Privacy Policy & Cookies

Last updated: July 2026

We attach great importance to the protection of personal data. In the following, we inform you about the nature, scope and purposes of the collection, processing and use of personal data. You can access this privacy policy at any time via our website. You can visit this website at any time without providing any personal information. If you have been referred to our website via links from third-party sites, please also inform yourself about the handling of your data by the third party in the privacy policy of that third-party site.

1. Scope and Data Controller

This privacy policy applies

to the use of the websites fleet.cynatix.io, cynatix.com, cynatix.de;
to the use of the services and products of Cynatix GmbH, Kiefholzstraße 3, 12435 Berlin, Germany.

The data controller within the meaning of the GDPR is

Cynatix GmbH
Kiefholzstraße 3
12435 Berlin Germany

We collect, process and use your personal data exclusively in accordance with the provisions of the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Act on Data Protection and Privacy in Telecommunications and Digital Services (TDDDG).

2. Categories of Personal Data Collected

We collect personal data when you use our website, book our services and use our services.

a. Categories of personal data when using the website and booking services

When you use the website in general, your IP address is collected. In addition, the following personal data is collected when you book our services:

First and last name
Address
Telephone number
Email address

If you enter other personal data into the input fields of our website, enter it into forms provided by us or otherwise make it available to us, this data will also be collected.

The data collection serves the purpose of performing the services necessary for the fulfilment of the contract. The legal basis is Art. 6 (1) lit. b GDPR.

For data entered online, the data collection additionally serves the improvement of our online services. The legal basis for this is Art. 6 (1) lit. f GDPR.

Should the data be used for purposes other than the fulfilment of the contract or the improvement of our online services, we will obtain your prior consent to such data processing. In this case, the legal basis is Art. 6 (1) lit. a GDPR.

When you use our website, general data is also collected with each access, which varies depending on the individual page visited (server log files). This data collection serves the delivery of the online content, the assurance of technical security and the improvement of the online offering.

The data collected includes:

Name of the accessed website or file
Date and time of access
Volume of data transferred
Notification of successful retrieval
Browser type and version
Operating system of the user
Referrer URL (the page that linked to our site)
Requesting provider
IP address of the user

The server log files are deleted as soon as they are no longer required for the purposes of technical security and error analysis, but at the latest after completion of the respective review processes. Longer retention only takes place insofar as this is necessary to investigate a specific security incident. This data is not merged with other data sources. The legal basis is our legitimate interest in the secure and stable provision of our website pursuant to Art. 6 (1) lit. f GDPR.

We reserve the right to subsequently review the log data if there is a justified suspicion of unlawful use based on concrete indications.

If third-party services are integrated on our site, the data mentioned in this section will also be collected by these third parties. The integrated third-party services are each listed in a separate subsection of this privacy policy.

b. Categories of personal data when using the services and products

We collect personal data when you use our products in order to be able to provide the contractually agreed services.

The following personal data is collected:

Location data (GPS) including the time of collection and data from the acceleration sensors when using the hardware dongle
IP address when using the software or app
Where applicable, first and last name, address, telephone number and email address when using the software or app

The legal basis for this is Art. 6 (1) lit. b GDPR.

3. Server Operation and Data Center

We operate our servers for our websites and digital products in a data center located in Germany. The data collected in the course of visiting the website and using our products (in particular the data referred to in Sections 2a and 2b) is processed exclusively on these servers and is stored there in fully encrypted form. No data is transferred to third countries outside the EU in this context. Operating our servers in a professional data center serves the secure, fast and efficient provision of our online offering; the legal basis is our legitimate interest pursuant to Art. 6 (1) lit. f GDPR. The data center operator has no access to the data stored on our servers; its services are limited to the provision of the technical infrastructure. The data center operator therefore does not process any personal data.

4. Security of Data Transmission and Storage

Collected data is transmitted in encrypted form both from the website and from the end devices (e.g. hardware dongle) and is stored in encrypted form on our web servers. All end devices used by our employees are also encrypted.

5. Storage Period, Deletion of Personal Data

The data collected and processed by us is stored only until the purpose of storage has been achieved, unless we are obliged to store it for a longer period due to requirements of national or European legislation.

Once the purpose of storage has been achieved, the data will be deleted. If earlier deletion is mandatory due to requirements of national or European legislation, the deletion will take place at the time prescribed by law.

