Polityka prywatności

1. Who we are

The exchange is operated by Cargo Market (the "controller", "we", "us"). The operating entity is being established; its registration details will be published here as soon as they exist, and we will not state them before then. We decide why and how your personal data is processed.

A published contact address will be added here once the operating entity is registered. Section 5 sets out the limited circumstances in which data is shared.

2. The data we process

Depending on how you use the exchange, we process:

• Account data · your name, email address, phone number, chosen language, account type, role, the company you act for, and a securely hashed password.
• Listings and offers · the loads and capacity you post, the offers and counter-offers you make, and their prices and terms.
• Deals, reviews and messages · confirmed transactions, the ratings and reviews you leave, and the coordination messages you exchange with a counterparty.
• Consent records · the cookie and terms choices you make, with a timestamp and version, kept to demonstrate compliance.
• Technical data · IP address, browser and device information, and cookies (see the Cookie Policy). For shipments handled through the platform we also process temperature and location telemetry.

3. Why we process it, and our legal bases

• To provide your account and the marketplace, and to enable deals between users · performance of a contract with you (Art. 6(1)(b) GDPR).
• To set non-essential cookies · your consent (Art. 6(1)(a)), which you can withdraw at any time from the cookie settings link in the footer.
• To keep the exchange secure, prevent fraud and abuse, operate our trust and rating system, and improve the service · our legitimate interests (Art. 6(1)(f)).
• For accounting, tax and record-keeping, and to respond to lawful requests from authorities · compliance with a legal obligation (Art. 6(1)(c)).

4. Contact details and visibility

Browsing the board is free and anonymous. Contact details such as phone numbers and email addresses are personal data: they are never shown to anonymous visitors. A signed-in user sees the contact person’s name and a masked indication that an email address and a phone number exist; the full details are released only to the counterparty of a confirmed deal, so that the transport can be carried out.

Your company profile is public. The name, city, country, account status and open listings on it are served to anyone, with or without an account, and while you have a listing open the profile is also submitted to search engines and may be indexed. A profile with nothing on the board is served with an instruction not to index it. Contact details are never part of the public profile.

5. Who we share it with

• Other users you transact with · limited to what a confirmed deal requires.
• Service providers acting as our processors under a data-processing agreement · currently EU-based hosting. They may process your data only on our instructions.
• Competent authorities · where we are legally required to disclose data.
• We never sell your personal data, and we do not use it for third-party advertising.

6. Where your data is stored

Your personal data is hosted on servers located within the EU/EEA. We do not routinely transfer personal data outside the EEA. Where a processor would involve such a transfer, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.

7. How long we keep it

• Account data · for as long as your account is active, and for a limited period afterwards to handle disputes and legal claims.
• Deal, invoice and audit records · for the statutory retention period under Lithuanian accounting and tax law (generally up to 10 years).
• Consent records · for as long as needed to demonstrate compliance.
• Cookies · for the lifetimes set out in the Cookie Policy.
• Analytics · retained only in aggregated, anonymous form.

8. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you, and receive a copy.
• Have inaccurate data corrected (rectification) and, in the cases the law allows, have data erased.
• Restrict or object to processing, including processing based on our legitimate interests and any direct marketing.
• Receive your data in a portable, machine-readable format and, where technically feasible, have it transmitted to another controller.
• Withdraw consent at any time, without affecting processing carried out before the withdrawal.

9. How to exercise your rights, and complaints

You can view and correct most of your data directly in your account. Closing your account, and the remaining rights including access and portability, require a request to us: a published channel for that is being set up together with the operating entity and will appear on this page. We respond to requests within one month. There is no automated decision-making with legal or similarly significant effects on this platform.

If you believe we have not handled your data lawfully, you have the right to lodge a complaint with the data protection supervisory authority in your EU/EEA country of residence.

10. Changes to this policy

We may update this policy as the exchange evolves. Material changes are marked with a new version, and where the law requires it we will notify you or seek your consent again.