AJOUR DATA POLICY
AS OF 1 JANUARY 2022
At Ajour we understand and respect that privacy is very important to our users. We have designed this Data Policy (the "Policy") to provide a transparent overview of how you can use Ajour to exchange travel tips with others and how we collect and may use your content and information.
I. Types of collected information
When using Ajour, we collect different kinds of information from or about you.
Your activity. We collect the content and other information you provide when you use Ajour's services, including when you (i) sign up for an account, (ii) create, share or ask for content, and (iii) communicate with others. We also collect information about how you use Ajour's services.
Others' activity. We collect content and information that other people provide when they use Ajour's services, including information about you, i.e. when they share or comment on a photo of you.
Network. We collect information about the people you are connected to and how you interact with them.
Devices. We may collect information from or about the phones or other devices where you install or access Ajour's services, e.g. information about operating system, hardware version, device settings (e.g. if you allow us to receive access to your camera, photos or GPS location), file and software names and types, battery and signal strength, device identifiers, device locations and connection information.
II. Use of collected information
We use the collected information to provide, maintain, improve and develop a great Ajour user experience. The collected information is inter alia used to
understand how you use and interact with Ajour's services and the people you are connected to and interested in (enabling us to deliver Ajour's services and make suggestions for you);
assist you with finding potential unique experiences in the area you are planning to visit;
conduct surveys, research and test features in order to evaluate and improve Ajour's services, develop new products or features and conduct troubleshooting activities;
send you communications, communicate with you about Ajour's services and let you know about our policies and terms; and to
promote security and safety by inter alia using data to investigate suspicious activity or violations of our terms or policies.
III. Sharing of information
People use Ajour's services to connect and share/exchange recommendations with others. When you share and communicate using Ajour's services, you choose on an overall level the audience who can see what you share by choosing a Curious Profile or a Limited Profile type:
Curious Profile: You exchange content with your connected friends plus their connected friends with curious profile.
Limited Profile: You exchange content with your connected friends. Also, when you share a specific recommendation, you have the opportunity to select if you want to send it in a private mode (i.e. it will be forwarded directly to the selected person) or generally to your friends (i.e. it will appear on all of your friends' newsfeed - as well as their friends in case of Curious Profiles). Regardless the selection you choose, all recommendations made on Ajour are kept in your network's database and are therefore accessible to you and your connected friends (and their friends in case of Curious Profiles).
Public information is the information in your Public Profile (which includes your profile picture, name and home town), and this information is available to anyone using Ajour's services.In some cases, people you share and communicate with may download, screenshot or re-share your content with others on and off Ajour's services. When you comment on another person’s recommendation or express that you liked their content on Ajour, that person decides the audience who can see your comment or like.
Other people may use Ajour's services to share content about you with the audience they choose. For example, people may share a photo of you or mention you in a post, or share information about you that you shared with them. If the ownership or control of all or part of Ajour's services or their assets changes, we may transfer your information to the new owner.
Sharing with third parties
We work with third party companies who help us provide and improve Ajour's services. We don’t sell any of your information to anyone. We transfer information to service providers, and other partners who globally support our business, such as providing technical infrastructure services, analysing how Ajour's services are used, providing customer service, or conducting surveys. These partners must adhere to strict confidentiality obligations in a way that is consistent with this Policy and the agreements we enter into with them.
IV. Our legal basis for processing data
We collect, share and use the obtained data as described above:
as necessary to fulfil the Ajour Terms;
in accordance with your consent (which you may revoke at any time by writing an email to privacy@goajour.com);
to protect your vital interests (or those of others);
as necessary to comply with our legal obligations; and
as necessary for our (or others') legitimate interests unless those interests are overridden by your interests or fundamental rights and freedoms that require protection of personal data.
In accordance with EU law, we must have a legal basis to process data. Your rights depend on which legal basis we use, and therefore we have elaborated on these below.
Regardless of what legal basis applies, you always have the right to request access to, rectification of, and erasure of your data under the GDPR. To exercise your rights, send an email to privacy@goajour.com.
We process data as necessary to perform our services to you in accordance with the Ajour Terms (i.e. the contract we have with you). The contractual services for which this data processing is necessary is described in the Ajour Terms. The core data uses necessary to provide our contractual services are to:
provide, personalize, and improve the Ajour Services;
promote safety, integrity, and security;
communicate with you; and to
provide consistent user experiences. These uses are explained in more detail in this Data Policy. When we process data you provide to us as necessary to perform our contract with you, you have the right to port such date under the GDPR. To exercise your rights, send an email to privacy@goajour.com.
