Privacy notice

1. Controller

programmiert Web Entwicklung e.U., Mahrweg 1, 1220 Wien, Österreich, email: info@programmiert.at.

2. Data we process

Account: name, email address, phone number, role (customer or driver), language, time you accepted these texts. Our provider stores passwords only in hashed form.

Drivers also: company details (name, legal form, address, VAT ID), location as postcode and town, vehicles (dimensions, payload, licence plate), services, prices, trips with stops, and certificates (identity document, trade licence, insurance) as files.

Customers also: transport details (addresses, dates, object, dimensions, weight, description).

Use: inquiries, unlocks, offers, messages, reviews, reports, credit requests, subscription status, email notifications.

Technical: login session cookies and server logs of our hosting provider.

3. Purposes and legal bases

Providing the platform for getting in touch (Art. 6(1)(b) GDPR). Checking drivers, preventing abuse and fraud including the block list, and platform security (Art. 6(1)(f) GDPR). Legal obligations such as the Digital Services Act and retention duties (Art. 6(1)(c) GDPR).

[Lawyer to check: legal basis for identity document copies and how long certificates are kept.]

4. Who sees what

Before unlocking, drivers see only town to town, date, object, dimensions, weight and extra services; after unlocking also name, email, phone, exact addresses and description. Customers see company details, reviews (without reviewers' names) and, after an unlock, the driver's contact details. Our administrators see what they need for checks, credits and reports.

5. Service providers (processors)

Supabase: database, login and file storage, data centre in Frankfurt (EU).

Vercel: hosting, server functions in Frankfurt; Vercel is a US company. [Lawyer to add: basis for the transfer.]

[To add once chosen: payment provider, email sending, SMS for phone confirmation.]

Postcode data comes from GeoNames (CC BY 4.0) and is stored in our database; searches send no data to third parties.

6. Retention

We keep account data while the account exists. Deleting an account is currently possible by emailing us. Block-list entries are kept to prevent abuse. [Lawyer to set: periods for certificates, messages, logs and billing data.]

7. Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection. Write to info@programmiert.at. You can complain to the Austrian Data Protection Authority (Datenschutzbehörde).

8. Cookies

We only use cookies that are technically necessary for login. There are no advertising or analytics cookies.