1. Subject matter of the Data processing agreement
1.1. Roie Technologies provides to the Customer Equipment and/or Services ordered by the Customer. The
Customer may transfer personal data to Roie Technologies for the purpose specified in the Clause 3.1.
1.2. On 25th May 2018 the EU General Data Protection Regulation 2016/679 becomes applicable and the
Parties must therefore agree on the
1.3. This Data processing agreement sets the terms and conditions applicable to the processing of the
Customer’s personal data by Roie Technologies.
2. Definition
“Roie Technologies” shall mean Services and/or Equipment provider for the client, according to the
agreed terms and conditions.
“Customer” shall mean the client of Roie Technologies, which uses the Equipment and/or Services
provided by Roie Technologies.
“Data processing agreement” shall mean this data processing agreement.
“End-user” shall mean the client of the Customer who shall be granted access to the Licensed Program
for processing its data for their internal use only and not for reselling in any way..
"Licensed Program" means the RoieTracker GPS tracking software application, and related licensed
materials and data.
Object” shall mean the GPS tracking device created and configured in Object panel of Licensed
Program..
“Party” / “Parties” Roie Technologies and the Customer referred to herein individually as “Party” and
together as the “Parties”.
“Service” shall mean the specific scope of the functionalities of the Licensed Program that the Customer
and End-user shall be entitled to use, including GSM connectivity services, if applied.
2. Data Protection
Roie Technologies will receive GPS related personal data from the Customer to ensure the functionality
of the equipment and/or Services provided to the Customer.
The Customer undertakes to avoid using any personal data (e.g. name, surname, personal ID code of
the employer) in the Licensed Program which may be used to determine the identity of the End User in the
Licensed Program.
The Customer undertakes to provide personal data to Roie Technologies for the purpose of providing
GPS tracking services for the objects into which the equipment has been installed and Roie Technologies
undertakes to process personal data only on documented instructions from the Customer, including with
regard to transfers of personal data to a third country or an international organization, unless required to do
so by Union or Member State law to which Roie Technologies is subject; in such a case, Roie Technologies
shall inform the Customer of that legal requirement before processing, unless that law prohibits such
information on important grounds of public interest.
After the end of the provision of the Services relating to processing, Roie Technologies at the choice
of the Customer, shall delete or return all personal data to the Customer, including existing copies unless
Union or Member State law requires storage of the personal data. After the deletion of the Object (deletion
of account), the Parties may agree on a fee paid by the Customer for further storage of historical information.
Roie Technologies undertakes to implement appropriate organizational and technical measures to
protect personal data against accidental or unlawful destruction, alteration, disclosure, as well as any other
unlawful processing and to protect the rights of the data subject. Roie Technologies also undertakes to
implement all personal data security measures required by applicable law.
The Customer undertakes to process GPS related data in compliance with the applicable data protection
laws including the requirement to inform data subjects about processing of their personal data. The
Customer undertakes to ensure that no personal GPS related data of the End User is collected after working
hours in cases where the equipment is not used for tracking the vehicle or cargo itself.
Roie Technologies shall not engage another processor without prior specific or general written
authorization of the Customer. In the case of general written authorization, Roie Technologies shall inform
the Customer of any intended changes concerning the addition or replacement of other processors, thereby
giving the Customer the opportunity to object to such changes.
Where Roie Technologies engages another processor for carrying out specific processing activities on
behalf of the Customer, Roie Technologies shall ensure compliance with the statutory requirements for
engaging another processor.
Roie Technologies is given general authorization to engage third parties to process personal data
without obtaining any further written, specific authorization from the Customer, provided that Roie
Technologies notifies the Customer in the Licensed Program before using a new processor. If the Customer
wishes to object to the relevant processor, the Customer shall give notice in writing within seven (7)
calendar days from the notification in the Licensed Program. Absence of any objections from the Customer
shall be deemed a consent to the relevant processor.
Roie Technologies shall ensure that persons authorized to process personal data have committed
themselves to confidentiality or are under an appropriate statutory obligation of confidentiality.
The Customer has all the necessary permissions and tools at his disposal to respond to requests of the
End users directly. Roie Technologies undertakes to assist the Customer by appropriate technical and
organizational measures, insofar as this is possible and only in cases where specific request of the End-user
may not be fulfilled directly by the Customer, for the fulfilment of the Customer’s obligation to respond to
requests for exercising the data subject's rights.
Roie Technologies shall make available to the Customer all information necessary to demonstrate
compliance with the obligations laid down in this Data processing agreement and allow for and contribute
to audits, including inspections, conducted by the Customer or another auditor mandated by the Customer.
Roie Technologies may use depersonalized data (information which does not include any personal
data) collected from the Customer with a target to improve products and services or create new products
and services.
For the purpose of direct marketing, Roie Technologies may process the contact details and other
personal data of the Customer and its employees in accordance with the requirements of legal acts regulating
data protection, unless the Customer disagrees with processing of personal data for this purpose.