Contents:

1. Who we are?
2. What types of information do we collect about you?
3. Why do we process your personal data?
4. What is the legal basis for the processing of your personal data in terms of the Personal Data
Protection Act and the GDPR Regulation?
5. To whom do we provide or make available your personal data?
6. How long will your personal data be processed?
7. What rights do you have in relation to our processing of your personal data?
8. How can you contact us?

Dear users,
these Terms of Personal Data Protection (hereinafter referred to as "Conditions") refer to personal data
that we collect about you through our mobile application "SVÍŠT" available at svist.sk/#app, or through
the digital distribution platforms App Store and Google Play, as well as the website www.svist.sk, by mail,
by phone, by e-mail, through our social media and in other forms of communication with us (hereafter
collectively only as "SVIST“).

SVIŠT is a communication platform and online software application developed and used to provide
services for the rental and use of classic or electric scooters and bicycles, or other means of transport, as
well as related services necessary for recharging, maintenance, collection of these means of transport,
which are provided to the user of SVIŠT and available.

Since SVIŠŤ is intended for use by consumers, i.e. natural persons who, when concluding and fulfilling a
consumer contract, do not act within the scope of their business activity or other business activity, please
note that these Terms apply to the protection of their personal data.

Personal data is any information relating to an identified or identifiable physical person, who is the data
subject (i.e. the person to whom the personal data relate). An identifiable physical person is a person who
can be identified directly or indirectly, in particular by reference to an identifier such as name,
identification number, location data, online identifier, or by reference to one or more elements that are
specific to physical, physiological, genetic, mental , economic cultural or social identity of this person.

1. Who we are?

We are GoScooters s. r. o., with registered office at Mlynské nivy 56, 821 05 Bratislava - Ružinov district,
ID number: 54 122 856, registered in the Commercial Register of the Municipal Court Bratislava III,
section: Sro, file no.: 159113/B (hereinafter referred to as "GoScooters" or "my" or "our company") and
we are the operator of the above-mentioned website and mobile application SVIŠT, through which we
offer our services.
We always take your privacy into account when providing our services as well as when innovating them.
We are aware of our obligations to our users stemming from the requirements of legislation regulating
your privacy and the protection of your personal data. Therefore, we always approach the protection of
personal data with respect and responsibility.
Within our services, you can manage your privacy in various ways. At the same time, you always have the
opportunity to use your rights arising from Regulation (EU) 2016/679 of the European Parliament and of
the Council of 27 April 2016 on the protection of natural persons in the processing of personal data and
on the free movement of such data, which repeals Directive 95/46/EC (general data protection regulation)
("GDPR regulation") and Act no. 18/2018 Coll. on the protection of personal data and on the amendment
of certain laws ("The law on the protection of personal data“).
In the sense of the GDPR Regulation, our company has the status of an operator. We process and
protect your personal data during your use of SVIŠŤ.
The purpose of these personal data protection conditions is to provide information about who, why, how
your personal data is processed, to whom your personal data is provided, what rights you have under the
GDPR Regulation and the Personal Data Protection Act, and how you can exercise them.
2. What types of information do we collect about you?
In order to be able to provide you with our services and products, as well as to constantly improve the
products and services we offer, we collect information about you.
The information we collect about you and how we use it depends on whether and how you purchase or
use our particular service and how you manage your privacy control with us. In principle, the information
we process about you can be broken down as follows:

• Contact information:

-name, phone number and email address.
- for some of our services, we may require additional information, such as your address.

• Profile information:

- profile picture, saved addresses, language and communication preferences.
- for some of our services, we may require additional data, such as information about your driver's
license.

• Geolocation:

- for example, the place you want to get from or the location of scooters near you, the time, the
progress of the ride and the final destination of the trip.

• Payment information, such as the amount charged and the payment card used.

• Records of communications and correspondence:

- for example, when you join our chat in the SVIŠT app or get in touch with our customer service
staff.

• Limited identification data of the device, for example the IP address on which the SVIŠT

application is installed

• Data on the use of transport services:

- for example, data about driving status, times and data about your behavior according to user
ratings.