6. Cookies and Consent Management (Cookie Banner)

We use cookies and comparable technologies on our website. Cookies are small text files that a visited website stores on the user’s end device via the browser. They are stored either temporarily for the duration of the session (so-called session cookies) or permanently (so-called persistent cookies). Cookies send the stored information back to the server on subsequent visits to the same website, making it possible, for example, to save settings or analyse the use of the website.

We distinguish between two categories:

Technically necessary cookies: These cookies are strictly necessary for the operation of the website and the provision of its basic functions, for example to store your cookie settings or to maintain a session. They are stored in accordance with Section 25 (2) No. 2 TDDDG; the processing of any associated personal data is based on our legitimate interest in the technically error-free and secure provision of our website pursuant to Art. 6 (1) lit. f GDPR. Consent is not required for this.
Cookies requiring consent: Cookies and comparable technologies that are not technically necessary — in particular those used for advertising and marketing purposes (e.g. Google Ads, Meta Pixel) — are only used if you have given your prior consent. The legal basis is Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) sentence 1 lit. a GDPR.

When you first visit our website, a cookie banner (consent management) appears, through which you can grant or refuse your consent for individual categories or services. Your selection is saved. You can change or withdraw your consent at any time, without giving reasons and with effect for the future, via the on our website.

Irrespective of this, you can delete cookies at any time via your browser settings or restrict or block their storage. Please note that if you deactivate all cookies, individual functions of our website may only be available to a limited extent or not at all.

Which services use cookies in detail, which purposes they pursue and on which legal basis this is done is explained in the following sections on the respective services.

7. Contact Form

When you contact us via the contact options provided on our website or otherwise (contact form) or by email, the data provided that is necessary for processing the contact and the underlying request will be stored and processed. In particular, insofar as you enter this into the input fields, your first and last name, email address and telephone number will be processed and stored for the purpose of handling the enquiry.

If your enquiry is aimed at the conclusion or performance of a contract, the legal basis is Art. 6 (1) lit. b GDPR. In all other cases, the legal basis is our legitimate interest in responding to the enquiries addressed to us pursuant to Art. 6 (1) lit. f GDPR.

8. Collection of IP Addresses by Third-Party Services

Individual content, functions and offers on our website are embedded third-party content.

The functionality of this content, these functions and offers requires that the user’s IP address be collected and, under certain circumstances, stored by these third parties. As far as possible, we only embed third-party content for which the user’s IP address is collected solely for the purpose of displaying the content and for no other purposes. However, we have no influence on the specific use of the IP address by the third-party providers. We inform our users about the use of IP addresses by third-party providers below, to the best of our knowledge.

a. Google Tag Manager

We use Google Tag Manager on our website, a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager enables us to manage various scripts and plug-ins centrally and to integrate them efficiently into our website.

Google Tag Manager is a purely auxiliary service: it processes personal data only insofar as this is necessary for technical reasons. Its function is to trigger and load other components, which in turn may collect data. Google Tag Manager itself has no access to this data. We have concluded a data processing agreement with Google. The processing is based on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR in integrating scripts and plug-ins on our website in a secure, efficient and user-friendly manner.

Data processing generally takes place within the EU. However, a transfer of data to Google in the USA (third country) cannot be entirely ruled out. For this reason, we have agreed the EU Standard Contractual Clauses with Google as part of the data processing agreement; these are available on the website of the European Commission. In addition, Google is certified under the EU-US Data Privacy Framework, so the adequacy decision of the European Commission applies to transfers of personal data to the USA.

b. Google Ads

We use the online advertising programme Google Ads on our website, together with the associated conversion tracking (evaluation of visitor actions). The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

If you click on an advertisement placed by Google, a cookie for conversion tracking is stored on your end device. If you subsequently visit certain pages of our website while this cookie is still valid, both Google and we can recognise that you reached the page in question via the advertisement. Each Google Ads customer receives its own cookie, so that cookies cannot be tracked across the websites of different Ads customers.

We use the information obtained via the conversion cookie to compile statistics on the effectiveness of our advertisements. We thereby only learn the total number of users who clicked on one of our advertisements and were redirected to a page equipped with a conversion tracking tag. We do not receive any information with which individual users could be personally identified.

