Last updated: 19 December 2024
At o2o, besides offering high-quality bicycle leasing, we also attach great importance to protecting your privacy This privacy policy ("Privacy Policy") applies to all the processing activities of o2o (as defined below) as a data controller.
Please read this Privacy Policy together with our Cookie Policy and our General Terms and Conditions. o2o may update this Privacy Policy in the future: the latest version can always be found on our Website (as defined below).
You can find our archived Privacy Policy (Policies) in pdf format here.
For example, as a result of your commercial relationship or recent contact with o2o or as a result of visiting or taking any action on our "Website" (www.o2o.be), we may collect, store and otherwise process personal data about you or, if you are a company, your employees | representatives ("your personal data").
This Privacy Policy describes (i) how we collect, handle and store your personal data; (ii) the rights you may exercise in relation to your personal data; and (iii) the measures which we are taking to protect it and to keep your personal data secure.
o2o respects your privacy and we always strive to act in accordance with all applicable privacy legislation, such as (non-exhaustively): (i) the General Data Protection Regulation 2016/679 dated 27 April 2016 ("GDPR"); (ii) the Belgian Privacy Act dated 30 July 2018; (iii) the ePrivacy Directive 2002/58/EC dated 12 July 2002, including future amendments and revisions thereto; and/or (iv) any (future) national legislation relating to the implementation of the GDPR (collectively, "Privacy Legislation").
We are o2o BV, with our registered office at Burggravenlaan 31, 9000 Ghent, Belgium, LER Ghent, Ghent division, with enterprise number 0647.826.178 ("o2o" or "we | us")o2o, as the owner or principal tenant, leases out bicycles to the employer, who will make them available to its employees as described and represented at www.o2o.be, and moreover, o2o is a provider of related online services through the Myo2o Platform ("Service"). It also owns the Website.In light of the Privacy Legislation, o2o will act as a data controller for your personal data for the purposes described in this Privacy Policy. This means that we are in control of (and therefore responsible for) your personal data.Preliminary remark: If you are reading this Privacy Policy as an employee of an employer who relies upon o2o for the provision of an employee leased bicycle, please note the following:
For more information as to how we process your personal data as a controller, please see our Data Processing Policy.
Which personal data we collect, store and otherwise process and the objective for which we process it may differ depending upon your relationship with o2o. Specifically, we identify five different scenarios:
❑ You are browsing our website;
❑ You wish to receive updates and newsletters related to o2o services and products;
❑ You are a canvasser and/or are seeking a commercial relationship with o2o;
❑ Your company is an active customer of o2o and/or you are an authorised user/cyclist on the Myo2o Platform; or,
❑ You are | your company is a partner or a supplier of o2o.
Receiving the o2o white paper
Objective: Sending the information document related to bicycle leasing via o2o
Personal data
☐First name
☐Surname
☐Telephone number
☐Email address (personal/business)
☐Company name
☐Number of employees
☐Position
Legal basis: Authorisation
Retention period: Up to one (1) year after your contact with o2o
Contact o2o via the contact form on the Website
Objective: For answering any questions and/or starting a conversation
Personal data
☐First name
☐Surname
☐Telephone number
☐Email address (personal/business)
☐Status: employee/HR/bicycle dealer
Legal basis: Authorisation
Retention period: Up to one (1) year after your contact with o2o
Cookies
When you browse our Website, we may also collect your personal data via cookies stored on your device(s) in order to optimise the functioning of the Website. Please see our Cookie Policy for more information.