• Sensor data for rental vehicles:

- It contains information such as vehicle speed, engine power, driving style information (including
sudden braking or skidding) and the total weight of objects and people in the vehicle and weight
changes.

• Data related to communication via instant messages directly in the SVIŠT application:

- the date and time of the communication and its content.
Information that we also receive from other sources and that:

• information about you from other users – we may collect information about you from other

users, for example, when they contact us about you, e.g. when they alert us to certain actions of
yours or recommend you as a possible user of the services we provide or provide

• analytical data about traffic and the use of our services

Information obtained in connection with the use of our services and that:

• information about your interaction with us, for example, how the services were used, login

method, from where you came to our company's website and how long you used it, reaction
times, download errors, how to access the services and stop using them, etc.

• technical data of used devices and settings, for example IP address, browser settings, operating

system, platform, cookies; You can find more information on how we use cookies at the link:
www.svist.sk (add the exact link to the cookies policy).

3. Why do we process your personal data?
In order for us to process your personal data in accordance with the law, it is necessary for us to have a
predetermined purpose for processing them. Below we list the purposes for which your personal data is
collected and further processed.
For the purposes of registering, creating and managing an account in SVIŠŤ and the subsequent
provision of services
To use SVIŠT and its functionalities, it is necessary to register in the SVIŠT application and create a user
account in SVIŠT. In most cases, the legal reason for processing your personal data is the fulfillment of a
contract.
In this case, we will work with the contact information you provide us, especially through the SVIŠT
mobile application.
For this purpose, we obtain your personal data because we provide you with our service (use of SVIŠŤ),
freely chosen by you in accordance with our terms governing the provision of the chosen service. By
accepting our terms governing the provision of your chosen service, a contract is concluded between you
and our company.
For the purpose of finding or renting a vehicle (especially a scooter or bicycle)
We help you find or rent a vehicle. We collect and process personal data in order to show you the location
of our nearest vehicles available for rent, such as our scooters or bicycles.
Quick messages directly in the SVIŠT application are processed for the purpose of providing services and
customer support (including resolving disputes between the driver and the passenger), for the purpose of
security, analysis, as well as to improve our products and services.
For the purpose of determining the route and ensuring a smooth journey
We use geolocation data to ensure you get to your destination and to resolve quality issues related to our
services. We also need to know where you choose to drop off your rental vehicle so we can properly bill,
charge batteries and maintain our fleet.
We also collect data about the routes taken by our users to analyze the geographical coverage. For
example, it allows us to improve recommendations to users about the most efficient routes and helps us
ensure that our rental vehicles, such as our scooters, are in the most convenient locations for customers.
For the purpose of optimizing the SVIŠT application
We use contact data to inform users about updates to the SVIŠT application so that they can continue to
enjoy our services.
We also collect limited data from the device you use to connect to our Internet, mobile and telephone
services and to ensure the security of your account through authentication and verification controls.
For the purpose of making the payment
We collect payment data to process user payments. We also process payments for our rental vehicles,
such as our cars and scooters.
To maintain and promote standards
We collect information about ride statuses, time and user ratings based on feedback, ensuring
compliance with our terms and conditions, and making sure we provide quality and enjoyable service for
everyone. Customer support data and correspondence is collected for feedback purposes and to resolve
disputes and quality of service issues.
For the purpose of providing information to users
We keep you informed: Your name, phone number and email address will be used to communicate with
you, for example to inform you that your ride has ended, to send you ride confirmations and important
service updates, for example, if our scooter rental services are suspended during inclement weather.
When using SVIŠT rented vehicles, we process data collected through the sensors of the rented vehicles
for safety purposes, to identify potentially dangerous driving behavior and, if necessary, to send
notifications to the person concerned about detected dangerous behavior - i.e. when there is a significant
change in weight compared to the previous ride. The relevant notification has no serious consequences
for the person concerned - the aim is to ensure a safe driving style.
To fulfill legal obligations
Special legal regulations may impose various obligations on us as a service provider, for the purpose of
which the processing of your personal data is necessary. An example of when the purpose of processing
personal data is the fulfillment of legal obligations is the Accounting Act, according to which we are
obliged to store certain data for paid services for the period specified in this Act.
The purpose of this processing is to keep records and handle court disputes and other legal proceedings,
through which GoScooters mainly pursues proving, exercising and or defending its legal claims. In this
case, the legal basis is the legitimate interests of our company as the operator of the Application, through
which it pursues the demonstration, application or defense of its legal claims.
To evaluate, maintain and improve our products and services and to develop new products and
services
Based on your information, we ensure that our products and services work as you expect them to, for
example, we monitor outages or fix problems that you report to us.
With the help of your information, we also try to innovate our products and services - for example, when,
based on your suggestions, we determine the need to improve the quality of the service or register a
demand for a new product or service, or evaluate the need for higher user protection, etc.
The information we collect within the existing offer of products and services helps us to improve the
quality of the development of new products and services.
To provide customized products and services, including content and advertisements
On the basis of information from you, we are able to ensure that when selling our products or providing
our services, the provided service is "tailored" to your needs and preferences.
We provide you with customized content, e.g. through the display of relevant recommended articles,
relevant and interesting offers for you, which we believe could appeal to and interest you,
recommendations or other similar measures to facilitate your use of our products and services and
improve your user experience when using our services or choosing and purchasing our products.
The aim of processing your personal data for this purpose is also to simplify the use of our company's
services, e.g. preferring payment methods for the purpose of future payments for our products and
services.
The information we collect from your various devices (operating system version, application version and
device hardware information) helps us maintain a consistent offering of goods and services across all of
your devices.
To enforce the security of services, prevent abuse of services and investigate violations of our
conditions
We care about the security of our service offering. In order to enforce the security of our services, we
process your personal data also as part of the prevention of spam, phishing, harassment, misuse of your
user accounts or other prohibited activities.
As part of this processing purpose, we implement our commitment to you to ensure the protection of our
IT environment against attacks and other interventions, so that the use of our services is safe. We ensure
that the terms of our services are respected by other users, thus ensuring a valuable and safe use of the
services.
Thanks to information from computers, phones and other devices on which you install and use our
services, or when you purchase our products, depending on the permissions you have granted, we can
ensure a higher protection of your privacy. We use the obtained data as an aid in the provision and
support of our services and also for the purpose of increasing your security. The data collected from the
devices helps us to verify the user's identity, as we constantly strive to protect your account through a
team of engineers and technologies, such as encrypting both communications and other content (such as
photos) through the HTTPS protocol.

