Privacy Policy

LIRA Logistics Sp. z o.o. (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the “Application”).

The Applications are part of a multi-tenant B2B platform designed for logistics companies. Different users may access different features depending on their role and permissions within their organisation.

Each company operates within its own secure environment.

Any driver or logistics company can request access to the Application through the onboarding process.

If you do not agree with the terms of this Privacy Policy, please do not use the Application.

Depending on the type of data and the purpose of processing, LIRA Logistics acts either as a Data Processor or as a Data Controller under the General Data Protection Regulation (EU) 2016/679 (“GDPR”):

Data Processor. For data generated through your use of the Application in connection with a specific transport company (your employer or principal) — including location data, route and trip data, documents and photos, in-app messages, and trip-based earnings figures — we process this data on behalf of, and under the instructions of, that company. Your organisation is the Data Controller for this data and determines the purposes of its processing. Requests to access, correct, delete, or receive a copy of this data should be directed to your organisation in the first instance; we assist your organisation in responding to such requests.

Data Controller. For data we collect for our own purposes as the provider of the Application — access request and onboarding data, account and login credentials, and technical, device, and app usage data used to operate, secure, and improve the Application — LIRA Logistics is the Data Controller.

Users may access the Applications through accounts created or authorised by a company using the platform. Access and available functionality depend on the user's role and permissions within the platform.

We may collect the following types of information:

Personal Information

• Full name
• Email address
• Role (e.g., driver, company representative)
• Company name (if applicable)
• Information you provide when requesting access to the Application

This information may be collected directly within the Application or through onboarding or access request forms (including third-party form tools).

Account Information

• Login credentials
• Profile information associated with your account

Location Data

Depending on the user's role and the functionality used, we may collect real-time and historical location data from a device to support route tracking and logistics operations.

This data may be visible to your organisation's authorised personnel (e.g., dispatchers, managers).

Photos and Documents

We collect and store content uploaded by users in connection with logistics and transportation operations, including vehicle photos, delivery documents (e.g., CMR, waybills), receipts, expense-related images, and other files uploaded through the Applications.

Trip-Related Compensation Data

Figures showing amounts earned or payable per trip, as configured and provided by your organisation, including through integrations with your organisation's own systems (e.g. 1C). We do not determine these figures ourselves.

Messages

Content of messages exchanged through the Application's chat and announcement features between you and other users within your organisation. Where configured by your organisation, this content may also be shared with your organisation's own integrated systems.

Device and Technical Data

• Device type and model
• Operating system
• Device identifiers
• Country and general location

App Usage Data

We may collect information about how you interact with the Application to improve performance and usability.

We use your information to:

• Provide and maintain the Application
• Process access requests and onboard users
• Create and manage user accounts
• Enable logistics workflows (routes, documents, communication)
• Facilitate communication between users (e.g., drivers and dispatchers)
• Send notifications (e.g., route updates, alerts)
• Improve the Application and user experience
• Provide customer support

Where LIRA Logistics acts as Data Controller, we rely on the following legal bases under Article 6(1) GDPR:

• Processing access requests and onboarding new organisations and users — necessary step prior to entering into a contract (Art. 6(1)(b)), and our legitimate interest in evaluating such requests (Art. 6(1)(f)).
• Creating and managing accounts and login credentials — necessity for performance of our contract with your organisation (Art. 6(1)(b)).
• Sending service notifications (route updates, alerts) — necessity for performance of the contract (Art. 6(1)(b)).
• Improving the Application and analysing app usage — our legitimate interest in maintaining, securing, and improving the Application (Art. 6(1)(f)).
• Providing customer support — performance of the contract (Art. 6(1)(b)) and our legitimate interest in resolving issues (Art. 6(1)(f)).
• Complying with legal obligations and defending legal claims — Art. 6(1)(c) and/or Art. 6(1)(f).

Where LIRA Logistics acts as Data Processor (route, location, document, message, and trip-earnings data), the legal basis for processing is determined and relied upon by your organisation as Data Controller, typically the performance of its contract with you or its legitimate interest in operating its transport business.

Data we process as a Data Processor on behalf of your organisation (location, route and trip data, documents, photos, messages, trip-based earnings figures) is retained for the period determined by your organisation. Please contact your organisation for details.

Data we process as a Data Controller (access request and onboarding data, account credentials, technical and app usage data) is retained for as long as your account or your organisation's subscription remains active, and for 12 months afterwards for accounting and security purposes, after which it is deleted or anonymised.

We may share your information in the following cases:

With Your Organisation

Your data may be accessible to the logistics company you are associated with, including authorised managers and administrators.

Service Providers

We may use trusted third-party providers for:

• hosting and infrastructure
• cloud storage
• analytics
• onboarding and form processing tools

These providers process data on our behalf under appropriate safeguards.

Your Organisation's Own Systems

Where your organisation connects the Application to its own third-party systems (for example, its own accounting or ERP system such as 1C), data is transmitted to those systems based solely on your organisation's own configuration and instructions. We do not control how your organisation's own systems subsequently process that data, and any such transfer is carried out under your organisation's own responsibility as Data Controller.

Legal Requirements

We may disclose your information if required by law or to protect rights, safety, and property.

Business Transfers

In the event of a merger, sale, or acquisition, your data may be transferred to the new entity.

International Data Transfers

Data we store as part of providing the Application is hosted on servers located within the European Union. We do not ourselves transfer this data outside the European Economic Area.

Where your organisation connects the Application to its own third-party systems as described above, any resulting transfer of data outside the European Economic Area is made under your organisation's own configuration, instructions, and responsibility as Data Controller, not ours.

We implement appropriate technical and organisational measures to protect your data, including hosting on servers located within the European Union and role-based access control ensuring that data is only visible to authorised personnel within your own organisation.

However, no system is completely secure, and we cannot guarantee absolute security.

Under the GDPR, you have the right to:

• Access your personal data
• Request correction or deletion
• Restrict or object to processing
• Withdraw consent
• Receive a copy of your data in a structured, machine-readable format (data portability)
• Lodge a complaint with a supervisory authority — in Poland, the Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl

Where the data concerned is processed by us as a Data Processor on behalf of your organisation, we will forward your request to your organisation and assist it in responding.

To exercise your rights regarding data we control ourselves, contact us using the details below.

Providing certain information (e.g. your name and email address) during onboarding is necessary to create your account and grant you access to the Application. If you do not provide this information, we will not be able to create an account for you.

The Application may include links to third-party services (e.g., mapping tools or forms).

We are not responsible for the privacy practices of such services. Please review their policies separately.

We may update this Privacy Policy from time to time.

Updates will be reflected by the “Last updated” date.

If you have any questions about this Privacy Policy, please contact us at:

Email: dapamoga@liralogistics.com