Privacy policy

Welcome to our privacy policy. Protecting your personal data is a crucial concern for GeoRide and we strive to keep it under lock and key. Some data is transmitted to third-party services in order to provide a better quality of service; no data is sold.

WHO ARE WE?

Our website address is: https://georide.com or https://georide.fr .
GeoRide offers a new, different and innovative approach to locating and protecting your motorcycle. More information on the site's Legal Notice page.


PREAMBLE

This Privacy Policy is addressed to you (hereinafter "you" or "Users"), as a user of the website https://georide.com or https://georide.fr  (hereinafter "the Site") and of the GeoRide application (hereinafter "the Application").

Its purpose is to inform you about the way in which your personal information may be collected and processed by the company KIBLE (hereinafter referred to as "GeoRide"). 

Respect for your privacy and your personal data is one of our priorities, which is why we undertake to process your data in strict compliance with the French Data Protection Act of 6 January 1978 (Loi Informatique et Libertés), as amended by Law no. 2018-493 of 20 June 2018 (hereinafter the "Loi Informatique et Libertés"), and with the Council of Europe General Data Protection Regulation of 27 April 2016 (hereinafter the "GDPR").

In any event, GeoRide undertakes to respect the following two essential principles: 

  • You remain in control of your personal data;
  • Your data is processed in a transparent, confidential and secure manner.

IDENTITY & CONTACT DETAILS OF THE DATA CONTROLLER

The controller of the data processing carried out via the Site and the Application is the company KIBLE. 

Legal reminder: The data controller is, within the meaning of the Loi Informatique et Libertés, the person who determines the means and purposes of the processing. Where two or more controllers jointly determine the purposes and means of the processing, they are joint controllers (or co-controllers). The processor is a person who processes personal data on behalf of the controller; it acts under the authority of the controller and on the controller's instructions.

KIBLE is a French simplified joint-stock company (SAS) whose registered office is located at 150 rue Nicolas Louis Vauquelin – 31100 Toulouse, registered with the Lille Trade and Companies Register under number 824 387 633.
For any question relating to the management and use of your personal data, you can reach us:

  • Either by email, at dpo@georide.com
  • Or by post, at GeoRide, Customer Service, 150 rue Nicolas Louis Vauquelin – 31100 Toulouse.

CONTACT DETAILS OF THE DATA PROTECTION OFFICER

GeoRide has appointed a Data Protection Officer (hereinafter "DPO") responsible for answering all your requests relating to your personal data, including requests to exercise your rights.

You can reach them: 

  • Either by email at the following address: dpo@georide.com
  • Or by post:  DPO GeoRide, 150 rue Nicolas Louis Vauquelin – 31100 Toulouse

The Data Protection Officer's role is to inform, advise and monitor GeoRide's compliance with the rules on personal data protection in the processing operations carried out.

In accordance with data protection regulations, the DPO acts as a point of contact:

– Towards data subjects for all matters relating to the data processing carried out by GeoRide (information on legitimate interest, etc.) or the exercise of your rights.

– Towards the CNIL (the French data protection authority) as part of its cooperation mission. The DPO may also contact this authority to request an opinion or prior consultation on any matter concerning the protection of personal data.

– Towards the other DPOs appointed by the processors or participating controllers.

 

COLLECTION & ORIGIN OF DATA 

As part of operating its Site and its Application, GeoRide collects and processes personal data relating to its Users. This data comes directly from the Users.

GeoRide informs you of the purposes for which your data is collected via the online data collection forms, the emails that may be sent to you, or our Cookie Management Charter.

 

CONSENT

The GeoRide GPS tracker is our brand's flagship product. We offer a large number of features (ride recording, crash detection, alarm, ride tracking via our community) and the collection of location data is essential for the operation of the mobile Application associated with the product.

Before collecting any location data, GeoRide undertakes to obtain your express consent via the Application. You can of course withdraw your consent at any time via the GeoRide Application. 

In that case, your location data will no longer be collected by GeoRide.  

