With specific regard to credit card information, we comply with the Payment Card Industry Data Security Standard (“PCI DSS”) by (but not limited to) designing, implementing, and maintaining a coherent set of standards and procedures to manage risks to cardholder data – in an effort to ensure an acceptable level of Information Security risk – and by conducting yearly PCI DSS audits.

We regularly review, test and update our security policies and systems in order to meet the highest standards of data security. Unfortunately, no method of transmission over the internet or method of electronic storage is 100% secure. Therefore, while we strive to protect your personal information, we cannot guarantee its absolute security.

6. Reviewing and Requesting Changes to Your Information

EU users: please refer to Section 8 below for your statutory rights under the GDPR

We know that our customers value having control over their own information, so Vitesse Worldwide gives you the choice of providing or editing certain information, as well as choices about how we contact you.

Upon request, Vitesse Worldwide will make a reasonable effort to inform you regarding whether we hold any of your personal information. Customers may update, delete, access, or change their account information by editing their user, group, or booking agent records. To update a customer profile, login to your account at https://www.vitesseworldwide.com/ and click on “Profile Settings”, or email us at cl************@vi**************.com. We will respond to any requests for access to personal information within 30 days after receipt of such request.

To update customer billing information, contact Accounting at ac********@vi**************.com for assistance.

If you have signed up to receive marketing emails from Vitesse Worldwide, you can opt-out of receiving future marketing emails by following the foregoing process. Customers cannot opt-out of receiving all transactional emails related to their Vitesse Worldwide account, but may change their account settings (as described above) to reduce the frequency or eliminate certainVitesse Worldwide notification emails.

You also have the following additional rights with respect to your information:

Data access and portability: Access to and portability of your data are available by downloading your ride history and personal data by logging into your Vitesse Worldwide account.

Data correction and/or editing: Personal, ride, password and payment information can be easily changed by logging into yourVitesse Worldwide account.

Account deactivation: You may request that your account be deactivated and no longer be visible. However, Vitesse Worldwidemust maintain your information in order to comply with legal obligations.

Withdrawal of consent or objection to processing: You can object to data processing in certain limited circumstances. In such cases, we will cease processing your information unless we have compelling legitimate grounds to continue processing or where it is needed for legal reasons.

Where we use your data for direct marketing purposes, you can always object by withdrawing your consent, using the “unsubscribe” link in such communications or changing your marketing preference settings.

Personal, payment and ride information are required to provide your rides, receipts, cancellation notices, etc. Vitesse Worldwidecannot offer or fulfill Transportation Services without processing this information.

Vitesse Worldwide strives to meet its customers’ inquiries. If you have a concern about your service or the processing of your information, please contact customer service.

Right not to be subject to a decision based only on automated processing: Much of Vitesse Worldwide‘s processing (booking, billing, fulfilling your ride) is automated in order to protect the security of your information and bring you high quality services. If you would like to speak to a Vitesse Worldwide agent please contact customer support or your account manager. Decisions based on automated processing cannot be avoided when they are necessary to perform the Transportation Services or authorized by EU law.

Complaint filing: If you have used our Transportation Services while physically in the EU (i.e., you have taken a ride in the EU, and/or booked a ride while in the EU), you have the right to file a complaint against Vitesse Worldwide with the European Data Protection Supervisor (“EDPS”), regarding personal data processed specifically for those events. The EDPS’s contact details are: Office of the European Data Protection Supervisor, Rue Wiertz 60, B-1047 Brussels, Belgium, email: ed**@ed**.eu.

If you live in the EU, you may also file a complaint with your local data protection authority.

7. Messages from Vitesse Worldwide

On occasion, Vitesse Worldwide may need to contact you. These communications are service-related and necessary for members and Guest Checkout users. You agree that Vitesse Worldwide can send you service-related communications, such as those related to rides, transactions, your account, or security. Examples of service-related communications include an email address confirmation/welcome email when you register your account, notification of a booked ride, modification of key features or functions, and correspondence with Vitesse Worldwide‘s support team.

When you register for an account, or provide us with your email address or phone number (e.g. for a Guest Checkout booking), you can agree to receive marketing communications from us. You can unsubscribe at any time from marketing communications through the opt-out link included in the marketing communications or through your account settings.

8. Information for EU Residents:

The data controller is Vitesse Worldwide, 25 Crescent Street, Suite 100, Stamford CT, 06906 USA.

Privacy-related questions can be directed to pr*****@vi**************.com.

You are not legally required to provide Vitesse Worldwide with the Personal Data described in this Privacy Statement. Further, the contractual relationship that you might have entered into with us by making a reservation for our Transportation Services does not imply any obligation to provide your Personal Data. However, you might not be able to use our Transportation Services to the full extent if you do not provide us with certain data or object to the use of these data in order to complete the transportation request.

Our Legal Basis for Processing your Personal Data

When processing your Personal Data, we rely on the General Data Protection Regulation (“GDPR”), an EU-wide legal framework for the standardization of data protection. Vitesse Worldwide primarily processes data as a controller, for the purposes explained above under Sections 1 and 2 of this Privacy Statement. These purposes represent our legitimate interests for the purposes of Article 6 (1) f) GDPR. At the same time, some of the Personal Data we process is necessary for us to perform a contract with you or in order to take steps at your request prior to entering into a contract with you. For example, if you express your interest in transportation services, such as by filling out a webform, we will process the Personal Data submitted to comply with your request. This may include sharing your Personal Data with one of our authorized affiliates, who will then use your Personal Data to complete the transportation request. In addition, we are legally obliged to provide certain information to criminal prosecution or tax authorities in individual cases upon request. In these cases, the legal basis for the processing is either legal requirements (Article 6 (1) c) GDPR) or reasons of public interest (Article 6 (1) e) GDPR).

Transferring your Data outside the EU or the EEA

Vitesse Worldwide’s principal place of business is in United States, which is a ” Third Country” under the GDPR. Third Countries are generally not considered to afford the same level of protection that you enjoy in the EU, but Vitesse Worldwide still provides an adequate level of protection for your Personal Data – decision 2002/2/EC of the EU Commission states that Canada is deemed to provide an adequate level of data protection regarding commercial organizations such as Vitesse Worldwide. We have ensured that our service providers and affiliates have either certified under the EU-U.S. Privacy Shield Framework and will process all Personal Data received from EU member states in reliance on the Privacy Shield Framework or that they have been subjected to strict contractual provisions in their contract with us to guarantee that an adequate level of data protection for your data is guaranteed.

Your rights regarding the processing of your Personal Data

As a natural person, you have certain rights as “Data Subject”. You can assert the following rights against us under the GDPR:

• Your right to information and access under Article 15 GDPR, 
• Your right to correction under Article 16 GDPR, 
• Your right to erasure under Article 17 GDPR, 
• Your right to restriction of processing under Article 18 GDPR, and 
• Your right to data transferability under Article 20 GDPR.