Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Trunkrs is a Dutch last mile delivery carrier that offers same day and next day shipping for e commerce retailers in the Netherlands and Belgium. Retailers embed a Trunkrs tracking widget and checkout component that lets shoppers see live delivery status, switch delivery windows and add pickup instructions.
Trunkrs is a Dutch last mile delivery carrier headquartered in Amsterdam that specialises in next day and same day parcel delivery across the Netherlands and Belgium. Merchants integrate Trunkrs at checkout through Magento, Shopware, WooCommerce or custom API connectors and embed a Trunkrs branded tracking page on their order confirmation. The integration creates shipments, prints labels, schedules pickups and exposes a real time tracking widget to the consumer.
The checkout integration relies on backend API calls and does not need browser cookies on the merchant''s site to function. The tracking widget on the order confirmation page may set a small number of strictly necessary cookies for session continuity and CSRF protection. Where Trunkrs offers optional analytics or marketing reporting (delivery NPS, post purchase widgets), additional cookies and pixels are added and must follow consent rules.
For the core shipping service, contract performance (Art. 6(1)(b) GDPR) covers the processing of name, address, phone, email and order reference. Trunkrs acts as processor for the merchant. ePrivacy applies to the tracking page: strictly necessary cookies do not require consent, but any analytics, marketing or social media widget added on top does require an opt in.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Trunkrs hosts shipment data on AWS regions in the Netherlands and Germany. Some support and operational tooling sub processors may be based outside the EEA. Where this is the case, Standard Contractual Clauses under Article 46(2)(c) GDPR apply, complemented by the EU US Data Privacy Framework where the relevant entity is certified.
Sign the Trunkrs Data Processing Agreement, document Trunkrs in your record of processing as carrier, set retention rules aligned with the legal obligation to keep delivery proofs, separate the strictly necessary tracking page cookies from optional analytics behind a CMP, and inform customers in your privacy notice.
Websites using Trunkrs must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is recommended when Trunkrs is combined with marketing platforms that profile recipients, when delivery tracking is integrated into a wider behavioural analytics setup or when special category data is exchanged (for example for pharmacy deliveries).
Sample consent text
We use Trunkrs to ship your order and let you track the delivery in real time. Trunkrs receives your name, address, phone number and order reference to perform the contract. Optional analytics cookies linked to the tracking widget are only set with your consent.
Third-party domains contacted
trunkrs.nltrunkrs.nlcdn.trunkrs.nlapi.trunkrs.nltracking.trunkrs.nlapi.trunkrs.nlwidget.trunkrs.nlparcel.trunkrs.nlCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| trunkrs_session | HTTP | Session | Strictly necessary session cookie used by the Trunkrs tracking page. |
| trunkrs_pref | Preferences | 6 months | First party cookie storing the consumer's preferred delivery slot and postcode, used to prefill the checkout widget. |
| trunkrs_session | Strictly Necessary | Session | First party session cookie used to keep state between the checkout widget and the Trunkrs API call. |
| trunkrs_csrf | HTTP | Session | CSRF protection token for the Trunkrs tracking widget forms. |
| trunkrs_locale | HTTP | 1 year | Stores the preferred display language for the Trunkrs tracking page. |
| trunkrs_token | Strictly Necessary | 24 hours | Short lived token cookie set on the live tracking page that authenticates the consumer to its specific parcel. |
| trunkrs_lastorder | HTTP | 30 days | Stores the most recent order reference to allow quick access to the tracking page on returning visits. |
| trunkrs_locale | Preferences | 6 months | Stores the language and locale chosen on the tracking page so future visits show the same interface. |
Trunkrs uses cookies for user preferences — inform visitors with a consent banner.
The Trunkrs tracking page uses a small number of strictly necessary cookies (trunkrs_session, trunkrs_csrf, trunkrs_locale, trunkrs_lastorder) and does not write tracking cookies on the merchant's site unless optional analytics widgets are explicitly enabled.
The Trunkrs checkout widget sets first party cookies trunkrs_pref (preferred slot, 6 months) and trunkrs_session (session, browser session). The tracking page also writes a short lived token cookie used to authenticate the consumer to its parcel. No advertising or cross site identifier is dropped.
For the core shipping service no consent is required because the legal basis is contract performance. Consent is only needed for optional analytics or marketing widgets added on top of the tracking page.
The shipping itself does not require cookie consent because it relies on the performance of the shipping contract (Art 6(1)(b) GDPR). The optional widget cookies that remember the consumer slot preference go beyond strict necessity and require a granular consent under Art 5(3) ePrivacy.
Contract performance (Art. 6(1)(b) GDPR) for shipping, legal obligation (Art. 6(1)(c) GDPR) for invoicing and proof of delivery retention, and consent (Art. 6(1)(a) GDPR) only for optional analytics or marketing add ons.
For the parcel delivery itself: performance of contract (Art 6(1)(b)) between the retailer and the consumer, with Trunkrs acting as a processor. For optional preference cookies and analytics: consent (Art 6(1)(a) + Art 5(3) ePrivacy). For routing optimisation that aggregates non identifying telemetry: legitimate interest of the carrier (Art 6(1)(f)).
Trunkrs processes shipment data on EU AWS regions. Some support sub processors may be located outside the EEA; in that case Standard Contractual Clauses under Article 46(2)(c) GDPR apply, supplemented by the EU US Data Privacy Framework when relevant.
No. Trunkrs hosts its production on AWS in the European regions eu west 1 and eu central 1. Sub processors used for monitoring, support, and SMS delivery remain inside the EU/EEA. No transfer to the United States is performed in routine operations.
For the standard shipping integration a DPIA is generally not required. It becomes recommended when Trunkrs data is combined with marketing profiling, when special category goods are shipped (pharmacy, healthcare) or when the integration includes optional behavioural analytics widgets.
For the standard shipping leg, a DPIA is not required because the processing is contractual and limited. A DPIA is recommended when the retailer enriches Trunkrs telemetry (delivery history, slot choices, pickup locations) with marketing or loyalty profiles, which would constitute combined location and consumption profiling.
Sign the Trunkrs DPA, list Trunkrs as processor in your record, document retention aligned with the obligation to keep delivery proofs, separate strictly necessary cookies from optional widgets in your CMP, and inform customers in your privacy notice.
Sign the Trunkrs DPA, list Trunkrs in the records of processing and the privacy notice as a sub processor for delivery. Only send the minimum personal data required for the shipment (no marketing flags). Wrap the optional widget cookies behind the CMP (Preferences or Statistics category) and document the data flow in the cookie scan.
For Benelux last mile delivery, comparable options include PostNL, DPD Local, Sendcloud and Sendinblue (now Brevo) for hybrid shipping aggregation. Each has its own data residency, sub processors and DPA terms that should be reviewed for compliance fit.
Comparable EU last mile carriers with API integrations include DHL Parcel NL, PostNL, Sendcloud, MyParcel, GLS Netherlands and Bpost (Belgium).
Mention Trunkrs B.V. as carrier and processor, the strictly necessary cookies used by the tracking page, the categories of personal data shared (name, address, contact, order reference), the retention periods, and the rights and contact channel for data subjects.
List the trunkrs_pref and trunkrs_session cookies with their duration and purpose in the cookie policy. Mention Trunkrs as a recipient of order data for shipping purposes. If you display the live tracking widget on the order confirmation page, mention the token cookie used to authenticate the consumer to the parcel.