Privacy statement
DOCKR B.V., also trading under the name “Ride Today”, established in Utrecht (the Netherlands), registered with the Dutch Chamber of Commerce under number 72904364 (hereinafter: Ride Today).
Ride Today considers the protection of personal data to be of essential importance. We therefore process your data with the greatest possible care. With this privacy statement we inform you about how we handle personal data.
1. Who is responsible for processing your data?
In this privacy statement Ride Today (hereinafter: “Today” or “we”) describes how we, as the data controller, handle your personal data when you use Today’s services, a vehicle (equipped with an IoT device) or this website.
2. What is personal data?
Information relating to an identified or identifiable natural person is personal data. Today equips its vehicles with an IoT device (see below under B). Although vehicle data are not, in principle, personal data, a vehicle is always used by a person. Because data about a person can be combined with vehicle data, we treat all data as personal data.
3. Personal data we process :
We process your personal data (and/or the data of users of a vehicle) because you provide data to us yourself when entering into an agreement with us, when you use a vehicle, or when you use this website.
A) Data generated by your use of our services and/or website
If you use Today’s services, such as a rental agreement for the use of a vehicle, or if you otherwise contact us, we process—within the scope of our services and depending on your exact use—the following (personal) data:
· Data necessary to make vehicle rental possible, such as your contact details, name, and address;
· Data necessary for financial administration, such as your bank account number, name, and address;
· Your communication preferences and settings;
· Browsing behaviour, determined on the basis of our own observations or cookies (see also Article 9 of this privacy statement);
· Data relating to your devices, such as a MAC address, IP address, or other number;
· Data about your use of our customer service.
B) Data processed via an IoT device in Today vehicles
Each vehicle issued by Today is equipped with an IoT device. If you enter into a rental agreement with Today, it is technically possible to read specific information from the vehicle. Data collected and processed via an IoT device include, among other things: :
ODO/odometer readings, speed, (user) settings of the vehicle, remaining battery duration and assistance, battery use and status, motor temperature, usage time, time indication, vehicle identification data, vehicle GPS data, and data from the IoT device itself.
Processing these data is necessary for our services and the (periodic) maintenance of the vehicles. Today has chosen to install an IoT device in the vehicles partly because of their high replacement value. In this way, Today aims to offer its vehicles to you at as sharp a price as possible and to ensure they can be used as smoothly as possible.
4. Processing: legal bases and legitimate interests
Personal data are processed on the basis of the following legal grounds:
1. Consent;
2. Execution of an agreement with you;
3. Legal obligation;
4. Performance of a task carried out in the public interest;
5. Legitimate interest of Today or a third party.
Legitimate interests include, among others: security, (crime) prevention, vehicle maintenance, IT management, research and analysis of our own products or services, business operations, legal affairs, and internal management.
5. Purposes for processing personal data
When processing personal data, we act carefully. We only use data necessary for our services. Today processes personal data for the purposes listed below. The number after each purpose corresponds with the legal basis mentioned in Article 4 of this privacy statement.
A) Purposes for the performance of our services
· Delivering and collecting the vehicle and carrying out interim maintenance [legal basis: 2 and 5];
· Maintaining Today’s administration for financial and tax obligations, including (collective) invoicing for our services [legal basis: 2 or 3];
· The “lost and found” process for stolen or lost vehicles and, in case of non-payment, tracking [legal basis: 2 and 5];
· Communicating with and informing you and providing service
o (for example via customer service) [legal basis: 2 or 5];
· Providing service, for example in case of maintenance, repair and/or replacement of the vehicle [legal basis: 2 and 5].
B) General purposes
· Building and maintaining the customer relationship [legal basis: 2];
· Providing customer service, including service related to the use of services and handling complaints and requests [legal basis: 2];
· Processing personal data into management information [legal basis: 2 and 5];
· Conducting market research, including measuring customer satisfaction, to improve our business operations, brands, services and products [legal basis: 5];
· (Further) developing and improving new and existing products and services [legal basis: 5];
· Complying with legal obligations, resolving disputes and enforcing our rights and agreements [legal basis: 2, 3 or 5];
· Analysing cookies from our website to tailor our communications as well as possible to your personal preferences [legal basis: 1 or 5].
6. No processing of data of persons under 16 years of age
We do not intend to collect data from persons younger than 16 years. We advise parents to be involved in their children’s (online) activities to prevent Today from processing their personal data.
