Privacy notice – Breathe App
1. Intro
This document describes how Polestar processes your personal data when you use the Polestar Breathe application (the “Breathe App”).
2. When do we process your personal data?
| Breath App | |
|---|---|
Purpose | To provide the Breathe App services. |
Categories of personal data | installation ID, car model and model year, which country you reside in, information on whether the car is standing still or moving, downloads, resets and uninstalls of the Breathe App, Breathe App updates, operating system updates, data regarding the notifications you receive, breathing techniques used, engagement and frequency, screen views, when and which excercise is initiated and completed or when it is aborted. |
Legal basis | This data processing is used for us to fulfil our contract with you as a part of your use of our service (GDPR, article 6.1 (b)). |
Retention | Until it has been anonymized or until you withdraw your consent. |
Controller(s) | Polestar Performance AB |
| Purpose | To receive insights into how the Breathe App is used and to improve user experience. The processing does not include any automatic decision making, such as profiling. |
Categories of personal data | installation ID, breathing techniques used, and engagement frequency, screen views, when and which excercise is initiated and completed or when it's aborted. |
| Legal basis | Your consent (GDPR, article 6.1 (a)). You can deny sharing your data for app analytics and still use the app features. |
| Retention | Until it has been anonymized or until you withdraw your consent |
| Controller(s) | Polestar Performance AB |
3. How we disclose your personal data and who we disclose it to?
Our processors supporting delivery of the Breathe App, which are limited by contract in their ability to use your personal data for any purpose other than to provide services for us in compliance with each data processing agreement in place:
- Google Ireland Limited and its sub-processors, data center Europe-west1 (Belgium); data transfer also to Google LLC, USA, under the Standard Contractual Clauses adopted by the European Commission, available here. We use Google Firebase services for app analytics to better understand user behavior and to improve the usability and reliability of the Breathe App. You can deny sharing your data for app analytics and still use the app features.
4. Transfer of your personal data
We strive to process your personal data within the EU/EEA area. However, your personal data will be transferred outside the EU/EEA in some situations, such as when we share your information with a business partner or subcontractor operating outside the EU/EEA.
We transfer personal data to the following countries outside of the EU/EEA: the United States and the United Kingdom.
We always ensure that the same high level of protection applies to your personal data according to the GDPR, even when the data is transferred outside of the EU/EEA. As regards the United Kingdom, the Commission has decided that it ensures an adequate level of protection (article 45 of the GDPR), but regarding transfers to the United States we have entered into EU Model Clauses with all relevant third parties (article 46 of the GDPR). In addition, we take additional technical and organisational security measures when needed, such as encryption (TLS) and pseudonymisation.
5. Your rights
You have specific legal rights granted by the General Data Protection Regulation relating to the personal data we process about you. You can withdraw your consent or object to our processing of your data, access the data we hold about you, ask for rectification or restriction of your data, request to have your data ported to another entity, request that we delete your data, and finally you can file a complaint with a data protection supervisory authority. In Sweden, you have the right to lodge a complaint with the Swedish Supervisory Authority for Privacy Protection (IMY). A list of European supervisory authorities is available here.
In order to exercise your rights, please use this web form. If you have any other questions regarding the subject matter of personal data protection, you can contact us or our Data Protection Officer on the contact details stated on polestar.com/privacy-policy.
6. Contact information
Polestar Performance AB is a Swedish legal entity with company registration number 556653-3096, with mailing address Assar Gabrielssons Väg 9, 405 31 Gothenburg, Sweden, and visiting address Polestar HQ, Assar Gabrielssons Väg 9, 418 78 Göteborg.
7. Changes to our Privacy Notice
We reserve the right to change this privacy notice from time to time. We will inform you of any changes by posting the updated privacy notice on the website. If we make any material changes to our privacy notice, we will send a notification by e-mail. We encourage you to contact us if you have any questions about the privacy notice or about how we process your personal data.