Nous souhaitons vous informer ci-après sur les types de données personnelles traitées par Black City Cars et sur les finalités de ce traitement. Nous souhaitons également vous informer des aspects juridiques importants de la protection des données, tels que vos droits.
À l’exception de la Section 1. Inscription – Compte Black City Cars, le responsable du traitement de vos données (responsable du traitement) concernant tout contenu, réservation et organisation de services de transport sur le site web suivant : www.blackcitycars.com, est Black City Cars, 1009, rue Saint-Ferdinand, Montréal (QC), H4C 2T5, Canada.
Pour toute question concernant la protection des données, veuillez adresser votre demande à l’adresse courriel suivante : info@blackcitycars.com.
Vous pouvez également contacter notre délégué à la protection des données par courrier à l’adresse susmentionnée (référence : délégué à la protection des données).
Les catégories de données personnelles suivantes peuvent être traitées par nous dans le cadre de nos services :
Données de base : Il s’agit, par exemple, du prénom, du nom, de l’adresse (privée et/ou professionnelle) et de la date de naissance d’une personne.
Données de communication : Il s’agit, par exemple, du numéro de téléphone, de l’adresse e-mail (privée et/ou professionnelle), du numéro de fax, le cas échéant, ainsi que du contenu des communications (e-mails, lettres, fax, etc.).
Données contractuelles : Il s’agit, par exemple, du lieu et de l’heure de prise en charge, de la destination, des détails de paiement et des informations sur les programmes de fidélité et d’affiliation.
Données facultatives : Il s’agit des données que vous nous fournissez volontairement et que nous ne vous demandons pas expressément, comme votre préférence pour une catégorie de véhicule, par exemple.
Art. 6 (1) phrase 1 point a) du Règlement général sur la protection des données (RGPD) : Conformément à cette disposition, le traitement de vos données personnelles est licite si et dans la mesure où vous y avez consenti.
Art. 6 (1) phrase 1 point b) du RGPD : Conformément à cette disposition, le traitement de vos données personnelles est licite si ce traitement est nécessaire à l’exécution d’un contrat (par exemple, un contrat de service de transport) auquel vous êtes partie, ou à la prise de mesures précontractuelles à votre demande (par exemple, lors de la réservation d’un véhicule).
Art. 6 (1) phrase 1 point c) du RGPD : Conformément à cette disposition, le traitement de vos données personnelles est licite si ce traitement est nécessaire au respect d’une obligation légale à laquelle Black City Cars est soumise.
Art. 6 (1) phrase 1 point f) RGPD : Conformément à cette disposition, le traitement de vos données personnelles est licite si ce traitement est nécessaire aux fins des intérêts légitimes poursuivis par le responsable du traitement, c’est-à-dire Black City Cars, ou par un tiers, sauf si ces intérêts sont supplantés par les intérêts ou les droits et libertés fondamentaux de la personne concernée, c’est-à-dire vous-même.
FINALITÉS DU TRAITEMENT DES DONNÉES :
Nous traitons les données de base, les données de communication, les données contractuelles et les données financières dans une base de données commune avec LimoAnywhere, notamment aux fins de l’enregistrement et de la gestion des comptes clients de Black City Cars, de la prestation de services de relation client et du traitement des factures. Les responsabilités respectives ont été définies dans un accord de responsabilité conjointe en tant que responsables conjoints du traitement. Dans le cadre de leur responsabilité conjointe en vertu des lois sur la protection des données, Black City Cars et LimoAnywhere ont conclu un accord déterminant qui est responsable du respect des obligations respectives prévues par le RGPD. Cela concerne notamment les droits des personnes concernées et le respect des obligations d’information conformément aux articles 13 et 14 du RGPD.
BASE JURIDIQUE DU TRAITEMENT CI-DESSUS :
L’article 6, paragraphe 1, phrase 1, point a), du RGPD s’applique au traitement des données fondé sur votre consentement ; l’article 6, paragraphe 1, phrase 1, point f), du RGPD s’applique au traitement fondé sur l’intérêt légitime de Black City Cars.
INTÉRÊT LÉGITIME, DANS LA MESURE OÙ L’ART. 6 (1) PHRASE 1 POINT F) DU RGPD S’APPLIQUE AU TYPE DE TRAITEMENT CONCERNÉ :
Notre intérêt légitime à traiter vos données personnelles pour un compte Black City Cars unique est de pouvoir ainsi fournir à nos clients tous les services Black City Cars via une interface unique et de leur offrir les meilleurs services possibles, améliorant ainsi leur satisfaction.
CATÉGORIES DE DESTINATAIRES DE VOS DONNÉES :
Black City Cars transmet vos données personnelles à Black City Cars en tant que responsable conjoint du traitement au sens de l’art. 26 du RGPD.