4. What is the legal basis for the processing of your personal data in the sense of the
Protection Act
personal data and GDPR?
The legality of processing your personal data is justified by the following legal bases:
As a rule, personal data is processed for the purpose of providing contracted services through the SVIŠŤ
application. This means that in order to provide you with the promised service and fulfill our terms, we
will process your personal data in order to fulfill these obligations.
In other circumstances, we generally process your personal data on the basis of a legitimate interest.
Legitimate interests include our business interests in providing innovative, personalised, safe and
cost-effective services to our passengers and partners, unless these interests outweigh other interests.
Our legitimate interests also include investigating and detecting fraudulent payments and other malicious
activity, maintaining the security of our network and systems, implementing and maintaining features to
ensure the security of our services, and responding to suspected or actual criminal activity.
We may sometimes rely on alternative legal bases when:

• it is necessary to comply with a legal obligation, such as processing data where required by law, including for example where there is a valid legal requirement to disclose personal data to a third party, such as a court or regulatory authority;
• we protect our life interests or the interests of others, for example in the event of an emergency or immediate threat to life; or
• you have given us your express consent for this with another specific purpose of which you have been fully informed.

If you choose not to provide us with your personal data, this may prevent us from fulfilling our contractual
obligations to you or from the activity that is expected of us by law. It may also mean that we cannot
operate your account. For example, we collect and process the personal data provided by you during the
installation and use of the SVIŠT application. Refusing to share geolocation data through the app means
that we cannot show our rental vehicles near you. We will not be able to fulfill our obligations to you in
other circumstances, such as if you refuse to perform a verification check to ensure the integrity of your
account. Such an account may be suspended or blocked in order to prevent fraud.

