Privacy - Aimo Solution
In order to provide our services to you as a customer ("the customer", "you"), Aimo must collect and process certain personal data about you. Your privacy is important to us and we are keen to be transparent with which data we process about you and why. That is why we have drawn up this Privacy Policy, which describes how we process your personal data. Here we also explain your rights according to the Data Protection Regulation (EU) 2016/679 ("GDPR"). Please read the Privacy Policy carefully and make sure you understand it.
If you do not want your personal data to be used as described in the Privacy Policy, do not register with Aimo or use our services.
1. Personal data controller
Aimo Solution AB, org. no. 559148-0941 ("Aimo", "we", "us" and "our"), Warfvinges väg 30, 112 51 Stockholm, is responsible (data controller) for processing your personal data in accordance with what is stated in this Privacy Policy. You can always contact us if you have any questions, concerns or requests regarding our processing of your personal data. Our privacy team can be reached via e-mail to: privacy@aimoshare.se .
2. What data do we collect about you, for what purposes and on what legal basis?
2.1 General information
It is important to us that you know what information we collect about you, how it is collected and for what purposes. You may directly or indirectly provide information about yourself to us in connection with visiting our website www.aimosolution.com (the "Site"), downloading our app (the "Aimo App") or using our car rental services (hereinafter referred to as our “Services”). The types of data we collect about you vary depending on whether you choose to create an account with Aimo.
You are not obliged to provide us with your personal data. On the other hand, our ability to contract with you to deliver our services, and then to fulfill our contract and administer your customer relationship with us, will be affected if you do not provide us with your personal data.
In the list below, you can see what data we collect about you, for what purposes and on what legal basis the processing takes place.
Our/our purposes
Register as a customer, give yourself a customer account and administer your account (including identification and login).
Type of personal data
- Social security number
- Driving license details (number, status and validity period)
- Customer contact details (email address and password)
- Contact details (email address, phone number)
- Checking of identity and credit information (data related to such checks such as identification with BankID)
- Photo (if applicable)
- Passport details (if applicable) Copy of driver's license (for foreign driver's licenses)
Treatment activities
Registration and administration of your account so that you can access and use Aimo's services.
Management of customer onboarding, account login and identification in connection with login.
Verification of your identity.
Take credit information, check address and driver's license against relevant records to ensure you have the right to access our Services and ability to pay for them.
Legal basis
The processing is necessary to fulfill the agreement between you and Aimo (necessary for Aimo to be able to open a customer account for you and provide the Services included in the agreement to which you are a party).
Aimo has a legitimate interest in being able to identify the customer and carry out necessary checks on the customer's identity, driver's license and credit status before any car is rented to the customer, administer the agreement and fulfill our obligations towards you as a customer.
Our/our purposes
Provide the Services, administer your car bookings and your use of the Services.
Type of personal data
- Name
- Social security number
- Driver's license, driver's license number and, where applicable, a copy of your driver's license
- Contact details (email address, mobile number)
- Payment information (credit card number, billing address, transaction amount)
- Discount information (discount code, promotion code)
- Payment history and credit information
- Rental information (which car is rented, time and place for pick-up and the start of the journey
- Information on mileage and electricity consumption
- GPS position (for congestion tax and bridge charges only)
Treatment activities
Provide you with the Services, administer your car bookings and your use of the Services (including by sending you emails and notices about your use of the Services).
Management of payments (including analysis of possible payment solutions that include a check of payment history and payment notes).
Keep track of mileage, rental period and the car's position to administer the Services
Manage any parking fines
Check the congestion charges and bridge charges charged during the rental period.
Legal basis
The processing is necessary to fulfill the agreement between you and Aimo (necessary for Aimo to be able to open a customer account for you and provide the Services included in the agreement you are a party to).
Aimos' legitimate interest in being able to identify the customer and carry out the necessary checks on the customer's identity, driver's license and credit status before any car is rented to the customer, administer the agreement and fulfill our obligations to you as a customer.
Our/our purposes
Customer service and support.
