Operator: Veleo s.r.o.

Registered office: Stará Hora 817/49, 951 36 Lehota, Slovak Republic

Company registration number (IČO): 57 822 352

Contact: info@veleo.sk | veleo.sk

Effective date: 9 November 2026

Version: 1.1

Article 1 – Controller and scope of this Policy

The controller of personal data in connection with the operation of the online platform Veleo is Veleo s.r.o., with the seat of Stará Hora 817/49, 951 36 Lehota, Slovak Republic, IČO: 57 822 352 (hereinafter referred to as "Veleo'). Personal data protection questions and requests can be sent to info@veleo.sk.

This Privacy Policy explains what personal data Veleo processes in connection with registration, creation of Requests, submission and assessment of Offers, formation and performance of Transport, payments, support, complaints, Platform security and compliance with legal obligations. To the extent that the Carrier determines its own purposes and means of processing data after disclosure when performing the contract of carriage or complying with its legal obligations, it may act as an independent controller.

Article 2 – Categories of data processed

• User identification, registration and contact details, such as name, business name, e-mail, phone and account details, if necessary for the account type concerned.
• Details of Request and Transport, in particular the exact address of loading, each stop and unloading, date and time, route, nature and parameters of the shipment or number of passengers, the required vehicle and other data necessary for the assessment and execution of the Shipment.
• Optional additional telephone contacts at loading, stopping or unloading. These fields do not require name, e-mail, customer relationship or any other personal data; only a voluntary telephone number is processed.
• Carrier information needed to verify business status, authorisations, licences, insurance, bank account, vehicles and persons authorised to act on the Carrier's behalf.
• Payment and transaction data, in particular the Order identifier, amount, payment status, bank references and information necessary for a refund or payout; Veleo does not normally need to retain payment-card data where an authorised payment service provider processes it.
• Communications, objections, complaints, evidence of Transport performance, ratings and user content relating to the Platform.
• Technical and security data, such as time records of acts, IP address, session identifiers and audit trail necessary for security, prevention of misuse and demonstration of electronic acts.

Article 3 - Purposes and legal bases of processing

Where Veleo relies on legitimate interests, it pursues in particular the secure and verifiable operation of the Platform, protection of users, fraud prevention, proper assessment and performance of Transport and defence of legal claims. Veleo processes only data proportionate to those purposes and respects the data subject's right to object to processing based on legitimate interests.

Article 4 – Why the exact address of loading, stops and unloading is required

The exact loading address and the address of every planned stop and unloading point are essential parts of the Request. The municipality alone or an approximate location may not allow the Carrier reliably to assess whether it can access the location safely and lawfully with a specific vehicle. Relevant factors may include the width and load-bearing capacity of access roads, height or weight restrictions, turning and handling space, site characteristics, local prohibitions, access time restrictions and other vehicle and location parameters.

The precise location is also essential for accurate transport pricing. The Carrier needs to assess the actual route, distance, necessary detours, toll or charged sections, driving time and operating conditions. Without an exact address, the Offer could be inaccurate, or the Carrier might discover only after the Order is concluded that its vehicle cannot access the location.

Veleo can make the exact route addresses available to registered carriers at the stage of Request to the extent necessary for the evaluation and pricing of the Offers. At this stage Veleo does not make optional additional telephone contacts available. The address must be used by the carrier only for the assessment of the request, the preparation of the tender, and - if a contract is subsequently established - to carry out a specific transport operation. Use on unrelated marketing, further addressing or creating own databases is prohibited.

Article 5 – Additional telephone contacts along the route

When loading, stopping or unloading, the customer may voluntarily indicate an additional telephone number of the person who can be contacted by the carrier in the operational coordination of the particular shipment. The field is not mandatory. In this contact, the platform does not require a name, email, function, relation to the Customer or any other data only a telephone number.

If the Customer provides their own telephone number, it is processed to the extent necessary to prepare and perform Transport. If the Customer provides a third party's telephone number, the Customer is the source of that data for Veleo. The Customer is responsible for having appropriate prior authority or consent from that person to provide the number to Veleo and the selected Carrier for the specific Transport and for having made this Policy available to that person, or enabled them to read it, before entering the number.

Veleo does not make an additional telephone number available to all carriers assessing Request. It shall only be made available to a selected carrier after the creation of a contract of carriage, if necessary to coordinate loading, stop or unloading. If Veleo does not have adequate evidence that the data subject has already received information pursuant to GDPR, it shall fulfil the information obligation for data not obtained directly from the data subject within the time limit required by GDPR and, where applicable, at the latest in the first communication with that person or before the first disclosure to another recipient. Neither Veleo nor Carrier may use the number for unsolicited marketing or other unrelated purposes.

Article 6 – Recipients and disclosure of data

• Registered Carriers to whom a Request is disclosed receive only information needed to assess feasibility and price an Offer; this may include exact route addresses.
• After due payment and formation of the contract, the selected Carrier receives the information needed to perform the Order, including the optional telephone contact if the Customer has provided one.
• Banks and authorised payment service providers may receive the data necessary to execute payment, refund, payout, chargeback or transaction checks.
• Providers of hosting, cloud, communication, analytics, support and security services may process data as processors or independent controllers, depending on the nature of the service and the relevant contract.
• Public authorities, courts, legal advisers, insurance undertakings or other authorised persons may receive data where this is necessary for the fulfilment of a legal obligation, the protection of rights or the resolution of the claim.

