Status: October 2026
This English version is provided for convenience only. In case of any discrepancy, the German version shall prevail and is legally binding.
The use of our website is generally possible without providing any personal data. However, if a data subject wishes to use special services of our website (such as registering or using the SaaS logbook), the processing of personal data becomes necessary. If the processing of personal data is necessary and there is no statutory basis for such processing, we generally obtain the consent of the data subject.
According to Art. 4 No. 1 GDPR, your personal data includes all information that relates or can be related to your person.
The name and address of the person responsible for data collection and for complaints regarding the processing of personal data can be found in the Imprint.
bordero.de collects, processes, and uses your personal data primarily for the performance of a contract or to take steps prior to entering into a contract based on Art. 6 Abs. 1 lit. b GDPR. This includes in particular:
Furthermore, we process data to fulfill fiscal or other legal obligations based on Art. 6 Abs. 1 lit. c GDPR.
If the processing is necessary to safeguard our legitimate interests (e.g., IT security, error tracking, reach measurement) and your interests do not override ours, the legal basis is Art. 6 Abs. 1 lit. f GDPR.
When you access our website, our infrastructure host automatically collects and stores information that your browser transmits to us in server log files. This includes:
This data is technically necessary to display our website to you in a stable and secure manner. The processing is carried out based on Art. 6 Abs. 1 lit. f GDPR (legitimate interest in the secure operation of the platform). We have concluded a data processing agreement (DPA) with our server host.
Your personal data is only passed on to third parties where necessary to operate the services or to process your subscription:
The disclosure is based on Art. 6(1)(b) GDPR (performance of a contract) or Art. 6(1)(f) GDPR. Where data is transferred to the USA, this is based on EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
When you use the bordero app we process the following data to provide the logbook (Art. 6(1)(b) GDPR):
Location: The app only requests the location permission (ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION) when you use the "use location via GPS" function or the trip detection described below. Without trip detection your location is not collected in the background and not tracked continuously; only the location you choose to save is stored.
Automatic trip detection (optional): If you switch on "Detect trips automatically" in the settings (off by default), the app uses your position and speed during a running shift to ask you when an arrival or departure was forgotten. For this a foreground service (type "location") runs with a permanent notification that also shows your work time. The app asks for the location and notification permissions; it does not need background location access (ACCESS_BACKGROUND_LOCATION). Position and speed are evaluated on your device only, held in memory for at most 45 minutes and are not sent to us or to third parties. Only the switch itself and the time the vehicle was moving during a shift (per shift, without any place information) are stored locally. The legal basis is your consent (Art. 6(1)(a) GDPR) by switching the function on and granting the permissions; you can withdraw it at any time by switching the function off or in the Android settings. The service ends with the shift.
Camera and images: The app only accesses files or the camera when you add an image yourself.
Visibility: Locations and location comments you create may be visible to other users. You can change this in the app under Settings → Privacy. Vehicles, shifts, tours and breaks are only visible to you.
The app contains no advertising and no tracking SDKs for reach measurement. In case of technical errors on our server, Sentry (see below) may be used.
You stay in control of your data at all times. Detailed instructions: Delete account & data.
Download your data (Art. 15, 20 GDPR): In the app under Settings → Privacy → "Download user data". We compile all data stored about you into a ZIP archive; once it is ready it can be downloaded. Alternatively, send an email from your account address to hallo@bordero.de.
Delete your account and data (Art. 17 GDPR): In the app under Settings → Privacy → "Delete account". This immediately and irreversibly deletes your account, all logbook data, uploaded images and login tokens. With "Delete user data" you can reset only your logbook data and keep the account.
Without access to the app you can request deletion by email from your account address to hallo@bordero.de. We process the request within 30 days.
Subscription: A premium subscription via Google Play is not ended automatically by deleting the account and must be cancelled separately in Google Play.
This website and the bordero app do not set cookies. The app only stores a login token locally on your device to keep you signed in. No reach measurement via cookies takes place.
If you open links from our emails (e.g. email confirmation or password reset) or sign in with Google in the browser, our server may set technically necessary cookies:
These cookies are required for these processes to run securely and are set on the basis of Art. 6(1)(f) GDPR (legitimate interest in providing the service securely) and Section 25(2) No. 2 TDDDG; no consent is required for them. You can delete or block cookies in your browser at any time.
For the statistical evaluation of visitor traffic, we use the privacy-friendly analysis service Plausible Analytics (Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia).
Plausible is configured to operate entirely without cookies and does not store any personal data. IP addresses are immediately anonymized and hashed in isolation. It is impossible to draw conclusions about individual visitors or track users across devices at any time. The processing is carried out based on our legitimate interest in the demand-driven design and optimization of our website pursuant to Art. 6 Abs. 1 lit. f GDPR.
To ensure the stability and technical reliability of our application, we use the error monitoring service Sentry (Functional Software Inc., 45 Fremont Street, San Francisco, CA 94105, USA).
If a technical code error occurs in the application, selected metadata (e.g., browser type, operating system, time of the error, and the affected section of code) is transmitted to Sentry to analyze the issue. IP addresses are truncated before evaluation and storage. The usage is based on our legitimate interest in a secure, stable, and error-free platform (Art. 6 Abs. 1 lit. f GDPR). We have concluded a data processing agreement (DPA) including EU Standard Contractual Clauses with Sentry.
Your personal data will only be stored for as long as is necessary to fulfill the stated purposes or as prescribed by statutory (in particular fiscal and commercial) retention periods.
We store account and logbook data until you delete your account. Server log files are deleted automatically after a short time. After you delete your account, data may remain in backups for a short time and is overwritten there in the regular cycle. Billing data held by Google is subject to their statutory retention periods.
Within the scope of legal regulations, you have the following rights at any time regarding your personal data:
You can access/export and delete your data directly in the app (see Download Your Data and Delete Your Account). For all other rights, contact the responsible body named in the imprint.
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR. The locally competent supervisory authority for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
Email: poststelle@ldi.nrw.de