We take your privacy very seriously and we ask that you read this privacy policy carefully as it contains important information on:
the personal data we collect about you and why we collect it;
what we do with your information;
who your information might be shared with; and your rights.
The website https://uoto.app ('Website') and the mobile application Uoto ('App') are operated by Uoto Limited (trading as Uoto), registered in Ireland with registered number 736361 and whose registered office is at The Thatch, Lemybrien, Waterford, Ireland X42 A004('we' or 'us' or 'Uoto' or 'our').
We are a 'data controller' for the purposes of the Data Protection Act 1998 and, after 25 May 2018, the General Data Protection Regulation (EU) 2016/679 ('GDPR') (together, the 'Data Protection Laws') and we are responsible for, and control the processing of, your personal data.
This policy sets out the basis on which any personal data and sensitive personal data (both as defined below) we collect from you, or that you provide to us, will be collected, used, stored, disclosed and otherwise processed by us.
Changes To Our Privacy Policy
We may change this Privacy Policy from time to time by updating this page and we will notify you by email to the email address registered to your account.
Useful Words And Phrases
Please familiarise yourself with the following words and phrases as they have particular meanings in the Data Protection Laws and are used throughout this Privacy Policy:
Personal Data
Any information from which a living individual can be identified.
This will include information such as telephone numbers, names, addresses, email addresses, photographs, car registration numbers and voice recordings.
It will also include expressions of opinion and indications of intentions about data subjects (and their own expressions of opinion/intentions). It will also cover information which on its own does not identify someone but which would identify them if put together with other information which we have or are likely to have in the future
Special Categories of Personal Data (or Sensitive Personal Data)
Any information relating to:
- racial or ethnic origin;
- political opinions;
- religious beliefs or beliefs of a similar nature;
- trade union membership;
- physical or mental health or condition;
- sexual life;
- genetic data or biometric data for the purpose of uniquely identifying you; or
- offences or alleged offences or information relating to any offences committed or allegedly committed
Processing - Virtually anything anyone can do with personal data, including:
- obtaining, recording, retrieving, consulting or holding it;
- organising, adapting or altering it;
- disclosing, disseminating or otherwise making it available;
- and aligning, blocking, erasing or destroying it
Data Subject - The person whom the data is about
Data Protection Officer - The Irish data protection officer, who is responsible for implementing, overseeing and enforcing the Data Protection Laws
Registration Of An Account And Membership
To use our Website and/or our App, you will need to register and open an account on our Website and/or our App and become a member (regardless of whether or not, you are an Car Owner or a renter). When you open such account with us and apply to become a member, the personal data we collect from you depends on whether you are registering as an Car Owner member or a renter member:
Where you are a renter member and you wish to make a booking, the personal data we collect from you is as follows:
- payment details;
- name and address;
- email address;
- telephone number;
- driving licence image details including driving licence number, date of birth, your driving licence photo and signature
- the code validation from the DVLA or your national insurance number if you would prefer Uoto to validate your driving licence.
- Where you are an Car Owner member and you wish to list your vehicle for hire, the personal data we collect from you is as follows:
- name;
- email address;
- your telephone number;
- vehicle registration.
We do not collect any additional personal data in relation to a booking for the hire of a vehicle via Uoto
We use your IP address to help diagnose problems with our server, and to administer our Website.
When you install or run the App, we may collect any or all of the following technical data:
- Device Identifiers (the internet protocol address used to connect your device to the internet, your login information, browser type and version, regional settings, operating system and platform)
- Data about your use of the App (anonymous user information, for example open rates, user journeys). We use the information to compile analytical reports which help us improve our Apps.)
- Information stored on your device
- Location information - we use GPS technology to determine your current location
- Data about your driving (acceleration, braking, speed, journey duration, time of day of journey)
- Data about when you make and receive phone calls, send and receive text messages on your device
We will install a telematics device to the far prior to renting and/or install telematics devices in the Vehicles available for rental, in order to collect data for driver behaviour tracking (as described above). The driver behaviour data provides Uoto with a rating for each renter member. The driver rating enables us to support our community of drivers to drive well. It can also assist members to reach a quicker resolution wherever possible in the event of a dispute. It is also a condition of our insurance policy with ...