Article L.34-I-V of the French Post and Electronic Communications Code (CPCE) establishes the principle of the data subject's prior consent to the use of any geolocation service:

"Without prejudice to the provisions of III and IV and subject to the requirements of judicial investigations, data enabling the user's terminal equipment to be located may neither be used during the communication for purposes other than its routing, nor be stored and processed after the communication has ended, except with the consent of the subscriber, duly informed of the categories of data concerned, the duration of the processing, its purposes and whether or not this data will be transmitted to third-party service providers. The subscriber may withdraw consent at any time and free of charge, apart from the costs related to transmitting the withdrawal. The user may suspend the consent given, by a simple and free means, apart from the costs related to transmitting this suspension. Any call to an emergency service constitutes the user's consent until the completion of the rescue operation it triggers and only to enable that operation to be carried out."

 

PURPOSES AND LEGAL BASIS OF PROCESSING

Where the legal basis used for the processing operations carried out by GeoRide is the pursuit of a legitimate interest, the User may, on simple request, obtain information relating to the balancing of interests.

Your various data is collected by GeoRide for the following purposes:

Purposes of processing Legal basis
Managing our commercial relations (contract management, opening a GeoRide account) Performance of the contract concluded between GeoRide and the Users of the Solution.
Use of the services offered by GeoRide via its Application (ride recording, Alarm, Crash Detection, Community).  Your consent to the collection of your location data, which is necessary for the proper functioning of the Application's features.  
Producing statistics GeoRide's legitimate interest in improving its services.
Managing your information requests GeoRide's legitimate interest in responding to your request for information, documentation or contact. 
Managing accounting operations Our legal obligation arising from Articles L102 B et seq. of the French Tax Procedures Code (Livre des procédures fiscales).
Commercial prospecting Your consent 
The proper functioning of the Site and the ongoing improvement of the Services and features offered  GeoRide's legitimate interest in providing Users with the best possible experience on the Site and the best possible quality of the services offered.
Managing your requests to exercise your data protection rights GeoRide's legal obligation under the GDPR (Article 15 et seq.) and the Loi Informatique et Libertés (Articles 48 et seq.).
Managing complaints and legal operations GeoRide's legitimate interest in protecting its legal interests.


DATA PROCESSED 

Whether the personal data requested is mandatory or optional, and the possible consequences for you of failing to respond, are specified at the time of collection.

Purposes of processing Data collected
Managing our commercial relations
  • Data relating to your identity 
Providing the services offered by GeoRide via its Solution (ride recording, Alarm, Crash Detection, Community). 
  • Data required to open a GeoRide account (email address, surname, first name, phone number)
  • Location data (latitude, longitude, speed) and data captured by the tracker (vibration detected, fall detected, power disconnection detected).
Responding to your requests for information 
  • Your email address 
Managing accounting operations
  • Data relating to your identity: surname, first name, contact details (email address and phone number); 
  • Data relating to payment: bank account details, information on the nature of the transactions carried out. 
Commercial prospecting
  • Your email address
The proper functioning of the Site and the ongoing improvement of the Services and features offered 
  • Connection logs
Managing your requests to exercise your data protection rights
  • Data relating to your identity: title, surname, first names, address, phone number, email addresses, customer code, date of birth. A copy of an identity document or equivalent may be kept as proof of the exercise of a right of access, rectification or objection, or to comply with a legal obligation. In this respect, we are required to verify your age when an order is placed and must therefore collect a copy of an identity document.
  • Data relating to your request to exercise your rights
Managing complaints and legal operations
  • Data relating to your identity: title, surname, first names, address, phone number, email addresses, customer code, date of birth. 
  • Data relating to your complaint (email exchanges)


DATA RECIPIENTS 

Within the limits of their respective responsibilities and for the purposes set out in Article 5, the main persons who may have access to your data are the following:

  • Authorised GeoRide staff;
  • Authorised staff of the processors GeoRide may use in connection with its services (telephone operator Twilio; OneSignal );
  • Financial institutions (Banque Populaire) and supervisory bodies;
  • Where applicable, the relevant courts, mediators, chartered accountants, statutory auditors, lawyers, bailiffs, debt collection companies, police or gendarmerie authorities in the event of theft or judicial requisition, as well as the emergency services.

