Privacy Policy

1. Introduction and Company Details

This personal data protection policy covers personal information, regardless of whether it is collected and stored in digital format, on paper, or in any other comparable manner.

The service is provided by Go2 Place S.L., a commercial company duly incorporated under Spanish law, with Tax Identification Number (NIF) B01745405 and its registered office at Calle Eneldo 3, C4, local 22 — Orihuela Costa — 03189, registered in the Commercial Registry of Alicante in Volume 4309, Folio 12, Sheet A-170633, Entry 1000173971259.

Go2 Place S.L. (hereinafter, "Rido") is the Data Controller of the personal data you provide to us. For any question about this policy, or to report a possible infringement of data protection regulations, contact us at info@rido.bike.

2. Applicable Legislation on Personal Data Protection

The processing of personal information is subject to current data protection regulations, including Regulation (EU) 2016/679 (GDPR), as well as Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights (LOPDGDD).

3. Collection and Use of Personal Data

We collect and store a range of personal information about our customers to provide the requested service and based on the following legal bases:

3.1 Data Collected and Purposes of Processing

• Identification and contact data: Name, national ID, address, telephone, email. Legal basis: performance of contract and legitimate interest.
• Financial data: Payment processing information. Legal basis: performance of contract.
• Geolocation data: Data concerning the location of the rented vehicle. Legal basis: performance of contract.
• End-of-ride and helmet verification photos: Photographs uploaded by the User via the App upon terminating a rental. Purpose: to confirm that the vehicle is legally parked, the attached helmet is locked in its dock, enforce contractual surcharges, and provide evidentiary defence in municipal sanction proceedings. Users should avoid capturing visible faces of bystanders or third-party license plates. Legal basis: performance of a contract (Art. 6.1.b GDPR) and legitimate interest (Art. 6.1.f GDPR).
• Usage data: Trip history, start/end times. Legal basis: performance of contract.
• Device data: IP address, device type, browser version, operating system. Legal basis: legitimate interest in ensuring the correct functioning of the service and fraud prevention.

3.2 Website Waitlist

Before the App launches, you can join the Rido waitlist on this website. We store the email address you enter, the language of the page, and the time you signed up. We then send you one email asking you to confirm the address, and record whether and when you confirmed it; if you do not confirm, we will not send you launch news. We use it only to tell you when Rido launches near you and to share launch details. Legal basis: your consent (Art. 6.1.a GDPR), which you can withdraw at any time by emailing info@rido.bike. We keep this data until you withdraw consent or ask us to delete it.

3.3 Special Categories of Data

Rido does not process special categories of personal data (e.g., racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, or data concerning health or sexual orientation).

4. Disclosure of Data to Third Parties

We may share your personal data with third parties in the following circumstances:

• Municipal Councils, Local Police, and Traffic Authorities: Go2 Place S.L. transmits the User's identification data (full name, DNI/NIE/Passport, address, telephone, email), trip timestamps, telemetry location logs, and end-of-ride photographs to the competent Policía Local, Ayuntamiento, or DGT in response to notifications of traffic infractions, improper parking tickets, helmet non-use, or municipal vehicle removals. Legal basis: compliance with a statutory legal obligation to identify the driver pursuant to Article 11 of the Spanish Traffic Law (Real Decreto Legislativo 6/2015 — TRLTSV) (Art. 6.1.c GDPR), and legitimate interest in defending against municipal liability (Art. 6.1.f GDPR).
• Cloud and IT providers: For data storage, App and website hosting and maintenance, email delivery, and service delivery.
• Payment providers: For processing fees securely.
• Insurance companies: For the management of claims related to Vehicle use.

Under no circumstances will we sell, trade, or otherwise transfer your personal information to outside parties, except as described in this policy or as required by law.

5. Links to Third Parties

Our App and website may contain links to third-party websites or applications that are not operated or controlled by Rido. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to read the privacy policies of every site you visit, particularly if you are providing personal information.

6. Security Measures and Data Retention

Rido has implemented appropriate technical and organisational measures (encryption, access controls) to protect your data. No method of transmission over the Internet or electronic storage is 100% secure, so we cannot guarantee absolute security.

Data is retained only as long as necessary:

• Account data: Retained for the duration of the account and up to 3 years post-closure.
• Ride and trip data: Typically retained for up to 5 years for billing, dispute resolution, and legal compliance.
• Waitlist data: Retained until you withdraw consent or ask us to delete it (see section 3.2).
• Cookie data: Retained in accordance with the Cookie Policy.

7. Your Rights as a Data Subject

• Right of Access: You may request confirmation as to whether your personal data is being processed and, if so, access that data along with a copy.
• Right of Rectification: You may request the correction of inaccurate personal data or the completion of incomplete data.
• Right of Erasure (Right to be Forgotten): You may request the deletion of your personal data when it is no longer necessary for the purpose for which it was collected, or when you withdraw consent, or when you object to the processing.
• Right to Restriction of Processing: You may request the restriction of processing of your data in certain circumstances, such as when you contest the accuracy of the data.
• Right to Data Portability: You may request to receive your personal data in a structured, commonly used, and machine-readable format, and have it transmitted to another controller.
• Right of Objection: You may object to the processing of your data based on legitimate interests, including profiling.
• Right not to be subject to automated decisions: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or significantly affects you.

Contact us at info@rido.bike with valid identification to exercise these rights.

8. Amendments to the Privacy Policy

Rido reserves the right to modify this Privacy Policy at any time. Such modifications shall become effective upon their publication on our website and/or through the App. We recommend that you review this page periodically for the latest information on our privacy practices.

If the changes are substantial, we will make reasonable efforts to notify you through the App or via email prior to the changes taking effect, particularly where the changes affect the processing of your data.

9. Right to File a Complaint

If you believe your data has been processed incorrectly, you have the right to file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD) via www.aepd.es.

Cookie Policy

The Rido website does not set traditional tracking cookies. When you answer the consent banner, that choice is stored in this browser's local storage so we do not ask again. Cookieless analytics (Vercel Analytics, only on pages served from Vercel's hosting) and our own anonymous counts of waitlist-form views, submissions and share clicks run only if you choose Accept. If you decline, or do not answer, neither runs. We do not use advertising cookies or cross-site tracking.

What runs on your device, the legal basis, and how to withdraw consent are set out in the Cookie Policy.