This Privacy Policy informs you (the user) about the types, purposes, and scope of personal data we process in connection with the Spor app. The app is developed by MotionTag GmbH under a data processing agreement with TØI. TØI holds exclusive usage and ownership rights to the data. MotionTag has no rights to use the data in any way, including anonymised. All data will be deleted by project end.
Questions or comments can be directed to Silvia Olsen (silvia.olsen@toi.no). The data protection officer for TØI is also Silvia Olsen. MotionTag’s officer can be contacted at datenschutz@motion-tag.com.
The project has undergone a Data Protection Impact Assessment by SIKT. For questions regarding their evaluation, contact personverntjenester@sikt.no or +47 739 84 040.
Legal Basis
The legal basis for data processing is user consent (Article 6(1)(a) GDPR).
Data Collected
Spor collects data about your travel habits, including transport mode, distance, duration, and location. Location and sensor data are required to provide travel information. Tracking can be paused at any time in the app. App usage and access time data are also collected.
Data analysis (e.g., determining routes and transport modes) occurs on a separate server by MotionTag. Data is stored temporarily on your phone and deleted after transmission to the server.
Personal data is stored until the end of the project. Anonymisable data may be retained for further research. Other data will be deleted.
Push Notifications
You can choose whether to allow push notifications. They remind you to verify trips or deliver important technical updates. You can turn them on or off at any time.
Security Measures
We apply appropriate security measures, including physical and digital controls, TLS encryption for data transfer, and privacy-by-design principles in software and hardware choices.
Data Subject Rights
You may request information, correction, deletion, or restriction of your data at any time. If your data has been used for research and you later request deletion, this can still be honoured provided you are identifiable.
Registration and Account
Users must create a personal account with email and password. These credentials are stored separately from mobility data. Users may be contacted about account-related updates.
Retention and Deletion
You may request deletion of your data at any time. If deletion is not legally or technically possible (e.g., due to research requirements), data will be blocked and used only for necessary purposes (e.g. legal compliance or defending claims).
Updates
We update this Privacy Policy as needed. You will be informed if action is required (e.g., new consent).