Effective from: 2026. 09. 29. · Last updated: 2026. 09. 29.
Privacy Policy
1. Data Controller and Data Processor
Data Controller: Your organization (the business using SimpliFleet)
Data Processor: DVP Systems Kft. (SimpliFleet operator), registered address: 1141 Budapest, Szugló utca 125G A.lph 3/1, privacy contact: adatvedelem@simpliti.me
2. Personal Data Processed
| Category | Data processed | Data subjects |
|---|---|---|
| User account | Email, password (hashed), IP (hashed), user agent, 2FA secrets | Drivers, system users |
| Driver profile | Name, phone, date of birth, driving licence, document IDs (ID card, SSN, address card), profile photo | Drivers |
| Working time & payroll | Time entries, pay grade, calculated wages, approval log | Drivers, employees |
| Vehicle data | Plate, type, insurance, technical details | No personal data, but linkable to driver |
| Project & route | Participants, pickup/dropoff address, waybills, performance certificates | Drivers, partners |
| Partner data | Contact name, email, phone | Partner representatives |
| Documents | Performance certificates, order forms, uploaded files, document copies | Drivers, partners |
| Mobile device | Device name, platform, app version, push notification token | Drivers (mobile app users) |
| Location (mobile app) | A single position (coordinates, accuracy, altitude, speed, heading, the address resolved from it, time) when a departure or an arrival is recorded | Drivers (mobile app users) |
| Email log | Recipient email address of notifications, delivery status | Drivers, system users |
Location: the mobile app asks for a position only when the driver records a departure or an arrival, only while the app is in use and with the phone's location permission. The position is attached to the time entry and used to check that it was recorded within 500 metres of the planned address; it is kept as long as the time entry. There is no continuous background tracking. Face ID / fingerprint unlock happens on the device; no biometric data reaches us.
3. Legal Basis
- Contract performance — employment, transport agreements
- Legal obligation — payroll, accounting retention (8 years)
- Legitimate interest — system security, fraud prevention, audit trail
4. Retention Periods
| Data category | During active subscription | After termination | Legal basis |
|---|---|---|---|
| Personal data (drivers, users) | Controller's responsibility | 1 year, then permanent deletion | Contract |
| Payroll, working time | 8 years (controller's obligation; processor stores on behalf) | 1 year + deletion | Accounting Act (controller's obligation) |
| Audit log | 2 years active, then archive | 1 year + deletion | Legitimate interest |
| Cookie preferences | 1 year | Deleted on termination | Consent |
| Deleted user data | 30 days (recovery window) | — | Contract |
Important: Payroll and working time data must be retained for 8 years by the Data Controller (Your organization) under applicable law. The Data Processor (SimpliFleet) permanently deletes all data within 1 year of subscription termination — long-term retention is the Controller's responsibility and requires exporting data to their own systems.
5. Sub-processors
The following sub-processors are used (30 days prior notice of changes):
5.1 Infrastructure and Hosting
| Provider | Activity | Location |
|---|---|---|
| Hosting provider | Server infrastructure | EU |
| Backup provider | Data backup and disaster recovery | EU |
5.2 Communication
| Provider | Activity | Location |
|---|---|---|
| Email delivery provider | Transactional notifications | EU |
6. Data Subject Rights
Exercisable via profile settings under "GDPR & Privacy" or by contacting adatvedelem@simpliti.me:
- Right of access — view data stored about you
- Right of rectification — correct inaccurate data
- Right of erasure — delete data (subject to legal retention obligations)
- Data portability — export data in JSON/CSV format
Response time: 30 days.
7. Cookies
The system uses only strictly necessary cookies. See the Cookie Policy.