Privacy policy
The protection of your personal data is important to us. We therefore process your personal data (in short "data") exclusively according to EU legal regulations. With this privacy policy we would like to inform you about the processing of your data in our organization and the data protection claims and rights to which you are entitled to in accordance with Art. 13 of the European General Data Protection Regulation (GDPR).
1.Who is responsible for data processing and who can you contact?
Data Controller
Bridgestone Mobility Solutions B.V.
Beethovenstraat 503, 1083 HK
Amsterdam, Netherlands
+31 20 808 0758
Data Protection Officer
Bridgestone Mobility Solutions B.V
C/O Legal Department
Beethovenstraat 503, 1083 HK
Amsterdam, Netherlands
E-Mail: digitaltrust@webfleet.com
If you are a government body or law enforcement authority
Bridgestone Mobility Solutions B.V
C/O Legal Department
Beethovenstraat 503, 1083 HK
Amsterdam, Netherlands
2. Personal data processing
For what purposes and on what legal basis is the data processed?
We process your data in accordance with applicable data protection laws including but not limited to the EU General Data Protection Regulation (GDPR), UK GDPR, and the Swiss Data Protection Act.
For the fulfilment of (pre-)contractual obligations (Art 6 para. 1 (b) GDPR):
The processing of your data is carried out for contract processing when initiating business and when executing contracts with you.
For the fulfilment of contractual obligations (Art 6 para. 1 (b) GDPR):
Webfleet Platform
If your vehicle is configured to connect to Webfleet services, it will collect information for the purposes of the Webfleet service, while the vehicle is in use in association with other equipment installed in the vehicle.
The following information is continuously collected: vehicle location, g-force/acceleration data and engine related data such as fuel consumption, valve positions, engine speed and odometer value. What information is collected specifically depends on the equipment installed in the vehicle.
The owner of the contract decides the purposes for which this information subsequently is used, who will have access and for how long the information is kept. Please refer to the owner of the contract for any additional information. Generally, this will be the owner or lessee of the vehicle.
Webfleet uses Mixpanel software to collect information about how you use the Webfleet software, sites and applications. The usage information that Webfleet collects could contain location information but not any information that you have entered or uploaded. Webfleet has engaged into a contract with Mixpanel that limits your information for use only by Webfleet and not by Mixpanel for any other purpose, such as advertising.
Webfleet Mobile Applications: Webfleet Mobile, Webfleet Logbook, Webfleet Vehicle Check and Webfleet Work App (Apps)
To use the Apps, a Webfleet LINK device needs to be present and active in your vehicle. The Webfleet LINK device continuously collects data from the vehicle to create reports and feedback on your trips, driving behavior and the vehicle’s technical state. This vehicle data is combined with position information from the GPS sensor in the Webfleet LINK device and a timestamp, so all events and reporting can be matched with a location and time. To provide you with this feedback, the information is sent to Webfleet servers, using the data connection provided in the Webfleet LINK device. The data is stored at Webfleet related to an account under the control of the fleet manager. The fleet manager of your company (or employer) is the organization supporting your use of the vehicle or is the owner of the vehicle, and can be typically (part of) a fleet management company, a leasing or rental company, a car importer, dealer or manufacturer.
Webfleet Mobile Applications use Mixpanel software to collect information about how you use the Webfleet software, sites and applications. The usage information that Webfleet collects could contain location information but not any information that you have entered or uploaded. Webfleet has engaged into a contract with Mixpanel that limits your information for use only by Webfleet and not by Mixpanel for any other purpose, such as advertising.
The Apps continuously send data to and retrieve data from the Webfleet servers if you allow it to use the internet connection of your smartphone. The Apps will report and visualize the collected data in a graphical user interface on your smartphone.
Information collected by the Webfleet LINK device and the Apps
Your Webfleet LINK device and the Apps will collect the following information:
- Date, time and location.
- Information that identifies you, your vehicle, your device and your smartphone.
