1. Purpose & Scope

This notice (“Privacy Notice”) explains how and why sennder Technologies GmbH and its affiliated sennder companies (together “sennder” or “we”) handle personal data when you use our websites, platforms, apps, or freight forwarding services.

We wrote this Privacy Notice for real people who book, move, or deliver loads – so it’s as short on legalese as possible and puts a focus on clarity. Think of this document as the tracking system for your personal data – reading it will let know where, how, and why your personal data is used and help you understand your privacy rights under the GDPR, the UK GDPR, and the KVKK (Turkish Personal Data Protection Law, Law No. 6698).

If you only read one line: We use your personal data to plan, execute, track, and settle road freight safely and efficiently. We value your trust and protect your personal data with state-of-the-art security measures. If you have any questions or concerns, please contact us at privacy@sennder.com.

2. Contact Details

2.1. Controller

The responsible controller for your personal data is:

To coordinate logistics across country borders, we process your personal data jointly within the sennder group. The sennder group consists of sennder Technologies GmbH and all its affiliated sennder companies. You can find the list of all local entities at sennder.com/contact. The sennder group has agreed internally that sennder Technologies GmbH serves as your main point-of-contact for requests and the information obligations under data protection laws. Nevertheless, you can assert your rights against each individual controller.

2.2. Data Protection Officer

We’ve appointed an external data protection officer – like a safety inspector, but for your data. You can reach the data protection officer at the address below or via a coordinator at privacy@sennder.com.

3. How and why do we use your Personal Data?

3.1. Visitors of our Online Services

When you access our website, one of our portals, apps, or other digital services provided by sennder (“Online Services”), we store analytical data about you in log files on our server.

3.2. Shippers/Customers

If you place transport orders with us as a shipper or otherwise trust us to deliver shipments for you as one of our customers, we store some limited personal data of the contact person(s) that reach(es) out to us.

3.3. Carriers

If you carry out transport orders for us as a carrier, we store your company information, documents received during the vetting process, and some limited personal data of the contact person(s) that reach(es) out to us.

3.4. Truck Drivers

If you drive a truck for one of our carriers who carries out transport orders for sennder, we store some limited personal data of you as the truck driver.

3.5. Prospective Shippers/Carriers

If you reach out to us or we reach out to you as a potential future business partner (shipper or carrier), we store some limited personal data for communication purposes. You can opt-out of our marketing communication at any time by following the instructions in the email sent to you.

3.6. Vendors/Suppliers

If we procure services from you or you offer us services as a vendor/supplier, we store some limited personal data of the contact person(s) that reach(es) out to us.

3.7. Participants of Calls/Videoconferencing

If you participate in a phone call or videoconference hosted by us (e.g., a virtual meeting via Microsoft Teams or Zoom), we store personal data of the participants and in some cases the content of the meeting.

3.8. Visitors of our Social Media Profiles

We maintain profiles on various social media platforms to communicate with users, share information about our services, and engage with the logistics community. When you visit or interact with our social media profiles, personal data about you may be processed both by us and the respective social media platform.

We currently maintain profiles on the following platforms:

Facebook

• Service Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Irland

• Privacy Policy: https://www.facebook.com/privacy/policy/ 

Instagram

• Service Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Irland

• Privacy Policy: https://privacycenter.instagram.com/policy/

LinkedIn

• Service Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

• Privacy Policy: https://www.linkedin.com/legal/privacy-policy

YouTube

• Service Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

• Privacy Policy: https://policies.google.com/privacy

TikTok

• Service Provider: TikTok Technology Limited, The Sorting Office, Ropemaker Place, Dublin 2, D02 HD23, Ireland

• Privacy Policy: https://www.tiktok.com/legal/page/eea/privacy-policy/en

Medium

• Service Provider: A Medium Corporation, 548 Market St, PMB 42061, San Francisco, CA 94104, United States

• Privacy Policy: https://policy.medium.com/medium-privacy-policy-f03bf92035c9

X (formerly Twitter)

• Service Provider: X Internet Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland

• Privacy Policy: https://x.com/en/privacy

4. Information on our Data Processing

4.1. With whom do we share your Personal Data?

We share your personal data:

• within the sennder group. This allows us to operate efficiently as one group serving customers across borders.

• with third-party processors. We engage carefully selected third-party processors who process data on our behalf, such as

  • cloud providers that store data for us in secure data centers (e.g., AWS),

  • IT and email services that help us to deliver our digital services and electronic communication (e.g., Microsoft),

  • data visualization and business intelligence services that ensure we have full visibility to optimize routes and provide you with the best service possible,

  • payment providers that process payments for us,

  • analytics services that help us understand how we can improve our digital services, and

  • security and compliance partners that screen for fraud and sanctions to ensure our services are safe, secure, and compliant.

• with our logistics partners. As a freight forwarder, we share your personal data with our logistics partners if needed to ensure smooth pickup, transit, and delivery of shipments. For example, we may share your personal data (in most cases your name and contact details) with the operator of the pick-up or delivery facility or with vendors for additional services you’ve selected, such as customs brokers, trailer cleaning services, or warehouses, and we share data with your shipper or carrier to give them visibility of the current shipment status.

• with external advisors. We share your personal data with our external advisors subject to professional confidentiality (e.g., auditors, banks, lawyers, tax advisors) or other confidentiality obligations if required to obtain advice, assess creditworthiness, ensure legal compliance, or exercise or defend against legal claims.

• with public authorities or courts. We share your personal data with public bodies (e.g., tax authorities) if we are obliged to do so by law or court order.

