Tachotec Driver privacy policy

Version 1.7 · Date: 20/10/2026

In case of discrepancy between versions, the Spanish version shall prevail.

1. Data controller

Tachotec Control, SL · Tax ID (NIF) B21776331 · Registered address: Calle Serreta Sant Nicolau, 1, planta 4, puerta izquierda, 03410 Biar (Alicante), España · Registered in the Mercantile Register of Alicante, sheet A-197617, 1st entry, electronic folio, IRUS 1000449114569 · Website: tachotec.es · Data protection contact: app@tachotec.es.

The app is offered in the countries of the European Economic Area, Andorra, the United Kingdom, Switzerland, Monaco and San Marino (additional information for the United Kingdom and Switzerland in section 7). It is intended for professional drivers and workers aged 18 or over; we do not knowingly collect data from minors and, if we detect an account belonging to a minor, we will delete it.

2. What data we process, for what purpose and on what legal basis

Data	Purpose	Legal basis (GDPR art. 6)
Account and profile: first name, surname, email, company (if entered by Tachotec), activity profile (urban bus, coach, lorry, vehicle of 2.5 to 3.5 t, other or worker without vehicle) and, if you declare it, the exemption from Regulation 561/2006 and its reason, encrypted password (hash) and, where applicable, internal account management notes entered by Tachotec administration staff	To give access to the app and the service, and to identify the driver in the shift PDF reports generated on their phone	Performance of the contract/service (6.1.b)
Sign-up from the app: first name, surname, email, encrypted password (hash) and email confirmation (single-use link, confirmation date)	To create the account and check that the email belongs to you	Performance of the contract/pre-contractual measures (6.1.b)
Membership number of an associated organisation, such as the Comité Nacional de Conductores Asalariados (Conacoasa) (only if you are a member; entered by Tachotec administration staff and not shown to the user in the app)	To identify members in order to apply to them the conditions agreed with their organisation, such as granting the premium plan, and to locate their account in the administration	Performance of the contract (6.1.b) and legitimate interest (6.1.f)
Driver card and tachograph data (driver identification, card number and expiry date, activities, vehicles, places, kilometres)	To download, save on the phone (app folder and, if the app can, Downloads/Tacografo), analyse on the phone itself and send the files. Only with the premium plan and if you turn on the option “Save a copy in the Tachotec database”, a copy of the file is saved on tachotec.es together with the card name, number and expiry date and a daily summary (minutes of driving, other work, availability and rest, and kilometres), so that you can retrieve it from the app and analyse it or download it to the phone. Without that option, the files are not saved on tachotec.es; to help comply with Regulation (EC) 561/2006 and Regulation (EU) 165/2014	Performance of the contract (6.1.b)
Destination email for sendings (only if you enter it in Settings) and message data (driver's name, card number, file name and, if a copy is saved, the company)	To send each downloaded file to that email. The sending is always carried out by the Tachotec mail server (IONOS, EU); the app does not use the user's own mail servers or the phone's email app. The file is not kept on the server after sending, unless you have the Premium copy turned on. If you do not enter any email, nothing is sent	Performance of the contract (6.1.b)
Technical data: last connection, app version, phone model and Android version; sessions started (encrypted identifier, expiry date and technical identification of the app or browser)	Security, support and update notices	Legitimate interest (6.1.f)
Security logs: IP address, date and time, technical identification of the app or browser and resource requested in denied attempts to access other users' data; control of the number of login attempts and sendings per IP address (stored in pseudonymised form)	To protect accounts and files, and to detect and respond to improper access	Legitimate interest (6.1.f) and security obligation (art. 32 GDPR)
Usage log (launches, successful or failed downloads, card type, reader model, sendings, files opened, analyses viewed, start, breaks and end of shifts —with the kilometres and number of points of the shift—, errors and usage time: minutes with the app on screen and actively in the background —shift recording location or syncing—, number and duration of sessions)	To improve the app and detect faults	Consent (6.1.a), optional and revocable
Shift times: start, end and the “Rest / Break” and “Availability” segments you mark, with their start and end times	To calculate effective working time and show it in the app and in the shift and “Working time record” PDFs (which are generated only on the phone and are not sent to Tachotec); for workers without a vehicle, to support the working time record (art. 34.9 ET, Spanish Workers' Statute) Shifts and their periods (type, start and end time) are stored on the phone; if you have given location consent, they are also sent to the Tachotec server together with the shift points (when the shift ends and every 4 hours) and kept there as set out in section 3. Without that consent, they stay only on the phone.	Performance of the contract/service (6.1.b)
