Privacy Policy

The controller responsible for the processing of personal data through RideBorder is:

MO&KA IT Services and Business — operator of RideBorder, Switzerland.

• Website: rideborder.ch
• Privacy contact: info@rideborder.ch
• Registered office: Strada da Nuranch 32, 6915 Pambio-Noranco, Canton of Ticino, Switzerland
• Company identification number (UID): CHE-206.871.069

Users may contact us regarding privacy questions or requests concerning their personal data using the contact details above.

RideBorder processes personal data primarily in accordance with the Swiss Federal Act on Data Protection (FADP) and its implementing regulations.

Where RideBorder offers services to or processes personal data of individuals in the European Union or European Economic Area in circumstances where the EU General Data Protection Regulation (GDPR) applies, we will also process personal data in accordance with the GDPR.

Nothing in this Privacy Policy is intended to limit rights granted to individuals under mandatory applicable data-protection legislation.

Depending on how you use RideBorder, we may collect the following categories of personal data.

Account and identification information

When you register with RideBorder, we may collect: first name; last name; date of birth, where required; profile photograph; username or account identifier; email address; telephone number; preferred language; country or region; account creation date; and account status.

Driver verification information

If you register as a Driver, we may collect information necessary to verify your eligibility to offer rides, including: driving licence information; licence validity or expiry; licence category; issuing country; verification status; identity information; vehicle registration information; vehicle make and model; vehicle licence plate; number of available passenger seats; and other information reasonably required for driver verification and safety. Where possible, RideBorder may retain verification results rather than keeping copies of identification documents longer than necessary.

Employer and cross-border worker verification

Because RideBorder is designed primarily for commuters, we may offer workplace or employer verification. This may include: employer name; workplace location; professional or employer email address; verification status; and general commuting area. Unless expressly stated otherwise, RideBorder does not provide employers with detailed information regarding an employee's individual journeys merely because the employee has used an employer email address for verification.

Journey and carpool information

When you offer, request, search for or participate in a ride, we may process: departure location; destination; meeting point; departure date and time; expected arrival time; commuting schedule; recurring commuting days; route information; available seats; passenger requests; accepted or declined matches; journey status; cancellation information; cost-sharing information; and journey history.

Location data

RideBorder may process location information where necessary to provide features such as finding nearby Drivers or Passengers, identifying meeting points, calculating routes, estimating journey times, displaying traffic information, providing border information, improving matching, and supporting safety and SOS functionality. Depending on your device permissions, location information may include approximate or precise geographic location. Where device permission is required, you can normally disable location access through your device settings, although certain RideBorder functions may not work correctly without it. RideBorder should not continuously track your precise location when this is unnecessary for providing the requested service.

Payment and cost-sharing information

Where RideBorder offers payments or cost-sharing, we may process: amount payable; amount received; transaction identifier; currency; payment status; refund information; payment date; limited payment-method information; and records necessary for accounting, fraud prevention and dispute resolution. Payments may be processed by specialised third-party payment providers. RideBorder should not store full payment-card numbers where payment processing is handled by an authorised third-party payment provider.

Communications

Where Users communicate through RideBorder, we may process messages between Drivers and Passengers, customer-support communications, reports and complaints, emails, notifications, and communications relating to safety incidents. We may access communications where reasonably necessary to provide support, investigate abuse, prevent fraud, respond to safety incidents or comply with legal obligations.

Ratings and reviews

Where RideBorder provides a rating or review system, we may collect ratings, written reviews, feedback, reports concerning Drivers or Passengers, and information relating to complaints or disputes.

Safety and SOS information

If you use an SOS or safety feature, RideBorder may process information such as identity, telephone number, current or last available location, journey information, Driver or Passenger information, vehicle information, time of the alert, emergency contact information where provided, and information you communicate concerning the incident. Such information will be processed only as reasonably necessary for safety, assistance, incident management and compliance with legal obligations. RideBorder's SOS features do not replace official emergency services.

Technical and usage information

When you use RideBorder, certain information may be collected automatically, including: IP address; browser type; device type; operating system; device identifiers; application version; login information; pages or functions used; date and time of access; error logs; security logs; session information; and cookie or similar technology identifiers.