Type of personal data
- Name
- Social security number
- Contact details (email address, mobile number)
- Information you provided in connection with the request/notification of support
- Information about support matters such as time and place for picking up your car, any faults,
- problems/complaints
- GPS position
Treatment activities
Identification of you as a customer and your use of the Services
Communication and answers to questions for customer service (by phone, email or digital channels, including social media)
Investigations and support of complaints and requests in connection with the use of our Services, e.g. when we help you solve a problem that arose when you rented a car from us.
Legal basis
The processing is necessary to fulfill the agreement between you and Aimo (necessary for Aimo to respond to your support requests, process your requests for services, identify you as a customer and communicate with you about the Services and your account as set out in the agreement between us) .
Aimos' legitimate interest in being able to administer the agreement and fulfill our obligations towards you as a customer.
Our/our purposes
Fulfill our obligations under the law
Type of personal data
- Name
- Social security number
- Driving license details (number, status and validity period)
- Contact details (e.g. postal address and email)
- Payment history
- Your correspondence (if any)
Treatment activities
Accounting for financial transactions necessary to fulfill our legal obligations under applicable laws, regulations or government guidelines/decisions (e.g. accounting and car rental laws)
Management of payment claims
Management of parking fines
Handling of claims against, among others insurance companies and authorities
Legal basis
In order to fulfill our accounting obligations according to the Accounting Act (1999:1078) and the Car Rental Act (1998:492) as well as according to applicable laws on payment orders and handouts, late payment interest etc.
Our/our purposes
Communication and marketing
Type of personal data
- Name
- Email address
- Address
- Phone number
- Age
- Sex
- Booking history
- IP address
- Company (if your account is linked to a company)
Treatment activities
- To convey information relevant to the Services to you as a customer, e.g. terms changes, updates, etc.
- To send marketing materials including general information about Aimo (eg press releases, newsletters and invitations to events).
- To answer questions from you (eg when you contact us or send us a question via the forms on our website, in the Aimo app or by email).
- To conduct customer surveys and analyze the responses from such surveys in order to improve our services
- To carry out targeted marketing campaigns via social media, e.g. Facebook. In these cases, you as a user of social media platforms always have the possibility to adapt and limit such activities.
Legal basis
Aimo has a legitimate interest in communicating with you as a customer about the Services and its use, as well as marketing relevant offers to you. You always have the right to opt out of further communications of a marketing nature (so-called "opt-out").
Our/our purposes
Administer and manage administration accounts for business customers
Type of personal data
- Name
- Business
- User data for your administration account (customer number, username, password)
- Contact details (email address, mobile number, address)
Treatment activities
Create and administer administration account for our business service
Create targeted offers and discounts for your business regarding our business service
Legal basis
The processing is necessary for us to fulfill our customer agreement with your company and to provide our services to your company and its users as well as manage and administer invoicing, reminders, payments, accounts receivable and our accounting.
Our/our purposes
Conducting user surveys
Type of personal data
- Name
- Contact details (email address)
- Age
- Address
- Booking history
- The answers you leave
Treatment activities
Prepare and analyze results from surveys in the form of interviews or forms
Compile statistics on the use of the service
Legal basis
The processing is necessary to satisfy our legitimate interest in conducting user research to develop and improve our services. Participation in such surveys is always voluntary.
Our/our purposes
Damage to cars, safety and claims handling
Type of personal data
- Name
- Social security number
- Driver's license and driver's license number
- Contact details (email address, mobile number, address)
- Copy of driver's license (if applicable)
- Information about your use of the Services/your rental
- Information provided by you or someone involved in the handling of the matter in question
Treatment activities
Handling compensation claims and investigation of insurance coverage
Communication with you to obtain more information about the current case.
Investigation of the course of the accident, including how the damage to the car occurred.
Legal basis
The processing is necessary to fulfill the agreement between you and Aimo (necessary for Aimo to be able to handle and act on claims and damage reports and to communicate with you about the same in the manner set out in the agreement between us).
Furthermore, the processing is necessary for Aimo to live up to legal obligations regarding the handling of insurance matters, etc.
Our/our purposes
Determining the car's position and route.
