PRIVACY POLICY
Effective from 12 August 2026.
This policy explains data processing in GREEKA63 TMS. For account, registration, billing and support data, the controller is LEANDROS VRIONIS PR GREEKA63 BEOGRAD, Delovi 96, 11231 Belgrade, Republic of Serbia, Tax ID 110310000, Registration No. 64800817, info@vrionis63.com (GREEKA63). When a customer company enters data about its drivers, employees or partners, that company normally acts as controller and GREEKA63 acts as processor for service delivery.
1. Data processed
Company and contact details; account identity, role and security data; transport orders, routes, locations, prices and invoices; bank and payment data; driver, passport, licence, vehicle, insurance, CMR and order documents uploaded by the company; and technical security and error logs.
2. Purposes and legal bases
Data is processed to register and perform the contract, provide and support the service, issue and collect invoices, meet legal duties, protect the system, prevent misuse and evidence business actions. The basis may be contract, legal obligation, legitimate interest or consent where specifically required.
3. Customer responsibility
A company entering another person's data must inform that person and secure an appropriate legal basis. GREEKA63 uses such data only to provide, maintain, secure and support the contracted service unless law requires otherwise.
4. Recipients
Data may be accessed by authorised customer users, authorised GREEKA63 personnel and essential providers, especially Google Workspace/Drive/Gmail and Vercel, or disclosed to authorities where legally required. Personal data is not sold or used for third-party advertising.
5. International transfers
Cloud providers may process data outside the user's country. Where applicable, transfers rely on an appropriate legal mechanism and provider contractual safeguards.
6. Retention and deletion
Registration requests are kept until a decision; rejected requests are deleted or anonymised within 90 days unless needed for a dispute or law. Active-company data is kept during the contract and operational data is deleted or anonymised within 90 days after termination and a reasonable export period, except legally required records.
Invoices are kept for the statutory period. Security logs are normally kept up to 12 months and residual backups up to 90 days after active deletion, unless an incident or law requires longer retention.
7. Security
We use company and role access controls, password protection, limited sessions and technical measures for data transmission and storage. Suspected incidents should be reported immediately.
8. Rights
Depending on applicable law, a person may request access, correction, deletion, restriction, portability or object by writing to info@vrionis63.com. Identity verification may be required. A complaint may be lodged with the Serbian Commissioner or another competent authority.
9. Cookies
Only necessary session cookies and local storage for language and user settings are used. Marketing cookies are not used without separate notice and appropriate consent.
10. Changes and contact
This policy may change due to new functions or law. The effective version date is shown on this page. Contact: info@vrionis63.com.