Privacy and Data Protection Policy

1. General

ESN France - Buddy System administration (whose registered office is at 50, rue des Tournelles, 75003 Paris, France) (“Buddy System”, “we”, “our” or “us”), acting as data controller, is committed to protecting and respecting your privacy. This notice (the “Privacy Notice”) is designed to tell you about our practices regarding the collection, use and disclosure of information that you may provide via this Platforms or our mobile application. This Privacy Notice (together with our Terms and Conditions, any other documents referred to in it and our Cookie Notice) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

2. What information do we collect from you and for how long?

We may collect and process the following data about you: 2.1. Information you give us You may give us information, including information that can identify you (“Personal Data“), when you use our Platforms, by filling in forms on the Platforms (such as the sign-up form), when you enter into any of our competitions, promotions or surveys, when you correspond with us by e-mail or otherwise, and when you report a problem with our Platforms. The information you give us may include: 2.1.1. Mandatory information required to register for the service we provide on our Platforms or to access other services provided by us, including your name, email address, date of birth, gender, and a password. All these fields are mandatory. Buddy System will not be able to provide you with the services offered on our Platforms if the required information is not provided, consequently you will not be able to register for a user account on our Buddy System; 2.1.2. A photograph; 2.1.3. A postal address; 2.1.4. Details on your cars; 2.1.5. Your mini-biography; 2.1.6. A record of any correspondence between you and us; 2.1.7. A record of any bookings you have made or trip related advertisements you have placed with or through our Platforms; 2.1.8. Details of accounting or financial transactions including transactions carried out through our Platforms or otherwise. This may include information such as your payment card or bank account details, details of trips or legs you have booked or offered through our Platforms; 2.1.9. Details of your visits to our Platforms and the resources that you access; 2.1.10. Your replies to any surveys or questionnaires, such as your reviews on the trips you have shared with other members of our community. Such information may be used for analytic & user understanding purposes; 2.1.11. Information we may require from you when you report a problem with our Platforms or our service, such as the subject of your request for support; 2.1.12. Location information when you have given consent to the collection and processing of these data; and 2.1.13. Passport, Driving Licence, ID Card and such other documents that you have agreed to provide to us. 2.2. Information we collect automatically 2.2.1. If you sign up via social media authentication methods, Buddy System will access certain Personal Data (e.g. first name, surname, picture, email, number of Facebook friends, etc.) in your social media account pursuant to the applicable terms and conditions of these social media platforms. We may also collect some of your Personal Data when you interact with third party social media features, such as “Like” functions. 2.2.2. With regard to each of your visits to our Platforms we may collect, in accordance with applicable laws and where required with your consent, information relating to the devices you use and the networks you are connected to when using our services. This may include the following information: your IP address, log-in information, browser type and version, browser plug-in types and versions, operating system and platform, advertising identifier, information about your visit including the URL clickstream to, through and from our Platforms, products you viewed or searched for, download errors, length of visits to certain pages, page interaction. We collect this information through the use of various technologies including cookies (for further information please refer to our Cookie Notice). 2.2.3. We also collect aggregated information regarding your activity on our Platforms (such as the amount of rides offered, your message response rate, etc.). Such information may be published on your profile on our Platforms. 2.3. Data retention 2.3.1. Except regarding the categories of Personal Data mentioned in clauses 2.3.2 and 2.3.3 below, your Personal Data will be stored for the duration of your relationship with us and then put beyond use: 5 years after your last use of our Platforms, if you did not close your account; 1 year after the closing of your account, except if you received a negative rating or report, in which case your Personal Data is stored for either (i) a 2-year period following the latest negative rating or report, or (ii) 1 year after the closing of your account, whichever is longer. 2.3.2.The following categories of Personal Data may be stored for different durations: Financial data (e.g. payments, reimbursements, etc.) is stored for the duration required by applicable tax and accounting laws; All user-generated content (e.g. comments and ratings) is anonymised but remains available on our Platforms. 2.3.3. In the event that your account is suspended or blocked, we will keep your data for a period of between 2 and 10 years in order to prevent you from circumventing the rules applying to our Platforms.

3. How do we use the information we collect from you?