The telematics data collected is used solely to support the Uoto insurance requirements and operational safety of our drivers.
The telematics devices installed in vehicles are provided by a third party, RentalMatics who will collect all the data on behalf of Uoto.
We will receive alerts and reports over email, as well as have access to the live data via a management platform provided by RentalMatics.
Such data shall be processed in accordance with this Privacy Policy and shall be provided on an aggregated and anonymised basis to RentalMatics, depending on its origin.
KYC & Verification
The Business will use platforms such as GBG plc & First Advantage® and/or other verification and facial recognition technologies to verify renters for including but not limited to driving license, penalty points, drink driving, credit checks, accident history & background checks.
We may monitor and record communications with you (such as telephone conversations and emails) for the purpose of quality assurance, training and compliance.
We would like to provide you with information about our services, and other information which we think you may find interesting. We may send you such information by post and email provided you have given your consent when registering an account with us.
If you are a customer of ours or you have previously asked us for information on our products and services, we may send you information by email. However, in every marketing email message we send you we will give you the opportunity to unsubscribe from our mailings altogether.
We do not provide your personal data to external organisations (i.e. outside of Uoto) for their own marketing purposes without your explicit consent. For example, to insurance companies who wish to market insurance products to you.
If at any time you do not want your information used for direct marketing purposes please update your preferences on the Uoto App or contact us at info@uoto.app or on +353 51572190 . If you decide that you no longer wish to receive marketing emails from us, please either follow the unsubscribe link in one of our marketing email messages or change your notification preferences within your Account area on the Website and/or the App or contact us at info@uoto.app or +353 51572190.
We will also receive information about you from other sources in order to verify your identity, such as:
- Credit Header (checking against live credit accounts to match address, surname and forename and date of birth);
- Electoral Roll (Electoral Roll to match address, surname and forename);
- Land Telephone (Eircom data covering bill payer matching address, surname and first initial); and
- National Identity Register (GBG plc & First Advantage® Proprietary data to match address, surname and forename, facial recognition).
If you give us information on behalf of someone else (including any additional drivers), you confirm that the other person has appointed you to act on their behalf and has agreed that you can:
- give consent on their behalf to the processing of their personal data in accordance with this Privacy Policy;
- receive on their behalf any data protection notices;
- and give consent to the transfer of their personal data abroad.
The principal purposes for which we collect and store your personal and financial information are as follows:
to process and assist with your membership application and opening an account with us;
- allow you to list your vehicle;
- allow you to reserve, book and collect a vehicle;
- authorise and collect payment;
- bill you or pay you;
- respond to your enquiries;
- improve our products and services;
- and maintain your account with us.
Data will be retained for as long as you are a member with Uoto and then for a further period of 12 months following the end of your membership with Uoto.
When Personal data Is collected? | Nature Of Processing | Legal Basis For Processing |
---|---|---|
Registration of an account and membership | To complete your membership and open your account | It is necessary for the performance of our contract with you as without this information we cannot provide the services to you |
When making a booking | When making a booking | It is necessary for the performance of our contract with you to enable you to receive and benefit from the services. We use your contact information to get in touch with you when necessary which may include for example, contact before during and after a booking by email or by phone to assist with or administer a booking and to help improve our services |
IP addresses | To support fraud detection and fault resolution | It is in our legitimate interests to process your IP address in order to detect issues with our servers |
Telematics | To understand the way in which the renter /volunteer driver has driven the vehicle | It is in our legitimate interests to process the personal data collected from the telematics unit and/or via the App for the following reasons: |
in order to help resolve disputes between the parties; | ||
the renter / volunteer driver must comply with his obligation to drive with reasonable care and in accordance with the law; | ||
failure by the renter / volunteer driver to drive with care could invalidate the Insurance Policy; | ||
failure by the enter / volunteer to drive without care brings a risk of enforcement action by authorities; and | ||
failure to drive without care risks damaging or devaluing the Car Owner's car | ||
Marketing information | To market information | If you have opted in to receive marketing information from us in accordance with the 'Marketing' section above then we are processing your personal data on the basis of the express consents you have given us to provide the relevant marketing information |
General
Uoto does not sell, trade, or rent your personal information to others. We will not share the personal information we collect from you through our services with third parties except as described in this Privacy Policy.
