This agreement forms part of the Terms of Service between you and Tananaev Solutions ("we", "us"), where we process personal data on your behalf in providing hosted services. It takes priority for that processing. Contact: support@traccar.org.
You act as controller, or as a processor authorized by your controller; we act as your processor or subprocessor. You determine the lawful purposes of processing and provide required notices and a lawful basis for collecting and using the data.
We collect, store, organize, retrieve, transmit, and delete data to provide hosting, tracking, notifications, and support for the service period and until return or deletion. Data may include account and contact details, device identifiers, locations, timestamps, telemetry, and related records concerning your users, drivers, employees, and other people you lawfully track.
We process data only on your documented instructions, including this agreement, your service settings, and written requests, including instructions concerning transfers. If EU or Member State law requires other processing, we will inform you beforehand unless legally prohibited. We will immediately inform you if we believe an instruction infringes applicable data protection law.
This agreement does not cover information we process independently for our own billing or administration, described in our Privacy Policy.
We will restrict access to authorized personnel bound by confidentiality and maintain measures appropriate to the risks under Article 32 GDPR, including access controls, system security updates, redundant database storage, and regular assessment of security measures. Backups are not included unless agreed in writing; redundancy does not protect against every deletion or corruption. This does not limit legally required security or recovery measures.
We will notify you without undue delay after becoming aware of a personal data breach, provide available information about its nature, consequences, and response, and provide updates as information becomes available.
Taking account of the processing and information available to us, we will assist you with data-subject requests, security obligations, breach notifications, impact assessments, and consultations with supervisory authorities. We will forward requests concerning your data and will not respond on your behalf unless instructed or legally required.
You authorize the following subprocessors for the applicable service and enabled features:
| Provider | Purpose | Processing locations |
|---|---|---|
| Hetzner | Tracking Server — dedicated server | Germany and Finland |
| DigitalOcean | Tracking Account — user account on a shared server | United States |
| Amazon Web Services (Amazon SES) | Email notifications | United States (Oregon) |
| Google (Firebase Cloud Messaging) | Push notifications and device commands | United States and other countries where Google processes Firebase data |
We will give advance written notice of subprocessor additions or replacements and a reasonable opportunity to object on data protection grounds before they receive your data. If we cannot resolve an objection, you may terminate the affected service. Refunds follow your order and applicable law.
We will bind subprocessors to equivalent data protection obligations and remain responsible for their performance. International transfers, including access from another country, require a valid legal basis and applicable safeguards. Where required, appropriate transfer clauses and supplementary measures must be in place before transfer. This agreement alone does not supply those safeguards.
By default, location records are retained for up to one year from the date of each record, unless a different retention period is agreed. Cancellation does not restart that period.
When a Tracking Account subscription ends, the account is disabled. Unless you request earlier return or deletion, you instruct us to continue storing its location records under the retention rule above. Disabled account records remain until you request deletion or we remove them during routine cleanup, subject to applicable legal retention limits. This continued storage remains governed by this agreement. For Tracking Server subscriptions, you instruct us to delete hosted data when the service ends unless you request its return before deletion.
You may request export or deletion at any time by contacting support and may change your instructions before deletion. If you request return before deletion, we will complete it first. When deleting data, we will also delete remaining copies unless EU or Member State law requires retention. Deleted data may not be recoverable. This agreement continues to protect data until return or deletion is complete.
We will provide information necessary to demonstrate compliance and allow and contribute to audits, including inspections, by you or your appointed auditor. We will agree reasonable arrangements that protect other customers' data without preventing legally required verification.
Changes follow the notice provisions in the Terms and require your agreement where applicable law requires it. Nothing in this agreement limits mandatory data protection rights or obligations.