19 May 2021
- What information we ask you to provide directly to us and why
- What information does the Tower GoCarma application collect and access when it is used and why
- What information might be collected from other sources
- To which third parties may we transfer your data
- How we store and secure information we collect
- How to access and control your information
- Other important privacy information
Scope and Application
1. a) to access GoCarma in the first place; and
2. b) to use all functionalities of the GoCarma app
What information do we need from you in order for you to use the app?
You will note that we collect your first name and surname, and your e-mail address when you first register for GoCarma. This information will be used to generate a MyTower account, which is required in order for you to use the app. We will also ask you to complete certain information in the Profile section of the mobile application. The information we ask you to provide and why is as follows:
Your e-mail address - When you first download and open GoCarma, we ask you to provide your e-mail address. This email address will serve as your primary email for GoCarma and for My Tower. Without your e-mail address, you will be unable to create an account to access GoCarma. We also use your e-mail address to communicate with you on queries you may have, or to provide you with information in relation to GoCarma. Further, but only if you have chosen to “opt in” to receiving promotional material, we may use this to send you marketing information or promotions.
Your name – We collect both your first name and your surname for use within the GoCarma app and for your My Tower account. Within GoCarma, your first name will be your display name. This will be displayed within GoCarma with your driving score so other users of GoCarma will be able to see this. You need to provide this otherwise you cannot use the GoCarma app. If you choose to enter into any competition, we also ask that you provide your surname/family name as a condition of doing this, for identification purposes (along with your first name).
Profile image – The app gives you an option to upload you profile image as part of your GoCarma profile. The image is used as your avatar in the app. The image is displayed in the competition rankings, if you choose to join one.
Car make/car model/car year/vehicle registration number – We collect this information to ensure GoCarma works accurately for your purposes (the make, model and year of the car are important for that), but also for eligibility and identification purposes. You are only eligible to use GoCarma if you have a registered vehicle that you are appropriately licensed to operate. This information is a necessary condition of you accessing the functionality of GoCarma.
What additional information can you provide to us to improve the experience and functionality of the app?
Address/City/Phone number – You may use GoCarma without filling in this information. However, we do give you the option to enter this information. The purpose of asking for this information is to provide us with alternative means of communicating with you about GoCarma if you have any queries (for example, if we cannot get hold of you by your e-mail address). We may also use this to target specific geographical locations for offers or promotions
Birthday – You may use GoCarma without filling in this information. However, we do give you the option to enter this information. The purpose of asking for this information is that it provides us with a check on your eligibility to use GoCarma. It is also another check on your identification. Further (unless you have chosen to “opt out” of receiving promotional material), we may use this to send you special promotions in relation our insurance products.
Expiry date of your current car insurance – This information is not mandatory for you to provide in order to use GoCarma. This information may be used for promotional purposes, such as providing you with a discount based on your GoCarma score, at the time your insurance comes up for renewal, if you fill this in.
What information does GoCarma collect and access when it is used and why?
When you sign up for GoCarma, you will note that we indicate GoCarma requires access to certain information. This information, the reasons access to it is required and the time at which it is accessed are set out below:
Location Information: While the app is in use – GoCarma functions by collecting precise location data about your trip when you drive. This is necessary to enable GoCarma to detect your acceleration, cornering, speed and other measurements which are factors for determining safe (or unsafe) driving. It is therefore a requirement that GoCarma is granted this permission within your mobile operating system for the purpose of assessing your record as a safe driver.
Location Information while the app is in the background: GoCarma continues to collect your driving data (GPS location information, gyroscopa and accelerometer data) while it is active in the background. This provides you with the functionality to use other apps such as navigation apps whilst GoCarma is still in use. GoCarma uses the location permission, and by extension the device’s GPS sensors, to automatically recognize driving behaviours. If the movement detected meets a set of criteria, such as travelling greater than a preset distance, GoCarma will begin recording the trip. Drive sensing and autorecording features rely on the Location permission requested by GoCarma. For these features and GoCarma to function as intended you should select the ‘Always’ Location permission, if requested by GoCarma.
Motion Detection – To record the safety measurements of your driving (accelerating, cornering, speed, braking) GoCarma needs to access data from your phone’s GPS, gyroscope and accelerometer sensors. It is therefore a requirement that GoCarma is granted this permission within your mobile operating system for the purpose of assessing your driving behaviour.
Network/WiFi states – GoCarma collects your location information in real time whilst you are online. If the connection is interrupted for whatever reason, the information will be stored locally until a connection is available. It is therefore a requirement that GoCarma is granted this permission within your mobile operating system for the purpose of assessing your driving behaviour.
Call and SMS Data – As a safety feature, GoCarma has the functionality to turn on automatic call and SMS replies for incoming calls and SMS’s received whilst your device is being used to record a driving trip via GoCarma. This enables you to drive without interruption and improve your safety. The use of this function is optional. However, if you decide to use this function, it is a requirement that GoCarma is granted the necessary permissions within your mobile operating system to access the SMS and call functions. We will only utilise these permissions for the stated purposes.
