Data Processing Agreement

Last update: June 14, 2026

This document describes the basic data processing rules for business customers using TachoDDD to upload DDD files containing driver data.

1. Parties and roles

The business customer uploading DDD files of its drivers or vehicles is the controller of driver, vehicle, and DDD-file data.

Madiakom Andrzej Mulawa, ul. Łężyca-Inżynierska 14, 66-016 Zielona Góra, Poland, tax ID (NIP): 928-136-02-25, operator of TachoDDD, acts as processor for service delivery.

TachoDDD remains a separate controller for account handling, payments, security, contact, and settlements.

2. Purpose, scope, and duration

Processing is performed to analyze DDD files, generate reports and exports, keep analysis history, provide DDD Archive, handle the account, secure the service, and settle usage.

Customer instructions are expressed through service use, including upload, report selection, export, archiving, copy download, or deletion request.

The customer is responsible for lawful file submission, a valid legal basis, and information duties toward drivers or other persons whose data is present in the files.

3. Data categories and subprocessors

DDD files may contain driver data, driver card numbers, vehicle and tachograph data, activities, countries, driving, work, availability and rest periods, infringements, speed data where present, and technical file identifiers.

Subprocessors may cover hosting and infrastructure, email, payments, OAuth login, backups, system maintenance, technical monitoring, and settlement support.

DDD Archive storage should be processed in the EEA unless a future subprocesser arrangement is described before use for archive data.

4. Security, deletion, and contact

The operator applies technical and organizational measures such as access control, HTTPS in production, restricted administrative access, technical logs, backups, and service monitoring.

Deletion requests can be sent through the contact form or email. Some technical logs, settlement information, or legally justified data may remain for the periods described in the Terms and Privacy Policy.

Contact for data processing matters: Contact