Privacy Policy
How Auto-Route 61 SRL collects, uses and protects your personal data, in accordance with the GDPR and the Belgian Law of 30 July 2018.
1. Data controller
The data controller for your personal data, within the meaning of Regulation (EU) 2016/679 (GDPR) and the Belgian Law of 30 July 2018, is :
Auto-Route 61 SRL is not legally required to designate a Data Protection Officer (DPO) under Article 37 of the GDPR. Any data-protection question can be sent to info@autoroute61.com.
2. Data collected
We only collect data that is strictly necessary for the purposes described in this policy, in accordance with the data minimisation principle (Article 5.1.c GDPR).
Contact data (forms)
When you fill the “A question, by email” form :
- First and last name
- Company
- Work email address
- Estimated monthly volume (range)
- Question / free message (optional)
- Browsing language (FR / NL / EN)
Partner application data
When you submit the “Become a partner” form :
- Contact name and email
- Company name, VAT number
- Regulatory compliance : transport licence (yes/no), damage insurance (yes/no)
- Fleet composition (size, vehicle type)
- Skills (assembly/installation expertise)
- Free comment (optional)
Delivery tracking data
When using “Track my delivery”, we only process the order number you enter to redirect you to the tracking portal operated by our partner Urbantz. We do not store these requests.
Technical data
Our hosting provider records standard server logs (IP address, user agent, request timestamp) for security and abuse prevention purposes. These logs are kept for a maximum of 30 days.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Responding to your sales and information enquiries | Pre-contractual measures (Art. 6.1.b) |
| Assessing transport partner applications | Pre-contractual measures (Art. 6.1.b) |
| Enabling delivery tracking via Urbantz | Performance of a contract (Art. 6.1.b) |
| Site security, abuse prevention, technical logging | Legitimate interest (Art. 6.1.f) |
| Compliance with legal obligations (accounting, tax) | Legal obligation (Art. 6.1.c) |
4. Processors and partners
To operate the website and manage our business, we work with carefully selected processors. They act only on our documented instructions and are bound by a data processing agreement compliant with Article 28 of the GDPR.
| Processor | Purpose | Location | Safeguard |
|---|---|---|---|
| Resend | Transactional email sending | États-Unis | EU-US Data Privacy Framework + Standard Contractual Clauses |
| Urbantz | Delivery management & tracking | Belgique | EU/EEA — RGPD applicable directement |
| Calendly | Sales meeting scheduling | États-Unis | EU-US Data Privacy Framework + Standard Contractual Clauses |
| Google Workspace | Professional mailbox (info@, j.leroy@) | États-Unis | EU-US Data Privacy Framework + Standard Contractual Clauses |
| Zendesk | Customer support chat | États-Unis | EU-US Data Privacy Framework + Standard Contractual Clauses |
| Navia | Client platform (Business Portal) | Belgique | EU/EEA — RGPD applicable directement |
| OVHcloud | Domain registration & DNS | France | EU/EEA — RGPD applicable directement |
| Vercel Inc. | Web hosting | États-Unis | EU-US Data Privacy Framework + Standard Contractual Clauses |
5. Transfers outside the European Union
Some of our processors are established in the United States. For these transfers, we rely on the following safeguards :
- Adherence to the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023)
- Standard Contractual Clauses of the European Commission (Decision 2021/914)
6. Retention period
- Unconcluded sales enquiries : 3 years from last contact.
- Unsuccessful partner applications : 2 years from decision.
- Active clients : duration of the commercial relationship + 10 years (Belgian accounting obligation).
- Server logs : 30 days maximum.
7. Security
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk (Article 32 GDPR), including HTTPS encryption, strong authentication on internal tools, restricted access, regular backups and incident response procedures.
9. Your rights
Under Articles 15 to 22 of the GDPR, you have the following rights :
- Right of access
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object
- Right to withdraw consent at any time
Send your request to info@autoroute61.com. We will respond within one month (extendable by two months).
10. Changes
This policy may be updated to reflect legal, technical or organisational developments. The effective date of the current version appears at the top of this page.
11. Contact and complaint
For any question, write to info@autoroute61.com.
If you believe that the processing of your data does not comply with the GDPR, you have the right to lodge a complaint with the competent supervisory authority :