{"id":3952,"date":"2025-04-10T14:53:22","date_gmt":"2025-04-10T14:53:22","guid":{"rendered":"https:\/\/lbase.software\/?p=3952"},"modified":"2025-09-15T13:22:20","modified_gmt":"2025-09-15T13:22:20","slug":"data-protection-in-transportation","status":"publish","type":"post","link":"https:\/\/lbase.software\/en\/datenschutz-im-transportwesen\/","title":{"rendered":"Data protection in transportation"},"content":{"rendered":"<div class=\"wp-block-cover alignfull\" style=\"min-height:33vw;aspect-ratio:unset;\"><span aria-hidden=\"true\" class=\"wp-block-cover__background has-contrast-background-color has-background-dim-40 has-background-dim\"><\/span><img loading=\"lazy\" decoding=\"async\" width=\"1536\" height=\"600\" src=\"https:\/\/lbase.software\/wp-content\/uploads\/Datenschutz_Blog_lbaseWsite_iSt_1483611710.jpg\" class=\"wp-block-cover__image-background wp-post-image\" alt=\"Datenschutz im Transport - lbase Axians Driver App\" data-object-fit=\"cover\" data-object-position=\"48% 52%\" style=\"object-position:48% 52%;\" srcset=\"https:\/\/lbase.software\/wp-content\/uploads\/Datenschutz_Blog_lbaseWsite_iSt_1483611710.jpg 1536w, https:\/\/lbase.software\/wp-content\/uploads\/Datenschutz_Blog_lbaseWsite_iSt_1483611710-300x117.jpg 300w, https:\/\/lbase.software\/wp-content\/uploads\/Datenschutz_Blog_lbaseWsite_iSt_1483611710-1024x400.jpg 1024w, https:\/\/lbase.software\/wp-content\/uploads\/Datenschutz_Blog_lbaseWsite_iSt_1483611710-768x300.jpg 768w, https:\/\/lbase.software\/wp-content\/uploads\/Datenschutz_Blog_lbaseWsite_iSt_1483611710-18x7.jpg 18w\" sizes=\"auto, (max-width: 1536px) 100vw, 1536px\" \/><div class=\"wp-block-cover__inner-container is-layout-flow wp-block-cover-is-layout-flow\"><h1 class=\"has-text-align-center has-link-color wp-elements-5c15f29beec0071bb8fddc48a7dd2909 wp-block-post-title has-text-color has-white-color\">Data protection in transportation<\/h1><\/div><\/div>\n\n\n\n<div class=\"wp-block-group alignfull has-global-padding is-layout-constrained wp-container-core-group-is-layout-e100ce2d wp-block-group-is-layout-constrained has-background\" style=\"margin-top:var(--wp--preset--spacing--80);margin-bottom:var(--wp--preset--spacing--80);background-image:url(&apos;https:\/\/lbase.software\/wp-content\/uploads\/Helix.png&apos;);background-position:0% 50%;background-repeat:no-repeat;background-size:contain;\">\n<div class=\"wp-block-group has-large-font-size has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<p><strong><strong><strong><strong>Data protection in transportation: Which guidelines must be observed?<\/strong><\/strong><\/strong><\/strong><\/p>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-19e250f3 wp-block-group-is-layout-constrained\">\n<p class=\"has-medium-font-size\">The legal basis for compliance with driving and rest times is clearly defined. Recording is an essential part of fulfilling and continuously improving working conditions and ensuring road safety. This driver data is classified as personal data, the lawful and purposeful processing of which must be ensured in accordance with the General Data Protection Regulation (GDPR). Against this background, the question arises:&nbsp;<\/p>\n\n\n\n<p class=\"has-medium-font-size\" style=\"font-style:normal;font-weight:700\">What impact does the GDPR have on the tracking of truck driving times and what aspects must companies pay particular attention to?<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<h2 class=\"wp-block-heading has-large-font-size\" id=\"h-worauf-mussen-speditionen-achten\"><strong><strong><strong><strong><strong>What do freight forwarders need to look out for?<\/strong><\/strong><\/strong><\/strong><\/strong><\/h2>\n\n\n\n<p>Companies have a responsibility to design their systems and processes in such a way that all data protection requirements are met. The most important aspects at a glance:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Compliance with the statutory driving and rest periods in road traffic.&nbsp;&nbsp;<\/li>\n\n\n\n<li>Data protection and deletion periods - GDPR-compliant processing of data, clear storage and deletion periods.&nbsp;&nbsp;<\/li>\n\n\n\n<li>Technical protective measures, such as access control.<\/li>\n\n\n\n<li>Obligation to provide evidence and documentation for official inspections.&nbsp;<\/li>\n\n\n\n<li>No unauthorized monitoring and no interference with legally prescribed rest periods.