If we process your personal data based on your consent, you are entitled to revoke this consent at any
time.

5. Direct marketing

We may send you marketing messages to your email address and/or phone number if you give us your
consent or as a result of your consent. We may personalize marketing messages using information about
your use of the SVIŠT service, such as how often you use the SVIŠT app and your shipping preferences.
If you no longer wish to receive marketing communications, please click the "Unsubscribe" link in the
footer of one of our emails or unsubscribe in the profile section of the SVIŠT application.

6. To whom do we provide or make available your personal data?

From the point of view of the Personal Data Protection Act, we have the status of operator, which means
that it is our company that defines the purposes of processing.
In connection with our activity, your personal data may be transferred or made available to other entities,
either as an independent operator or an intermediary.
As an operator, we ensure that everyone to whom your personal data is transferred adheres to a high
standard of data protection. In no case do we provide your personal data to an entity where this standard
is not ensured.
Feedback provided by passengers regarding the quality of the transport service is anonymous. Your rating
remains between you and GoScooters.
Depending on the chosen payment method, your personal data may be provided or made available to the
contractual partner of GoScooters ensuring the implementation of payments through the payment
gateway. For payments, GoScooters uses external service providers to whom it provides the data
necessary to make the payment (name and surname, e-mail address, telephone number, places of start
and end of the ride, payment ID, payment method, possibly other data on means of payment, invoice
number , language, zone/region).
The processing of personal data by GoScooters companies and partners will take place under the same
strict conditions as set out in this privacy notice.
The legal basis of payment service providers processing data on their own behalf can be found in the data
protection declarations of these providers.
In certain circumstances, we are required by law to share information with external recipients. For
example, based on a court order or in cases where we cooperate with a data protection supervisory
authority to deal with complaints or investigations. We may also respond to requests, such as from law
enforcement, if we have a good faith belief that the response is required by law in that jurisdiction, or
that furthers a public interest role, affects users in that jurisdiction, and is consistent with international
recognized standards. In any case, we will always ensure that we have a legal basis for sharing this
information and ensure that our decision is documented.
7. How long will your personal data be processed?
The processing of your personal data takes place in accordance with legal requirements, which means
that we do not keep personal data longer than is necessary for the purpose of processing.
If we process your personal data on a legal basis - performance of the contract, we process your personal
data for the entire duration of the contractual relationship between us. If the contract is terminated, we
dispose of your personal data, unless it is possible to process your personal data on another legal basis.
For example, you ask us to cancel your customer account, and we are obliged to dispose of your personal
data. However, if you have used some of our paid services, we are entitled to continue processing data
related to your completed payments for the purposes of fulfilling our obligations arising from tax and
accounting legislation.
If we process your personal data on a legal basis - the fulfillment of legal obligations, then we process
your personal data for the period specified by law.
If we process your personal data on a legal basis - our legitimate interest or the legitimate interest of third
parties, we process your personal data for the duration of the legitimate interest.
If we process your personal data on a legal basis - your consent, then we process your personal data for
the period for which you have given us your consent to process your personal data. When processing
personal data for the purpose of participating in a competition organized by us to support our products or
services, this period is specified in the specific statute of the competition or the conditions of the
competition.
Please note that uninstalling the SVIŠT application on your device will not delete your personal data. In
the event that the SVIST application has not been used for three years, we will contact you and ask you to
confirm whether you want your account to be active for future use. If no response is received within a
reasonable time, the account will be deactivated and the personal data will be deleted, unless the data is
required for any purpose mentioned above in this privacy notice.

