Bip&Drive > Privacy policy

Privacy policy

BIP & DRIVE PRIVACY POLICY

This privacy policy applies to all users and customers registered through the Bip&Drive website www.bipdrive.com, its mobile application or through our telephone customer service, hereinafter referred to as the ‘Platform’. Bip&Drive, E.D.E., S.A. is the data controller, a company incorporated under Spanish law, with registered office at C/ Serrano 45, P, 28001 Madrid, Tax ID A-86969607, and telephone number 911 113 737 (hereinafter, ‘Bip&Drive’, ‘we’, ‘us’, ‘our’ or ‘ours’).

This Platform is not intended for use by minors under the age of 18 without the express consent of their parents or guardians.

We understand the importance of your privacy. Please read this policy carefully to understand how Bip&Drive, as the data controller, uses your personal information in the context of:

Your registration and use of the Platform.
The purchase of our services or products, including:

The use and subscription of payment services on motorways and the use of the Via-T device.
The use of the services offered on the Platform, such as service stations, car parks and other associated services.
The use of services associated with geolocation products marketed by us through the Platform or through points of sale, whenever these products have been registered for the provision of value-added services, hereinafter ‘IoT Products’. IoT products include, by way of example, V16 beacons connected and approved by the DGT (Spanish Traffic Authority) that have been registered so that the customer can enjoy the services associated with the beacon registration, or services offered through our Platform.
The management of your purchases, product orders and services through the Platform.

Your participation in loyalty programmes, promotions and commercial activities organised by Bip&Drive.

This privacy notice describes, in accordance with Spanish and European data protection regulations, the following:

1. What data we will process
Bip&Drive may collect and process the following personal data:

PERSONAL DETAILS	DESCRIPTION
Identification and contact details	Name, surname, Date of birth email address, phone number postal address, your vehicle registration number unique identifier of your IoT Product, purchased and registered for a service, IMEI or serial number details of your contracted device (OBE, on-board equipment), PAN, product serial number tax identification number (ID card, foreign resident ID number, tax ID, passport number)
Qualified identification data	This data consists of identification and contact details, personal data contained in the information additionally requested from you, including, but not limited to, date and place of birth, nationality, type and number of identity document (ID card, passport, foreign resident ID number, etc.), residential address, profession and economic activity, source of funds (if necessary), purpose and nature of the business relationship, and supporting documents such as a copy of a valid identity document, proof of address (utility bill, certificate of residence, etc.) and, in some cases, additional documentation on the source of income or wealth. When acting on behalf of another person, the personal data contained in the accreditation of said representation; and a photocopy of the ID card, passport or foreign resident ID number (NIE).
Payment and billing details	In addition to identification and contact details, data relating to the following is processed: Payment information for subscriptions, orders, reservations, and returns: for the product or service requested, for which product details, serial number, and billing address will be processed. Data related to your consumption of products or services, transaction number, transaction date, start date and time, and end date and time, registration number, area, rate, and amount. Billing information: name of the person, address, tax identification number (VAT or tax ID), IBAN account number. In the event of payment through a payment provider such as Redsys Servicios de Procesamiento, S.L., the data will be collected and processed by Redsys Servicios de Procesamiento, S.L. in accordance with its privacy policy in the pop-up window made available to the user. We will only have a reference token regarding the acceptance or rejection of the payment.
Geolocation data	Identification and contact data associated with real-time geolocation data will be processed when activated, and the operating status data of the IoT Product will be processed whenever the Product (e.g. the beacon) is registered for the provision of associated services.

2. How we use your data
Bip&Drive will process your personal data for the following purposes:

Based on the contractual relationship requested by you, we process your data for the following purposes:

PURPOSE	DESCRIPTION OF THE PROCESSING AND THE DATA PROCESSED
To manage your account and access to the Platform.	We process your identification and contact details to manage your registration and enrolment through the Platform.
To manage purchases, returns and deliveries	When you make a purchase or request a service through our Platform, we process your identification and contact details, payment and billing information in order to process your order, provide you with the invoice, deliver the products and bill you for the services contracted.
To manage location-related services	We will process identification and contact data, geolocation data, and payment and billing data to charge you or offer you services related to your location, such as offering you parking services near your location, services related to the activation of your registered IoT Product, or information related to regulated parking zones in a specific location.
To manage payment services as an electronic money institution	We will process your identification and contact details, qualified identification data, and payment and billing details to provide you with payment services through your Via T device.
Provide customer service and technical support	If you request information about any of the services contracted, have problems using the services or devices, or have any complaints, requests or claims, we will process your identification and contact details, payment and billing details, and qualified identification data, the latter when required for the provision of payment services in accordance with applicable regulations.
To manage complaints via the mailbox defensa.cliente@bipdrive.com	We will process identification and contact details and qualified identification data as an entity supervised by the Bank of Spain through the specialised and independent customer service in relation to payment services in compliance with regulations and as detailed in the following link: https://www.bipdrive.com/defensa-del-cliente/ . .
To manage your participation in contests, prize draws, loyalty programmes and other promotional activities	To manage your participation in prize draws or competitions in accordance with the specific terms and conditions of each promotion, we will process your identification and contact details. For each promotional activity in which you participate, the legal terms and conditions and the contract required to participate in the promotion will be available, where we can provide you with more detailed information about the processing of your data.

