Ruter is responsible for all personal data related to ordering, payment, and the administration of the service.

TRIPS is responsible for personal data processed through the use of the TRIPS app. For more details, you can view their privacy statement here:TRIPS privacy statement

The TRIPS app collects and processes location data as an essential part of its functionality. Continuous access to location data is required to ensure a safe and efficient service.

In accordance with the Personal Data Act, you have several rights concerning your personal data.

Purpose and legal basis

Ruter processes personal data to offer Samkjøring as a service and to manage the operation of the service.

Driver data: Ruter processes personal data about drivers to manage trip bookings and execution, facilitate payments and disbursements, ensure safety, administer the service, and provide customer support.

User data: Personal data is processed to manage trip bookings and execution, provide customer support, support service development, and ensure safety.

Location data is processed for:

• Coordinating between drivers and passengers
• Preventing the creation of false trips during service execution
• Location data is only processed when a trip is active. For more details, please refer to the TRIPS Privacy Policy

Ruter also processes personal data to meet the documentation requirements set out in the Accounting Decree (forskrift om bokføring).

Legal basis – users

The legal basis for processing personal data is your consent. The data is processed to plan and deliver the carpooling service to you as a passenger, as well as to follow up on the service, for example in the event of any irregularities.

Legal basis – drivers

The legal basis for processing personal data is your consent. The data is processed to plan and enable the execution of your trips as a driver in the carpooling service, as well as to follow up on the service.

Data we process

Ruter processes the following personal data:

Drivers

Ruter processes the following personal data about drivers: name, contact information (phone/email), national identity number (for Vipps verification), vehicle details (registration number and EU roadworthiness documentation), the validity of your driver’s license, bank account number, location and geographic data,as well astravel history.

Users

Ruter processes the following personal data about customers/passengers: name, contact information (phone/email), national identity number (for Vipps verification), location and geographic data, as well as travel history.

Ruter behandler følgende personopplysninger om kunder/passasjerer: navn, kontaktinformasjon (telefon/e-post), fødselsnummer (i forbindelse med Vipps-verifisering), steds- og lokasjonsdata, samt reisehistorikk.

Access and use

Access to your personaldata is restricted to customer service personnel who handle your feedback on the service, as well as individuals at our data processor, TRIPS, who manage the app.

Personal data is stored by our service provider, TRIPS, who have ensured encryption of data between the app and backend systems. This also applies to the collection of location data, as well as when such data is not actively processed (“at rest”).

Ruter does not disclose your personal data to third parties unless we are legally obligated to do so by public authorities.

Ruter will share anonymized data with our partners in public transport and mobility services.

Personal data storage

Users

Personal data collected in connection with the use of the carpooling app will be retainedas long as you remain an active user. A user may request the deletion of their account and associated personal data at any time. After 2 yearsofinactivity, theuserwill be automaticallydeleted.

Personal data may be processed for as long as necessary to defend a legal claim, for example until the matter is legally resolved.

More detailed information about your trips through Samkjøring is stored for up to 60 days before being anonymized.

Drivers

Information related to you as a driver is processed for as long as you are registered as a driver in the service.

Data on completed carpooling trips is stored for up to 60 days before being anonymized.

For accounting purposes, we will retain necessary personal data to meet documentation requirements under the Accounting Decree (Forskrift om bokføring).

Your rights

You have the right to access, correct, port, and deleteanyof your personal data we have stored.

You also have the right to file a complaint with the Data Protection Authority if you believe your personal data has been processed incorrectly. However, we encourage you to contact us first through our Data Protection Officer.

Cloud services

TRIPS uses cloud services from several providers to operate the Samkjøring service. DigitalOceanprovides server and database services, with storage located in Frankfurt, Germany. Additionally, Amazon Web Services (AWS) is used for image storage and database backups, with storage located in Stockholm, Sweden. All personal data processing therefore takes place within the EU/EE.