Last updated: March 2, 2020
Birdseye is a service offered to Volvo Cars customers or customers of an entity in the Partner Group, which allows customers to schedule a service appointment directly through the Volvo Valet app and have their vehicle picked up from their chosen location with the option to have a loaner delivered.
Birdseye is only available in certain markets.
The data controller for all personal data collected and processed in relation to the Birdseye service is Volvo Car USA LLC, a Delaware limited liability company, with the address 1 Volvo Drive, Rockleigh, NJ 07647. Volvo Car USA may hereinafter also be referred to as "Volvo Cars", "we", "us".
The use of the Birdseye service involves the processing of the following categories of personal information:
Drivers performing the pickup and delivery service as well as customers using the service need to create an account. In this case we will process: first and last name, contact details (email, personal and work phone numbers), password (hashed). This is done in the course of our provision of the service to our customers, in order to identify the driver and the customer and ensure communication with them. We also require drivers to upload a photo of themselves, in our legitimate interest to ensure that the customer can see the person that will greet them and take over their vehicle.
When a pickup and delivery is performed, we track the location of the driver through their smartphone. This is done in order to calculate the estimated time for the service.
When a customer uses the pickup and delivery service, we collect more information about the customer:
Customer Pickup & Delivery Service History – in order to know which services have been completed.
Customer Driver's License – if the customer uses a loaner vehicle.
Customer Insurance Card - Needed if the customer uses a loaner vehicle.
Customer License Plate and VIN number - Needed to identify vehicle.
Pickup Address - Needed to provide the service.
Pickup Notes inserted by customer (if any)
Service Notes inserted by workshop (if any)
Dropoff Address - Needed to provide the service
Dropoff Notes inserted by customer (if any)
When we send customers push notifications with the status updates of the service through the Birdseye app, we use the following categories of data in order to keep track of notifications sent:
Unique Device Identifier
Push Notification Token
Push Notification Title (May contain the names of customers, drivers, vehicle make/model/color)
Push Notification Body (May contain the names of customers, drivers, vehicle make/model/color)
When feedback is left after performance of the service, we collect the names of the customer and of the driver, the rating and comments given by the customer.
The quality of our service is essential and, because liability issues may arise regarding alleged damages to the car, we keep photos of the vehicle, along with timestamps and location, in our interest to defend our (and our partners and drivers involved in the service) rights and interests.
The data categories mentioned under 1, 2, 3 and 5 above are processed in the course of our performance of the Birdseye service. Category 4 is processed based on customer's consent to receive push notifications. Category 6 is processed based on our legitimate interest to ensure quality of the service.
Birdseye is addressed to persons holding a valid drivers' licence, therefore we do not process personal data of children.
The following retention times are applicable for our processing of personal data mentioned above:
Data about drivers (all categories of data except 6): 1 year from last activity in the service;
Data about customers (all categories of data except 6): 3 years;
Data from category 6: 5 years from the service, unless disputes arise in which case the period is extended with the time required to finalise the dispute.
Your personal information may be shared with any company that is a member of our group, which includes our ultimate parent company based in Sweden, where we consider that it is in our legitimate interests to do so for internal administrative purposes (e.g. storage of data, CRM), or for auditing and monitoring of our internal processes.
We may also share your personal information with our group companies where they provide products and services to us, such as information technology systems.
Access to your personal information is limited to those employees who need to know the personal information.
We will share your personal information with the following categories of third parties, on a need-to-know basis:
Amazon Web Services Ireland Limited and its subprocessors (European Union) – Data Hosting
Google Inc, together with its subprocessors (see list of datacenters at https://www.google.com/about/datacenters/inside/locations/index.html, under Privacy Shield) –
Analytics – Google Analytics is used to track events inside of the Birdseye apps such as clicks, location, page views, etc. This allows us to optimize the product and carry out Pickup and Deliveries. The following information is tracked in Google Analytics.
Data Visualization – Tools to create charts, graphs, and other visualizations of data for analysing and improving the Birdseye service.
Geolocation – Location data is used to locate pickup and dropoff locations for cars engaging in pickup and delivery.
Branch Metrics Inc (United States of America, under Privacy Shield) – Push Notifications
Twilio Inc. and its subprocessors (United States of America, under Twilio's binding corporate rules, Privacy Shield and the Standard Contractual Clauses) – SMS Communication
Slack – An internal communication tool used by Volvo Cars. Your data may be shared between our employees on this tool as a result of investigating a bug or issue.
All of such third parties act as our processors and are limited by contract in their ability to use your personal data for any purpose other than to provide services for us in compliance with each data privacy agreement in place.