Until due payment is confirmed, the Platform does not disclose the Customer's identity, billing details, email, telephone number or the contact details of persons along the route in the ordinary views available to Carriers and drivers. Once payment is confirmed, the information is disclosed to the selected Carrier and its authorised staff only to the extent necessary for their tasks on the specific Order. The assigned driver's details and the vehicle registration number are disclosed to the Customer only after payment is confirmed. Veleo has access to the information to the extent necessary for operations, support, settlement and compliance with legal obligations; this does not affect legally required disclosure to authorised recipients.

Exact loading, stop and unloading addresses and other operational parameters may be available to Carriers already at the quotation stage. Protecting direct contact details therefore does not mean complete anonymisation of the route or all circumstances of Transport. Users must not enter contact details in free-text notes to circumvent the Platform. The Carrier may use the disclosed information only to assess and perform the relevant Transport, not for unrelated marketing or circumvention of the Platform; users' statutory rights remain unaffected.

The Carrier's business and contact details are disclosed to the Customer before binding selection of an Offer or submission of a Counteroffer. To handle a request to change the schedule, the original and proposed schedules, the decision and audit timestamps are processed for steps requested by the Customer, performance of contractual relationships and evidence of agreement. The request itself does not disclose customer contacts to the Carrier before payment.

Article 7 – Transfers outside the EEA

If Veleo or its supplier transfers personal data outside the European Economic Area, Veleo will provide the legal mechanism required by GDPR, in particular the adequacy decision, standard contractual clauses or other guarantee applicable. Information on a particular mechanism shall be provided by Veleo upon request to the extent that it applies to that processing.

Article 8 – Retention period

Veleo shall only store personal data for the period necessary for the purpose for which it was obtained and thereafter for the period necessary for the fulfilment of legal obligations or for the protection and demonstration of legal claims. Periods shall be determined by the type of record, the status of the user account, the existence of Orders, legal storage periods and limitation or claim periods.

• The account data shall be stored for the duration of the contractual relationship and thereafter only to the extent necessary for legal, accounting, security or dispute purposes.
• Requests that did not result in a contract are retained only for a reasonable period necessary for Platform operation, auditing and abuse prevention; once these purposes cease, the data is deleted or anonymised.
• The data of successful orders, payments, refunds and complaints shall be stored according to the relevant legal, accounting and limitation periods.
• Optional additional telephone numbers shall not be further processed into operational communication after the completion of the transport and settlement of immediate objections; they shall be kept in the historical record only if justified by proof of order, legal claim or legal obligation, otherwise they shall be removed or restricted.
• Security logs are retained for a reasonable limited period; longer retention applies only in the event of a security incident, suspected fraud or another justified legal reason.

Article 9 – Rights of data subjects

Subject to the GDPR's conditions, data subjects have in particular the right to access their personal data, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests, and withdrawal of consent where processing is based on consent. Withdrawal does not affect the lawfulness of processing before consent was withdrawn.

The request can be sent to info@veleo.sk. Veleo may reasonably verify the identity of the applicant and handle the application within the deadlines set by the GDPR. The data subject also has the right to lodge a complaint with the Office for the Protection of Personal Data of the Slovak Republic; current contact details are available on dataprotection.gov.sk.

Article 10 – Automated processing and ranking of Offers

The Platform may automatically rank or filter Offers according to published parameters, such as price, availability, vehicle type and location, suitability for the Request, profile quality, history of completed Transport, ratings or response time. Such ranking may affect an Offer's visibility, but does not in itself conclude a contract of carriage or accept a Counteroffer on the Carrier's behalf. The contract arises only upon due receipt and allocation of the full Transport Price under the Terms and Conditions.

Article 11 – Security of personal data

Veleo shall take appropriate technical and organisational measures appropriate to the risk of processing, in particular access management, separation of authorisations, protection of accounts, audit trail of significant acts, adequate backup and procedures to deal with security incidents. Users are obliged to protect their login data and use personal data obtained via the Platform only for the purpose permitted.

Article 12 – Cookies, changes and contact

The use of cookies and similar technologies that are not necessary to provide the Platform is governed by separate cookie information and the applicable consent rules. Veleo may update this Policy, particularly when functionality, suppliers or legal requirements change. The current text, version and effective date are published on the Platform. Questions about personal data processing may be sent to info@veleo.sk.

Related documents: General Terms and Conditions for Customers, General Terms and Conditions for Carriers, Veleo Payment Terms and Veleo Platform Rules.

Supplement – Age confirmation and optional measurement

At registration and when creating a Request, we require confirmation that the user is at least 18 years old. We record the accepted terms and the time of acceptance; we do not collect a date of birth or identity document for this purpose. This is a condition of using the service, not consent to marketing.

Google Analytics and Vercel Speed Insights (measurement of website technical performance) load only after analytics has been permitted. Consent can be withdrawn through the cookie settings. On withdrawal, we remove analytics cookies accessible to our domain; further measurement does not load. Order identifiers, access tokens and URL parameters are not included in the website measurements we send.