Privacy Policy
Data Controller
Rindi PK is the data controller for the personal data processed in FleetMon. If you have questions about how your data is handled, please contact your system administrator.
What Personal Data We Collect
FleetMon processes the following personal data:
- Account information — name and email address, provided when your account is created by an administrator
- Authentication data — hashed password (the actual password is never stored)
- Usage statistics — which pages you visit and when, used for system monitoring and improvement
- IP addresses — recorded in server access logs and used for rate limiting on the login page
Purpose and Legal Basis
Your personal data is processed for the following purposes:
- Authentication and access control — to verify your identity and manage your access to the system (legitimate interest)
- System monitoring — to track usage patterns and ensure system stability (legitimate interest)
- Security — to detect and prevent unauthorized access, including login rate limiting (legitimate interest)
- Email notifications — to deliver event notifications you have subscribed to (consent, via subscription)
Data Retention
- User accounts — retained until the account is deleted by an administrator
- Usage statistics — automatically deleted after 6 months
- Server logs — automatically rotated; older log files are overwritten as new entries are added (typical retention: a few weeks depending on activity)
- Notification history — automatically deleted shortly after processing (used only to prevent duplicate notifications)
Your Rights
Under GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your personal data
- Data portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interest
To exercise any of these rights, contact your system administrator.
Cookies
FleetMon uses only cookies that are strictly necessary for the application to function. No advertising cookies are used, and our analytics (see below) are cookieless. Because all cookies are strictly necessary, no cookie consent is required under the ePrivacy Directive.
For detailed information about each cookie, see the Cookie Information page.
Analytics
FleetMon uses Umami Analytics, a privacy-friendly, self-hosted web analytics tool operated on our own infrastructure. No data is shared with any third party.
Umami collects only anonymous, aggregated statistics:
- Page URL and referrer
- Browser type, operating system, device type
- Country (derived from IP address; the IP itself is not stored)
Umami does not use cookies, does not track users across sessions,
and does not collect any personal data. The Do Not Track browser setting
is honored — if enabled, no analytics data is sent. Legal basis: legitimate interest
in understanding aggregate usage to improve the service.
Data Security
We protect your data using industry-standard security measures including encrypted password storage (bcrypt), CSRF protection, rate-limited authentication, and encrypted configuration files.
Contact
For questions about this privacy policy or how your data is processed, contact your Rindi PK system administrator.