Privacy policy
OneClickPallet · Effective from 2026-10-13
1. Controller and contact
Hogar s. r. o., Jánošíkova 2350/10, 040 01 Košice – mestská časť Juh, Slovakia, company ID 51043271, operates OneClickPallet and is controller of platform data. For all privacy requests: support@oneclickpallet.eu. Carriers, shippers and insurers may separately control data used for their own contracts.
2. Data and purposes
We store account/contact and business details, hashed passwords, requests, routes, cargo, price negotiations, payments, referrals, support messages, CMR, and documents or GPS points you submit using enabled features. Technical security data may include IP address and access logs. Company contacts may come from public registers or a partner; we provide the source and required information when contacting the person. Do not upload unnecessary personal or sensitive data.
3. Legal bases and required data
Account and requested services use contract/pre-contract steps (GDPR Art. 6(1)(b)); employee contacts, security, fraud prevention and defence of claims use legitimate interests (6(1)(f)); statutory accounting/reporting uses legal obligation (6(1)(c)). Optional marketing and non-essential tracking require separate consent (6(1)(a)) where required. Mandatory fields are needed to provide the requested service; without them we cannot process it. Accepting terms is not consent to advertising.
4. Location and matching
Location is used only when you start a GPS feature and permit device access, for the trip/logbook you request. Stop recording to stop further collection. Stored points remain in the trip record until deletion/retention handling. Never track another driver without an appropriate legal basis and notice. Matching suggests suitable opportunities; it does not automatically conclude contracts or make decisions with legal or similarly significant effects.
5. Recipients and transfers
Data necessary for a transaction can be shared with its shipper/carrier, an assigned authorised partner and our hosting, email, payment and professional service providers. Hosting/database/storage use Cloudflare; verification emails use Resend when enabled. Map searches and tiles contact external map services, including OpenStreetMap/Nominatim and the route service, which receive IP/query data. Insurance details go to an identified licensed provider only after the relevant information and authorisation. Where processing occurs outside the EEA, GDPR transfer safeguards must apply, such as an adequacy decision or standard contractual clauses; details are available on request. We do not sell personal data.
6. Retention and security
Account data remain while the account is used; afterwards only for necessary legal retention or claims. Transaction, CMR and accounting records follow applicable statutory periods; Slovak accounting documents generally require 10 years. GPS/upload retention depends on your requested record and deletion request, except lawful retention. Marketing stops on withdrawal/objection; a minimal suppression record may remain. Security logs and authentication records are kept only as needed for security and expiry handling. Access is restricted; passwords are hashed. Ask us for a category-specific retention explanation or deletion.
7. Your rights
You may request access, correction, erasure, restriction, portability where applicable, and object to legitimate-interest processing; you may always object to direct marketing. Withdraw consent at any time without affecting earlier lawful processing. Email support@oneclickpallet.eu; we normally respond within one month, with lawful extensions explained. Erasure is subject to legal retention. You may complain to the Slovak Office for Personal Data Protection (dataprotection.gov.sk) or your competent local authority. No consent is needed merely to read this notice.