🇬🇧 LETTER - UBER EATS - ENG

Subject: Request for access to my personal data - General Data Protection Regulation (GDPR)

For the attention of the Data Controller,

I have used your services during the following period [⚠️ from DDMMYYY to DDMMYYY, TO BE COMPLETED BY THE WORKER], attached to the following marital status and contact details [⚠️ TO BE COMPLETED BY THE WORKER].

As specified in your General Terms and Conditions of Service, the use of your platform requires the collection of personal data for the purposes of processing necessary for the execution of the service offer.

Consequently, I hereby request access to all my personal data, in accordance with the European Union's General Data Protection Regulation (GDPR), in particular the right of access (Article 15).

Without prejudice to the rights of third parties, this request covers all my personal data for my entire active period on the application, and in particular those concerning:

- only my geolocation information for my entire active period on the application (including associated time prints, and accelerometer data), without involving the identification of third-party data;

-my “analytics” data by type, with a definition of the types;

- my income and payments;

- interactions in the application with partners;

- customer interactions with me, including comments and ratings, without identifying the customer;

- contracts, charters and rules of use to which I have agreed, in their various versions, and associated dates;

- email or push notifications sent to me, and my interactions with them;

- offers sent to me, and my interactions with them;

- any performance ratings, issued by UberEats or customers, jointly or separately, without identifying the third parties;

- my phone (including battery level, operating system, IP address, etc.);

- my vehicle;

- dispatching and matching of orders for which I have been selected;

- the orders I have placed;

- internal partner service support tickets concerning me or my orders;

- internal customer service support tickets concerning me or my orders;

- tags” from customer and partner services concerning me or my orders;

- internal discussions about me, while respecting the privacy rights of third parties;

- any temporary or permanent disconnection;

- my identity, insurance and validation documents, etc., including what has been automatically extracted from them;

- any profiling data;

In accordance with Article 15 of the GDPR, I would like a copy to be sent to me in an electronic format*. Please note that data available to you in machine-readable format must be provided to me in this form too, in view of the principles of fairness (GDPR Article 5.1.a) and data protection by design.

I am well aware that some of the data I request concerns third parties, either customers or employees of UberEats. I remind you that in this case it is UberEats' responsibility to implement measures to protect the rights of these persons, but that this argument cannot be used disproportionately and automatically to deny me full access to my data.

Insofar as certain data are inseparable from the rights of third parties, I would like to obtain confirmation of their processing and information revealing the type of data involved, as well as the conditions under which they are processed.If you consider me to be responsible for processing some of this data and would then act as a subcontractor, then please provide me with all the data you process on my behalf in a machine-readable format, in accordance with your obligation to respect my wishes on the means and purposes of processing.

Please further confirm where my personal data (including backups) is stored, and at least whether it has left the European Union (and if so, please provide me with details of the legal bases and protections for such transfers).

Please confirm whether or not you use automated decision-making (within the meaning of Article 22, GDPR). If the answer is yes, please provide useful information on the underlying logic, as well as the significance and intended consequences of this processing for me (Article 15(1)(h)).

Please confirm how long each category of data is kept, as well as the criteria used to make this decision, in accordance with the principle of limiting retention, and Article 15(1)(d).

I expect an acknowledgement of receipt, and a response within 30 days in accordance with the GDPR. Failing this, please specify the reason for exceeding this deadline and the timetable for the response selected.