On-demand transport Tertnes

Personal information is all information that can identify you. Further information is provided below about how Skyss processes your personal information and about your rights in relation to Skyss.

Purpose

Skyss processes your information to be able to provide an on-demand transport service in Tertnes.

Basis for processing

Skyss must have a legal basis for processing your personal information.
It is necessary to process your personal information to fulfil the service agreement formed between you and Skyss when you use the application «Skyss Bestilling» / online application bestilling.skyss.no and accept the agreement’s terms and conditions, ref. Data Protection Regulations article 6 (1 b).

Use of the application «Skyss Bestilling» / online application bestilling.skyss.no is voluntary.

What kind of personal information is used by Skyss?

When you use the application «Skyss Bestilling» / online application bestilling.skyss.no we process the following personal information about you:

Mobile telephone number
You must have a user profile to use the application. When you set up a user profile, you will be asked to register your mobile telephone number and a password. This is necessary for Skyss to be able to offer services with a secure and verified log-in procedure.

Your mobile telephone number is necessary to ensure that you can have access to active journey requests or historical information about previous journeys if you should lose your mobile telephone. The mobile telephone number is the unique user identification for the application and along with a name, is the only mandatory personal information in the user profile.

Name
You must also enter a name in the application. A name is required so that the driver can check that the correct person is being picked up.

E-mail address
Entering your e-mail address in the application is voluntary. An e-mail address is only necessary if you wish to be able to communicate with us via e-mail.

Information concerning method of payment
Payment of requested journeys in the application is not activated at present. Therefore it is not possible to enter bank card information, even though the alternative «Betaling» is available in the menu. Passengers pay on board the bus or via the regular channels offered by Skyss.

Technical information
When you use the application, your IP address, the time of the request, browser information/mobile telephone information, the version number and mobile platform for the application - including which language has been selected - are logged in an application log. This information is required for the solution to function on the platform/mobile telephone, and is logged to ensure that the service functions correctly. It also provides us with necessary information to resolve problems if faults occur.
The application uses the analysis tool Google Analytics to map and log usage patterns of users that cannot be identified.

Journey information
When you accept that the application «Skyss Bestilling» / online application bestilling.skyss.no is allowed access to GPS on your telephone, location data is used to provide the driver with information about where you wish to travel. The driver is informed of your first name, pickup location and end destination.

The journey information for a requested journey in the application is communicated to an administration system, so that customer service staff in Skyss can assist if the journey does not take place as agreed.

Cookies

The application uses cookies; however, it is not a requirement to be able to use «Skyss Bestilling» / online application bestilling.skyss.no that you have cookies activated in your browser. Cookies are small text files that are placed on your device when you download a web page. These are necessary for the effective functioning of the login process, navigation and special functions on the website. Please note that no information that can identify you personally is ever stored via the use of cookies. It is possible to change the settings in your browser to prevent websites from using cookies; However, if you choose to block cookies, you will experience the problem that you will be logged out. The reason for this is that cookies are used to keep you logged in until you actively log out, or have been inactive for too long.

Statistics

Information that is used for statistics and analysis is anonymized and thus cannot be associated with you personally. Skyss is required to provide traffic data to national and municipal authorities, ref. Statistics Act Section §2-2 and Local Government Act Section §49. We also use statistics to improve and further develop the services we offer to our customers. Statistics can provide data about, among other things, how many persons travel on a bus within a specific timeframe.

Sources of personal information

All personal information processed in connection with «Skyss Bestilling» / online application bestilling.skyss.no is entered or generated by you. Skyss does not obtain personal information from third parties.

Data processor

«Skyss Bestilling» / online application bestilling.skyss.no by Spare Labs, in collaboration with the operator Bergen Taxi (data processor). Spare Labs and Bergen Taxi process your personal information on behalf of Skyss, and this is governed by a separate data processor agreement. The data processor agreement ensures that Spare Labs and Bergen Taxi process all personal information in accordance with this privacy policy.
Spare Labs uses the following subcontractors to provide services on behalf of Skyss as referenced above:

• Aiven LTD: cloud storage of the administration system
• Google LLC (GCP): cloud storage, network and physical securing of equipment
• Amazon Web Services (AWS): cloud storage, network and physical securing of equipment
• Intercom: anonymized user data from digital services (will be replaced by Zendesk)
• Functional Software, Inc. (Sentry): registration of system faults
• MessageBird: text messaging and IP telephony between driver and passenger
• Sendgrid: sending of e-mail

Ticket control will be conducted by Securitas on behalf of Skyss. A separate data processor agreement has been formed with Securitas. You can read further information about how your personal information is processed in connection with ticket controls here.

