This Privacy Policy (“Policy”) extends to a set of web products and mobile apps created and owned by Ondemand Apps OÜ, Tornimäe 7-36, 10145 Tallinn, Estonia, 10145, Registry number 14521027, VAT number EE102094192 (“Onde”, “we”, “our”) and users of our Service and visitors of our Website (“you”)
Onde owns a software platform that includes ride-hailing applications or websites such as “My Hub”, “Web application”, “Operator application”, “Onde Light”, “Driver App”, “Customer App” and other applications to provide our services (collectively “Service”). Our main website is https://onde.app (“Website”).
The Policy outlines:
Onde is the controller and the processor of PD. Terms that aren’t defined in the Policy shall have the same meaning as in the General Terms and Conditions (“T&C”) placed on our Website.
To use the Service, you shall consent to the Policy and the T&C. You agree to the Policy when you indicate your consent by clicking 'I Agree' when prompted. To use the Website, you shall consent to essential cookies without which the Website doesn’t work.
Generally, “personal information”, “personal data”, or similar terms refer to any information that identifies or relates to you. However, the exact meaning of PD may be determined by the laws of the country of your residence. Nevertheless, we are committed to complying with the General Data Protection Regulation 2016/679/EU (“GDPR”), even if your applicable law requirements are less stringent for us.
We adhere to the data minimization principle and only collect data essential for delivering our services through the Service.
The retention period is tailored to the:
We retain PD only as long as necessary for the purposes outlined in this Policy If you refuse to provide us with your PD, we won’t be able to provide all our services to you.
| PURPOSE | LEGAL BASIS | DATA | WHOSE DATA |
|---|---|---|---|
| To render services to our Partners and Customers under the T&C and Partner Agreements (manage orders, purchases, accounts, render services). | Contract |
|
Who uses our Service |
| To analyze, research, and understand your interaction with the Service | Consent |
|
Who interacts with the Service |
| To analyze, research, and understand your interaction with the Website | Legitimate interest in enhancing the quality of our services |
|
Who interacts with the Website |
| Respond to comments, questions, and requests | Legitimate interest in developing our business and satisfying our client's needs and requirements |
|
Who requests, comments, or questions |
| Participation in promotions, competitions sponsored, promoted, or offered by us | Contract |
|
Who participates |
| Creating and keeping the Onde ID | Contract |
|
Who uses or has used the Service |
| Offer you services that may be useful to you based on services previously ordered | Legitimate interest in developing our business and satisfying your needs. |
|
Who has used our Service |
| Marketing communication (emailing, advertising products, blog) | Consent |
|
Who has subscribed |
| To facilitate payment procedures in the Service | Contract |
|
Who makes payments in the Service |
| Enhancement of safety (including identification of fraud prevention, security, compliance, legal processes, and court orders) and issues relating to the user’s account (such as an outstanding credit or an unresolved claim or dispute). | Legitimate interest |
|
Who uses or has used the Service |
Consent-Based Data Use and Legitimate Interests-Based Data Use:
Deletion of:
PD will be deleted within 90 days of your request.
Exceptions for retention:
| You | When you use our Service or the Website, for example, sign up, fill in the order information, visit the Website, contact support, account and payment information, how you browse through, as well from our communications, complaints, or other interactions. |
|---|---|
| Your devices | Your computers, phones, and other web-connected devices to access our Service and the Website, transfer us your IP address, device, operating system, browser type, location data, and others. |
| Third parties |
We engage with third-party processors who are compliant with GDPR. Their roles and responsibilities in
data processing are clearly defined in our contracts with them.
|
A detailed list of third parties Onde uses may be shown to you under your request within a reasonable time.
