Privacy Policy
This policy explains which personal data VZ Services processes as the operator of tirlogix.com and of the TIR Logix system, why, for how long, and what your rights are.
Who is responsible
The controller under this policy is VZ Services legal form, company no. (ЕИК) number, registered office: address, Bulgaria, e-mail: [email protected]. We are not required to appoint a data protection officer; for any question write to the e-mail address above.
Two roles. For the data of website visitors, of people who write to us and of our customers' representatives we are the controller. For the data a customer company enters into its own TIR Logix instance (drivers, forwarders, users, costs) the company itself is the controller and we are its processor, acting on its instructions — see the Data Processing Agreement. If you are a driver or employee of one of our customers and have a question about your data, please contact your employer first; we will assist them.
1. Visitors of tirlogix.com
The website uses no tracking cookies, advertising or third-party analytics scripts. It is delivered through Cloudflare's network, which processes the IP address and technical data of each request to protect against attacks and may set strictly necessary security cookies (e.g. __cf_bm) — these are not used for tracking. Our server keeps no permanent visitor log; when abuse is investigated, technical records are kept for up to 30 days.
2. Enquiries: the contact form, phone and chat
- What: company, name, phone, e-mail, fleet size and message — whatever you filled in.
- Why and on what basis: to contact you, hold a demonstration and prepare an offer — steps at your request prior to entering into a contract (art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (art. 6(1)(f)).
- Who receives it: our team. The enquiry reaches us by e-mail and as a Telegram notification (Telegram FZ-LLC; the message may be processed on servers outside the EU).
- How long: for the duration of our conversation and up to 12 months after the last contact if no contract follows. You can ask for deletion at any time.
- Phone and chat: if you call us or message us on Viber, WhatsApp or Telegram, we process your number, your profile name and the messages to answer you — on the same bases and for the same periods. These apps are provided by Viber Media S.à r.l., WhatsApp Ireland Ltd. and Telegram FZ-LLC under their own terms; messages may also be processed outside the EU. If you prefer not to use them, call us or write by e-mail.
3. Customer representatives (contract, billing, support)
Names, role, business phone and e-mail of contact persons, and the support correspondence, are processed to perform the contract (art. 6(1)(b)). Data in invoices and accounting records is kept for the statutory periods (up to 10 years); other correspondence up to 3 years after the contract ends.
4. Users of the TIR Logix system
If you work with the system as an employee of one of our customers, your employer is the controller of your data and we process the following on its behalf:
- Account: username, display name, business e-mail, role and permissions; passwords are stored only as a cryptographic hash.
- Access security: IP address and time of login attempts (to throttle guessing attacks), active sessions.
- Change history: which user created, changed or deleted what and when — for the traceability of the company's data. Kept for the term of the contract.
- Usage telemetry: pages opened, buttons clicked, technical errors and slow requests — never the values you type and never document contents. Used to find bugs; deleted automatically after 90 days.
- Cookies: one strictly necessary HttpOnly cookie that keeps your session; interface preferences are stored locally in your browser. There are no analytics or advertising cookies, which is why we show no consent banner.
5. Artificial-intelligence features
The AI advisor, AI import and AI assistant (chat) are off until a customer asks for them. When enabled, the request (text and the relevant company data) is sent to a language model running on our infrastructure in the EU or — at the customer's choice — to Anthropic PBC (USA) under the EU-US Data Privacy Framework and standard contractual clauses. What is sent is not used to train models. Conversations with the AI assistant are stored in the customer's database, visible only to the user who held them, and that user can delete them.
6. Where data is stored and who has access
- Hosting: Hetzner Online GmbH, Falkenstein data centre, Germany. Every customer has its own database and its own application.
- Backups: nightly, kept for 30 days on the server and copied to storage at Backblaze, Inc. in an EU data centre (Amsterdam).
- Network: all tirlogix.com addresses pass through Cloudflare, Inc. (attack protection, encrypted connection). Cloudflare processes data only in transit; safeguards: EU-US Data Privacy Framework and standard contractual clauses.
- Access by our staff: only for maintenance, bug fixing and at the customer's request, under a confidentiality obligation.
- We do not sell personal data or pass it to third parties for their own purposes.
7. How we protect data
Encrypted connections (HTTPS) everywhere; a separate database and application per customer; roles and access permissions; hashed passwords and mandatory change of temporary ones; login throttling; short sessions with automatic renewal; a complete change history; nightly backups and off-site backup storage; automatic vulnerability scanning of the software and prompt updates.
8. Your rights
You have the right of access to your data, to rectification, erasure, restriction of processing, data portability and objection, and to withdraw consent where processing is based on it. Write to [email protected]; we respond within one month. If you believe we process your data unlawfully you may lodge a complaint with the Bulgarian Commission for Personal Data Protection — 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, www.cpdp.bg — or with the supervisory authority of your own EU country.
9. Changes
When this policy changes we publish the new version here with its date; customers are notified by e-mail of material changes.