We may obtain personal data directly from you (for example, when you create an account, complete your profile, verify your identity or driving licence, register a vehicle, verify an employer email, search for a journey, offer or request a ride, communicate with another User, contact customer support, submit a review, make a payment, or use an SOS feature); automatically (certain technical, device, usage and location information collected when you use the Platform, subject to applicable permissions and settings); from other Users (a Driver or Passenger may provide information relating to you when making a booking, reporting an incident, submitting a review or contacting customer support); and from service providers (for example providers supporting identity verification, payment processing, maps, geolocation, authentication, fraud prevention and security).

We process personal data to provide RideBorder (creating and maintaining accounts, providing profiles, enabling ride searches, matching Drivers and Passengers, facilitating recurring commutes, managing ride requests, calculating routes and meeting points, and facilitating communication between Users); for verification and trust (verifying email addresses and telephone numbers, verifying employer emails and Drivers, preventing fake accounts, reducing fraud and investigating suspicious activity); for payments and cost sharing (calculating suggested contributions, processing payments, recording transactions, managing refunds, preventing payment fraud, resolving disputes and satisfying accounting obligations); for safety (providing safety functionality, processing SOS alerts, investigating reported incidents, identifying dangerous or abusive activity, suspending Users where necessary and cooperating with competent authorities where legally required); for customer support; for platform security (preventing unauthorised access, detecting fraud, investigating cybersecurity incidents, maintaining logs and enforcing our Terms); for improving RideBorder (analysing interactions to improve matching, route suggestions, user experience and Platform performance, using aggregated or anonymised information where reasonably possible); and for legal and regulatory compliance.

Where the GDPR applies, RideBorder may process personal data on one or more of the following legal bases:

• Performance of a contract — where processing is necessary to provide RideBorder services requested by you.
• Legitimate interests — where processing is reasonably necessary for interests such as Platform security, fraud prevention, improving RideBorder, protecting Users, managing disputes and operating our business, provided such interests are not overridden by your fundamental rights and freedoms.
• Consent — where consent is required, including for certain location functionality, cookies, marketing communications or optional features. You may withdraw consent where processing depends on consent; withdrawal does not affect processing lawfully carried out before withdrawal.
• Legal obligation — where processing is necessary to comply with an applicable legal requirement.
• Vital interests — in exceptional circumstances, where necessary to protect someone's life or physical safety.

Carpooling requires certain information to be shared between matched Users. Depending on the stage of a journey, another User may receive information such as first name, profile photograph, rating, verification status, approximate departure or destination, meeting point, vehicle description, vehicle licence plate where necessary, available seats, journey schedule, and information necessary to communicate and complete the journey.

RideBorder will endeavour not to disclose more personal information than reasonably necessary for the carpool arrangement. Users are prohibited from using information received through RideBorder for unrelated marketing, harassment, surveillance, discrimination or other unauthorised purposes.

RideBorder may use third-party companies to provide technical and operational services, including providers of cloud hosting, database services, authentication, email and SMS communications, maps and navigation, traffic information, geolocation, payment processing, identity or driving licence verification, analytics, cybersecurity, customer support and error monitoring.

These providers may process personal data only to the extent required to perform their respective services and subject to applicable contractual and data-protection requirements. A current list of material service providers may be made available where required by applicable law.

RideBorder is based in Switzerland but may use service providers located in other countries. Personal data may therefore be processed in Switzerland, countries within the European Union or European Economic Area, and other countries where RideBorder's authorised service providers operate.

Where personal data is transferred to a country recognised as providing an adequate level of data protection, the transfer may be made on that basis. Where an adequate level of protection is not recognised, RideBorder will use an appropriate legal mechanism where required, which may include recognised Standard Contractual Clauses or another legally permitted safeguard. Additional information concerning specific destination countries and applicable safeguards may be requested using the privacy contact information provided in this Policy.

RideBorder keeps personal data only for as long as reasonably necessary for the purposes for which it was collected or as required by law. Retention periods may depend on whether your account remains active, the type of information, contractual obligations, accounting requirements, fraud prevention, unresolved disputes, safety investigations, legal claims and statutory retention requirements.

When information is no longer required, it will be deleted, anonymised or otherwise handled in accordance with applicable law. Certain records may need to be retained after an account is deleted, including transaction, accounting, fraud-prevention, safety and legal records.

Identification and driving licence information deserves particular protection. RideBorder will endeavour to collect only information reasonably required for verification, restrict internal access, use secure transmission and storage, avoid retaining complete document copies unnecessarily, and delete verification documents when they are no longer reasonably required, subject to applicable legal obligations.