Insurer
For the purposes of the Data Protection Laws the data controller in relation to the information relating to our insurance policies . We or our insurer may pass information about you which is contained in the Uoto policy and supporting documentation to other insurance companies (or insurance authorised representatives with whom we either reinsure our business or who are dealing with a claim made under the policy).
These companies may include Insurance Database Services Limited in respect of the Claims and Underwriting Exchange, as well as other counter-fraud organisations and claims suppliers. These companies may be located in countries outside the UK but within the European Economic Area (EEA).
Also, the insurer will receive aggregated and anonymised data from the telematics device.
Other Members
Uoto enables car Car Owners to offer and rent their vehicles to other individuals and we act as an agent for both the Car Owner of the car and the renter of the car. If you agree to a rental transaction through the Website and/or the App, Uoto may provide your personal information to the other party in that transaction as reasonably necessary to facilitate the rental. For example, Uoto may provide your name on the condition report.
Where you are an Car Owner or a renter, you will need to make sure that any personal data or information is wiped from the vehicle's entertainment system or SatNav system to ensure that the other party is not able to view this information. Uoto is not responsible or liable if any personal data is visible this way.
Authorities
If you are a renter / volunteer driver member and you fail to pay any parking fines, congestion charges, penalty notices or similar, then we may share your personal data with the relevant authority (including the police) in order for such authority to pursue avenues of redress with you,
Payment provider
We use Stripe for payment, analytics, and other business services. Stripe collects identifying information about the devices that connect to its services. Stripe uses this information to operate and improve the services it provides to us, including for fraud detection. You can learn more about Stripe and read its privacy policy at https://stripe.com/privacy
Telematics provider
RentalMatics will process your personal data as part of providing the telematics device to us and/or the in-built telematics technology with the App but Uoto will remain data controller and RentalMatics shall only be permitted to process your personal data in accordance with our written instructions.
Also, as noted above, RentalMatics will receive aggregated and anonymised data from the telematics device and/or the App for its own use.
Other third parties
If Uoto offers or promotes services in conjunction with another company, and you request those services (or additional information about them), you consent to our sharing your personal information with those parties. In those cases, we will only share the information reasonably needed to provide you with the applicable service. We may also share personal information with third parties when you give us your consent to do so. Information that is shared with third parties as described in this paragraph is subject to the privacy policies of those parties, which may differ from this Privacy Policy. Uoto is not responsible for the acts or omissions of those third parties. We encourage you to become familiar with their practices before disclosing information directly to them.
Uoto may disclose personal information in the good faith belief that we are lawfully authorised or required to do so, or that doing so is reasonably necessary or appropriate to comply with the law or with legal process or authorities, respond to any claims, or to protect the rights, property or safety of Uoto, our users, our employees or the public. That includes actions we may take to protect Uoto or our users from fraudulent, abusive, inappropriate or unlawful use of our site or marketplace.
Information about our users, including personal information, may also be disclosed or transferred as part of, or during negotiations of, any merger, sale of company assets, financing or acquisition or in any other situation where personal information may be transferred as one of the business assets of Uoto. You understand that when you use the Website and/or the App, information you post in your profile or in any other area of the site and/or the App will be available to other users and in some cases may be publicly available.
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect, including locked cabinets and electronic password protection.
If at any point you suspect or become aware of a security incident (i.e. your password is stolen or you receive suspicious communication from someone holding themselves out to be a Uoto employee or from a dupe website claiming to be affiliated with Uoto), please forward the communication to us or report the incident by email to info@Uoto.app or in writing to Uoto at The Thatch, Lemybrien, Waterford, Ireland X42 A004 as soon as possible.