- Information related to your vehicle and how you drive it such as start/stop, odometer, idling time, rpm, speed and speed distribution, distance driven, braking, cornering, acceleration, battery levels and status, engine load, engine throttle levels, cruise control usage, coasting, fuel consumption, fuel level, maintenance need and technical status messages issued by the vehicle’s internal diagnostic systems.
- Information for diagnostic purposes such as software versions, device types, power disconnects, and error logs.
- Information such as location and vehicle heading that can be used in the event of an accident or a theft.
How your data is used
The fleet manager has decided the various purposes for which the data collected from your vehicle and the Apps will be used, who will have access to it and for how long the information is kept. Please refer to the information provided to you by your fleet manager for this.
Other drivers of your vehicle
If you share your vehicle equipped with a Webfleet LINK device with other drivers, you are responsible for informing these drivers that driving and vehicle data is collected from the vehicle and that you and the fleet manager have access to reports about the information.
Information only available on your smartphone
The Webfleet LINK device sends additional information to your smartphone while the Apps are running, for example a detailed real-time flow of parameters read from your vehicle, including speed, engine rpm, engine temperature, engine load and tank fuel level and more, so this information can be displayed in the Apps. This detailed information is not stored on the smartphone.
Your Apps account
You will receive user credentials for the Apps from the fleet manager. Webfleet advises you to do the following:
- Change your password upon first login
- Keep your account details confidential
- Use secure and unique passwords that you do not use elsewhere
Your account is used to give you access to the data stored on the Webfleet servers. The information is kept with your account as long as this account exists or for as long as the fleet manager decides.
When data is uploaded to our servers
The Webfleet LINK device automatically uploads the collected data to Webfleet. This will happen frequently, typically every minute.
Uses of your location
Specific location privacy control settings are available to you in the Apps to allow you to enable or disable various uses of location data. Please consult your fleet manager for specific information on this.
You should be aware that while you use your smartphone it might run operating system software or other apps, or use communication networks, which collect, transmit or store personal and location information. Webfleet has no influence over this. For more details refer to the information and settings provided by your mobile operator and the vendors of your system and apps.
For the fulfilment of legal obligations (Art. 6 para. 1 (c) GDPR):
The processing of your data is necessary for the purpose of fulfilling various legal obligations, e.g. applicable Commercial or Fiscal Code.
To safeguard legitimate interests (Art. 6 para. 1 (f) GDPR):
Based on a balancing of interests, data processing may take place beyond the actual fulfilment of the contract to protect our legitimate interests or those of third parties. Data processing to safeguard legitimate interests takes place, for example, in the following cases:
- Measures for business management and further development of services and products;
- Maintaining a company-wide customer database to improve customer service;
- Processing limited and aggregated information related to the performance of our promotions. This information is not used for profiling or other forms of behavioral targeting. If you do not want this, you can opt-out here:
- in the context of legal prosecution
Emailing us
When you use email to communicate with Webfleet and its staff using an @Webfleet.com email address, you will exchange personal data. This includes the email addresses used, the content of the messages you send or receive and metadata related to the email exchange. Webfleet retains email data as long as the email box exists that is associated with the @Webfleet.com email address. Our staff will sometimes retain email exchanges or parts thereof for record keeping or archiving purposes. Webfleet deletes the email box of a Webfleet staff member within 3 months after termination of employment. Webfleet staff can also delete individual email messages in their email box. Separate from this, Webfleet retains a copy of all email messages for the establishment, exercise or defense of legal claims for at least 15 years.
Calling us
When you call Webfleet we will sometimes record the conversation either for staff education and instruction purposes or to record details related to sales transactions. In cases where we record calls, you will be notified in advance and you will be offered the possibility to opt-out. However, if you opt-out, depending on circumstances, we may not be able to serve you. We will explain that to you in those applicable circumstances. Webfleet keeps recordings for a maximum period of 3 months for instruction purposes. We keep recordings that relate to sales transactions for a period of up to 10 years.
