Hakeem Rider Privacy Policy

Who is in control of the system’s data?

The company that defines the purposes and means of the processing specified in this privacy policy is Hakeem Health Delivery Services with a registered address at Office B306 / Al Qouz 3 Bur Dubai, Dubai, United Arab Emirates referred to as “Hekeem Health Delivery Services” “we”, “our”, “controller”). We also use the term “Hakeem Rider” for your salutation.

Which personal data do we process?

Personal data is the information we can relate to the user, such as name, shipping address, contact number, geolocation data or email address.

In order to provide our delivery service to our customers, we use various internal and external tools that are absolutely necessary for the delivery of orders. The mentioned tools also process the user’s personal data for personnel management operations.

We collect, process, and store the following personal data within the scope of using the tools:

• Personal data: first name, last name, shipping address, contact number, geolocation data, and any other data that are required for user identification requirements.
• Contact data: work permit, driver’s license, contact number, email address
• Account data: nationality, gender, bank account information, Emirates ID information
• App Performance data: active application time, orders information
• Geo-location data: GPS information (coordinates, etc)
• Technical data: user device information, start and end date of shift, breaks, legitimate absence, working hours, rest times

For what purposes do we process personal data?

We only collect your personal data if this is necessary and the purpose is legal and the processing is proportionate.

• Recruiting
  • As part of the application process, we collect, process, and store your personal data on the basis of the data you have made available to us. The purpose of the processing is to make a decision regarding the hiring or refusal of an applicant.
  • Categories covered:
    • Personal data
    • Contact data
    • Account data
• Advertising and marketing
  • Online marketing:  Our hiring process is based to a large extent on finding potential riders. In order to reach the right candidates, we run marketing campaigns. Therefore, we would like to present to you our processes as transparently as possible. The following online marketing processing activities we pursue include targeting and retargeting:
    • Targeting: In principle, targeting means the switching and fading of advertising banners on websites that are tailored to specific target groups. The aim is to display the most attractive banners as individually as possible for the user and potential riders. Firstly, we define a target group and secondly, we commission our service providers to show our advertising to the defined target group. We do not process any personal data, as these are initially made anonymous. We segment different target groups and place different ads on different portals for optimized targeting.
    • Retargeting: As soon as you have visited our website for obtaining further information on our rider program, we store this information in cookies. If you continue to surf other websites, our advertising partners will remind you on our behalf that you have not yet submitted an application. We don’t want you to miss out on our amazing rider program. You can disable retargeting by installing appropriate add-ons for your browser. Furthermore, you can and should also regularly delete the cookies stored in the browser you are using.
  • Categories covered:
    • Contact data
• Candidate reactivation
  • If a candidate does not continue the application process, SMS, emails or Whatsapp will be sent to remind the candidate of the steps that need to be taken to complete the application process.
  • Categories covered:
    • Personal data
    • Contact data
• Contract
  • Conclusion of an employment contract
  • Categories covered:
    • Personal data
    • Account data
• Onboarding
  • Preparation of the first working day, training of new employees
  • Categories covered:
    • Personal data
    • Account data
• Presence monitoring
  • Assessment of the reliability of drivers with regard to the fulfillment of their contractual obligations.
  • Categories covered:
    • Contact data
• Accounts
  • Creation of required accounts for the applications used
  • Categories covered:
    • Personal data
    • Account data
• Working time recording
  • Recording of work performed by the employee
  • Categories covered:
    • Personal data
    • Technical data
• Presence monitoring
  • Assessment of the reliability of drivers in fulfilling their contractual obligations. Use of location data in case of irregularities during the shift. Monitoring of compliance with rest times.
  • Categories covered:
    • Personal data
    • Account data
    • Technical data
• Customer communication
  • Communication with customers about the status of the order or delivery
  • Categories covered:
    • Personal data
    • Contact data
    • Geo-location data
    • Technical data
• Photos and videos
  • Taking and publishing photos and videos of employees
  • Categories covered:
    • Personal data
• Work permit
  • Review of existing employee contracts with regard to the validity of work permits
  • Categories covered:
    • Personal data
    • Contact data
• Personnel administration
  • We collect, process, and store your personal data for the processing and creation of legally required documents and proofs as well as for the remuneration of our employees.
  • Categories covered:
    • Personal data
    • Contact data
    • Account data
• Sick leave
  • Processing of incoming sick notes; communication with health insurance companies.
  • Categories covered:
    • Personal data
    • Contact data
    • Technical data
• Internal communication
  • Different tools are used for communication between the employer us and the employees (in this case Rider). The purpose of the processing is the communication of necessary information.
  • Categories covered:
    • Personal data
    • Contact data
• Vacation file
  • Processing, granting, and rejection vacation requests submitted by employees documentation
  • Categories covered:
    • Personal data
    • Contact data
• Delivery
  • To ensure a prompt delivery of the products ordered by our customers, the coordination data of our riders is collected and the order is assigned to those riders who are in an optimal region
  • Categories covered:
    • Personal data
    • Contact data
    • Account data
    • Geo-location data
    • Technical data
• Delivery Estimation
  • In order to be able to inform customers of the expected delivery time, average speed data is processed in anonymous form.
  • Categories covered:
    • Geo-location data
• Work disciplinary measures
  • Issuing a warning notice with breach of contract
  • Categories covered:
    • Personal data
    • Contact data
• Wage and salary payments
  • Preparation of wage and salary statements; payment of gross amounts; payment of social security contributions (if applicable)
  • Categories covered:
    • Personal data
    • Contact data
    • Account data
• Rider equipment
  • Our employees receive rider equipment from us. This serves the uniform appearance of our riders as well as the protection of our employees. We manage and monitor the equipment provided to ensure that the necessary equipment is always available.
  • Categories covered:
    • Personal data
    • Contact data
• Shift planning and time recording
  • We collect, process and store personal data of our riders for the planning of deployments and the actual exercise of deliveries. The purpose of the processing is to collect and monitor the hours worked and to create the necessary work records.
  • Categories covered:
    • Personal data
    • Contact data
    • Account data
    • App performance data
    • Geo-location data
    • Technical data
• Performance evaluation
  • Evaluation of driver performance based on the quality, quantity of orders delivered. It also includes reliability before, during and after the shift. This also includes, but is not limited to, the punctual start of the shift, proper login and acceptance of orders during the shift until the end of the shift. Also the proper execution of the order.
  • Categories covered:
    • Personal data
    • Contact data
    • App performance data
    • Geo-location data
    • Technical data
• Termination
  • Ordinary and extraordinary terminations of contracts with employees
  • Categories covered:
    • Personal data
    • Contact data
• Off-boarding
  • Deactivation of existing accounts; return of received clothing and equipment.
  • Categories covered:
    • Personal data
    • Contact data
• Archiving
  • Archiving of documents subject to retention for tax purposes.
  • Categories covered:
    • Personal data
    • Contact data
    • Technical data

