Privacy Policy

1.Controller

Amstel Delta Services B.V. is the controller for the processing of personal data described in this policy.

• Amstel Delta Services B.V., Zilverplevierstraat 45, 1025XN Amsterdam, the Netherlands
• Chamber of Commerce number: 42059611 — VAT number: NL869523235B01
• Telephone: +31 6 1721 7734 — E-mail: info@adsbv.nl
• Privacy questions can be sent to info@adsbv.nl with the subject 'Privacy'.

2.Personal data we process

We only process data that is necessary for our services. Depending on your role (passenger, contact person, client, applicant or website visitor), this concerns the following categories.

• Contact and identification data: name, company name, job title, telephone number, e-mail address.
• Ride and transport data: pick-up and delivery addresses, date and time, number of passengers, transport type, special instructions, nature of the cargo.
• Location and vehicle data: GPS location of the vehicle during a ride, route, mileage, driving and rest times of drivers.
• Status and documentation data: ride statuses, arrival times, digital delivery confirmations, signatures and, where applicable, photos of cargo or delivery location.
• Billing and payment data: invoicing address, VAT number, bank account number, reference numbers and payment status.
• Correspondence: messages sent via the contact form, e-mail, WhatsApp or telephone, including notes needed to handle your request.
• Website data: IP address (truncated where possible), device type, browser type, pages visited and cookie preference.
• Application data: CV, motivation, work experience, driving licence and driver card details (only where legally required).

3.Purposes and legal bases

We process personal data only for clearly defined purposes and always on a legal basis under the GDPR.

• Performance of the contract: planning, carrying out, following up and invoicing rides and transports (Article 6(1)(b) GDPR).
• Legal obligation: tax retention obligations, driving and rest time registration, licensing requirements and requests from competent authorities (Article 6(1)(c) GDPR).
• Legitimate interest: quality assurance, complaint handling, fraud and damage prevention, security of vehicles and systems, and operational optimisation based on aggregated ride data (Article 6(1)(f) GDPR).
• Consent: placing non-essential cookies, sending commercial newsletters and retaining application data after a procedure has ended (Article 6(1)(a) GDPR). You may withdraw consent at any time.

4.Location data and the ADS Driver app

Our driver application ADS Driver processes vehicle location data only during an active shift or ride, in order to provide live arrival information, accurate ride registration and digital documentation of loading and unloading.

Location data is linked to the vehicle and the ride, not to the driver's private life outside working hours. No location is recorded outside of duty.

Clients only see data relating to their own rides, such as status, estimated time of arrival and delivery confirmation.

We do not use automated decision-making or profiling with legal effects for data subjects.

5.Camera surveillance and vehicle security

Where cameras or dashcams are present in a vehicle, they are used solely for the safety of passengers, drivers and cargo and to establish the facts in the event of an incident. Footage is retained for a limited period and reviewed only in the event of a specific incident or at the request of the police or an insurer.

6.Recipients and processors

We never sell your data. We share data only where necessary for our services or where legally required.

• Drivers and engaged partner carriers or subcontractors, solely for the ride concerned.
• IT and hosting providers, planning software, communication services and our back-end provider for the website and applications.
• Bookkeeper, accountant and debt collection partner for invoicing and administration.
• Insurers, loss adjusters and legal advisers in the event of damage or disputes.
• Government bodies, police or supervisory authorities where we are legally obliged to do so.
• We conclude a data processing agreement with every party that processes personal data on our behalf.

7.Transfers outside the European Economic Area

We prefer to process data within the EEA. Where a supplier processes data outside the EEA, we ensure an adequate level of protection through an adequacy decision of the European Commission or the EU Standard Contractual Clauses, supplemented by additional technical and organisational measures.

8.Retention periods

We do not retain personal data longer than necessary for the purposes for which it was collected.

• Ride and transport data: up to 24 months after performance, for complaint handling and quality assurance.
• Billing and administrative data: 7 years, based on the Dutch statutory tax retention obligation.
• Contact form and other correspondence: up to 24 months after the last contact.
• Ride-level location data: 12 months by default, unless longer retention is needed for an incident or dispute.
• Camera footage: a maximum of 4 weeks, unless retained for an ongoing incident.
• Application data: 4 weeks after the procedure ends, or 12 months with your consent.

9.Security of your data

We take appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access.

• Encrypted connections (TLS) for the website, apps and API integrations.
• Role-based access on a need-to-know basis, with personal accounts and strong authentication.
• Logging and monitoring of access to systems containing ride and customer data.
• Regular back-ups and recovery procedures.
• Instructions and confidentiality obligations for drivers and staff.
• An internal procedure for assessing and reporting data breaches; serious breaches are reported to the Dutch Data Protection Authority within 72 hours and, where required, to the data subjects.

10.Your rights

Under the GDPR you have the following rights. We respond to your request within one month; for complex requests this period may be extended by two months, in which case we will inform you.

• The right of access to the personal data we process about you.
• The right to rectification of incorrect or incomplete data.
• The right to erasure ('right to be forgotten'), insofar as no statutory retention obligation applies.
• The right to restriction of processing.
• The right to data portability in a commonly used file format.
• The right to object to processing based on a legitimate interest.
• The right to withdraw consent at any time, without affecting the lawfulness of prior processing.

11.Submitting a request and complaints

You can submit a request via info@adsbv.nl or by telephone on +31 6 1721 7734. To protect your data we may ask you to verify your identity.

If you are not satisfied with how we handle your request, we would like to hear from you first. You also always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), PO Box 93374, 2509 AJ The Hague (autoriteitpersoonsgegevens.nl).

12.Cookies

Our website uses cookies. Which cookies these are, what they are used for and how to change your choice is explained in our cookie policy.

13.Changes to this privacy policy

We may amend this privacy policy where our services, systems or applicable legislation give cause to do so. The current version is always available at adsbv.nl, stating the date of the last change.