Data Protection Policy

Version 2.6 — 30 April 2026

In this data privacy statement, we inform you about the type, scope, purposes and legal basis for the collection and processing of your personal data when using our websites as set out below (collectively referred to as “website” or “page”), as well as the rights to which you are entitled under the General Data Protection Regulation (GDPR).

We process all personal data collected during your visit to our website in accordance with the legal provisions of data protection and in compliance with the protection goals of information security.

Responsible for the data processing when using this website according to Art. 4 para. 7 GDPR is:

INVERS GmbH
Untere Industriestraße 20
57250 Netphen (Siegen)

For information, questions, suggestions, complaints regarding data protection, or to exercise your rights, please contact our data protection officer:

Lennart Kriebel
BEITEN BURKHARDT Services GmbH
Ganghoferstraße 33
80339 München
Email: Lennart.Kriebel@bbservices.gmbh
Phone: +49 69 756095-585
Fax: +49 69 756095-512

This data privacy statement applies to all pages of the domain / the following domains:

https://fleetcontrol.invers.com
https://servicepartners.invers.com
https://developers.invers.com
https://help.invers.com

Your rights⚓︎

As a data subject, you have the following rights – in each case under the legal requirements and to the extent permitted by law:

You can request information about your data stored with us at any time by using the contact details given above.
You have the right to demand the rectification of incorrect personal data or, if the legal requirements are met, the rectification, restriction, or erasure of your data.
You can object to the use of your personal data for the purposes of direct advertising at any time. You also have the right to object at any time to data processing based on Art. 6 para. 1 lit. e or f GDPR for reasons arising from your particular situation, unless we can prove compelling reasons worthy of protection, which outweigh your interests, or the processing serves to assert, exercise or defend legal claims.
You can withdraw consents granted on this page at any time with effect for the future. The lawfulness of the processing carried out based on the consent, remains unaffected until revocation.
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, machine-readable format, which you can use for further processing.

To exercise your rights, please contact our data protection officer under the contact details given above.

Furthermore, you can also lodge a complaint with the data protection supervisory authority concerned:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia; https://www.ldi.nrw.de

2. Security of transmission⚓︎

When transferring personal data, this website offers by default the so-called TLS security system (Transport Layer Security) in connection with at least 128-bit encryption to protect the data against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. The security measures are continuously adapted in line with technological developments. You can recognise the encrypted data transmission by the display of a closed key or lock symbol in the lower status bar of your browser.

3. Collection of usage data when visiting the website⚓︎

During the use of our website, a number of information about you as a user is collected, which can be linked to a specific user, at least theoretically, via the IP address. This data is used for technical purposes to display the site or to provide you with access to the login section. In detail:

3.1 Transmission of browser data and settings⚓︎

When you visit our website, we may collect and process the following personal data that your browser automatically sends to our server:

IP address
Date and time of the request
Content of the request (concrete page)
Access status / https or http status code
Amount of data transferred in each case
Website where the request originates
Used browser
Operating system
Language and version of the browser software
Referrer
Further technical parameters, e.g.:
- JavaScript support
- Installed plug-ins
- Size of the browser tab
- Screen size
- Supported languages
- Installed fonts

This data may be processed even when you visit our website for purely informational purposes, i.e. if you do not register or otherwise provide us with information. It is processed to the extent that it is technically necessary for us to display our website and to ensure its stability and security. The legal basis for the processing is Art. 6 para. 1 lit. f GDPR (legitimate interest), whereby our legitimate interest is to provide the website in a stable and secure manner.

3.2 Transmission of personal data⚓︎

If you use the login section of our website (e.g. FleetControl), we collect your login credentials and account information to verify your identity and to provide you access to the login section. This may include the following personal data:

Email address
First name
Last name
Company name
Password

If you have a contract with us, the legal basis for this processing is Art. 6 para. 1 lit. b GDPR (performance of the contract). Otherwise, i.e. if we have a contract with your employer, the legal basis for the processing is Art. 6 para. 1 lit. f GDPR (legitimate interest). We have a legitimate interest in ensuring the safe handling of permissions to sensitive fleet information.

4. Own services⚓︎

When using the following services offered on our website, the personal data provided by you will be stored and processed for the purposes stated in each case – e.g. within the scope of a registration, a survey or for the execution of a contract. If there is no legal basis for such processing, we generally obtain the consent of the data subject.

Contact form⚓︎

To get in contact with us, you can use the contact form https://invers.com/en/contact-us.

