MB Badplat projects, company code 306725058, Draugystės tak. 3-33, LT-77150 Šiauliai, Lithuania (“we”) is the controller of the personal data described in section 3. Contact for privacy questions: info@tachotrace.eu.
Account, billing and security data. We decide how these are used, so we are the controller. This notice explains that processing.
Tachograph data you upload. Driver card and vehicle unit files contain drivers’ personal data: names, card and licence numbers, dates of birth, activities, places, positions and vehicle registrations. For these data, the transport undertaking or person who uploads them is the controller, and we process them only on its behalf and on its instructions, under a data processing agreement. If you are a driver whose tachograph data were uploaded by one of our customers, that customer is normally the controller responsible for responding to your data-protection requests concerning those data. Please contact that organisation first. If you send such a request to us, we will forward it to the relevant controller and assist it as required under our data processing agreement and applicable law.
We do not use fleet data for our own purposes. Our staff cannot view a customer’s fleet data through the Service: support tools show only account information and numeric totals.
PDF reports. On paid plans you can generate PDF reports from your fleet’s data: a driver activity report (Standard and Pro) and a monthly fleet summary (Pro). They contain personal data: a driver report shows the driver’s name and card number (in full, unless you choose to mask it), activities, findings and the files behind them; a fleet summary names drivers and vehicles. A report is generated when you ask for it and is not stored: we keep no copy on our servers. We record only that a report was generated, its kind and the random report number printed on it, with the other security events (sections 3 and 5). Once downloaded, a report is outside the Service: the customer, as controller, decides where it goes and with whom it is shared.
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| E-mail address, password (stored only as a hash), optional name and company name, language, accepted terms version and time | Creating and running your account | Individual customers: contract, Art. 6(1)(b). Users acting for an organisation: legitimate interests, Art. 6(1)(f): administering the customer’s account, authenticating authorised users and providing the Service the customer requested |
| Google or Microsoft account identifier, if you sign in that way | Signing you in | Individual customers: contract, Art. 6(1)(b). Users acting for an organisation: legitimate interests, Art. 6(1)(f), as above |
| Sessions, sign-in times, security events, and keyed digests (not raw values) of IP addresses and e-mail addresses used for rate limiting | Keeping accounts secure and preventing abuse | Legitimate interests, Art. 6(1)(f): protecting the Service and its users. We have assessed and documented the balance between these interests and your rights; you can ask us about it at info@tachotrace.eu |
| Service e-mails: address confirmation, password reset, e-mail change, seat and retention warnings, account deletion | Communicating about your account and plan | Individual customers: contract, Art. 6(1)(b). Users acting for an organisation: legitimate interests, Art. 6(1)(f): administering the customer’s account and communicating about the Service requested by the customer |
| Plan, seats, billing status, Stripe customer and subscription identifiers, and the time a consumer asked for the service to start | Billing and managing your subscription | Individual customers: contract, Art. 6(1)(b). Users acting for an organisation: legitimate interests, Art. 6(1)(f), as above. Where applicable, legal obligation, Art. 6(1)(c), for specific accounting and consumer-law records that we are required to keep |
| Account-level usage facts: the link you followed to sign up (one of a few fixed words, such as “pricing page”); when the account first uploaded a file, had a file processed, opened a driver’s timeline, set the legal week timezone and started a paid plan, and the upgrade prompt that led to it; whether it was active and whether it uploaded files in each week; the number of files received per week by outcome; and its plan, seats and their monthly value at the start of each month. Separately, anonymous daily counts of help articles opened and of help searches that found nothing | Measuring and improving the Service (see “How we measure our Service” below) | Legitimate interests, Art. 6(1)(f): running, securing and improving the Service and understanding whether it works |
| Messages you send to support | Answering you | Contract, Art. 6(1)(b), or legitimate interests, Art. 6(1)(f), in answering enquiries |
Name, billing address, billing e-mail and payment method are entered directly on Stripe’s pages and held by Stripe. We receive none of your card details, and we send Stripe no driver, vehicle or tachograph data.
How we measure our Service. We count how TachoTrace is used at the level of accounts, so that we can run it, fix what does not work and decide what to build. For example: how many accounts sign up, upload a first file, open a driver’s timeline or start a paid plan; how many accounts are active each week; our monthly subscription revenue; and which help articles are opened. We record the link you followed to sign up only as one of a few fixed words (such as “pricing page”). We do this on our own servers, from the account data we already hold. The one exception is the in-app help: when you open a help article, the help page tells our server which article it was, and when a help search finds nothing, it tells our server only that. The search text never leaves your browser, and these help counts are stored per day without any user or account.
