card,
                 3. CVV code of the debit/credit card.
     6. Additionally, the user provides a scan/photo of the driver's licence or ID card via the "Documents" option, in order to check the rights of the Users to ride the scooter. The reading of the document is automated, then the following personal data are distinguished: name, surname, date of birth, date of validity of the document and the category of the driving licence, and entered automatically into the Antees system. In case the document is not recognised, reading and entering may be done manually by an authorised employee.
    7. The personal data contained in the attached scans of the identity card/driving licence shall be subject to automated decision making.
     8. Optionally, the user may edit the "invoice data" option. In the framework of issuing invoices we collect the following data:
           1. company,
           2. country of residence,
           3. postal code,city,
           4. NIP.


‍Use of the data

‍The collected logs are stored for a limited period of time (10 years) as a supporting material serving to manage the website. The information contained therein are not disclosed to anyone other than those authorised to manage the company's servers and network Antees. On the basis of the log files, statistics may be generated to help manage and administer the website. Summaries in the form of such statistics shall not contain any characteristics identifying the persons visiting the website.


‍The Cookies mechanism
‍
‍The Cookies mechanism is not used to obtain any personal data of the website users. For each *www.antees.cz/ website we use the following Cookies:
     1. _fbc - a file used by Facebook to display, measure and improve the relevance of ads,
     2. _fbp - a file used by Facebook to identify the browser in order to provide advertising services and analysis of the site,
     3. _ga* - files associated with Google Universal Analytics. They are used to distinguish unique users by assigning a randomly generated number as a customer identifier. They are included in every request of the website and are used to calculate visitor data, sessions and campaigns for the analysis reports of the sites. They expire after 2 years by default, although site owners may customize it. The main purpose of these files is efficiency,
     4. _gat_UA-88751404-1 - a file of the pattern type set by Google Analytics, in which the pattern element in the name contains a unique account or site identification number to which it refers. It is a variation of the
     5. _gat file, which is used to limit the amount of data recorded by Google on high-traffic websites. The main purpose of this cookie file is efficiency,
     6. _gat_gtag_UA_115290388_4 - a file associated with Google Universal Analytics, used to deliver advertising products,
     7. _glc_au - a file used by Google AdSense to experiment with the effectiveness of ads on displayed sites,
     8. _gid - a file that is used to identify users recorded by the Google Analytics website tracking service,
     9. _hjincludedInSample - a file associated with the Hot Jar's web analytics features and services. It uniquely identifies the user during a single browser session and indicates that the user is included in the recipient sample. The main purpose of this file is efficiency,
     10. _hjid - a file that is set when a customer visits a website with the Hotjar script for the first time. It is used to store a random user ID, unique to this site in the browser. This ensures that the behaviour during subsequent visits to the same site is assigned to the same user ID. The main purpose of this file is efficiency,grav-site-f82fd17 - a file used to calculate the number of users visiting the site.


‍Links to other websites

‍The www.antees.cz website contains links to other websites belonging to external companies. Three Antees s.r.o. is not responsible for the principles of privacy policy applicable on these websites. When visiting other websites, we suggest to read the privacy policy set out there. This privacy policy applies only to the Three Antees s.r.o. websites.

Information concerning the processing of personal data of the electric vehicle users by Three Antees s.r.o.

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC - hereinafter referred to as “GDPR”, we would like to provide you with the following information on the processing of your personal data:


I. Personal data controller and Data Protection Officer

The controller of your personal data is Three Antees s.r.o., with its registered office at Jateční 1615/45, Holešovice (Praha 7), 170 00 Praha.

The controller has appointed a Data Protection Officer (DPO), who may be contacted in all matters related to the processing of personal data. DPO contact details: e-mail address: info@antees.cz.


II. Purposes and grounds for the processing of data

The controller processes your personal data for the following purposes:
     1. performance of the terms and conditions of the contract for the rental of a vehicle, concluded between the Controller and the User (Art. 6 sec. 1 letter b of the GDPR);
     2. fulfilment of the legal obligations imposed on the Controller (Art. 6 sec. 1 letter c of the GDPR), concerning, among others, performance of the contract, issuance of invoices;
     3. resulting from legitimate interests exercised by the Controller (Art. 6 sec. 1 letter f of the GDPR), including: to pursue and defend against possible claims related to the implementation of the legal regulations or the contract concluded, for the purposes of internal administration;
     4. sending via text message and e-mail information and marketing materials concerning the services provided by the Controller and cooperating entities, as well as anonymous questionnaires used to collect demographic and profile data, on the basis of the consent given by the User (Art. 6 sec. 1 letter a of the GDPR).


III. Data recipients

The recipients of your personal data may be entities providing services to the Controller on the basis of appropriate contracts in the following areas: IT, legal, advisory, insurance and payment operators, text message and e-mail gateways, as well as entities authorised to obtain your personal data on the basis of the applicable legal regulations, e.g. courts and state bodies.


IV. Data retention periods

Your personal data shall be retained for the period necessary to fulfil the purposes for which they are processed, and then for the period necessary to secure the pursuit of any claims or defence against them and the fulfilment of any obligations resulting from the legal regulations.

After the deletion of the user's account, his/her personal data shall be retained in the event of the need to claim a penalty notice related to the rides performed by the user. The retention period for which the personal data are necessary for us is 3 year from the last ride, as after this time the act is no longer punishable. This period may be extended by 2 years if legal proceedings are initiated during this period.

The data collected for marketing purposes are deleted within two weeks after deletion of the user's account, however, after 5 years at the latest.

Due to the fact that the user's account cannot be created again under the same e-mail address, it shall be retained after deletion of the account in encrypted form, which is a legitimate interest of the Controller.


V. Rights of natural persons

Under the terms and conditions set out in the regulations on personal data protection, you have the right to:
     1. access the content of your data, to rectify, erase or limit the processing of the data,
     2. object to data processing,
     3. withdraw consent to the processing of personal data, without affecting the lawfulness of the processing performed before its withdrawal,
     4. lodge a complaint with the President of the Office for the Protection of Personal Data if you consider that the processing of your personal data violates data protection regulations.

In order to exercise your rights, please send your request to the following e-mail address: info@antees.cz.


VI. Information on the requirement of/voluntary provision of the data

To the extent that your personal data are processed on the basis of a legal obligation imposed on the controller and the performance of public tasks, the provision of personal data may be a statutory requirement.

To the extent that your data are processed for the purpose of concluding or executing a contract, as well as on the basis of the consent, the provision of your personal data is voluntary, however, the consequence of not providing these data shall be the impossibility to conclude a contract/send information and advertising materials.


VII. Transfer of the data to third countries or international organisations and information on profiling

As the scans of the ID card/driving licence attached by the users during registration are verified automatically by a tool provided by Google Cloud, we would like to inform you that the Google LLC servers are located in the United States. Google LLC has joined the Privacy Shield EU-US programme, ensuring an appropriate level of protection of personal data processed, accepted by the European Commission.

The Cookies mechanism is not used to obtain any personal data about the users of the website.