To process your request, your name including title (optional), a valid e-mail address and the content of your message will be collected. The data you enter is transmitted via a secure TLS connection.

The transmitted data will be forwarded to the responsible party for your request and will only be used to process your inquiry. Your data will be deleted immediately after processing, unless storage is required for reasons of verifiability, customer service or legal retention periods.

You can informally object to the storage of your personal data by using the contact data mentioned above. In this case, we will not process your data any further, unless there are predominant reasons for further storage, or the processing serves to pursue legal claims.

The legal basis of the processing is Art. 6 para. 1 lit. b GDPR, if you contact us in connection with a contract you have with us. Otherwise, the legal basis of the processing is Art. 6 para. 1 lit. f GDPR, whereby our legitimate interest is the proper processing of your request.

5. Services of third-party providers⚓︎

Functionality and types of cookies⚓︎

This website uses cookies and similar technologies (collectively “Cookies”). Cookies are small text files that are stored on your computer by your browser. They may contain various information, e.g. duration of the website visit or user input. They can be set by us as the website provider (so-called first-party Cookies) as well as, in the case of cooperation with third parties, by them (so-called third-party Cookies). You can restrict or disable the storage and reading of Cookies, but this may affect the website’s functionality. This website uses the following types of Cookies, whose functionality and legal basis we will explain below:

Session Cookies: These Cookies are automatically deleted when the browser is closed. They contain a so-called session ID. In this way, various requests from your browser can be assigned to the same session and your computer can be recognized when you return to our website.
Persistent Cookies: These are automatically deleted after a specified period of time, which varies depending on the cookie. The storage period is a maximum of 2 years.

Necessary Cookies: These Cookies are technically mandatory to navigate the website, use basic functions and ensure the security of the website; they do not collect information for marketing purposes, nor do they store which other websites you visit. Legal basis for the use of necessary Cookies is Sect. 25 para. 2 no. 2 of the German Telecommunications Digital-Services Data Protection Act (TDDDG). Legal basis for the data processing in connection with necessary Cookies is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to provide you with a properly functioning website and to make the use of the website as pleasant and efficient as possible.

Optional Cookies (analytics): With your consents, so-called analytics Cookies may be used on the website. Such Cookies can be used to track certain interactions on the website and to evaluate them in pseudonymized form. This helps us to optimize the website. The services Mixpanel and Google Analytics use analytics Cookies (see below for details). The legal basis for the use of analytics Cookies is Sect. 25 para. 1 TDDDG; the legal basis for the subsequent data processing is Art. 6 para. 1 lit. a GDPR. The consents are obtained in the cookie banner, where they can also be freely revoked at any time with effect for the future.

Do not track⚓︎

With the so-called “do not track” setting you can object to the tracking of your website visits. This setting is offered by several browsers. If you have activated the “do not track” option, your visits cannot be tracked:

Mixpanel⚓︎

With your consent, our website may use Mixpanel, a web-analytics-service provided by Mixpanel, Inc, One Front Street, 28^th Floor, San Francisco, CA 94111, USA (“Mixpanel”). The tool is used for the purpose of reach measurement and analysis of the general usage patterns of website users. The tool allows us to track and evaluate your user interactions on our website. Through the statistics and reports obtained, we aim to improve the website and optimise the user experience.

Mixpanel stores Cookies on your device to collect your time spent on the website, certain user interactions (e.g. page views), the number of visits, the approximate location and certain technical data about your device (e.g. IP address, information about the operating system and browser used, browser language, etc.) and forwards this data to Mixpanel’s servers. The collected data is only stored and analysed pseudonymously. The data will only be stored and processed for above purposes and no longer than required. We have entered into a data processing agreement with Mixpanel pursuant to Art. 28 GDPR, which ensures that Mixpanel processes data on our behalf only as instructed. Mixpanel’s Cookies expire and are automatically removed after 12 months at the latest.

The information collected is transferred to Mixpanel servers and possibly to third countries where there is not an equivalent level of data protection (such as the USA). Mixpanel is certified under the EU-U.S. Data Privacy Framework, so that the transfer of data to Mixpanel in the USA is based on the adequacy decision of the EU Commission pursuant to Art. 45 GDPR. We have also agreed so-called standard data protection clauses (SCCs) with Mixpanel in accordance with Art. 46 para. lit. c GDPR, the purpose of which is to ensure compliance with an adequate level of data protection in the third country (e.g. the USA).

Data between INVERS and Mixpanel will only be processed as stated in the DPA between both parties. https://mixpanel.com/legal/dpa/. Further information on data processing by Mixpanel is available at https://mixpanel.com/legal/privacy-policy.