We might also disclose your personal information to other third parties in the following eventualities:
If you request or authorise so;
to persons demonstrating legal authority to act on your behalf;
where it is in our legitimate interests to do so to run, grow and develop our business, meaning:
if we sell or buy any business or assets, we may disclose your personal information to the prospective seller or buyer of such business or assets;
if the company or substantially all of its assets are acquired by a third party, the personal data held will be transferred along with the assets it relates to;
If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, any lawful request from government or law enforcement officials and as may be required to meet national security or law enforcement requirements or prevent illegal activity;
In order to enforce or apply our terms and conditions or any other agreement or to respond to any claims, to protect our rights or the rights of a third party, to protect the safety of any person or to prevent any illegal activity.
Save as expressly detailed above, we will never share, sell or rent any of your personal data to any third party.
If we receive a verifiable request, then:
You have the right to request, free of charge, disclosure about the categories of personal data collected about you and also to obtain specific pieces of those personal data; the pieces of personal data can be obtained in a portable format, if feasible.
You have the right to request that we delete any personal data collected about you, subject to some exceptions and limitations.
You can exercise your rights by filling out this form https://www.volvocars.com/intl/footer/contact-us/subject-request/subject-request-form.
As a data subject you have specific legal rights relating to the personal data we collect from you:
Right to withdraw consent: Where you have given consent for the processing of your personal data, you may withdraw your consent at any moment.
Right to access your data: You may ask from us information regarding personal data that we hold about you. We will provide you with a copy of your personal data upon request. If you request further copies of your personal data, then we can charge you with a reasonable fee that we base on the administrative costs. You have the right to the information about our safeguards for the transfer of your personal data to a country that is outside the EU and the EEA if you request that we confirm whether or not we process your personal data, and we transfer your personal data to a country that is outside the EU and the EEA.
Right to rectification: You may obtain from us rectification of incorrect or incomplete personal data concerning you. We make reasonable efforts to keep personal data in our possession or control which are used on an ongoing basis, accurate, complete, current and relevant, based on the most recent information available to us.
Right to restriction: You may obtain from us restriction of processing of your personal data, if
you contest the accuracy of your personal data, for the period we need to verify the accuracy,
the processing is unlawful and you request the restriction of processing rather than erasure of your personal data,
we do no longer need your personal data but you require them for the establishment, exercise or defense of legal claims, or
you object to the processing while we verify whether our legitimate grounds override yours.
Right to portability: You have the right to receive your personal data that you have provided to us, and, where technically feasible, request that we transmit your personal data (that you have provided to us) to another organization, if:
we process your personal data by automated means,
we base the processing of your personal data on your consent, or our processing of your personal data are necessary for the execution or performance of a contract to which you are a party;
your personal data are provided to us by you, and
the transmission of your personal data does not adversely affect the rights and the freedoms of other persons.
You have the right to receive your personal data in a structured, commonly used and machine-readable format. Your right to receive your personal data must not adversely affect the rights and the freedoms of other persons. Your right to have your personal data transmitted from us to another organization is a right you have if such transmission is technically feasible.
Right to erasure: You have the right to request that we delete the personal data we process about you. We must comply with this request if we process your personal data, unless the data is necessary:
for exercising the right of freedom of expression and information;
for compliance with a legal obligation that binds us;
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes; or
for the establishment, exercise or defense of legal claims.
Right to object: You may object – at any time – to the processing of your personal data due to your particular situation, provided that the processing is not based on your consent but on our legitimate interests or those of a third party. In this event we shall no longer process your personal data, unless we can demonstrate compelling legitimate grounds and an overriding interest for the processing or for the establishment, exercise or defense of legal claims. If you object to the processing, please specify whether you also wish the erasure of your personal data, otherwise we will only restrict it.
You may always object to the processing of your personal data for direct marketing that was based on our legitimate interest, regardless of any reason. If the marketing was based on your consent, you can withdraw consent.
Right to lodge a complaint: You can lodge a complaint to the data protection supervisory authority in the United Kingdom. However, we will appreciate if you first contact us to try and solve your problem.
You can exercise your rights in relation to us by filling out this form https://www.volvocars.com/uk/forms/subject-rights-request-form
In order to exercise your rights, please use the applicable web form mentioned above. If you have any other questions regarding the subject matter of personal data protection, you can contact our group data protection officer at the following contact details:
E-mail address: firstname.lastname@example.org.
Postal address: Volvo Car Corporation, Attention: The Data Protection Officer, avd 50092, VAK, 405 31 Göteborg, Sweden.
We reserve the right, at our discretion, to modify our privacy practices and update and make changes to this privacy notice at any time. For this reason, we encourage you to refer to this privacy notice on an ongoing basis. This privacy notice is current as of the date which appears at the top of the document. We will treat your personal data in a manner consistent with the privacy notice under which they were collected, unless we have your consent to treat them differently.