Datenschutz

Controller

Controller

TODO — vollständige Firma inkl. Rechtsform (z. B. Main Cargo GmbH)

Address

Musterstraße 00, 60311 Frankfurt am Main

Email

dispatch@main-cargo.com

Telephone

+49 69 000 000

Data protection officer

TODO — name and contact, if one is appointed

A data protection officer must be appointed where the statutory thresholds are met. If none is appointed, requests go to the address above.

When you visit this site

Our hosting provider records access data in server log files: IP address, date and time of the request, the page requested, the referring page, browser type and version, and operating system. This data is not merged with other sources and is used to operate the site securely and to investigate faults and attacks.

The legal basis is Art. 6 (1) (f) GDPR — our legitimate interest in a technically sound and secure website. Log data is deleted after TODO — state the retention period agreed with your host, typically 7 to 30 days.

When you ask for a transport quote

If you send a request by form, email or telephone, we process the details you give us — name, company, contact details, the addresses involved, and the description of the shipment or vehicle — in order to prepare a quotation and, if you accept it, to carry out the transport.

The legal basis is Art. 6 (1) (b) GDPR for steps taken at your request before entering into a contract and for performing that contract. Where you contact us on behalf of a company, the legal basis for processing your contact details is Art. 6 (1) (f) GDPR.

Who receives your data

Carrying out a transport necessarily involves passing certain data to other parties. We share only what each party needs to do its part:

• The carrier or driver assigned to your shipment — collection and delivery addresses, contact person and telephone number at each end, and the description of the goods or vehicle
• Customs agents, for movements to or from countries outside the EU customs union
• Our insurers and, where a claim arises, loss adjusters
• Our tax advisers and auditors, and the tax authorities, to the extent required by law
• Our IT and hosting providers, as processors under Art. 28 GDPR

Vehicle transfer: photographs and handover records

For vehicle transfers we produce a photographic condition record at collection and at delivery, together with odometer and fuel readings and the signatures of the people handing over and receiving the vehicle. This record is evidence of the vehicle's condition and is processed on the basis of Art. 6 (1) (b) and (f) GDPR.

Photographs are of the vehicle. Where a person is unavoidably in shot, that part of the image is not used for any other purpose. Records are retained for the period stated below and are supplied to you as the customer.

Transfers outside the EU

Transports to Switzerland, the United Kingdom, Norway and other non-EU countries require data to be passed to parties in those countries in order to perform the contract. Such transfers take place under Art. 49 (1) (b) GDPR, or on the basis of an adequacy decision or standard contractual clauses where one applies.

How long we keep it

Enquiries that do not lead to a contract are deleted TODO — state the period, commonly 6 to 12 months after the last contact.

Data forming part of a concluded transport contract is subject to statutory retention: six years for commercial letters under § 257 HGB and ten years for accounting records under § 147 AO, each running from the end of the calendar year concerned.

Cookies and analytics

TODO — describe what this site actually sets. If it sets only technically necessary cookies and runs no analytics or tracking, say exactly that; no consent banner is then required. If any analytics, maps, fonts loaded from third parties, or advertising tools are added later, this section and a consent mechanism must be added with them.

Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you (Art. 15)
• Have inaccurate data corrected (Art. 16)
• Have data erased, where no retention obligation applies (Art. 17)
• Restrict processing (Art. 18)
• Receive your data in a portable format (Art. 20)
• Object to processing based on legitimate interests (Art. 21)
• Withdraw consent at any time, with effect for the future (Art. 7 (3))

Right to complain

You may complain to a data protection supervisory authority. The competent authority for us is TODO — Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, or the authority for your place of residence or work.