| Advertising Partners | We may share with them a unique advertising identifier that is not attributable to you and is used to target advertising. We may also share your technical data with our advertising partners based on our legitimate interest. |
|---|---|
| Service providers under contract with us | They may use your PD to provide services to us, such as fraud/spam investigations, payment processing, analytics tools, and operations. These third parties are prohibited from using your PD for any other purpose. This section also includes services of third parties that are offered through our Service. |
| Business Transfers | Your PD may be transferred to the new owner in case of a business transfer, such as a merger or acquisition. |
| Our affiliates | Entities that are controlled by us or are under common control with us. Our affiliates may use PD we share in a manner consistent with this Privacy Policy. |
| Legal Requirements | After assessing necessity and proportionality, if required, for legal obligations or to protect legitimate interests, such as defending our rights in litigation or preventing fraud. We will not disclose data to protect against legal liability where no additional legitimate interests exist. |
With cookies (a cookie is a piece of data from a website that is stored within a web browser that the website can retrieve at a later time), Onde may collect information about:
Cookies enable us to:
These statistics are gathered in a way that doesn’t allow identifying individuals.
On the Website, you may refuse to accept optional but cannot refuse essential cookies (based on our legitimate interest). You can do the latter by only activating the setting on your browser, which allows you to refuse all the cookies. However, if you select this setting, you may be unable to access certain parts of the Website.
Onde keeps PD on servers of a third party in the European Union. The data that Onde collects may be transferred to and stored at a destination outside the European Economic Area (“EEA”). You agree to transfer, store, or process the data to destinations outside EEA by submitting PD. When transferring data outside the EEA, we employ safeguards such as Standard Contractual Clauses and ensure the receiving country has adequate data protection laws as determined by the European Commission.
When we transfer PD to trusted third parties in different countries, we sign Data Processing Agreements or Standard Contractual Clauses with them in some countries.
Onde restricts access to your data to individuals who need access to it to process it on Onde’s behalf. Agreements bind the employees and contractors who work with your data to be processors thereof. Onde will file a lawsuit or claim if they fail to meet the required data processing security.
We use neither automated decision-making nor PD to assess aspects of your personality (automated profiling) automatically.
Our service may involve integrations with or direct you to websites, apps, and services managed by third parties. By interacting with these third parties, you are providing information directly to the third party, not Onde, and you and your PD are subject to the third party’s privacy policy.
We may send you marketing information without your consent only if you are our customer and the message we send you relates to our new products of the same type of product you have. It is our legitimate interest.
We send this information through direct emails or third-party email service providers.
You may stop receiving marketing and promotional information anytime by clicking "Unsubscribe" at the bottom of each email or sending us a direct request to unsubscribe you from further promotional emails.
Onde will securely store the login information and PD of the Partners, Customers, and any other Service users in its system called "Onde ID".
If a Customer wants to use the Service, Onde may share some of their Onde ID data with the Partner. The Partner may then use that data to provide the necessary services.
The Onde ID data may be shared outside the Service for facilitating logins and the performance of services by third parties if a Customer/Partner agrees to (for example, if there is a third party’s integration in the Service). In this case, such a Customer/Partner and the data they agreed to share will be subject to the third party’s privacy policies.
The GDPR gives you the right to:
Under Art. 77 GDPR, you, as a data subject, have the right to file a complaint with a supervisory authority of the EU Member State in your permanent place of residence, place of work, or in which there was an alleged violation of your information privacy.
Address of Estonian Data Protection Inspectorate:
39 Tatari St., 10134 Tallinn, telephone (+372) 627 4135, e-mail:
info@aki.ee.
Other rights:
You have the right to
To exercise any rights, contact Onde directly by post or email at hi@onde.app.
Any changes Onde may make to the Policy in the future will be posted on this page. We will notify you via email or other ways before any changes. We will inform you in a reasonable time, not less than 3 days. The date of the most recent revisions will appear on this page.
We use technical, physical, and administrative measures to protect your PD. You are responsible for your password and account info.
We are responsible for reporting a data breach without undue delay and, where feasible, not later than 72 hours after becoming aware of it.
Onde may post links to third-party websites on the Services. These links are not administered or verified by Onde. You access the links at your own risk. Onde makes no representations or warranties about the content of such websites and cannot be held liable for any losses you suffer from using such third-party websites. Onde recommends you read any third-party websites' privacy policies before providing information to them.
Please submit any questions, comments, and requests regarding the Policy to hi@onde.app.
The Policy was updated on December 14, 2023.
The previous version of the
Privacy Policy.