Ridesum AB (hereafter ”Ridesum” or ”us”) cares about your personal integrity and about protecting the personal data that we process due to us providing the Service (as defined in our terms and conditions and on www.ridesum.com). All processing of personal data is carried out in accordance with applicable data protection law.
The below policy describes how Ridesum collects and processes your personal data in your role as User of our services or your role as Trainer/Expert (both as defined in our terms and conditions), as well as the processing of personal data concerning persons present in the background of a video uploaded by a User. We also explain which rights you have as a data subject.
Personal data that Ridesum collects and processes
We collect and process the following personal data about Users and Trainer/Experts: name, e-mail address, age, profile picture and images from captured videos. The personal data is collected and processed at the following occasions:
- When you submit personal data in connection with creating an account or update a user account connected to the Service.
- When you contact us (via for example e-mail).
- Content that you publish, upload and/or contribute with connected to the Service, which without limitation includes:
- Video captured via streaming in real time;
- Videos which are uploaded via external media ;
- Recordings of training sessions carried out via streaming in real time.
- Technical data, which can include URL through which you gain access to the Service, your IP-address, unique device ID, information about network and computer performance, type of web browser, language and information about identification and operating system;
If you are a Trainer/Expert, we will also collect and process information about your competence, the geographical area you live/work at, your telephone number and other personal data that you upload to the Service, such as a presentation about you, your business, price and profile picture.
Furthermore, there may be personal data in the feedback that Trainer/Experts provides during riding sessions that Users of the Service has linked to (see the terms and conditions).
Users that have a premium version of the Service also has access to a recording function which enables Users to record a video streamed training session directly in the Service which can then be saved. If the Trainer’s camera function is activated, the Trainer’s picture (in addition to the Trainer’s voice) will be present in this recording.
When such video streaming and recording takes place both Users and Trainers shall use their best efforts to ensure that no other persons are captured on the video in such a way that these persons can be identified. Users and Trainers also have an obligation to inform all other persons in their surrounding that they risk being captured on such recording and that video streaming and recording is taking place. If any person present when streaming/recording takes place have questions about the streaming/recording and/or wants more information in relation to this, the User and/or Trainer shall direct them to Ridesum’s website.
In case there are persons in the background on the recordings in accordance with the above who can be identified Ridesum is also the controller for such personal data. If you know or suspect that you are present in such a recording and have any questions about the data processing, please contact us at email@example.com.
If you have signed up for our newsletter, personal data in the form of your e-mail address and information about if you are a User or Trainer/Expert is processed.
Purposes for the processing and legal grounds
We process personal data in order to
- give you access to the Service,
- contact you when needed, and to inform you about important updates to the Service
- administer and support the service,
- send out newsletters
- communicate regarding your activities in the Service, such as reminder about bookings
- ensure the technical functionality for the Service and to prevent usage of the Service in violation of the terms and conditions,
- fulfil legal obligations.
Furthermore, we will collect some depersonalized demographic statistics about the Users, that we communicate to ad buyers.
The legal grounds for the processing of personal data, are that we shall be able to fulfil our agreed obligations regarding the Service, legitimate interest and consent.
Video of “background persons” is processed for the purpose of providing the Services to Users based on a balancing of interest where Ridesum’s legitimate interest is to provide the Services to its Users.
The information that is collected in connection with signing up for a newsletter is processed in order to send the newsletter to you and customize the content depending on your usage of the Service. The legal basis is to fulfil the agreement that has been entered into in connection to signing up.
With whom will we share your information?
Ridesum may transfer your personal data to suppliers that provide services for Ridesum in order to carry out the services connected to the processing above. These recipients only have the right to process your personal data on Ridesum’s behalf in connection with carrying out a service for Ridesum. Ridesum takes all reasonable legal, technical and organizational measures to ensure that your data is handled securely and with an adequate level of protection with transfer to or sharing with such selected third parties.
Ridesum may also disclose your personal data to authorities if we are obliged to do so under law. In case whole or parts of Ridesum’s business is sold Ridesum may transfer your personal data to a potential buyer of the business.
Where do we process your information?
Your personal data will be processed within EU/EEA, but may also be transferred to countries outside EU/EEA to suppliers which on behalf of Ridesum carries out services in accordance with the above. If Ridesum decides to use suppliers that processes data outside EU/EEA Ridesum has taken appropriate security measures in order to protect your personal data by ensuring that the recipient is connected to Privacy Shield, or by the recipient of the personal data having signed an agreement ensuring that the data is processed in accordance with the GDPR.
Links to other websites
Personal data that you share with Trainer/Experts
Ridesum is not the controller of personal data processed by Trainers/Experts, due to you sharing of personal data with a Trainer/Expert. Ridesum disclaims all liability due to such processing.
Deletion of personal data
Ridesum does not save the personal data longer than necessary considering the purposes of the processing, unless the data must or can be stores longer under applicable law.
Video captures via streaming in real time that is not recorded, is not stored by Ridesum.
Who is the controller?
Ridesum AB, reg. no. 559146-4192 with address c/o Stråhle, Ringblomman 40, 178 52 Ekerö, Stockholm, Sweden is the controller for the processing of personal data contained in this policy unless otherwise stated. This means that we are responsible to ensure that the personal data is processed correctly and in accordance with applicable data protection law.
If you have any questions regarding Ridesum’s processing of your personal data, please contact us at firstname.lastname@example.org
Your rights as a data subject
Data subjects have the right to know what personal data regarding data subjects that we process. A data subject also has the right to request that wrongful or incomplete personal data about him or her is rectified or that we erase this personal data (for example if the personal data are no longer necessary for the purpose or if a consent is withdrawn). Data subjects furthermore have the right to object to certain processing of personal data and request that the processing of personal data is restricted. Finally, the data subjects have the right to receive such personal data that they have provided in a machine-readable format and to transmit those data to another controller.
A restriction or erasure of personal data could however mean that we do not have the possibility to fulfil our obligations.
If you have objections or complaints regarding how we process your personal data you have the right to contact or file a complaint with the Swedish Data Protection Authority which is the supervisory authority for our processing of personal data.
If you have questions or complaints regarding how we process your personal data or a request to exercise your rights in accordance with the above, please contact us via e-mail at email@example.com or via mail to the address above.