Privacy Information for Truck Drivers

Your name and mobile number, and the registration plates of your truck and trailer, were entered into this portal by the company that ordered the pick-up of a container. We received them from that company — not from you. This page tells you what happens to them, as Art. 14 GDPR requires.

Who is responsible

InterRail Europe GmbH, An der Mainkur 9a, 60386 Frankfurt am Main, Germany, represented by its managing directors Igor Maiorov and Birgit Dehner.
Contact: pickup@interrail-europe.de
Data protection officer: Dragon Data Solutions GmbH, dsb@dragondata.de

What we hold about you

Your name, your phone number, the truck registration plate and the trailer registration plate — together with the container you are collecting and the date of collection. Nothing else. We do not hold your licence details, your employer, your location or any record of earlier journeys.

Why, and on what legal basis

The terminal may only release a container to an identified driver. Your details are used to announce you to the terminal and to verify the handover. The legal basis is Art. 6 (1) (f) GDPR: our legitimate interest, and that of our customer and of the terminal operator, in a secure and verifiable handover of goods. Where customs formalities require it, Art. 6 (1) (c) GDPR applies in addition.

Who receives it

• the container operations team at InterRail Europe GmbH;
• InterRail-Polcont Sp. z o.o., ul. Wilcza 33 lok. 3, 00-544 Warsaw, Poland, which handles the release at the Malaszewicze terminal and announces you to the terminal operator. It decides on its own responsibility what it has to report there, and is therefore an independent controller, not a processor acting for us;
• the company that ordered the pick-up, which receives a copy of its own request;
• Microsoft Ireland Operations Ltd., which carries the e-mail containing the request for us as a processor under Art. 28 GDPR;
• Hetzner Online GmbH, Germany, which runs the computers this portal and its database sit on, strictly on our instructions;
• public authorities, where we are legally obliged to disclose data.

InterRail Europe, InterRail-Polcont and the terminal operator are established in the EU. The company that ordered the pick-up may be established outside the EU. The e-mail carrying your data is handled by Microsoft, which may process it outside the EU; that is covered by the EU-US Data Privacy Framework and EU standard contractual clauses.

What InterRail-Polcont does with your data

InterRail-Polcont receives your name, phone number and vehicle registration details from InterRail Europe GmbH. It processes these data as an independent controller for the purpose of announcing you to the Malaszewicze terminal and arranging the release of the container. The legal basis is Art. 6 (1) (f) GDPR, namely its legitimate interest in carrying out the terminal handling it has been asked to perform. Where required by law, Art. 6 (1) (c) GDPR may also apply.

InterRail-Polcont shares the necessary data with the terminal operator and, where required by applicable law, with competent public authorities.

InterRail-Polcont retains your personal data for at least five years and deletes them once they are no longer required for the purposes for which they were processed and no statutory retention obligation applies.

Where applicable, you have the right to request access to your personal data, rectification or erasure, restriction of processing and to object to processing based on legitimate interests. You also have the right to lodge a complaint with a competent supervisory authority. In Poland, the competent supervisory authority is the President of the Personal Data Protection Office (UODO).

For questions concerning the processing of your personal data by InterRail-Polcont, please contact: rodo@polcont.com.pl

InterRail-Polcont has appointed a data protection officer: Dariusz Pawluczuk. The address above reaches him directly.

How long it is kept

In this portal, normally for seconds: as soon as the request has been sent to the people who have to act on it, your name, your phone number and the vehicle plates are erased from our database. If a technical fault delays that message, they are erased within seven days at the latest. What remains is the e-mail correspondence about that one pick-up, which is kept like any other business correspondence.

Your rights

You may ask us for access to the data we hold about you (Art. 15 GDPR), for its rectification (Art. 16) or erasure (Art. 17), for restriction of processing (Art. 18), and you may object to processing based on our legitimate interest (Art. 21). Write to pickup@interrail-europe.de.

You may also complain to a supervisory authority. The one responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden, Germany.