Privacy Policy

This is a courtesy translation. In case of any discrepancy, the French version shall prevail.

Torks Sàrl (in formation), whose head office is in Neuchâtel, hereby informs users of the torks.ch website, as well as its customers, of the data processing it carries out as data controller through this privacy policy. Operating within Swiss territory, Torks Sàrl (in formation) complies with the Swiss Federal Act on Data Protection of 25 September 2020.

1. Scope of application

This privacy policy (hereinafter the "Policy") applies regardless of the means or medium used to access our website and sets out the conditions under which, during your browsing, we collect, use and retain information concerning you, as well as the choices available to you regarding the collection, use and disclosure of this information. It also applies to all services we provide in the course of our activities. By accessing this website or by entering into a contract with us, you acknowledge that you have read, understood and accepted being subject to the conditions provided for in this Policy.

2. Definitions

Personal data: all information relating to an identified or identifiable natural person.
Processing: any operation relating to personal data, whatever the means and procedures used, in particular the collection, recording, storage, use, modification, communication, archiving, erasure or destruction of data.
Data controller: the private person or federal body that, alone or jointly with others, determines the purposes and means of the processing of personal data.
Processor: the private person or federal body that processes personal data on behalf of the data controller.
Data security breach: any breach of security resulting accidentally or unlawfully in the loss of personal data, their modification, erasure or destruction, their disclosure or unauthorised access to such data.

3. When you browse our website

3.1 Data collected

3.1.2 Contact data

When you make a contact request, a pre-booking, a trial request or subscribe to our newsletter, we collect, with your consent, the following information, all of which are mandatory:

Your first and last name;
Your email address;
Your phone number.

We allow users to connect to our site via the following social networks: Facebook, Google and Apple. During this connection, we receive only the necessary data via OAuth2, as well as your profile picture for use as an avatar. No other data is collected via these networks.

3.3 Cookies

When you visit our website, data may be stored in your browser or retrieved from it, generally in the form of cookies. We have set up a consent banner for cookies. You can manage your cookie preferences via our cookie management panel accessible on the site. The types of cookies used include:

Essential cookies: necessary for the operation of the site (login, forms);
Performance cookies: to measure visits and improve the site;
Targeted advertising cookies: set up by our advertising partners for relevant advertisements.

4. When you are a customer of Torks Sàrl (in formation)

4.1 Data collected

4.1.1 Identification data

When you enter into a contract with us, we collect:

Your first and last name;
Your postal address;
Your email address;
Your phone number;
Your date of birth (used for birthday promotional offers and statistics).

We use Stripe Identity to verify your identity when entering into the contract. We only store the result of this verification; the detailed data is managed by Stripe in accordance with their security standards (see their privacy policy).

4.1.3 Location data

Our bikes are equipped with GPS trackers transmitting data in real time via the Swisscom LTE-M network. This data is associated with the bike you are renting and is only linked to your personal data within the framework of your rental contract. It is sent to DigitalMatter (servers in Amsterdam, Azure) for initial processing, then transferred and stored on our servers in Switzerland.

Security measures:

The data is stored on our servers without database encryption, but access is strictly controlled and queries are logged;
Only authorised persons within our company have access to it, to the extent necessary for their duties.

4.2 Purposes

We process your personal data to:

Execute the bike rental contract;
Manage payments and accounting;
Track and locate bikes to ensure availability and security;
Improve our services (anonymous analysis of journeys);
Produce statistics on bike usage;
Perform preventive maintenance;
Ensure compliance with rental conditions;
Reduce the risk of theft.

5. Categories of recipients

5.1 Use of processors

We use the following processors:

Website management and maintenance:
- Frontend hosting: Cloudflare;
- Database: AWS (server in Switzerland);
- Emails: Google Workspace and ProtonMail.
Accounting and payment management:
- Payments and invoicing: Stripe.
Advertising and marketing:
- Newsletter: Brevo;
- Usage analysis: Hotjar;
- Advertising performance: Google Analytics, Meta Pixel, X Pixel.

5.2 Disclosure to third parties

We do not disclose your personal data to any third party, unless required by law or by a judicial or administrative authority, or to protect our rights or interests.

6. Data security and confidentiality

We have implemented the following measures:

Encryption of data in transit;
Password protection of data at rest;
Strict access management to sensitive data (limited to authorised persons).

Email: [email protected];
Form: available on our website.

Data protection officer: Timothée Duran (contact details via [email protected]).