Controller for the processing of personal data is:

Dance GmbH
Zionskirchstr. 73 A
c/o Maschinenraum
10119 Berlin
Germany

Further information about our company and the persons authorized to represent it can be found in our imprint.

A few notes in advance: Legal basis of data processing

•  Consent (Art. 6 para. 1 lit. a) GDPR)
•  for the fulfillment of contracts (Art. 6 para. 1 lit. b) GDPR)
•  on the basis of a balancing of interests (Art. 6 para. 1 lit. f) GDPR)
•  for the fulfillment of a legal obligation (Art. 6 para. 1 lit. c) GDPR)

Data processing when visiting our website

Access data

When you visit our website, personal data is processed in order to display the content of the website on your terminal device.

In order for the pages to be displayed in your browser, the IP address of your terminal device must be processed. In addition, further information about the browser of your end device is processed.

We are obliged by data protection law to guarantee the confidentiality and integrity of the personal data processed with our IT systems.

For this purpose and out of this interest, the following data is logged on the basis of a balancing of interests:

•  IP address of the end device (for a maximum of 14 days)
•  Operating system of the end device
•  Browser version of the end device
•  Name of the retrieved file
•  Date and time of the retrieval
•  Amount of data transferred
•  Referring URL

The IP address is deleted after 14 days from all systems used in connection with the operation of this website. We can then no longer establish a personal reference from the remaining data.

The access data is also used to identify and correct errors on the website.

Contact form

We also offer contact forms on our website, with which you can get in touch with us, e.g. to receive an invitation to Dance.

In order to process and answer your request, we need your first and last name, your e-mail address and also your city. If necessary, we also ask for a zip code.

We will get back to you by email after we have received and processed your request.

In the case of specific inquiries, the data is processed to fulfill a contract or to initiate a contract. In the case of general inquiries, processing is carried out on the basis of a balancing of interests.

Inquiries received via the contact form on our website are processed electronically by us in order to answer your inquiry. In this context, other persons or departments and possibly third parties may also become aware of the contents of the form that you have submitted.

The transmission of the form data via the Internet is carried out using encrypted connections.

Newsletter

We also offer an email newsletter to keep you informed about news and updates at Dance. You can subscribe to the newsletter, for example, by checking the box to receive news and updates about Dance on our contact form before submitting the form.

By checking the box and submitting the form, you agree to receive the newsletter.

For sending the newsletter, we use the service provider Mailchimp, which is based in the USA. An appropriate level of data protection is guaranteed by the conclusion of a data processing agreement with the provider of Mailchimp, including the so-called EU standard contractual clauses. Taking into account the need for protection of the email data and the measures taken by Mailchimp to protect the data (including their regular transparency reports), we consider the risk of data processing to be low and consider data processing in the USA to be permissible to this extent.

You can unsubscribe from the newsletter at any time. You will also find a link to unsubscribe in every newsletter email.

In order to be able to analyze the popularity of our newsletter mailings and optimize them, we log when emails are opened and links are clicked. This usage analysis is based on a balance of interests. You can object to this processing by unsubscribing from the newsletter.

Cookies

Cookies are used on our website. Cookies are small pieces of text information that are stored in your terminal device via your browser. The cookies are necessary to enable certain functions of our website.

We use session cookies, which are automatically deleted from your browser immediately after you have finished visiting our website.

These cookies are absolutely necessary for the operation of our website. The use of cookies that are not absolutely necessary requires your consent.

In these cases, you will be shown a corresponding consent form in the so-called "cookie banner" on the website.

You also have the option of preventing the setting of cookies by making the appropriate settings in your browser. However, we would like to point out that the use of our website may then only be possible to a limited extent.

Cookies do not install or start any programs or other applications on your computer.

Web analysis

This website uses the web analysis tool "Google Analytics", a service offered by Google Ireland Limited. The purpose of its use is the "needs-based design" of this website, which is carried out on the basis of a balancing of interests. The web analysis also enables us to detect and correct errors on the website, e.g. due to faulty links.

Google Analytics uses so-called "cookies", to which you have given your consent via the so-called "cookie banner". If you do not give your consent, no cookies will be set by Google Analytics.

