Privacy Policy for Drivers (DriverTrust App)
- Controller
The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:
Green Convenience GmbH
c/o TechQuartier, Platz der Einheit 2
60327 Frankfurt am Main
Germany
Email: privacy@driver-trust.de
Phone: +49 69 380 298 06010 - Data Protection Officer
You can reach our Data Protection Officer at:
"Datenschutzfrankfurt" MFM Datenschutz-Consulting GmbH, represented by its managing directors Florian Kaiser and Marc Schönberger
Email: datenschutz@datenschutzfrankfurt.de - General Information on Data Processing
- App Download
The DriverTrust App is available through the Apple (iOS) and Google (Android) app stores. When downloading the app, certain necessary information is transmitted to the respective app store, including your username, email address, customer number of your account, download time, payment information, and individual device identifier.
We have no influence on this data processing. The responsible parties are:
- Apple App Store: Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA
- Google Play Store: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
- Scope of Data Processing
We process personal data of our users only to the extent necessary for providing a functional app as well as our content and services. The processing of personal data of our users regularly takes place only with the user's consent or based on another legal basis.
- Special Categories of Personal Data
Important Note: The DriverTrust App processes biometric data (facial biometrics) for unique identification. These belong to special categories of personal data under Art. 9 GDPR and are subject to special protection. Processing takes place exclusively with your explicit consent (see section 1.3.4).
- App Download
- Data Processing When Using the App
- Registration and User Account
During registration in the app, we collect the following data:
- First and last name
- Email address
- Phone number
- Driver ID
Legal basis: Art. 6 para. 1 lit. b GDPR (contract fulfillment)
- Document Verification
To verify your qualification as a driver, we collect the following documents and data:
- Identity card or passport (for identity verification)
- Driver's license (to check driving authorization)
- Residence permit (for non-EU citizens)
- Work permit (if required)
Legal basis: Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. f GDPR
- Biometric Data Processing by DriverTrust
- Creation of a Biometric Hash
Green Convenience GmbH as operator of DriverTrust creates a unique biometric hash from your ID photo using the AI model FaceNet. This hash:
- Is a mathematical representation of your facial features
- Cannot be used to reconstruct or visualize your face
- Serves exclusively for matching to prevent multiple registrations
- Purpose of Biometric Processing
The biometric hash is used to:
- Prevent multiple registrations
- Ensure the integrity of our verification system
- Detect fraud attempts
- Enforce contractual registration bans after user deletion
- Your Consent
The processing of biometric data takes place only with your explicit consent.
Legal basis: Art. 9 para. 2 lit. a GDPR
- Revocation and Anonymization
You can revoke your consent at any time. Upon revocation:
- The biometric hash is detached from your account
- The hash is anonymized
- Assignment is no longer possible
- Creation of a Biometric Hash
- Verification Process by Veriff
- Data Transmission to Veriff
We use Veriff OÜ for document verification. The following data is transmitted:
- Documents
- Selfie photo
- Device information
- IP address
- Timestamp
- Liveness check
- Processing by Veriff
- Document verification (AI)
- Biometric matching
- Authenticity check
- Fraud detection
Legal basis: Art. 6 para. 1 lit. b and f GDPR
- Data Transmission to Veriff
- Status System (Traffic Light System)
Based on verification, you receive a status:
- Green: Valid documents
- Yellow: Documents expiring soon
- Red: Invalid documents, ban, etc.
Status is visible to employers/clients.
Legal basis: Art. 6 para. 1 lit. b and f GDPR
- Automatic Notifications
- Expiring documents
- Recertifications
- Status changes
Legal basis: Art. 6 para. 1 lit. b GDPR
- Technical Data
- Device ID
- Operating system
- App version
- Usage time and duration
- Error logs
Legal basis: Art. 6 para. 1 lit. f GDPR
- Registration and User Account
- App Permissions
The DriverTrust App requires the following permissions:
- Camera
Purpose: Taking photos of your documents and selfie for verification
Required: Yes - Microphone
Purpose: Recording your voice and ambient sounds for the verification process
Required: Yes - Internet Access
Purpose: Transmitting data for verification and retrieving status
Required: Yes - Push Notifications (optional)
Purpose: Reminders of expiring documents and status changes
Required: No, but recommended
- Camera
- Data Sharing
- To Your Employer/Client
The following data is transmitted:
- Verification status
- Document expiry dates
- Driver ID
- Status change history
- To Veriff
See section 1.4.4
- No Other Sharing
- Only with explicit consent
- If legally required
- If necessary for legal enforcement
- To Your Employer/Client
- Cross-Company Evaluation
- House & Yard Bans
Stored in our system and visible to other companies using DriverTrust.
- Visibility of Status
- For current employers
- For companies where you apply
- Data Sharing in Applications
Only after your explicit consent
- House & Yard Bans
- Storage Duration
Data is stored as follows:
- Account data: as long as the account is active
- Biometric hash: until revocation
- Verification data: up to 3 years
- Status data: up to 3 years
- House & yard bans: up to 5 years
- Technical logs: up to 90 days
- Data Security
- Encrypted data transmission (SSL/TLS)
- Encrypted storage
- Access controls
- Security updates
- Privacy by Design
- Your Rights as a Data Subject
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent (Art. 7 para. 3 GDPR)
- Right to lodge a complaint (Art. 77 GDPR)
- Children and Adolescents
The use of the app is only permitted for adults.
- Changes to the Privacy Policy
This privacy policy may be adjusted. Changes will be communicated in the app.
- Offline Availability
This privacy policy is also available offline in the app.
- Contact
If you have questions, please contact: privacy@driver-trust.de