Privacy Policy

Privacy Policy – Introduction

In connection with the applicability of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR"), as well as the Polish Personal Data Protection Act of 10 May 2018, and given that the protection of personal data and information security are treated as a priority in the operations of the VAN group, below we present the most important information about the ways, purposes, and legal grounds for processing your personal data.

Data Controller

This privacy policy applies to all cases in which at least one of the companies belonging to the VAN group processes personal data of which it is the controller. This covers both cases where we process personal data obtained directly from the data subject, and cases where personal data was obtained from other sources. The data controller is the company that carries out the given order.

VAN Group consists of the following entities:

  • VAN Cargo S.A., with its registered office at ul. Przecławska 8, 03-879 Warsaw, Tax ID (NIP): 524-21-25-771
  • Podlasie S.A., with its registered office at ul. Krasińskiego 29, 21-400 Łuków, Tax ID (NIP): 825-00-04-049
  • Kurier Sp. z o.o., with its registered office at ul. Chopina 3, 21-400 Łuków, Tax ID (NIP): 825-00-07-289
  • VAN cargo s.r.o., with its registered office in Liberec III, Třída 1. Máje 363, 460 01, Czech Republic
  • VAN cargo Kft., with its registered office at HU 3525 Miskolc, Régiposta u. 9, Hungary

We also inform you that, in order to achieve their business objectives and ensure the highest standards of the services provided, including customer service, the companies jointly determine the purposes and means of processing personal data and, pursuant to Article 26 GDPR, act as joint controllers of data within the structures of the VAN group. The companies actively cooperate with one another in selected processes in order to optimize costs, customer service, and management and administrative processes. Companies based in Poland use shared infrastructure (shared buildings), including jointly regulating the movement of people and goods, among other things, for the purpose of protecting persons and property. In the case of certain agreements with contractors, cooperation is established between an external party and several or all of the VAN Group companies. Carriers, as well as drivers, are offered cooperation with all of the companies, which allows for more efficient use of transport capacity. Accordingly, your personal data may, for the purposes for which it is collected, be transferred to other companies within the VAN group. This data flow does not in any way violate applicable law. Within individual personal data processing operations, the company managing or coordinating the given process is obliged to fulfill the information obligation toward the data subject and is responsible for the exercise of data subjects' rights.

Data Protection Officer

The VAN Group companies based in Poland have appointed a joint Data Protection Officer, Adam Kasperowicz. He can be contacted at: RODO@vancargo.com

The other companies can be contacted by writing to the address of each company's registered office.

Legal Basis and Purpose of Processing

We process personal data in order to:

  • Conclude and effectively perform a service agreement for the VAN Group companies. This data is processed to the extent necessary to perform the given agreement. The performance of agreements concluded by the VAN Group companies consists of obtaining transport orders and carrying them out with the help of cooperating subcontractors. Processing for this purpose is carried out on the basis of Article 6(1)(b) GDPR.
  • Pursue legitimate interests covering all activities related to the performance of orders (e.g., providing relevant information concerning a given order — driver details, vehicle location, etc.). Processing for this purpose is carried out on the basis of Article 6(1)(f) GDPR.
  • Send commercial offers regarding products, services, and tools to entities cooperating with our group. Processing for this purpose is carried out on the basis of Article 6(1)(a) GDPR.
  • Ensure the security of personal data processing, including preventing unauthorized modification of, or access to, data by third parties — for example, in relation to a change of the bank account number to which a subcontractor receives payment. Processing for this purpose is carried out on the basis of Article 6(1)(f) GDPR.

Data Transfers

In accordance with applicable law, we may transfer your data only in justified cases to trusted entities processing it on our behalf, such as: providers of IT services and systems, postal operators and couriers, payment operators, providers of consulting, accounting, legal, or audit services, insurance and legal entities in connection with a claim, other external subcontractors, and entities authorized to obtain data under applicable law, e.g., courts or law enforcement authorities — only where they request access to such data on an appropriate legal basis. Data may be transferred to countries outside the European Economic Area (a "third country" under the GDPR) only where required for the performance of a specific transport order.

Where data is transferred to a country outside the European Economic Area for which the European Commission has not issued an adequacy decision, the data will be transferred only after standard contractual clauses have been signed with the recipient, or — where such clauses have not been signed — only if you have given your consent to the transfer, or on the basis of Article 49(1)(b) or (c) GDPR.

Where personal data processing is entrusted to another entity ("sub-processing"), this may occur only on the basis of a data processing agreement obliging that entity to adequately protect the data and not to use it for its own purposes.

Retention Period

We will not store user data for longer than is necessary to achieve the purposes for which it is processed. To determine the appropriate retention period, we take into account the amount, nature, and sensitivity of the personal data, the purposes of processing, and the possibility of achieving those purposes by other means.

Your personal data will be stored for the period necessary to achieve the purposes set out above, and thereafter for the period and to the extent required by generally applicable law.

Where data is processed for the performance of an agreement (order), it will be processed for the duration of the agreement and, after its termination, until the claims of either party become time-barred.

Where data is processed on the basis of the controller's legitimate interest, it will be processed until that legitimate interest ceases to apply.

Where data is processed on the basis of consent, it will be processed at most until such consent is withdrawn.

Your Rights

In connection with the processing of your personal data, you have a number of rights:

  • The right of access to your data, i.e., to obtain information on how your personal data is processed and a copy of the data. A fee may be charged for a second or subsequent copy, of which the person concerned will be notified; the amount of the fee will correspond to the cost of preparing it.
  • The right to rectification of personal data (in the event it was recorded incorrectly or has changed).
  • The right to erasure (where the controller no longer has grounds to retain the data) or to restriction of processing (where certain data is processed to a limited extent in connection with an objection, a request for rectification, or a wish to retain the data in connection with the requester's claims).
  • The right to data portability, i.e., to have your data transferred to another controller indicated by the data subject, in a commonly used, structured, machine-readable format. This right applies only where processing is carried out for the performance of a concluded agreement or on the basis of consent to the processing of personal data.
  • The right to object to processing carried out by the controller — applicable to personal data processed on the basis of the controller's legitimate interest.
  • The right to withdraw consent to data processing at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal — applicable to consents for processing personal data for marketing purposes.
  • The right to lodge a complaint with a supervisory authority, which in Poland is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

Conditions for Providing Certain Personal Data

Personal data and the driver's location during the performance of an order are necessary elements of that process; therefore, failure to provide this data will result in the inability to cooperate.

Providing your personal data is mandatory only where the basis for processing is a legal provision or a requirement arising from an agreement concluded between the parties, constituting an inseparable element of its performance.

In addition, the 'VAN cargo – cyfrowa spedycja' application optionally requires access to:

  • Your contact list, to allow you to conveniently invite your Drivers (the application does not save or use this data for any other purpose).
  • Your photo gallery, to allow you to select an existing photo and upload it as a document to an order (the application does not save or use this data for any other purpose).

The 'VAN way GO!' application does not require any optional access permissions.

Profiling

Data is not subject to automated decision-making, including profiling.

Cookies

The website uses cookies to:

  • Automatically display the correct language version of the site for the user.
  • Store the user's session identifier when navigating between pages of the site.
  • Generate statistics on the user's use of individual pages of the site.
  • Improve the performance of page display on the site.
  • Generate statistics on the devices used to display the site.

Contact

Email address: rodo@vancargo.com
Correspondence address: VAN cargo S.A.
Data Protection Officer
ul. Przecławska 8
03-879 Warsaw
Poland