Important information about platform permissions
Most mobile platforms have defined certain types of device data that apps cannot access without your permission and platforms provide different permission systems for gaining your consent. The iOS platform alerts you the first time GoCarma wants access to a particular function (usually the first time you use that function) and asks you to give permission for that function to be used at that point. Android devices will notify you of all the permissions GoCarma may need for all functions when you first register for the app and your use of the app constitutes your consent. The above explanations, we hope, provide you the full details of the functionalities which GoCarma needs access to, why and when it will use them.
What information might be collected from other sources
GoCarma also provides you the functionality to share your score and other information on your social media sites. Your use of such features enables the sharing of information with your friends or the public, depending on the settings you set with your social media service. You should check the privacy policies of your social media sites for further information relating to the collection, use and storage of your personal information on those sites.
GoCarma makes use of social media network plugins (“Plugins”). When these Plugins are used to share your score and other information on your social media sites, information may be directly transferred from your device to the operator of the social network. Please note that GoCarma has no influence on the data gathered by the Plugin. If you are logged into a social network, your use of our Service can be referenced to your social network account. If you interact with the Plugins, for example by clicking “Like”, “Follow” or “Share”, or entering a comment, the information may automatically show in your social network profile. Even if you are not logged into your social network account. It may also be possible that the Plugins transmit your IP address to the social network operators. Please consider this when using our Services.
For information about the social network operators of the Plugins used in our GoCarma please see below:
- Google Play Services
- Google Analytics for Firebase
- Firebase Crashlytics
To which third parties may we transfer your data?
We share information with third parties that help us operate, provide, improve, integrate, customise, support and market our GoCarma.
Information collected through GoCarma is collected on cloud servers run by a third party cloud hosting provider. The information is also downloaded to Tower, which utilises shared service hubs run by Tower affiliates or third party cloud hosting companies for data storage and management. On-going application support for GoCarma is provided by a third party software service provider, Amodo d.o.o with whom Tower has a contract for service. In providing such support, Amodo d.o.o requires access to the data collected through GoCarma. If the data is subsequently transferred outside of the cloud server, it will be done so in an irreversibly anonymised form.
For the above third parties to have the data access required, data collected through GoCarma may be transferred to places outside of New Zealand (where the cloud data centres and Tower data centres are based and where the service providers are based). Where such a transfer is performed, it will be done in compliance with the requirements of the applicable Privacy laws.
In cases where there is a need to transfer the personal information to countries outside of New Zealand, Tower will put procedures in place to ensure that privacy protections are the equivalent or better than those required under New Zealand laws.
How we store and secure information we collect
We use data hosting service providers in Australia to host the information we collect, and we use technical measures to secure your data.
Tower has incorporated security procedures and practices that we consider are consistent with New Zealand industry practice for the protection of our customers using the GoCarma. We review our security procedures from time to time and update these when relevant. Where we obtain your personal information and/or user name and password, we have ensured that information is protected. All data sent from your phone to GoCarma is protected by using a secure encryption protocol. All data stored within the GoCarma solution is encrypted in line with industry cryptographic standards. The username, password and personal data are encrypted when transiting over the internet which prevents tampering with these details.
How long do we keep information
How long we keep information we collect about you depends on the type of information. After such time, we will either delete or anonymise your information or, if this is not possible (for example, because the information has been stored in backup archives), then we will securely store your information and isolate it from any further use until deletion is possible.
|If you request deletion while your data is live||It will be deleted from all systems including data lake if it remains live|
|If you request deletion after anonymisation||The anonymised data will be retained indefinitely|
What is data anonymisation?
Anonymisation is the process of removing all information that may serve as an identifier of the individual it belongs to.
How to access and control your information
The discount feature of GoCarma enables you to see the type of excess discount you may be able to obtain based on your driving record.
Subject to prior consent from you, we may use your contact information to send you marketing information or promotions. The ways in which we would contact you may include:
- Push Notifications via your smart phone (if your device has granted the relevant permissions to GoCarma)
You may opt out of receiving marketing information or promotional messages from us at any time by following the instructions on those messages, or alternatively, by contacting us at firstname.lastname@example.org.
Upon receipt of any opt-out request from you, Tower will, at no cost to you, act on your request and ensure that your personal data will not be used for those purposes and you remain able to use the app.
Your right of access and correction
In respect of any personal data collected from you and held by us through GoCarma, you can do the follow things:
1. Check whether Tower holds data relating to you and to access such data if you wish to
2. Request Tower to correct any data relating to you which is inaccurate
- Object to our use of your information (including for marketing or promotional purposes)
1. Request deletion of your information
Your request and choices may be limited in certain cases: for example, if fulfilling your request would reveal information about another person, or if you ask to delete information which we or our administrator are permitted by law or have compelling legitimate interests to keep. Where you have asked us to share data with third parties, for example, by installing third-party apps like Facebook, you will need to contact those third-party service providers directly to have your information deleted or otherwise restricted. If you have unresolved concerns, you have the right to complain to the Privacy Commissioner. To do so, please refer to their website www.privacy.org.nz