While we will use all reasonable efforts to safeguard your personal data, you acknowledge that the use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal data that are transferred from you or to you via the internet. If you have any particular concerns about your information, please contact us (see ‘How to contact us’ below).
We may need to transfer your personal data to our insurers and their partners.
As a data subject, you have the following rights under the Data Protection Laws:
- the right of access to personal data relating to you;
- the right to correct any mistakes in your information;
- the right to ask us to stop contacting you with direct marketing as specified above;
- the right to restrict your personal data being processed;
- the right to have your personal data ported to another data controller (e.g. if you decide to contract with a different supplier) where we are processing your personal data on the basis of it being necessary for the performance of a contract between us;
- the right to object to your personal data being processed where we are processing your personal data on the basis of it being in our legitimate interests or for direct marketing;
- the right to erasure;
- compensation for damage caused by contravention of the Data Protection Laws; and
- the right to complain to the ICO if you believe we have not handled your personal data in accordance with the Data Protection Laws.
- These rights are explained in more detail below, but if you have any comments, concerns or complaints about our use of your personal data, please contact us (see 'How to contact us' below). We will respond to any rights that you exercise within a month of receiving your request, unless the request is particularly complex, in which case we will respond within three months.
You may ask to see what personal data we hold about you and be provided with: a copy;
- details of the purpose for which it is being or is to be processed;
- details of the recipients or classes of recipients to whom it is or may be disclosed, including if they are overseas and what protections are used for those oversea transfers;
- the period for which it is held (or the criteria we use to determine how long it is held); and
- any information available about the source of that data.
Requests for your personal data must be made to us in writing (see 'How to contact us' above), and a copy will be retained on your personnel file. To help us find the information easily, please give us as much information as possible about the type of information you would like to see.
If, to comply with your request, we would have to disclose information relating to or identifying another person, we may need to obtain the consent of that person if possible. If we cannot obtain consent, we may need to withhold that information or edit the data to remove the identity of that person if possible.
There are certain types of data which we are not obliged to disclose to you, which include personal data which records our intentions in relation to any negotiations with you where disclosure would be likely to prejudice those negotiations.
You can require us to correct any mistakes in your information which we hold free of charge. If you would like to do this, please:
- email, call or write to us (see ‘How can you contact us’ below);
- let us have enough information to identify you (e.g. account number, user name, registration details); and
- let us know the information that is incorrect and what it should be replaced with.
From 25 May 2018 and in accordance with the General Data Protection Regulations 2018, you may request that we stop processing your personal data temporarily if:
- you do not think that your data is accurate (but we will start processing again once we have checked and confirmed that it is accurate);
- the processing is unlawful but you do not want us to erasure your data;
- we no longer needs the personal data for our processing, but you need the data to establish, exercise or defend legal claims; or
- you have objected to processing because you believe that your interests should override our legitimate interests.
From 25 May 2018 and in accordance with the General Data Protection Regulations 2018, you can ask us to erase your personal data where:
- you do not believe that we need your data in order to process it for the purposes set out in this Privacy Policy;
- you object to our processing and we do not have any legitimate interests that mean we can continue to process your data; or
- your data has been processed unlawfully or have not been erased when it should have been.
- There may be exemptions which mean we may continue to process your data.
Where we are processing your personal data on the basis of being necessary in order to take steps at your request prior to entering into a contract, then from 25 May 2018 and in accordance with the General Data Protection Regulations 2018, you may ask for an electronic copy of your personal data provided to us and which we hold electronically, or for us to provide this directly to another party.
We use cookies on our Website, which amongst other things, help us to improve your experience of our Website and to ensure that it performs as you expect it to. Cookies are text files containing small amounts of information, which are downloaded to your computer or mobile device by websites that you visit. They can improve your experience of using a website, for example, by remembering your preference settings and tracking your use of a website so that it can be improved to meet your needs. They can also help to ensure that adverts you see online are more relevant to you and your interests.
