1. Controller
The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:
E-mail (Data Protection):
E-mail (Imprint):
2. General Information on Data Processing
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations (GDPR, BDSG, TDDDG) and this privacy policy. This privacy policy applies to the use of our website and the web-based applications provided via it at natavo.com (hereinafter referred to as the "Platform").
3. What Data is Processed?
3.1 Registration and User Account
A user account is required to use the Platform. In this context, we collect and store the following data:
- E-mail address (for login and communication)
- Name (first and last name)
- Username
- Password (stored encrypted, never in plaintext)
Legal basis: Art. 6 para. 1 lit. b GDPR (fulfillment of a contract or implementation of pre-contractual measures)
Storage duration: Until the user account is deleted by the user or by us
Purpose: Provision of the platform, authentication, access control, communication
3.2 Data Within the Provided Applications
Within the applications of the Platform, users record and manage data to organize their operational workflows. This content may contain personal data (e.g., names, contact details, schedule, vehicle, or location information) entered by the respective user or their organization.
We process this content exclusively to provide the contractually agreed functions and do not evaluate it for our own purposes.
Legal basis: Art. 6 para. 1 lit. b GDPR (fulfillment of contract); where we process data on behalf of our customers, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR
Storage duration: Until deletion by the user or until termination of the contractual relationship; thereafter, the data will be deleted unless statutory retention obligations prevent this.
3.3 Server Log Files
When you visit our website, our web host (see Section 4) automatically collects information transmitted by your browser:
- IP address (shortened/anonymized after a short time)
- Date and time of access
- Browser type and version
- Operating system
- Referrer URL
- Transferred data volume, HTTP status code
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in security and stable operation)
Storage duration: As a rule, a maximum of 14 days
3.4 Contacting Us via E-mail
If you contact us by e-mail, we will process the details you provide (e-mail address, content of the message) to handle your request.
Legal basis: Art. 6 para. 1 lit. b GDPR (initiation or performance of a contract) or Art. 6 para. 1 lit. f GDPR (legitimate interest in answering inquiries)
Storage duration: Until the request has been fully processed and no further statutory retention obligations exist
4. Processor (Hosting)
To provide our services, we use the following service provider as a processor (Art. 28 GDPR); a data processing agreement is in place:
Web Host (Strato AG)
Our website and the platform are hosted by Strato AG. As part of hosting, all data mentioned in this policy is processed on the host's servers, including server log data (see 3.3).
Provider: Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany
Location of servers: Germany (EU) – no third-country transfer takes place
Privacy Policy: https://www.strato.de/datenschutz/
5. Cookies
Our website uses exclusively technically necessary cookies required for the operation of the login area:
- Session cookie (to maintain your login during your visit)
Legal basis: Section 25 para. 2 no. 2 TDDDG (technically necessary storage), Art. 6 para. 1 lit. f GDPR
Storage duration: Session cookies are deleted automatically when you close your browser.
We do not use tracking, analysis, or advertising cookies. A cookie banner is therefore not required.
6. Disclosure of Data
Your personal data will only be passed on to the processor named in Section 4 and in exceptional cases if we are legally obligated to do so. Data will not be passed on for advertising or marketing purposes. Transmission to third countries outside the EU/EEA does not take place.
7. Your Rights
You have the following rights regarding your personal data at any time:
- Information/Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
- Revocation of a given consent (Art. 7 para. 3 GDPR)
To exercise your rights, please contact:
Right to object pursuant to Art. 21 GDPR: Insofar as we process data on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest), you have the right to object to the processing at any time for reasons arising from your particular situation.
Deletion of the user account: Please contact us by e-mail.
8. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. The authority responsible for us is:
Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD)
Holstenstraße 98
24103 Kiel, Germany
Phone: +49 431 988-1200
E-mail:
Web: https://www.datenschutzzentrum.de
9. Data Security
We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons:
- Encrypted transmission via HTTPS (TLS)
- Passwords are stored exclusively hashed (not in plaintext)
- Role- and permission-based access control within the platform
- Access restrictions and regular updating of our systems
10. No Automated Decision-Making
Automated decision-making including profiling pursuant to Art. 22 GDPR does not take place.
11. Changes to This Privacy Policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to reflect changes to our services. The current version can be found on this page.
12. Contact for Data Protection
If you have any questions about data protection or wish to exercise your rights, you can reach us at:
E-mail:
Postal address:
Status: July 2026