Visiting us
When you visit Webfleet, we will ask you to provide in our electronic visitor management system your contact information such as your name, the company or organization you represent, an email address and who you are visiting within Webfleet. We will use the information you provide only in the context of your visit, which includes security and safety purposes. Visitor and visit data are deleted three months after your visit.
Within the scope of your consent (Art. 6 para. 1 (a) GDPR):
If you have given us your consent to process your data, e.g. to send you our newsletters or promotional materials.
Who receives my data?
If we use a service provider for sub-processing, we remain responsible for the protection of your data. All processors are contractually obliged to process your data confidentially and to process it only within the scope of providing the service. The processors commissioned by us will receive your data if they require the data to fulfil their respective service. These are, for example, IT service providers that we require for the operation and security of our IT system.
Your data is processed in our customer database. The customer database supports the enhancement of the data quality of the existing customer data (duplicate cleansing, address correction, etc.).
If there is a legal obligation and in the context of legal prosecution, authorities, and courts as well as external auditors may be recipients of your data.
Third party services privacy information is listed below in the Annex.
How long will my data be stored?
We process your data until the end of the business relationship or until the expiry of the applicable statutory retention periods (e.g. applicable Commercial Code, Fiscal Code or Working Hours Regulations); in addition, until the end of any legal disputes in which the data is required as evidence.
Is personal data transferred to a third country?
In principle, we do not transfer any data to a third country. In individual cases, data is only transferred based on an adequacy decision by the European Commission, standard contractual clauses, suitable guarantees or your express consent.
3.What data protection rights do I have?
You have the right of information, correction, deletion, or restriction of the processing of your stored data, a right to object to the processing as well as a right to data transferability and to complain in accordance with the requirements of data protection law at any time.
Right of access
You can request information from us as to whether and to what extent we process your data.
Right of rectification
You have the right to request us to correct or update your data if we process it incorrectly or in an incomplete manner.
Right to be forgotten
You have the right to request that we erase your data if we use it unlawfully, or if the use excessively infringes on your legitimate interests. Please be aware that there may be factors that delay immediate erasure, such as legal requirements for storage. Regardless of your exercise of your right to erasure, we will erase your data promptly and fully, unless we are legally obliged to keep them. To ensure your right to be forgotten can be persistent, we will continue to process a key identifier such as an email address.
Right to restriction of processing
You have the right to request that we limit the processing of your data if
- you dispute the accuracy of the data, for a period that allows us to verify the accuracy of the data.
- the processing of the data is unlawful, but you refuse to have it deleted and instead demand a restriction on the use of the data,
- we no longer need the data for the intended purpose, but you still need the data to assert or defend legal claims, or
- you have objected to the processing of the data.
Right to data portability
You have the right to request us to provide you with your data that you have provided to us in a structured, common, machine-readable format and that you may transfer such data to another responsible party without hindrance from us, provided that we process this data on the basis of a revocable consent given by you or for the fulfilment of a contract between us, and this processing is done using automated procedures. If technically feasible, you can request us to transfer your data directly to another responsible person.
Right to object
You have the right to object to data processing at any time, if we process your data based on legitimate interest; this would also apply to profiling based on these provisions. We will then no longer process your data unless we can prove compelling reasons for processing worthy of protection that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims. You may object to the processing of your data for the purpose of direct marketing at any time without giving reasons.
Right to lodge a complaint with a supervisory authority
You have the right to complain if you are of the opinion that we are processing your data in violation of applicable data protection laws, to which we request that you contact us so that we can clarify any questions via the contact information in this policy. Naturally, you also have the right to contact the supervisory authority responsible for you, the respective state office for data protection supervision. If you wish to assert any of the above rights against us, please contact our data protection officer. In case of doubt, we may request additional information to confirm your identity.
Right to withdraw consent
If we process your data based on consent, you can withdraw this consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
4.Changes to this privacy policy
We reserve the right to change our privacy policy if this should be necessary due to new technologies. The latest version will always be available on this page.