TagFinder Logo
TagFinder
Back to Security

GDPR Compliance

TagFinder is built by CargoBeacon AB, a Swedish company. All data processing follows EU General Data Protection Regulation (GDPR) requirements.

What data is processed

TagFinder processes IoT sensor data (temperature, position, motion). It does not collect personal data by default. Tag IDs are arbitrary identifiers — they are not tied to individuals unless the customer explicitly names assets after people (which we advise against).

Data location

All data is processed and stored within the EU (Google Cloud, europe-west1 region). No data is transferred outside the EU. Sub-processors are listed in our Data Processing Agreement.

Data subject rights

Organizations can request full data export or deletion at any time. Deletion requests are processed within 30 days. After deletion, data cannot be recovered.

Privacy by design

The platform is designed to minimize data collection. We do not use analytics trackers, advertising cookies, or user behavior profiling. The only cookies are session cookies for authentication.

CargoBeacon AB acts as a Data Processor. The customer organization is the Data Controller. A signed Data Processing Agreement (DPA) is available on request.

Questions about security?

GDPR Compliance — Privacy by Design | TagFinder