Privacy Policy

Roadial Oy generally acts as the data controller for the personal data processed in connection with its services.

In certain service situations, Roadial may act as a data processor on behalf of a contractual partner, such as an insurance company, vehicle manufacturer, or other service provider.

In certain cases, Roadial and a service partner may also act as joint controllers in accordance with applicable data protection legislation.

This privacy policy applies to the following parties:

• End customers using Roadial’s services
• Drivers and service providers connected to Roadial’s service
• Business partners
• Visitors to Roadial’s website

This privacy policy applies primarily to users located in the European Union and the European Economic Area, but it may also apply, where relevant, to users outside the EU/EEA.

Depending on how you interact with Roadial, we may process the following categories of personal data:

• Identification and contact details (name, phone number, email address)
• Authentication data (user identifiers and verification results)
• Vehicle data (vehicle-related information provided by the user and possible vehicle registration data)
• Location and routing data (location, route, and estimated arrival time in connection with a service request)
• Voice and communication data (call metadata, audio recordings, and transcripts of service interactions)
• Payment-related data (payment identifiers and transaction references – Roadial does not store payment card details)
• Technical usage and log data (IP address, timestamps, log data, and device or browser information)
• Analytics data (information describing website usage)

As a rule, Roadial does not process special categories of personal data referred to in Article 9 of the GDPR.

Personal data is processed for the following purposes:

• Providing and maintaining Roadial’s services
• Identifying users and managing access rights
• Arranging roadside assistance services, route planning, and calculating estimated arrival times
• Operating telephone services and AI-assisted customer service functions
• Automatic speech recognition, transcription of calls, and documentation of the service process
• Communicating with customers, service providers, and partners
• Processing payments and invoicing
• Developing and analyzing services
• Ensuring security and preventing misuse
• Complying with legal obligations

Users are informed of call recording before the call begins.

The processing of personal data is based on one or more of the following legal bases under the GDPR:

• Performance of a contract
• Steps taken prior to entering into a contract
• Legitimate interest (service security, development, and operation)
• Legal obligation
• Consent where required (for example, cookies or marketing communications)

Roadial uses cookies and other similar technologies on its website.

Strictly necessary cookies are required for the functioning of the website.

Analytics cookies are used to understand how the website is used and to develop the services. Analytics tools may include, for example, Google Analytics-type analytics services.

Analytics cookies are used only with the user’s consent, and the user can manage cookie settings through the website’s cookie banner.

Personal data is retained only for as long as necessary to fulfill the purposes described in this policy.

Typical retention periods:

• Customer and contact data: for the duration of the customer relationship + up to 3 years
• Call recordings and transcripts: up to 12 months
• Technical log data: up to 24 months
• Accounting and billing data: in accordance with accounting legislation (generally 6 years)
• Analytics data: for a limited period for service development purposes

Data may be anonymized or deleted when it is no longer needed.

Roadial may disclose personal data to trusted service providers that process data on behalf of Roadial.

Such service providers may include, for example:

• Cloud service providers (e.g. Microsoft Azure)
• Identity verification services
• Payment service providers
• Communication and telephone services
• Map and location services
• Analytics services
• AI-based services

The processing of data is based on agreements under which service providers commit to complying with data protection legislation.

Roadial does not sell personal data to third parties.

Roadial applies appropriate technical and organizational security measures to protect personal data, including:

• Role-based access control
• Strong authentication
• Encryption of data transfers
• Security controls for cloud services
• Logging and security monitoring

Security measures are continuously developed.

Some of Roadial’s service providers may process personal data outside the EU or EEA.

In such cases, transfers are safeguarded by the European Commission’s approved Standard Contractual Clauses (SCCs) or other similar safeguard mechanisms.

Data subjects have the following rights under the GDPR:

• Right of access to data
• Right to rectify inaccurate data
• Right to request erasure of data
• Right to restrict processing
• Right to object to processing
• Right to data portability
• Right to withdraw consent

If you suspect that the processing of your personal data is unlawful, you may lodge a complaint with:

Office of the Data Protection Ombudsman — https://tietosuoja.fi

Requests concerning the exercise of rights may be sent to info@roadial.com.

Providing certain personal data is necessary for using Roadial’s services, for example:

• Contact details
• Location data
• Vehicle data

Without this information, Roadial may not be able to provide the requested service.

Providing data related to analytics or marketing is voluntary.

Roadial may send service-related messages.

Marketing communications, such as newsletters or offers, are sent only in accordance with applicable legislation, and the recipient may opt out of marketing at any time.

Roadial may update this privacy policy from time to time. The most current version is always available on the website.