Privacy Notice

The personal data controller is Tomorrow Technology s.r.o., registered office at Miru 26, Kanada, 739 61 Trinec, Czech Republic, company ID 03750183, registered in the Commercial Register maintained by the Regional Court in Ostrava, file no. C 61243. The contact for privacy questions and data subject requests is info@tachocheck.cz.

For data about drivers and other persons contained in customer-uploaded DDD files, the customer usually acts as controller and TachoCheck as processor.

We process customer and user identification and contact data, especially first name, last name, email, phone, company name, company ID, address, account data and technical usage data.

Uploaded DDD files may contain data about drivers, driver cards, vehicles, activities, rest periods, events, faults, controls and download times.

We process data for account registration and management, service provision, uploaded-file processing, report display, support, security, invoicing, internal notifications and compliance with legal obligations.

Legal bases include performance of a contract, legitimate interests in secure service operation, protection of rights and product development, and compliance with legal obligations. Consent may apply to marketing or analytics tools where required by law.

We use Supabase for database, authentication and storage, Vercel for hosting, Brevo for transactional emails, Telegram for internal administrative notifications, Google Analytics for web analytics and tawk.to for customer communication.

DDD data is not sent to OpenAI or other AI services. If this changes, this document will be updated before such processing starts.

The application may use necessary cookies for login, security and core service functionality.

We plan to use Google Analytics and tawk.to on the website. Where required by law, users will be provided with appropriate information or consent controls.

We retain data for the duration of the active account. After termination, active data will be deleted within 30 days unless further retention is necessary for legal obligations, protection of rights or claims handling.

Technical backups may contain data for up to 90 days. Accounting and invoicing documents are retained for the period required by law.

Some suppliers may process data outside the EU/EEA. In such cases, we use appropriate GDPR safeguards, especially standard contractual clauses or other available legal mechanisms.

When selecting suppliers, we consider security, reliability and proportionality of processing.

Data subjects have the right to be informed, access, rectification, erasure, restriction, portability, objection and, where processing is based on consent, withdrawal of consent.

Requests can be sent to info@tachocheck.cz. Data subjects may also lodge a complaint with a supervisory authority.

We apply technical and organisational measures to protect data against unauthorised access, loss, alteration or misuse.

Access to data is restricted by organisation, user role and operational need.