Controller
The controller of the cargover.eu platform is the company stated in the operator's contact details. The operator will add the data protection contact before going live.
What data we process
User data (name, e-mail, phone), company data from public registers including names of statutory representatives, and report data (contacts, bank accounts and plates used in the incident). We do not process dates of birth or home addresses of representatives.
Legal basis
Performance of a contract (user accounts) and legitimate interest in preventing fraud in road transport (Art. 6(1)(f) GDPR). We balance the interests of data subjects for every publication.
Minimisation and publication
We publicly show only public register data and neutral summaries of incidents reviewed by an administrator. Contact identifiers from reports are shown only partially hidden.
Security
Sensitive data and evidence are encrypted (AES-256), passwords are stored as secure hashes, access to the administration is restricted and every administrator action is audited.
Retention
We keep data for as long as necessary for fraud prevention. Rejected reports and related evidence are deleted after the retention period.
Your rights
You have the right of access, rectification, erasure, restriction, objection and to lodge a complaint with a supervisory authority. Data export and account deletion are in My account; objections can be filed via the Objection form.
This text is a template and must be reviewed by the operator's lawyer before going live.