1. Controller

Dispatchwerk is operated by Freydom UG (limited liability), in formation, Angelika-Machinek-Straße 20, 60486 Frankfurt am Main, represented by Ifeanyi Dominic Godfrey. Contact: [email protected]. Dispatchwerk is the company’s standalone rider product; data from other Freydom products is not imported into your rider account.

2. Data we process

• Account: Name, email address, telephone number, city, postal code and encrypted password hash.
• Onboarding, rates and payout: Vehicle type, service radius, your reference journeys and derived rate basis with its revision history, Stripe account ID and identity/payout verification status. You enter your legal identity, bank details and identity documents only in Stripe-hosted onboarding. Stripe collects, verifies and maintains that KYC data; Dispatchwerk stores no document copies, bank details, date of birth or tax ID.
• Availability and location: Online status, latest heartbeat and location when you actively go online or carry out a delivery. Dispatchwerk does not request continuous location outside those periods.
• Jobs: Offers, the rate basis locked to each offer, acceptances, pickup and delivery events, independent completion confirmations, payout amounts and technical audit data.
• Handover proof: Pickup code, recipient verification, photo, signature and, where available, delivery coordinates. Photo, signature, recipient name and exact delivery coordinates are application-encrypted. At most, an explicitly identified approximate location bucket rounded to about two decimals is retained for anomaly review.
• Security: Sessions, limited technical logs, and IP/device identifiers pseudonymised with a secret key to prevent abuse and record your declarations.

3. Purposes and legal bases

We process account, job and payout data to enter into and perform contracts under Art. 6(1)(b) GDPR. Legally required records are processed under Art. 6(1)(c) GDPR. Security, fraud-prevention and tightly limited audit data rely on our legitimate interest in a secure and accountable delivery network under Art. 6(1)(f) GDPR.

4. Matching and decisions

Offers are distributed using online status, your chosen radius, distance, vehicle/capacity and the rate basis locked to the job. Performance, acceptance and decline rates are not calculated for allocation. Declining or allowing an offer to expire has no effect on later offers. Matching alone does not trigger an automated suspension. You may request human review at [email protected].

5. Recipients and service providers

Job principals and recipients receive only information required for pickup, delivery and communication. Identity checks and payouts use a Stripe-controlled Connect account with the full Stripe Dashboard. Stripe is responsible for collecting and updating verification requirements; Dispatchwerk processes only the account reference and verification status. The application and database run with a European hosting provider; Cloudflare protects and routes web traffic. Providers are used only as necessary and under contract. Where processing occurs outside the EEA, we use applicable safeguards such as adequacy decisions or EU Standard Contractual Clauses.

6. Retention

Account data is stored while your account is used and afterwards only for applicable statutory retention or defence periods. Encrypted photo, signature, recipient and exact-location evidence is normally deleted technically after 90 days and replaced by a non-personal purge record. It can remain in encrypted backups for no more than 30 additional days. Transaction and accounting data may be kept for statutory periods. Old registration rate-limit data is removed after seven days.

7. Cookies and app permissions

The website uses only technically necessary session and language-preference cookies. Rider pages use no advertising or audience-measurement cookies. Camera and location access starts only after a specific action and device permission. You can withdraw permissions in device settings, although some delivery functions may then be unavailable.

8. Your rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction, portability and objection. Contact [email protected]. You may also complain to a data-protection authority, in particular the Hessian Commissioner for Data Protection and Freedom of Information.

9. Required information

We require information marked as mandatory in registration to create your account and prepare secure job matching. Participation in the rider network is not possible without it.