Personal data subject: stated when the consent is accepted.
I consent to ByFly Group LLP (BIN 261040023460, address: Республика Казахстан, г. Алматы, ул. Айтеке би, д. 100, н. п. 71) processing the geodata of my trips in the ByFly Taxi service.
1.What is processed: pickup and destination points (including those determined by the geolocation of my device), stops along the way, the trip track — the path of the car from pickup to the end of the trip — and the time.
2.Why: to place and fulfil the order, calculate the price, keep the trip safe, handle disputes and complaints, and improve routes.
3.Improving pickup places and routes. Pickup points, the place and time of waiting and where the driver stopped are kept with the order number for 90 days and then deleted; after that only aggregated data not linked to trips remain. Tracks are used to improve routes only in anonymised form: without name and phone number, separately from the account.
4.Where they are kept: on servers in the Republic of Kazakhstan. Geodata are not sent outside the Republic of Kazakhstan, except for address search if Google search is turned on in the app: Google LLC (USA) receives the text of the query and the coordinates of the search point — without name and phone number (consent to the processing of personal data, point 4). Geodata are not published or disseminated in publicly available sources. Who receives them: the driver to whom the order is offered or assigned — the pickup address, stops, the destination point and the route; those to whom I myself have sent a link to the trip — where the car is now and the route, while the link is active; when SOS is called — emergency services (112, police, ambulance), to help, and my trusted contacts — a link to the trip; other third parties — only where the law requires it (a court, law enforcement bodies).
5.Term of the consent: while my ByFly Taxi account is active or until the consent is withdrawn.
6.Retention periods: the track, addresses and time of the trip are kept for 3 years after the end of the calendar year of the trip — for example, data of a trip in 2027 are kept until 31 December 2030. Then the route points and addresses are deleted. The price and the receipt of the trip are kept separately, without route points, for 5 years from 1 January of the following year. If there is a complaint, a road accident, a call via the safety button, a dispute or a request from the police or a court about the trip, its data are kept until the case is closed.
7.Withdrawal: in the app, "Profile → Documents", or via the contact of the person responsible for personal data processing (директор ТОО «ByFly Group», info@byfly.kz). After withdrawal new orders are not available, and after the current trip I am signed out of my account; I can use ByFly Taxi again by accepting the terms again. Data of trips already made are kept for the periods in point 6.