Google Ads is used on the basis of your consent pursuant to Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) sentence 1 lit. a GDPR. You grant this consent via our cookie banner and can withdraw it at any time, without giving reasons and with effect for the future, via the .

Further information and Google’s privacy policy can be found at: https://www.google.de/policies/privacy/.

c. Meta Pixel

We use the so-called Meta Pixel on our website, a service provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). With the help of the Meta Pixel, we can measure the effectiveness of our advertisements on the Facebook and Instagram platforms and statistically evaluate and optimise our advertising measures.

The Meta Pixel makes it possible to address visitors to our website as a target group for the display of advertisements (so-called “Meta Ads”). For this purpose, a cookie is stored on your end device, through which your behaviour can be tracked if you have reached our website via an advertisement. This allows us, for example, to record whether certain actions were carried out on our website after clicking on an advertisement (conversion measurement). The data collected is anonymous to us, i.e. it does not allow us to draw any conclusions about the identity of individual users. However, Meta itself may link this data to your user account and use it for its own advertising purposes in accordance with Meta’s data policy.

Insofar as personal data is collected via the Meta Pixel and transmitted to Meta, we and Meta Platforms Ireland Limited are jointly responsible for this within the meaning of Art. 26 GDPR. For this purpose, we have concluded an agreement on joint controllership (“Controller Addendum”) with Meta. The subsequent further processing of the data is carried out under the sole responsibility of Meta.

The Meta Pixel is used on the basis of your consent pursuant to Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) sentence 1 lit. a GDPR. You grant this consent via our cookie banner and can withdraw it at any time, without giving reasons and with effect for the future, via the .

A transfer of data to Meta Platforms Inc. in the USA (third country) cannot be ruled out. The data transfer is safeguarded by the EU Standard Contractual Clauses, which are available on the website of the European Commission. In addition, Meta is certified under the EU-US Data Privacy Framework, so the adequacy decision of the European Commission applies to transfers of personal data to the USA.

Further information and Meta’s privacy policy can be found at: https://www.facebook.com/privacy/policy/.

d. Google Analytics

We use the web analytics service Google Analytics (Google Analytics 4) on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics enables us to analyse user behaviour on our website in order to continuously improve our offering.

Google Analytics uses cookies and comparable technologies that enable an analysis of your use of the website. The information generated in this way about your use of this website is generally transmitted to a Google server and stored there. With Google Analytics 4, IP addresses are not logged by default; they are only used for approximate location determination (geolocation) and are shortened or deleted before storage. On our behalf, Google will use the information collected to evaluate the use of the website and to compile reports on website activity for us. We have concluded a data processing agreement with Google.

Google Analytics is used on the basis of your consent pursuant to Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) sentence 1 lit. a GDPR. You grant this consent via our cookie banner and can withdraw it at any time, without giving reasons and with effect for the future, via the .

Further information and Google’s privacy policy can be found at: https://policies.google.com/privacy.

9. Matomo

We use the open-source web analytics service Matomo on our website. Matomo is operated on our own servers (“self-hosted”), so that all analytics data remains exclusively with us and is not passed on to third parties. No data is transferred to third countries outside the EU.

We use Matomo in a privacy-friendly configuration: no cookies are stored on your end device, and your IP address is shortened (anonymised) before processing, so that no direct personal reference can be established. The data collected includes, among other things, the pages visited, the duration of the visit, the referring page (referrer) and the browser used. We use this data exclusively for statistical analysis in order to continuously improve our offering. It is not merged with other data sources.

The legal basis for the processing is our legitimate interest in analysing and optimising our website pursuant to Art. 6 (1) lit. f GDPR. Since no information is stored on or read from your end device, consent pursuant to Section 25 TDDDG is not required.

You can object to data collection by Matomo at any time. To do so, please use the following opt-out option:

Please note: When you object, a deactivation cookie is stored in your browser to document your objection. This cookie is technically necessary to implement your objection (Section 25 (2) No. 2 TDDDG). If you delete your cookies or use a different device or browser, you will need to declare your objection again.