FINALITÉS DU TRAITEMENT DES DONNÉES :
Les données personnelles sont collectées et traitées via les sites web, l’application, le téléphone ou un intermédiaire, par exemple si vous nous les fournissez, notamment pour la conclusion de contrats de transport avec des prestataires tiers pour la réservation de véhicules, pour l’utilisation de la plateforme avec un compte enregistré, pour l’identification par connexion ou pour communiquer avec nous, par exemple via les formulaires que vous nous soumettez ou en nous envoyant des e-mails. Les données personnelles que nous collectons comprennent :
Nous utilisons ces données aux fins décrites ci-dessus ou à des fins découlant de la demande concernée, par exemple pour traiter des demandes de réservation spécifiques ou pour gérer vos préférences.
Le processus de réservation de Black City Cars vous offre la possibilité d’enregistrer une carte de crédit et de payer votre course par carte. (La carte ne sera débitée qu’une fois la course terminée.)
Black City Cars fait appel à un prestataire de services de paiement (PSP) certifié PCI-DSS pour les paiements par carte de crédit. Ce service est nécessaire pour protéger les informations de votre carte de crédit.
Black City Cars ne conserve aucune de vos informations de carte de crédit. Afin de vous permettre de réutiliser une carte déjà enregistrée pour vos futures réservations, nous enregistrons simplement un numéro de référence qui identifie de manière unique votre carte de crédit.
Pour votre sécurité et la nôtre, nous utilisons également vos informations pour prévenir la fraude et les défauts de paiement. À cette fin, nous collaborons avec des prestataires de services financiers tels que Stripe. Ces prestataires analysent vos données principales et contractuelles afin de garantir leur authenticité et de prévenir les risques de fraude.
BASE JURIDIQUE DU TRAITEMENT CI-DESSUS :
Art. L’article 6 (1) phrase 1 point b) du RGPD s’applique au traitement des données nécessaires à l’exécution des contrats de services de transport conclus entre vous et des prestataires de services de transport tiers (réservation de véhicules), ainsi qu’à l’exécution du contrat d’utilisation de la plateforme conclu avec vous. L’article 6 (1) phrase 1 point f) du RGPD s’applique au traitement des données dans la mesure où cela est nécessaire au règlement des comptes vis-à-vis de tiers, à la défense de nos propres droits et à la réduction des risques.
INTÉRÊT LÉGITIME, DANS LA MESURE OÙ L’ART. 6 (1) PHRASE 1 POINT F) DU RGPD S’APPLIQUE AU TYPE DE TRAITEMENT CONCERNÉ :
Notre intérêt légitime à traiter vos données personnelles à des fins de prévention des risques est d’éviter les réservations frauduleuses et les défauts de paiement.
CATÉGORIES DE DESTINATAIRES DE VOS DONNÉES :
Nous communiquerons vos données aux destinataires suivants aux fins susmentionnées (notamment pour informer la société de transport de la réservation ou traiter un paiement) : prestataires de services financiers, prestataires de services de prévention des risques, Black City Cars et partenaires.
PURPOSES OF DATA PROCESSING:
We perform a range of different marketing measures for advertising purposes, to promote customer loyalty, to optimize customer offers, for market research and survey purposes and for bonus programmes. For this purpose, we process your master data, communication data and contract data and will inform you about our mobility services and suitable extras or additional services, such as mileage deals or recommended insurance coverage.
Black City Cars carries out the aforementioned marketing and direct marketing measures on its own behalf as well as on behalf of cooperation partners as well as other partners/cooperations.
Our marketing measures also include prize draws that are usually subject to separate terms and conditions for participation. If you participate in one of our prize draws, we process the data that you provide to us (usually be registering via the respective participation form on our website) in order to be able to participate in the prize draw as far as this is required to carry out and process the prize draw.
You may object to any processing or use of your data for direct marketing purposes at any time. Please send any objections to: Black City Cars, 1009 Rue Saint-Ferdinand, Montréal, QC, H4C 2T5, Canada, or by e-mail: info@blackcitycars.com.
LEGAL BASIS FOR PROCESSING:
Art. 6 (1) sentence 1 point a) GDPR applies to data processing for purposes of implementing direct marketing measures that require explicit advance consent.
Art. 6 (1) sentence 1 point f) GDPR applies to data processing for purposes of implementing direct marketing measures that do not require explicit advance consent, and of implementing the marketing measures mentioned (→ Purposes of data processing).