Where an external verification provider is used, verification information may be transmitted to that provider in accordance with its role and applicable contractual safeguards.

RideBorder uses appropriate technical and organisational measures intended to protect personal data against unauthorised access, accidental loss, alteration, disclosure, destruction and misuse. Measures may include, where appropriate, encrypted communications, access controls, secure authentication, restricted administrative access, backups, system monitoring, logging, security updates and other cybersecurity measures.

However, no internet-based system can guarantee absolute security. Users are responsible for maintaining the confidentiality of their passwords and account credentials.

Where RideBorder becomes aware of a personal-data security breach, we will investigate the incident and take appropriate measures. Where required by applicable law, RideBorder will notify the competent data-protection authority and/or affected individuals.

Depending on the law applicable to you, you may have rights concerning your personal data. These may include the right to:

• request information concerning personal data processed about you;
• obtain access to your personal data;
• request correction of inaccurate information;
• request deletion of personal data where legally permitted;
• object to certain processing;
• request restriction of processing where applicable;
• withdraw consent where processing is based on consent;
• request portability of certain information where applicable;
• obtain information concerning international data transfers; and
• lodge a complaint with a competent data-protection authority.

These rights are not absolute and may be subject to exceptions under applicable law. To exercise a privacy right, contact info@rideborder.ch. RideBorder may request reasonable information to verify your identity before fulfilling a request.

Users may request deletion of their RideBorder account. Following an account-deletion request, RideBorder will delete or anonymise personal data that is no longer necessary, subject to information that must or may lawfully be retained for purposes including accounting, legal compliance, fraud prevention, dispute resolution, safety investigations, and establishing, exercising or defending legal claims.

RideBorder may send service-related communications necessary to operate your account, including verification messages, ride confirmations, matching notifications, cancellations, payment information, security alerts and important Platform notices. These operational communications are different from marketing communications.

Where required by applicable law, promotional emails, SMS messages or similar electronic marketing will be sent only with the appropriate permission. Users may unsubscribe from marketing communications using the unsubscribe function provided or through their account settings. Essential service and security messages may continue even after marketing communications are disabled.

RideBorder may use cookies and similar technologies to maintain login sessions, remember preferences, secure accounts, prevent fraud, understand Platform performance, diagnose technical problems and measure website usage. Non-essential cookies will be handled in accordance with applicable consent requirements. Further information is provided in the RideBorder Cookie Policy.

RideBorder may contain links to third-party websites or integrate third-party services. Those organisations may independently process personal data according to their own privacy policies. RideBorder is not responsible for the privacy practices of independent third parties. Users should review the privacy information provided by those services.

RideBorder is intended primarily for adult commuters. Users must generally be at least 18 years old to create an independent RideBorder account. RideBorder does not knowingly seek to collect personal data from children for independent use of the carpooling Platform. If we become aware that personal data has been collected from a child contrary to our eligibility requirements, appropriate steps will be taken to delete or otherwise lawfully handle that information.

RideBorder may automatically analyse information such as departure location, destination, commuting schedule, workplace area, available seats, preferred meeting points and previous RideBorder activity to recommend suitable carpool matches. A match or recommendation does not require a User to travel with another person; Users remain free to accept or reject suggested matches.

Where RideBorder introduces automated decision-making that produces significant legal or similarly significant effects, additional information and rights will be provided where required by applicable law.

RideBorder may update this Privacy Policy when necessary because of changes to RideBorder services, new features, changes in service providers, changes in data-processing activities, security developments or changes in applicable law. The latest version will be published on RideBorder with its effective date. Where a change materially affects how personal data is processed, RideBorder will provide additional notice where appropriate or legally required.

If you have concerns about how RideBorder processes your personal data, please contact us first at info@rideborder.ch. You may also have the right to contact the competent data-protection supervisory authority.

For Switzerland, the competent federal authority is the Federal Data Protection and Information Commissioner (FDPIC). Users located in the EU/EEA may also have the right to lodge a complaint with the competent supervisory authority in their country.

For questions concerning this Privacy Policy or the processing of personal data:

RideBorder — operated by MO&KA IT Services and Business, Switzerland.

• Website: rideborder.ch
• Privacy email: info@rideborder.ch
• Registered office: Strada da Nuranch 32, 6915 Pambio-Noranco, Canton of Ticino, Switzerland
• Company identification number (UID): CHE-206.871.069