Haulio Privacy Policy

1. Who We Are

Haulio ApS ("Haulio", "we", "us") is the data controller for personal data processed through the Platform, unless stated otherwise. For questions about this policy or to exercise your data protection rights, contact contact@haulio.dk.

2. Personal Data We Collect

• Account and business data: name, job title, company name, business registration/VAT number, email, phone number, billing details.
• Platform activity data: Loads posted or bid on, messages exchanged between Dealers and Carriers, ratings, and transaction history.
• Driver and pickup/delivery contact data: names and phone numbers of individuals involved in vehicle handover, where provided by Carriers or Dealers.
• Payment data: bank/payment details, processed via our payment processor (Haulio does not store full card or bank credentials directly).
• Technical data: IP address, device/browser information, log data, and cookie identifiers (see our Cookie Policy).
• Vehicle condition documentation: photos and inspection notes uploaded for damage/condition reporting.

3. How We Use Personal Data and Legal Basis

• To provide the Platform and match Loads between Dealers and Carriers - performance of a contract (Art. 6(1)(b) GDPR).
• To verify business/carrier eligibility (licenses, insurance) - performance of a contract and legitimate interest in platform safety.
• To process payments and issue invoices - performance of a contract and legal obligation (accounting/tax law).
• To communicate service updates, respond to support requests, and handle complaints - legitimate interest and contract performance.
• To send marketing communications (e.g. new features, offers) - consent, or legitimate interest for existing business customers, with an opt-out in every message.
• To detect fraud, misuse, and enforce our Terms - legitimate interest.
• To improve the Platform (analytics, product development) - legitimate interest, or consent where cookies/tracking require it.
• To comply with legal obligations (tax, transport regulation, law enforcement requests) - legal obligation.

4. Sharing of Personal Data

We share personal data with:

• The other party to a Load (e.g. a Carrier receives Dealer pickup contact details necessary to perform transport, and vice versa).
• Service providers/processors acting on our instructions, including hosting and infrastructure providers, our payment processor, accounting/invoicing software, CRM software, and email/workspace providers. These providers are bound by data processing agreements and may only use data as instructed by Haulio.
• Professional advisors (legal, accounting) where necessary.
• Authorities, where required by law or to protect our legal rights.
• A buyer or successor in the event of a merger, acquisition, or asset sale, subject to equivalent protections.

We do not sell personal data to third parties.

5. International Transfers

Where personal data is transferred outside the EU/EEA (for example, to a service provider with servers or support functions outside the EEA), we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, or transfers to countries covered by an adequacy decision.

6. Data Retention

We retain personal data for as long as necessary to provide the Platform and fulfil the purposes described above, including to meet legal, accounting, and tax retention obligations (typically 5 years for accounting records under Danish law), after which data is deleted or anonymised, unless a longer period is required to resolve disputes or enforce agreements.

7. Your Rights

Subject to conditions under GDPR, you have the right to: access your personal data; request correction of inaccurate data; request erasure; restrict or object to certain processing; request data portability; and withdraw consent at any time where processing is based on consent. You also have the right to lodge a complaint with a supervisory authority, in Denmark the Datatilsynet (www.datatilsynet.dk).

To exercise these rights, contact contact@haulio.dk. We will respond within the timeframes required by GDPR.

8. Security

We apply appropriate technical and organisational measures (access controls, encryption in transit, and restricted internal access) to protect personal data against unauthorised access, loss, or misuse. No system is completely secure, and we encourage Users to safeguard their own account credentials.

9. Cookies and Tracking

The Platform uses cookies and similar technologies. Details of the categories used and how to manage your preferences are set out in our separate Cookie Policy.

10. Children

The Platform is intended for business use and is not directed at, or intended for use by, individuals under 18.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or in-platform notice. The "Effective date" above reflects the latest version.

12. Contact

Haulio ApS, Færøvej 49, 2800 Kongens Lyngby, Denmark. CVR: 46627768. Privacy contact: contact@haulio.dk.