Privacy Policy

RYDES GmbH
Brunnenstraße 19-21
10119 Berlin
Germany

E-mail: [email protected]
Website: www.navit.com

The controller's Data Protection Officer is:

DataCo GmbH
Sandstraße 33
80335 Munich
Germany
+49 89 7400 45840
www.dataguard.de

On this page, we inform you about the processing of your personal data on the website. How we collect and use your personal data depends on how you interact with us or which services you use. We only collect, use, or share your personal data where we have a legitimate purpose and a legal basis for doing so.

You have given us your consent to the processing of your personal data for the specific purpose we have explained to you. You have the right to withdraw your consent at any time. Further information on how to withdraw your consent can be found in the "Exercising your rights" subsections in the following sections of this privacy policy.

We need to use your data to perform a contract you have with us. Alternatively, it is necessary to use your data because we have asked you to, or because you yourself have taken certain steps before entering into that contract.

We need to use your data in order to comply with the law.

The processing of your data is necessary to protect your vital interests or those of another person — for example, to protect you from serious physical harm.

The processing of your data is necessary for the performance of a task carried out in the public interest, or because it is covered by a task laid down by law, e.g. for a statutory function.

The processing of your data is necessary to support a legitimate interest that we or another party have, but only where your own interests do not override it.

Please note that we may not be able to provide you with our website services if your data is processed for the performance of a contract or a legal obligation and you do not provide the requested data.

As explained in this privacy policy, we use various service providers who help us provide our services and keep your data secure. When we use these service providers, it is necessary for us to share your personal data with them. With all service providers to whom we pass on your data, we have concluded agreements obliging them to protect your data.

If your personal data is shared outside the EU, we ensure that your personal data receives an equivalent level of protection, either because the country to which your data is transferred has an "adequate" data protection standard according to the European Commission, or because we apply another safeguard, such as the standard contractual clauses (SCCs) adopted by the European Commission.

For example, when we use US service providers, we rely, depending on the provider, either on the SCCs or on the EU-US Data Privacy Framework. You can request a copy of the SCCs we have concluded with our service providers by sending an e-mail to the e-mail address provided in this privacy policy.

You have the right to request confirmation from us as to whether personal data concerning you is being processed. Where this is the case, you have a right of access to that data and to the following information:

• The purposes of processing
• The categories of personal data
• The recipients or categories of recipients
• The envisaged storage period or the criteria used to determine that period
• The existence of the rights to rectification, erasure, restriction, or objection
• The right to lodge a complaint with the competent supervisory authority
• Where applicable, the source of the data (if collected from a third party)
• Where applicable, the existence of automated decision-making including profiling, together with meaningful information about the logic involved, the significance, and the envisaged consequences
• Where applicable, the transfer of personal data to a third country or international organization

Should your personal data be inaccurate or incomplete, you have the right to request the immediate correction or completion of the personal data.

Provided that one of the following conditions is met, you have the right to request a restriction of the processing of your personal data:

• You contest the accuracy of your personal data, for a period enabling us to verify the accuracy of the personal data.
• In the case of unlawful processing, you oppose the erasure of the personal data and request the restriction of its use instead.
• We no longer need your personal data for the purposes of the processing, but you require it for the establishment, exercise, or defense of legal claims.
• After you have objected to the processing, for the duration of the review as to whether our legitimate grounds override yours.

Provided that one of the following grounds applies, you have the right to request the immediate erasure of your personal data:

• Your data is no longer necessary for the processing purposes for which it was originally collected.
• You withdraw your consent and there is no other legal basis for the processing.
• You object to the processing and there are no overriding legitimate grounds for the processing, or you object pursuant to Art. 21(2) GDPR.
• Your personal data is being processed unlawfully.
• Erasure is necessary for compliance with a legal obligation under Union law or the law of the Member State to which we are subject.
• The personal data was collected in relation to information society services offered pursuant to Article 8(1) GDPR.

Please note that the above grounds do not apply insofar as processing is necessary:

• For exercising the right of freedom of expression and information;
• For compliance with a legal obligation, or for the performance of a task carried out in the public interest to which we are subject;
• For reasons of public interest in the area of public health;
• For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes;
• For the establishment, exercise, or defense of legal claims.

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, or to request its transmission to another controller.

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(e) or (f) GDPR. This also applies to profiling based on those provisions.

