← eGPS Fleet Management

Politica de confidențialitate

În vigoare din 2026-05-06 · Ultima actualizare 2026-09-28

1. Who we are

eGPS Fleet Management (“eGPS”, “we”, “us”) is a multi-tenant SaaS platform for vehicle fleet management. The service is operated from Romania by GECA TRACK SRL (CUI RO37850752, Trade Register no. J23/3302/2017, registered office: str. Drăganului nr. 26-28, Bragadiru, Ilfov, Romania) (the “Operator”), which acts as data controller for personal data processed in connection with your account and with requests sent through this website. For privacy questions write to contact@e-gps.ro.

2. What personal data we collect

  • Account data — name, work email, optional phone, job role, company affiliation, role and fleet assignments. Provided by you or by your employer when an account is created.
  • Authentication data — Keycloak session token, refresh token, login timestamps and originating IP address. Required to keep you signed in and to detect suspicious activity.
  • Operational data — vehicle registrations, driver assignments, contracts, expenses, GPS positions, trip records and alarm events. Visible only to other authorized users in the same tenant organization.
  • Device data (mobile app) — device model, OS version, push notification token and foreground location while you use the map. Background location is not collected.
  • Diagnostic data (web) — error reports and breadcrumbs captured by GlitchTip and tagged with your user id and email so we can correlate the report. Captured only when you accept “Analytics & error reporting” in the cookie banner. Passwords, report contents and operational data are never transmitted.
  • Quote requests (website) — name, company, phone, email, number of vehicles, the topics you tick and your message, when you send the quote form. Used only to answer your request and prepare an offer.
  • Website analytics — pages visited, referring search or campaign, approximate location, device and browser type, collected through Google Analytics on the public pages only and only after you accept “Analytics” in the cookie banner. A submitted quote form is recorded as an event carrying the number of vehicles and the topics ticked — never your name, phone, email or company.

We do not collect special-category data (Art. 9 GDPR), do not perform cross-app or cross-site tracking, and do not sell personal data.

3. Legal bases and purposes

  • Performance of contract (Art. 6(1)(b) GDPR) — to provide the service you signed up for, including authentication, fleet visibility, reports and notifications you request.
  • Legal obligations (Art. 6(1)(c) GDPR; Romanian Law 207/2015 and accounting regulations) — to keep tax records, invoices and audit logs for the periods required by law.
  • Legitimate interest (Art. 6(1)(f) GDPR) — to keep the service secure, debug bugs you encounter and improve reliability; balanced via the optional consent toggles in the cookie banner.
  • Consent (Art. 6(1)(a) GDPR) — for non-essential tracking such as crash reporting and web push notifications, freely given via the cookie banner and revocable any time.

4. Sub-processors

We use the following sub-processors. Each operates under a written Data Processing Agreement and, where data leaves the EU, under the European Commission Standard Contractual Clauses (SCCs) and any applicable supplementary measures.

  • Keycloak — authentication (self-hosted on eGPS-controlled infrastructure in the EU).
  • Firebase Cloud Messaging — (Google Ireland Ltd., Ireland) — web and mobile push notification delivery.
  • Mapbox, Inc. — (USA) — map tiles and geocoding under SCCs.
  • GlitchTip — error reporting (self-hosted on eGPS-controlled infrastructure in the EU; Sentry-protocol compatible).
  • Google Analytics — (Google Ireland Ltd., Ireland) — website traffic measurement on the public pages, only with your consent; data may be transferred to Google LLC (USA) under the EU–US Data Privacy Framework and SCCs.
  • EU-based cloud hosting provider — compute, database, object storage and backups, all in EU regions.

The current sub-processor list and any planned changes are available on request to contact@e-gps.ro.

5. Where we store data

Operational data, telemetry and backups are stored in EU regions of the cloud hosting provider. Backups are encrypted at rest and retained for 30 days on a rolling basis. Disaster-recovery snapshots are kept for up to 12 months.

6. How long we keep data

  • Account data — for as long as your account is active, plus up to five years for legal and accounting evidence required by Romanian law.
  • GPS positions and trip history — 12 months by default; tenant administrators may shorten this in their subscription settings or in writing.
  • Diagnostic data — 30 days rolling.
  • Authentication logs — 12 months for security forensics.
  • Quote requests — up to 24 months from our last exchange if no contract follows; if one does, as account data.
  • Website analytics — 14 months in Google Analytics.

7. Your rights

Under GDPR Articles 15–22 you may request access to your data, correction, deletion, portability, restriction of processing, or object to processing based on legitimate interest. You may also withdraw any consent you have given at any time without affecting the lawfulness of processing carried out before the withdrawal. Send requests to contact@e-gps.ro; we respond within 30 days. If you believe your rights have been infringed you may also lodge a complaint with the Romanian Data Protection Authority (ANSPDCP, dataprotection.ro).

8. Cookies and similar technologies

See the cookie banner that appears on first visit for the categories we use. Strictly-necessary cookies (Keycloak session, language, theme, fleet selection) are required for the service to work and cannot be disabled. Analytics and push notification opt-ins are optional and can be changed at any time from the Settings area, or by clearing the egps.cookieConsent entry in your browser’s local storage.

9. Security

We use TLS for all transport, encrypt backups at rest, scope access by role and fleet via Keycloak, log administrative actions, and review dependencies regularly. No security control is perfect; if you find an issue please report it responsibly to contact@e-gps.ro.

10. Children

eGPS is a B2B service intended for fleet operators and their employees. It is not directed at children under 16, and we do not knowingly collect personal data from children.

11. Changes

We will announce material changes in the application at least 30 days before they take effect. The “Last updated” date at the top of this policy reflects the most recent revision; previous versions are available on request.

12. Contact

Privacy & data protection: contact@e-gps.ro
Customer support: contact@e-gps.ro
Security: contact@e-gps.ro