Data protection in the Radbonus-App

WHAT HAPPENS TO MY DATA?

Data security and protection of privacy of our users is of highest value to us and we are trying our best to be as transparent as possible. We fulfill and exceed the EU General Data Protection Regulation and the Federal Data Protection Act in all aspects. The following paragraphs aim to inform you about the way and extent, the processing and the transfer of data collection in the Radbonus app. This data privacy statement complements our general terms and conditions.

Collection and processing of personal data

The Radbonus App does not transfer any data that could give information about the identity of the user to the Radbonus server. Therefore, Radbonus does not collect any personal information. The process works as follows: When installing the App, each user receives a randomized identification number. Only the following data is saved in connection with the ID number: the assigned Radbonus-ID number, bike rides measured by starting point, end point, the kilometres covered in between those points and time of data transfer to server.

When participating in contests, personal data is compiled only for the purpose of the calculation of prices. The information is saved separately from the account and measured performances. Therefore, tracing a specific user is impossible. Recorded data sets are held to the minimum. When entering information the user gives permission to Radbonus to transmit data to the sponsor (name, address, e-mail address). All shared personal data is strictly used only regarding to the valid data protection law.

Collection and processing of health, location and dynamic data

At Radbonus no health related, genetic, biometric data or any sensitive data is collected or shared.
Location as well as dynamic data of the users are used by the Radbonus app to calculate the amount of covered kilometers but is not transmitted to the Radbonus server.
In cooperation with partners the following information can be shared at the end of the initiative: number of participants, total number of covered kilometers, single anonymous IDs with kilometer count during the initiative and team results.

Inquiry of user data set

The complete user data set is applicable when sending a mail to Radbonus (support@radbonus.com) with the subject “Data inquiry + Radbonus ID”. Radbonus will then share the data information within 48 hours and without any charge.

Deleting user data set

The deletion of a complete user data set is being performed within 48 hours after the Radbonus team receives a mail (support@radbonus.com) with the subject “Complete deletion + Radbonus ID”. This service is free of charge.

Data portability

A data portability is being performed within 48 hours after the Radbonus team receives a mail (support@radbonus.com) with the subject “Data portability + Radbonus ID + name of new service + account information of new service”. This service is free of charge.

Procedure of data transmission

Even though Radbonus does not save any personal data, we implemented strong regulations to achieve a full encryption when data is transmitted from any mobile device to the Radbonus server.

Processing of data

We only transmit cumulative analyses of all participants, anonymous single information with the Radbonus ID and the amount of covered kilometres in a certain period of time to cooperating partners.

Server location and legal space

Since our server is located in Frankfurt, there is no threat of unwanted data access in the transatlantic legal space. It follows the German law.

Duration of data storage

Radbonus saves data for an unlimited amount of time if the user does not demands otherwise.

Duty to report data spills

In case of a data spill, we will inform the controlling authority within 72 hours after the inspection of the violation. The following information will be shared: Description of the incident, category of affected data, number of affected users and data sets, name and contact information of data protection officer, description of consequences of the privacy violation, description of any taken or recommended measures with the goal of a correction or reduction of the violation.

Changes in data protection policies at Radbonus

If individual-related data has to be collected due to content-based adjustments or changes in the contractual relationships, it is only used to conclude the closing of the contract. Explicit consent of the client is required to make any further use of the data sets (e.g. for advertising or market research purposes).