Location during shifts (only if you give your consent): latitude, longitude, accuracy and time of each point	To record the position at the start of the shift, every 3 hours while it is open (or every 1 or 2 hours if you choose so in Settings; also during breaks and availability), at the end and when you save it yourself with “Save location”, with the corresponding town, province and country; never outside the shift or continuously; for workers without a vehicle, to support the working time record (art. 34.9 ET) Location is only taken during an open shift that you start, through a foreground service with a notification visible throughout the shift; the Google Play version does not use background location (“Allow all the time”). Speed is not recorded. Exception: the trip start and end points (allowances, Premium plan) described below. Trips (allowances, Premium plan): with the same permission and consent, when you tap “Start trip” and “End trip” the app takes, while it is open, one point at the start and another at the end of each trip (whether or not a shift is open), only to determine the country for the allowances. These points are stored only on the phone (and in your local backup, if you make one) and are not sent to Tachotec.	See the document “Geolocation information”: express consent (6.1.a)
Account plan (free/premium), expiry and origin (subscription or grant by Tachotec), plan notices shown in the app and preference for a copy on tachotec.es	Managing the features you have subscribed to. The Premium plan includes all labour and economic features, calculated on the phone (labour analysis with the working-day table, the breakdown and labour infringements; hourly rates, supplements, allowances, trips, public holidays and economic estimates), the map in the shift PDF and the optional copy on tachotec.es. Regulation 561/2006 infringements are available in all plans.	Performance of the contract (6.1.b)
Purchases in the Google Play version: product, status and dates of the subscription and purchase token (stored as a hash). We do not receive your payment method details	Verify the purchase with Google Play and activate or withdraw the premium plan on your account	Performance of the contract (6.1.b)
Free trial: pseudonymised device identifier (HMAC-SHA256 hash of the app’s Android identifier, ANDROID_ID, calculated on our server with a secret key; we do not store the original identifier or the IMEI), account, platform (web or Google Play) and date of the trial	Preventing fraud: stopping the same account or the same device from using the 7-day free trial more than once. It is not used for advertising or to track you	Legitimate interest in preventing fraud (6.1.f); you may object, but then we will not be able to offer you the trial
Web version only: Subscription and payments: Stripe customer and subscription identifiers, option, status, amounts with and without VAT, dates of sign-up, renewal, cancellation and payments (successful or failed) and the name or company name and tax ID (NIF/CIF) you enter on the payment page. The billing address is collected and kept by Stripe to issue the invoice; card data are processed only by Stripe and Tachotec does not receive them.	To charge the subscription, renew it, manage cancellations and refunds, issue invoices and comply with accounting and tax obligations	Performance of the contract (6.1.b) and legal obligation (6.1.c)
“Legal services” forms: first name and surname, contact phone, email and the message you write, and the organisation you choose (Comité Nacional de Conductores Asalariados – Conacoasa, Tachotec Control, SL or F&L Jurídicos, SL)	To send your request, from the Tachotec mail server, to the chosen organisation so that it can contact you. That organisation processes the data as an independent controller, in accordance with its own privacy policy. Tachotec does not keep the content of the message after sending; only a control of the number of sendings per account and per IP address (pseudonymised) to prevent abuse	Consent (6.1.a), when you voluntarily send the form, and pre-contractual measures at the request of the data subject (6.1.b)
“Send suggestions”: the message you write and, taken from your account, first name, surname, email, user identifier and plan, together with the app version, phone model and Android version	To receive your suggestions about the app at app@tachotec.es and be able to reply to you. The message is not kept on the server after sending; only a control of the number of sendings per account and per IP address (pseudonymised) to prevent abuse	Legitimate interest in improving the service (6.1.f), on your initiative
Download incidents (when a card download is cancelled or the card certificate cannot be verified): incident code (type, reason, date and time and a short 6-character fingerprint that distinguishes the card without revealing its number or the driver’s name), outcome, card generation, reader model, technical description of the failure, app version, phone model and Android version, linked to your account. If you tap “Send by email for verification”, also your first name, surname, email and user identifier and the comment you write	To detect and fix card download and verification failures, and to reply to you if you send us the incident. The app sends incidents automatically to the Tachotec server (without a connection, as soon as there is one); they are not part of the usage log and do not depend on the analytics consent. The comment only goes in the email to app@tachotec.es and is not kept on the server. If you are not logged in or there is no connection, the message is prepared in your phone’s email app and you send it yourself from your email account	Legitimate interest in the proper functioning and security of the service (6.1.f); sending by email, on your initiative
Consent log (document, version, date, IP)	To demonstrate that information was given and consent obtained	Legal obligation (6.1.c, art. 7.1 GDPR)