The other legal bases we rely on in certain instances when processing your data are:
Your Consent:
For collecting data that personally identifies you (such as your name or email address that can be used to identify who you are).
For collecting information you allow us to receive through the device-based settings you enable (such as access to your GPS location, camera or photos), so we can provide the services described when you enable the settings.
When we process data you provide to us based on your consent, you have the right to withdraw your consent at any time and to port that data you provide to us. To exercise your rights, send an email to privacy@goajour.com.
Our legitimate interests or the legitimate interests of a third party, where not outweighed by your interests or fundamental rights and freedoms:
For providing marketing communications to you. The legitimate interests we rely on for this processing are:
To promote Ajour Services and issue our direct marketing.
To share information with others including law enforcement and to respond to legal requests. The legitimate interests we rely on for this processing are:
To prevent and address fraud, unauthorised use of the Ajour Services, violations of the Ajour Terms, or other harmful or illegal activity; to protect ourselves (including our rights, property or Services), our users or others, including as part of investigations or regulatory inquiries.
You have the right to object to, and seek restriction of, such processing; to exercise your rights, send an email to privacy@goajour.com.
Compliance with a legal obligation:
For processing data when the law requires it.
Protection of your vital interests or those of another person:
The vital interests we rely on for this processing include protection of your life or physical integrity or that of others, and we rely on it to combat harmful conduct and promote safety and security.
For people under the age of majority
In relation to people under the age of majority (with limited ability to enter into an enforceable contract) using our Services, it is in our legitimate interests to:
Provide, personalize, and improve Ajour’s Services. This includes processing information that people under the age of consent allow us to receive through device-based settings they enable and to provide services covered by those settings.
Promote safety, integrity and security.
The legitimate interests we rely on for this processing are:
To create, provide, support and maintain services that enable people under the age of majority to communicate, discover and engage with information relevant to their interests.
To secure our platform and network, combat harmful conduct, to verify accounts and activity, detect and prevent spam and other bad experiences, keep the Ajour Services free of harmful or inappropriate content, and investigate suspicious activity or violations of the Ajour Terms; and to protect the safety of people under the age of majority.
V. Exercise of your GDPR rights
Under the GDPR, you have the right to access, rectify, port and erase your data. You also have the right to object to and restrict certain processing of your data. This includes the right to object to our processing of your data where we are pursuing our legitimate interests or those of a third party.
You can exercise your rights by sending an email to privacy@goajour.com.
VI. Your management, data retention, account deletion
You can manage the content and information you share when you use Ajour through the two profiles types Curious Profile and Limited Profile (reference is made to section III above).
We store data for as long as it is necessary to provide products and services to you and others, including those described above. Information associated with your account, including your profile picture, name and email, will be kept for up to 6 months after your account has been deleted, unless we no longer need the data to provide products and services.
During these 6 months, you are able to re-create your account and thereby get access to your previously shared content. If you delete your account, all your shared content will be displayed in the app under the name “Previous User” and with an Ajour logo as profile picture.
Keep in mind that information that others have shared about you and/or your recommendations is not part of your account and will not be deleted in connection with your deletion of your account.
VII. Legal requests or preventive measures
We may access, preserve and share your information in response to a legal request if we have a good faith belief that the law requires us to do so.
We may also access, preserve and share information when we have a good faith belief it is necessary to: detect, prevent and address fraud and other illegal activity; to protect ourselves, you and others, including as part of investigations; or to prevent death or imminent bodily harm.
Information we receive about you may be accessed, processed and retained for an extended period of time when it is the subject of a legal request or obligation, governmental investigation, or investigations concerning possible violations of our terms or policies, or otherwise to prevent harm. We also may retain information from accounts disabled for violations of our terms for at least a year to prevent repeat abuse or other violations of our terms.
VIII. Notification in case of changes
Prior to any changes to this Policy you will be notified and you will get the opportunity to review and comment on the revised policy before continuing to use Ajour's services.
IX. Contact
Questions about this Policy can be sent to privacy@goajour.com. The data controller responsible for your information is Ajour App ApS, CVR no. 37616990, which may be contacted by privacy@goajour.com. You also have the right to lodge a complaint with a data protection authority, for example the Danish Data Protection Agency.
All the best from
Your Ajour team