Where personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

You can find a list of the locally competent supervisory authorities in Germany on the website of the Federal Commissioner for Data Protection at the following link: bfdi.bund.de

1. Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device. The following data is collected in this process:

• Information about the browser type and version used
• The user's operating system
• The user's internet service provider
• The date and time of access
• Websites from which the user's system reaches our website

This data is stored in the log files of our system. This data is not stored together with other personal data of the user.

2. Purpose of data processing

Storage in log files takes place to ensure the functionality of the website. In addition, the data serves to optimize the website and to ensure the security of our information technology systems. No evaluation of the data for marketing purposes takes place in this context.

3. Legal basis for data processing

The legal basis for the temporary storage of the data and the log files is Art. 6(1)(f) GDPR.

4. Duration of storage

The data is erased as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collected to provide the website, this is the case when the respective session has ended. In the case of storage of the data in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the users' IP addresses are erased or anonymized so that it is no longer possible to attribute the accessing client.

5. Exercising your rights

The collection of the data to provide the website and the storage of the data in log files is strictly necessary for the operation of the website. The user may object to this. Whether the objection is successful is to be determined in the context of a balancing of interests.

1. Description and scope of data processing

When you visit our website, we use technical means for various functions, in particular cookies that may be stored on your end device. When you access our website and at any time thereafter, you have the choice of whether to allow the setting of cookies in general or which individual additional functions you wish to select. You can make changes in your browser settings or via our consent manager.

We use technically necessary cookies that are required for the technical structure of the website. The following data is stored and transmitted by the technically necessary cookies: language settings, log-in information, search terms entered, frequency of page views, use of website functions.

We also use cookies on our website that are not technically necessary. The setting of technically unnecessary cookies processes the following data: location of internet users, date and time of access to the website, tracking of browsing behavior.

2. Purpose of data processing

The purpose of using technically necessary cookies is to ensure the functionality of our website. The use of technically unnecessary cookies serves the purpose of improving the quality of our website, its content, and thus our reach and profitability.

3. Legal basis for data processing

The provisions of the Telecommunications Digital Services Data Protection Act (TDDDG) apply to the storage of information on the end user's device and/or the access to information already stored. For technically required cookies, this is done on the basis of Section 25(2) No. 2 TDDDG. Insofar as cookies are used that are not technically necessary, this is done on the basis of your explicit consent pursuant to Section 25(1) TDDDG in conjunction with Art. 6(1)(a), Art. 7 GDPR.

4. Exercising your rights

You can withdraw your consent to the use of cookies at any time and manage your consent preferences via our consent manager.

1. Description and scope of data processing

On our website, you have the option of subscribing to a free newsletter. When you register, the data from the input form is transmitted to us. To provide this service, we collect the following data: e-mail address, last name, first name. Your consent is obtained during the registration process for the processing of the data. The data is not passed on to third parties; it is used exclusively for sending the newsletter.

2. Purpose of data processing

The collection of the e-mail address serves to deliver the newsletter. The collection of other personal data serves to prevent misuse of the services or of the e-mail address used.

3. Legal basis for data processing

Where the user has given consent, the legal basis is Art. 6(1)(a) GDPR.

4. Duration of storage

The data is erased as soon as it is no longer necessary to achieve the purpose for which it was collected. The e-mail address is stored for as long as the subscription is active. Other data collected during the registration process is generally erased after a period of seven days.

5. Exercising your rights

The subscription can be cancelled at any time. A corresponding link can be found in every newsletter for this purpose. This also enables a withdrawal of consent.

1. Description and scope of data processing

It is possible to contact us via the e-mail address provided on our website. In this case, the personal data of the user transmitted with the e-mail is stored. The data is used exclusively for processing the conversation.

2. Purpose of data processing

In the case of contact by e-mail, this also constitutes the required legitimate interest in processing the data.

3. Legal basis for data processing

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to respond to your inquiry in the best possible way. If the e-mail contact is aimed at concluding a contract, the additional legal basis is Art. 6(1)(b) GDPR.

4. Duration of storage

The data is erased as soon as the respective conversation with the user has ended. The conversation is deemed ended when it can be inferred from the circumstances that the matter concerned has been conclusively clarified. Data additionally collected during the sending process is erased after seven days at the latest.

5. Exercising your rights

If the user contacts us by e-mail, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued; all stored data is erased.

1. Description and scope of data processing

A contact form is available on our website that can be used to make contact electronically. At the time the message is sent, the following data is stored: e-mail address, last name, first name, date and time.

