Privacy Policy – طلباتي سواق

Who is the data controller?
The data controller, i.e. the body that defines the purposes and means of the processing specified in this privacy policy is Smart Delivery Group a company incorporated in Iraq  , hereinafter referred to as (“we”, “our”, “controller”).  
Why and which personal data do we process?
Below you can see which of your data we need for which purposes and under which circumstances we share your data with others. Personal data is information from which we can directly or indirectly relate to your person, such as first and last name, address, phone number, date of birth, location data or email address.

Which personal data do we process?
In order to provide our delivery service to our customers, we use various tools and systems that are absolutely necessary for the delivery of orders. We also use external and internal tools and systems to process your personal data for personnel management and business operations.We collect, process and store the following categories of personal data within the scope of using the tools and systems:

 

 

Information Collection and Use

For a better experience, while using our Service, we may require you to provide us with certain personally identifiable information, including but not limited to location, actions within the app. The information that we request will be retained by us and used as described in this privacy policy.

The app does use third party services that may collect information used to identify you.

Link to privacy policy of third party service providers used by the app

 

 
Data categories Explanation
Identification data Name, Surname, Address, Facial recognition data and any other such data that shall be required for identification purposes from time to time.
Contact data Email Address, Phone number.     
Account data Date of birth, Place of birth, nationality, gender, bank account details, social security number
Performance data Usage time of applications, order details
Geolocation data GPS data
Technical data Device data
Contract details Contract type, work permit
Telematics data GPS data, driving metrics, TalabateyDriver’s behavior on the road and usage of phone.
For what purposes do we process personal data?We only collect your personal data if this is necessary and the purpose is legal and the processing is proportionate. Below we would like to give you more information for the purposes and legal basis:
Purpose Why do we process data for this purpose?
Recruiting As part of the application process, we collect, process and store your personal data on the basis of the data you have made available to us. The purpose of the processing is to make a decision regarding the hiring or refusal of an applicant.

Categories of personal data: 
Identification data
Contact data
Account data
Identity Verification To protect your application profile from potentially fraudulent activities, we need to verify your identity and ensure that you are the actual owner of the profile.

Categories of personal data: 
Identification data
Account data
   
   
   
   
Presence monitoring Assessment of the reliability of riders with regard to the fulfilment of their contractual obligations. 

Categories of personal data: 
Contact details
Accounts Creation of required accounts for the applications used

Categories of personal data: 
Identification data
Account data
Working time recording Recording of work performed by the rider

Categories of personal data: 
Identification data
Start and end date of shift, breaks, legitimate absence
Presence monitoring Assessment of the reliability of riders in fulfilling their contractual obligations. Use of location data in case of irregularities during the shift. Monitoring of compliance with rest times. 

Categories of personal data: 
Identification data
Account data
Working hours
Rest times
Customer communication Communication with customers about the status of the order or delivery

Categories of personal data: 
Identification data
Contact details
Location data
Content of communication
Picture (if available)
Photos and videos Taking and publishing photos and videos of riders

Categories of personal data: 
Identification data
Picture/Video
Work permit Review of existing rider contracts with regard to the validity of work permits

Categories of personal data: 
Identification data
Contact details
Contract details
Personnel administration We collect, process and store your personal data for the processing and creation of legally required documents and proofs as well as for the remuneration of our riders.

Categories of personal data: 
Identification data
Contact data
Account data
Sick leave Processing of incoming sick notes; communication with health insurance companies.

Categories of personal data: 
Identification data
Contact details
Sick leave note
Internal communication Different tools are used for communication between us and You. The purpose of the processing is the communication of necessary information.

Categories of personal data: 
Identification data
Contact data
Vacation file Processing, granting and rejection of vacation requests submitted by riders; documentation 

Categories of personal data: 
Identification data
Contact data
Delivery To ensure a prompt delivery of the products ordered by our customers, the coordination data of the riders is collected and the order is assigned to those riders who are in an optimal region.

Categories of personal data: 
Identification data
Contact data
Geolocation data
Technical data
Delivery Estimation In order to be able to inform customers of the expected delivery time, average speed data is processed in anonymous form.  

Categories of personal data: 
Geolocation data (anonymized)
Work disciplinary measures  Issuing a warning notice with breach of contract (in case of employed riders only)

Categories of personal data: 
Identification data
Personnel file
Wage and salary payments Preparation of wage and salary statements; payment of gross amounts; payment of social security contributions (if applicable)

Categories of personal data: 
Identification data
Contact data
Bank account information
Rider equipment You receive rider equipment from us. This serves the uniform appearance of riders as well as the protection of our riders. We manage and monitor the equipment provided to ensure that the necessary equipment is always available. 

