Privacy Policy for Drivers (DriverTrust App)

  1. Controller

    The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

    Green Convenience GmbH
    c/o TechQuartier, Platz der Einheit 2
    60327 Frankfurt am Main
    Germany
    Email: privacy@driver-trust.de
    Phone: +49 69 380 298 06010

  2. Data Protection Officer

    You can reach our Data Protection Officer at:
    "Datenschutzfrankfurt" MFM Datenschutz-Consulting GmbH, represented by its managing directors Florian Kaiser and Marc Schönberger
    Email: datenschutz@datenschutzfrankfurt.de

  3. General Information on Data Processing
    1. App Download

      The DriverTrust App is available through the Apple (iOS) and Google (Android) app stores. When downloading the app, certain necessary information is transmitted to the respective app store, including your username, email address, customer number of your account, download time, payment information, and individual device identifier.

      We have no influence on this data processing. The responsible parties are:

      • Apple App Store: Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA
      • Google Play Store: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
    2. Scope of Data Processing

      We process personal data of our users only to the extent necessary for providing a functional app as well as our content and services. The processing of personal data of our users regularly takes place only with the user's consent or based on another legal basis.

    3. Special Categories of Personal Data

      Important Note: The DriverTrust App processes biometric data (facial biometrics) for unique identification. These belong to special categories of personal data under Art. 9 GDPR and are subject to special protection. Processing takes place exclusively with your explicit consent (see section 1.3.4).

  4. Data Processing When Using the App
    1. Registration and User Account

      During registration in the app, we collect the following data:

      • First and last name
      • Email address
      • Phone number
      • Driver ID

      Legal basis: Art. 6 para. 1 lit. b GDPR (contract fulfillment)

    2. Document Verification

      To verify your qualification as a driver, we collect the following documents and data:

      • Identity card or passport (for identity verification)
      • Driver's license (to check driving authorization)
      • Residence permit (for non-EU citizens)
      • Work permit (if required)

      Legal basis: Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. f GDPR

    3. Biometric Data Processing by DriverTrust
      1. Creation of a Biometric Hash

        Green Convenience GmbH as operator of DriverTrust creates a unique biometric hash from your ID photo using the AI model FaceNet. This hash:

        • Is a mathematical representation of your facial features
        • Cannot be used to reconstruct or visualize your face
        • Serves exclusively for matching to prevent multiple registrations
      2. Purpose of Biometric Processing

        The biometric hash is used to:

        • Prevent multiple registrations
        • Ensure the integrity of our verification system
        • Detect fraud attempts
        • Enforce contractual registration bans after user deletion
      3. Your Consent

        The processing of biometric data takes place only with your explicit consent.

        Legal basis: Art. 9 para. 2 lit. a GDPR

      4. Revocation and Anonymization

        You can revoke your consent at any time. Upon revocation:

        • The biometric hash is detached from your account
        • The hash is anonymized
        • Assignment is no longer possible
    4. Verification Process by Veriff
      1. Data Transmission to Veriff

        We use Veriff OÜ for document verification. The following data is transmitted:

        • Documents
        • Selfie photo
        • Device information
        • IP address
        • Timestamp
        • Liveness check
      2. Processing by Veriff
        • Document verification (AI)
        • Biometric matching
        • Authenticity check
        • Fraud detection

        Legal basis: Art. 6 para. 1 lit. b and f GDPR

    5. Status System (Traffic Light System)

      Based on verification, you receive a status:

      • Green: Valid documents
      • Yellow: Documents expiring soon
      • Red: Invalid documents, ban, etc.

      Status is visible to employers/clients.

      Legal basis: Art. 6 para. 1 lit. b and f GDPR

    6. Automatic Notifications
      • Expiring documents
      • Recertifications
      • Status changes

      Legal basis: Art. 6 para. 1 lit. b GDPR

    7. Technical Data
      • Device ID
      • Operating system
      • App version
      • Usage time and duration
      • Error logs

      Legal basis: Art. 6 para. 1 lit. f GDPR

  5. App Permissions

    The DriverTrust App requires the following permissions:

    1. Camera
      Purpose: Taking photos of your documents and selfie for verification
      Required: Yes
    2. Microphone
      Purpose: Recording your voice and ambient sounds for the verification process
      Required: Yes
    3. Internet Access
      Purpose: Transmitting data for verification and retrieving status
      Required: Yes
    4. Push Notifications (optional)
      Purpose: Reminders of expiring documents and status changes
      Required: No, but recommended
  6. Data Sharing
    1. To Your Employer/Client

      The following data is transmitted:

      • Verification status
      • Document expiry dates
      • Driver ID
      • Status change history
    2. To Veriff

      See section 1.4.4

    3. No Other Sharing
      • Only with explicit consent
      • If legally required
      • If necessary for legal enforcement
  7. Cross-Company Evaluation
    1. House & Yard Bans

      Stored in our system and visible to other companies using DriverTrust.

    2. Visibility of Status
      • For current employers
      • For companies where you apply
    3. Data Sharing in Applications

      Only after your explicit consent

  8. Storage Duration

    Data is stored as follows:

    • Account data: as long as the account is active
    • Biometric hash: until revocation
    • Verification data: up to 3 years
    • Status data: up to 3 years
    • House & yard bans: up to 5 years
    • Technical logs: up to 90 days
  9. Data Security
    • Encrypted data transmission (SSL/TLS)
    • Encrypted storage
    • Access controls
    • Security updates
    • Privacy by Design
  10. Your Rights as a Data Subject
    • Right of access (Art. 15 GDPR)
    • Right to rectification (Art. 16 GDPR)
    • Right to erasure (Art. 17 GDPR)
    • Right to restriction of processing (Art. 18 GDPR)
    • Right to data portability (Art. 20 GDPR)
    • Right to object (Art. 21 GDPR)
    • Right to withdraw consent (Art. 7 para. 3 GDPR)
    • Right to lodge a complaint (Art. 77 GDPR)
  11. Children and Adolescents

    The use of the app is only permitted for adults.

  12. Changes to the Privacy Policy

    This privacy policy may be adjusted. Changes will be communicated in the app.

  13. Offline Availability

    This privacy policy is also available offline in the app.

  14. Contact

    If you have questions, please contact: privacy@driver-trust.de