How long do we store personal data?

We generally delete your data after the purpose has been fulfilled. The exact deletion rules are defined in our regional deletion concepts. Different deletion rules apply depending on the purpose of the processing. Within our deletion concepts, we have defined various data classes and assigned rule deletion periods to them. When the retention period is met, the stored data will be deleted accordingly.
Under certain circumstances, any requests for deletion may be opposed by legal retention periods, which prevent us from deleting the stored data for a fixed minimum period of time. In order to comply with these legal requirements, we block the relevant data after the purpose has been fulfilled and thereby guarantee data completeness and data integrity.

With which data processors and why do we share personal data?

We never give your data to unauthorized third parties. However, as part of our work we obtain the services of selected service providers and give them limited and strictly monitored access to some of our data. However, before we forward personal data to these data processors for processing on our behalf, each individual company undergoes an audit. All data recipients must meet the legal data protection requirements and prove their data protection level with appropriate proofs.

In the following we would like to inform you in a transparent and understandable way about all our data recipients with the respective reasons:

• External service provider: They support our business activities by providing us with IT solutions and infrastructure or by ensuring the security of our business operations, for example by identifying and rectifying faults. Furthermore, personal data may also be disclosed to external tax consultants, lawyers or auditors if they provide services for which they have been commissioned.
• Regulatory Authorities: In accordance with the applicable labor and social security laws, we may have to report your personal data related to the job, responsibilities, wages, employment contract information and entitlements to the Ministry of Labor for the purpose of updating any related progress, changes, terminations or any other relevant information to wages. We may also need to provide information to the tax authority for monitoring purposes.
• Prosecuting authorities and legal proceedings: Unfortunately, it can happen that a few of our riders and service providers do not behave fairly and want to harm us. In these cases we are not only obliged to hand over personal data due to legal obligations, it is of course also in our interest to prevent damage and to enforce our claims and to reject unjustified claims.

Cookies

In order to make the visit of our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and allow us or our affiliate to recognize your browser on your next visit (persistent cookies). You can set your browser so that you are informed about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. Failure to accept cookies may limit the functionality of our website/app.

• Data collected: Limited device information such as IP address, device ID, MAC address, operating system, device type, Apple Advertiser ID (IDFA) or Android Ad ID (AAID)
• Legal basis: If processing takes place with your consent. Otherwise, the processing is based on our legitimate interest. Our legitimate interest lies in the aforementioned purpose.

What are your rights as data subjects and how can they be asserted?

You have the right to receive explicit information from us about the personal data we have stored about you, free of charge.

• Right to access: You have the right to be informed which data we store about you and how we process this data.
• Right to rectification: If you notice that stored data is incorrect, you can always ask us to correct it.
• Right to erasure: You can ask us at any time to delete the data we have stored about you.
• Right to restriction of processing: If you do not wish to delete your data, but do not want us to process it further, you can ask us to restrict the processing of your personal data. In this case, we will archive your data and only reintegrate it into our operative systems if you so wish. However, during this time you will not be able to use our services, otherwise we will process your data again.
• Right to data portability: You can ask us to transmit the data stored about you in a machine-readable format to you or to another responsible person. In this context, we will make the data available to you in JSON format.
• Right to object to the processing of your data: You can revoke your consent at any time or object to the further processing of your data. This also includes objecting to our processing, which we process without your consent but based on our legitimate interest. This applies, for example, to direct marketing. You can object to receiving further newsletters at any time. If you do not agree with one of our processing purposes based on our legitimate interest or wish to object to it, you may object to the processing at any time on grounds relating to his or her particular situation. Please raise a ticket via the Rider Support feature available on the app.  In this case we will review the processing activity again and either stop processing your data for this purpose or explain to you our reasons worth protecting and why we will continue with the processing.
• Automated decision making: We also process your personal data in the context of algorithms in order to simplify our processes. Of course, you have the right not to be subject to decisions based solely on automated processing. If you believe that we have denied your access in an unjustified way, you can always contact us via the Rider Support feature available on the app. In this case, we will examine the case separately and decide on a case-by-case basis.
• Right of complaint: If you believe that we have done something wrong with your personal data or your rights, you can complain to the appropriate supervisory authority at any time.

To exercise your rights, you can contact us using the Hakeem Rider Support feature available on the app at any time.