Based on legitimate interest or compliance with a legal obligation, we will process your data for the following purposes:

PURPOSE	DESCRIPTION OF THE PROCESSING AND THE DATA PROCESSED
Compliance with obligations related to regulations on the prevention of money laundering and terrorist financing	Bip & Drive will process qualified identification data in cases of high-risk transactions, specific thresholds or customers subject to greater control, which will be carried out in compliance with the provisions of Article 32 of Law 10/2010 on the prevention of money laundering and terrorist financing. In accordance with this regulation.
To manage debt collection and registration in credit rating files	We will process your identification and contact details, as well as your payment and billing details, in order to carry out collection actions in the event of non-payment on your part. If the non-payment persists and the legal requirements established in Article 20 of the LOPDGDD are met, your details may be included in credit and solvency files, such as Experian Bureau de Crédito S.A. or others authorised in accordance with current legislation. Prior to inclusion in these files, a payment request will be sent to the contact address provided, warning you of the registration and giving you the opportunity to regularise your situation.
Fraud prevention and monitoring	We process identification and contact details, as well as payment and billing information, to consult creditworthiness and credit information files in order to verify financial solvency in the context of contracting payment services, guarantee payment security, detect and prevent theft, fraud, financial security risks, and detect malicious network attacks directly or through our providers. This processing is carried out on the basis of the legitimate interest of both parties, to prevent misuse of the Platform, erroneous and fraudulent charges and access, and to guarantee the protection of users. In this regard, Bip&Drive uses an automated system that analyses certain parameters during the registration process on the Platform. This system does not make automatic decisions that affect the user, but rather generates alerts when it detects unusual patterns. These alerts are manually reviewed by our security team, who may request additional information or apply verification measures if necessary. If a user believes that their registration has been affected by this process, they can contact our customer service department for further information.
To send messages in order to offer you Bip&Drive services.	We process your identification and contact details, payment and billing details, and geolocation data in relation to these particular services in order to inform you of promotions or discounts that may be of interest to you, such as offers from motorway concessionaires, subscription service offers, or new services and features of the Platform. You may object to this processing in accordance with clause 5, as well as at the time of registration and through your private area on the Platform.
Business analysis and improvements to our products and services	We will process your identification and contact details, as well as your geolocation data or billing and payment details, in order to measure and improve our services, and to offer you services related to the products and services you have already contracted with us. To consult you and analyse your level of satisfaction with customer service or with the products or services you have requested or through our Platform. For example, we may call you from customer service to help you configure or install our services or products and assist you with any questions you may have. To record calls and conduct quality surveys aimed at determining the degree of satisfaction of our customers and users with our products and services and identifying areas where we can improve. We understand that the processing of this data is also beneficial to you because the purpose is to improve your user experience and offer a higher quality service. If you access our Platform, we inform you that we will process your browsing data, if you have given your consent in accordance with the cookie policy that you can consult here Cookie Policy for analytical and statistical purposes, i.e. to understand how users interact with our Platform and with the actions we may carry out on other websites and apps, and thus be able to make improvements.

Based on your consent, we process the following data for the purposes described below:

PURPOSE	DESCRIPTION OF THE PROCESSING AND THE DATA PROCESSED
Cookies	For more information about how we use cookies, please see the Cookie Policy.
To send commercial communications about other companies' products in order to offer you their services in the transport, insurance and automotive sectors.	Whenever you have ticked the corresponding box, you give your consent for Bip&Drive to send you commercial communications from third parties, for which we will process your identification and contact details, billing and payment details, and your geolocation data. You may unsubscribe at any time using the mechanism indicated in each commercial communication you receive.
To send push notifications to your device or via SMS or WhatsApp	We process your identification and contact details and your geolocation data provided that you have agreed to receive these communications on your device and, where applicable, have enabled location or geolocation services on your device. Push notifications: consent is requested the first time you access the app. These can also be enabled/disabled in device settings. Geolocation permissions: these are requested the first time you access a service that needs to use this data (e.g. car parks, on-street parking meters, refuelling, car washes, etc.), i.e. your consent is requested on any screen where we have a map. These can be enabled/disabled on the screen itself and also in the device settings. Alarm and reminder permissions: these are specific to the Android operating system and are used to send notifications to the customer when a parking session on a parking meter is about to end or has ended. On iOS, they are not requested because they are granted by default when the user accepts the terms and conditions. These can also be enabled/disabled in device settings. WhatsApp: consent is requested through an action on your part and you can unsubscribe through the WhatsApp channel itself, by sending an email to privacidad@bipdrive.com or by calling customer service and indicating that you wish to revoke the consent you had given to receive communications through this channel.

