YOUR PRIVACY.
CLEAR INFORMATION.

1. Controller and contact

The controller is CARGOBEAR Sp. z o. o., Franciszkańska 142, 75-255 Koszalin, Poland; NIP 4990707283, REGON 542061980, KRS 0001179983. For privacy questions and requests concerning your data, email contact@cargo-bear.com or write to this address.

2. Data we process

Enquiries contain your name, email address, message and shipment details: service, collection and delivery locations, cargo information and any date supplied. Company name and telephone number are optional. Only provide information needed to answer the enquiry; avoid sensitive information and unnecessary data about other people.

We and our providers also process technical data needed to deliver and protect the service, such as IP address, browser/device information, request time, website address, verification results and diagnostic events. Contact data comes from you; technical data comes from your browser and requests.

Providing data is voluntary. Required fields are necessary to submit the form and receive a useful response. Telephone and email remain alternatives.

3. Purposes and legal bases

Answering enquiries and communicating with company representatives serves our legitimate interest in business communication (Article 6(1)(f) GDPR). For steps you request before a contract to which you would personally be a party, Article 6(1)(b) applies.

Website security, spam prevention, fault diagnosis and handling claims serve our legitimate interests in protecting the service and our rights (Article 6(1)(f)). Where a specific law requires retention or disclosure, Article 6(1)(c) applies. An enquiry does not subscribe you to marketing.

4. Recipients and the contact form

Authorised Cargo Bear staff and providers of website maintenance, hosting, security and email may access data needed for their tasks. Vercel hosts the site; Cloudflare Turnstile protects the form; Microsoft Azure processes, queues and emails enquiries; Zoho provides the receiving mailbox. Authorities and professional advisers may receive information where necessary for a legal obligation or an identified claim.

When enabled, the form sends enquiries to our Azure backend and then to contact@cargo-bear.com, without publishing them on the website. Acceptance for processing does not itself confirm email delivery.

5. Anti-bot protection

The enabled form loads Cloudflare Turnstile. It evaluates technical signals such as IP address and browser information to detect bots. Cloudflare also uses signals to improve Turnstile. Its privacy information is linked below. You can use telephone or email if verification is unavailable.

6. International processing

Our cloud providers operate internationally. Processing or support access may occur outside the European Economic Area, including in the United States. Applicable safeguards may include adequacy decisions or the European Commission’s standard contractual clauses. Contact us for details of the safeguards applicable to your data and how to obtain a copy.

7. Retention

Enquiries that do not become orders are kept in correspondence for up to 12 months after the last contact, then deleted unless a specific legal obligation or identified dispute justifies longer retention. Contract records follow applicable legal retention periods and, where necessary, are retained until relevant claims are resolved or limitation periods expire.

The form backend is configured to remove enquiry bodies from active delivery records after the email provider accepts the send operation or a definitive failure occurs. Otherwise, a cleanup process removes the body after 7 days. Receipt and duplicate-prevention metadata is cleaned up after 30 days; rate-limit counters after 2 days. These periods do not cover delivered messages in the mailbox.

Application monitoring is configured for 30 days. Other technical logs are kept as needed to detect and resolve faults or security incidents. Relevant evidence may be preserved longer for a specific incident or claim. Provider logs and backup copies have separate service retention cycles; removal from active storage does not mean immediate removal from every backup.

8. Cookies and analytics

We do not add advertising trackers or audience analytics. Fonts and images are served with the site. Anti-bot protection may use necessary browser mechanisms and technical signals; this is not a promise that every provider request is cookie-free. Browser settings allow you to control cookies and storage, but blocking security mechanisms may prevent the form from working.

9. Your rights

Subject to GDPR conditions, you may request access, correction, erasure, restriction and data portability. You may object to processing based on legitimate interests for reasons relating to your situation. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing; this form does not rely on marketing consent.

Send requests to contact@cargo-bear.com. We may request proportionate identity verification. We normally respond within one month; any extension allowed by the GDPR will be explained within that month. You may complain to the President of the Polish Personal Data Protection Office (UODO) or your competent supervisory authority.

We do not use enquiry data for solely automated decisions with legal or similarly significant effects. Automated anti-bot checks can block a submission; telephone and email remain available.

10. Updates

We update this policy when the service or processing changes. The date above identifies this version. Further information is available through the links below.