Privacy Policy
Definitions
NAV IT Consulting GmbH
Last Updated: July 31, 2026
NAV IT Consulting GmbH (“NAV IT,” “we,” “us,” or “our”) is an SAP Silver Partner headquartered in Bonn, Germany, with a delivery center in Delhi, India. We provide SAP consulting services — including Transportation Management (TM), Extended Warehouse Management (EWM), Business Network for Logistics (BN4L), S/4HANA, SAP BTP, and SAP Ariba — as well as a proprietary suite of AI-powered products for the logistics and supply chain domain, including Orion, Sky and Sky Plus, Pluto Invoice, Pluto Agreement, Pluto-Automate, Pluto Chatbot, and Todar.
This Privacy Policy explains how we collect, use, disclose, and safeguard information when you:
- visit or interact with our website, nav-it.com (“Website”);
- contact us through forms, email, or other channels for sales, partnership, or recruitment purposes; or
- use one of our software applications, including Sky — The Tracking App, as described in Section 6 below.
1. Scope of This Policy
This Policy applies to personal information processed by NAV IT in connection with:
- Your use of and visits to nav-it.com;
- Business inquiries, quote requests, newsletter sign-ups, and recruitment applications submitted through the Website;
- Marketing communications and advertising, including LinkedIn and Google Ads campaigns we run; and
- Your use of NAV IT’s software applications, where a given application (such as Sky — The Tracking App) is described in a dedicated section of this Policy.
It does not apply to third-party websites or services that we do not control, even if linked from our Website.
2. What personal data we collect and process
2.1 Information You Provide Directly
| Category | Examples | Collected When |
|---|---|---|
| Contact details | Name, business email, phone number, job title, company name | Contact forms, “Request a Demo,” newsletter sign-up, RFP/quote submissions |
| Business inquiry content | Message text, project requirements, attachments | Contact and quote forms |
| Recruitment data | CV/resume, cover letter, work history, references | Careers page applications |
| Marketing preferences | Communication opt-ins/opt-outs | Newsletter and campaign sign-ups |
2.2 Information Collected Automatically
When you browse nav-it.com, we (and our service providers) may automatically collect:
- Technical data: IP address, browser type and version, device type, operating system, referring URLs.
- Usage data: pages visited, time spent on pages, click paths, and interactions with on-site content.
- Cookies and similar technologies: see Section 4 below.
2.3 Information Collected Through Advertising Partners
We use LinkedIn and Google Ads campaigns. These platforms may collect information via tracking pixels and tags placed on our Website — see Section 4.2.
2.4 Information Collected Through Our Applications
Where you use a NAV IT application rather than the Website, additional categories of information may be collected as described specifically for that product. Section 6 sets out, in detail, the information collected by Sky — The Tracking App, our enterprise logistics and transportation application.
3. How we use the personal data
We use the information described above for the following purposes:
- Responding to business inquiries, quote requests, and support questions.
- Operating, maintaining, and improving the Website and our applications.
- Sending requested marketing communications, where you have opted in (and always with an unsubscribe option).
- Running and measuring the performance of advertising campaigns (LinkedIn, Google Ads).
- Evaluating recruitment applications submitted via our Careers page.
- Complying with legal, tax, and regulatory obligations.
- Detecting, investigating, and preventing security incidents, fraud, or misuse of our systems.
We do not sell personal information, and we do not use information collected through our transportation and logistics applications (see Section 6) for advertising purposes.
4. Cookies and Tracking Technologies
4.1 Types of Cookies
| Type | Purpose | Consent Required? |
|---|---|---|
| Strictly necessary | Site functionality, security, load balancing | No |
| Analytics | Understanding site usage and performance | Yes |
| Marketing/advertising | LinkedIn Insight Tag, Google Ads conversion tracking, retargeting | Yes |
4.2 Consent Management
Non-essential cookies — including the LinkedIn Insight Tag and any Google Ads/Analytics tags — are loaded only after you provide consent through our cookie consent banner. You may withdraw consent at any time through the cookie settings link in the Website footer, or by adjusting your browser settings. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
5. Legal Basis for Processing (EU/UK Visitors)
Where the GDPR or UK GDPR applies, we rely on the following legal bases:
- Contract — to respond to your inquiries or provide requested services.
- Consent — for marketing cookies, marketing communications, and non-essential tracking.
- Legitimate interests — for Website security, fraud prevention, and analytics used to improve our services, balanced against your rights and interests.
- Legal obligation — for record-keeping required under German, EU, or applicable law.
If you are a resident of the European Economic Area (EEA), you have certain data protection rights. If you wish to be informed what personal data we hold about you and if you want it to be removed from our systems, please contact us at Theodor-Litt-Str 41, 53121, Bonn, Germany
Phone: +49 174 904 4183
E-Mail: info@nav-it.com
In certain circumstances, you have the following data protection rights:
- The right to access, update or to delete the information we have on you
- The right of rectification
The right to object - The right of restriction
- The right to data portability
- The right to withdraw consent
6. Sky — The Tracking App
Sky — The Tracking App is an enterprise logistics and transportation application developed by NAV IT, used by authorized drivers to manage shipments, deliveries, and operational reporting, integrated with SAP Transportation Management (SAP TM). It is a business tool for organizational use, not a consumer-facing app, and is made available to organizations that deploy it for their driver workforce.
6.1 Information Sky Collects
Account information. Access requires an organization-issued account created and managed by an administrator (not self-service sign-up). Sky may process a username, company email address, employee/driver identifier, and authentication tokens issued by SAP Identity Authentication (SAP IDP). Sky does not store user passwords.
