We may collect and process the following data about you:
You may give us information, including information that can identify you (“Personal Data“), when you use our Platform, by filling in forms on the Platforms (such as the sign-up form), when you enter into any of our competitions, promotions or surveys, when you correspond with us by phone, e-mail or otherwise, and when you report a problem related to the use of our Platform.
The information you give us may include:
2.2.1. If you sign up via social media authentication methods, BlaBlaCar will access certain Personal Data (e.g. first name, surname, picture and email) in your social media account pursuant to the applicable terms and conditions of these social media platforms. We may also collect some of your Personal Data when you interact with third party social media features, such as “Like” functions.
2.2.3. We also collect aggregated information regarding your activity on our Platform (such as the amount of rides offered, your message response rate, etc.). Such information may be published on your public profile, should you have one.
2.3.1. Except regarding the categories of Personal Data mentioned in clauses 2.3.2 and 2.3.3 below, your Personal Data will be archived after the following retention periods:
2.3.2.The following categories of Personal Data may be stored for different durations:
2.3.3. In the event that your account is suspended or blocked, we will keep your data for a period of 2 or 10 years depending on the gravity of the breach in order to prevent you from circumventing the rules applying to our Platforms.
2.3.4. We may archive some of your Personal Data for a period that will not exceed five (5) years in order to comply with our legal obligations and to manage potential disputes.
We will use the information we collect:
3.1. to carry out our obligations arising from any contracts entered into between you and us or you and our business partners and to provide you with the information and services that you requested;
This processing is necessary for the performance of our mutual contractual obligations.
3.2. to send you service-related information by email and/or text message and/or any other communication means (e.g. your booking confirmation);
This processing is necessary for the performance of our mutual obligations or carried out with your consent.
3.3. to collect payments from you or to transfer to you the payments we collect on your behalf;This processing is necessary for the performance of our mutual contractual obligations.
3.4. to enable you to personalize your user profile on our Platform;
This processing is carried out with your consent.
3.5. to enable you to communicate and interact with other members or with bus transport operators distributed on the Platform about our services or about the trips(s) you have/will do and/or to organise such trips;
This processing is necessary for the performance of our mutual contractual obligations or carried out with your consent.
3.6. to give you access to and to enable you to communicate with our Community Relations service;
This processing is (i) necessary for the performance of our mutual contractual obligations, (ii) carried out with your consent or (iii) necessary for the establishment, exercise or defence of legal claims.
3.7. to enhance our Community Relation service and train our customers agents through the record of your phone conversations with us;
This processing is based on our legitimate interest (to provide you a high quality customer support/to enhance our customer support).
This processing is necessary (i) for the performance of our mutual contractual obligations, (ii) is based on your consent or (iii) for the establishment, exercise or defence of legal claims.
3.9. to send you, in accordance with applicable laws and where required, with your consent, marketing materials and information necessary to facilitate the service or the booking process and to make you suggestions and recommendations about goods or services related to our services that may interest you. We also use your data to target you in order to serve our ads on social media platforms or third-party sites. You can learn more about how these features work, and the data that we obtain about you, by visiting the relevant sections of the third party social media platforms or sites;
This processing is based on your consent where required by law or our legitimate interest (i.e. providing you with meaningful advertising).
3.10. to notify you about changes to our services;
This processing is necessary (i) for the performance of our mutual contractual obligations, (ii) for compliance with our legal obligations or (iii) the establishment, exercise or defence of legal claims.
3.11. to verify the information contained in your Passport, Driving Licence, ID Card and other identity documents that may be collected from you at the time of registration or at any other time during your use of our Platform;
This processing is based on (i) your consent, (ii) carried out for the establishment, exercise or defence of legal claims or (iii) for compliance with our legal obligations.
3.12. to administer our Platforms and for internal operations, including troubleshooting, data analysis, testing, research, analytic and survey purposes;
This processing is based on our legitimate interest (i.e. ensuring the security of our Platform and improving its features).
3.13. to improve our Platform to ensure that content is presented in the most effective manner for you and for your device;
This processing is based on our legitimate interest (i.e. providing you with meaningful content).
3.14. to allow you to participate in interactive features of our service, when you choose to do so, such as searching for trips around you based on your location;
This processing is necessary (i) for the performance of our mutual contractual obligations or (ii) based on your consent, where required by law.
