Privacy Policy

1. Privacy at a glance

Protecting your personal data matters to us. We process your data solely on the basis of the applicable law, in particular the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). This policy explains the nature, scope and purpose of processing personal data in connection with our website, platform, products and services, and when you contact Easytrack. It is addressed in particular to: visitors to our website; prospects and business partners; customers and platform users; and drivers, employees and other people whose data is processed through our GPS and telematics solutions.

2. Controller

The controller for the processing of personal data under the GDPR is:
Easytrack · gps tracker · telematics GmbH
Deutschstraße 4, 1230 Vienna, Austria
Phone: +43 1 615 61 63 · Email: info@easytrack.at · Web: www.easytrack.at

3. Data protection contact

For questions about data protection, the processing of personal data or exercising your GDPR rights, contact:
Michaela Cander · Email: datenschutz@easytrack.at
Postal: Easytrack · gps tracker · telematics GmbH, Deutschstraße 4, 1230 Vienna, Austria.

4. Roles, responsibilities & processing on behalf

Responsibility depends on the processing activity.

• 4.1 Easytrack as controller: For processing related to visiting this website, contact enquiries, quotations, contracts, invoicing, customer administration, support enquiries and general business operations, Easytrack is the controller under Art. 4 GDPR.
• 4.2 Easytrack as processor: Where Easytrack processes GPS, logbook, vehicle, driver, movement, location or usage data on a customer's behalf, it acts as a processor under Art. 28 GDPR, and the customer is the controller.
• 4.3 Customer responsibility: The customer is responsible for the lawfulness of processing, informing data subjects (Art. 13–14 GDPR), obtaining necessary consents, concluding any required works agreements, the employment-law admissibility of GPS tracking, and handling data-subject requests.
• 4.4 Data processing agreement (DPA): Where Easytrack processes data on a customer's behalf, this is done under a DPA per Art. 28 GDPR; the customer remains the controller.

5. What data we process

Depending on how you use our website, platform and services, we process different categories of personal data:

• 5.1 Master & contact data: Name, company, contact person, address, phone, email, customer number, contract data.
• 5.2 Payment & invoicing data: Billing address, VAT ID, payment information, invoicing and accounting data, contract/billing data.
• 5.3 Usage & device data: IP address, browser type/version, operating system, device information, access date/time, log data, session information.
• 5.4 GPS, vehicle & trip data: GPS location, vehicle positions, routes, timestamps, mileage, logbook data, number plates, vehicle names, device identifiers, SIM/connection information.
• 5.5 Driver & user data: Driver name, username, user roles, driver/employee identifiers, driver-to-vehicle assignments, in-platform usage and activity data.
• 5.6 Support & communication data: Communication content, support tickets, error descriptions, technical analysis logs, email/phone correspondence.
• 5.7 Cookies & tracking data: Depending on your cookie settings (see Section 7).

6. Purposes & legal bases

We process personal data only within the applicable law and only as far as necessary, based in particular on Art. 6(1)(a) GDPR (consent), (b) (contract/pre-contract), (c) (legal obligations) and (f) (legitimate interests):

• 6.1 Website operation: Provision, system security, error analysis — Art. 6(1)(f).
• 6.2 Contact & communication: Handling your enquiry — Art. 6(1)(b) and (f).
• 6.3 Quotes, contracts & customer administration: Art. 6(1)(b) and (c).
• 6.4 Providing the Easytrack platform: Art. 6(1)(b) and Art. 28 (processing on behalf).
• 6.5 Support & technical service: Art. 6(1)(b) and (f).
• 6.6 Analytics, optimisation & statistics: Art. 6(1)(a) (consent).
• 6.7 Marketing & advertising: Art. 6(1)(a) (consent); consent can be withdrawn at any time with future effect.

7. Website, cookies, consent management & services used

7.1 Cookies & similar technologies: We distinguish technically necessary cookies (cannot be disabled), and analytics/statistics and marketing cookies (used only with consent).
7.2 Consent management: On your first visit you choose which categories are enabled and can change/withdraw consent any time with future effect. Legal bases: Art. 6(1)(a) GDPR and § 165 TKG 2021 (CookiePal).
7.3 Google Tag Manager: Manages and embeds services; does not itself process personal data.
7.7 Google Analytics 4 & Google Ads: Google Ireland Limited, Dublin; with consent (Art. 6(1)(a)); processes shortened/pseudonymised IP, device/browser info, usage behaviour, and conversion measurements.
7.9 Microsoft Clarity: With consent; may process mouse movement, clicks, scrolling, and usage data.
7.10 Zoho PageSense, Zoho Forms & Zoho CRM: For analytics, handling enquiries, support, and CRM administration.
7.12 Google Maps: Embedded location service with consent.

8. GPS tracking, logbook & platform operation

• 8.1 Purpose: Vehicle tracking, fleet management, electronic logbooks, theft protection, reporting and analytics.
• 8.3 Customer responsibility: GPS, logbook, driver and vehicle data is determined, managed and used by the customer. The customer is responsible for informing data subjects and obtaining works council approvals where required.
• 8.5 Logbook data: The logbook is a technical aid; Easytrack gives no guarantee of tax recognition. The customer is responsible for accuracy and completeness.
• 8.6 Data storage: GPS, logbook and usage data is stored for a maximum of 12 months from capture unless otherwise agreed in writing; thereafter it is automatically deleted.
• 8.7 Customer backup: The customer must export and archive relevant data and tax logbooks outside the platform in good time.
• 8.9 No advertising use: GPS and driver data is never sold, shared, or used for third-party advertising or profiling.

9. Recipients, processors & third-country transfers

Data is shared only where necessary to deliver services, perform contracts, meet legal obligations, or with consent. Carefully selected processors (hosting providers, cloud servers, mobile telecom carriers, and CRM tools) receive data solely under Art. 28 DPAs. Where third-country transfers occur, they take place strictly under GDPR safeguards (adequacy decisions or Standard Contractual Clauses per Art. 46 GDPR).

10. Retention, deletion & backup

Data is retained only as long as needed for operational purposes or statutory retention requirements. GPS and logbook data is automatically deleted after 12 months unless extended archiving has been booked. Customers are reminded to perform regular backups of necessary tax and operational reports.

11. Rights of data subjects

Under the GDPR, you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection (Art. 21), and withdrawal of consent. You also have the right to lodge a complaint with a supervisory authority. In Austria:
Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40–42, 1030 Vienna, Austria — Web: www.dsb.gv.at.
To exercise your rights with Easytrack, email: datenschutz@easytrack.at.

12. Data security & changes

We employ robust technical and organizational measures (TOMs), including encrypted transmission, strict access control, and firewalled EU servers, to safeguard your data. This policy is reviewed periodically. The version published at the time of your visit applies.

© Easytrack gps tracker telematics GmbH.