We only use Mixpanel and Mixpanel Cookies on our website with your consent. The legal basis for the use of Cookies and access to the data stored therein is Sect. 25 para. 1 TDDDG and for the subsequent processing of your personal data Art. 6 para. 1 lit. a GDPR. You have the right to revoke your consent at any time with effect for the future. The lawfulness of the data processing until the revocation remains unaffected. The easiest way to revoke your consent is to use our cookie banner.

Google Analytics⚓︎

With your consent, Google Analytics 4, a web analytics service provided by Google Ireland Limited (“Google”), a company incorporated and operated under Irish law (registration number: 368047 with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland), may be used on our website to optimize it for your needs, to measure reach, and to analyse the general usage behaviour of website visitors.

Google Analytics uses Cookies (see above for details on Cookies), which contain an individual ID of the user, to record user interactions on our website. In addition to user interactions on our website, Google Analytics collects technical data, in particular the IP address of the end device, in order to ensure the security of the service and to provide us, the website operator, with information about the country, region or location from which the website is used (so-called “IP location determination”). The Cookies are stored for a maximum period of 2 years and then automatically deleted.

The information generated by the Cookie (including the shortened IP address) will be transmitted to and stored by Google on computers in third countries such as the USA. We have activated the IP anonymization offered by Google. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area prior to use and further transmission. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Insofar as data is transmitted to Google’s US company (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter “Google LLC”), this data transmission is based on Art. 45 GDPR, as Google LLC is certified under the EU-US Data Privacy Framework.

Google processes the information collected through the use of Cookies on our behalf to evaluate your use of our website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage.

Google may also process the aforementioned data collected via Google Analytics for its own purposes in accordance with its own privacy policy. The data may be stored by Google in user profiles and may be processed, for example, to improve products, to develop new products, to measure the effectiveness of certain advertising and market research and to personalize content and advertisements. If you are logged in to Google, your data will be assigned directly to your user account. If you do not wish to be associated with your Google user account, you must log out before activating Google Analytics 4. We have no influence on the further processing of your data by Google. Further information on the use of data by Google, setting and revocation options can be found on Google’s websites:

The use of Cookies and further data processing by Google Analytics 4 is based on your consent in accordance with Sect. 25 para. 1 TDDDG and Art. 6 para. 1 lit. a GDPR. Any consent given can be freely revoked at any time with effect for the future. Consent is obtained in our cookie banner and can also be revoked there.

HERE Maps⚓︎

In FleetControl, we use the HERE Technologies (API) map service from HERE Global B.V., Kennedyplein 222-226, 5611 ZT Eindhoven, Netherlands (“HERE”) to display locations of connected assets, such as telematic units and vehicles.

When using pages and tools where maps from HERE are integrated, our website sends various technical information (including your IP address, information about the operating system and browser used, browser language, etc.) to HERE. The processing of this data is technically necessary to provide the maps on our website. We have entered into a data processing agreement with HERE pursuant to Art. 28 GDPR, which ensures that HERE processes data on our behalf only as instructed.

You can find more information about HERE Technologies in their Privacy Policy: https://legal.here.com/en-gb/privacy and https://www.here.com/here-statement-gdpr.

In relation to our customers, we use HERE as a sub-processor to provide to our customers certain services (e.g. the collection of the driving manoeuvre speeding). To display street addresses or information on speeding, we send the GNSS position of the respective telematics unit and vehicle to HERE, however, we do not transmit the IP address or any other personally identifiable information related to a user (driver) of the vehicle in this request. Detailed information on the processing of customer personal data performed on behalf of our customer can be found in the data processing agreement concluded between us and the respective customer and its annexes.

The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. Our transmission of data to HERE is based on our legitimate interest in offering you the map function, tracking of vehicle positions and detection of speed limit breaches in our tools FleetControl. This can be part of our contractual obligations towards our customers.

Mapbox⚓︎

In FleetControl, we use a (API) map service from Mapbox, Inc., 740 15^th Street NW, 6^th Floor, Washington DC 20005, USA (“Mapbox”) to display locations of connected assets, such as telematic units and vehicles, and visualize (potential) trips.

When using pages and tools where maps from Mapbox are integrated, our website sends various technical information (including your IP address, information about the operating system and browser used, browser language, etc.) to Mapbox. The processing of this data is technically necessary to provide the maps on our website. We have entered into a data processing agreement with Mapbox pursuant to Art. 28 GDPR, which ensures that Mapbox processes data on our behalf only as instructed.

