Legal
Privacy policy
Commute Connects is built so that a small group can share a car. That requires the group to know who is driving, and when. This page explains which data we process to make that work, who sees it, and what you decide yourself.
1. Who is responsible
The data controller is Kjeldager Drift ApS, CVR 42284076, Tågeskovvej 30, 4733 Tappernøje, Denmark. You can write to us about anything concerning your data at hello@agent.commuteconnects.com.
The group administrator has access to information about the group's members in order to run the group. Section 5 says more about that.
2. Which data we process
We only process what the app needs. The overview follows what you do in the app.
| Data | What it is used for |
|---|---|
| Account Name, e-mail address and a stable identifier from MitID. |
Creating and signing in to your account, confirming you are who you say you are, and sending you messages about the account. |
| Driving licence The photo of your driving licence that you add yourself. |
The group administrator reviews the photo and approves you as a member. We run no automated check of it. |
| Bookings and trips Your bookings in the shared calendar, times, photos of the odometer at the start and end, and your trip history. |
So the group can see when the car is free or taken, and so the group can settle what was booked with its members. |
| Damage Photos and a description when you report damage. |
So the rest of the group knows what has happened to the car. |
| Messages What you write to the group in the app. |
So the group can talk about the car. |
| Notifications A technical push token for your phone. |
Sending you notifications about the car and your bookings. You control this in your phone's settings. |
| Location Your phone's location while you are using the app. |
Showing where the cars are and helping you with bookings. The app asks for permission the first time, and you can turn it off in your phone's settings. |
| Payments What you have been charged and whether the payment went through. |
So the group can settle with you. The payment itself happens at Stripe on the group's own Stripe account. We do not store card numbers. |
| Charging Energy readings from the charger, if your group uses our software to share a charger. |
Showing consumption and the charger's status. The readings come from Teal Nordic. |
3. Where the data comes from
- From you, when you create the account, add your licence, book, take odometer photos, report damage and write messages.
- From MitID, when you verify your identity. We receive your name and a stable identifier, not your CPR number.
- From the group administrator, who invites you and approves your licence.
- From Stripe, which tells us whether a charge went through.
- From Teal Nordic, if the group shares a charger: readings of how much power the charger has delivered. The readings are about the charger, not about you.
4. Why we are allowed to process it
- To provide the service to you (contract, GDPR Article 6(1)(b)): account, bookings, trips, damage, messages and payments.
- Because the group has a legitimate interest in knowing who drives the car, and we have a legitimate interest in keeping the service secure (Article 6(1)(f)): MitID verification and licence photos.
- Because the law requires it (Article 6(1)(c)): bookkeeping of payments that pass through the platform.
- Because you have allowed it in your phone's settings: notifications. You can withdraw that in the same place at any time.
5. Who sees the data
The group. The other members see your name, your bookings in the calendar and what you write in the group's messages. The group administrator additionally sees your licence photo, your trips with odometer photos, your damage reports and what you have been charged. The administrator may only use the data to run the group.
Our suppliers process data on our behalf and only on our instructions:
- MitID through an approved MitID broker, which handles the identity verification itself.
- Stripe, which handles payments on the group's Stripe account. Stripe is independently responsible for its own processing of your payment details.
- Server operations, where the app's data is stored.
Teal Nordic is deliberately not on this list. We read energy measurements from the charger through them, but we send them no information about you — no name, no account, no record of who charged.
We do not sell your data, and we do not use it for advertising. If a supplier processes data outside the EU/EEA, it happens on a valid transfer basis, such as the European Commission's standard contractual clauses. We only hand data to authorities when we are obliged to.
6. How long we keep it
We keep your data for as long as your account exists. When the account is deleted, we delete it, except for:
- Payment records that the Danish Bookkeeping Act requires us to keep for 5 years after the end of the financial year.
7. Your rights
Under the GDPR you have the right to:
- know which data we hold about you and get a copy of it,
- have incorrect data corrected,
- have data deleted when we no longer have a reason to keep it,
- have processing restricted while a disagreement is resolved,
- object to processing based on a legitimate interest,
- receive the data you have given us in a common format,
- withdraw consent, without affecting what happened before.
Write to hello@agent.commuteconnects.com. We reply within a month. We may ask you to confirm who you are before we hand anything over.
8. Deleting your account
To delete your account, write to hello@agent.commuteconnects.com. We may ask you to confirm who you are. We then delete the account and your data according to section 6 and confirm when it is done. If you administer a group, we first agree what should happen to the group.
9. Security
The connection between the app and our servers is encrypted. Access to data requires signing in, and a group's data can only be seen by the group's members and us.
10. Cookies and this website
This website, commuteconnects.com, uses no cookies and no tracking, and it loads nothing from third parties. The only links leading away from the site go to the App Store, Google Play and our e-mail address.
11. Complaining to Datatilsynet
If you are unhappy with how we handle your data, we would like to hear from you first at hello@agent.commuteconnects.com. You also have the right to complain to Datatilsynet, the Danish Data Protection Agency.
12. Changes
If we change how we process data, we update this page and point it out in the app. For material changes we notify you in the app. The current version is always here.
Kjeldager Drift ApS
CVR 42284076
Tågeskovvej 30, 4733 Tappernøje, Denmark
hello@agent.commuteconnects.com