Type of personal data
- Name
- Contact details (email address, mobile number, address)
- GPS position of the vehicle
Treatment activities
Determining the car's current position in order to assign the customer another car that is free and available.
Record destination, start and end times and duration of use.
Check the position of the car, e.g. if it was not returned on time or if the car was parked illegally outside the Home Zone or driven outside the permitted geographical area. Communication with the customer for corresponding purposes.
Legal basis
The processing is necessary to fulfill the contract between you and Aimo. Locating the car's position is a basic requirement for the Services.
Our/our purposes
Report data to Car Rentals Sweden.
Type of personal data
- Name
- Social security number
- Driver's license and driver's license number
- Reason for reporting (in the form of a predetermined report code)
Treatment activities
Report the customer to Car Rentals Sweden to register the Customer on the special information list for car rental companies compiled by Car Rentals Sweden with the permission of the Swedish Data Protection Authority. The purpose of the list is to give the connected car rental companies access to information from the list with recommendations not to rent cars to listed persons and thereby reduce the risk of damage and costs for the car rental companies in Sweden. See § 3 below. More information is available at: http://www.biluthyrarna.se.
Legal basis
Necessary to fulfill tasks of public interest. Reporting of credit information is considered to be in the public interest and, correspondingly, reporting to Car Rentals Sweden is considered to be in the public interest because it is an important prerequisite for the car rental companies in Sweden to be able to conduct their business in a safe and reliable manner.
Our/our purposes
User Information (Aimo App and Services)
Typ av personuppgifter
- User ID
- Device and user data, e.g. language settings, permission to display exact position (non-continuous), page response times, content displayed to you (your interaction with the Aimo App and our Services)
Treatment activities
In order to be able to provide the Services and offer better service, e.g. by finding out what content you like and dislike. Some features are different depending on the platform.
We use permission to display precise location (non-continuous) to segment users when we communicate with them, e.g. with information about the nearest car available for hire.
The language preferences are collected to determine the language in which the Aimo app will be presented to you.
Legal basis
Certain processing is necessary to fulfill the agreement between you and Aimo, e.g. basic App settings.
Aimo's legitimate interest includes improving the functionality of the Aimo App and the Services and detecting, preventing and investigating security issues.
Our/our purposes
Optimizing the functionality, performance and customer experience of the Website, the Aimo app and the Services (through the use of cookies).
Type of personal data
Cookies (e.g. in the form of IP address, through cookies). Read more about how we use cookies in our cookie policy on our Website.
Treatment activities
Maintain, improve and analyze our Website, the Aimo App and the Services we offer, improve their functionality and detect, prevent and investigate security issues through the use of cookies.
Legal basis
Aimo's legitimate interest in optimizing the functionality, performance and customer experience of the Website, the Aimo App and the Services.
3. How we may share your personal data
Aimo will not, without your consent, disclose information about you to third parties other than if required by law or if it is necessary in connection with a product or service that you have requested or purchased from us. Below is an overview of how we may share personal data received from you.
Our subcontractors (personal data processors)
We share your personal data with our service providers who process personal data on our behalf ("personal data processors"). Our personal data assistants are our IT and system suppliers and other suppliers who perform services for us, e.g. credit card and payment services, website hosting and email.
We have entered into personal data processor agreements with all personal data processors that regulate the processing of personal data.
Other companies within the Aimo group
Unless otherwise agreed during the registration process, Aimo has the right to share your contact details with its parent and sister companies in order to provide you with information about offers and activities organized by them. You may withdraw your consent to Aimo sharing such information at any time, whereby Aimo undertakes not to share any new contact information of yours with the aforementioned companies for advertising purposes.
