Product privacy policy
(English version, last updated: March 2024)
We take Privacy very seriously. Our systems are designed with GDPR in mind and as our minimum data protection standard. In addition we ensure compliance with local data privacy and regulation wherever we operate. This includes but is not limited to applying state-of-the-art strategies and technology to anonymize, obfuscate, pseudonymize and encryption of any personalized information.
This notice is designed to provide transparency into our privacy practices, in a format that is easy to read, understand and navigate.
Personal data is any information relating to an identified or identifiable natural person, i.e. a person (hereinafter also referred to as "data subject"), including, for example, your name, address or email address. “Processing" of personal data means in particular the collection, storage, use and transmission of such data.
Name and address of the person responsible (controller)
The person responsible (controller) within the meaning of the European Union General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is
Yaak Technologies ApS, Luftmarinegade 138, 1432 København, Denmark
Mail: hello@yaak.ai, Web: https://yaak.ai/
Danish Commercial Register number: 41970359, VAT ID number: DK 41970359, Managing Director (Geschäftsführer): Søren Halskov Nissen
Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data which is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations which are necessary for the implementation of pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which we are subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
If the processing is necessary to protect a legitimate interest of ours or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.
Information We May Collect
Personal data is collected when you submit it in the context of placing a pre-order and purchasing the Yaak Product. In this regard, we collect the following data: email address, company name, first and last name, postal address, country and city, driver profile information and other data relevant to ensure proper and legal use of the system. Without your explicit prior consent, we will use the submitted information solely for the provision and maintenance of the Yaak Product and the administration and performance of our contractual relationship in this regard, and to send you our newsletter if you have subscribed to it. After termination of the contractual relationship, the data will be deleted after the storage period required by tax and commercial law, unless you have expressly consented to the further use of your data.
We collect information in a number of ways:
- From or about your driving school or fleet vehicle carrying our product
- From or about your devices used in connection to our product and services
We may collect a variety of information from or about your Yaak-enabled vehicle. The type of information collected and processed varies based on the topic. Below is a non-exhaustive list of information we collect:
Telematics data: To improve our Product and Services, we may collect telematics data pertaining to system and vehicle performance, usage, operation, and condition of your vehicle, including, but not limited to: vehicle identification number, speed information, odometer readings, battery use management information, battery charging history, electrical system functions, software version information, infotainment system data, safety-related data and camera images, acceleration, braking, or any other safety-related information, recording video and audio/ speech via the Yaak system and uploading short video and audio clips, information regarding the use of system features we offer.
Analysis data: We may be able to dynamically connect to your vehicle via the Yaak system, with intent to to diagnose and resolve issues with it, and this process may result in access to personal settings in the vehicle (such as contacts, browsing history, and navigation history). We will not store or use the access to personal settings in the vehicle. This dynamic connection also enables us to view the current location of your vehicle, but such access is restricted to a limited number of personnel within Yaak.
Safety data: In order to help improve our products and services, we may collect and store other vehicle data, including: data about accidents or near accident-like circumstances involving your Yaak-enabled vehicle (e.g., air bag deployment, camera sensor data and images, and other recent sensor data), data about remote services (e.g., remote lock/unlock, start/stop charge, and honk-the-horn commands), a data report to confirm that your vehicle is online together with information about the current software version and certain telematics data, vehicle connectivity information; data about any issues that could materially impair operation of your vehicle; data about any safety-critical issues; and data about each software and firmware update. We may collect such information either in person (such as during a service appointment) or via remote access.
Advanced features: We may provide you with advanced features in your Yaak vehicle, such as real-time traffic, autonomous driving features, which make use of the road segment data of your vehicle and we may share this data with partners in a non-personally identifiable manner (e.g., by masking the vehicle identification number) in order to help us provide the service to you. We also may collect similar data in connection with other features, such as the navigation data for the online routing feature, and may share it with business partners in a non-personally identifiable manner, where necessary to provide the feature to you. We also only collect or share this data if you enable this collection, although if you do so, your vehicle may send this data to Yaak and its partners even if you are not actively using a feature that needs this information.
Opting out of data sharing: If you are no longer a customer of Yaak, and you wish to delete previous data relating to your privacy and your vehicle telemetry, then contact Yaak.
From or about your devices used in connection to our product and services
Through our Digital and Premium Services: We may collect information from or about you through our websites, software applications, social media pages, email messages, or other digital services (the “Digital Services”), including when you sign up for a newsletter, make a purchase, or register your product with us.
Through credit applications and other forms: We may collect additional information from you or others on your behalf on our credit application and other forms to support our product lease or other financing offerings, such as date of birth, Social Security number, bank routing information, and credit related information. We also receive information about you from consumer reporting agencies such as credit history and capacity.
From other sources: We may receive information about you from other sources, such as public databases, joint marketing partners, certified installers, third-party vehicle repair or service centers, and social media platforms.
Yaak Account: Customers who purchase certain Yaak products will receive a Yaak Account, which is hosted on our website. We may collect and process the following types of data for your Yaak Account that you elect to provide to us: your customer registration information, the status of your order, warranty and other documentation for your Yaak products, and general information about your Yaak products (including, for example, vehicle identification number or other product serial numbers, service plan information, or connectivity package), insurance forms, driver’s licenses, financing agreements, and similar information. You can access your Yaak Account to update the information from or about you in that account at any time.
We retain the information we collect from or about you, our products, and our services for the period necessary to fulfill the purposes outlined in this Notice unless a longer retention period is required or permitted by law. When the information is no longer necessary for these purposes, we delete it or keep it in a form that does not identify you. When determining this retention period, we take into account various criteria, such as the type of products and services requested by or provided to you, the nature of our relationship with you, the impact on the services we provide to you if we delete some information from or about you, and retention periods required by law.
We also collect information in a form that does not, on its own, permit direct association with any specific individual. We may collect, use, transfer, and disclose non-personally identifiable data for any purpose.
Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you are entitled to the following rights vis-à-vis the person responsible (controller) (as the case may be, if further conditions laid down in the relevant regulations are met):
- The right of access under Art. 15 GDPR
- The right of rectification under Art. 16 GDPR
- The right to erasure ("right to be forgotten") under Art. 17 GDPR
- The right to restriction of processing under Art. 18 GDPR
- The right to information under Art. 19 GDPR
- The right to data portability according to Art. 20 GDPR
- The right not to be subject to automated individual decision-making according to Art. 22 GDPR
- The right to revoke consent to the processing of personal data in accordance with Art. 7 para. 3 GDPR
To assert these rights, please contact the contact details provided.
Without prejudice to any other administrative or judicial remedy, you also have the right to lodge a complaint with a supervisory authority, in particular in the European Union Member State in which you are resident, your place of work or the place of the suspected infringement, if you consider that the processing of personal data concerning you is in breach of the GDPR.
Right of objection
Insofar as we process personal data as explained above in order to safeguard our legitimate interests which prevail in the context of a weighing of interests, you can object to this processing with effect for the future, but only if there are reasons arising from your particular situation. If the processing is carried out for direct marketing purposes, you may exercise this right at any time, even without such reasons.
After justified exercise of your right to object, we will not process your personal data further for these purposes, unless we can prove compelling reasons for processing worthy of protection which outweigh your interests, rights and freedoms, or if the processing serves the assertion, exercise or defence of legal claims. This restriction does not apply if the processing is for direct marketing purposes.