All our third-party processors are bound by data processing agreements to ensure they maintain appropriate security measures and process your data only according to our instructions.

In the event of a joint venture or merger, acquisition, or sale of the company, your personal data may be shared with the new company, our new business partners or owners, or their advisors. We will ensure your data remains protected and you keep your rights under data protection law.

4.2. Is your Personal Data transferred internationally?

Yes. Most of our data is stored in the EU. However, just like we coordinate shipments across borders, some of your personal data may be transferred to countries outside your jurisdiction, including to other sennder group entities in countries outside the EU/EEA (including the UK and Türkiye), and to third-party processors whose servers are located outside the EU/EEA (primarily in the USA).

In compliance with applicable data protection law, we only transfer your personal data internationally when appropriate safeguards are in place to ensure that your data is protected with at least the same level of protection as under the GDPR. Such transfers are therefore only made if at least one of the following conditions applies:

• The competent authority (e.g., for the EU the European Commission) has decided that the country in question has an adequate level of data protection.

• We have concluded standard contractual clauses issued by the competent authority (e.g., for the EU the European Commission) with the recipient of the data that ensure an adequate level of data protection.

You can request more information about the safeguards we apply with each third-party processor by contacting us at privacy@sennder.com.

4.3. How long do we store your Personal Data?

We only keep your personal data for as long as necessary to fulfill the purposes set out in this Privacy Notice. We regularly archive and delete data in line with our data retention policy to ensure we don’t keep your data longer than necessary.

Our retention periods depend on several factors, including legal and regulatory requirements that oblige us to keep certain data for specific periods under tax, accounting, transport, or other applicable laws. These requirements are often based on local law, which is why our retention periods vary from country to country. We also consider limitation periods for civil liability claims, as we may need to retain certain data to defend us against potential legal claims. Additionally, we keep data stored if it is reasonably required for our business needs or to provide you with the best services possible.

In practice, this means that your data will be stored by us while a shipment is ongoing and for a period afterward to handle invoicing and any claims. Account and contract information is kept for the duration of our business relationship and for a cooling-off period afterward, usually between one or two years. Financial and payment records as well as business communication are retained according to applicable accounting and tax law requirements, which typically range from six to ten years. Operational data is retained for shorter periods once the transport is completed, with the exception of certain proof-of-delivery or customs documents that we need to store for longer periods by law.

Where possible, we use automated systems to delete or anonymize data when retention periods expire. You can contact us at any time to ask about the specific retention period for your data or to request deletion of your data where legally permissible (see “Your Rights”).

4.4. Do we use your Personal Data for automated decision-making?

No. We don’t use your personal data for automated decision-making, including profiling, that produces legal effects or similarly significantly affects you. While we leverage technology to make logistics processes more efficient, meaningful human oversight is always involved in any legal decision.

4.5.  Are you required to provide us with your Personal Data?

Providing certain personal data is necessary if you want to use our digital freight forwarding services. Most personal data we collect is required to fulfill our contract with you or is mandated by law. Without this information (such as identity details, contact information, bank account, tax ID, etc.), we wouldn’t be able to coordinate transports or process payments.

You can choose whether to provide other information on a voluntary basis, such as additional contact persons, preferences for communication methods, or feedback about our services. While this information helps us improve your experience, you can decline to provide it without affecting your ability to use our services.

5. Security

We implement robust technical and organizational security measures designed to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Just as we ensure your freight reaches its destination safely and securely, we apply the same diligence to safeguarding your personal information throughout its digital journey.

Our security framework includes encryption of personal data both in transit using industry-standard protocols (such as TLS/SSL) and at rest using advanced encryption standards. We maintain strict access controls, ensuring only authorized personnel can access personal data. Our systems are protected by firewalls, intrusion detection systems, and other network security measures that monitor for suspicious activity around the clock. We also conduct periodic security audits to identify and address potential security risks, much like routine vehicle inspections ensure safe and secure operations.

While we implement industry-standard security measures, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of information transmitted to or stored on our systems. However, we always strive to apply the best security procedures and technical safeguards to protect against unauthorized access, consistent with applicable data protection laws and best practices. We continuously monitor and update our security measures to address evolving threats and maintain the confidentiality, integrity, and availability of your personal data.

6. Your Rights

Under the data protection law applicable to you (the GDPR, the UK GDPR, or the KVKK), you have certain data protection rights that you can assert at any time, such as:

• Right to withdraw consent: If we process your personal data based on your consent, you have the right to withdraw such consent at any time. This does not affect the lawfulness of the processing before withdrawal.

• Right to access: You have the right to request a copy of your personal data.

• Right to rectification: You can request corrections to inaccurate personal data. 

• Right to erasure: You can request deletion of your data under certain circumstances.

• Right to restrict processing: You can request limitations on how we use your data.

• Right to data portability: You may request to receive your data in a structured format to transmit your data to another controller.

• Right to object processing: You can object to our processing of your data in certain situations.

• Right to lodge a complaint: You also have the right to lodge a complaint with a supervisory data protection authority at any time. In the EU, you can find the competent supervisory data protection authority at this link. For sennder Technologies GmbH, the competent supervisory data protection authority is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit). In the UK, you may contact the Information Commissioner’s Office (ICO). In Türkiye, you can complain to the Kişisel Verileri Koruma Kurumu (KVKK).

You can exercise your rights by submitting a request directlyvia this form or contacting us at privacy@sennder.com or at one of the addresses above.

7. Updates of this Privacy Notice

We may update this Privacy Notice to reflect changes in legal requirements and/or our data processing practices. We’ll always share the latest version on our website.