Delete my data and my account
Last updated:
This page explains how to request deletion of your personal data and your Dropium account, what is deleted, what must be retained by legal obligation and how long it takes.
1. Who this page is for
People who use the Dropium applications or the control centre: drivers, sorting centre operators and coordination staff.
If you are the recipient of a shipment and want your data deleted, you must contact the company that sold you the product or commissioned the transport: they are the data controller. If you write to us, we will redirect you to them and inform them.
2. How to request it
Write to [email protected] stating that you request deletion of your data and your account. So that we can locate the right account, include the email address you use to sign in and the name of the company you work or worked for.
We may ask you to prove your identity if the request comes from an address other than the one associated with the account. This is to prevent a third party from requesting deletion in your name.
3. What is deleted and what is retained
| Data | What happens | Reason |
|---|---|---|
| Account, name, email, credentials and permissions | Deleted | No longer necessary once the relationship ends |
| Geolocation points | Deleted | Their retention period is 2 months in any case |
| Installation identifier, notification token and access logs | Deleted | Their retention period is 6 months in any case |
| Aggregated usage statistics | Deleted and consent withdrawn | Their legal basis is consent, which is revocable |
| Operational records tied to shipments (events, proof of delivery) | Retained, dissociated from your identity where possible | They evidence performance of a transport contract and answer to legal and accounting obligations and to the shipper’s claim periods |
The right to erasure is not absolute: Article 17(3) GDPR provides exceptions where processing is necessary to comply with a legal obligation or for the establishment or defence of legal claims. A delivery record is exactly that, which is why it cannot be deleted on request while it remains within its retention period.
4. Response time
We will respond within one month of receiving the request. If the request is particularly complex, that period may be extended by a further two months, in which case we will tell you within the first month and explain why.
5. If you are not satisfied
You may lodge a complaint with the supervisory authority of your country of habitual residence:
- Spain: Agencia Española de Protección de Datos (AEPD) — www.aepd.es
- France: Commission Nationale de l’Informatique et des Libertés (CNIL) — www.cnil.fr