The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Since we have activated the so-called IP anonymization on this website and concluded a corresponding order processing agreement with Google, your IP address will, however, be truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

An adequate level of data protection is guaranteed by Google through the use of the so-called EU standard contractual clauses.

For more information about the terms of use of Google Analytics and privacy notices, please visit: [https://policies.google.com/privacy]

Data processing when using our services

When you use our Services, e.g. subscribe to Dance, we process *the* personal data of you that we need to provide our service and to provide you with the best possible service.

In order to provide you with a vehicle, we will in any case need your name, an address, your indication of any additional services you may require, and date and time details for the requested delivery of the vehicle.

We also need payment information so that we can bill you for the subscription.

We need your phone number for authentication to our app so you can access our services, like repair and delivery. We share your phone number with a an authentication provider, currently Okta (Auth0) and AWS Cognito, to provide authentication to our services.

In order to protect your vehicle from theft and, above all, to make it possible to find the bike and, if necessary, prosecute it in the event of theft, we store location data. From this data we can see where the bike or the lock of the bike is currently located and in what condition it is.

Only a few authorized persons have access to this data at Dance and only use this access if there is a concrete reason for it. We store location data for a maximum period of 90 days.

Afterwards the data is anonymized. We use anonymized location data to better understand where errors or damage to vehicles occur or to optimize our services for all Dance users.

In the event of repairs or questions, further information on the respective damage and the repair process is also processed.

Purposes of the processing of personal data

We process the aforementioned data for the operation of our website and for the fulfillment of contractual obligations to our customers or the protection of our legitimate interests.

In the case of inquiries from you outside of an active customer relationship, we process the data for the purposes of contract initiation, sales and advertising.

You can object to the use of your personal data for advertising purposes at any time.

Voluntary data

If you voluntarily provide us with data, e.g. in forms, and this data is not required for the fulfillment of our contractual obligations, we process this data on the assumption that the processing and use of this data is in your interest.

Recipients / Disclosure of data

Data that you have provided to us will not be disclosed to third parties, unless this is necessary for the performance of our contractual obligations or our services.

In particular, your data will not be passed on to third parties for their advertising purposes.

However, we do use service providers for the operation of this website or for other products or services of ours. Here it can happen that a service provider receives knowledge of personal data. We select our service providers carefully — especially with regard to data protection and data security — and take all measures required by data protection law for permissible data processing.

Service providers

We use the following service providers to offer this website and our services via the Internet and/or apps:

• Amazon Web Services, Inc. (data center Frankfurt a.M.)
• Amplitude, Inc.
• Twilio Inc. („Segment“ & „Twilio“)
• FUNCTIONAL SOFTWARE, INC. („Sentry“)
• FrontApp, Inc.
• The Rocket Science Group, LLC (Mailchimp / Mandrill)
• we share your phone number with Okta, Inc ("Auth0") for authentication via phone number

We have entered into data order processing agreements with all service provider:s, incorporating the EU standard contractual clauses.

Data processing outside the European Union

Insofar as personal data is processed outside the European Union, you can see this in the previous explanations.

Data protection officer

We have appointed a data protection officer.

You can reach him as follows:

Dance GmbH
Data Protection Officer
Zionskirchstr. 73 A
c/o Maschinenraum
10119 Berlin
Germany
E-Mail: datenschutz@dance.co

Your rights as a data subject

You have the right to obtain information about the personal data concerning you. You can contact us for information at any time.

In the case of a request for information that is not made in writing, we ask for your understanding that we may require evidence from you that proves that you are the person you claim to be.

Furthermore, you have a right to rectification or deletion or to restriction of processing, insofar as you are entitled to this by law.

Finally, you have a right to object to processing within the scope of the law.

A right to data portability also exists within the framework of data protection law.

Deletion of data

We delete personal data in principle when there is no need for further storage. A requirement may exist in particular if the data is still needed to fulfill contractual services, to check and grant or ward off warranty and, if applicable, guarantee claims. In the case of statutory retention obligations, deletion will only be considered after expiry of the respective retention obligation.

Right of complaint to a supervisory authority

You have the right to complain about the processing of personal data by us to a supervisory authority for data protection.

Changes to this privacy policy

We'll revise this privacy policy whenever changes are made to this website or whenever other circumstances make this necessary. You'll always find the current version on this website.

Status: August 23rd, 2021