Privacy policy

The company operating toll.one, identified on the imprint page, is the data controller for the processing described here. For anything about your personal data, email support@toll.one.

To take and fulfil an order we process:

• Your name and email address, to confirm your order, send you the vignette confirmation and answer your questions.
• Your vehicle's licence plate, country of registration and vehicle category, and the start date you chose. These are required to register the vignette and are passed to the road operator for that purpose.
• Your order, its price and its payment status. We never see or store your card details; Stripe handles the payment and tells us only whether it succeeded.
• Support emails you send us, and the operator's confirmation of your vignette, which we keep with your order.
• Technical logs needed to keep the site secure and to limit abuse, such as the time of a request and a shortened form of its network address.
• Vercel derives an approximate country from your network address. We use its two-letter country code only to preselect the registration-country field. The hint itself is not added to your order or analytics.

We process your order details because they are necessary to perform the contract you enter into with us. We keep transaction records because accounting and tax law require it. We keep security logs and limit abuse on the basis of our legitimate interest in running the service safely. We preselect the registration country on the basis of our legitimate interest in reducing input errors, and you can replace it before ordering. Analytics and advertising measurement run only with your consent, which you can withdraw at any time in the cookie settings.

We treat licence plate data as personal information. It is stored to fulfil your order and support you afterwards, it is shared only with the road operator that registers the vignette, and it is never included in analytics events.

We share personal data only with the parties needed to provide the service:

• The official road operator of the country you selected, which receives the licence plate, country of registration, vehicle category and validity period needed to register the vignette. The operator's own privacy policy applies to that registration. Operators never receive your email address; their confirmations come to an address we control.
• Stripe, our payment provider, which processes your payment and receives your email address for the payment receipt.
• Resend, which delivers our emails to you and receives the operator's confirmation on our behalf.
• Vercel, which hosts the website, and Supabase, which hosts our database. Both are configured to keep our data in the European Union, in Frankfurt.
• HeiGIT (openrouteservice, Heidelberg, Germany), when you use the route planner. Our server sends it the place names you type and the two coordinates of your route so it can calculate the roads between them. It does not receive your IP address, your dates, your vehicle or your licence plate.
• The OpenStreetMap Foundation (United Kingdom), which serves the map images on the route planner page. Your browser requests those images directly, so it receives your IP address and the map area you look at, and nothing else. No map image is requested until you have planned a route.
• Google, but only if you have allowed analytics or advertising. It receives the address of the page you are on, with the link to an order page shortened first so the private part of it is never sent, and, for a completed order, the order reference, the amount of our service fee, and the country and validity period of each vignette. It never receives your name, your email address, your licence plate or the private link to your order page.
• Our own staff, who arrange orders and answer support requests.

Some of these providers are based in the United States. Where personal data leaves the European Economic Area, it does so under the EU standard contractual clauses or the EU-US Data Privacy Framework, and it remains protected to the standard required by EU law.

We ask for your choice the first time you visit, and you can change it at any time using the Cookie settings link in the footer. Until you choose, nothing optional runs. We store:

• Your cart, kept in your browser so your selection survives a page reload. Required for the site to take an order.
• Your cookie choice itself, kept in your browser so we do not ask again on every page.
• A session cookie for staff signing in to our internal order queue. It is never set for customers.
• Analytics, only if you turn it on. See below.
• Advertising measurement, only if you turn it on. It is a separate question from analytics, and answering yes to one is not answering yes to the other.

If you allow it, we use Vercel Web Analytics to see which pages and guides people find useful, and Vercel Speed Insights to see which pages load slowly. Both are anonymous and aggregated, and neither uses advertising cookies or builds a profile of you. Analytics never receives licence plates, email addresses or names.

With the same permission we use Google Analytics 4, with Google acting as our processor. It receives the address of the page you are on and, if you complete an order, the order reference, the amount of our service fee, and the country and validity period of each vignette you bought.

If you decline, or have not yet chosen, no analytics script is loaded and no analytics request is made.

Advertising is a separate question, and the answer is no unless you say otherwise. If you allow it, we use Google Ads to tell which adverts brought someone to this site and what winning an order costs us. Google acts as our processor for this and may set advertising cookies once you have allowed it.

It receives the same short list as analytics: the address of the page you are on and, for a completed order, the order reference, the amount of our service fee, and the country and validity period of each vignette. It never receives your name, your email address, your licence plate or the private link to your order page. The link to an order page is shortened before it is sent, so the secret part of it never leaves your browser.

Nothing from Google is loaded until you allow one of these two. We do not load a script and then ask it to stay quiet: if you decline, or have not yet chosen, there is no Google script on the page and no request is made.

You can withdraw either permission at any time using the Cookie settings link in the footer. Withdrawing reloads the page, because a script that has already loaded keeps running until it does.

We keep order records, including the licence plate and the operator's confirmation, for as long as we need them to support you and for as long as accounting and tax law require us to keep transaction records. After that they are deleted.

Checkouts that are started but never paid are not used for anything and are removed in routine clean-up.

Support emails are kept while the matter they concern is open, and then for the same period as the order they relate to.

All traffic to the site is encrypted. Card details never reach us. Access to order data is limited to the staff who need it to arrange orders and answer support requests.

Under EU data protection law you can:

• Ask for a copy of the personal data we hold about you.
• Ask us to correct data that is wrong. A licence plate on a vignette that has already been registered cannot be changed; see our refund policy.
• Ask us to delete your data, except where we must keep it to meet a legal obligation.
• Ask us to restrict processing, or object to processing based on our legitimate interests.
• Receive the data you gave us in a machine readable form.
• Withdraw your consent to analytics or to advertising at any time using the Cookie settings link in the footer.
• Complain to the data protection authority in your country if you believe we have handled your data unlawfully.

Email support@toll.one from the address you used for your order and tell us what you want. We answer within one month.

We update this page when our processing changes. The date below shows when it was last reviewed.