Privacy Policy of Drink Assistant Driver

This information notice describes which Personal Data is collected by Drink Assistant Driver, how it is used, and what rights can be exercised by Users.

Summary

Data we collect automatically

We automatically collect certain data when you use Drink Assistant Driver.

• Geographical location
• General activity data
• Other types of data necessary for the service's operation

How we use the data

• Location-based interactions
• Management of activity data
• Management of rounds and deliveries

Data Controller

RF Computer di Rompon Francesco
Via Angelo Messefaglia 68
37069 Villafranca di Verona, Italy

Data Controller's email address: info@rfcomputer.it

Types of Data collected

Among the Personal Data collected by this Application, independently or through third parties, there are:

• Geographical location
• General activity data

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or through specific information texts displayed prior to the collection of the Data.

Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this Application.

Unless otherwise specified, all Data requested by this Application is mandatory. If the User refuses to provide it, it may be impossible for this Application to provide the Service.

In cases where this Application indicates some Data as optional, Users are free to abstain from communicating such Data without any consequences on the availability of the Service or its operability.

Users who have any doubts about which Data is mandatory are encouraged to contact the Data Controller.

The possible use of Cookies or other tracking tools by this Application or the owners of third-party services used by this Application serves the purpose of providing the Service requested by the User and other purposes described in this document.

The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through this Application.

Mode and place of processing the collected Data

Mode of processing

The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of the Personal Data.

The processing is carried out using IT and/or telematic tools, with organizational methods and logics strictly related to the purposes indicated.

In addition to the Data Controller, in some cases, other parties involved in the organization of this Application may have access to the Data or external parties such as technical service providers, hosting providers, IT companies, and other Data Processors.

The updated list of Data Processors can always be requested from the Data Controller.

Place

Data is processed at the Data Controller's operating offices and in any other place where the parties involved in the processing are located. For further information, contact the Data Controller.

The User's Personal Data may be transferred to a country other than the one in which the User is located.

Retention period

Unless otherwise indicated in this document, Personal Data is processed and stored for the time required by the purpose for which it was collected and may be retained for a longer period due to any legal obligations or based on the Users' consent.

Purposes of processing the collected Data

The User's Data is collected to allow the Data Controller to provide the Service, comply with legal obligations, respond to requests or enforcement actions, protect its rights and interests, detect any malicious or fraudulent activities, and for the following purposes:

• Productivity management
• Location-based interactions
• Management of activity data

Details on the processing of Personal Data

Management of activity data

This type of service allows the Data Controller to use activity data for the operation of this Application or to provide specific functionalities.

This could include movements, altitude changes, or other data related to activity and the surrounding environment.

Most devices allow the User to control which Data is accessible and which is saved.

Activity data tracked by the device

Personal Data processed: general activity data.

This Application uses some activity data tracked by the device to operate and provide specific functionalities.

Productivity management

This type of services helps the Data Controller to manage tasks, work projects, and in general activities related to productivity.

When using this type of service, the Users' Data will be processed and may be retained depending on the purpose of the respective activity.

Management of deliveries and GPS localization

Drink Assistant Driver

Drink Assistant Driver uses the User's data to allow the management and execution of delivery rounds assigned by the company.

The Personal Data processed may include:

• User ID
• Affiliated company
• Device information
• Clients and their addresses
• Orders
• Assigned rounds
• Operational notes
• Delivery status
• Date and time of activities
• Geographical location of the device detected via GPS

Use of geographical location

Geographical location may be used, subject to the User's authorization, for:

• Showing the driver's current location
• Providing directions to assigned destinations
• Checking the progress of the delivery round
• Updating delivery status
• Improving the organization and efficiency of the service

Background location

When necessary for the app's operational features, location may also be detected while the app is in the background. Access to location occurs only after the User has granted the permissions requested by the operating system.

The collected data is synchronized with Drink Assistant's servers via secure connections and is accessible exclusively to authorized subjects, such as the User's affiliated company and the personnel responsible for managing the service.