Disclosure to third parties

Skyss does not disclose your personal information to third parties unless required to do so by law, for example by court order or written order from prosecuting authorities.

Anonymized historical journey data can be used for statistical purposes. Anonymized data is not considered personal information.

Access to personal information

Personal information processed is accessible only to authorised personnel in Skyss and to subcontractors who require the information in connection with the provision of a service. Among these are Securitas, Spare Labs (system provider) and Bergen Taxi (operations service provider).

Storage and deletion of data

All data stored in the administration system is stored in accordance with applicable laws. Your personal information will not be stored for any longer than is necessary to provide services offered in the application Skyss Bestilling and the online service skyss.no/bestilling.

Both Skyss and Spare Labs/Bergen Taxi have implemented information security measures and internal routines to ensure that personal information is not disclosed to unauthorised parties or used for other purposes than that specified in this privacy policy.

Profile information
Your profile information is stored as long as you as a customer have an active agreement with Skyss. You can at any time request that your user account is deleted from the application «Skyss Bestilling» / online application bestilling.skyss.no. In such case, you will be required to re-register if you wish to use the application at a later time. Your mobile telephone number will be verified the first time you log on from a new device. If you have entered other personal information in «Skyss Bestilling» / online application bestilling.skyss.no, you can at any time edit this information in «Settings» in your profile.

Technical information and application log
Various elements of the application log are stored for a sufficient time to ensure that the service functions as intended, and that you as a customer receive the appropriate service. In connection with, for example, complaints cases related to faults in the service, the storage time for the relevant application log can be extended until the complaint has been fully processed.

Security

All communication between the solution and applications on your telephone is encrypted. The same applies to access to the system via the Internet, and all data transfers internally between various components in the system. External data access is encrypted and secured with passkeys. Access to data via the administration system is role-controlled and personal, and can be traced via event logging. The administration interface for the solution is designed with various levels of access. Persons that require access to Skyss or Spare Labs/Bergen Taxi will thus only have access to the information that they actually require.

Your rights in relation to Skyss

You have the right to access, correct or delete all personal information that you have entered into your user profile in «Skyss Bestilling» / online application bestilling.skyss.no. This can be done via Settings in the application.

The right of access
You can request access to any personal information that Skyss has registered about you.

The right to correct information
You can request that personal information that is incomplete or incorrect, be corrected or supplemented.

The right to delete information
You can request that Skyss delete all of your personal information if these terms and conditions are not met. This applies, for example, if Skyss has processed your personal information unlawfully or for longer than necessary.

The right to restricted processing
You can request that processing of your personal information be restricted if you believe that the information is incorrect, that the processing is not lawful or necessary, or if you have submitted objections to processing and Skyss has complied.

Processing will be restricted immediately when the objections have been received and until Skyss has evaluated these. If processing is to be restricted, Skyss only has the right to store the restricted personal information and will require your consent for any other form of processing. This applies unless Skyss is required to process personal information in connection with legal matters, to protect the rights of others or if the processing is in the public interest.

The right to object
You can raise objections against the processing of your personal information if you believe that Skyss does not have the right to process your personal information. In such case, Skyss can only continue with processing if the company can substantiate a rightful interest that overrides your interests, rights and freedoms. Skyss can in any case process your personal information if it is required by law or necessary to establish, assert or defend a legal claim.

The right to data portability
You can request that your personal information, which you have provided to Skyss for processing based on consent or to comply with a contract to which you are a party, be sent to you in a structured, regular format that can be machine read. You also have the right to request that Skyss transfers this information to another data processor.

The right to complain to the Data Protection Authority
If you are not satisfied with the response from Skyss or believe that Skyss processes your personal information in contravention of the data protection regulations, you can submit a complaint to the data protection authority. Information about the complaints procedure is available here.

Contact information

Please use the contact form here if you have any questions concerning the processing of personal information by Skyss, or if you wish to have access, to correct or delete your personal information, or if you wish to request restricted processing or data portability.