GDPR and personal data
The General Data Protection Regulation (GDPR) sets rules for collecting and using personal data in the European Union. In SmartMobility, data may be provided by an employer or an employee to enable performance of the contract between the employer and NEOBRAIN.
What to keep in mind
- Be transparent: explain what data is used, why, on what legal basis, who can access it and how long it is kept.
- Limit the data: collect and expose only what is needed for a defined purpose.
- Control access: assign permissions carefully and review them regularly.
- Respect retention periods: data is kept for the time needed for the operations for which it was collected, in accordance with applicable law. The legal notice states that this period will not exceed two years after the contract between the employer and NEOBRAIN ends.
- Support people’s rights: provide a process for access, rectification, erasure, restriction, objection and portability requests, where applicable.
- Protect data and document decisions: apply appropriate security measures and keep records of processing. Assess whether a data protection impact assessment is required.
Use of data and your rights
Data is intended for NEOBRAIN’s use and for its processors or business partners where their involvement is necessary to meet contractual obligations. Some data is required to perform the contract; without it, NEOBRAIN may be unable to fulfil certain obligations.
You may exercise your rights of access, rectification, erasure, objection, restriction and portability, subject to the limits applicable to your situation. To contact NEOBRAIN, email hello@neobrain.io. See also the SmartMobility legal notice and the privacy information provided by your employer.
This overview is informational and does not replace legal advice or the contractual documentation.
Further information
Last updated on 3 November 2026