Websites must get consent to send cookies to your computer or mobile device unless the cookies are strictly necessary to provide services to you.
Turning off and deleting cookies: all web browsers allow you to limit cookie behaviour or turn off cookies with the settings or options of the browser. The steps to do this are different for each browser and you can find instructions under the Help menu of your browser.
Through your browser you can also view the cookies that are on your computer, and delete individual ones, or purge them all.
You can set (accept or decline) your cookie preferences when you arrive at our Website via the pop-up consent buttons. We do not allow third party cookies on our site.
Unless the cookie is a strictly necessary cookie, you can withdraw your consent to our cookies at any time even if you have previously consented. Although, please do remember that if you do not consent to our functionality cookies, parts of our Website will not work.
For example, to watch new content video on our website such as tutorial videos or customer experience videos. For this reason we will occasionally send you prompts which allow you to consent to a cookie you have previously rejected.
The table below explains what cookies we use on our Website, why we use them and whether they are strictly necessary or another type of cookie e.g. 'functionality' or 'performance' cookies. We also state in the table whether a cookie is a 'persistent' or 'session' cookie.
The difference is that:
- Persistent cookies remain on your device between browsing sessions. They are activated each time you visit the website that created that particular cookie. For example, where a 'persistent cookie' is used on a website to remember your log-in details, you will not need to enter those details each time you visit that website.
- Session cookies allow website operators to link the actions of a user during a browser session. A browser session starts when you open the browser window and finishes when you close the browser window. Session cookies are created temporarily. Once you close the browser, all session cookies are deleted.
Some of the cookies listed below are those set by our Website when you visit – www.uoto.app
Strictly necessary cookies are essential to enable you to receive a service on a website. For example, cookies to operate online shopping baskets, do your internet banking or to comply with the law (e.g. such as to keep your information safe). We would not be able to operate our Website without using the 'strictly necessary' cookies listed below.
Cookie | Name | Purpose | Persistent/Session |
---|---|---|---|
- | accessToken | Web service usage and authentication | Session |
- | Uoto_refresh_token | Web service usage and authentication | Session |
Performance cookies collect information about how visitors use a website, for instance, which pages visitors go to most often and if they get error messages from web pages. These cookies do not collect information that identifies a visitor. Any information collected by these cookies is anonymous. We only use such information to improve our Website.
Cookie | Name | Purpose | Persistent/Session |
---|---|---|---|
Google Analytics | n/a | These cookies are used to collect anonymous information about how visitors use our site. We use the information to compile analytical reports which help us improve our website. The cookies collect information such as the number of visitors to our website, how they arrived there (e.g. directly from the internet or through linking from another website) and tracking which web pages they visited | Persistent |
Functionality cookies allow the website to remember choices you make (such as your log in details) and customised preference settings (e.g. text size). They also enable enhanced, more personal features, e.g. a website may be able to provide you with local weather reports or traffic news by using a cookie to remember which region you are in. These cookies are also used to provide services you have asked for such as watching a video. Information collected by 'functionality' cookies may or may not be anonymised, but they cannot track your browsing activity on other websites.
Cookie | Name | Purpose | Persistent/Session |
---|---|---|---|
- | Uoto_calendar_setup | - | Session |
These cookies collect information about your browsing habits to make advertising relevant to you and your interests. These cookies collect the most information about users.
Cookie | Name | Purpose | Persistent/Session |
---|---|---|---|
Not used | - | - | - |
If you would like to update your contact information, please use your Account Page. If you have any trouble using the Account Page, please contact Uoto customer service at info@uoto.app
Uoto welcomes your questions and comments about privacy, and what we do. Please feel free to e-mail us at info@uoto.app . If you need to reach us by mail, please write to: Uoto at its registered address at NF, Arclabs, SETU Waterford, West Campus, Waterford, X90 P20H
If you do not think that we have processed your data in accordance with this privacy policy, please contact us in the first instance. If you are not satisfied, you can complain to the DPO. Information about how to do this is available on the Date Protection website at https://dataprotection.ie