The o2o newsletter | update
Objective: Providing more information about (new features of) the Myo2o Platform, our services or related product
Personal data
☐First name
☐Surname
☐Email address (personal/business)
Legal basis: Authorisation
Retention period: Until such time as you have objected to the processing of personal data for this objective (cf. Section 8 - "right to object")
Request for a meeting with an o2o Bike Lease Expert
Objective: Set up a meeting in order to get more (personal) information about bicycle leasing via o2o for your company
Personal data
☐First name
☐Surname
☐Telephone number
☐Email address (personal/business)
☐Company name
Legal basis: Authorisation
Retention period: Until you have requested to be contacted no longer by o2o or until one (1) year after your last contact with o2o
General communication with o2o & canvassing by o2o
Objective: Conduct quality interviews (via email, phone or social media channels) in which o2o provides more information about its services
Personal data
☐First name
☐Surname
☐Telephone number
☐Email address (personal/business)
☐Company name
☐Position
☐Number of employees
Legal basis: Legitimate interest
Retention period: Until you have requested to be contacted no longer by o2o or until one (1) year after your last contact with o2o
Registration for | participating in an o2o event
Objective: Getting an overview of event participants, as well as follow-up communication after the event
Personal data
☐First name
☐Surname
☐Telephone number
☐Email address (personal/business)
☐Company name
Legal basis: Authorisation
Retention period: Until you have requested to be contacted no longer by o2o or until one (1) year after your last contact with o2o
Registration for | participating in an o2o test event
Objective: Organising an event to test bicycles and getting an overview of the event participants, as well as follow-up communication after the event
Personal data
☐First name
☐Surname
☐Telephone number
☐Body length (*)
☐Email address (personal/business)
☐Company name
☐Year of birth
Legal basis: Authorisation
Retention period: Until you have requested to be contacted no longer by o2o or until one (1) year after your last contact with o2o
(*) So that you can test a suitable bicycle, we ask you for your height before participating in the test event.
Please note that your employer is the data controller for all the personal data provided or submitted to o2o by your employer while using the Services / Myo2o Platform. In such a case, o2o facilitates only the Service / Myo2o Platform. In this light, please refer to our Data Processing Policy.
Quote | Orders
Objective: Preparation of (additional) orders for the use of the services of o2o
Personal data
☐First name
☐Surname
☐Telephone number
☐Email address (personal/business)
☐Company name
☐Position
☐Driving licence: yes or no (*)
☐Information provided optional
Legal basis: Necessary for the performance of the agreement
Retention period: Until one (1) year after the termination of the commercial relationship between your company and o2o
(*) in the case of a speed pedelec, o2o needs to know whether or not you hold a valid driving licence. We do not process the specific details of your driving licence in the process.
Creating an account on the Myo2o Platform
Objective: Creating and setting up an account on the Myo2o Platform for cyclists, HR managers and/or bicycle dealers
Personal data
☐First name
☐Surname
☐Email address (personal/business)
☐Employee number
☐Company name
☐Login
☐Password
☐Preferred language
Legal basis: Necessary for the performance of the agreement
Retention period: Until one (1) year after the termination of the commercial relationship between your company and o2o
Invoicing
Objective: Preparing invoices for the use of the services of o2o
Personal data
☐First name
☐Surname
☐Address
☐Email address (personal/business)
☐Company name
☐VAT number
☐Account number (IBAN)
Legal basis: Necessary for the performance of the agreement
Retention period: Until one (1) year after the termination of the commercial relationship between your company and o2o
General communication and (technical) support
Objective: Enabling communication with and support for customers (and cyclists) via customer support
Personal data
☐First name
☐Surname
☐Telephone number
☐Email address (personal/business)
☐Address
☐Preferred language
☐Company name
☐Position
☐Information provided optional
☐IP address
Legal basis: Necessary for the performance of the agreement
Retention period: Until one (1) year after the termination of the commercial relationship between your company and o2o
General communication and delivery of services
Objective: Communicating as part of our commercial relationship
Personal data
☐First name
☐Surname
☐Telephone number
☐Email address
☐Company name
☐Position
☐Information provided optional
Legal basis: Necessary for the performance of the agreement
Retention period: For the duration of your commercial relationship with o2o and in any case in agreement with any (processing) agreements entered into with o2o
Invoicing
Objective: Payment of invoices for services rendered (including communication about this)
Personal data
☐First name
☐Surname
☐Telephone number
☐Email address
☐Account number (IBAN)
☐Address
☐Company name
☐Position
☐VAT number
Legal basis: Necessary for the performance of the agreement
Retention period: For the duration of your commercial relationship with o2o and in any case in agreement with any (processing) agreements entered into with o2o
More information about the applicable basis for each of the listed processing activities can be found in Section 3 above.In the event that the legal basis for processing is a legitimate interest, o2o will always (i) assess whether it is proportionate to the objective for which your personal data has been collected and used; and, (ii) take into account your reasonable expectations and ensure a balance with your fundamental rights and freedoms. If we cannot guarantee this, we will stop storing | using your personal data or we will establish a new legal basis.
