Privacy Policy

Controller

Responsible for the processing of personal data in this application is [[Trofi — company name, address, legal representative to be added]].

The application is operated on Trofi’s behalf by p2cx (data processor). Data-protection contact: datenschutz@p2cx.de.

What data we process

Login: your work e-mail address, used to send you a one-time sign-in link.

Report content you enter: visit and trip reports including supplier and contact details (name, role, e-mail, phone), products, volumes, notes, to-dos and photos.

A single technical session cookie that keeps you signed in. No tracking, analytics or advertising cookies are used.

Purpose & legal basis

The data is processed solely to create, store and manage visit reports and supplier relationships for Trofi.

Legal basis is the performance of and preparation for the working relationship and Trofi’s legitimate interest in documenting supplier visits (Art. 6(1)(b) and (f) GDPR), within a data-processing agreement between Trofi and p2cx.

Hosting & storage location

The application and its database are hosted at IONOS in Germany (EU). Uploaded photos are stored on the same server.

AI processing

To improve and structure the text you enter, the app uses Langdock, an EU-hosted, GDPR-compliant AI service. No data is sent to non-EU AI providers.

Recipients & international transfer

Your data is not sold or passed to third parties for their own purposes. It is processed only by our EU-based processors (IONOS for hosting, Langdock for AI). No transfer to non-EU countries takes place.

Retention

Reports and contact data are kept for as long as needed for the business purpose and according to Trofi’s instructions, unless statutory retention periods require otherwise.

Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR), and the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

To exercise your rights, contact datenschutz@p2cx.de.