Privacy
Truckroute is a service of VYS Scheduling BV, Poolland 24, 1768 BX Barsingerhorn, the Netherlands (Chamber of Commerce 73550027). We are responsible for the data described below. Questions, access, correction or deletion: info@vysscheduling.nl or +31(0)85-4013599.
Your account
To log in we store your e-mail address (encrypted), the name of your company, your role (administrator or user), when your account was created and when you last logged in, and the trial or subscription period of your company. Legal basis: the agreement with you or your company.
Of your company we store the company details the administrator enters: name, address, postcode, town, country, Chamber of Commerce number, optionally the VAT number, and a contact person with phone number (those two encrypted). They are required to use the route planner and for invoicing. Legal basis: the agreement with your company. We keep them as long as the account exists.
You log in with a code we send by e-mail; there is no password. We only store the code as an encrypted check value; it is valid for 10 minutes and is removed after a few days. We send the e-mail via our e-mail processor Postmark, with Brevo as a fallback if Postmark cannot be reached. Postmark is based in the United States; that transfer is based on the EU standard contractual clauses.
Logins, invitations and changes to an account are recorded in an audit log, with your network address only as an encrypted check value (cannot be reversed). We keep that log for 12 months and it cannot be changed. Legal basis: our legitimate interest in security and preventing abuse.
We delete an account 12 months after the last login (or after creation, if you never logged in), unless your company has a running subscription. Earlier deletion is possible on request.
Cookies
No advertising and no tracking cookies. Functional cookies only: tr_sessie (stay logged in, up to 30 days or until you log out) and zt_bekend (up to 1 year or until you log out: remembers that this browser logged in before, so that someone else cannot block your login).
Visitor statistics
We count visits with our own counter, without cookies and without an external statistics service. Per page we count the path, the website you came from, any campaign label from the link, the country and the type of device. In the statistics we store, instead of your IP address, a key that changes every day, so we can count visitors per day but cannot follow them across days or websites. To determine the country we keep the IP address for three months in a lookup table on our own server. We keep the visit data for 12 months; after that it is deleted automatically. Legal basis: our legitimate interest in seeing how the site is used.
The route planner
A number plate does not leave your browser. To look up a vehicle, your browser downloads a file with hundreds of number plates; the server does not see which number plate you looked up.
Your route (addresses and stops), My vehicles and your settings are only stored in your own browser (local storage), so they come back after a refresh. To calculate the route, your browser sends the coordinates of the route points to our own route server, which does not store them.
My location: only when you press it and your browser or phone gives permission, the site requests your position, rounded to about 10 metres. It becomes the starting point of your route and goes nowhere else.
The base map comes from the servers of the OpenStreetMap Foundation; they receive your IP address and the part of the map you are viewing. If you click a closed road section, your browser fetches the data of that road from api.openstreetmap.org.
Log files
Like every web server, our server records the IP address, the time and the requested file per request. We only use those log files for security and incidents, and they are deleted after two weeks.
Your rights
You have the right to access, correct, delete and restrict your data, and you can object. E-mail us for that. If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).