Categories of personal data: 
Identification data
Contact data
Shift planning and time recording We collect, process and store personal data of riders for the planning of deployments and the actual exercise of deliveries. The purpose of the processing is to collect and monitor the hours worked and to create the necessary work records.


Categories of personal data: 
Identification data
Contact data
Account data
Performance data
Geolocation data
Performance evaluation Evaluation of rider performance based on the quality (restaurant and customer complaints), quantity of orders delivered. It also includes reliability before, during and after the shift. This also includes, but is not limited to, the punctual start of the shift, proper login and acceptance of orders during the shift until the end of the shift. Also, the proper execution of the order.

Categories of personal data: 
Identification data
Contact data
Performance data
Geolocation data
Technical data
Termination Ordinary and extraordinary terminations of contracts with riders

Categories of personal data: 
Identification data
Contact data
Off-boarding Deactivation of existing accounts; return of received clothing and equipment.

Categories of personal data: 
Identification data
Contact data
Archiving Archiving of documents subject to retention for tax purposes.

Categories of personal data: 
Identification data
Contact data
Date of birth
Tax information
Working times
Research and development Analyzing and improving the Services and our business and for developing new rules in collaboration with authorities and third parties to enhance safety and efficiency. As part of these activities, we may collect data from our telematics system and create or use aggregated, de-identified or other anonymized data from personal information we collect.

Categories of personal data: 
Identification data
Contact data
Performance data
Geolocation data
Driving metrics including acceleration metrics, breaking metrics, deceleration metrics, phone usage and changing lane behavior
Crash data
Violations data
Safety compliance

How long do we store personal data?
We generally delete your data after the purpose has been fulfilled. The exact deletion rules are defined in our regional deletion concepts. Different deletion rules apply depending on the purpose of the processing. Within our deletion concepts we have defined various data classes and assigned rule deletion periods to them. When the retention period is met, the stored data will be deleted accordingly.Under certain circumstances, any requests for deletion may be opposed by legal retention periods, which prevent us from deleting the stored data for a fixed minimum period of time. In order to comply with these legal requirements, we block the relevant data after the purpose has been fulfilled and thereby guarantee data completeness and data integrity.
With which data processors and why do we share personal data?
We never give your data to unauthorized third parties. However, as part of our work we obtain the services of selected service providers and give them limited and strictly monitored access to some of our data. However, before we forward personal data to these data processors for processing on our behalf, each individual company undergoes an audit. All data recipients must meet the legal data protection requirements and prove their data protection level with appropriate proofs. 
In the following we would like to inform you in a transparent and understandable way about all our data recipients with the respective reasons:
Data recipient Reason
External service provider They support our business activities by providing us with IT solutions and infrastructure or by ensuring the security of our business operations, for example by identifying and rectifying faults. Furthermore, personal data may also be disclosed to external tax consultants, lawyers or auditors if they provide services for which they have been commissioned. 
Members of the Delivery Hero SE Group Within a group it is sometimes necessary to use resources effectively. In this context, we support each other within our Group in optimizing our processes. In addition, we provide joint content and services. This includes, for example, the technical support of systems.This is a joint controllership within the meaning of Art. 26 GDPR. We are      fully responsible for fulfilling the data protection requirements together with Delivery Hero SE. Within the framework of joint regulations, we and Delivery Hero SE have agreed that both will guarantee their rights equally. 
Regulatory authorities and legal proceedings Unfortunately, it can happen that a few of our TalabateyDriver and service providers do not behave fairly and want to harm us. In these cases we are not only obliged to hand over personal data due to legal obligations, it is of course also in our interest to prevent damage and to enforce our claims and to reject unjustified claims.

Identity Verification:
To protect your application profile from potential fraudulent activities, we need to verify your identity and ensure that you are the actual owner of the profile. For this purpose, we employ identity verification measures designed to detect suspicious behavior patterns early on. As part of this process, we will request you to upload a "selfie" photo to our systems, which will be subject to an automatic facial comparison with your profile photo. This image will be retained for 90 days, after which it will be deleted, unless local legal requirements stipulate a different retention period. This image won’t be used for any other purpose, nor shared with any third parties.
In the course of verifying your identity, we exclusively use Apple’s ARKit and TrueDepth technologies, or Google’s MLKit, to confirm that the submitted photo was taken by a real person.
We do not collect, share, or store any facial data during this process, either within our systems or with any third parties.
 

