Driver App Privacy Policy

Privacy Policy

This Privacy Policy is compliant with the General Data Protection Regulation (GDPR). By using the App, you acknowledge that you have read and understood this policy and agree to the collection and use of your data as outlined.

1. Data Controller

Haste is the data controller responsible for the processing of your personal data when you use the App. Our contact information is:

• Company Name: Haste AS
• Address: Njords veg 24A, 7035 Trondheim, Norway
• Email: martin.digernes@hastelogistics.no
• Phone: +47 95128081

2. Personal Data We Collect

We collect the following personal data through the App:

a. GPS Data

• Purpose: We collect GPS location data from the drivers on active routes to provide real-time monitoring and management of transportation operations.
• Type of Data: Your real-time and historical location, speed, and route information.
• Legal Basis: The legal basis for this processing is the performance of a contract under Article 6(1)(b) of the GDPR, as this data is necessary for managing transportation logistics and fleet efficiency.

b. Personal Identification Data

• Purpose: We collect data necessary to identify you as a driver in our system.
• Type of Data: Name, employee ID, email-address, phone number and login credentials.
• Legal Basis: The legal basis for this processing is the performance of a contract under Article 6(1)(b) of the GDPR.

3. How We Use Your Data

We use your data for the following purposes:

• Authenticating users.
• To monitor and optimize the logistics and routes of the company’s fleet.
• To ensure the safety and security of the transportation process.
• To analyze and improve operational efficiency.
• Offering customer support.
• Providing and improving the app’s services.
• To comply with any legal obligations as required by law.

4. Data Retention

We will only retain your personal data for as long as is necessary to fulfill the purposes for which we collected it, including any legal or reporting requirements.

• GPS Data: Stored for 1 day and automatically deleted thereafter unless required for legal purposes.
• Personal Identification Data: Stored for the duration of your employment with your employer and for a reasonable period thereafter, in accordance with applicable laws.

5. Data Sharing and Disclosure

Your data will never be sold to third parties and is only shared with corporate partners necessary to deliver our services:

• Service Providers: We may share data with third-party service providers that assist us with processing data, such as cloud hosting services, but only to the extent necessary for the service.
• Legal Obligations: We may disclose your data if required to do so by law or in response to a lawful request by authorities.

All third-party service providers are required to comply with data protection regulations and are bound by contractual agreements to keep your data secure and confidential.

6. International Transfers

Your data isstored on servers within the European Economic Area (EEA) and we will not transfer data to countries outside this region.

7. Your Rights Under GDPR

As a data subject, you have the following rights under the GDPR:

• Right to Access: You have the right to request access to your personal data and obtain a copy of it.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete data.
• Right to Erasure: You can request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your data in certain circumstances.
• Right to Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You can object to the processing of your personal data based on legitimate interests.
• Right to Withdraw Consent: If processing is based on your consent, you have the right to withdraw your consent at any time.

To exercise your rights, please contact us at the email provided on page 1 of this document. We will respond to your request within one month as required by GDPR.

8. Security

We take the security of your data seriously and implement appropriate technical and organizational measures to prevent unauthorized access, alteration, or destruction of your personal data. This includes encryption, access control measures, and regular audits of our systems.

9. Automated Decision-Making and Profiling

We do not use any automated decision-making or profiling mechanisms that would significantly affect you.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted within the App, and you will be notified of any significant changes that affect how your data is processed.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact:

• Email: martin.digernes@hastelogistics.no
• Phone: +47 95128081

You also have the right to lodge a complaint with the relevant Data Protection Authority in your jurisdiction if you believe that your data has been processed unlawfully.