GDPR Compliance

Your data protection rights under the General Data Protection Regulation

Your GDPR Rights

Under the General Data Protection Regulation (GDPR), you have several important rights regarding your personal data:

πŸ” Right to Access

You can request a copy of all personal data we hold about you, including how it's used and who it's shared with.

✏️ Right to Rectification

You can request correction of inaccurate or incomplete personal data we hold about you.

πŸ—‘οΈ Right to Erasure

You can request deletion of your personal data under certain circumstances (also known as "right to be forgotten").

πŸ“¦ Right to Data Portability

You can request your personal data in a structured, machine-readable format to transfer to another service.

🚫 Right to Object

You can object to processing of your personal data for direct marketing or other legitimate interests.

⏸️ Right to Restrict Processing

You can request limitation of processing your personal data under certain circumstances.

How to Exercise Your Rights

To exercise any of these rights, please contact us using the information below. We will respond within 30 days of receiving your request.

What We Need From You

To process your request, we may need:

  • Proof of identity (to protect your data from unauthorized access)
  • Specific details about your request
  • Account information or device identifiers
  • Clarification if your request is unclear

Legal Basis for Processing

We process your personal data based on:

  • Contract: To provide GPS tracking services you've purchased
  • Legitimate Interest: To improve our services and prevent fraud
  • Consent: For marketing communications and optional features
  • Legal Obligation: To comply with tax and legal requirements

Data Processing Activities

Data TypePurposeLegal BasisRetention
Account InformationService provisionContractAccount lifetime
Location DataGPS trackingContract12 months
Payment InformationTransaction processingContract7 years
Usage AnalyticsService improvementLegitimate Interest2 years
Marketing DataCommunicationsConsentUntil withdrawn

International Data Transfers

When we transfer your data outside the EU, we ensure adequate protection through:

  • European Commission adequacy decisions
  • Standard Contractual Clauses (SCCs)
  • Binding Corporate Rules
  • Certification schemes and codes of conduct

Data Breach Notification

In case of a data breach that may affect your rights and freedoms, we will:

  • Notify the supervisory authority within 72 hours
  • Inform affected individuals without undue delay
  • Provide clear information about the breach and our response
  • Offer guidance on protective measures you can take

Supervisory Authority

You have the right to lodge a complaint with the supervisory authority:

Regular Reviews

We regularly review our data processing activities to ensure:

  • Compliance with GDPR requirements
  • Appropriate technical and organizational measures
  • Data minimization and purpose limitation
  • Regular staff training on data protection