This notice is provided pursuant to Art. 13 of Regulation (EU) 2016/679 concerning the protection of natural persons with regard to the processing of personal data of the User.
Versione 3.0 updated on 10/23/2025
DATA CONTROLLER
Bringme S.r.l. Società Benefit
VAT number: IT10979400016
egistered office: Via Pier Carlo Boggio, 59, 10138 Turin (TO)
e-mail: [email protected]
DATA PROTECTION OFFICER (DPO)
The Data Protection Officer (DPO) is Argo Business Solutions Srl, reachable for any matters at the following email address: [email protected].
SOURCE AND TYPE OF DATA PROCESSED
A minimum age of 18 is required to use the Services. The Data Controller does not knowingly collect information from individuals under 18 years of age. If it discovers that a minor under 18 has provided personal data, such information will be deleted. If you are aware of any user under the minimum required age using the Services, please contact the Data Controller at: [email protected].
PURPOSES OF PROCESSING
As part of the interaction with the platform, messages and communications strictly necessary to ensure the use of the application may be sent to the user (for example: registration confirmation emails, password recovery emails, etc.) and in response to specific requests made by the user.
2. To allow the user to interact with other users on the platform in the manner defined by the Terms and Conditions of Service: https://www.jojobrt.com/termini_e_condizioni
3. To allow the user to benefit from any promotional initiatives, such as cashback and gift cards.
4. To fulfill pre-contractual, contractual, accounting, tax, and legal obligations arising from relationships with the user.
5. To collect statistics and metrics aimed at ensuring the proper functioning of the application.
6. To exercise the rights of the Data Controller (e.g., the right of legal defense, pursuing any misuse of the application).
7. To send the User emails, promotional communications, and push notifications containing commercial offers, promotional content, etc.
LEGAL BASIS
Processing necessary for the performance of a contract to which the Data Subject is a party or for the implementation of pre-contractual measures taken at the Data Subject’s request (Art. 6(b) GDPR).
Exclusively regarding the Data Subject’s location, explicit consent (Art. 6(a) GDPR) obtained via in-app pop-up.
Processing necessary for the performance of a contract to which the Data Subject is a party or for the implementation of pre-contractual measures taken at the Data Subject’s request (Art. 6(b) GDPR).
Compliance with the legal obligations to which the Data Controller is subject (Art. 6(c) GDPR).
Legitimate interest of the Data Controller (Art. 6(f) GDPR) – i.e., to monitor the proper functioning of the application.
Legitimate interest of the Data Controller (Art. 6(f) GDPR).
Explicit consent of the Data Subject (Art. 6(a) GDPR).
RETENTION PERIODS
If a user does not interact with the application for a period exceeding 18 months, their profile will be deleted and all personal data will be erased through anonymization procedures (only anonymous statistics will be retained).
Logs generated by the user’s actions on the platform are retained for a period of 18 months.
10 years regarding correspondence of legal and commercial relevance.
10 years regarding correspondence of legal and commercial relevance.
Retained for the period necessary to achieve the specified purpose.
For the duration of any litigation, or until the expiration of appeal periods.
Retained until the Data Subject withdraws consent, and in any case for a period not exceeding 10 years from the moment the Data was collected.
To allow the user to use the “Jojob” app, specific permissions are also required (consent is requested via a pop-up within the application). The complete list is provided in ANNEX A.
NATURE OF DATA PROVISION
Providing Data for purposes 1 to 6 is mandatory. If the Data is not provided, the Data Controller will not be able to allow the user to use the Jojob application. Providing data for purpose 7 is optional and voluntary. The Data Subject may therefore choose not to provide any data or later deny the possibility of processing Data already provided; in this case, they will not receive offers related to the Products and Services offered by the Data Controller.
WITHDRAWAL OF CONSENT
The Data Subject may, at any time, withdraw consent previously given for purpose 7. Following withdrawal, the Data Controller will cease processing, without prejudice to the lawfulness of the processing already carried out before the withdrawal. With regard to purpose 1 and the location collected via GPS, consent can be withdrawn in the permissions section of the device settings.
DATA RECIPIENTS
User Data will not be disclosed but may be made accessible, where necessary for the provision of services or by law, to:
Furthermore, the Data Controller may communicate the Data of the Data Subject to:
The Data Controller lists the main data processors and sub-processors employed for the proper functioning of the application in ANNEX A of this notice.
TRANSFER OF DATA
OUTSIDE THE EU
Personal Data is stored on servers located within the European Union, managed by third-party companies duly appointed as Data Processors.
The Data Controller may transfer certain categories of User Data to countries outside the European Union. Data will be transferred only to countries deemed adequate by the European Commission or to organizations that provide safeguards pursuant to Articles 44–50 of the GDPR.
DATA SUBJECT RIGHTS
The Data Subject may exercise, in relation to the processing of Data described herein, the rights provided by the GDPR (Articles 15-22), including:
COMPLAINT TO THE AUTHORITY
The Data Subject has the right to file a complaint with the Italian Data Protection Authority (Article 77 GDPR).
AUTOMATED DECISION-MAKING PROCESSES
The Data Controller does not carry out any processing of personal data consisting of automated decision-making processes.
ANNEX A
1. Main processors employed for the proper functioning of the application
Responsible for the treatment
Reference
Firebase Analytics
Brevo (Email, Sms)
2. Permissions requested by the application
Responsible for the treatment
Reference
Push notifications
Allow the User to receive notifications from the app.
Camera
1. Allow the User to take a photo and use it as a profile picture.
2. Allow the User to scan QR codes to certify specific trips.
Image Gallery
Allow the User to select a photograph from their image gallery and use it as a profile picture.
Position
The application may need to detect the User’s GPS location and instantaneous speed to measure distances traveled using different mobility options. This detection is performed via location sampling. Specific controls can detect if the location is simulated by software.
Mobile Phone
Allow verification of the phone number provided during registration by sending a code via SMS.
Physical activity
Record the User’s alternative mobility methods (for example: use of the bicycle).
Bringme Srl Società Benefit
Via Pier Carlo Boggio, 59 – 10138 Torino
P.IVA 10979400016
Share capital 23.658,73€ i.v
REA TO1177694
Jojob Real Time Carpooling is a project of:
