Privacy policy
Version: 2026-11-12 ·
This policy explains what personal data we process on this website (opentms.app) and why: when you write to us through the form, book a demo, open the support window, or simply read the pages.
Important, about the data inside the OpenTMS app. The data you enter there — orders, drivers, CMRs, your own clients’ details — is processed by us as a processor, on your instructions, with you as the controller. That is governed by the data processing agreement, not by this policy (see section 8).
This policy is informational (GDPR Art. 13–14) and is not part of any contract.
1. Who processes your data
The controller for this website is MB Tilfortis (trading as Tillforty), company code 304448018, Jurbarko g. 2A, Kaunas, Lithuania.
For questions about personal data, write to hello@opentms.app or call +370 677 83305.
Two separate roles. When you write to us or read this website, we are the controller and this policy applies. When you work inside the OpenTMS app, we are a processor and your company is the controller.
2. What we collect and why
| When | What | Why | Legal basis | How long |
|---|---|---|---|---|
| You send the enquiry form or email us | Name, work email, phone (optional), company, the topic you chose and your message | To reply and, if you want, arrange a demo | Steps before a contract (GDPR Art. 6(1)(b)) and the consent you tick on the form | 12 months after the last exchange, if no contract follows |
| You book a demo slot in the calendar | The name, email and time you enter in the Calendly window | So the call happens and both sides have it in a calendar | Steps before a contract (Art. 6(1)(b)) | As long as the call and the follow-up need it; Calendly keeps its own records under its policy |
| You write in the support window, bottom right | Only what you type into the conversation | To answer your question | Our legitimate interest in answering an enquiry (Art. 6(1)(f)) | As long as the conversation and the quality of the answer need it |
| You simply browse the site | Server log entries: IP address, time, page address, browser | To keep the site running and secure, and to see failures | Our legitimate interest in a working, secure website (Art. 6(1)(f)) | A few weeks, until the logs rotate away |
| You agree to analytics cookies | A pseudonymous visitor id, the pages you viewed, approximate location, device and browser | To see which pages help and which do not | Your consent (Art. 6(1)(a)), which you can withdraw at any time | Up to 14 months in Google Analytics; the cookies last 400 days |
We make no automated decisions about you and build no profiles.
4. Who we share data with
We do not sell data and do not use it for advertising. It is seen only by those without whom the site would not work, or who help us answer you:
| Recipient | What it does | Where |
|---|---|---|
| Hetzner Online GmbH | The server this website runs on | Germany (EU) |
| Google Ireland Ltd. / Google LLC | Google Analytics and Tag Manager (only after you agree), and Google Fonts, which every page loads | EU and USA |
| Oaura | The support window, bottom right: it sees only what you type into it | EU |
| Calendly LLC | Booking a demo slot on the Contact page; it also loads a Stripe script | USA |
| Slack Technologies | The enquiry form lands in our internal Slack channel so that somebody answers it | EU and USA |
5. Transfers outside the EEA
The website runs in Germany. Some of the services listed above (Google, Calendly, Stripe, Slack) are US companies or have US operations, so data can reach the USA. Those transfers rely on the European Commission’s standard contractual clauses and/or the EU–US Data Privacy Framework.
For a copy of the safeguards covering a transfer, write to hello@opentms.app.
6. How long we keep things
- Enquiries and correspondence – 12 months after the last message, if no contract follows.
- Contract and accounting records, if you become a client – for the term of the contract and 10 years after it, as Lithuanian accounting law requires.
- Server logs – a few weeks.
- Analytics data – up to 14 months in Google Analytics.
When the period ends, the data is deleted or anonymised.
7. Your rights
For the data we process as a controller, you can:
- see your data and get a copy of it;
- have inaccurate data corrected;
- ask for erasure or for processing to be restricted;
- object to processing that rests on our legitimate interest;
- receive the data in a structured format or have it moved to another controller;
- withdraw consent at any time — for cookies, with the button in section 3; withdrawal does not undo what came before.
Write to hello@opentms.app. We answer within 30 days. If our answer does not satisfy you, you can complain to the supervisory authority: the State Data Protection Inspectorate of Lithuania, L. Sapiegos g. 17, Vilnius, ada@ada.lt, vdai.lrv.lt.
If your data sits inside the OpenTMS app, contact the company using that app — it is the controller. We will help them answer.
8. Data inside the OpenTMS app
This policy does not speak for the data inside the app itself (dashboard.opentms.app): orders, trucks, drivers, CMRs, invoices and your clients’ details. We process those only on your company’s instructions, as a processor.
That relationship is set by the data processing agreement together with the services agreement: it lists the purposes, the sub-processors, the security measures and what happens after a breach.
9. Security
The site is served over HTTPS only, runs on a server in the EU, and access to enquiries and admin tools is given only to the people whose work needs it. Form submissions go straight to an internal channel — there is no separate marketing database they are copied into.
10. Changes to this policy
When what the site does with data changes, this policy changes with it and the version date at the top moves. Material changes are emailed to clients.
This English text is a translation provided for convenience. The Lithuanian version is the original and prevails if the two differ.