<\/li>\n<\/ul>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group alignfull has-custom-color-1-gradient-background has-background has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" style=\"padding-top:var(--wp--preset--spacing--60);padding-bottom:var(--wp--preset--spacing--60)\">\n<div class=\"wp-block-group has-base-color has-text-color has-link-color wp-elements-699067f66a3200e088ca50053e14364a has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<h2 class=\"wp-block-heading has-large-font-size\" id=\"h-dsgvo-konformes-tracking-in-der-logistik\"><strong><strong><strong><strong>GDPR-compliant tracking in logistics<\/strong><\/strong><\/strong><\/strong><\/h2>\n\n\n\n<p class=\"translation-block\">When collecting personal data, companies must consistently comply with the requirements of the <strong>General Data Protection Regulation (GDPR).<\/strong><\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-layout-grid wp-container-core-group-is-layout-31918283 wp-block-group-is-layout-grid\">\n<div class=\"wp-block-group has-white-background-color has-background has-global-padding is-layout-constrained wp-container-core-group-is-layout-52009084 wp-block-group-is-layout-constrained\" style=\"border-radius:1rem;padding-top:var(--wp--preset--spacing--40);padding-right:var(--wp--preset--spacing--40);padding-bottom:var(--wp--preset--spacing--40);padding-left:var(--wp--preset--spacing--40);box-shadow:var(--wp--preset--shadow--shadow-1)\">\n<h4 class=\"wp-block-heading has-medium-font-size\" id=\"h-zulassigkeit-der-datenerfassung-nach-dsgvo-nbsp\" style=\"line-height:1.5\">Permissibility of data collection according to GDPR:&nbsp;<\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Legitimate interest of the employer or legal obligation to collect data (retention obligation, compliance with driving and driving times).<\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-white-background-color has-background has-global-padding is-layout-constrained wp-container-core-group-is-layout-52009084 wp-block-group-is-layout-constrained\" style=\"border-radius:1rem;padding-top:var(--wp--preset--spacing--40);padding-right:var(--wp--preset--spacing--40);padding-bottom:var(--wp--preset--spacing--40);padding-left:var(--wp--preset--spacing--40);box-shadow:var(--wp--preset--shadow--shadow-1)\">\n<h4 class=\"wp-block-heading has-medium-font-size\" id=\"h-datensparsamkeit-beim-tracking-nbsp\" style=\"line-height:1.5\">Data economy in tracking:&nbsp;<\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Avoidance of excessive data collection (location tracking for business purposes only; no recording of drivers' movements during rest periods).<\/li>\n\n\n\n<li>Data minimization - data collection limited to what is necessary (no private journeys, no permanent position tracking).<\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-white-background-color has-background has-global-padding is-layout-constrained wp-container-core-group-is-layout-52009084 wp-block-group-is-layout-constrained\" style=\"border-radius:1rem;padding-top:var(--wp--preset--spacing--40);padding-right:var(--wp--preset--spacing--40);padding-bottom:var(--wp--preset--spacing--40);padding-left:var(--wp--preset--spacing--40);box-shadow:var(--wp--preset--shadow--shadow-1)\">\n<h4 class=\"wp-block-heading has-medium-font-size\" id=\"h-dsgvo-konforme-speicherung-und-zugriffskontrolle-nbsp\" style=\"line-height:1.5\">GDPR-compliant storage and access control:&nbsp;<\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Storage only for the necessary period (statutory retention obligation).<\/li>\n\n\n\n<li>Access restrictions only for authorized persons (e.g. dispatchers, authorities as part of inspections).<\/li>\n\n\n\n<li>Protection against manipulation and unauthorized access - for technical and organizational measures (TOMs), such as encryption to secure data.<\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-white-background-color has-background has-global-padding is-layout-constrained wp-container-core-group-is-layout-52009084 wp-block-group-is-layout-constrained\" style=\"border-radius:1rem;padding-top:var(--wp--preset--spacing--40);padding-right:var(--wp--preset--spacing--40);padding-bottom:var(--wp--preset--spacing--40);padding-left:var(--wp--preset--spacing--40);box-shadow:var(--wp--preset--shadow--shadow-1)\">\n<h4 class=\"wp-block-heading has-medium-font-size\" id=\"h-transparenz-amp-informationspflicht-gegenuber-fahrern\" style=\"line-height:1.5\">Transparency &amp; duty to inform drivers:<\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Drivers must be informed about the purpose, duration and type of data collection.