1. Data controller
The controller of your personal data is Primeroute Sp. z o.o., ul. Wrocławska 51, 63-200 Jarocin, Poland, entered in the register of entrepreneurs of the National Court Register under KRS no. 0000716677, VAT ID PL7811964209, REGON 369376140 (“we”).
You can contact us about personal data:
- by email: biuro@primeroute.pl,
- by post: Primeroute Sp. z o.o., ul. Wrocławska 51, 63-200 Jarocin, Poland.
We have not appointed a data protection officer as we are not required to do so.
2. Whose data we process and where we get it
We process data of:
- people who contact us by phone or email,
- representatives of our customers, carriers and other business partners and their staff designated for contact, such as dispatchers, forwarders and drivers,
- visitors to this website – limited to technical data recorded by the server.
We receive data directly from you or from the company you represent or work for – usually in a transport order, contract or correspondence. This includes identification and contact data: name, job title, business email address and phone number, and for drivers also data needed to carry out the transport, such as the vehicle registration number.
3. Purposes and legal bases
- Answering enquiries and correspondence – based on our legitimate interest in communicating with people who contact us (Art. 6(1)(f) GDPR) and, where the enquiry concerns a contract with you, to take steps prior to entering into it (Art. 6(1)(b) GDPR).
- Concluding and performing transport contracts – where the contract is with you, the basis is its performance (Art. 6(1)(b) GDPR). We process data of contact persons and drivers of our business partners based on our legitimate interest in carrying out orders efficiently (Art. 6(1)(f) GDPR).
- Accounting and tax obligations – issuing and storing invoices and transport documents (Art. 6(1)(c) GDPR in conjunction with tax and accounting laws).
- Establishing, pursuing or defending claims, e.g. complaints and cargo damage (Art. 6(1)(f) GDPR).
- Website security and operation – based on server logs (Art. 6(1)(f) GDPR).
4. Do you have to provide data
Providing data is voluntary. Without contact details, however, we cannot answer your enquiry, and without the data required in a transport order we cannot conclude or perform the contract. Invoice data is required by tax law.
5. Recipients
We share data only when necessary and only to the extent needed. Recipients may include:
- our website hosting and email provider,
- providers of IT systems we use to handle orders, including our transport management and GPS tracking systems,
- our accounting office, law firms and advisers,
- insurers – in the event of cargo damage,
- other parties to the transport, such as the sender, consignee, warehouse or another carrier – to the extent needed for loading and unloading,
- public authorities, such as the Road Transport Inspectorate, police or tax office – where required by law.
Processors acting on our behalf do so under a data processing agreement and only on our instructions.
6. Transfers outside the European Economic Area
As a rule, we do not transfer data outside the EEA. An exception is transport to a country outside the EEA – we then transfer the data needed to carry it out under Art. 49(1)(b) or (c) GDPR. If you display the Google map on this website, Google may transfer data to the USA; Google LLC participates in the EU-U.S. Data Privacy Framework.
7. How long we keep data
- Correspondence – for as long as needed to handle the matter and, where it relates to a contract, until the limitation period for claims expires.
- Data relating to transport contracts – for the duration of the cooperation and then until the limitation period for claims expires.
- Accounting records – for 5 years from the end of the calendar year in which the tax payment deadline passed.
- Server logs – for the period set by the hosting provider.
8. Your rights
You have the right to:
- access your data and receive a copy,
- have inaccurate data rectified or incomplete data completed,
- have your data erased when there is no longer a basis for processing it,
- restrict processing,
- data portability – where we process data by automated means based on a contract or consent,
- object to processing based on our legitimate interest – we will then stop processing unless we demonstrate compelling legitimate grounds that override your interests or the data is needed to defend claims,
- withdraw consent at any time where processing is based on consent, without affecting the lawfulness of earlier processing.
To exercise these rights, email biuro@primeroute.pl. We will respond without undue delay and within one month at the latest. We may ask for information needed to confirm your identity.
9. Automated decision-making and profiling
We do not make decisions based solely on automated processing that produce legal effects for you, and we do not profile you.
10. Cookies and third-party services
This website does not use cookies – neither our own nor for analytics or advertising. We do not use tools such as Google Analytics or social media pixels. Fonts and images are served from our own server.
Google Maps
The map in the Contact section does not load automatically. Only when you click “Show map” does your browser connect to the servers of Google Ireland Ltd., which may set cookies and process your data, including your IP address. See the Google Privacy Policy. You can also open the address directly in Google Maps instead.
Links to other websites
This website may link to other services. We are not responsible for their privacy practices – please review them after leaving our site.
11. Security
We use technical and organisational measures appropriate to the risk, including encrypted HTTPS connections, access to data limited to authorised persons and data processing agreements with our service providers.
12. Changes to this policy
We may update this policy, for example when the law changes or we add new features to the website. The current version is always available at this address, and the date at the top shows when it took effect.