We take the protection of your personal data seriously. Below we explain how personal data is processed when you use this platform (Konvoii). Please adapt this template to your actual processing activities and have it reviewed by a qualified professional.
1. Controller
The controller under the GDPR is the provider named in the “Legal notice” section of the app. For privacy requests, please use the contact details (including the privacy contact email) provided there.
2. General information on processing
We process personal data only to the extent necessary to provide a functional platform, perform a contract, based on your consent, based on legitimate interests, or where we are legally obliged to do so.
3. Hosting and infrastructure
The application is operated on servers of a hosting provider (see legal notice). Technical access data (e.g. IP address, timestamp, requested resource, user agent) may be processed in server logs. The legal basis may be Art. 6(1)(b) GDPR (contract / pre-contractual steps) and Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).
If data is transferred to a third country (e.g. the USA), we rely – where required – on an adequacy decision or appropriate safeguards under Art. 46 GDPR (e.g. EU Standard Contractual Clauses), if offered by the provider.
4. Account, authentication and profile
When you register and sign in, we process the data you provide (e.g. email, name, password hash). The legal basis is Art. 6(1)(b) GDPR (contract).
Optional profile information (e.g. display name, image) may be stored. The legal basis may be Art. 6(1)(a) GDPR (consent) or Art. 6(1)(b) GDPR, depending on the feature.
5. Platform content (convoys, meetups, help, rides)
When you create content (text, locations, routes, participations, messages), it is processed and stored to provide the services. Location data may be stored or displayed at different levels of accuracy depending on your settings.
Other users may see certain data where the feature requires it (e.g. public listings, map view according to privacy settings). The legal basis is Art. 6(1)(b) GDPR and, where applicable, Art. 6(1)(a) GDPR.
6. Maps and geodata (third parties)
Map display may load map tiles from third parties (e.g. OpenStreetMap). The provider may receive technical data including your IP address. Please refer to the privacy policy of the respective map provider.
7. Cookies and similar technologies
Where technically necessary cookies or similar technologies are used for login and session management, this is done to provide the requested functionality (Art. 6(1)(b) GDPR and, where applicable, Section 25(2) TTDSG). Non-essential cookies are described separately and, where required, only used after consent.
8. Storage period
We store personal data only as long as necessary for the respective purposes or where statutory retention obligations apply. Account data may be deleted or anonymised after cancellation/deletion of the account unless retention is required by law.
9. Your rights
Subject to legal requirements, you have rights of access, rectification, erasure, restriction of processing, data portability, and objection (Arts. 15–21 GDPR).
Where processing is based on consent, you may withdraw consent with effect for the future.
You also have the right to lodge a complaint with a data protection supervisory authority.