2. Purpose of data processing

The processing of the data from the input form serves solely to handle the contact. The other data serves to prevent misuse of the contact form and to ensure the security of our systems.

3. Legal basis for data processing

The legal basis is Art. 6(1)(f) GDPR. If the contact is aimed at concluding a contract, the additional legal basis is Art. 6(1)(b) GDPR.

4. Duration of storage

The data is erased as soon as the respective conversation has ended. Data additionally collected during the sending process is erased after seven days at the latest.

5. Exercising your rights

The user may object to the storage of their personal data at any time. A declaration of objection can be made by post to RYDES GmbH, Brunnenstraße 19-21, 10119 Berlin, or by e-mail. All stored data is erased in this case.

The website is hosted on servers of a service provider engaged by us. Our service provider is: Webflow, Inc., a Delaware corporation, 398 11th Street, Floor 2, San Francisco, CA 94103. Further information can be found in the provider's privacy policy: webflow.com/legal/privacy

The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website:

• Information about the browser type and version used
• The user's operating system
• The user's internet service provider
• The date and time of access
• Websites from which the user's system reaches our website

This data is not merged with other data sources. The collection is carried out on the basis of Art. 6(1)(f) GDPR. Webflow hosting uses a global content delivery network (CDN).

1. Description and scope of data processing

On our website, we use functions of the content delivery network Webflow (Webflow, Inc., 398 11th Street, Floor 2, San Francisco, CA 94103). A CDN is a network of regionally distributed servers used to deliver content. When you access our website, a connection to Webflow's servers is established. This allows personal data to be stored and evaluated in server log files, primarily the user's activity as well as device and browser information (in particular IP address and operating system).

2. Purpose of data processing

The use of Webflow's functions serves to deliver and accelerate online applications and content.

3. Legal basis for data processing

The collection is carried out on the basis of Art. 6(1)(f) GDPR.

4. Duration of storage

Your personal information is stored for as long as is necessary to fulfill the described purposes or as required by law.

5. Exercising your rights

Information on exercising your rights vis-à-vis Webflow can be found at: webflow.com/legal/privacy

1. Scope of processing – We use the conversion tracking tool Bing Ads of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. A cookie is stored on your computer if you reached our online presence via a Bing Ads advertisement. The following is processed in particular: user activity, device and browser information (including IP address), data about displayed advertisements, and data from advertising partners.

2. Purpose – Microsoft Bing and we can recognize that someone clicked on an ad, was redirected to our online presence, and reached a conversion page.

3. Legal basis – Consent pursuant to Art. 6(1)(a) GDPR.

4. Duration of storage – As long as necessary or required by law (e.g. tax and accounting purposes).

5. Exercising your rights – You can withdraw your consent at any time. Opt-out: Microsoft Ad-Settings. Further information: Microsoft Privacy Statement

1. Scope of processing – We use the Facebook Pixel of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, and Facebook Ireland Ltd., 4 Grand Canal Square, Dublin, Ireland. This allows us to track actions of users after they have seen or clicked on a Facebook advertisement. Data may be transmitted to Facebook servers in the USA in the process.

2. Purpose – Analysis and optimization of advertising measures.

3. Legal basis – Consent pursuant to Art. 6(1)(a) GDPR.

4. Duration of storage – As long as necessary or required by law.

5. Exercising your rights – Withdrawal possible at any time. Further information: Facebook Data Policy

1. Scope of processing – We use Google Ads Remarketing of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or Google Ireland Ltd., Gordon House, Barrow Street, Dublin, Ireland. This is used to re-engage visitors for advertising purposes. Google sets a cookie in the process; the following is processed: user activity, device and browser information (including IP address), and data about displayed advertisements.

2. Purpose – Targeted addressing of an audience with interest-based advertising.

3. Legal basis – Consent pursuant to Art. 6(1)(a) GDPR.

4. Duration of storage – As long as necessary or required by law.

5. Exercising your rights – Withdrawal possible at any time. Opt-out plugin: tools.google.com/dlpage/gaoptout. Ad settings: adssettings.google.com

1. Scope of processing – We use Google Analytics, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google sets cookies on your end device; user behavior is recorded in the form of "events". The following is processed, among others: first visit, interaction/usage path, clicks on external links, file downloads, scrolling behavior, searches, language selection, page visits, location (region), truncated IP address, technical browser/device information, internet provider, and referrer URL. We use the User-ID function as well as Google Signals. IP address anonymization is enabled by default.

