Getaround, Inc. (“Getaround”, “our”, or “we”) has instituted the following policy related to biometric data that we possess as a result of our operations.
Biometric Data Defined
As used in this policy, “biometric data” includes “biometric identifiers” and “biometric information”
“Biometric identifier” means a retina or iris scan, fingerprint, voiceprint, or scan of hand or face geometry. Biometric identifiers do not include writing samples, written signatures, photographs, human biological samples used for valid scientific testing or screening, demographic data, tattoo descriptions, or physical descriptions such as height, weight, hair color, or eye color.
“Biometric information” means any information, regardless of how it is captured, converted, stored, or shared, based on an individual’s biometric identifier used to identify an individual. Biometric information does not include information derived from items or procedures excluded under the definition of biometric identifiers.
Purpose for Collection of Biometric Data
Getaround and/or its vendors also may collect, store, use and/or transmit biometric data during the course of conducting Getaround’s operations and of providing products or services to Getaround’s users. With respect to biometric data collected, stored, used and/or transmitted by Getaround and/or its vendors, to the extent required by law, Getaround and/or its vendors will obtain written authorization from each prior to the collection of such data.
Getaround and/or its vendors will collect, store, use, and/or transmit any biometric data solely for identifying users, recording time entries, identity verification, security, and fraud prevention. Getaround will not sell, lease, or trade biometric data that it receives from users as a result of their use of Getaround’s products or services.
Notice of Collection of Biometric Data
To the extent we collect, capture, or otherwise obtain biometric data relating to users, we agree to:
- Inform the user in writing that biometric data is being collected; stored and used;
- Inform the user in writing of the specific purpose and length of time for which the biometric data is being collected, stored, and used; and
- Receive a written release signed by the user authorizing the Getaround, and/or its vendors to collect, store, and use the biometric data for the specific purposes disclosed by Getaround, and authorizing the user to provide such biometric data to Getaround and/or its vendors.
Getaround will not sell, lease, trade, or otherwise profit from biometric data; provided, however, that Getaround may be paid for products or services used by Getaround’s vendors or clients that utilize such biometric data.
Disclosure of Biometric Data
Getaround will not disclose or disseminate biometric data to anyone other than its authorized vendors and clients without/unless:
- The subject of the biometric data or the subject’s legally authorized representative consents to the disclosure or dissemination;
- The disclosure or dissemination completes a financial transaction requested or authorized by the subject of the biometric data or the subject's legally authorized representative;
- The disclosure or dissemination is required by State or federal law or municipal ordinance; or
- the disclosure is required pursuant to a valid warrant or subpoena issued by a court of competent jurisdiction.
Retention of Biometric Data
Getaround shall retain biometric data collected until the earlier of:
- Getaround receives written notice from the user that the initial purpose for collecting or obtaining such biometric data has been satisfied, such as the termination of the user’s account with Getaround; or
- Getaround receives a written request from a user to have their biometric data deleted; or
- 3 years of the user’s last interaction with Getaround.
Storage of Biometric Data
Getaround and its vendors shall use a reasonable standard of care to store, transmit, and protect from disclosure any paper or electronic biometric data collected. Such storage, transmission, and protection from disclosure shall be performed in a manner that is the same as or more protective than the manner in which Getaround stores, transmits, and protects from disclosure other confidential and sensitive information, including personal information that can be used to uniquely identify a user or user’s account or property, such as genetic markers, genetic testing information, account numbers, PINs, driver’s license numbers, and social security numbers.