Privacy statement

1. Who we are

Loaddeck is a service of Mackenzie Rotterdam, a sole proprietorship (KvK 50934848) based in the Netherlands. We are responsible for the processing of personal data described below, unless we say below that you are.

Privacy questions? Email hello@mackenzierotterdam.nl.

2. What data we process

• Account: name, email address, role (admin, planner, driver, salesperson or viewer) and an encrypted password or sign-in link.
• Company: company name, KvK number and address of the organisation using Loaddeck.
• Transports and handovers: licence plate and vehicle details (looked up in the Dutch RDW open data), photos, damage notes, signature, times and the trips they belong to.
• Payments: name, email address, payment status and plan. Card or bank details go straight to Mollie and never reach us.
• Website visits: only with your consent do we measure with Google Analytics how the site is used (pages, device, approximate location, a random visitor ID).
• Contact: what you send us when you email or ask a question.

3. Why we do this and on what basis

• Providing the service, running the subscription and helping you: performance of the contract.
• Securing the service, preventing abuse and improving the service: legitimate interest.
• Measuring with Google Analytics: your consent. You can withdraw it at any time via "Cookie settings" at the bottom of the site.
• Keeping invoices and records: legal obligation.

4. Your data in the app: we act as processor

The data you and your team enter in Loaddeck (transports, handovers, photos, drivers) is yours. You decide what it is used for; we only process it to provide the service. For that data you are the controller and we are the processor. We send a data processing agreement on request.

You make sure your drivers and customers know their data is in Loaddeck and that you have a legal basis for it.

5. Who we share data with

We do not sell data. We use these providers to make the service work:

• Supabase: database, sign-in and photo storage. Servers in Frankfurt (EU).
• Vercel: hosting of the website and the app.
• Mollie: payments and subscriptions (Netherlands).
• Google: email (Workspace) and, only with consent, Tag Manager and Analytics.

Where providers process data outside the EU, this happens on the basis of a valid transfer mechanism, such as the EU-US Data Privacy Framework or standard contractual clauses.

6. Cookies and local storage

Without consent we only store what is needed: your language choice, your cookie choice, your sign-in session and, in the app, handovers still on your device before they are uploaded.

With your consent, Google Tag Manager loads and Google Analytics measures visits to the homepage. We do not measure in the app.

7. How long we keep data

• Account data and data in the app: as long as your account exists. After cancellation we delete it within 90 days.
• Invoices and payment records: 7 years, as tax law requires.
• Analytics: according to the retention period in Google Analytics, at most 14 months.

8. Security

Traffic is encrypted (https). Data of different organisations is separated in the database by access rules per company. Drivers sign in with a personal link. No system is completely secure; if there is a data breach we report it where required to the Dutch Data Protection Authority and to you.

9. Your rights

You have the right to access, correct, delete, restrict and port your data, and you can object to processing and withdraw your consent. Email us; we reply within a month. For data in an organisation's app you can also contact that organisation.

If we cannot resolve it, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or to the authority where you live.

10. Changes

We update this statement when the service changes. The date at the top shows when that last happened.