More information about the applicable retention periods for each of the listed processing activities can be found in Section 3 above.
o2o will not disclose your personal data to third parties unless it is necessary to fulfil the purposes as described in this Privacy Policy. In this context, (some of) your personal data may be provided to third parties ("Sub-processors"):
Naturally, we have ensured that the necessary agreements or similar legally binding arrangements are in place in order to ensure that these third parties treat your personal data in accordance with the Privacy Legislation (for example, Article 28 of the GDPR). Moreover, we may transfer your personal data:
In the event that any of the Sub-processors or other recipients are located in a country outside the European Economic Area, o2o will ensure that one or more of the listed EU-approved safeguards are in place:
The Privacy Legislation (for example, the GDPR) gives you certain rights over your personal data in relation to o2o. You may exercise these rights by contacting us at privacy@o2o.be, as indicated in Section 11.Access:
you may ask for confirmation whether or not personal data relating to you is being processed. If that is the case, you may ask us to give you a copy of your personal data. We may charge you a small fee for this service;
Rectification: you may ask us to correct or complete information which you believe is incorrect or incomplete;
Erasure: you may ask us, under certain circumstances, to delete your personal data. Please note that in this context, certain services will no longer be accessible and/or can no longer be provided.
Objection: you may object to the processing of your personal data by us under certain circumstances.
Restriction of processing: you may ask us to restrict the processing of your personal data, unless we have legitimate interests in processing your personal data which override your interests.
Data portability: you may ask us to transfer your personal data to another organisation under certain circumstances, or directly to you in a commonly used structured format which can be read by an automatic device.
Updates | Newsletters. If you do not wish to receive any of our o2o communications any longer, you may object to these direct marketing communications by contacting us at privacy@o2o.be. Upon receipt of your objection, we will stop processing your personal data for o2o communications. This will happen free of charge.
o2o undertakes to take reasonable, physical, technological and organisational precautions in order to prevent (i) unauthorised access to your personal data, and (ii) the loss, misuse or alteration of your personal data.
Notwithstanding the above technical and organisational measures, the controls which it implements and the actions which it proposes in this context, an infallible level of security cannot be guaranteed. As no method of transmission or dispatch over the internet, nor any method of electronic storage is 100% secure, we are unable to guarantee absolute security.
Finally, the security of your account will also partly depend upon the confidentiality and complexity of your password. Accordingly, o2o strongly recommends that, if you find that someone has gained access to your account, you change your password immediately and contact us.
We have the right to update this Privacy Policy by posting a new version on the Website, whereby we will indicate the date of the revision at the top of this Privacy Policy. As such, it is strongly recommended that you check the Website and the Privacy Policy page regularly in order to ensure that you are aware of the most recent version and any changes.
Notifications under this Privacy Policy (such as exercising your rights as a data subject) and/or questions or comments about the provisions of this Privacy Policy should be addressed to privacy@o2o.be.
Are you unhappy with the way in which we collect, store or otherwise handle or secure your personal data? We are sorry to hear that and we will be ready to take all the measures necessary to remedy this situation. Please contact us as indicated above.
You also have the right to lodge a complaint with the competent supervisory authority (that being the Belgian Data Protection Authority or the data protection authority of (i) your place of residence or (ii) your place of work) if you believe that the processing of your personal data is in breach of the Privacy Legislation You can send an email to the Belgian Data Protection Authority at contact@apd-gba.be or any other email address provided by the Belgian Data Protection Authority (http://www.gegevensbeschermingsautoriteit.be/burger/acties/contact).
You can consult our Cookie Policy here. You can consult our General terms and conditions here.