Loading…
- English
- Nederlands
- Deutsch
- Français
- Italiano
- Türkçe
- Български
- Español
- Polski
- Română
Loading…
This policy explains the customer, vehicle, order and support information used to arrange and fulfil your vignette registration.
Tolluno is responsible for the personal data processed for its intermediary service. The registered business name is Tolluno (KvK: 42205998). Contact [email protected] about privacy. The statutory business-address disclosure remains a separate production-readiness item requiring legal resolution. No address is published or substituted.
Depending on your purchase, information may include your name, email, billing/contact details, registration country and plate, VIN, vehicle and trailer facts, emission class, seat/category declaration, travel/start date and identity-document details required for fulfilment. Order/payment identifiers and support references may also be recorded.
We use necessary order and registration data to take steps at your request and perform the contract (GDPR Article 6(1)(b)). Accounting and other mandatory records rely on legal obligations (6(1)(c)). Security, fraud prevention and resolving disputes rely on legitimate interests (6(1)(f)), balanced against your rights. Where consent is required for optional processing, it must be separate and can be withdrawn without affecting earlier lawful processing.
Required registration data is sent to the relevant road authority or its registration system. Mollie processes hosted payments under its own privacy notice; Tolluno does not store your full card details. Resend handles transactional email and Google Workspace handles support email. Hosting and technical service providers process service data. Route searches use routing/place providers, and Google Maps loads when configured. If the optional Dutch vehicle lookup is enabled, your registration plate is sent to RDW to retrieve vehicle facts. Recipient roles, processing locations and any safeguards for transfers outside the EEA require verification before launch; no EEA-only storage is promised.
Support may use your order reference, contact details, registration details and messages to investigate an order or error. We record accepted agreements, withdrawal declarations, refunds, registration proofs, email delivery metadata and staff access/action audits. Contract confirmation emails contain order and vehicle registration details, but not full VIN or identity-document details. Incoming support emails are handled in the support mailbox, not automatically imported into the Admin Board. Avoid sending card details, private access codes or full identity documents in an initial request to [email protected].
Retention is assessed by data category: registration and identity details for necessary fulfilment and resolving related issues; order/payment records for applicable accounting duties and legal claims; support messages for resolving requests and related disputes; technical records for necessary security investigations. Only necessary data should be kept. Protection against changes to legal evidence does not justify keeping personal data indefinitely. A verified schedule, deletion procedures and backup treatment are still pending business review; no invented fixed period or automatic deletion is promised.
You may request access, correction, erasure, restriction and portability, and object to processing based on legitimate interests, subject to GDPR conditions. Contact [email protected]; proportionate identity verification may be needed. We must respond within one month, with a lawful extension explained within that month where applicable. You may complain to the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl) or your local EU supervisory authority. Updating our records does not itself correct an authority registration.
Cookies and session storage support language choice, basket, checkout continuity and private order access. Required registration fields are needed to arrange the purchase; missing required details can prevent fulfilment. Eligibility and price checks use supplied vehicle and route facts; they are not an official registration decision. Any optional tracking, provider transfer safeguards and whether GDPR Article 22 applies must be reviewed before launch.
Include these details so we can find your order quickly:
In your first email, do not include card details, passwords or access codes, or full identity documents.