<\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-white-background-color has-background has-global-padding is-layout-constrained wp-container-core-group-is-layout-52009084 wp-block-group-is-layout-constrained\" style=\"border-radius:1rem;padding-top:var(--wp--preset--spacing--40);padding-right:var(--wp--preset--spacing--40);padding-bottom:var(--wp--preset--spacing--40);padding-left:var(--wp--preset--spacing--40);box-shadow:var(--wp--preset--shadow--shadow-1)\">\n<h4 class=\"wp-block-heading has-medium-font-size\" id=\"h-rechte-der-fahrer-nach-dsgvo-nbsp\" style=\"line-height:1.5\">Drivers' rights under the GDPR:&nbsp;<\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Drivers have the right to information and can request a copy of their stored data.<\/li>\n\n\n\n<li>Right to rectification &amp; erasure if data is incorrect or the retention period has expired.<\/li>\n\n\n\n<li class=\"translation-block\">Further rights in detail can be found <a href=\"https:\/\/www.usp.gv.at\/themen\/betrieb-und-umwelt\/laufender-betrieb\/datenschutz.html\" target=\"_blank\" rel=\"noreferrer noopener\">here<\/a>.<\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-white-background-color has-background has-global-padding is-layout-constrained wp-container-core-group-is-layout-52009084 wp-block-group-is-layout-constrained\" style=\"border-radius:1rem;padding-top:var(--wp--preset--spacing--40);padding-right:var(--wp--preset--spacing--40);padding-bottom:var(--wp--preset--spacing--40);padding-left:var(--wp--preset--spacing--40);box-shadow:var(--wp--preset--shadow--shadow-1)\">\n<h4 class=\"wp-block-heading has-medium-font-size\" id=\"h-besonderheit-gps-tracking-amp-bewegungsdaten-nbsp\" style=\"line-height:1.5\">Special feature: GPS tracking &amp; movement data:&nbsp;<\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Permanent GPS tracking is critical because it creates movement profiles.<\/li>\n\n\n\n<li>Do not track journeys during rest periods - only record the start and end times of the rest period.<\/li>\n\n\n\n<li>Employers must clearly justify why they collect GPS data (e.g. for deployment planning or vehicle tracking in the event of theft).<\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-white-background-color has-background has-global-padding is-layout-constrained wp-container-core-group-is-layout-52009084 wp-block-group-is-layout-constrained\" style=\"border-radius:1rem;padding-top:var(--wp--preset--spacing--40);padding-right:var(--wp--preset--spacing--40);padding-bottom:var(--wp--preset--spacing--40);padding-left:var(--wp--preset--spacing--40);box-shadow:var(--wp--preset--shadow--shadow-1)\">\n<h4 class=\"wp-block-heading has-medium-font-size\" id=\"h-loschfristen-und-speicherung-der-daten-nbsp\" style=\"line-height:1.5\">Deletion periods and storage of data:&nbsp;<\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Driving and rest periods are prescribed for at least 2 years in Austria and one year in Germany.<\/li>\n\n\n\n<li>Clear deletion periods, pseudonymization or anonymization and the restriction to necessary data are essential.<\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-white-background-color has-background has-global-padding is-layout-constrained wp-container-core-group-is-layout-52009084 wp-block-group-is-layout-constrained\" style=\"border-radius:1rem;padding-top:var(--wp--preset--spacing--40);padding-right:var(--wp--preset--spacing--40);padding-bottom:var(--wp--preset--spacing--40);padding-left:var(--wp--preset--spacing--40);box-shadow:var(--wp--preset--shadow--shadow-1)\">\n<h4 class=\"wp-block-heading has-medium-font-size\" id=\"h-technische-massnahmen-zum-datenschutz-in-speditionen-toms-nbsp\" style=\"line-height:1.5\">Technical measures for data protection in freight forwarding companies (TOMs)&nbsp;<\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Access management (only authorized persons have access).<\/li>\n\n\n\n<li>Server location in the EU to ensure GDPR compliance.<\/li>\n\n\n\n<li>Regular security updates to protect against data misuse. <\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<h2 class=\"wp-block-heading has-large-font-size\" id=\"h-von-der-datenspeicherung-bis-zum-ablauf-der-loschfrist\"><strong><strong><strong><strong>From data storage to the expiry of the deletion period<\/strong><\/strong><\/strong><\/strong><\/h2>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-cf05694f wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<p>Responsible and legally compliant data storage therefore requires not only compliance with the prescribed deadlines, but also transparent processes, technical protective measures and the conscious balancing of operational benefits and data protection. In this way, both the rights of the drivers and the legal requirements can be optimally safeguarded.