Privacy Policy
Last updated: 15 September 2026
This policy explains how personal data is processed when you use Tacho Converter,
the free service for converting digital tachograph .ddd files to PDF available at
tacho.sramp.com, in accordance with Regulation (EU)
2016/679 (GDPR).
1. Data controller
Stefano Rampazzo
Arcugnano (Vicenza), Italy
VAT number 01926340280
E-mail: support@sramp.com
For any request concerning personal data, including the exercise of the rights described in section 8, simply write to the e-mail address above.
2. What data we process
2.1 The .ddd files you upload
A .ddd file downloaded from a driver card or a vehicle unit contains personal data:
the card holder's first name and surname, date of birth, card number, issuing authority and
expiry date, driving, working, availability and rest activities, vehicles used, start and end
locations of shifts, and recorded events and faults.
This data is processed solely to perform the conversion you requested. It is not used for any other purpose, not shared with third parties, not combined with other information, and never used for profiling.
2.2 Technical logs
For each conversion the server records one log line containing: date and time, the
network prefix of the IP address (the IP is truncated — for example
93.45.12.0 for IPv4 and /48 for IPv6 — so it cannot be traced back to an
individual user), a technical conversion identifier, and the outcome (success or failure). We do
not record the name of the uploaded file or its content.
The web server hosting the site may additionally keep standard access logs, managed by the hosting provider for security and technical operation purposes.
2.3 What we do not do
- No registration or account creation is required.
- We do not ask for or store your name, e-mail or any other identifying details.
- We do not carry out any user profiling.
- We do not sell or transfer data to third parties.
- We do not use our own tracking cookies (see section 6 for advertising).
3. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
Converting the .ddd file to PDF |
Content of the uploaded file | Performance of the service requested by the data subject (Art. 6(1)(b) GDPR) |
| Diagnosing files that fail to convert, in order to fix the converter | The failed file, stripped of its original filename | Legitimate interest in the operation and improvement of the service (Art. 6(1)(f) GDPR) |
| Security, abuse prevention and usage statistics | Technical logs with truncated IP | Legitimate interest in the security of the service (Art. 6(1)(f) GDPR) |
| Advertising that funds the free service | See section 6 | Consent of the data subject (Art. 6(1)(a) GDPR), collected through the banner |
4. How long we keep data
| Data | Retention |
|---|---|
Uploaded .ddd file, PDF and intermediate data, where conversion succeeds |
Deleted immediately once the PDF download completes. If the download is not completed, an automated routine — running every 15 minutes — removes the files, in any case within a maximum of one hour from upload. |
.ddd file that caused a conversion error |
Maximum 7 days, in a separate area of the server, renamed with a random code that removes the original filename. After 7 days it is deleted automatically. |
| Technical logs with truncated IP | 30 days, then deleted automatically. |
Being clear about failed files. When a conversion fails, the file is kept for up to seven days because that is the only way to determine which format or which section of the document was not interpreted correctly. During that period the file may be examined by the data controller in order to fix the fault. It is not shared with anyone else and is deleted at the latest when the seven days expire.
5. Who can access the data
Data is never disseminated. It is accessed only by:
- The data controller, strictly as needed to maintain the service and in the cases described in section 4.
- The hosting provider, which hosts the website and the application server on infrastructure located in the European Union, acting as a processor under Art. 28 GDPR.
-
Google Ireland Limited / Google LLC, solely for serving advertising as
described in section 6. Google has no access to the uploaded
.dddfiles or their content.
We also use Google Search Console to monitor how the site is indexed by search engines. That tool provides aggregated, anonymous data about the searches that lead to the site; it does not collect information about individual visitors and does not set cookies.
6. Cookies and advertising
Tacho Converter is free and is funded by advertising served through Google AdSense. To display ads, Google and its partners may store cookies or similar technologies on your device and process data such as your IP address, device identifier and the pages you visit, in order to select and measure ads.
Before any non-essential cookies are set you are shown a consent banner compliant with the IAB Europe Transparency & Consent Framework. You can accept, refuse, or choose in detail which purposes to allow. If you refuse, the conversion service remains fully usable and any ads shown will not be personalised.
You can change your mind at any time:
Reopen your preferences from the consent banner, or manage your Google ad settings from My Ad Center. You can also delete or block cookies in your browser settings.
For more information on how Google processes data: How Google uses information from sites that use its services.
7. Transfers outside the European Union
Uploaded files and technical logs are processed on servers located in the European Union. Data collected by Google for serving ads may be transferred to the United States: such transfers take place on the basis of the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework and, where applicable, standard contractual clauses.
8. Your rights
As a data subject you have the right, under Articles 15-22 GDPR, to:
- obtain confirmation that processing is taking place and access your data;
- request rectification or erasure;
- request restriction of, or object to, processing based on legitimate interest;
- receive your data in a structured, commonly used format (portability);
- withdraw consent to advertising at any time, without affecting the lawfulness of processing carried out before the withdrawal.
One practical limitation to be aware of. The service requires no registration and files are deleted within one hour of upload: after that point we hold nothing that links a file to the person who uploaded it, and we are therefore unable to locate your data in order to act on an access or erasure request. If you uploaded a file that failed to convert and you want it removed before the seven days are up, write to support@sramp.com stating the date, approximate time of upload and the filename, and we will delete it.
If you believe the processing of your data infringes the law, you may lodge a complaint with the Italian supervisory authority, Garante per la protezione dei dati personali, or with the authority in your country of residence.
9. Changes to this policy
The service is evolving and this policy may be updated. The date of the last update is shown at the top of this page; substantial changes will be announced on the site's home page.