7. Sharing with third parties
Today shares your personal data with third parties in, among others, the following cases and for the corresponding reasons. The number after each purpose corresponds with the legal basis mentioned in Article 4 of this privacy statement:
· To ensure that we can properly meet the agreements made. This includes maintenance of a vehicle by a Service Partner, arranging transport or roadside assistance, and all other activities necessary to ensure you remain satisfied with us [legal basis: 1, 2 and 5];
· If we are legally obliged or authorised to provide personal data to third parties [legal basis: 1, 2, 3 or 5];
· If we suspect a violation of third-party rights, criminal offences or abuse, we may provide personal data to third parties with a legitimate interest or to authorities serving the public interest. These may also include enforcement authorities such as the Public Prosecution Service or supervisory authorities [legal basis: 3, 4 or 5];
· Today may also share your data due to legitimate business interests, such as maintaining a central administration or customer service and analysing our services to you [legal basis: 2 and 5];
· With parties assisting Today in its services who are not processors (such as accountants and (legal) advisers) [legal basis: 5];
· For business-economic purposes (such as sale of business activities or shares or a reorganisation) [legal basis: 5].
Today also uses services of third parties acting as “processors”, such as hosting providers. If such third parties qualify as processors under applicable data protection law, Today will make written agreements with them. These service providers will process personal data only in accordance with Today’s instructions and under Today’s control.
If personal data are sent to a recipient abroad, this generally occurs only to a recipient in a country that, according to the European Commission, offers an adequate level of protection for personal data. If personal data are sent to a recipient in a country that does not offer an adequate level of protection, Today will ensure the legally required safeguards are put in place.
If you wish to receive further information about the transfer of your personal data to countries outside the European Economic Area, you may contact Today’s Data Protection Officer (see Article 12).
8. Retention of your data
We will retain personal data as long as necessary or permitted within the framework of the purposes described in this Privacy statement and in accordance with applicable law. The criteria used to determine our retention period include:
· The duration of the period during which we have an ongoing relationship with you and provide services to you (for example, as long as you continue to use our services);
· Whether there is a legal obligation we must comply with (certain laws require us to retain transactions for a certain period before they may be deleted); or
· Whether retention is desirable in view of our legal position (such as with regard to limitation periods, disputes, or investigations by regulatory authorities).
9. Mapping online activities
When you visit our website or use our services, we may use cookies, web beacons and other similar technologies to store information in order to personalise advertisements and offer you a better, faster and safer customer experience. If you do not want cookies, you can indicate this. For more details about the use of cookies, we refer to our cookie statement (https://DOCKR.nl/cookies/). Our website may contain links to other websites. We are not responsible for how these websites handle your personal data. Please consult the privacy statement of the website you visit.
Today offers customers the possibility to use a Service Portal. In this online Service Portal, customers can submit customer service reports, collect overviews (if available), and contact Today and external parties (see chapters 5 and 7). Customers are responsible for handling their login details carefully and not sharing them with third parties.
10. Your rights, including the right to object
You have the right to know which personal data we process about you and to whom we have provided your personal data. If you have given consent for processing your personal data, you also have the right to withdraw it. If you wish to access, correct, update, restrict or delete the personal data we process, object to the processing of personal data or to direct marketing, receive an electronic copy of your personal data to transfer to another company (insofar as the applicable law grants you that right), or exercise your right to be forgotten, you can contact the service desk via the contact details listed under Article 12.
We ask you to describe your request as clearly as possible, specifying which personal data it relates to. We will respond to your request as soon as reasonably possible, and in any case within the legally required time limits. Finally, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
You can exercise your rights only insofar as the law grants them to you. To ensure a request is made by you, we may ask you to include a copy of your identity document. We do so only if necessary to identify you, and we ask you to make the photo, MRZ (machine readable zone; the strip of numbers at the bottom of the passport), passport number and citizen service number (BSN) unreadable on that copy. We will destroy the copy immediately after we have identified you.
11. Security and protection of data
Today applies appropriate security measures to prevent misuse, loss, unauthorised access, unwanted disclosure and unauthorised modification as much as possible. Today has taken both technical and organisational measures to secure your personal data, such as applying encryption techniques. These security measures are periodically reviewed based on threats.
12. Contact
DOCKR B.V. trading as Ride Today is statutorily established in Utrecht. For questions and/or comments regarding this privacy statement, please contact:
DOCKR B.V. trading as Ride Today
Attn: Privacy
Gietijzerstraat 46
3534 AV Utrecht
E-mail: info_nl@ridetoday.io
13. Changes
The way we process personal data, and the composition or amount of data we process, may change. We therefore reserve the right to amend this privacy statement. If necessary, you will be informed of any change.
Version: November 2025