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<p class=\"translation-block\">To meet these requirements, the <strong>lbase Driver App<\/strong> and <strong>addHelix Mobile<\/strong> were developed in accordance with the General Data Protection Regulation (GDPR). \nThe processing of driving and rest times is thus legally compliant, transparent and data protection-friendly. To this end, clearly defined deletion periods, access restrictions and modern security measures have been implemented to protect personal data.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<h4 class=\"wp-block-heading has-medium-font-size\" id=\"h-best-practices-nbsp\" style=\"line-height:1.5\"><strong><strong><strong><strong>Best Practices<\/strong><\/strong><\/strong><\/strong>:<strong><strong><strong>&nbsp;<\/strong><\/strong><\/strong><\/h4>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Permissibility: Legitimate interest or legal obligation.<\/li>\n\n\n\n<li>Data minimization: Only collect necessary data.<\/li>\n\n\n\n<li>Storage &amp; access: Store data securely, only authorized persons have access.<\/li>\n\n\n\n<li>Transparency: Inform drivers about data collection.<\/li>\n\n\n\n<li>Rights of drivers: information, correction and deletion of data.<\/li>\n\n\n\n<li>GPS tracking: Only record necessary GPS data, avoid movement profiles.<\/li>\n\n\n\n<li>Safety requirements: Access control, server location EU, technical and organizational measures (TOMs).<\/li>\n<\/ol>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" style=\"padding-top:var(--wp--preset--spacing--50);padding-bottom:var(--wp--preset--spacing--50)\">\n<h4 class=\"wp-block-heading has-medium-font-size\" id=\"h-quellen-nbsp\" style=\"line-height:1.5\"><strong><strong><strong><strong>Sources<\/strong><\/strong><\/strong><\/strong>:<strong><strong><strong>&nbsp;<\/strong><\/strong><\/strong><\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.wko.at\/arbeitszeit\/lenker-verordnungsfahrzeugen-ruhezeiten\" target=\"_blank\" rel=\"noreferrer noopener\">Drivers and rest periods<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.usp.gv.at\/themen\/betrieb-und-umwelt\/laufender-betrieb\/datenschutz.html\" target=\"_blank\" rel=\"noreferrer noopener\">Privacy<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/EN\/ALL\/?uri=celex32016R0679\" target=\"_blank\" rel=\"noreferrer noopener\">European Union<\/a><\/li>\n<\/ul>\n\n\n\n<p class=\"has-small-font-size\">Autor: Clemens Wodak, Deputy General Manager Business Unit<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Datenschutz im Transportwesen: Welche Richtlinien sind zu beachten? Die rechtliche Grundlage f\u00fcr die Einhaltung der Fahrt- und Ruhezeiten ist eindeutig definiert. Die Aufzeichnung ist ein wesentlicher Bestandteil zur Erf\u00fcllung und kontinuierlichen Verbesserung der Arbeitsbedingungen sowie zur Gew\u00e4hrleistung der Verkehrssicherheit. Diese Lenkerdaten sind als personenbezogene Daten eingestuft, deren rechtm\u00e4\u00dfige und zweckgebundene Verarbeitung gem\u00e4\u00df der Datenschutz-Grundverordnung (DSGVO) [&hellip;]<\/p>\n","protected":false},"author":8,"featured_media":3953,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"content-type":"","footnotes":""},"categories":[6],"tags":[],"class_list":["post-3952","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog"],"acf":[],"_links":{"self":[{"href":"https:\/\/lbase.software\/en\/wp-json\/wp\/v2\/posts\/3952","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lbase.software\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lbase.software\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lbase.software\/en\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/lbase.software\/en\/wp-json\/wp\/v2\/comments?post=3952"}],"version-history":[{"count":17,"href":"https:\/\/lbase.software\/en\/wp-json\/wp\/v2\/posts\/3952\/revisions"}],"predecessor-version":[{"id":4284,"href":"https:\/\/lbase.software\/en\/wp-json\/wp\/v2\/posts\/3952\/revisions\/4284"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/lbase.software\/en\/wp-json\/wp\/v2\/media\/3953"}],"wp:attachment":[{"href":"https:\/\/lbase.software\/en\/wp-json\/wp\/v2\/media?parent=3952"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lbase.software\/en\/wp-json\/wp\/v2\/categories?post=3952"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lbase.software\/en\/wp-json\/wp\/v2\/tags?post=3952"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}