2. Purpose – Evaluation of the use of our online presence and creation of reports on the activities on our website.

3. Legal basis – Consent pursuant to Art. 6(1)(a) GDPR.

4. Duration of storage – Your personal data is erased after 2 months (automatically once per month).

5. Exercising your rights – Withdrawal via our cookie consent tool. Opt-out plugin: tools.google.com/dlpage/gaoptout

1. Scope of processing – We use Google Web Fonts of Google LLC or Google Ireland Ltd. The web fonts are transferred to the browser cache when the page is accessed. No cookies are stored when accessing them; transmitted data is sent to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. The following is processed primarily: user activity as well as device and browser information (including IP address and operating system).

2. Purpose – Appealing and consistent presentation of our texts.

3. Legal basis – Consent pursuant to Art. 6(1)(a) GDPR.

4. Duration of storage – As long as necessary or required by law.

5. Exercising your rights – Opt-out: adssettings.google.com. Further information: Google Privacy Policy

1. Scope of processing – We use functions of HubSpot Inc., 2nd Floor, 25 First Street, Cambridge, MA 02141, USA. This is an integrated software solution for e-mail marketing, social media publishing & reporting, reporting, contact management (CRM), landing pages, and contact forms. HubSpot sets a cookie; the following is processed: user activity, device and browser information (including IP address), and data about displayed advertisements.

2. Purpose – Optimization of our marketing.

3. Legal basis – Consent pursuant to Art. 6(1)(a) GDPR.

4. Duration of storage – As long as necessary or required by law.

5. Exercising your rights – Withdrawal possible at any time. Further information: HubSpot Privacy Policy

1. Scope of processing – We use functions of the LinkedIn network (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland). Each time a page with LinkedIn functions is accessed, a connection to LinkedIn servers is established. The following is processed primarily: user activity as well as device and browser information (including IP address and operating system). We have no knowledge of the content of the transmitted data.

2. Purpose – User-friendliness of our online presence.

3. Legal basis – Consent pursuant to Art. 6(1)(a) GDPR.

4. Duration of storage – As long as necessary or required by law.

5. Exercising your rights – Opt-out: LinkedIn Guest Controls. Further information: LinkedIn Privacy Policy

1. Scope of processing – We use Microsoft Advertising of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. This allows advertising to be placed on Bing. Cookies from Microsoft are stored on your end device. The following is processed in particular: IP address, device and browser information, a user ID assigned by Microsoft, and the referrer URL. Data is processed on Microsoft servers in the USA.

2. Purpose – Analysis, evaluation, and optimization of ads for advertising purposes.

3. Legal basis – Consent pursuant to Art. 6(1)(a) GDPR.

4. Duration of storage – As long as necessary or required by law.

5. Exercising your rights – Objection: choice.microsoft.com. Further information: Microsoft Privacy Statement

Scope of processing – We use Brevo, an e-mail marketing and newsletter distribution platform of Sendinblue GmbH (brand "Brevo"), Köpenicker Str. 126, 10179 Berlin, Germany. Brevo is used to send newsletters, carry out e-mail campaigns, and technically organize and evaluate the distribution. The following is processed in particular: e-mail addresses as well as, where applicable, other data provided during newsletter registration and technical information (e.g. open and click rates).

Purpose – Sending newsletters and e-mail marketing communications, as well as statistical evaluation and optimization.

Legal basis – Consent pursuant to Art. 6(1)(a) GDPR (double opt-in).

Duration of storage – As long as your consent to the newsletter distribution exists. After withdrawal, the data is erased, provided no statutory retention obligations prevent this.

Exercising your rights – Withdrawal in particular via the unsubscribe link in every newsletter. Further information: Brevo Privacy Policy

Scope of processing – We use Webflow, a website builder and hosting service of Webflow, Inc., 398 11th Street, Floor 2, San Francisco, CA 94103, USA. Webflow serves the technical provision of our website, including hosting, presentation of the content, and ensuring stability and security. When accessed, Webflow processes in particular technical access data (e.g. IP address, date/time, browser type, operating system).

Purpose – Provision of the website, technical functionality, system security, and stable and efficient presentation of the content.

Legal basis – Legitimate interest pursuant to Art. 6(1)(f) GDPR in the secure, stable, and efficient provision of our website.

Duration of storage – Only for as long as necessary. Log and access data is regularly erased or anonymized, provided no statutory retention obligations exist.

Exercising your rights – Further information: Webflow Privacy Policy