Privacy Policy

1. Who we are

The exchange is operated by UAB "Transpharmacia", company code 300662544, VAT LT100005318313, registered at Konstitucijos pr. 9-123, LT-09308 Vilnius, Lithuania (the "controller", "we", "us"). We decide why and how your personal data is processed.

For any question about this policy, or to exercise your rights, contact our data protection contact at privacy@transpharmacia.com.

2. The data we process

Depending on how you use the exchange, we process:

• Account data · your name, email address, phone number, chosen language, account type, role, the company you act for, and a securely hashed password.
• Listings and offers · the loads and capacity you post, the offers and counter-offers you make, and their prices and terms.
• Deals, reviews and messages · confirmed transactions, the ratings and reviews you leave, and the coordination messages you exchange with a counterparty.
• Consent records · the cookie and terms choices you make, with a timestamp and version, kept to demonstrate compliance.
• Technical data · IP address, browser and device information, and cookies (see the Cookie Policy). For shipments handled through the platform we also process temperature and location telemetry.

3. Why we process it, and our legal bases

• To provide your account and the marketplace, and to enable deals between users · performance of a contract with you (Art. 6(1)(b) GDPR).
• To set non-essential cookies and to send you optional marketing messages · your consent (Art. 6(1)(a)), which you can withdraw at any time.
• To keep the exchange secure, prevent fraud and abuse, operate our trust and rating system, and improve the service · our legitimate interests (Art. 6(1)(f)).
• For accounting, tax and record-keeping, and to respond to lawful requests from authorities · compliance with a legal obligation (Art. 6(1)(c)).

4. Contact details and visibility

Browsing the board is free and anonymous. Contact details such as phone numbers and email addresses are personal data: they are never shown to anonymous visitors, and are revealed in full only to the counterparty of a confirmed deal, so that the transport can be carried out. Company profile information you choose to publish is visible to signed-in users.

5. Who we share it with

• Other users you transact with · limited to what a confirmed deal requires.
• Service providers acting as our processors under a data-processing agreement · for example EU-based hosting and email delivery. They may process your data only on our instructions.
• Competent authorities · where we are legally required to disclose data.
• We never sell your personal data, and we do not use it for third-party advertising.

6. Where your data is stored

Your personal data is hosted on servers located within the EU/EEA. We do not routinely transfer personal data outside the EEA. Where a processor would involve such a transfer, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.

7. How long we keep it

• Account data · for as long as your account is active, and for a limited period afterwards to handle disputes and legal claims.
• Deal, invoice and audit records · for the statutory retention period under Lithuanian accounting and tax law (generally up to 10 years).
• Consent records · for as long as needed to demonstrate compliance.
• Cookies · for the lifetimes set out in the Cookie Policy.
• Analytics · retained only in aggregated, anonymous form.

8. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you, and receive a copy.
• Have inaccurate data corrected (rectification) and, in the cases the law allows, have data erased.
• Restrict or object to processing, including processing based on our legitimate interests and any direct marketing.
• Receive your data in a portable, machine-readable format and, where technically feasible, have it transmitted to another controller.
• Withdraw consent at any time, without affecting processing carried out before the withdrawal.

9. How to exercise your rights, and complaints

To exercise any of these rights, contact us at privacy@transpharmacia.com. We will respond within one month. There is no automated decision-making with legal or similarly significant effects on this platform.

If you believe we have not handled your data lawfully, you have the right to lodge a complaint with the supervisory authority: Valstybinė duomenų apsaugos inspekcija (VDAI), Vilnius.

10. Changes to this policy

We may update this policy as the exchange evolves. Material changes are marked with a new version, and where the law requires it we will notify you or seek your consent again.