3. How we will share your data
Bip&Drive may share your data with:

Financial and payment entities: to manage payments and collections within the Platform.
Collaboration with mobility partners for the provision of their services, such as local councils with regard to parking in regulated parking areas, in car parks managed by both public and private companies, ITV stations or any other partner in our network, including motorway concessionaires, where data such as location or registration number is essential for the provision of the service.
Partners who provide value-added services related to the geolocation of your IoT Products, such as Inspide or third-party partners for value-added services related to the registration of the IoT Product and its operation, as well as services related to mobility.
Logistics service providers including transport and delivery: for the logistics and delivery of products such as IoT products or ViaT.
A <SFV5411º987YTREWQ Traffic information systems and other mobility tools related to the activation of the IoT Product and value-added services contracted by the customer.
Insurance companies, repair shops, tow trucks, and emergency services: in the event of a traffic incident that requires assistance in accordance with the additional services you have selected.
Digital marketing and advertising service providers, as well as customer service providers: to manage enquiries, invoice management and payments, as well as information and technical support.
Debt files: such as Experian Bureau de Crédito S.A., in the event of non-payment.
Public authorities: such as the Bank of Spain, the Treasury, judges, courts and law enforcement agencies, when legally required.
Business reorganisation: Your personal data may also be shared as part of a merger, acquisition, sale of assets (such as service agreements) or transition of the service to or by another company, in which case you will be notified of such transfer.

4. How long we store your data
Bip&Drive will retain your personal data for as long as necessary to fulfil the purposes described in this policy and in accordance with applicable legal regulations. If you would like to know more about our procedures or policies regarding the limitation of processing and storage of your personal data for a more specific case, please contact us at privacidad@bipdrive.com.

Personal Data	Duration of storage
Identification and contact details	Management of your account, sales analysis and enhancements	We will retain your contact details for a maximum of 5 years from the date of your last contact with us or from the moment you request to be removed from our database. The data will remain blocked and will be used for the purpose of responding to legal actions or legal claims. Your contact details used for the purpose of sending you communications by email or SMS as described in this document will be kept for as long as you do not object to the processing of your data for commercial purposes and for a maximum of 3 years from the date you request to unsubscribe.
	Customer service	We will retain customer service information for as long as your query remains open and for a maximum of 5 years thereafter, including those received via defensa.cliente@bipdrive.com. The data will remain blocked and will be used for the purpose of complying with applicable tax obligations or responding to legal actions or claims.
	Participation in contests and promotions	The data provided in the context of user participation in contests and prize draws will be deleted within a maximum period of 5 years from the date of closure of the promotion or delivery of the prize to the winners in order to deal with any possible claims or legal obligations, e.g. in relation to tax or consumer and user matters.
Qualified identification data	Management of non-payment and fraud prevention	We will retain your data for 5 years from the last date of the unpaid claim until the debt has been paid, and it will be deleted if the debt is settled or if the inclusion does not comply with legal requirements. They shall be retained for as long as the debt remains outstanding and until the debt claim becomes time-barred.
Qualified identification data	Prevention of money laundering and financing terrorism	We will retain your qualified identification data, which will remain blocked, for 10 years from the date you request your withdrawal or from the date you are notified that you do not meet the requirements to be a customer, in accordance with Article 25 of Law 10/2010 in relation to data processed for the prevention of money laundering and terrorist financing.
Payment and billing details	Purchase management.	We will retain order, return, billing, and payment information for a maximum of 10 years from the date of the order, remaining blocked, in order to comply with applicable tax and financial laws and regulations and respond to legal actions or claims.
Geolocation data	Provision of geolocation-related services	We will retain your geolocation data for the duration of your use of the IoT Product and for a maximum of 5 years from the last use of the services or from the moment you request to unsubscribe. The data will remain blocked and will be used for the purpose of responding to legal actions or claims.

5. Your rights and options
You have the right to exercise any of the following rights:

access	to know which data is being processed and the processing operations carried out with your data.
correction	To modify any inaccurate personal data
deletion	To request that we erase your personal data, when this is possible and in certain circumstances.
limitation of processing	restriction of the processing of your personal data when the accuracy, legality or necessity of the processing of the data is in doubt, in which case we may keep the data blocked for the exercise or defence of claims
opposition	You may object to the processing of your data for certain purposes, such as sending commercial communications or improving our services and products, or by disabling, for example, location tracking or the receipt of notifications on your mobile device.
portability	You can receive certain data that you have provided to us in a readable format.

To contact our Data Protection Officer, or if you have any complaints or queries about how Bip & Drive processes your personal data, you can do so by sending an email to privacidad@bipdrive.com or to our address, indicating the right you wish to exercise and your identification and contact details.

Furthermore, we inform you that you have the right to lodge a complaint with the Spanish Data Protection Agency if you believe that Bip & Drive is not processing your personal data in accordance with this privacy notice or with applicable data protection laws.

6. Updates to this policy If we update this privacy notice, we will notify you in advance of any substantial changes that affect how your personal data is processed. The most current version of this privacy notice will always be available here. You can check the ‘last updated’ date at the bottom to see when this privacy notice was last updated. Bip&Drive may modify this Privacy Policy at any time.