LEGITIMATE INTEREST, TO THE EXTENT THAT ART. 6 (1) SENTENCE 1 POINT F) GDPR APPLIES TO THE TYPE OF PROCESSING CONCERNED:
Our legitimate interests in using your personal data for purposes of implementing direct marketing measures and the marketing measures mentioned lie in the fact that we want to convince you of our services and promote a lasting customer relationship with you.
CATEGORIES OF RECIPIENTS OF YOUR DATA:
For the purposes described in the foregoing, we disclose your data to IT service providers, call centres, advertising partners and providers of customer loyalty programmes.
PURPOSES OF DATA PROCESSING:
In order to ensure that customers can conveniently book to be picked-up from their current location by using the Black City Cars mobile applications (Android and iOS apps), our apps are able to determine your location, provided that you have consented that your GPS data be transmitted in the app. These location data are not stored and are used only to determine the pick-up point. Further, we are able to determine the coordinates of drivers via their mobile phones, even while you are in the vehicle. This helps us to arrange additional bookings and to conduct booked rides and to provide customers with information about their upcoming ride (for instance what time the driver will arrive).
LEGAL BASIS FOR THE ABOVE PROCESSING:
Art. 6 (1) sentence 1 point a) GDPR applies to the processing of data based on your consent; Art. 6 (1) sentence 1 point b) or f)GDPR applies to the collecting of driver location data.
LEGITIMATE INTEREST, TO THE EXTENT THAT ART. 6 (1) SENTENCE 1 POINT F) GDPR APPLIES TO THE TYPE OF PROCESSING CONCERNED:
Our legitimate interest in collecting the location data of drivers lies in offering location-related services and features.
If you book a ride through your employer, we also process your data for the purposes described in this Data Privacy Policy. This also applies mutatis mutandi if a third party is to pay the invoice.
CATEGORIES OF RECIPIENTS OF YOUR DATA:
We transmit personal data collected during the booking flow (in particular invoice data, including possibly also in the form of monthly statements) to your employer or the third party who is to pay your invoice.
LEGAL BASIS FOR THE ABOVE PROCESSING:
Art. 6 (1) sentence 1 point b) GDPR provides for data processing for the purposes of booking and customer relations, otherwise Art. 6 (1) sentence 1 point f) GDPR.
LEGITIMATE INTEREST, TO THE EXTENT THAT ART. 6 (1) SENTENCE 1 POINT F) GDPR APPLIES TO THE TYPE OF PROCESSING CONCERNED:
Insofar as the processing of data for the purpose of settling the account with your employer or third parties is concerned, our legitimate interest is in being able to assert invoice amounts and other claims or to determine the party against which the damage claim is asserted.
PURPOSES OF DATA PROCESSING:
In the event of an automobile accident arising out of transportation services arranged for you by Black City Cars, we may process your master data, communication data, contract data and, if applicable, data concerning health for the following purposes:
We also process your master data, communication data and contract data for purposes of fulfilling legal obligations (e.g. providing information to investigating authorities).
Should the competent authorities suspect of an administrative or criminal offence involving an automobile accident in connection with transportation services arranged for you by Black City Cars, then we will process not only the master data pertaining to you that we have stored, but also the data conveyed to us by the competent authorities.
LEGAL BASIS FOR PROCESSING:
Art. 6 (1) sentence 1 point b) GDPR applies to data processing for purposes of complaints management, providing customer services in cases of damage, and processing damages resulting from accidents. Art. 6 (1) sentence 1 point c) GDPR applies to data processing for purposes of investigations carried out by competent legal authorities in connection with processing damages and handling claims resulting from accidents. Art. 9 (2) point f) GDPR applies to the processing of data concerning health for purposes of establishing, exercising or defending the customers legal claims.
RECIPIENTS/CATEGORIES OF RECIPIENTS OF YOUR DATA:
For the purposes described in the foregoing, we disclose your data to the following recipients: public authorities (investigating authorities; regulatory authorities; police authorities), experts, assistance services providers, independent transportation service providers, lawyers and insurance companies.
PURPOSES OF DATA PROCESSING:
Our websites use “cookies”, and our App uses corresponding analytics tools. Cookies are small text files that are copied from a web server onto your hard disk. Cookies contain information that can later be read by a web server within the domain in which the cookie was assigned to you. Cookies cannot execute any programmes or infect your computer with viruses. The cookies used by us contain no personal data and are not linked to any such data. Analytics tools store data about the use of the app either in the app itself, or they transmit (anonymized) usage evaluations to the operator of the app.
Further information on cookies and deactivating them can be found in the cookie policy of the respective website (accessible via the link in the respective cookie banner or via the “Data Privacy Policy” menu item). You can deactivate app analytics in the app (Info à Data Privacy Policy).
LEGAL BASIS FOR THE ABOVE PROCESSING:
Art. 6 (1) sentence 1 point f) GDPR applies where personal data is processed.