Precise location. Sky accesses device GPS location (coordinates, timestamp, movement) during active transportation activities, to support live shipment tracking, route display, ETA calculation, and recording of transportation events in SAP TM. Location access is essential to the app’s core functionality; without it, tracking features will not work correctly.
Camera. Used only when the driver initiates it — for barcode/QR scanning, shipment verification, or capturing images for operational reporting. The camera is not accessed continuously or in the background.
Microphone. Used only when the driver actively initiates a voice recording to report a shipment delay or operational event (“Posting Delay Events through Voice”). Sky does not continuously record or monitor audio.
6.2 How Sky Information Is Used
Account, location, and reporting data collected by Sky is used to authenticate users, manage and record shipment operations, provide ETA calculations, process voice-reported delay events, and support transportation visibility for authorized shipment owners. This information is never used for advertising.
6.3 Sky Plus (Shipment Visibility)
Operational data collected by the Sky driver app may be made available to Sky Plus, a companion application that lets authorized shipment owners and business users view shipment location, route (via Google Maps), delivery stops, and status updates. Access in Sky Plus is restricted to users authorized to view the relevant shipment; it does not provide unrestricted access to driver information.
6.4 Sky Shares Information With
Sky shares information only with the systems necessary to deliver its functionality:
- SAP Identity Authentication (SAP IDP) — for authentication.
- SAP Transportation Management (SAP TM) — for transportation and shipment records.
- Google Maps Platform/APIs — for route display, mapping, and ETA calculation. Google processes data under its own privacy policy.
- Sky Plus — for authorized shipment visibility, as described above.
6.5 Sky Permissions Summary
| Permission | Purpose |
|---|---|
| Precise Location | Shipment tracking and transportation visibility |
| Camera | Barcode/QR scanning, shipment reporting |
| Microphone | Voice-based delay/event reporting |
| Internet | Communication with enterprise backend services |
Users may revoke permissions via device settings; doing so may disable related features. Sky is intended solely for enterprise transportation operations and is not directed at children under 13 (or the applicable minimum age in the user’s jurisdiction).
7. Information Sharing
Beyond the application-specific sharing described in Section 6, NAV IT does not sell, rent, or trade personal information. We may share information with:
- Service providers who process data on our behalf (e.g., website hosting, email delivery, CRM, analytics). Our practice is to require these providers to handle information in a manner consistent with applicable data protection law, including through data processing agreements where required.
- Advertising platforms (LinkedIn, Google) strictly for campaign delivery and measurement, where you have consented to related tracking.
- Professional advisors and authorities, where necessary to comply with law, respond to legal process, or protect our rights.
- A successor entity, in the event of a merger, acquisition, or sale of assets, subject to continued protection under a policy at least as protective as this one.
8. International Data Transfers
As a company with operations spanning Germany (headquarters), India (delivery center), and clients across other regions, information may be transferred to and processed in countries other than the one in which it was originally collected, including transfers between the EU/EEA and India. Where such transfers occur, our practice is to put in place appropriate safeguards required under applicable law, which may include mechanisms such as the EU Standard Contractual Clauses.
9. Data Retention
Company will retain your personal information only for as long as is necessary for the purposes set out in this Data Protection Policy. Company will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.
10. Data Security
We work to maintain administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. Depending on the system involved, these safeguards may include measures such as:
- HTTPS/TLS encryption for data in transit;
- Authentication via SAP Identity Authentication for application access;
- Role-based access controls;
- Monitoring and logging of security-relevant events.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. Your Rights
11.1 EU/UK Residents (GDPR / UK GDPR)
You have the right to request access to, correction of, deletion of, or restriction on the processing of your personal data; to object to processing based on legitimate interests or direct marketing; to data portability; and to withdraw consent at any time without affecting prior processing. You also have the right to lodge a complaint with your local data protection authority (in Germany, the relevant State Data Protection Authority, or the Federal Commissioner for Data Protection and Freedom of Information).
11.2 Indian Residents (Digital Personal Data Protection Act, 2023)
You have the right to obtain a summary of personal data processed about you, request correction or erasure, nominate another individual to exercise your rights in the event of death or incapacity, and file a complaint with the Data Protection Board of India.
11.3 Exercising Your Rights
To exercise any of these rights, contact us using the details in Section 15. We may need to verify your identity before processing your request.
12. Children's Privacy
Our Website and applications are directed at business professionals and enterprise users. We do not knowingly collect personal information from children under 13 (or the applicable minimum age in your jurisdiction). If you believe a child has provided us with personal information, please contact us so we can take appropriate action.
13. Third-Party Links
Our Website may contain links to third-party websites (including SAP and partner sites). We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements, business practices, or our products. The updated version will be posted on this page with a revised “Last Updated” date.
15. Contact Us
If you have any questions about this Privacy Policy, our privacy practices, or wish to exercise your rights under applicable data protection laws, please contact us using the details below.
NAV IT Consulting GmbH
Registered Office
Theodor-Litt-Straße 41
53121 Bonn
Germany
Website
https://nav-it.com
Enquiries
Email: info@nav-it.com
Data Protection Contact
If you have questions regarding the processing of your personal data or wish to exercise your rights under the General Data Protection Regulation (GDPR), the UK GDPR, the Digital Personal Data Protection Act, 2023 (India), or other applicable privacy laws, please contact our Data Protection Team at:
Email: info@nav-it.com
You can also visit our Contact us page to get in touch with us.