Privacy Policy

Last Modified March 31, 2020

By downloading this app, you confirm that you have read the privacy statement and agree to the terms of use.

Definitions

In this policy the following words will mean:

Driver means Endava employee using the App to offer a ride to the Passenger as the driver of the vehicle

Endava Federation means the same login/ credential information used across all Endava IT systems which are fully integrated (the same user ID and password are used for Outlook, Oracle, Intranet, Endava University Portal, Confluence, Jira, etc.)

Passenger means Endava employee who is accepting a ride to the office from the Driver

User means Endava employee who may use this App as a Passenger or Driver

Introduction

This Privacy Notice sets out how ICS Endava SRL (“Endava”) handles personal information of employees who utilise the Car Sharing Application (the “App”).

Please take the time to read this Privacy Notice as it explains how we collect, use and store your personal information, the scope of processing, who your personal data is shared with and the rights you have in relation to the protection of your personal information.

Endava respects your privacy and this Privacy Notice should be read in conjunction with the Endava Employee Privacy Notice. If, at any time, you have any concerns about how your personal information is being processed by us or wish to exercise your data subject rights, please let us know by sending an email to privacyenquiries@endava.com.

Controller’s contact information

Endava is located at Arborilor street, No. 21, Chisinau MD-2025, Republic of Moldova. Endava is the data controller of personal data processed on the APP. For general questions, please email carsharing@endava.com. For privacy related queries, please email privacyenquiries@endava.com or contact our Data Protection Advisor Funmi Idowu (funmi.idowu@endava.com).

Information we process about you

By installing the App, we will import the following personal information concerning you from:

• Your first name
• Your last name
• Endava email

As part of the App set-up, you will provide the following additional information:

• Your phone number
• Your car’s model
• Your car’s number
• Your car’s color

Personal data do process:

• First and Last name
• Car number
• Car model
• Car color
• Mobile phone number
• Geolocation of the passenger/driver, the time and the destination of the journey
• Information regarding any complaints, feedback or ratings
• Identification data of the device the application is installed on

How we collected personal data

• We collect the phone numbers of User(s) as part of the registration phase (on-boarding screen).
• We collect geolocation (when the device has enabled location collection), time and the destination information, precisely or approximately from the user’s device at the moment of order/trip search. Data is collected when running in the foreground of the device or background. Additionally, the location of Passenger(s) will be collected from the driver during the trip.
• We may collect identification data of the mobile device used (Mac address, IP address, device model, OS version, app version number). We might do it in case a user of the mobile App wants to report a defect (bug), and we can use this information to reproduce defects on a similar device model, OS version, investigate them and fix. Device data is used only for troubleshooting when the issue is reported.
• All data is stored on Cloud (Microsoft Azure).

Purpose of the processing

The purpose of processing this information is to connect Drivers to Passengers, in order to ensure the transportation services work efficiently Services.

We use the phone number of User(s) to create unique user accounts and connect the users to drivers more efficiently. Additionally, contact information is necessary to communicate with the User(s) and to send notifications of the ride, application and policy updates.

We collect precise or approximate geolocation information from the user’s device, only if it is enabled by the user and when the application is running in the foreground and background. The geolocation information is collected in order to enable an efficient rider’s pick-up and to avoid fraudulent or unsafe activities.

We store identification data of the device for safety purposes, in order to prevent or detect fraud.

To enable us to facilitate investigating issues with the App, including bug-fixing of raised issued by users (to reproduce more accurately defects, fix them and retest them on the right version of the device, OS version).

Period of processing

All personal data collected and processed by Endava through the App, are processed for the duration the App is used by the User, for as long as the Service is being requested by the User.

A User will be considered as ceasing to use the App, where a User does not use the App for a twelve-month period (“Inactive Account”). Endava shall delete all Inactive User Accounts within a month of an account being deemed an Inactive Account.

Lawful basis of the processing

Endava’s primary basis for processing your personal data in the App is on the basis of your consent. Please refer to the employee privacy policy for more information on how we generally process employee personal data. There may be circumstances where in addition to consent, we process your personal data in the App on the basis of vital interest or legitimate interest.  Your personal data is processed in order to provide the Services.

Rights of the data subject

You have the following data subject rights

• The right to be informed - you have the right to be provided with clear, transparent and easily understandable information about how we use your personal data and your rights.
• The right of access - you have the right to obtain a copy of your personal data (if we are processing it), and other certain other information (similar to that provided in this Privacy Notice) about how it is used.
• The right to rectification - you can ask us to take reasonable measures to correct your personal data, if it is inaccurate or incomplete.
• The right to erasure - this is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your personal data where there is no compelling reason for us to keep using it or its use is unlawful.
• The right to restrict processing - you have rights to ‘block’ or suppress further use of your personal data when we are assessing a request for rectification or as an alternative to erasure. When processing is restricted, we can still store your personal data, but may not use it further.
• The right to data portability - you have rights to obtain and reuse certain personal data for your own purposes across different organisations.
• The right to object - you have the right to object to certain types of processing, on grounds relating to your particular situation, at any time insofar as that processing takes place for the purposes of legitimate interests pursued by the relevant Endava company or by a third party. We will be allowed to continue to process the personal data if we can demonstrate “compelling legitimate grounds for the processing which override your interests, rights and freedoms” or we need this for the establishment, exercise or defence of legal claims.

Right to lodge a complaint with a supervisory authority:

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

For more information on your rights in respect to your personal data as an employee please refer to the employee privacy notice.

Recipients of the personal data (if any):

All the personal information we process solely for the purpose of providing the Services within the App will be processed by Endava.

• First and last name
• Car model
• Car registration number