8. Transfer of personal data to third countries

As part of its normal activities, the operator does not transfer your personal data to third countries or
international organizations. Only GoScooters and its intermediaries will have access to your personal data.
The data is physically located on the territory of the Slovak Republic (European Union).
The transfer of your personal data to third countries can only occur when you contact the Operator
through his profile on a social network (e.g. Facebook, Inc.), which is the parent company of the European
branch operating the aforementioned social network. Some cookies may also be transferred to third
countries in specific cases.
In the case of the transfer of personal data to third countries, GoScooters always undertakes to ensure a
sufficient level of protection of the personal data of the persons concerned.
If GoScooters transfers personal data to third countries that do not guarantee an adequate level of
protection in the future, our company undertakes to comply with the GDPR regulation and the Personal
Data Protection Act, as well as other generally binding legal regulations.

9. Automated processing of personal data, including individual decision-making profiling

As part of the performance of the contract, automated processing of personal data may also occur. In
such processing, automatic information systems are used, e.g. software, IT applications and other support
systems.
The aim of the automated processing of personal data is the efficient performance of the contract.
Profiling is any form of automated processing of personal data, which consists of the use of this personal
data to evaluate certain personal aspects related to a natural person, in particular to analyze or predict
aspects of the data subject related to performance at work, property relationships, health, personal
preferences, interests, reliability , behavior, position or movement.
GoScooters does not use decision-making based solely on automated processing, including profiling, in
connection with the processing of data subjects' personal data, which has legal effects that concern the
data subject or similarly significantly affect them.

10. What rights do you have in relation to our processing of your personal data?

We want you to be in control of your personal data. SVIŠT gives you control through a mobile application
where you can view your personal information, including profile data and driving history. We also offer
in-app settings on our website, such as marketing choices and transparent control of consent to the use of
cookies.

The Personal Data Protection Act as well as the GDPR Regulation provide you with several rights that
allow you to have the protection of your personal data under your own control. Our company fully
respects your rights. In this section you will therefore learn what these rights are.
Right of access to personal data
This right means that you are entitled to request confirmation from us as to whether personal data
concerning you is being processed. Therefore, if we process such personal data about you, you have the
right to obtain access to your personal data and information about:

• why we process your personal data (purpose of personal data processing)
• what data do we process about you (category of personal data)
• to whom they can or your personal data will be provided (identification of recipients or range of recipients)
• how long we will keep your personal data (personal data retention period)
• that you have the right to request from us the correction of personal data, their deletion as well as the limitation of their processing or that you have the possibility to object to the processing of personal data
• that you have the right to file a proposal to initiate a personal data protection procedure according to the Personal Data Protection Act or the right to file a complaint with the supervisory authority according to the GDPR Regulation, which is the Personal Data Protection Office of the Slovak Republic
• where your personal data comes from (source information), unless you have provided us with personal data directly
• whether we use automated individual decision-making, including profiling according to § 28 par. 1 and 4 of the Personal Data Protection Act; especially about the procedure used, as well as about the meaning and expected consequences of such processing of personal data for you
• about adequate guarantees regarding the transfer, in case we transfer your personal data to a third country or international organization

For you, this right of access also means the possibility to obtain personal data that we process about you.
We will provide you with a copy of your personal data that we process about you. However, if you
repeatedly request the provision of your personal data, we may ask you for a reasonable administrative
fee in connection with your request for a copy of your personal data.
The right to correct personal data
As part of the terms of the provision of our services, we inform you to provide us with the correct data.
However, if it still happens that we process incorrect data about you, the right to correct personal data
means that you are entitled to request that we correct incorrect personal data concerning you. Also,
taking into account the purpose of personal data processing, you have the right to have your incomplete
personal data supplemented.
The right to erasure of personal data (the so-called right to be forgotten)
You have the right for us to delete personal data concerning you and at least one of the following reasons
is met:

• Your personal data is no longer necessary for the purpose for which we obtained it or otherwise processed it
• you have withdrawn your consent to the processing of personal data, on the basis of which we process your personal data, and at the same time there is no other legal basis for their further processing
• you object to the processing of personal data, which is carried out on the legal basis of public interest or legitimate interest and no legitimate reasons for their processing prevail
• Your personal data was processed illegally
• Your personal data must be deleted, as it is necessary to fulfill an obligation under the law of the Slovak Republic or the law of the European Union
• Your personal data was obtained in connection with the offer of information society services according to § 15 par. 1 of the Personal Data Protection Act However, your right to erasure of personal data may not be granted in a specific case with regard to specific circumstances, if the processing of personal data is necessary for:
• exercising our right to freedom of expression or right to information
• fulfillment of a legal obligation
• exercising our legal claim
• the purpose of archiving, for the purpose of historical research or for statistical purposes, if it is likely that the right to erasure would make it impossible for us to achieve the goals of such processing or in a serious way difficult

The right to restrict the processing of personal data
You have the right for us to limit the processing of personal data concerning you and at the same time at
least one of the following reasons is met:

• during the period allowing us to verify the correctness of your personal data, you challenge the correctness of your personal data
• it will be illegal processing of personal data, you will object to the deletion of personal data and will request restriction of personal data processing instead of deletion
• we will no longer need your personal data for any of the processing purposes, or you will need them to prove or exercise your legal claims
• you will object to the processing of personal data until the time of verification whether our legitimate interests prevail over your legitimate interests

The right of portability of personal data
If our right to process your personal data is based on your consent or on the fulfillment of obligations
arising from the contract we have concluded with you, you have the right to request the transfer of data
relating to you that you have provided to us to another personal data controller.
Right to withdraw consent
If we process your personal data on a legal basis - the consent of the person concerned, you have the
right to revoke this consent at any time, even before the expiration of the period for which this consent
was granted. Withdrawal of consent does not affect the lawfulness of processing based on consent prior
to its withdrawal.
The right to invalidate automated individual decision-making, including profiling
You have the right to request that automated individual decision-making, including profiling, be
ineffective against you.
The right to object
If you have reasons for doing so related to your specific situation, you have the right to object to the
processing of your personal data if the legal basis for such processing is our legitimate interest.
However, if our legitimate interest in processing exceeds your personal interest, we may continue to
process your data, despite your objection to processing. We are also entitled to continue processing your
data, if this is necessary for proving, exercising or defending our legal claims.
Direct marketing (including analyzes carried out for the purposes of direct marketing):
You have the opportunity to object to the processing of your personal data for direct marketing purposes.
The objection also relates to analyzes of personal data (so-called profiling) that are carried out in
connection with direct marketing. If you object to direct marketing, we will stop processing your personal
data for this purpose, as well as for the purpose of all types of direct marketing actions.
Of course, you can simply opt out of receiving messages and personal offers on specific channels. For
example, you can only receive offers from us by e-mail, but not via SMS messages.
You can change your settings at any time in the SVIŠT user environment or on the website www.svist.sk.
You can also change your settings via email, SMS or a combination of these. If you need help with the
settings, you can always contact our customer service.
If, as a data subject, you do not have full legal capacity, your legal representative can exercise your rights
in accordance with the GDPR Regulation and the Personal Data Protection Act. In accordance with the
GDPR Regulation and the Personal Data Protection Act, the rights of the affected person who is not living
can be exercised by a close person.
If your requests as a data subject are clearly unfounded or unreasonable, especially due to their recurring
nature, we may request a reasonable fee taking into account the administrative costs of providing
information or refuse to act on the request.

11. How can you contact us?

If you have any questions regarding the processing of your personal data, you can contact us in
connection with the processing of your personal data. In that case, please email us at info@svist.sk or by
mail to the address Mlynské nivy 56, 821 05 Bratislava, Slovak Republic.
If you are not satisfied with our answer, or if you believe that we are processing your data illegally, you
can complain to the supervisory authority, which is the Personal Data Protection Office of the Slovak
Republic. You can find further information about the supervisory body of the Slovak Republic and the
procedure for submitting complaints on its official website: https://dataprotection.gov.sk/uoou/.
If you believe that there has been a violation of the terms of processing your personal data, you can file a
complaint with the above-mentioned office at the e-mail address statny.dozor@pdp.gov.sk.

These Terms and Conditions enter into force on 15.03.2024.