Privacy
Truckroute is a service of VYS Scheduling BV, Poolland 24, 1768 BX Barsingerhorn, the Netherlands (Chamber of Commerce 73550027). We are responsible for the data described below. Questions, access, correction or deletion: info@truckroute.nl or +31(0)85-4013599.
Your account
To log in we store your e-mail address (encrypted), the name of your company, your role (administrator or user), when your account was created and when you last logged in, and the trial or subscription period of your company. Legal basis: the agreement with you or your company.
Of your company we store the company details the administrator enters: name, address, postcode, town, country, Chamber of Commerce number, optionally the VAT number, and a contact person with phone number (those two encrypted). They are required to use the route planner and for invoicing. Legal basis: the agreement with your company. We keep them as long as the account exists.
You log in with a code we send by e-mail; there is no password. We only store the code as an encrypted check value; it is valid for 10 minutes and is removed after a few days. We send the e-mail via our e-mail processor Postmark, with Brevo as a fallback if Postmark cannot be reached. Postmark is based in the United States; that transfer is based on the EU standard contractual clauses.
We store the language of the site or app you use to request a login code (Dutch or English), so our e-mail is in your language. Now and then we send you an e-mail explaining how to use Truckroute and what it can do; we keep track of who received which explanation, so you do not receive it twice. You can always unsubscribe via the link at the bottom of such an e-mail or by replying with "unsubscribe". Legal basis: our legitimate interest in helping you work well with the service you signed up for. We keep this as long as your account exists.
Logins, invitations and changes to an account are recorded in an audit log, with your network address only as an encrypted check value (cannot be reversed). We keep that log for 12 months and it cannot be changed. Legal basis: our legitimate interest in security and preventing abuse.
We delete an account 12 months after the last login (or after creation, if you never logged in), unless your company has a running subscription. Earlier deletion is possible on request.
Cookies
No advertising and no tracking cookies. Functional cookies only: tr_sessie (stay logged in, up to 30 days or until you log out; for route managers up to one year), zt_bekend (up to 1 year or until you log out: remembers that this browser logged in before, so that someone else cannot block your login) and tr_taal (1 year: the language you picked at the top yourself).
If you do not pick a language, our server looks at the country of your IP address when you visit: the Netherlands and Belgium get the Dutch website, Germany the German one and everyone else the English one. We look up the country in our own list from the regional internet registries; your IP address is not sent anywhere for this and not stored for this.
Reviews
Reviews you post on the Truckroute Facebook page are shown on www.truckroute.nl/en/reviews/: the text, the date and your first name with the first letter of your surname. We fetch them from Facebook every night and keep nothing else about you. If you remove your review on Facebook, it disappears here the next day too. If you do not want us to show it, e-mail info@truckroute.nl. Legal basis: our legitimate interest in showing what users think of Truckroute.
Visitor statistics
We count visits with our own counter, without cookies and without an external statistics service. Per page we count the path, the website you came from, any campaign label from the link, the country and the type of device. In the statistics we store, instead of your IP address, a key that changes every day, so we can count visitors per day but cannot follow them across days or websites. To determine the country we keep the IP address for three months in a lookup table on our own server. We keep the visit data for 12 months; after that it is deleted automatically. Legal basis: our legitimate interest in seeing how the site is used.
The route planner
A number plate does not leave your browser. To look up a vehicle, your browser downloads a file with hundreds of number plates; the server does not see which number plate you looked up.
Your route (addresses and stops), My vehicles and your settings are only stored in your own browser (local storage), so they come back after a refresh.
Your favourites, fixed addresses, saved trips, recent routes, saved permits and your notes on a permit also stay only in your own browser. A file you import is read in your browser and not sent to us.
If you load the PDF of a permit or exemption, it goes to our own route server, which extracts the permitted route. We keep the PDF for 30 days so we can check why a permit was not read or read incorrectly; after that it is deleted automatically. It does not go to anyone else.
To calculate the route, your browser and the app send the coordinates of the route points to our own route server. It keeps every route request for 7 days (the route points, the calculated route and how long the calculation took) to find errors in routes, with your account only as an irreversible code and without name, e-mail address or IP address. After that it is deleted automatically. Legal basis: our legitimate interest in correct routes.
My location: only when you press it and your browser or phone gives permission, the site requests your position, rounded to about 10 metres. It becomes the starting point of your route and goes nowhere else.
The base map comes from the servers of the OpenStreetMap Foundation; they receive your IP address and the part of the map you are viewing. If you click a closed road section, your browser fetches the data of that road from api.openstreetmap.org.
The app (iPhone and CarPlay)
Location: while navigating, the app uses your position (GPS) for the directions, also with the screen off, with the app in the background and in CarPlay. Your position stays on your phone; only when the route is calculated or recalculated is it sent to our route server as the starting point (see above). Outside navigation the app only uses your position when you press My location. You give and withdraw permission in the settings of your phone.
Microphone: only when you tap the microphone next to the search field and your phone gives permission, the app listens until you have finished speaking. The speech recognition of your phone turns what you say into text; depending on your phone this happens on the phone itself or at Apple or Google. The text goes into the search field and is searched like typed text. The app does not store any audio and does not send any audio to our server.
Your settings, vehicles, favourites, search history and any photo of your own for your position on the map are only stored on your phone.
The app fetches the map, traffic, motorway lane signs, warning vehicles and the search files from our own server (see Log files). If you search for a company or place by name, the app requests the files for the first letters you type and, abroad, those for the area around your position or the centre of the map.
Error reports: if something goes wrong in the app while you are logged in, it sends an error report to our server: the app version, the type of phone and the iOS version, what went wrong and where in the app, with your account only as an irreversible code and without location, name or e-mail address. We keep error reports for at most 60 days. Legal basis: our legitimate interest in an app that works.
Log files
Like every web server, our server records the IP address, the time and the requested file per request, also for the map and the search files of the app. We only use those log files for security and incidents, and they are deleted after two weeks.
Your rights
Having your account deleted: see delete account.
You have the right to access, correct, delete and restrict your data, and you can object. E-mail us for that. If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).