Privacy notice and GDPR

Packmetr is the controller of the personal data described here — it decides why and how the data is processed.

Anton Čeremnych

Cesta brigádníků 819, 278 01, Kralupy nad Vltavou, Czechia

Company number: 04560540

Questions about your data, and any request under the rights below, go to [email protected].

Everything the app processes, one purpose at a time. If a purpose is not on this list, we are not pursuing it.

Your account: email address, the name you choose to give, and your password stored as a one-way hash.

To let you log in, keep your plans together and reach you about the service.Performance of a contract — Article 6(1)(b).Until you ask us to delete the account.

Your saved plans: the plan name, the vehicle, the cargo lines and the layout — plus the start and end of the route if you fill them in.

To store your work so you can come back to it from another device.Performance of a contract — Article 6(1)(b).Until you delete the plan, or until the account is deleted.

Share links: the link token and the plan behind it.

To let anyone holding the link view that one plan. Nothing about your account is shown to them.Performance of a contract — you create the link yourself.Until you revoke the link or delete the plan.

Your subscriptions: which paid products you have, their state, currency, current period end, seat quantity for Kiosk, and whether the last payment failed.

To unlock the paid products, to warn you if a payment did not go through, and to keep the accounts.Performance of a contract, and a legal obligation for the accounting records — Article 6(1)(b) and (c).Billing records for as long as tax law requires; the rest until the account is deleted.

Kiosk locations: the label you give a screen, its address or token, whether it is active, paused or revoked, when it was created or last used, and how many checks it has answered. We do not store the parcel dimensions a customer enters on the kiosk screen after the check is answered.

To run the licensed counter screens, enforce the number of locations paid for, show the screen history in the account, and let you pause or revoke a screen.Performance of a contract — Article 6(1)(b).Until the account is deleted. Revoked kiosk locations stay in the account history so the old address is not reused and the User can see what happened to it.

Usage statistics, and only if you accept them: which pages you open, roughly which country you are in, and your browser and device type — held against a random identifier, not against your account.

To see which parts of the planner get used, so we know what is worth improving.Consent — Article 6(1)(a). You give it in the cookie banner and can take it back at any time.Up to 14 months in Google Analytics; withdrawing consent stops the collection and removes the cookies from your browser.

Anonymous usage counts, collected without cookies: which pages are opened and which actions are used, plus the referring site, and your browser, device type and country. Nothing is stored on your device and nothing links these to your account or to another visit.

To see which parts of the planner are actually used, so we know what is worth improving.Legitimate interest in understanding and improving the service — Article 6(1)(f). No cookie is set, so no consent is required for it; you can object at any time.Kept as aggregate statistics on our own analytics server. There is no identifier that could be traced back to you.

Error reports: the page address, the error and its stack trace, the app version and your browser and screen size.

To find out that something is broken, and where. No plan contents are sent.Legitimate interest in a working app — Article 6(1)(f).Only as long as we need it to fix the fault.

Server logs: your IP address, the time and the address requested.

To keep the service running and to investigate faults and abuse.Legitimate interest in a secure, working service — Article 6(1)(f).Short-term only, and no longer than we need for those checks.

The planner itself sets no cookies. The one thing that does is Google Analytics, which counts how the app is used — and it runs only if you accepted it in the cookie banner. If you declined, the script is never loaded, so no analytics cookie is written at all.

Accepted, it stores two cookies (“_ga” and one beginning “_ga_”) holding a random number that tells one browser from another. They last up to two years; declining later deletes them.

We also count page views and actions with Umami, which runs on our own server and works without cookies: it stores nothing on your device and keeps no identifier that would recognise you on a later visit. That is why it is not part of the cookie question — there is nothing stored to ask about — and why it appears in the table above under legitimate interest instead.

There is no advertising network and nothing that follows you onto other sites.

Change your cookie choice

Two more things are kept in your browser's own storage, and neither is readable by anyone else:

• A sign-in token, so a reload does not log you out.
• Your current plan, so the app opens where you left it — this stays in your browser whether or not you have an account.

Clearing your browser data removes both. A plan shared as a link carries the load in the part of the address after the “#”, which browsers never send to a server — so that plan reaches whoever you sent the link to, and not us.

Subscriptions are handled by Stripe. Card details are entered on Stripe's own pages and never pass through this app — we receive only the state of your subscriptions and what we need to invoice them.

Stripe's privacy policy

Only the companies that run parts of the service for us, on our instructions and under a data processing agreement:

• Stripe, for payments and invoicing.
• Google, for the usage statistics above — and only for as long as you have accepted them.
• Nobody, for the cookieless usage counts: that server is ours and the figures do not leave it.
• Our hosting and email providers, which run the servers and send account emails.
• A mapping service, which turns a route you type into a distance. It receives the two places, never your cargo or your account.

Some of these process data outside the EEA. Where they do, the transfer rests on an adequacy decision or on the European Commission's standard contractual clauses.

We do not sell your data, and we hand it to nobody else unless the law obliges us to.

Under the GDPR you can, at any time:

• See what we hold about you, and get a copy of it.
• Correct anything that is wrong — your name and email you can change yourself on the account page.
• Have your data deleted, and your account with it.
• Ask us to restrict what we do with it, or object to processing based on our legitimate interest.
• Take your data elsewhere in a machine-readable form. A plan can also be exported as a link at any time.

Write to us and we will answer within one month. There is no charge, and asking costs you nothing — including the right to be forgotten, which we act on rather than argue about.

If you think we have got it wrong, you can complain to the supervisory authority: Úřad pro ochranu osobních údajů.

Packmetr is a tool for moving cargo and is not aimed at children. We do not knowingly create accounts for anyone under 16.

If what we do with data changes, this page changes with it and the date at the top moves. Anything that needs your agreement will be asked for, not assumed.