1. Purpose and scope
TransPool24 provides transport and logistics services focused on Pforzheim and the region. We only process personal data where necessary to operate the website, conclude and perform contracts, comply with legal obligations, or based on your consent.
This notice covers our public website, the booking / order process, communication by email or contact form, and driver applications.
We do not use solely automated decision-making including profiling within the meaning of Art. 22 GDPR.
2. Controller
The controller under GDPR is TransPool24 (see imprint / website for contact). For privacy requests use the email above or our contact form.
Where we use processors (e.g. hosting, payment, email), this is done under Art. 28 GDPR agreements.
3. What data we process?
The table lists typical categories. Depending on your use, some items may not apply.
| Data categories | Purpose | Legal basis |
|---|---|---|
| Booking master data: name, company, addresses, phone, email, order details | Performing the transport, processing the booking, communication | Art. 6(1)(b) GDPR (contract); where applicable (a) (consent) |
| Payment data (via Stripe): payment status, limited card metadata — no full card numbers stored by us | Payment processing | Art. 6(1)(b) GDPR; Art. 6(1)(c) for tax/legal retention |
| Driver application data: identity, contact, licence, vehicle, ID documents if provided | Reviewing applications, pre-contract steps | Art. 6(1)(b) GDPR; § 26 BDSG where applicable |
| Technical data: IP address, date/time, browser type, server logs where needed | Secure operation of the site, limited troubleshooting | Art. 6(1)(f) GDPR (legitimate interest in secure operation) |
If drivers share live location, we process location data only as described in the relevant feature and on the stated legal basis.
4. Legal bases
Contract performance (Art. 6(1)(b)): booking and providing the transport service.
Legitimate interests (Art. 6(1)(f)): IT security, fraud prevention, anonymised statistics where your interests do not override.
Consent (Art. 6(1)(a)): only where we ask explicitly — you may withdraw consent for the future.
5. Retention, sharing and transfers
We keep data only as long as needed for the purposes above or as required by law (e.g. commercial/tax retention).
We share data with third parties only if needed for the contract (e.g. payment provider, hosting), we are legally required, or you have consented.
If data is transferred outside the EEA, we rely where required on adequacy decisions or appropriate safeguards under Art. 44 ff. GDPR.
6. Your rights
Subject to legal requirements, you have in particular:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR) and restriction (Art. 18 GDPR)
- Data portability (Art. 20 GDPR) where applicable
- Objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
- Withdraw consent for the future (Art. 7(3) GDPR)
You may lodge a complaint with a supervisory authority (Art. 77 GDPR).
7. Changes
We update this notice when processing or legal requirements change. The current version is on this page with the “Last updated” date.
Please review it when you use new features.
Redes sociales
When you visit our social media profiles, platform operators may process personal data (e.g. IP address). Please refer to each provider’s privacy policy:
- Instagram — Meta
- TikTok — TikTok Privacy
- LinkedIn — LinkedIn
- Facebook — Meta
- YouTube — Google