 

Contacts List

To enable the functionality provided by some of the third-party services mentioned above, our app may require access to your device's Contacts list. This access is essential for features such as the FirstOrion s Engage SDK. We want to assure you that:

  • Contacts Permission:

    We request access to your Contacts with the permissions READ_CONTACTS and WRITE_CONTACTS for functionality purposes only. Specifically, this is required to enhance your caller ID experience through the FirstOrion s Engage SDK.

  • Data Handling:

    Please be aware that the Contact List data accessed is used exclusively for the intended functionality. We do not store this data locally or remotely, whether on our servers or any other third-party service. Your Contact List information remains secure and is not subject to misuse.

     

Why We Access Your Contacts

We use your Contact List to provide a personalized caller ID experience. When a support number from our company calls you, it will be identified by our company logo and brand, ensuring you know it's us and not an unknown number.

 

Why We Access Your Location

"طلباتي سواق collects, transfers, syncs, and stores your location data, including when the application is closed, to facilitate the feature of order status tracking. By granting us permission to access your location, you enable us to provide you with accurate updates on the status of your orders, even when the app is not actively in use. We handle your location data with utmost care, adhering to our privacy policy, to ensure the privacy and security of your information."

 

Does the Application collect precise real time location information of the device?

This Application does not gather precise information about the location of your mobile device.

This Application collects your device's location, which helps the Service Provider determine your approximate geographical location and make use of in below ways:

  • Geolocation Services: The Service Provider utilizes location data to provide features such as personalized content, relevant recommendations, and location-based services.
  • Analytics and Improvements: Aggregated and anonymized location data helps the Service Provider to analyze user behavior, identify trends, and improve the overall performance and functionality of the Application.
  • Third-Party Services: Periodically, the Service Provider may transmit anonymized location data to external services. These services assist them in enhancing the Application and optimizing their offerings.


Cookies: 
In order to make the visit of our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and allow us or our affiliate to recognize your browser on your next visit (persistent cookies). You can set your browser so that you are informed about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. Failure to accept cookies may limit the functionality of our website/app.
You can install additional add-ons in your browser that block unnecessary cookies. By doing so, you will not see any interest-based advertisements.
Categories of personal data:
Limited device information such as IP address, device ID, MAC address, operating system, device type, Apple Advertiser ID (IDFA) or Android Ad ID (AAID).
You can find our cookie policy with all the cookies we use in our Cookies and Web-Tracking Policy.
What are your rights as data subjects and how can they be asserted?
You have the right to receive explicit information from us about the personal data we have stored about you, free of charge. 
In addition, you have the following rights:
Right to accessYou have the right to be informed which data we store about you and how we process this data.Right to rectificationIf you notice that stored data is incorrect, you can always ask us to correct it.Right to erasureYou can ask us at any time to delete the data we have stored about you.Right to restriction of processingIf you do not wish to delete your data, but do not want us to process it further, you can ask us to restrict the processing of your personal data. In this case, we will archive your data and only reintegrate it into our operative systems if you so wish. However, during this time you will not be able to use our services, otherwise we will process your data again. Right to data portabilityYou can ask us to transmit the data stored about you in a machine-readable format to you or to another responsible person. In this context, we will make the data available to you in JSON format.Right to object to the processing of your dataYou can revoke your consent at any time or object to the further processing of your data. This also includes objecting to our processing, which we process without your consent but based on our legitimate interest. This applies, for example, to direct marketing. You can object to receiving further newsletters at any time. If you do not agree with one of our processing purposes based on our legitimate interest or wish to object to it, you may object to the processing at any time on grounds relating to his or her particular situation. Please raise a ticket on the TalabateyDriver Support feature available on the app.  In this case we will review the processing activity again and either stop processing your data for this purpose or explain to you our reasons worth protecting and why we will continue with the processing. Right of complaintIf you believe that we have done something wrong with your personal data or your rights, you can complain to the appropriate supervisory authority at any time. 

To exercise your rights, you can contact us via the TalabateyDriver Support feature available on the app at any time.If you believe that we have done something wrong with your personal data or your rights, you can complain to the appropriate supervisory authority at any time. The supervisory authority responsible for us is the Smart Delivery Group Office.