Third-party services used by the app

Reverse geocoding: to obtain the town of each point of a shift, the phone sends the coordinates to the geocoding service of the Android system itself (usually Google, depending on the manufacturer). Only the coordinates are sent, without name or email.
Web version only: Payments (premium plan): payments are processed by Stripe Payments Europe, Ltd. (Ireland). Stripe receives your email, the payment data and the billing data (name or company name, address and, if you enter it, tax ID (NIF/CIF)) that you enter on its payment page, and acts as an independent controller for fraud prevention and its legal obligations. Stripe may transfer data to Stripe, Inc. (USA) with the safeguards of the EU-U.S. Data Privacy Framework and standard contractual clauses. More information at stripe.com/es/privacy.
Google Play Billing: In the Google Play version, payments are handled by Google (Google Ireland Limited) through Google Play Billing, under its own privacy policy.
PDF maps: when generating the shifts PDF with a connection and if you choose to include the map (a Premium plan feature), the phone downloads the map images from the OpenStreetMap tile server (OpenStreetMap Foundation, United Kingdom, a country with an adequacy decision of the European Commission). That service receives the IP address, the app identification and the requested map area, not your account data. The PDF is composed on the phone and is not sent to Tachotec.

The time zone, chart colours and other Settings preferences are stored only on the phone (except the destination email and the copy preference, which are used on the server for sending and copying). The files are analysed (times, infringements and labour analysis) on the phone itself.

Local backup (app 0.34 and later): in Settings → Backup you can export to a file (.tdbackup) the data the app keeps on your phone (shifts with their locations and breaks, trips, allowances, prices, public holidays, labour rules, preferences, language, downloaded files and pending uploads) and import it later, for example when changing phones. You start the backup and it is saved wherever you choose; it is not sent to Tachotec and Tachotec has no access to it. It does not include your session, password, keys or Premium status. You can protect it with a password (optional): the file is encrypted on the phone with AES-256 and can only be opened with that password, which Tachotec does not know and cannot recover. Without a password the file is not encrypted and contains locations and work data: keep it in a safe place. If you store it with a third-party service (for example, Google Drive), that service handles it under its own terms.

We do not take automated decisions with legal effects or create profiles for commercial purposes. The app's warnings on driving times are for guidance only and have no legal validity. Their final assessment always requires an expert examination by Tachotec of the data generated by the tachograph.

3. Retention

Copies of tachograph files and their summaries on tachotec.es: while the account is active, until the deletion of the account is processed, at which point they are deleted. The obligation to keep the files for the legal period (at least one year under Regulation (EU) 165/2014 and national transport legislation) does not lie with Tachotec: keep your own copies. On tachotec.es only the files of Premium accounts with the copy turned on are kept; turning it off or ceasing to be Premium does not delete copies already saved, which you can ask to have deleted by writing to app@tachotec.es. You keep and delete the files saved on the phone yourself.
Usage log, shifts (with their breaks and availability segments) and location points: maximum 24 months from when they are recorded; after that they are deleted automatically.
“Legal services” and “Send suggestions” forms: Tachotec does not keep the message on the server after sending it (suggestions are received at the app@tachotec.es mailbox and kept for as long as necessary to handle them); the sending control is deleted after 24 hours. The recipient organisation keeps it according to its own policy.
Download incidents: maximum 24 months from when they are recorded; when the account is deleted they are unlinked from it and only the technical data remain, without a user. Emails sent for verification are kept at app@tachotec.es for as long as necessary to handle them.
Sessions: until they expire, you log out or the account is deleted. Security logs: maximum 12 months (deleted automatically), unless they are needed to investigate a specific incident or to defend against claims.
Web version only: Subscription, payment and invoice data of the web version (Stripe): six years (art. 30 of the Spanish Commercial Code) and the periods required by tax law.
Google Play subscription data (product, status, dates and token stored as a hash): for as long as the subscription lasts and then, blocked, for the limitation periods of possible claims.
Email confirmation and payment links: expire after 48 hours and 15 minutes, respectively.
Account and consents: while the account is active and, after closure, blocked for the limitation periods of possible liabilities.
Account deletion: you request it from Settings → Danger zone (or by writing to app@tachotec.es). Before you confirm, the app warns you that the copies saved on tachotec.es will also be deleted so that you can download them first. The deletion you request from the app is scheduled for 7 days later: during that period nothing is deleted, the app shows you the scheduled date and you can cancel it yourself from Settings → Danger zone; if you cancel it, nothing is deleted. Once the 7 days have passed without cancellation, it runs automatically, without intervention by Tachotec staff, and cannot be undone. If you request it by email, it is processed by Tachotec administration staff within a maximum of one month. When the deletion runs, the sessions, usage log, shifts with their breaks, location points and the copies saved on tachotec.es (the files, their summaries and the associated card data that do not correspond to downloads from other accounts) are deleted, and the account is anonymised (first name, surname, email, company, membership number, phone data and analytics and location consents). Only the data that must be kept by law or as evidence are retained, linked to the anonymised account: payment and invoice data and the consent log. You can also request it on the web, without the app: https://tachotec.es/tachotec-driver/eliminar-cuenta/. If you have a web subscription (Stripe), we cancel it when the deletion is carried out so that it is not renewed or charged again. If you have a Google Play subscription, deleting the account does not cancel it: cancel it yourself in Google Play (Payments & subscriptions).
Free trial data (pseudonymised device identifier, account, platform and date): 24 months from the trial, even if you delete your account, only to prevent it from being repeated; it is then deleted automatically.

