This privacy policy relates to the processing of personal data via the websites www.collectgo.eu, portal.collectgo.eu, Collect + Go app and partner integrations. Your privacy is important to us. In this privacy policy we explain the information policy we use, which information we collect, how we use the data and how you can exercise your rights.

Processing and processing register:
Collect + Go processes data on behalf of its customers / data controllers, as defined in its processing agreements. This means that the following information is in the processing register:

General information
Collect&Go B.V. is located in Den Bosch at Parallelweg 30 (5223 AL) and is registered with the Chamber of Commerce under number 16089422. Collect + Go can be reached by telephone on the number +31 73 689 2727, by e-mail via info@collectgo.eu c/o privacy officer.

Collect + Go carries out various processing operations on the data that is shared by supply chain parties:
– Creating e-documents
– Updates regarding the handling of these e-documents by users

What is the purpose for processing data?
Information about the transport of the goods is collected in order to be able to meet the requirements set for the e-CMR protocol. Furthermore, information that you have provided to us can be used for marketing purposes by e-mail. Before we do this, we give you the opportunity to indicate whether we may use your information in this way. At any time you can let us know that you no longer wish to receive marketing material from Collect + Go. Each e-mail message that you receive from us will include an option to unsubscribe from further mailings.

What information is collected and processed?
The personal data that we collect and process concerns:

• Name and address of the company;
• Driver’s username;
• Waybill/consignment code;
• Expected time and place of receipt;
• Name and address of the addressee;
• Expected time of delivery;
• GPS location;
• Type of transport;
• Date of receipt;
• Delivery status;
• Signature (s) and any instructions from the sender.

Collect + Go also collects e-mail addresses from existing and prospective customers. 

What are the legal grounds for Collect + Go’s processing of personal data?
Collect + Go bases the processing of personal data on various legal grounds. We process a large part of the personal data because this is necessary for the implementation of the agreement. In addition, we process your personal data because this is necessary to comply with a legal obligation. For example, we need certain information to meet the requirements set for the e-CMR consignment note (Article 6, paragraph 1 of the CMR) and we have a tax retention obligation under which we are legally obliged to save our records for five (5) years. We may also collect data based on the legitimate interest of Collect + Go. The legitimate interest relates to our direct marketing. If the processing of your personal data does not fall under one of these grounds, we will ask you for additional permission to process your personal data for specific purposes.

Consequences of not providing personal data
In case Collect + Go does not have access to the information that is necessary to create and process an e-CMR, valid (e-CMR) documents cannot be drawn up. The functionality of the app will not be accessible to users then.

Duration of storage
From a legal point of view (e-CMR accreditation and tax retention obligation), Collect + Go is legally obliged to store records for five (5) years. This period is defined in Collect + Go’s accreditation (provided by NIWO) and based on Article 3 (e) from NIWO’s set of rules and regulations for e-CMR. Collect + Go will not store any information that does not fall under the aforementioned retention obligations longer than 6 months after the goods have been delivered.

Right to view, correct or delete personal data
If you wish to invoke the right to access, rectification, limitation, oblivion, data portability or the right to object, you can submit this request by sending an email to info@collectgo.eu. We request that you clearly state to which personal data your request relates and which right, as indicated above, you wish to use. For your safety, we may ask you to identify yourself in order to verify your identity. We will respond to your request as soon as possible, at least within four (4) weeks.

Use of cookies
We use cookies on our website. These are small text files that are stored on the computer, tablet or mobile phone that you use during your visit to the website. The cookies are used to remember your settings and preferences. In addition, we can use the cookies to gain insight into the surfing behavior of our website visitors and you can remain logged in through the use of cookies. You can accept or decline the cookies. If you have accepted the cookies, you can disable them later via the settings of your browser.

International exchange
Personal data is only shared with international partner organizations when this is necessary for the operation of the service. Agreements are in place with these partner organizations in which this (sub) processing is laid down. Data is only shared with the consent of the controller.

Within EU
Collect + Go only shares data with countries or international organizations within the EU.

Security
Collect + Go maintains high standards for data security. For example, work is underway on ISO27001 certification. The NIWO accreditation guarantees that the Collect + Go solution is compliant with the worldwide e-CMR protocol. This provides technical and organizational guarantees that personal data and its security are handled with care.

Providing of data to third parties
Collect + Go does not share your personal data with third parties, unless it is legally obliged to do so or when this is necessary for the performance of the services, in which case it will transfer the guarantees to the third party.

Data breach procedure
A data breach is analyzed based on the following criteria:
“The breach of confidentiality” There is an unintended disclosure of or access to personal data.
“The breach of integrity” There is an unintentional change of personal data.
“The breach of availability” There is a case of accidental loss of access to personal data or an unintentional destruction of personal data.

When a possible data breach is detected, Collect + Go goes through the following procedure:

– The situation is analyzed by the privacy and security officer. A data breach incident is registered in the incident management system.
– Immediate measures are taken to limit the damage of the data breach by the technical team. Management assesses the risks.
– A decision is made whether or not the data breach is reported to the Dutch Data Protection Authority (AP). If this is the case, this will be done immediately (within 72 hours at the latest).
– It is determined by the management whether the data breach is reported to the controllers / customers involved. If this is the case, this will be done as soon as possible (within 72 hours at the latest).
– Decide whether or not to report the data breach to the people involved. If so, this is done as soon as possible.

Dutch Data Protection Authority
If there are complaints about our processing of personal data, we would like to hear from you. If, despite this, no solution can be found, the General Data Protection Regulation gives the right to submit a complaint to the Dutch Data Protection Authority.

Changes to this privacy policy
Collect + Go is entitled to change this privacy policy if this is required because of new developments or functionalities.  The most current privacy policy is published on www.collectgo.eu,