The information collected is transferred to Mapbox servers and possibly to third countries where there is not an equivalent level of data protection (such as the USA). We have concluded so-called standard data protection clauses (SCCs) with Mapbox, the purpose of which is to ensure compliance with an adequate level of data protection in the third country (e.g. the USA). Therefore, the data transfer to the third country is based on Art. 46 para. lit. c GDPR. Further information on the SCCs entered into with Mapbox are available in the Mapbox Customer DPA.

In relation to our customers, we use Mapbox as a sub-processor to provide to our customers certain services (e.g. the collection of the driving manoeuvre speeding). To display street addresses or view trips, we send the GNSS position of the respective telematic unit and vehicle as well as timestamps (start and end of a trip) to Mapbox, however, we do not transmit the IP address or any other personally identifiable information related to a user (driver) of the vehicle in this request. Detailed information on the processing of customer personal data performed on behalf of our customer can be found in the data processing agreement concluded between us and the respective customer and its annexes.

The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. Our transmission of data to Mapbox is based on our legitimate interest in offering you the map function, tracking of vehicle positions and forecasting or visualization of (potential) trips in our tools FleetControl. This can be part of our contractual obligations towards our customers.

Sentry⚓︎

In FleetControl, we use Sentry Analytics, a service provided by Functional Software, Inc. dba Sentry, 132 Hawthorne Street, San Francisco, CA 94107, USA (“Sentry”), to detect and resolve technical errors.

For this purpose, technical details about the use of the website may be stored on your device. In the event of an error, these technical details, insofar as they are temporally related to the occurrence of the error, as well as your IP address are transmitted to Sentry and processed by Sentry together with the following data: Information about the hardware and the operating system used by your device as well as date, time, details of the error that occurred. It is not possible for Sentry or us to identify you from the data transmitted to and processed by Sentry. Sentry also does not profile you at any time. Based on the aforementioned information, Sentry only prepares reports and evaluations on our behalf regarding identifiable errors, including the circumstances under which the error occurred and which may therefore provide information about possible causes for the error. We have entered into a data processing agreement with Sentry pursuant to Art. 28 GDPR, which ensures that Sentry processes data on our behalf only as instructed.

The information collected is transferred to Sentry servers and possibly to third countries where there is not an equivalent level of data protection (such as the USA). Sentry is certified under the EU-U.S. Data Privacy Framework, so that the transfer of data to Sentry in the USA is based on the adequacy decision of the EU Commission pursuant to Art. 45 GDPR. We have also agreed so-called standard data protection clauses (SCCs) with Sentry in accordance with Art. 46 para. lit. c GDPR, the purpose of which is to ensure compliance with an adequate level of data protection in the third country (e.g. the USA). Further information on the SCCs entered into with Sentry are available at https://sentry.io/legal/dpa/.

Further information on data processing by Sentry is available at https://sentry.io/terms/ and https://sentry.io/privacy/.

We use the Sentry service to eliminate errors that occur on our website and problems with its use as quickly and comprehensively as possible and thus to be able to continuously develop our offer to ensure a smooth user experience. The basis for the use of the Sentry service is our legitimate interest, as described above, according to Art. 6 para. 1 lit. f GDPR.

General storage period and erasure⚓︎

We will store your personal data no longer than necessary to achieve the purpose for which the information was provided (e.g. reply to your inquiry) or legitimate reasons in terms of Art. 17 para. 3 GDPR, such as statutory retention periods, require storage. For as long as statutory retention obligations, e.g. tax and commercial legal regulations oppose a deletion of your personal data, we restrict the processing of your data; your data will be deleted in subsequence in accordance with the legal regulations.

Miscellaneous⚓︎

We do not use automated decision-making in accordance with Art. 22 para. 1 and 4 GDPR, i.e. we do not use web-based systems to create user profiles and, based on this, make automated decisions with legal effect or similar impact for you.

You are not contractually or legally obliged to provide personal data on the website. However, the website cannot be used without providing certain (browser) data.

If you have any further questions that have not been answered by this data privacy statement, or if you would like more detailed information on individual points, please feel free to contact us at any time using the contact details mentioned above.

Changes to this data privacy statement⚓︎

We reserve the right to change this data privacy statement within the regulatory framework of applicable laws and regulations and publish an updated version on our website, insofar as this is deemed appropriate, for instance, due to new technical developments or changes in law or our business operation. Please reread the provisions of this data privacy statement therefore from time to time to ensure that you are familiar with how we collect, process and use personal data.