No public evidenceGroundLink and GDPR
CertReports found no public GDPR evidence for GroundLink as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 28 Sep 2018
- Scope
- In order for a user to set up an account, GroundLink processes her/his email address, full name, phone number, and password. In order for a user to book and take a ride, GroundLink processes the pick-up and drop-off addresses, and her/his credit card information. GroundLink may need to store encrypted credit card information and use it for both billing and payment purposes. GroundLink automatically receives and collects information from the user's browser or mobile device when s/he visits the website or uses the app (e.g., the IP address, or cookies). This information, which might be combined with other information collected about the user, is used to prevent fraud and to keep the GroundLink's services secure, to analyze and understand how the services work for users, and to provide more personalized experience for users and advertising. GoundLink may also automatically collect device-specific information (such as the hardware model, operating system information, app version, app usage and debugging information, browser information, and device identifiers) when the user installs, accesses, or uses the services. GroundLink uses cookies to enable core site functionality, to enable additional functionality like saving preferences, allowing social interactions, and analyzing usage for site optimization, and to serve ads that are relevant to the user's interests. If the user shares her/his geo-location details, GroundLink may process this information to provide features to improve and customize the services. With the user's consent, when the user uses the app, GroundLink will access the user's stored images so that s/he can more easily provide feedback. GroundLink may also retain, preserve, or release the user's personal information to a third party in the following limited circumstances: in response to lawful requests by public authorities, including to meet national security or law enforcement requirements; to protect, establish, or exercise its legal rights or defend against legal claims; to comply with a subpoena, court order, legal process, or other legal requirement; or when it believes in good faith that such disclosure is reasonably necessary to comply with the law, prevent imminent physical harm or financial loss, or investigate, prevent, or take action regarding illegal activities, suspected fraud, threats to its property, or violations of GroundLink's Terms & Conditions. It is also necessary for GroundLink to engage third-party companies in order to operate and provide the transportation services in certain markets. These third parties have only limited access to the user's information, may use such information only to perform these tasks on GroundLink's behalf, and are obligated to GroundLink not to disclose or use the user's information for other purposes. In case of business reorganizations, member information is typically one of the business assets that is transferred. If GroundLink intends to transfer information about members, GroundLink will notify them by email or by putting a prominent notice on the website and the app, and the users will be afforded an opportunity to opt out before information about them becomes subject to a different privacy policy.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | GroundLink: Inactive | Live pagesha256 2856888535 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is GroundLink GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags) whose GDPR row is verified or vendor-stated, ranked by similarity.
No same-category vendor has GDPR evidence in the index yet.