1. Data we collect

Depending on the service used, we may process the following categories of data:

  • Contact data: first name, last name, email address, phone number.
  • Access data: username, encrypted password.
  • Technical data: IP address, browser type, operating system, pages visited.
  • Geolocation data: GPS position of vehicles registered on the platform (not of individuals).
  • Operational data: platform activity logs, alerts, transport schedules and reports.

2. Purpose of processing

Personal data is processed exclusively for:

  • Provision and management of contracted services.
  • Service-related communications (notifications, alerts, technical support).
  • Billing and commercial management.
  • Improvement and optimisation of the platform through statistical analysis with anonymised data.
  • Compliance with legal obligations.

3. Legal basis

Data processing is based on the execution of the service contract entered into with the user, compliance with legal obligations and the legitimate interest of RastraTec in improving its services.

4. Disclosure to third parties

Personal data will not be sold or transferred to third parties, except in the following cases:

  • Request by a competent authority or legal mandate.
  • Technology providers acting as data processors under a confidentiality agreement (e.g. hosting services, notification delivery).

5. Data retention

Data will be retained for the duration of the contractual relationship and for the legally required periods. Operational geolocation data is retained for a maximum period of 24 months.

6. Security

RastraTec applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss or alteration, including password encryption, HTTPS connections and role-based access control.

7. User rights

Users may exercise the following rights at any time by written request to [email protected]:

  • Access: find out what data we process about you.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: request deletion of your data when it is no longer necessary.
  • Objection: object to processing in certain circumstances.
  • Portability: receive your data in a structured format.

9. Modifications

RastraTec reserves the right to update this policy. Significant changes will be communicated to registered users by email.

Last updated: August 2026