This English translation is provided for convenience. The Polish version is legally binding.
This Privacy policy describes the rules for the processing of personal data and the use of cookies on expresstrucks.pl and in related services (including the Customer account konto.expresstrucks.pl). The document has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
The controller of personal data is Express Trucks Sp. z o.o., ul. Rubinowa 5, 62-081 Baranowo, KRS 0000702838, NIP 7891769213, REGON 368701938 (hereinafter: the "Controller"). Contact regarding personal data: kontakt@expresstrucks.pl. The Controller has not appointed a data protection officer (DPO); for all matters concerning data you can contact us at the above address.
| Purpose of processing | Categories of data | Legal basis |
|---|---|---|
| Fulfilment of transport orders and performance of the contract of carriage | company and contact details of the Customer, Sender and Consignee: company name, NIP, name of the contact person, address, telephone, email; shipment data | Article 6(1)(b) GDPR (performance of a contract); Article 6(1)(f) (in respect of contact persons on the counterparty's side) |
| Issuing invoices, settlements and accounting | invoicing data (company, NIP, address) | Article 6(1)(c) GDPR (legal obligation) |
| Shipment status notifications (email, SMS) | name, telephone, email, order number and status | Article 6(1)(b) and (f) GDPR |
| Handling enquiries, quotations and contact forms | data provided in the form (company, name, email, telephone, message) | Article 6(1)(b) GDPR (steps prior to concluding a contract) or (f) (responding to an enquiry) |
| Operating the Customer account | login credentials, company data, order history | Article 6(1)(b) GDPR |
| Complaints and the pursuit and defence of claims | order data, correspondence, damage documentation | Article 6(1)(f) GDPR (legitimate interest) |
| Website security and protection against abuse (reCAPTCHA, logs) | IP address, technical device and browser data, data on activity on the website | Article 6(1)(f) GDPR (legitimate interest) |
| Statistics and analytics (after consent is given) | cookie identifiers, data on use of the website | Article 6(1)(a) GDPR (consent) |
The Controller generally obtains the personal data of the Sender and Consignee (e.g. the contact person for collection or delivery) from the Customer who places the order. In such a case the Controller processes: name, address, telephone and email to the extent necessary to carry out the transport. By providing the data of third parties, the Customer represents that it is entitled to pass them on. In accordance with Article 14 GDPR, those persons have the rights described in point 7.
Entities processing data on behalf of the Controller act on the basis of data processing agreements.
Data is processed essentially within the European Economic Area (EEA). The use of Google services (reCAPTCHA, Google Analytics) may involve the transfer of data to entities of the Google group in the United States. The transfer takes place on the basis of the European Commission's adequacy decision concerning the EU–US Data Privacy Framework or standard contractual clauses (SCC), ensuring an adequate level of data protection.
You have the right to access your data, to rectify, erase or restrict its processing, to data portability, as well as the right to object to processing based on a legitimate interest and the right to withdraw consent at any time (without affecting the lawfulness of processing carried out before its withdrawal). Requests can be sent to kontakt@expresstrucks.pl. You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).
The Controller does not take, in respect of data subjects, decisions based solely on automated processing, including profiling, which would produce legal effects concerning them or similarly significantly affect them (Article 22 GDPR).
In order to protect forms against spam and abuse, the website uses the Google reCAPTCHA service. The service analyses how the website is used (including IP address, mouse movements, browser data) and passes this information to Google. The use of reCAPTCHA is subject to Google's Privacy Policy and Terms of Service. The basis is the Controller's legitimate interest in ensuring the security of the website (Article 6(1)(f) GDPR).
| Type | Purpose | Basis |
|---|---|---|
| Necessary | order form session, login to the Customer account, remembering the choice in the cookie banner, protection (reCAPTCHA) | legitimate interest / necessity (without consent) |
| Analytics | statistics on use of the website (Google Analytics 4) — activated only after consent | consent (Article 6(1)(a) GDPR) |
When you use the website, the server automatically records technical data (including IP address, the date and time of the request, browser and system type, the referring address). This data is used to ensure security, diagnostics and administration of the website and is not combined with data identifying specific persons, unless this is necessary to establish an abuse.
Creating a Customer account (konto.expresstrucks.pl) is voluntary and allows you to place orders and access your shipment history, invoices and the business discount. Account data is processed for the purpose of maintaining the account and fulfilling orders. You can close the account at any time by contacting the Controller; this does not affect the obligation to retain data resulting from legal provisions (e.g. accounting documents).
Providing data is voluntary but necessary to place and fulfil an order, issue an invoice, maintain a Customer account or respond to an enquiry. Failure to provide data may make it impossible to perform these activities.
The policy may be updated in the event of a change in regulations or the scope of services. The current version is always available at expresstrucks.pl/en/polityka-prywatnosci/. In the event of material changes, the Controller will inform about them on the website.