Privacy Notice

The data controller is Transport Solutions s.r.o., registered in the Czech Republic. Postal and contact details are listed on the Imprint page.

We process: (a) dealer application data (name, work email, company, country, optional phone) to evaluate applications, together with — only where you have consented to marketing cookies — the advertising campaign, search click or referring site your visit came from, so that we can tell which of our marketing reaches prospective dealers; (b) contact-form submissions (name, email, optional phone, message) to answer enquiries; (c) dealer account data (name, email, hashed password, role, country, VAT ID, phone) to operate the portal; (d) order and payment metadata (line items, totals, Stripe payment / refund IDs, order status history) to fulfil orders and meet accounting obligations. We do not store payment card data — card details are submitted directly to Stripe by your browser.

Processing is based on (i) performance of the dealer contract (Art. 6(1)(b) GDPR) for portal use, ordering and fulfilment; (ii) our legitimate interest (Art. 6(1)(f) GDPR) in responding to applications and contact-form enquiries; (iii) legal obligation (Art. 6(1)(c) GDPR) for tax and accounting retention; and (iv) your consent (Art. 6(1)(a) GDPR) for analytics and marketing cookies and the processing carried out through them, including the campaign attribution recorded alongside a dealer application, which you may withdraw at any time.

We rely on Vercel (hosting, and cookieless audience and performance measurement), Neon (managed Postgres, EU region), Stripe (payment processing), Resend (transactional email), and — subject to your cookie consent — Google (Tag Manager and Analytics) and Meta (advertising measurement). Each is engaged under written terms compliant with Art. 28 GDPR and processes data within the EU/EEA or under equivalent safeguards. In respect of the Meta Pixel we act as a joint controller with Meta Platforms Ireland Ltd. under Art. 26 GDPR for the collection and transmission of the data concerned.

Some of our processors are established in, or transfer personal data to, countries outside the European Economic Area (EEA), including the United States (for example Vercel, Stripe, Resend and, subject to your cookie consent, Google and Meta). Where this happens we ensure an adequate level of protection in accordance with Chapter V GDPR: transfers to the United States are made to recipients certified under the EU–U.S. Data Privacy Framework (Art. 45 GDPR) and/or are governed by the European Commission's Standard Contractual Clauses (Art. 46 GDPR), with additional safeguards where necessary. A copy of the relevant safeguards is available on request via the contact details on the Imprint page.

Contact-form and application submissions are retained for up to 24 months; campaign attribution forms part of the application record and is deleted together with it. Order, invoice and accounting records are retained for the statutory periods required by Czech law (typically 10 years). Dealer accounts are retained for as long as the account is active and for a reasonable period thereafter for audit purposes.

You have the right to access, rectify, erase, restrict or port your personal data and to object to processing based on legitimate interest (Art. 21 GDPR). Requests are handled within one month. You also have the right to lodge a complaint with a supervisory authority — our lead authority is the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz — or with the supervisory authority of the EU/EEA country in which you live or work.

We do not use your personal data for automated decision-making that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR, and we do not carry out profiling. Decisions on dealer applications and orders are made by our staff.

We implement appropriate technical and organisational measures to protect personal data, as required by Article 32 GDPR — including encryption in transit (TLS), encryption at rest, hashing of account passwords, role-based access controls, and processing only through reputable providers bound by data-processing agreements. Payment card details are transmitted directly to our payment processor and are never stored on our systems.

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of it (Art. 33 GDPR). Where the breach is likely to result in a high risk to you, we will also inform you without undue delay (Art. 34 GDPR).

Strictly necessary cookies — a Better-Auth session cookie for authenticated portal access, a cookie recording your cookie choices, and Stripe's fraud-prevention cookies at checkout — are set without consent because the site cannot function without them. Analytics cookies (Google Analytics) and marketing cookies (Google and Meta advertising tags) are set only after you have consented to the relevant category in the cookie banner, and you can withdraw that consent at any time via the “Cookie settings” link in the footer. Separately, our host Vercel provides aggregate audience and performance measurement that sets no cookies and stores nothing on your device; it therefore runs without consent, on the basis of our legitimate interest (Art. 6(1)(f) GDPR). Full details, including retention periods for each cookie, are set out in our Cookie Policy.

Our portal and services are intended exclusively for businesses and their authorised representatives. They are not directed at children, and we do not knowingly collect personal data relating to children.

We may update this notice from time to time to reflect changes in our processing or legal requirements. The current version is always available on this page and is marked with the date it was last updated; where changes are material we will take appropriate steps to bring them to your attention.

Requests regarding your personal data can be sent to the email address listed on the Imprint page.