Platform Privacy Notice
Last updated · 16 October 2026
This notice explains how personal data is handled on the Veturo fleet platform and in the Veturo app. It is written for drivers whose vehicles carry a Veturo device and for people who sign in to the platform. The veturo.io website itself is covered by the separate Privacy Policy.
1. Who is responsible
Vehicles are tracked at the decision of the fleet operator, usually your employer, which is the controller of the tracking data. Veturo (Gradac Trade Mirjana Plazinić PR, Vukašina Ignjatovića 14/2, 32000 Čačak, Serbia) operates the platform as a processor on the operator's behalf, under a data processing agreement (DPA).
2. If you drive a tracked vehicle
The device in the vehicle records position, routes, speed, direction and ignition status. On vehicles on Pro and Fleet it also records data from the vehicle itself: fuel level, the dashboard odometer, engine RPM and temperature, engine hours, door status and whether the driver's seat belt is fastened. The platform links this data to the vehicle and, through it, to the person driving it.
Your employer decides why and for how long vehicles are tracked and must inform you before tracking begins. Veturo provides every customer with an employee notification template (GDPR / ZZPL) as part of onboarding.
To exercise your rights over tracking data (access, correction, deletion, objection) contact your employer first: Veturo may not release or change a customer's data without the customer's instruction, but we assist with every such request.
3. If you have a platform account
To sign you in and keep the platform secure, we process your name, work email and technical sign-in records such as time and IP address. Account data is kept for as long as the account exists.
4. The phone app
The Veturo app for iPhone and Android uses Google Firebase for push notifications (the device token is stored with your account) and for crash reports, which help us fix errors. App versions up to 1.0.4 also send usage statistics (Firebase Analytics); version 1.0.5 removes them, and a phone stops sending them once the app is updated.
5. Who else processes the data
We run the platform with the following sub-processors, each only for the job named and under a data processing agreement:
Hetzner Online GmbH (Germany): servers for the platform and this website, in Nuremberg (Germany) and Helsinki (Finland).
Backblaze, Inc. (USA): encrypted backups, stored in its EU Central region (Amsterdam).
Mapbox, Inc. (USA): the maps in the app.
LocationIQ (Unwired Labs): backup maps and street addresses.
Resend (Plus Five Five, Inc., USA): e-mail, sent from its region in Ireland.
1NCE GmbH (Germany): SIM cards and mobile data in the devices.
Google Firebase (Google Ireland Limited and Google LLC): push notifications and crash reports in the phone app.
OpenStreetMap Foundation (United Kingdom): address search in the Places editor.
Where data leaves the EU/EEA or reaches a US parent company (Mapbox, LocationIQ, Google, Backblaze, Resend), the transfer takes place under the European Commission's standard contractual clauses (SCC).
Veturo itself operates from Serbia, which is outside the EU/EEA. For customers in the EU/EEA, the processing therefore takes place under the standard contractual clauses (SCC), signed together with the service agreement.
6. What the platform does not do
There is no advertising and no profiling on the platform, and we do not sell data. Location data is used only to provide the contracted fleet tracking service.
7. Retention
How long tracking history is kept depends on the plan agreed with each customer. When the service agreement ends, data is returned or deleted as described in the DPA.
8. Security
Data travels encrypted between our platform and your browser or app. Access is limited to users authorised by the customer and to Veturo staff who need it to provide support.
9. Rights and complaints
The GDPR and local data protection law (the ZZPL in Serbia, ZVOP-2 in Slovenia) give you the right of access, correction, deletion, restriction, portability and objection.
You can also complain to a supervisory authority: in Serbia the Commissioner for Information of Public Importance and Personal Data Protection (Poverenik), in Slovenia the Information Commissioner (Informacijski pooblaščenec), or your local data protection authority. Questions for Veturo: info@veturo.io.