Background
This Privacy Notice describes how Glue AB ("Glue", "we" or "us") will collect, process and share your personal data as a courier when carrying out deliveries as part of our InHome Delivery Service.
Glue AB, with org. no. 556944-8102, is the data controller in relation to the processing of your personal data, unless otherwise stated below. Personal data means any information which may be used to identify you as an individual.
It is important to us that you feel safe with how we handle your personal data. We take measures to ensure that your personal data is protected and that the processing of your personal data is carried out in accordance with applicable data protection laws and our internal policies and procedures.
Where we collect your personal data
We may collect your personal data in the following ways:
Personal data that you or your courier colleague provides to us by way of recording deliveries in connection with our Inhome Delivery Service.
When and why we process your personal data
We process your personal data for the following purposes:
Improve end user experience
In order to provide a safe and trusted service and to improve our end users' experience, you (or your colleague) as a courier will, in connection with our InHome Delivery Service, video record the delivery. Even though the video focuses on the delivery as such and rarely will show your face, you may be directly or indirectly identifiable through the recording. The recording device will only be active during the period from when the end user's door has been unlocked by you (or your colleague) and until the door is locked again. The video will also allow you, the courier and end users to make potential insurance claims and, if necessary, handle matters with authorities (such as the police).
- Identity data (should you be identifiable in the video recording)
- Geographic data (i.e. by indirectly pinpointing your location at a certain time should you be identified in the video recording)
Legitimate interest. The processing is necessary in order to fulfil our legitimate interest to improve our end users' experience when you as a courier carry out our Inhome Deliveries.
Storage period: The video material will be kept for six (6) months from the date of recording, in order to fulfil our legitimate interest in allowing end users to access the video and make potential insurance claims and, if necessary, to handle matters with authorities. Should a claim be made concerning the Inhome Delivery, the video material may be retained for an additional period if necessary.
Quality assurance, including internal training
In order for us to deliver our services in the best way possible and to make sure that our staff possess the required knowledge of our business and services, we will use video recordings for quality assurance purposes, e.g. as part of conducting internal training sessions with our employees. In connection with this, we may process your personal data (should you be identifiable during a recorded delivery).
- Identity data (should you be identifiable in the video recording)
- Geographic data (i.e. by indirectly pinpointing your location at a certain time should you be identified in the video recording)
Legitimate interest. The processing is necessary in order to fulfil our legitimate interest to ensure the quality of and improve our services.
Storage period: Your personal data is stored for this purpose for a period of six months calculated from the date of the recording.
Innovate and improve technical features of our services
We will anonymize personal data collected through your usage of the Glue application for Inhome Deliveries. Thereafter, such anonymized data (i.e. information which cannot identify you as an individual) will be used to understand the business in depth, e.g. in order to innovate and improve the features of our services, which we believe will be beneficial for us, our partners and our end users.
- User generated information (e.g. surf behaviour and delivery status] from the Inhome Deliveries application)
Legitimate interest. The processing is necessary in order to fulfil our legitimate interest of understanding and improving our business.
Storage period: Information on an aggregated level which do not contain any personal data and statistics are stored until further notice.
Comply with legal obligations
We process your personal data in order to fulfil legal obligations that we are subject to, e.g. bookkeeping and accounting obligations as well as obligations under applicable data protection laws.
All categories of personal data that have been collected and which are necessary in order to fulfill each legal obligation.
Legal obligation. The processing is necessary in order to fulfill our legal obligations.
Storage period: Your personal data is stored for such period that is necessary in relation to each legal obligation.
Establish, exercise and defend legal claims
We process your personal data, to the extent necessary, to establish, exercise and defend legal claims, e.g. in case of a dispute or litigation, for example if an end user brings claims towards Glue which are connected to the Glue InHome Delivery Service.
All categories of personal data that have been collected and which are necessary in order to establish, exercise or defend the legal claim.
Legitimate interest. The processing is necessary in order to fulfil our legitimate interest of handling and defending legal claims.
Storage period: Your personal data is stored for such period that is necessary for this purpose.
Manage and protect IT systems and services
In order to manage and protect our IT systems and services, e.g. upon logging, troubleshooting, backup, change and problem management in systems and in connection with potential IT incidents, we process, to the extent necessary, your personal data.
All categories of personal data stated above.
Legitimate interest. The processing is necessary in order to fulfil our legitimate interest of managing and protecting our IT systems and services.
Storage period: Your personal data is stored during the same period that is stated in relation to each purpose of the processing of your personal data above. Personal data in logs are stored for troubleshooting and incident handling during a period of six (6) months calculated from the date of the logging event. Information on shipment ID, date and time stamp, delivery status and any other metadata which pertains to the shipment or delivery, which cannot directly or indirectly identify you as an individual, is stored indefinitely.
Recipients that we share your personal data with
Where necessary, we share your personal data with others. The recipient is the data controller for the processing of your personal data, unless we have stated otherwise below.
We share your personal data with:
Service providers
In order to fulfil the purposes of the processing of your personal data, we share personal data with service providers that we have engaged. These service providers provide IT services to us (such as Amazon Web Services, to host and process the data) and assist us by recording deliveries made to you as part of our Inhome Deliveries. The service providers may only process your personal data for these purposes and in accordance with our instructions and not for their own purposes. We are the data controller for the processing of personal data that the service providers carry out on our behalf as processors.
Other recipients
In certain cases we share, if necessary, your personal data with other recipients for the following purposes:
Public (including law enforcement) authorities
We share necessary personal data with public authorities if we are obligated under law to disclose the information.
Legal obligation. The processing is necessary in order to fulfill legal obligations.
External advisors
We share necessary information with external advisors, e.g. audit firms and law firms, if we are obligated under law to share the information or in order to manage and defend legal claims.
Legal obligation or legitimate interest. The processing is necessary in order to fulfill legal obligations or to fulfil our legitimate interest of managing and defending legal claims.
Public authorities (including courts), insurance companies, counterparties etc.
In order to manage and defend legal claims we share personal data with other parties.
Legitimate interest. The processing is necessary in order to fulfil our legitimate interest of managing and defending legal claims.
Potential buyers and sellers
We share personal data with potential buyers and sellers in case of an acquisition of the business or a merger.
Legitimate interest. The processing is necessary in order to fulfil our legitimate interest of carrying out the acquisition or the merger.
End users
We disclose your personal data (should you be identified in a delivery video) as part of sharing relevant delivery recordings with our end users, in order to improve end user experience and allow for them to file potential insurance claims.
Legitimate interest. The processing is necessary in order to fulfil our legitimate interest of improving our end users' experience and allow for them to file potential insurance claims.