1. Controller
Logcon East GmbH, Eßlinger Hauptstraße 188B/Haus 4, 1220 Wien, Österreich
E-mail: info@logconeast.com
2. Overview
We process personal data only where necessary to provide the website, handle your requests and deliver our services, where a legal obligation exists or where you have consented.
3. Website access and server logs
When you visit the website, our hosting provider processes technically necessary data: IP address, date and time, requested URL, referrer, browser and operating system information. The purpose is the secure and stable provision of the website.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operation and security). Logs are deleted after (to follow).
4. Cookies and local storage
Without your consent we only use technically necessary storage (Section 165(3) Austrian Telecommunications Act 2021):
- NEXT_LOCALE (cookie, 1 year): selected language
- lc_session (cookie, httpOnly, 12 hours): sign-in, only after login
- lc_consent (local storage): your choice in the cookie notice
- lc-theme (local storage): light or dark appearance
- lc_sticky_cta_dismissed (session storage): dismissed notice
We only use optional audience measurement with your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time via “Cookie settings” at the bottom of the page. (to follow)
5. Contact form and pilot programme
If you write to us via the contact form or the pilot application, we process your details (name, e-mail, company, phone, fleet size, number of dispatchers, order volume, message) to handle your request. We do not store your IP address in plain text, only as an irreversible hash for abuse detection.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and (a) (consent). The data is deleted when the request has been handled and no business relationship arises, at the latest after (to follow).
6. Registration, trial and live demo
For registration we process company name, name, e-mail address and password (as a bcrypt hash only). In the live demo you receive a time-limited sandbox with sample data; the sandbox is deleted automatically.
Legal basis: Art. 6(1)(b) GDPR.
7. Use of LogCon by customers (data processing)
Data that our customers process in LogCon (e.g. customer, driver, carrier and order data) is processed by us as a processor under Art. 28 GDPR on the basis of a data processing agreement. In this case our customer is the controller.
8. AI processing
For the AI agents and the Copilot we transmit the content required in each case (e.g. e-mail text, document text, order data) to the AI model provider Anthropic PBC (USA). The data is used only to answer the respective request and not to train models. Every AI action is logged.
The transfer to the USA is based on standard contractual clauses or the EU-US Data Privacy Framework (Art. 45, 46 GDPR).
9. Payment processing
Paid subscriptions are billed via Stripe. Payment data exists only at Stripe; we only receive status and invoice information. Legal basis: Art. 6(1)(b) and (c) GDPR.
10. Recipients and sub-processors
You will find an overview of all service providers in the following table.
Sub-processors and recipients
The following service providers process personal data on our behalf. We announce changes to customers at least 30 days in advance.
| Provider | Purpose | Data categories | Location / legal basis |
|---|---|---|---|
| (to follow) | Operation of application, database, file storage and backups | All data stored in the service | EU – (to follow); DPA, technical measures described in the TOMs |
| Anthropic PBC | AI models (Claude) for agents and Copilot | E-mail content, document text, order and master data as context of the respective request | USA – third country; standard contractual clauses or EU-US Data Privacy Framework; no training on customer data |
| Stripe Payments Europe, Ltd.only for paid subscriptions | Billing of paid subscriptions | Name, e-mail address, billing address; payment data is collected by Stripe directly | Ireland (EU); transfer to Stripe, Inc. (USA) possible – standard contractual clauses |
| (to follow) | Sending system e-mails (e.g. confirmations, password reset, notifications) | E-mail address, name, message content | (to follow) |
| OpenStreetMap services (Nominatim, OSRM)optional, depending on configuration | Address geocoding and route calculation | Addresses (company addresses) or coordinate pairs – no personal data | EU/UK or depending on server; own instances recommended in production |
| Telematics providers (e.g. Webfleet, Samsara)only if activated by the customer | Import of vehicle positions | Position data, vehicle identifiers | Contract between customer and provider; LogCon only provides the interface |
| TIMOCOM GmbHonly if activated by the customer | Freight exchange | Freight offers, company contacts | Germany; contract between customer and provider |
11. Retention
We store data only as long as necessary for the respective purpose or as required by statutory retention obligations (e.g. 7 years for accounting records under Section 132 Austrian Federal Fiscal Code). In addition, automatic deletion periods apply on the platform, for example for notifications, spam e-mails, Copilot conversations and expired AI proposals.
12. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You can withdraw consent at any time with effect for the future. Please contact us at the address above.
13. Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
14. Data security
We protect data through encryption in transit (TLS), encrypted storage of credentials (AES-256-GCM), hashed passwords, role-based access rights, strict tenant separation, logging and regular backups.
15. Changes
We adapt this policy when the legal situation or our processing changes. The version published on this page applies.