10. Payment Provider

On our website, we offer the option of processing payments via the payment service provider Stripe. The provider for customers within the EU is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (“Stripe”). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 (1) lit. f GDPR). In this context, we pass on the following data to Stripe insofar as this is necessary for the performance of the contract (Art. 6 (1) lit. b GDPR):

Name of the cardholder
Email address
Customer number
Order number
Bank details
Credit card details
Validity period of the credit card
Credit card verification number (CVC)
Date and time of the transaction
Transaction amount
Name of the provider
Location

The processing of the data specified in this section is neither required by law nor by contract. However, without the transmission of your personal data, we cannot process a payment via Stripe.

Stripe assumes a dual role as controller and processor in its data processing activities. As a controller, Stripe uses your transmitted data to fulfil regulatory obligations. This corresponds to Stripe’s legitimate interest (Art. 6 (1) lit. f GDPR) and serves the performance of the contract (Art. 6 (1) lit. b GDPR). We have no influence on this process.

A transfer of data to Stripe, Inc. in the USA (third country) cannot be ruled out. Stripe has implemented compliance measures for international data transfers, which are based on the EU Standard Contractual Clauses; these are available on the website of the European Commission. In addition, Stripe is certified under the EU-US Data Privacy Framework, so the adequacy decision of the European Commission applies to transfers of personal data to the USA.

Further information on objection and removal options vis-à-vis Stripe can be found at: https://stripe.com/privacy-center/legal

Your data will be stored by us until the payment processing has been completed. This also includes the period required for processing refunds, receivables management and fraud prevention.

11. Other Recipients of Personal Data

We also use individual services provided by third parties to perform our services and provide our products. We inform you below about the scope of the collection and disclosure of personal data by these third parties:

a. Collection of telematics data by Mobile Devices Ingenierie

The collection of telematics data (e.g. location data — GPS, acceleration data and the time of collection) is carried out by means of the hardware provider Mobile Devices Ingenierie, 100 Avenue de Stalingrad, 94800 Villejuif, France. The telematics data collected via the hardware dongle is transmitted to Mobile Devices Ingenierie in encrypted and pseudonymised form. Mobile Devices Ingenierie cannot trace this data back to a specific person or establish a connection to a specific person.

b. Service partners

Personal data may be passed on to service partners who support us in the provision of our contractually owed services and the services necessary for this. The disclosure and processing of personal data by these service partners takes place exclusively within the framework of a data processing agreement pursuant to Art. 28 GDPR.

12. Your Rights

You have the following rights with regard to your personal data:

a. Right of access

You have the right at any time to obtain information about the data stored concerning your person, its categories, origin and recipients, as well as the purpose of the collection, processing and storage and their duration. You also have the right to information about the existence of a right to rectification, erasure or restriction of the processing of the data, as well as about the existence of a right to data portability. You can obtain the aforementioned information and all other legally required information at the address given in the legal notice (Impressum).

b. Rectification, erasure, restriction

You also have the right to rectification of inaccurate data and to blocking or erasure of personal data, provided that no statutory retention obligations stand in the way. You can also have the scope of the processing restricted.

c. Right to object to processing

You have the right to object to the processing of your personal data. We will then no longer process the personal data unless there are compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims.

d. Data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR or on a contract pursuant to Art. 6 (1) lit. b GDPR and the processing is carried out by automated means.

e. Right to erasure (“right to be forgotten”)

You have the right to demand that the personal data concerning you stored by us be erased without undue delay, provided that one of the following grounds applies and insofar as the processing is not necessary:

The personal data was collected or otherwise processed for purposes for which it is no longer necessary.
You withdraw your consent on which the processing was based pursuant to Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR, and there is no other legal basis for the processing.
You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
The personal data was processed unlawfully.
The erasure of the personal data is necessary to fulfil a legal obligation under Union law or German law.
The personal data was collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.

f. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the competent supervisory authority (such as the State Data Protection Commissioner), in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the provisions of the General Data Protection Regulation.

g. Withdrawal of consent

If the data processing is based on consent previously given by you, you can withdraw this consent at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out up to the time of withdrawal. You can withdraw consents that you have given via the cookie banner at any time via the on our website.

h. Addressee for exercising your rights

If you wish to assert the aforementioned rights against us, please address your request, stating your current address or the address on file with us and your email address (if available),

by letter to:

Cynatix GmbH
Kiefholzstraße 3
12435 Berlin Germany

by email to:

info@cynatix.com

13. Applicable Law

German law shall apply exclusively.