Creditsafe i Sverige AB
In connection with performing credit checks, we share your social security number with Creditsafe i Sverige AB ("Creditsafe") who will carry out the credit check. Creditsafe is responsible for the personal data that the company processes in connection with the credit check and you can read their privacy policy here: https://www.creditsafe.com/se/sv/product/privacy-policy.html
Car rental Sweden
We may report certain information about you (name, address, social security number and basis for reporting in the form of a report code) to Biluthyrarna Sweden in order to register you on the special information list for car renters compiled by Biluthyrarna Sverige with the permission of the Data Inspectorate. The purpose of the list is to give the connected car rental companies access to information from the list with recommendations not to rent cars to listed persons and thereby reduce the risk of damage and costs for the car rental companies in Sweden. Aimo can report information about you to the list if you (i) do not return the car after the Rental Period, (ii) do not pay parking fines, (iii) do not pay rent and other fees according to the agreement, (iv) mismanage the car, (v) is reported to the police for illegal use or illegally gives possession of the car to another driver. Purpose of the transfer to Car Rentals Sweden. If you are registered on the information list, you will receive a letter from Biluthyrarna Sverige with information about this, including information about the reason for the registration and that the information remains on the list for 24 months. More information is available at: http://www.biluthyrarna.se.
When sharing is required by law
We may share your personal information if we are required to share it by law or other legal process.
When you request that we share personal data
When you use the Services, you can choose to give us permission or instruct us to share personal data about you with other companies. for example companies that provide social media.
Transfers to third countries
We and our suppliers and partners normally process personal data only within the EU/EEA. Should a situation arise where the personal data must be processed in, and therefore must be transferred to, a destination outside the EU/EEA by us or one of our suppliers, we promise that we will take all reasonable legal, technical and organizational measures to ensure that your personal data is processed securely and with an adequate level of protection comparable to and in line with the level of protection that applies within the EU/EEA.
4. How long do we store your personal data?
We store your personal data as long as it is necessary to provide the Services you desire as a customer of Aimo or as stated in our purposes for the processing as above. This means, among other things, that we will delete your personal data in our databases when you as a customer no longer use our Services or when the data is no longer necessary for the purpose for which it was collected. When we retain your personal data for purposes unrelated to our contractual relationship, e.g. for purposes such as legitimate interest, we retain the data only as long as it is necessary and/or required by law for the respective purpose.
We never process your personal data for longer than is permitted under applicable laws, regulations, practices or authority decisions. Personal data that we process for the purpose of fulfilling our contract with you is treated as a starting point during the period that is necessary for us to be able to administer the contractual relationship, exercise our rights and fulfill our obligations towards you. However, we may keep your personal data longer as follows to comply with a provision of law, because you have consented to us doing so or because we have the right to do so after a balance of interests.
- Personal data that we process for the purpose of fulfilling our contract with you/the party with whom you are employed is treated as a starting point for the period necessary for us to be able to administer the contractual relationship, exercise our rights and fulfill our obligations towards you/the party with which you are employed. If your employment with the customer or the assignment in relation to us ends, we will stop our processing of your personal data as soon as we have been informed of this by you or our customer. Inactive agreements that contain your personal data are stored for ten (10) years according to the general prescription rules in the Prescription Act (1981:130).
- Personal data about you that we process based on your consent is processed until you withdraw your consent.
- Your personal data that we process due to legitimate interests for the purposes stated above are processed as long as the cases are ongoing and the purpose otherwise remains.
- Your personal data that we process on the basis of legitimate interests for the purpose of marketing ourselves to you is processed in accordance with applicable national law and practice and varies depending on your relationship with us: a) if you subscribe to any of our mailings, we process your personal data until you have notified us that you no longer want our mailings, b) if you have a customer relationship with us, and do not subscribe to any mailing, we process your personal data for a maximum of one (1) year after the customer relationship ends or until you have notified us that you no longer want to receive our mailings, c) if you are not an active customer of ours and have not subscribed to any of our mailings, we process your personal data for a maximum of three (3) months or until you have notified us that you do not longer want our mailings.
- Personal data that is processed in accordance with the Accounting Act (1999:1078) is processed for seven (7) years as stated in the Accounting Act (1999:1078).
- The information about you and your purchases that we process in accordance with the applicable laws on purchases and consumer purchases is processed in accordance with the applicable law.
- Deadlines for clearing data related to our use of cookies are described in our Cookie Policy, which can be found on our Website.
5. Safeguards
Aimo protects your personal data through technical and organizational security measures. In order to prevent unauthorized access and ensure the accuracy of the data, Aimo has implemented strict guidelines for the organization of the processing of personal data.
