The following privacy policy outlines how UAB "Cargotrans," located at Konstitucijos Pr. 23, LT-08105 Vilnius (Lithuania) (referred to as "Cargotrans" or "we"), collects and processes personal data.
According to Article 4, point 7 of the EU General Data Protection Regulation (GDPR), the data controller is Patrice Di Tomasso, located at UAB "Cargotrans," Konstitucijos Pr. 23, LT-08105 Vilnius, Lithuania. Contact email: executive@cargotrans.lt.
Chapter 1. Collection of Personal Data when Visiting our Website at www.cargotrans.website / www.cargotrans.lt
When you visit our website, we collect only the personal data transmitted to our server by your browser. This data is technically necessary for the website's existence, stability, and security, based on GDPR Article 6 Clause 1 Sentence 1 (f). The collected data includes:
• IP address
• Date and time of the request
• Time zone difference compared to Greenwich Mean Time (GMT)
• Request content (specific page)
• Access status / HTTP status code
• Amount of data transferred
• Website where the request is made
• Browser
• Operating system and its interface
• Browser software language and version.
Chapter 2. Collection of Personal Data when Issuing and Executing Cargo and Shipment Orders
1. For issuing, assigning, and executing cargo and shipment orders, we collect and process data provided by the customer necessary for contract execution, based on GDPR Article 6, Clause 1, Clause b. This includes:
• Surname/company name, address, phone number, email address, and, if necessary, bank details of the client/participant in the contract
• Name and telephone number of the contact person (if applicable)
• Date and time of order submission
• Detailed information about the order.
• Compliance documents (Transport Insurance, Licence, and all required document for the Purpose of Performance of the contract) and their contact details (Surname/company name, address, phone number, email address)
2. The above data are stored after order fulfillment based on legal requirements (Article 6(1)(c) and Article 6(3)(b) of the GDPR), with processing limited as much as possible.
3. Data is stored to protect legitimate interests (Article 6(1)(f) of the GDPR), except when the interests of the data subject prevail. Collected data is deleted when no longer necessary.
Chapter 3. Collection and Storage of Personal Data from Job Applications
1. When applying for employment, we collect personal data provided by the applicant based on Article 6(1)(a) and (b) of the GDPR.
2. If the application is rejected, the applicant agrees to data storage until the specified period's end. The applicant may withdraw consent at any time, with withdrawal not affecting prior lawful processing.
Chapter 4. Cloud Computing
We place great importance on the confidentiality of your personal data. Generally, we do not share your personal data with third parties. However, in certain circumstances, data sharing may be necessary to ensure the provision of our services, particularly through the use of cloud computing services. Here are the situations in which data sharing may occur:
We utilize cloud computing services to store, process, and manage certain data. This may involve storing data on servers managed by third parties, but we ensure the selection of cloud providers that adhere to high standards of security and privacy. These providers may be located in jurisdictions different from the one in which you reside.
We do not allow these cloud providers to share or use your personal data for purposes other than those strictly necessary for the provision of the services for which they have been engaged. Additionally, we ensure that adequate security measures are in place to protect your data during its transfer and storage in the cloud.
Chapter 5. Disclosure of Personal Data to Third Parties
1. Cargotrans does not carry out transports; subcontractors handle transportation. Order details are transferred to carriers or subcontractors (Article 6(1)(b) of the GDPR), with confidentiality obligations.
2. For the purpose of payments, Cargotrans transmits contractor data (name/company, bank details) to payment service providers. The legal basis for this is Article 6(1)(b) of the GDPR
Chapter 6. Rights of Interested Parties
Interested parties have rights, including the right to receive information, correct or remove data, restrict processing, object to processing, and transfer data. They may also submit complaints to the data protection supervisory authority.
Chapter 7. Objection to Processing or Cancellation
If consent is given, it can be withdrawn. In cases of processing based on a balance of interests, the interested party may object. We will examine objections and either stop, apply, or provide legitimate grounds for processing.
Chapter 7. Deletion of Personal Data and Prohibition of Use
We store and process personal data only as long as necessary or required by law. At the end of the storage period, data is deleted or no longer used.