LEGITIMATE INTEREST, TO THE EXTENT THAT ART. 6 (1) SENTENCE 1 POINT F) GDPR APPLIES TO THE TYPE OF PROCESSING CONCERNED:
Our legitimate interests in processing your personal data via our websites and app lie in our desire to optimise our Internet offering and, as such, offer our customers best possible services and increase customer
If you book rides with us in third countries, we will transfer your personal data to your contract partner (e.g. third party platform / transportation service provider) in the third country on the basis of an adequate decision according to Art. 45 of GDPR or on the basis of the requirements of Art. 49 (1) (b) or (c) GDPR, insofar as the transfer is necessary to conduct pre-contractual or contractual provisions requested by you.
In all other cases, the transfer of your data to a third country is based on an adequacy decision by the European Commission. If no adequacy decision by the European Commission exists for the respective third country, then the transfer to that third country will take place subject to appropriate safeguards as per Art. 46 (2) GDPR. In particular, as per Art. 46 (2) (c) GDPR, Black City Cars will sign the European Commission’s standard data protection clauses with data controllers and processors based in third countries where no adequacy decision exists. You can request copies of the aforementioned safeguards from Black City Cars by writing to the address specified above (cf. → Controller). Third countries are countries outside the European Economic Area. The European Economic Area comprises all countries of the European Union as well as the countries of the so-called European Free Trade Association, which are Norway, Iceland and Liechtenstein.
Black City Cars stores your personal data until they are no longer necessary for the purposes for which they were collected or otherwise processed (cf. → Purposes of data processing at Black City Cars). Where Black City Cars is under legal obligation to store personal data, it will store personal data for the preservation period stipulated by law. The preservation period for commercial documents, which include bookkeeping documents and accounting records (including invoices), is 10 years. During this period, your data may be subject to restricted use within day-to-day operations if its processing serves no further purposes. The data that are recorded by the mobile phones of drivers (cf. → GPS tracking) are erased after a period of three months.
Where two or more controllers are jointly responsible for data processing (cf. item 1. Black City Cars Account), the parties shall fulfil their obligations under data protection laws on the basis of the respective arrangement between the joint controllers. The parties shall inform each other without undue delay of any legal claims asserted by data subjects. They shall provide each other with all the information required to respond to information requests.
Data subjects may assert their rights vis-à-vis, Black City Cars.
You have the right to, at reasonable intervals, obtain information about your personal data under storage (Art. 15 GDPR). The information you are entitled to includes information about whether or not Black City Cars has stored personal data concerning you, about the categories of personal data concerned, and about the purposes of the processing. Upon request, Black City Cars will provide you with a copy of the personal data that are processed.
You also have the right to obtain from Black City Cars the rectification of inaccurate personal data concerning you (Art. 16 GDPR).
You furthermore have the right to obtain from Black City Cars the erasure of personal data concerning you (Art. 17 GDPR). We are under obligation to erase personal data in certain circumstances, including if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, if you withdraw the consent on which the processing is based, or if the personal data have been processed unlawfully.
Under certain circumstances, you have the right to have the processing of your personal data restricted (Art. 18 GDPR). These include circumstances in which you contest the accuracy of your personal data and we then have to verify such accuracy. In such cases, we must refrain from further processing your personal data, with the exception of storage, until the matter has been clarified.
Should you opt to change to a competitor of Black City Cars, you have the right either to receive, in a machine-readable format, the data that you provided to us based on your consent or on a contractual agreement with us, or to have us transmit, also in a machine-readable format, such data to a third party of your choice (Right to data portability, Art. 20 GDPR).
You are not contractually or legally obliged to provide us with your personal data. Please note, however, that you cannot enter into a contract for our services if we are not permitted to collect and process the data as required for the purposes specified in the foregoing (see → The purposes of data processing at Black City Cars)
If the processing of your data by Black City Cars is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (Art. 6 (1) sentence 1 point (e) GDPR) or if it is necessary in the legitimate interests of Black City Cars, then you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. Black City Cars will then end the processing, unless we can present compelling legitimate grounds for such processing that supersede the grounds for ending the processing.
You may object, at any time and without restriction, to the processing of your personal data for purposes of direct advertising.
If data processing at Black City Cars is based on your consent, then you have the right to, at any time, withdraw the consent you granted. The withdrawal of consent shall not affect the lawfulness of processing between the time consent was granted and the time it was revoked.
You have the right to lodge complaints with the supervisory authority responsible for Black City Cars. Please send such complaints to the following address:
Black City Cars, 1009 Rue Saint-Ferdinand, Montréal, QC, H4C 2T5, Canada.
Last amended in: January 2025