We do not use cookies or other tracking technology for this. We do not use third-party analytics, record which pages you view or what you click, or record what you type into the help search. We never use your fleet’s records (drivers, vehicles, cards, activities, places or findings) for this. Only TachoTrace’s operators see these figures, as totals, never as a list of customers.
Our legal basis is our legitimate interest in running, securing and improving the Service (Art. 6(1)(f) GDPR). These records are kept for 24 months and are deleted when you delete your account (section 5). You can object at any time by writing to info@tachotrace.eu. We will then leave your account out of these figures.
We do not sell personal data or show advertising.
| Provider | What for | Location |
|---|---|---|
| Hetzner Online GmbH | Hosting, storage and backups | Germany |
| Brevo (Sendinblue SAS) | Sending service e-mails | EU (France) |
| Stripe Payments Europe Ltd. | Payments, invoices and the billing portal | Ireland; Stripe may transfer data to the USA |
| Google LLC / Microsoft Corporation | Optional sign-in | USA |
| Cloudflare, Inc. | Bot protection on sign-up forms (Turnstile), where enabled | USA |
Where personal data are transferred outside the EEA, we use a transfer mechanism permitted by Chapter V of the GDPR. For transfers to the United States this may include the European Commission’s EU–US Data Privacy Framework adequacy decision where the relevant recipient is currently certified. Where an adequacy decision does not cover the transfer, we use another permitted safeguard, such as the European Commission’s Standard Contractual Clauses, together with supplementary measures where required. Hetzner and Brevo process data within the EEA, so no transfer mechanism is needed. For Stripe, Google, Microsoft and Cloudflare, we rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on Standard Contractual Clauses. Contact info@tachotrace.eu for information about the safeguard that applies. We may also disclose data where the law requires it.
| Data | Kept for |
|---|---|
| Account data | Until you delete the account, except as stated for billing records below |
| Accounts whose sign-up was never completed | 7 days |
| Confirmation and reset links | 24 hours (address confirmation), 30 minutes (password reset and e-mail change) |
| Unsent e-mails in our queue | Until sent, at most 24 hours |
| Security events | 12 months, also after account deletion (without the e-mail address) |
| Billing records we hold | Accounting documents and records that we are legally required to retain are retained for the statutory retention period, normally 10 years under applicable Lithuanian accounting and archives rules, even if the account is deleted. Stripe also keeps invoices and payment records under its own legal retention. |
| Fleet data (processed for customers) | According to the customer’s plan: 90 days on Free, 2 years on paid plans; unreadable files 90 days; or until the customer deletes them |
| Usage statistics (section 3, “How we measure our Service”) | 24 months. An account’s statistics are deleted when the account is deleted; the anonymous help counts carry no account |
| Backups | Deleted data remain in backups for up to about 3 months |
We store information on your device only where it is strictly necessary to provide a service you have explicitly requested, and we do not use it for tracking:
| Item | Purpose |
|---|---|
| Session cookie | Keeps you signed in |
| Short-lived sign-up, sign-in (Google or Microsoft) and e-mail link cookies | Protect and complete the sign-up, sign-in or e-mail confirmation you requested |
| Language setting (local storage) | Remembers the language you chose; written only after you choose a language |
| Display preference (local storage) | Remembers how you chose to view your data, so the view you requested stays the same between visits |
We use no cookies or browser storage to measure the Service (section 3).
Where bot protection is enabled, Cloudflare Turnstile checks your browser on sign-up forms.
Data are sent only over encrypted connections. Each customer’s data are isolated in the database, passwords are stored as hashes, and access by our staff is limited and logged.
Scores and findings help a person review tachograph records. We do not ourselves make decisions with legal or similarly significant effects about anyone by automated means. Our Terms forbid customers from using a score or finding as the sole or determinative basis for such a decision about a driver unless they have independently established that Article 22 GDPR and all other applicable law are complied with.
You have the right to access your personal data, and to have it corrected, erased or restricted. You may object to processing based on legitimate interests, and ask to receive your data in a portable format. Much of this you can do yourself in Settings, including the full export and account deletion. Otherwise write to info@tachotrace.eu. We respond to requests without undue delay and normally within one month. Where permitted by the GDPR because of the complexity or number of requests, that period may be extended by up to two further months; if we extend it, we will tell you within the first month and explain why.
You may complain to the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, www.vdai.lrv.lt), or to the supervisory authority where you live or work, for example the Polish President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl).
We will tell you by e-mail or in the Service before significant changes to this notice take effect.
This notice is available in Lithuanian, English and Polish. The Lithuanian text is the reference version to the extent permitted by applicable law. This does not deprive you of any mandatory protection applicable under the law of your country of habitual residence.