4. Recipients and processors

We do not sell or transfer your data for commercial purposes. Processor under contract (art. 28 GDPR): IONOS SE (hosting of the server and database, mail server from which files and notices are sent, and the app@tachotec.es mailbox; servers in the EU). In the web version, payments are processed by Stripe (see “Third-party services”). In the Google Play version, distribution and subscription billing are handled by Google (Google Ireland Limited) through Google Play Billing, as an independent controller under its own privacy policy. The map images in the PDF come from OpenStreetMap. Files are sent from the Tachotec server to the email address you provide. If you use a “Legal services” form, the data you enter is sent to the entity you choose: Comité Nacional de Conductores Asalariados (Conacoasa, info@conacoasa.es), Tachotec Control, SL (info@tachotec.es) or F&L Jurídicos, SL (info@fyljuridicos.es), which processes it as an independent controller. Authorised Tachotec staff with administration duties, bound by confidentiality, manage accounts, support and security, but do not see or download the copies of tachograph files stored on tachotec.es or their summaries, nor your shifts or your location points: only each user sees them in their own account, and administration only has aggregated counts and totals. Attempts to access other users’ data are blocked and logged. The competent authorities may receive the data when required by law. International transfers: (Web version only: Stripe, Inc. (USA), under the EU-US Data Privacy Framework and standard contractual clauses) OpenStreetMap (United Kingdom, with an adequacy decision) and Google services under their own safeguards; there are no other transfers outside the European Economic Area.

5. Use of the app by companies

Tachotec does not currently offer the app to companies for them to provide it to their drivers: if you use the app, you do so on your own account and Tachotec is the controller of your data. If in the future a company were to provide the app to its workers, that company would be the controller, Tachotec would act as processor under a contract in accordance with Art. 28 GDPR, and the company would have to inform you (and, where applicable, the workers’ representatives) about the use of geolocation (Art. 90 of the Spanish LOPDGDD). We would update this policy before that happens.

6. Your rights

You have the right of access, rectification, erasure, objection, restriction of processing and portability, to withdraw your consent at any time (without affecting the lawfulness of prior processing) and not to be subject to automated decisions. You can exercise them in the app (Permissions → Privacy: analytics and location consents; Settings → Danger zone: account deletion, carried out after 7 days unless you cancel it, with a confirmation email), on the web at https://tachotec.es/tachotec-driver/eliminar-cuenta/ (deletion), by writing to app@tachotec.es or by post to Tachotec’s address, stating the right you are exercising. You do not need to send an identity document: only if we have reasonable doubts about your identity will we ask for the additional information needed to verify it (art. 12.6 GDPR). We will reply within one month, extendable by two further months in complex cases. If you are not satisfied, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the data protection authority of your country of residence.

7. Users in the United Kingdom and Switzerland

United Kingdom: the UK GDPR and the Data Protection Act 2018 also apply. Your data is processed in the EEA, which the United Kingdom recognises as providing an adequate level of protection. (Web version only: Transfers to Stripe, Inc. (USA) are covered by the UK extension of the Data Privacy Framework and by standard contractual clauses.) You can exercise your rights at app@tachotec.es and complain to the Information Commissioner's Office (ICO, ico.org.uk).

Switzerland: the Federal Act on Data Protection (nFADP) also applies. Switzerland recognises the EEA States as providing an adequate level of protection. (Web version only: Transfers to Stripe, Inc. (USA) are covered by the Swiss-US Data Privacy Framework and by standard contractual clauses.) You can exercise your rights at app@tachotec.es and complain to the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch).

Andorra, Monaco and San Marino: you can also complain to the data protection authority of your country.

8. Security

Encrypted connections (HTTPS), passwords stored as hashes, phone session stored encrypted, session-based access with expiry, each user can only access their own copies, security logs of denied access and attempt limits, and hosting on servers in the EU.

9. Changes

If this policy changes significantly, the app will ask you to accept it again, stating the new version.