WHAT PERSONAL INFORMATION DO WE COLLECT?
- Contact information including name, email address, telephone number, age and postal address
- Payment information, including card information and information about previous payments
- Order history, including time of rental and which product(s) you have rented
- Technical data: IP address, browser, operating system and information on type of PC/mobile device.
- Credit score
- GPS data from bike computers
We receive most of the information we have about you directly from you. Information about order history and technical data is generated in our systems. Credit scores are obtained from Experian AS.
WHAT DO WE USE YOUR PERSONAL INFORMATION FOR?
The collected personal data is used for the following purposes and with these legal bases:
We use names to identify customers. We use the e-mail address as an information channel for the customer both when establishing and terminating the customer relationship, delivery and collection of the bicycle, as well as general information for the customer during the rental period. We use postal addresses to check whether the customer lives within the radius we operate in. We use the telephone number as a possible contact point to convey urgent information, as well as to communicate with our logistics partners. We use your date of birth to check that your age is above our age requirement to use the service. The legal basis for obtaining this personal data is that it is necessary to enter into and administer the agreements with our customers.
We carry out credit checks on all our new customers. We use Experian AS and CRIF GMBH as suppliers for credit information. We do this to reduce the financial risk associated with renting out expensive items. The legal basis for this collection of personal data is therefore the balancing of interest.
When you order, your card information is stored with the payment provider Stripe. The purpose of obtaining payment information is to be able to take payment from you for the services you use with us. The legal basis for this use is that it is necessary to enter into and fulfill our customer agreement with you. Stripe stores the information in a safe and secure manner and is PCI certified. This enables us to handle changes to orders, cancellation of reservations such as deposits, crediting, additional costs incurred by the user (due to late submission, damage or the like), as well as reducing misuse and waste.
We use GPS data from the bike computer to check the distance cycled during the rental period. This can be checked if there is a suspicion that the bicycle has been used for commercial purposes. In that case, the legal basis is balancing of interests. No location data is collected from our customers.
We use payment information and order history for accounting purposes. The basis for this use is our legal obligations in the Bookkeeping Act.
We use contact information to send you information and marketing about Joule. If you are an existing customer of Joule, we are allowed to send you marketing about products that are similar to those on which the customer relationship is based. In that case, the legal basis is our legitimate interest in keeping you updated on Joule. If you do not have an existing customer relationship with Joule, we will only send you marketing if you have consented to this.
We will also be able to use personal data for other purposes that are not compatible with those mentioned above, such as e.g. in connection with claims or legal disputes, or in connection with the acquisition or sale of the business.
HOW LONG DO WE STORE THE PERSONAL INFORMATION?
The personal information including credit score is stored as long as you are registered as a user with Joule, and for a period of 3 years thereafter. We store payment information and order history for 5 years, in accordance with the Bookkeeping Act.
Personal data we have registered is available and can be changed on your page. You can also contact us and request that we remove your personal data or be deregistered from our systems. You will then no longer be able to use the service unless you register again.
TO WHOM DO WE PROVIDE PERSONAL INFORMATION?
On our website, we use the Shopify platform to run our online store and process transactions. We store information such as customer names, contact information and order history on Shopify's servers to process orders, track customer interactions and provide customer support.
Furthermore, in some cases we share personal data with other companies that perform services on our behalf, both to be able to perform our service, as well as to give you a better shopping experience. They are not allowed to use this personal data for anything other than performing services for us. If you have given us consent to share information, then the information may be shared with the following third parties:
a) When others perform services on our behalf
In order for our logistics provider wanda.space to be able to deliver the bike you subscribe to at Joule if you choose that option for delivery, we share your name, address and telephone number with them.
Tripletex is our accounting system and data necessary for bookkeeping is stored here, including name, address, orders and invoices.
Stripe is our payment provider and payment information will be stored in their system on behalf of Joule.
Experian & CRIF
Experian and CRIF are our suppliers of credit information. We share your name, address and date of birth in your system when we carry out a credit check. This is to ensure that we carry out a credit check on the right person.
If you are exposed to theft, you will have to fill in a damage report form on our website which is shared with Tryg insurance.
Google Analytics, Google Adwords and Google Tag Manager
Information about usage patterns on the website (among other things which pages have been visited and when) is shared with Google which is linked to you as a user in a partially anonymised way. We will not be able to link this to you personally, but we can use the information to see general usage patterns on our website, and to be able to send you tailored advertising in Google's network in the form of image and text ads on third-party websites.
We use the Google Places API to offer "Location-based services", such as address verification and suggestions to our customers. This service makes it easy for our customers to find and select their address during the checkout process, and helps us ensure that the addresses given by our customers are correct.
This page may use the Meta Pixel, which is a cookie that tracks that you have been on our website, so that you can later receive advertising from us via Meta's network.
If you use one of our contact forms, the form will be sent as an e-mail to us, and will be stored on our e-mail server. A copy of the e-mail may also be stored in a database in addition, to ensure that we have received your message should the e-mail not arrive. This database is deleted periodically.
b) In case of suspicion of an offence
information can be handed over to public authorities upon request. We will also be able to hand over information in the event of suspicion of fraud, or information that is necessary to clarify specific disputes.
You have the right to access, correct and delete personal data Joule collects about you. You have a claim to restriction of processing of personal data and you have the right to object to processing of personal data about you. If we process information about you based on consent or a contract, you can ask us to transfer information about you to you or to another data controller. On the Norwegian Data Protection Authority's website, you will find a clear and good description of what rights you have under the privacy regulations when information about you is collected and used
( Your rights | The Norwegian Data Protection Authority ).
You can exercise your rights by sending us an e-mail to email@example.com or a letter to:
PO Box 2857, Tøyen
You are entitled to a response without undue delay, and within one month at the latest. If you believe that we are processing personal data in violation of the legislation, you can file a complaint with the Norwegian Data Protection Authority: firstname.lastname@example.org.
Through server logs and other tools, we can record information about the device and the connection to our service, including operating system, browser version, IP address, cookies and unique identification files. This information is used in anonymous and aggregated statistics, but can also be linked to your user account. Among other things, the information allows us to adapt the display of our service to the device you are using.