Privacy Policy

Data we process

The information we process depends on your role and the ILAN services your company uses. The service is intended for approved business users, not children. Categories may include:

• Identity and business contact details, such as name, email, phone number, date of birth, company, position, and language.
• Account, approval, role, authentication, session, security, notification preference, and registered device or push-token information.
• Transport and business records, including loads, routes, addresses, vehicles, drivers, counterparties, statuses, notes, incidents, damages, blockades, marketplace activity, and support requests.
• Documents, photos, and file metadata uploaded for loads, companies, vehicles, damages, rules, news, or other authorized operational records.
• Authorized accountancy and transaction records, such as invoices, prices, payment status, and settlement information.
• Precise or approximate device location, including latitude and longitude.
• Location accuracy, speed, heading, altitude, and the time each point was recorded, when provided by the device.
• Technical and audit information needed to operate and secure the service, such as identifiers, timestamps, IP or request information, app version, errors, and actions taken in an account.

When driver location is collected

Location collection begins only after an authenticated driver selects an assigned load, sees the in-app disclosure, grants the required device permissions, and starts or resumes tracking.

• While the ILAN app is open, foreground location updates support live tracking.
• While an active tracking session is running, background location may continue when the app is in the background, the screen is locked, or the app is not in use, subject to device and operating-system limits.
• Drivers can see whether tracking is active and can stop the active session from the app. Device permissions can also be changed in system settings.

Purposes and legal bases

ILAN processes data to provide approved account access; perform transport and company contracts; manage loads, documents, communications, accountancy, support, and security; comply with legal duties; and establish, exercise, or defend legal claims. Depending on the activity, the legal basis is performance of a contract or steps requested before a contract, compliance with law, ILAN's or a transport party's legitimate interests in secure and effective logistics, or consent where the law requires it. Driver location is used only for active-load tracking, dispatch and operational visibility, delivery coordination, route progress, safety and incident support, and transport-related questions—not for an unrelated consumer-location service.

Who can access location data

Access is limited to authorized ILAN personnel and authorized customers, carriers, subcontractors, drivers, or other parties connected to the relevant work, according to account permissions and ownership filters. ILAN may use processors for hosting, databases and storage, malware scanning, email, push notifications, communications, monitoring, and technical support, under contracts and appropriate safeguards. Data may also be disclosed to professional advisers, insurers, auditors, or authorities where necessary or legally required. If data is processed outside the EEA, ILAN uses an approved transfer mechanism where required and may provide information about the relevant safeguards on request. Separately, ILAN public web tracking does not require an ILAN account: a visitor who enters the exact VIN can retrieve saved coordinates, timestamps, and route history for the most recent matching load. ILAN supplies VINs in private transport or order documents intended for contracted parties; recipients must not publish or forward them to unauthorized persons.

Retention and deletion

ILAN keeps personal data only as long as needed for account and transport operations, the applicable business relationship, statutory accounting or transport duties, security, safety, complaints, disputes, and legal claims. Retention depends on the record, the signed company or transport agreement, applicable limitation periods, and legal requirements; some records cannot be removed immediately. Account deletion removes or de-identifies account-linked data that ILAN no longer needs, while required contractual, accounting, audit, safety, fraud-prevention, or claim records are retained with restricted access until the relevant duty or period ends. Remaining data is then deleted or anonymized.

Security and responsible use

ILAN uses organizational and technical measures designed to protect personal data against unauthorized access, loss, alteration, or disclosure.

• Tracking uploads use authenticated, encrypted connections.
• Driver location is associated with the authenticated driver, tracking session, and active load.
• ILAN does not use authenticated driver tracking location for advertising or sell it for advertising purposes.

Your data protection rights

Depending on applicable law, you may exercise the following rights regarding your personal data:

• Request access to your personal data and a copy of it.
• Request correction of inaccurate or incomplete data.
• Request deletion where there is no valid basis to keep processing the data.
• Request restriction of processing in the circumstances provided by law.
• Object to processing based on legitimate interests where applicable.
• Request data portability for eligible data processed automatically on consent or contract.
• Withdraw consent at any time where processing relies on consent, without affecting earlier lawful processing.
• Submit a complaint to the Bulgarian Commission for Personal Data Protection, another competent supervisory authority, or a court.

Contact us

The controller is ILAN-TRANSPORT EOOD, UIC 175303912, Kliment Ohridski Str. 2, 2100 Elin Pelin, Bulgaria. Contact us if you have a privacy question, want to exercise a data protection right, need information about a driver tracking record, or want to delete or deactivate an account. We may need to verify your identity and authority before completing a request. Deactivation stops account access; deletion removes the app account and associated data except records ILAN must retain for legal, contractual, accounting, security, safety, or dispute purposes. We normally aim to complete a verified account request within 30 calendar days and will explain if the law permits or requires more time.

Email: [email protected]