Hello! On this page, you'll find the privacy policy for TrackBot, where we explain what personal data we collect and how we process it.

This policy complies with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR) and the Italian Privacy Code (Legislative Decree June 30, 2003, no. 196). The document has also been prepared in accordance with the Guidelines of the Italian Privacy Data Protection Authority (especially the Guidelines for combating spam issued by the Privacy Data Protection Authority on July 4, 2013).

What information we collect

• When you use TrackBot via Telegram, we collect basic information about your profile. For example, we store your first name, last name, and username, which are provided to us by Telegram. This data is stored indefinitely.
• We also store all the messages you send to the bot. These messages may contain personal data. Messages are kept for 3 months, and the verification of the obsolescence of this data occurs daily.
• When you track a shipment, we store the shipment code and all shipment-related information, including status updates, in our systems. These updates might contain personal data. This data is stored indefinitely.
• When you submit a suggestion via the feedback form, we store all the information you enter via the form, which may contain personal data. We might also store some identifying data like your IP address or basic browser-related information ("user agent"), always temporarily and for purposes related to the cybersecurity of our systems.

What we don't collect

We do not have access to your phone number or your location, nor do we collect "special category data".

How we use your data

We use your data to:

• Provide the service you requested: For example, shipment data you tracked is used to send you notifications and allow you to view the history of tracked shipments.
• Offer technical support: For instance, we might use your Telegram username to locate your chat and assist you more quickly.
• Compute statistics about the usage of the bot or the couriers: For example, to understand how many users have used the service in the last month or how many shipments from a particular courier have been tracked.

Lawful basis for processing

The lawful basis for processing the personal data mentioned above is our legitimate interest in fulfilling your request to use the service and, if necessary, in detecting and protecting ourselves from cybersecurity risks that could affect our systems.

However, our legitimate interest does not override your rights and freedoms. You can learn more about your rights in the specific section of this page.

Disclosure of personal data

In order to provide the service, we rely on certain third-party companies and computer tools, which have been duly appointed as data processors in accordance with Article 28 of the GDPR. For example, the servers that power TrackBot are provided by third parties.

The data is not otherwise transferred or disclosed to third parties, except where necessary to fulfill legal obligations or comply with requests from authorities.

Your personal data may be transferred outside the European Union. In any case, the transfer will only occur to countries that ensure an adequate level of protection, as established by the European Commission.

Your rights

• You can request access to your personal data, their rectification, and their portability at any time.
• You can request the erasure of your personal data, the restriction of processing, or object to the processing at any time.
• You have the right to lodge a complaint with a supervisory authority.

To exercise your rights, you can contact us via email without any specific formalities.

Data controller

The data controller is Matteo Contrini. You can contact the data controller via email.

Cookies usage

Cookies are small text portions stored by your browser when you visit a website. The information contained in the cookie can then be read by the website the next time you visit it.

Third party cookies are installed by external services which the website is using.

To collect anonymous statistics about the visitors, this website uses third-party cookies, generated by the Google Analytics software.

The list of cookies installed by Google Analytics can be found on this page, while you can find privacy information here.

To manage your cookie consent choices, click here.

Changes to this privacy policy

Changes to the privacy policy will be published on this page.

Last update: 9 March 2025

9 March 2025: lowered messages data retention from 12 to 3 months.