Privacy policy

This page is a draft. The bracketed fields must be completed and the text reviewed before launch.

1. Controller

Arvyn Media, owner Armin Razavi, Dwight-D.-Eisenhower-Straße 1, 65197 Wiesbaden, Germany
Email: info@comrido.com

2. Visiting this website

This website sets no cookies and uses no tracking or analytics tools, no social-media plugins and no external fonts or scripts. When you visit, the web server processes technically necessary connection data (IP address, date and time, requested file, amount of data, browser information) in server logs. Legal basis: Art. 6(1)(f) GDPR (secure and stable operation). Logs are deleted after [7 days – configure when setting up the server].

Your light or dark theme choice is stored only locally in your browser (local storage). It is not sent to us.

3. Beta request

If you use the form, we process your name, email address and, if provided, company, role and commute destination to invite you to the beta and to communicate with you. The details are sent to us by email and/or stored on our server in Germany. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future, e.g. by email to info@comrido.com. We delete the data at the latest six months after the beta phase ends, or sooner if you withdraw consent or the request is declined.

4. Contact by email

If you write to us, we process your message and sender details to answer your enquiry (Art. 6(1)(f) or (b) GDPR). We delete them once the matter is closed and no retention duties apply.

5. Hosting, domain and email

The website runs on a server of dogado GmbH (Germany). [name the app server once it is set up] Domain and email mailboxes are provided by InterNetX GmbH (INWX, Germany). With both providers [conclude / verify a data processing agreement (Art. 28 GDPR)].

6. The Comrido app

6.1 Sign-in and proof of employer

You sign in with your Microsoft work account. From Microsoft we keep only two technical identifiers: your organisation's id and your account id. We do not receive your email address or password. We use them to check that you work at a participating company, and repeat this check regularly. Legal basis: Art. 6(1)(b) GDPR (use of the app).

6.2 What you enter in the app

• Profile: display name (first name or nickname), optionally full name and job title.
• Commute: workplace and approximate starting point (postcode, street, or an approximate map point). If you wish, you can also give your exact address with house number so drive times and meeting points are more precise. This is optional. We use the exact address only for your own routes; other members never see more than your area (postcode and district). You can remove it at any time. We do not track your location.
• Weekly routine: office days, time windows, whether you drive or ride, offered seats, vehicle details.
• Rides: requests, confirmations, cancellations with reason, return-trip status.
• Messages to other members, preferred partners, groups, blocks.
• Feedback after a ride (e.g. on time yes/no) and safety reports. Others only ever see the note “Usually on time” once at least 5 rated rides show 80 % or more, never a number; only you see your own rate. [check how punctuality is shown (works council, if any)]
• Settings such as language and visibility.

Legal basis: Art. 6(1)(b) GDPR. Other members only see what a ride needs: your display name, approximate meeting points and times, and — if you allow it — your employer as a trust signal.

6.3 What your employer sees

Your employer receives no information about you personally: no rides, no routes, no messages. Numbers are only shown in aggregate, and only from five people upwards.

6.4 Safety and moderation

We review reports about other members and may warn, restrict or suspend accounts. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the safety of all members). So that a suspension can't be avoided by deleting and signing up again, we keep a non-reversible, keyed fingerprint (HMAC) of your Microsoft identifiers while a suspension is active (see 7).

6.5 Notifications

If you turn on push notifications (consent, Art. 6(1)(a) GDPR), we store your browser's delivery address. Messages are delivered through the push service of your browser or device maker (e.g. Google, Apple, Mozilla). You can turn them off at any time in the settings or in your browser.

6.6 Maps

For map views the app loads images from [OpenStreetMap Foundation (United Kingdom) or MapTiler (Switzerland) – depending on the chosen provider]. Your IP address is sent to that provider. Legal basis: Art. 6(1)(f) GDPR (showing the route). Both countries have an EU adequacy decision.

6.7 Address search and drive times

For address suggestions while you type and for drive times with live traffic, our server sends the places you enter (while typing, the text entered so far; for drive times, start and destination) to TomTom International B.V. (Netherlands). Your IP address and name are not sent, only the places. Legal basis: Art. 6(1)(b) GDPR (use of the app). [check data processing agreement with TomTom]

6.8 Weather

For the weather forecast for your commute, our server sends only the name of your area to our geocoding service (see 6.7) and then coordinates rounded to about 10 km to the Open-Meteo weather API of APIs GmbH (Switzerland). Your name, IP address and exact address are not sent; one forecast serves everyone in the same area and is kept for one hour. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in useful commute planning). [check classification of Open-Meteo and transfer to Switzerland (adequacy decision)]

6.9 Local storage

The app keeps settings and a copy of your data in your browser (local storage) so it is fast and works briefly without a connection. For sign-in we set a strictly necessary cookie. It expires after 30 days without use, and after 90 days at the latest.

6.10 Download your data or delete your account

Under Settings → “Your account” you can download everything we store about you as a file and delete your account yourself.

7. How long the app keeps data

We follow the periods used by other European carpooling services.

• While your account exists, we keep your details. [Inactive accounts: set a period, e.g. deletion after 5 years without use as at BlaBlaCar – not implemented yet]
• Open ride requests expire after 48 hours.
• When you delete your account, we delete straight away: profile, workplace, starting point, weekly routine, messages (including your conversation partner's copy), preferred partners, group memberships, blocks, notification devices, sign-in data and all sessions. Open and confirmed rides are cancelled and your ride partners are told.
• Past rides and feedback stay in other members' history without your name.
• Safety reports and restrictions concerning your deleted account are deleted two years after the account was deleted.
• If a suspension or restriction is active, after deletion we keep only the fingerprint from 6.4 — until the restriction ends, and at most two years for an open-ended suspension. It is then deleted automatically.
• Server error logs contain no content of your messages or details and are deleted after [set when setting up the server, e.g. 30 days].

8. Recipients and third-country transfers

Beyond the providers named above, Microsoft (sign-in), the map provider and your browser's push service, we do not share data with third parties. [Google and Apple push services may transfer data to the USA; verify the basis (EU-US Data Privacy Framework)]

9. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a supervisory authority, e.g. the Hessian Commissioner for Data Protection and Freedom of Information, Postfach 3163, 65021 Wiesbaden, Germany.