3.15. as part of our efforts to keep our Platform safe and secure; and
This processing is based on (i) our legitimate interest (ensuring the security of our Platform), (ii) carried out for the establishment, exercise or defence of legal claims or (iii) for compliance with our legal obligations.
3.16. to measure or understand the effectiveness of advertising we serve, and to deliver relevant advertising to our users.This processing is based on (i) our legitimate interest (i.e. measuring and optimising the efficiency of our advertising campaigns) or (ii) your consent where required by law.
4.1. When you use our services, some information about you is shared with the members of our communities or with bus transport operators distributed on our Platform, either on your public profile or during the booking process (e.g. we give your telephone number to the members with whom you will share a ride).
4.3. We are also working closely with third parties which may be the recipients of your Personal Data such as:
4.4. We only share your Personal Data with any of these third parties mentioned in section 4.3 in the following cases:
4.5. In accordance with applicable laws and where required with your consent, we may combine information about you, including your Personal Data and cookie information, we send to and receive from our business partners. We may use this information and the combined information for the purposes set out above.
5.1. We may read the messages you exchange with other members of our community through our Platform for fraud prevention, service improvement, customer support purposes, enforcement of the contracts entered into with our members (such as our Terms and Conditions). For example, in order to prevent the circumventing of our online booking system, we may scan and analyse messages sent through our Platform to check that they do not include any contact details or references to other websites and, where applicable, messages can be blocked, or totally or partially filtered.
5.2. We never scan or analyse your messages with other members of our community for commercial and advertising purposes. We may use automated methods to carry out the moderation of these messages, but no automated individual decision-making is performed in this regard.
In accordance with applicable laws and where required with your consent, we may use the information you give us on our Platform for electronic direct marketing purposes (e.g. (i) receiving our newsletters, (ii) receiving invitations to our events or other communications that we think may interest you or (ii) serving you with targeted advertising on social media platforms or third parties websites) based on your profile and interests.
For electronic marketing communications: You can withdraw your consent at any time by (i) unticking the relevant box in your member account, (ii) clicking on the unsubscribe link we provide in each communication sent to your attention or (iii) contacting us using the contact details provided in section 13 below.
For targeted ads and content:
In principle, we store the Personal Data that we hold about you in the European Union (“EU“). However, since for example some of our service providers are based in countries outside of the European Union (“third countries”), we also transfer some of your data to third countries. This may include third countries where the European Commission has not taken the decision that such third country ensures an adequate level of protection. In that case, we ensure that the transfer is performed in accordance with the applicable legislation and that appropriate safeguards have been put in place (especially standard contractual clauses as issued by the European Commission) in order to guarantee a sufficient level of protection of individuals’ private life and fundamental rights.
By sending a request to the Group Data Protection Officer (firstname.lastname@example.org), we can provide you with the details regarding such appropriate safeguards (for example, the standard contractual clauses issued by the European Commission).
8.1. You are entitled to receive a copy of your personal data that is in our possession (your right of data access).
8.2 You may request the deletion of personal data or the correction of inaccurate personal data (your right to erasure and rectification). Please note that we may keep certain information concerning you, as required by law, or when we have a legal basis to do so. For instance, if we believe you have committed fraud or violated our Terms and Conditions and we want to prevent you from circumventing the rules applicable to our community.
8.3 You have the right to object at any time (i) to the processing of your personal data for the purpose of direct marketing, or (ii) other processing of your personal data based on our legitimate interest (your right to object to processing).
8.4 You have the right to restrict the processing of your personal data (your right to restriction of processing). Please note that this only applies if (i) you contested the accuracy of your personal data and we are verifying the accuracy of the personal data, (ii) you exercised your right to object and we are still considering, as foreseen by the applicable law, whether the legitimate reasons we are pursuing prevail over yours; or (iii) your personal data has been processed by us in an unlawful way and you request a restriction on their processing rather than erasure; or (iv) we no longer need the personal data for the purposes of processing, but they are still necessary for you to establish, exercise or defend legal claims.
8.5 You have the right to data portability, i.e. the right to receive the Personal Data you have provided us with, in a structured, commonly used and machine-readable format and the right to transmit this data to another controller (your right to data portability).
8.6. You also have the right to make a complaint to the relevant data protection supervisory authority or to seek a remedy through the courts if you believe that your rights have been breached.
8.7. To exercise your rights, please contact the Group Data Protection Officer using the contact details provided in section 13 below.
Where you have chosen a password which enables you to access your account on our Platform, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Our Platform may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy practices and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any Personal Data to these websites.