Privacy notice

Data controller

DNL Group, con sede legale in Cassino (FR).

Contact for any request about your data: piersilvio.dinola@fleetly.it. We have not appointed a data protection officer (DPO): none of the cases in which art. 37 GDPR makes one mandatory applies.

What data we collect through the site, and why

1. Activation request

If you fill in the activation form, the data you enter — company name, VAT number or tax code, contact person, email, phone, number of vehicles and any notes — are used to get back to you, issue the invoice and activate the licence.

How they are sent, today: the form does not send anything by itself. It prepares a pre-filled email that leaves from your own mail app, so the data reach us as an ordinary email and stay in our mailbox. The site does not store them or pass them to any other service.

Legal basis: performance of a contract or of pre-contractual steps at your request, and the consent you give by ticking the box. Retention: as long as needed to handle the request and, if it becomes a contract, for the periods required by tax and civil law.

2. Usage statistics

Only if you consent through the banner, we use Google Analytics 4 to understand which pages are useful and where traffic comes from. If you decline, no analytics script is loaded: it is not a partial opt-out, the request to Google is never made.

If you consent, the service is provided by Google Ireland Limited and may involve a transfer of data to third countries, on the basis of the safeguards set by applicable law. Your choice, yes or no, is stored in your browser for 12 months, after which you are asked again. You can change it or withdraw consent at any time from the Analytics preferences link at the bottom of every page: if you withdraw, Google Analytics stops immediately and its cookies are deleted. Legal basis: consent.

3. Technical server data

The site is hosted on Firebase Hosting (Google). Like any web server, the infrastructure logs technical request data — IP address, date and time, page requested, browser type — for security and to operate the service. Legal basis: legitimate interest in providing the service securely.

4. App usage statistics

People using the Fleetly app can consent, from the banner shown at first launch, to the collection of usage statistics: which features are used, on what kind of device, and where the app rejects an operation. They help us understand what to fix.

No plates, names, amounts, documents or licence codes go through this channel: only counts, yes/no values and short labels defined one by one. Events are tied to an identifier of the installed copy, not to you. If you do not consent nothing is collected, and on web and PWA Google Analytics is not even loaded. You can change the choice at any time from Settings → Diagnostics and Privacy. Legal basis: consent.

Where the data are, and who processes them for us

Fleetly runs on Google Cloud / Firebase, and the data reside on servers in the United States: this applies both to the app database and to uploaded documents. Google is certified under the EU-US Data Privacy Framework and the relationship is governed by the standard contractual clauses approved by the European Commission, which are the safeguards the transfer relies on.

Besides Google, only the following process data on our behalf — as processors, with the same safeguards:

• Resend, to send the welcome email at sign-up;
• Geoapify, for route calculation and maps, when the customer uses the Trips feature.

No one else. We do not sell or hand over data to third parties.

If you are a customer, the details of this processing — instructions, security measures, sub-processors, deletion at the end of the relationship — are in the data processing agreement (DPA), which is part of the contract.

What we do not do

• We do not use advertising or profiling cookies.
• We do not sell or hand over your data to third parties for commercial purposes.
• We do not make automated decisions about you.
• We do not subscribe you to any marketing communication just because you filled in the activation request.

Your fleet data inside the app

This notice covers the site. The data you enter in the Fleetly app — vehicles, deadlines, documents, work entries and drivers’ names — are processed by you as controller: we process them on your behalf, as processor, and that relationship is governed by the data processing agreement (DPA), which serves as the appointment under art. 28 GDPR.

One exception is worth stating here because the customer decides it: if they turn on the deadlines calendar, Fleetly publishes plates and inspection, insurance and car tax dates at an address that their calendar — Google, Apple or Outlook — must be able to download on its own, therefore without authentication. Anyone who knows that address can read those data. It is off until switched on, can be switched off from the app settings, and the link can be regenerated at any time, which immediately makes the previous one useless.

Your rights

You can ask at any time for access, rectification, erasure, restriction or portability of your data, and object to processing based on legitimate interest. You can withdraw consent whenever you want, without affecting the lawfulness of earlier processing. To exercise them, write to piersilvio.dinola@fleetly.it.

If you believe the processing breaches the law, you can lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali).

Updates

When card payment and automatic licence issuing go live, this notice will be updated: a payment provider will appear as a further recipient of invoicing data.