Your personal data is neither disclosed, exchanged, sold nor rented without your prior express consent, in accordance with the applicable legal and regulatory provisions.

 

DATA RETENTION PERIOD

Your data is kept only for as long as necessary for the purposes pursued, as described in Article 5. 

It may be kept for a longer period, in particular for evidentiary purposes, in compliance with the requirements of the GDPR and the applicable legal provisions, it being specified that you may object to the processing of your personal data at any time. 

DATA LEGAL PERIOD BASIS
For managing our commercial relations 

The data used in managing the commercial relationship with our Customers is kept for the entire period necessary for the performance of the contract, and for 3 years from the end of the commercial relationship for commercial prospecting purposes. 

This data is then archived for a period of 5 years for evidentiary purposes. 

 Article 2224 of the French Civil Code 
Location data 

– For fighting theft: the data is kept for as long as the case is being investigated by the competent judicial authorities

– For crash detection: location data is only transmitted once the call has been triggered and is deleted at the end of the phone call. 

– For ride recording: the data is stored locally for a period defined by the User. In any event, location data may not be kept for more than 3 years. 

 CNIL doctrine
Connection logs  6 months CNIL doctrine
Responses to requests for information about GeoRide services  3 years from your last contact CNIL Deliberation no. 2016-264 of 21 July 2016
Sending of commercial prospecting  3 years from your last contact CNIL Deliberation no. 2016-264 of 21 July 2016
Cookies and other trackers 13 months  CNIL Deliberation no. 2019-093 of 4 July 2019
Data relating to the management of your requests to exercise your data protection rights 6 years from the request Article 8 of the French Code of Criminal Procedure

YOUR RIGHTS

In accordance with the Loi Informatique et Libertés and the GDPR, you have the following rights:

  • right of access (Article 15 GDPR), rectification (Article 16 GDPR), updating and completion of your data  (learn more)
  • right to block or erase your personal data (Article 17 GDPR), where it is inaccurate, incomplete, ambiguous or out of date, or where its collection, use, disclosure or storage is prohibited (learn more)
  • right to withdraw your consent at any time (Article 13-2c GDPR)
  • right to restriction of the processing of your data (Article 18 GDPR) 
  • right to object to the processing of your data (Article 21 GDPR) (learn more) 
  • right to portability of the data you have provided to us, where your data is subject to automated processing based on your consent or on a contract (Article 20 GDPR)
  • right to decide what happens to your data after your death and to choose whether or not we disclose your data to a third party you have previously designated (learn more). 

In the event of death and in the absence of instructions from you, we undertake to destroy your data, unless keeping it proves necessary for evidentiary purposes or to comply with a legal obligation.

Finally, you may also lodge a complaint with the supervisory authorities, in particular the CNIL (https://www.cnil.fr/fr/plaintes). 

You can exercise your rights by sending an email to dpo@georide.com or by post to DPO GeoRide, 150 rue Nicolas Louis Vauquelin – 31100 Toulouse.

 

TRANSFERS OUTSIDE THE EUROPEAN UNION

GeoRide transfers your personal data to its processor located in the United States in connection with the management of calls triggered via the GeoRide tracker, push notifications and hosting services.

GeoRide ensures the confidentiality and security of your data by putting in place appropriate safeguards, in particular under Article 46(2) of the GDPR.

For more information on the safeguards put in place when your data is transferred outside the European Union, you can contact us at dpo@georide.com or by post at DPO GeoRide, 150 rue Nicolas Louis Vauquelin – 31100 Toulouse.

 

DATA SECURITY

GeoRide and any processors it may use undertake to implement all technical and organisational measures to ensure the security of personal data processing and the confidentiality of your data, in application of the Loi Informatique et Libertés and the GDPR.

In this respect, GeoRide  takes appropriate precautions, given the nature of your data and the risks presented by our processing, to preserve the security of the data and, in particular, to prevent it from being altered or damaged, or from being accessed by unauthorised third parties (physical protection of premises, customer authentication process with personal and secure access via confidential logins and passwords, connection logging, encryption of certain data, penetration testing, etc.).