Privacy Policy – TOBEA GO

Last updated: 10 March 2026

This Privacy Policy explains how TOBEA S.A. (“TOBEA”, “Company”, “we”, “us”, or “our”) collects, uses, stores and protects personal data of users of the TOBEA Go mobile application (the “Application”).

Protecting personal data is a fundamental priority for TOBEA. Personal data is processed in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Greek data protection legislation.

By accessing or using the Application, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

The data controller responsible for the processing of personal data under this Privacy Policy is:

TOBEA S.A.

For any questions related to personal data protection, you may contact us at:

Email: info@tobea.gr

2. Scope of this Policy

This Privacy Policy applies to:

• individuals who download or access the TOBEA Go Application
• users who create an account within the Application
• users who rent or operate mobility scooters through the Application

3. Personal Data We Collect

We may collect the following categories of personal data when you use the Application.

Account Information

• name
• email address
• phone number

Usage Information

• trip history
• duration of rentals
• interactions with the Application

Location Data

• real-time geolocation data (GPS) while using the service

Device Information

• device type
• operating system
• unique device identifiers
• application usage logs

Payment Information

Payment transactions are processed by third-party payment providers.

TOBEA does not store full credit card details.

4. How We Collect Data

Personal data may be collected:

• when creating an account
• when using the Application
• when renting or operating a mobility scooter
• through GPS and location technologies
• through technical logs generated by the Application

5. Purposes of Processing

Personal data may be processed for the following purposes:

• creating and managing user accounts
• providing mobility scooter rental services
• processing payments and transactions
• ensuring the safe operation of the Application
• preventing fraud or misuse of the service
• improving the Application and user experience
• providing customer support
• complying with legal and regulatory obligations

6. Legal Basis for Processing

The processing of personal data is based on one or more of the following legal grounds:

• Performance of a contract between the user and TOBEA
• Legitimate interests of the Company, including the safe operation of the service
• Compliance with legal obligations
• User consent, where required under applicable law

7. Location Data (GPS)

The Application uses location data in order to:

• identify nearby available scooters
• start and end rental sessions
• verify correct parking locations
• prevent loss, theft, or misuse of equipment

Location data is collected only while the Application is being used for service purposes.

8. Sharing of Personal Data

Personal data may be shared with:

• payment service providers
• cloud infrastructure providers
• technology partners supporting the Application
• customer support service providers
• public authorities where required by law

TOBEA does not sell personal data to third parties.

9. Data Processors

TOBEA may engage third-party service providers acting as data processors, including providers of:

• cloud hosting services
• payment processing
• technical infrastructure
• analytics and system monitoring

These providers process personal data only on behalf of TOBEA and in accordance with contractual data protection obligations.

10. International Data Transfers

In some circumstances, personal data may be transferred outside the European Economic Area (EEA).

Where such transfers occur, TOBEA ensures that appropriate safeguards are implemented in accordance with the GDPR, including standard contractual clauses or equivalent protection mechanisms.

11. Data Retention

Personal data will be retained only for as long as necessary to fulfill the purposes described in this Privacy Policy, including:

• maintaining active user accounts
• fulfilling legal and regulatory obligations
• resolving disputes and enforcing agreements

When personal data is no longer required, it will be securely deleted or anonymized.

12. Data Security

TOBEA implements appropriate technical and organizational security measures to protect personal data, including:

• encryption of sensitive data
• restricted access to personal data
• secure cloud infrastructure
• monitoring and protection of system access

Despite these measures, no digital system can guarantee absolute security.

13. User Rights

Under the GDPR, users have the following rights:

• right of access to their personal data
• right to rectification of inaccurate data
• right to erasure (“right to be forgotten”)
• right to restriction of processing
• right to data portability
• right to object to processing

Users may exercise these rights by contacting:

info@tobea.gr

14. Automated Decision-Making

TOBEA does not use automated decision-making processes that produce legal or similarly significant effects on users.

15. Updates to this Privacy Policy

TOBEA may update this Privacy Policy from time to time.

If significant changes are made, users will be notified through the Application or other appropriate communication channels.

16. Complaints

Users have the right to lodge a complaint with the competent data protection authority.

In Greece, the competent authority is the:

Hellenic Data Protection Authority