Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is:

Data Protection Officer

If you have any questions about data protection, you can contact our Data Protection Officer:

2. General Information on Data Collection

2.1 Scope of Processing Personal Data

We process personal data of our users only to the extent necessary to provide a functional website and our content and services. The processing of personal data of our users is regularly carried out only with the consent of the user. An exception applies in cases where prior consent cannot be obtained for practical reasons and the processing of the data is permitted by law.

2.2 Legal Basis for Processing Personal Data

Insofar as we obtain the consent of the data subject for processing operations of personal data, Art. 6(1)(a) EU General Data Protection Regulation (GDPR) serves as the legal basis.

For the processing of personal data necessary for the performance of a contract to which the data subject is party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis.

If processing is necessary to protect a legitimate interest of our company or a third party, and if the interests, fundamental rights, and freedoms of the data subject do not override the first-mentioned interest, Art. 6(1)(f) GDPR serves as the legal basis for processing.

2.3 Data Deletion and Storage Duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also occur if provided for by European or national legislators in EU regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or deleted when a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for conclusion or fulfillment of a contract.

3. Your Rights

You have the following rights regarding your personal data:

3.1 Right of Access (Art. 15 GDPR)

You have the right to request information about your personal data processed by us.

3.2 Right to Rectification (Art. 16 GDPR)

You have the right to request the immediate rectification of inaccurate personal data concerning you.

3.3 Right to Erasure (Art. 17 GDPR)

You have the right to request the deletion of your personal data stored by us, unless processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.

3.4 Right to Restriction of Processing (Art. 18 GDPR)

You have the right to request the restriction of processing of your personal data.

3.5 Right to Data Portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format.

3.6 Right to Object (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR.

3.7 Right to Withdraw Consent (Art. 7(3) GDPR)

You have the right to withdraw your consent at any time with effect for the future.

3.8 Right to Lodge a Complaint (Art. 77 GDPR)

You have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement.

4. Data Collection on This Website

4.1 Server Log Files

The page provider automatically collects and stores information in server log files that your browser automatically transmits to us. These are:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of server request
• IP address (anonymized)

This data is not merged with other data sources. Data collection is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of their website – server log files must be collected for this purpose.

Storage duration: Data is deleted after 7 days at the latest.

4.2 Contact Form

If you send us inquiries via the contact form, your data from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

The processing of this data is based on Art. 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively processing inquiries directed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested.

Storage duration: Data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This is usually the case after your inquiry has been processed.

4.3 Inquiry by Email or Phone

If you contact us by email or phone, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.

Legal basis: Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

Storage duration: After your inquiry has been fully processed, data will be deleted unless statutory retention periods apply.

5. Hosting and Content Delivery Network (CDN)

5.1 External Hosting

This website is hosted by an external service provider (host). Personal data collected on this website is stored on the host's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses, and other data generated via a website.

The host is used for the purpose of contract fulfillment toward our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of secure, fast, and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR).

Our host will only process your data to the extent necessary to fulfill its service obligations and follow our instructions regarding this data.

Data Processing Agreement: To ensure data protection-compliant processing, we have concluded a data processing agreement with our host.

5.2 Server Location

The servers are located exclusively in data centers within the European Union (Germany).

6. Use of the SaaS Application ADRLY

6.1 Registration and User Account

To use our SaaS application, registration is required. We collect the following data:

• Company name
• First and last name of contact person
• Email address
• Password (encrypted)
• Billing address
• Optional: Phone number

Legal basis: Art. 6(1)(b) GDPR (contract fulfillment)

Storage duration: Data is stored for the duration of the contractual relationship and retained after contract termination in accordance with statutory retention periods (e.g., German Commercial Code, Fiscal Code), typically 10 years.

6.2 Data You Enter in the Application

When using the SaaS application, you enter various data, including:

• Data on transport units (registration numbers, inspection dates, documents)
• Employee data (names, training records, expiration dates)
• Audit reports and documentation
• Company and client data

Important: We process this data exclusively on your behalf. You are the controller within the meaning of GDPR for this data, we are the processor. Processing is based on a Data Processing Agreement (DPA) pursuant to Art. 28 GDPR.

Legal basis: Art. 6(1)(b) GDPR (contract fulfillment) and Art. 28 GDPR (data processing)

Storage location: Germany (EU)

Access: Only you and users authorized by you have access to your data.

6.3 Automatic Reminders

Our system sends automatic email reminders when inspection deadlines or training sessions expire. This function serves contract fulfillment and can be deactivated in the settings.

Legal basis: Art. 6(1)(b) GDPR

7. Payment Service Providers

We use external payment service providers through whose platforms users and we can carry out payment transactions. The data processed by payment service providers includes inventory data, such as name and address, bank data, such as account numbers or credit card numbers, passwords, TANs, and checksums, as well as contract, sum, and recipient-related information.

This information is necessary to carry out transactions. However, the entered data is only processed by and stored with the payment service providers. We as operators receive no information about (bank) accounts or credit cards, only confirmation (acceptance) or rejection of the payment. In some cases, payment service providers may transmit data to credit agencies. This transmission is for identity and credit checks.

Legal basis: Art. 6(1)(b) GDPR (contract fulfillment)

We use the following payment service providers:

• Stripe: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Privacy Policy: https://stripe.com/privacy

8. Cookies and Tracking

8.1 Cookies

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that enables unique identification of the browser when the website is visited again.

We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.

8.2 Necessary Cookies

We use the following necessary cookies:

• Session Cookie: To maintain your login session
• CSRF Token: To protect against Cross-Site-Request-Forgery attacks
• Cookie Consent: Stores your cookie settings

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in technically necessary functionality)

Storage duration: Session cookies are deleted after closing the browser. Other necessary cookies are deleted after a maximum of 30 days.

8.3 Analysis Cookies (Optional)

If you have consented, we use analysis tools for statistical evaluation of website usage. These tools use cookies and send anonymized usage data to our analysis service provider.

Legal basis: Art. 6(1)(a) GDPR (consent)

You can withdraw your consent at any time with effect for the future.

9. Plugins and Tools

9.1 Use of CDN Services

We use a Content Delivery Network (CDN) for faster content delivery. Certain files (e.g., fonts, icons) are loaded from external servers.

All CDN services used are GDPR-compliant and based in the EU.

9.2 No Social Media Plugins

We do not use social media plugins that automatically transfer data to third-party providers.

10. Data Security

10.1 SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser's address line changes from "http://" to "https://" and by the lock symbol in your browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

10.2 Technical Security Measures

We implement comprehensive technical and organizational security measures:

• Encrypted data transmission (SSL/TLS)
• Encrypted data storage
• Regular security updates
• Access controls and permission concepts
• Regular backups with encrypted storage
• Firewalls and intrusion detection systems
• Regular security audits

10.3 Data Protection for Job Applications

If you apply to us, we process your personal data exclusively for the purpose of processing your application. The legal basis is Art. 6(1)(b) GDPR and § 26 German Federal Data Protection Act. After completion of the application process, data will be deleted after 6 months unless consent for longer storage has been provided.

11. Changes to This Privacy Policy

We reserve the right to occasionally adjust this privacy policy to ensure it always complies with current legal requirements or to implement changes to our services in the privacy policy. Your next visit will be subject to the new privacy policy.