Privacy notice

This notice applies to via.supply, www.via.supply, docs.via.supply, app.via.supply and api.via.supply.

Controller

Andreas Winterhalter, Winterhalter Trading, Ellerstr. 31–33, 53119 Bonn, Germany
Email: [email protected]

Hosting, account and storage

Cloudflare provides the services and may process IP address, time, resource, referrer, browser and transmission data for secure delivery (Art. 6(1)(f) GDPR). Cloudflare privacy policy

Sign-in uses Auth0's EU tenant and may process user ID, name, email, profile image, login times and security data (Art. 6(1)(b) and (f) GDPR). Auth0 privacy and GDPR

Via uses only essential session, OAuth and CSRF cookies. Language and active organization are kept locally. Encrypted offline references, drafts and pending captures remain in IndexedDB until synchronization or local deletion. There are no advertising or analytics cookies.

Web app and customer portal

We process entered organization, contact, producer, cooperative, plot, facility, harvest, lot, unit, processing, shipment, document and audit data to provide the contract, evidence and security. Documents are stored privately in R2. Customers receive only explicitly released data; exact plot geometry is transferred only when enabled for the specific release.

Maps, location, camera and OCR

Esri receives technically necessary request data when maps or address search are opened. Esri Privacy Statement

Location and camera are used only after a user action and browser permission. GPS data is stored after confirmation. QR and OCR recognition run in the browser; Via does not receive the video or image as a recording.

Retention and rights

Data is retained only as required by its purpose; contractual, legal, claim, security and audit periods may require longer retention. Subject to statutory conditions, individuals have rights of access, correction, deletion, restriction, portability and objection. Complaints may be submitted to the North Rhine-Westphalia data protection authority. Via does not make solely automated decisions under Art. 22 GDPR.

Last updated: August 2026