The data is not used for advertising or commercial profiling purposes.

Location-related data is retained for the period necessary to manage deliveries, ensure service security, and fulfill any legal obligations.

The User can disable location access from their device settings. Disabling may impede or limit certain app functionalities, including navigation, round monitoring, and automatic delivery updates.

Location-based interactions

Geolocation

Personal Data processed: geographical location.

This Application may collect and use Data related to the User's geographical location to provide services based on said location.

Most devices provide tools to decline geographical tracking. Should the User have expressly authorized this possibility, this Application can receive information on their actual geographical location.

Further information on the processing of Personal Data

User identification through UUID

This Application may use a universally unique identifier (UUID) for technical, statistical purposes, or to store Users' preferences.

This identifier is generated with the installation of the Application and is removed when the Application is uninstalled. In the case of a new installation, a new UUID is generated.

Unique device identification

This Application may use a unique device identification code for statistical purposes or to store Users' preferences.

Further information for Users in the European Union

Legal basis for processing

The Data Controller processes Personal Data relating to the User when there is at least one of the following conditions:

• The User has given consent for one or more specific purposes.
• Processing is necessary for the execution of a contract with the User or to take pre-contractual measures.
• Processing is necessary to fulfill a legal obligation to which the Data Controller is subject.
• Processing is necessary for the execution of a task carried out in the public interest.
• Processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties.

It is always possible to ask the Data Controller to clarify the concrete legal basis for each processing.

Further information on the retention period

Unless otherwise indicated in this document, Personal Data is processed and stored for the time required by the purpose for which it was collected.

• Data collected for purposes related to the performance of a contract will be retained until the contract is fully performed.
• Data collected based on legitimate interest will be retained until such interest is fulfilled.
• When processing is based on consent, the Data may be retained until the consent is withdrawn.

The Data Controller may also be obliged to retain the Data for a longer period to comply with legal obligations or by order of an authority.

User rights under the GDPR

Within the limits set by the law, the User has the right to:

• Withdraw consent. Withdraw consent at any time previously given.
• Object to processing. Object to the processing of their Data in cases provided by the law.
• Access their Data. Obtain information on the data processing and receive a copy of the Data.
• Request rectification. Correct or update inaccurate Data.
• Obtain restriction of processing.
• Obtain the erasure of their Personal Data.
• Request Data portability.
• Lodge a complaint. File a complaint with the competent supervisory authority.

Details on the right to object

When Personal Data is processed in the public interest, in the exercise of official authority, or on the basis of a legitimate interest, Users have the right to object to the processing for reasons related to their particular situation.

How to exercise your rights

Requests can be directed to the Data Controller using the contact details provided in this document.

The request is free and the Data Controller will respond as soon as possible and, where required by the GDPR, within one month.

Further information on processing

Defense in court

The User’s Personal Data may be used by the Data Controller in legal proceedings or in the preliminary stages leading to possible establishment for the defense against abuse in the use of this Application or related Services.

The Data Controller may also be required to disclose the Data by public authorities.

Specific information

At the User's request, this Application may provide additional and contextual information concerning specific Services or the collection and processing of Personal Data.

System logs and maintenance

For operation and maintenance purposes, this Application and any third-party services may collect system logs, which are files that record interactions and that may also contain Personal Data, such as the User IP address.

Information not contained in this policy

More details concerning the collection or processing of Personal Data may be requested from the Data Controller at any time. Please see the contact information at the beginning of this document.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time, notifying Users as appropriate.

Should the changes affect processing activities whose legal basis is consent, the Data Controller will collect new consent from the User where required.

Definitions and legal references

Personal Data (or Data)

Any information that directly, indirectly, or in connection with other information allows for the identification or identifiability of a natural person.

Usage Data

Information collected automatically through this Application (or third-party services employed in this Application), which can include: the IP addresses or domain names of the computers utilized by the Users who use this Application, the URI addresses, the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server’s answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by the User, the various time details