Privacy Notice

The data controller is Transport Solutions s.r.o., registered in the Czech Republic. Postal and contact details are listed on the Imprint page.

We process: (a) dealer application data (name, work email, company, country, optional phone) to evaluate applications; (b) contact-form submissions (name, email, optional phone, message) to answer enquiries; (c) dealer account data (name, email, hashed password, role, country, VAT ID, phone) to operate the portal; (d) order and payment metadata (line items, totals, Stripe payment / refund IDs, order status history) to fulfil orders and meet accounting obligations. We do not store payment card data — card details are submitted directly to Stripe by your browser.

Processing is based on (i) performance of the dealer contract (Art. 6(1)(b) GDPR) for portal use, ordering and fulfilment; (ii) our legitimate interest (Art. 6(1)(f) GDPR) in responding to applications and contact-form enquiries; and (iii) legal obligation (Art. 6(1)(c) GDPR) for tax and accounting retention.

We rely on Vercel (hosting), Neon (managed Postgres, EU region), Stripe (payment processing), and Resend (transactional email). Each is engaged under written terms compliant with Art. 28 GDPR and processes data within the EU/EEA or under equivalent safeguards.

Some of our processors are established in, or transfer personal data to, countries outside the European Economic Area (EEA), including the United States (for example Vercel, Stripe and Resend). Where this happens we ensure an adequate level of protection in accordance with Chapter V GDPR: transfers to the United States are made to recipients certified under the EU–U.S. Data Privacy Framework (Art. 45 GDPR) and/or are governed by the European Commission's Standard Contractual Clauses (Art. 46 GDPR), with additional safeguards where necessary. A copy of the relevant safeguards is available on request via the contact details on the Imprint page.

Contact-form and application submissions are retained for up to 24 months. Order, invoice and accounting records are retained for the statutory periods required by Czech law (typically 10 years). Dealer accounts are retained for as long as the account is active and for a reasonable period thereafter for audit purposes.

You have the right to access, rectify, erase, restrict or port your personal data and to object to processing based on legitimate interest (Art. 21 GDPR). Requests are handled within one month. You also have the right to lodge a complaint with a supervisory authority — our lead authority is the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz — or with the supervisory authority of the EU/EEA country in which you live or work.

We do not use your personal data for automated decision-making that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR, and we do not carry out profiling. Decisions on dealer applications and orders are made by our staff.

We implement appropriate technical and organisational measures to protect personal data, as required by Article 32 GDPR — including encryption in transit (TLS), encryption at rest, hashing of account passwords, role-based access controls, and processing only through reputable providers bound by data-processing agreements. Payment card details are transmitted directly to our payment processor and are never stored on our systems.

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of it (Art. 33 GDPR). Where the breach is likely to result in a high risk to you, we will also inform you without undue delay (Art. 34 GDPR).

We use only strictly necessary cookies — a Better-Auth session cookie for authenticated portal access and a small acknowledgement cookie to remember that you have dismissed the cookie notice. No analytics, advertising or third-party tracking cookies are set on this site. Full details are set out in our Cookie Policy.

Our portal and services are intended exclusively for businesses and their authorised representatives. They are not directed at children, and we do not knowingly collect personal data relating to children.

We may update this notice from time to time to reflect changes in our processing or legal requirements. The current version is always available on this page and is marked with the date it was last updated; where changes are material we will take appropriate steps to bring them to your attention.

Requests regarding your personal data can be sent to the email address listed on the Imprint page.