We try to find a balance between the security of your data and your convenience. As a result, we may sometimes use a communication method that is less secure than a less convenient alternative. For example. can we send an email or text message in unencrypted (ie, immediately readable) form as many of our customers cannot access encrypted (ie coded) email or messages. This means that our message, if mistaken or intercepted, can be read more easily than encrypted messages. Such messages may contain personal data. Please do not include confidential information, e.g. your credit card number or account password, in any email or text message you send to us or in a post you make on a publicly available platform on a third party social media site;
6. Automated decision making
We use automated decision-making in some cases. It can e.g. be an automated rejection of a booking via the internet. Use of automated decision making means that you will not be able to book certain vehicles based on your age or any vehicle based on your credit rating that you provided or we obtained electronically without personal contact. This information is relevant because we have made a risk assessment which means that it is not commercially desirable to rent out certain categories of vehicles to people under a certain age or with low credit.
You have the right not to be subject to a decision based solely on any form of automated decision-making, including profiling, if the decision may have legal consequences for you or significantly affect you in another way. However, we have the right to use automated decision-making if it is necessary for entering into or fulfilling a contract between you and us or if you have given your consent to the processing. You have the right to personal contact with us, which means that you can contact us through the contact details in point 8 to express your opinion and contest the decision.
7. Your rights
Right of access
If you want access to information about how we process your personal data, you can contact us at privacy@aimoshare.se. Your request will be processed promptly, but within a maximum of 30 days. We will provide the information free of charge. For extra copies, we reserve the right to charge a reasonable fee based on our administrative costs for your request.
Right to rectification
We make every effort to ensure that the personal data we process is correct. If you discover that we have incomplete or incorrect personal data about you in our records, we would be grateful if you would notify us so that we can complete or correct the data without delay.
Your right to erasure
You have the right to request that we delete your personal data under the following circumstances:
- when your personal data is no longer needed for the purpose(s) for which we collected it
- the personal data is processed for direct marketing purposes (information not related to services)
- your personal right outweighs our legitimate interest in continuing the processing of your personal data (when we invoke legitimate interest as a legal basis)
- the processing of your personal data is against the applicable law
- the personal data has been processed to offer internet services to a child
- We always delete personal data if this is necessary to fulfill a legal obligation. If we refuse to delete your personal data, we will provide you with information about our reason(s) for this refusal.
Your right to restriction of processing
You have the right to request restriction of the processing of your personal data:
- for a period of time that gives us the opportunity to check whether the personal data is correct if you have objected to the processing or disputed the correctness of the personal data,
- if the processing is unlawful and you object to the deletion of the personal data and instead request a limitation of their use, and/or
- when we no longer need the personal data for the purposes of the processing but need it to establish, enforce or defend a legal claim.
If we limit the processing of your personal data as above, we will store the data, but not use it other than:
(i) with your consent;
(ii) for the establishment, exercise or defense of a legal claim;
(iii) to protect rights belonging to another natural or legal person; or
(iv) for reasons relating to an important public interest of the EU or of a Member State.
Right to data portability
When we process your personal data in an automated manner with your consent as a legal basis or to fulfill a contract, you have the right to obtain the personal data you have provided to us in a structured, commonly used and machine-readable format (data portability).
Right to object
If you object to our processing of your personal data, including profiling, based on our legitimate interest, we will cease processing unless we can demonstrate compelling legitimate reasons. We may also continue the processing if it is necessary for the establishment, exercise or defense of legal claims.
If the personal data is processed for direct marketing (not service-related data), we will immediately cease such processing when we receive such an objection from you as above.
You also have the right to file a complaint with the data inspectorate: www.datainspektionen.se or another competent supervisory authority that supervises the processing of personal data by a company if you have any complaints related to our processing of your personal data.
8. Contact details
We hope that the above information is useful to you and clarifies how and why we process your personal data. If you have any questions about the processing of your personal data or if you want to exercise your rights according to the above, you can contact us by e-mail to: privacy@aimoshare.se.
______________________
The privacy policy was last updated on August 27, 2020