Privacy Policy

Last updated: 14/03/2026

1. Introduction

Cargoqon s.r.o. ("we," "our," or "us") operates a logistics marketplace connecting carriers and senders in Central Europe. This Privacy Policy explains how we collect, use, and protect your information when you use our platform.

This policy applies to all users of our marketplace — both carriers (transport companies) and senders (businesses shipping goods). By using Cargoqon, you agree to the practices described here. We are committed to GDPR compliance and transparent data handling.

2. Information We Collect

2.1 Account Data

When you register, we collect:

Contact information (name, email address, phone number)
Company details (business name, registration number, VAT ID)
Account credentials (email and encrypted password)
Role selection (carrier or sender)
Contact person name and position
Business address and billing address

2.2 Logistics Data

To provide matching and booking services, we collect:

Regular routes and corridors (origin, destination, frequency)
Truck types and fleet information (curtainside, refrigerated, flatbed, etc.)
Available capacity and scheduling preferences
Cargo descriptions (type, weight, dimensions, special requirements)
Pickup and delivery locations and time windows
Shipment history and booking records

2.3 Location and Tracking Data

During active shipments, we collect GPS location data to provide real-time tracking to senders. Location tracking is active only during confirmed shipments — we do not continuously track your position. Route optimization data is collected to improve matching accuracy.

2.4 Financial Data

We collect billing information, payment history, transaction records, and bank account details necessary to process subscription payments (carriers) and transaction fees (senders). Payment card details are processed by our payment provider and never stored on our servers.

2.5 Usage Data

We automatically collect technical data when you use our platform, including IP address, browser type and version, device information, pages visited, time spent on pages, and interaction patterns. This helps us improve the platform experience.

2.6 Verification Data

To maintain a trusted marketplace, we collect:

Cargo insurance certificates and coverage details
Transport licenses (CMR, EKMT, or national licenses)
Fleet documentation and vehicle registration
Driver certifications where applicable
Business registration extracts

3. How We Use Your Information

We use your information for the following purposes:

Matching carriers with suitable loads based on routes, capacity, and preferences
Matching senders with verified carriers based on cargo requirements and location
Processing bookings, payments, and invoicing
Providing real-time shipment tracking during active deliveries
Verifying carrier credentials (insurance, licenses, fleet condition)
Calculating and displaying ratings and reliability scores
Improving our matching algorithm and platform features
Sending booking confirmations, delivery updates, and payment notifications
Preventing fraud and maintaining platform integrity
Complying with legal obligations under Slovak and EU law

4. Data Sharing Between Users

Our marketplace requires sharing certain information between carriers and senders to facilitate bookings.

What carriers see about senders:

Company name and business type
Pickup and delivery locations
Cargo type, weight, dimensions, and special requirements
Sender's platform rating
Budget range (if provided)

What senders see about carriers:

Company name and fleet size
Truck type and available capacity
Carrier's platform rating and completed deliveries
Insurance status (verified/unverified)
Approximate location during active shipment (city-level)

What is NOT shared before booking confirmation:

Personal contact details (phone, direct email) — shared only after booking is confirmed
Exact GPS coordinates — only city-level location before booking
Financial details (bank accounts, payment history)
Internal business documents

5. Legal Basis for Processing

Under GDPR, we process your data based on:

Contractual necessity — processing required to provide marketplace services you signed up for (Article 6(1)(b))
Legitimate interest — improving our services, fraud prevention, and platform security (Article 6(1)(f))
Legal obligation — tax records, commercial law requirements, and regulatory compliance (Article 6(1)(c))
Consent — marketing communications and optional analytics; you may withdraw consent at any time (Article 6(1)(a))

6. Data Sharing with Third Parties

We may share your data with:

Payment processors — to handle subscriptions and transaction fees securely
Cloud infrastructure providers — for hosting and data storage (EU-based servers)
Analytics services — aggregated, anonymized usage data to improve our platform
Insurance verification services — to confirm carrier insurance status
Legal authorities — when required by law or court order

We require all third-party processors to maintain GDPR-compliant data protection standards through Data Processing Agreements.

7. International Data Transfers

Our primary servers are located within the European Union. When data must be transferred outside the EU/EEA, we rely on EU Standard Contractual Clauses or adequacy decisions to ensure appropriate protection.

Cross-border shipment data (e.g., routes between Slovakia and Germany) is processed within the EU and does not constitute an international transfer under GDPR.

8. Data Retention

We retain your data for specific periods based on legal requirements and business needs:

Active shipment records: 5 years after completion (per Slovak Commercial Code §276)
GPS tracking data: 30 days after delivery, then aggregated and anonymized
Financial and tax records: 10 years (per Slovak Accounting Act §35)
Account data: Duration of your active account plus 2 years after closure
Marketing consent records: Until withdrawn, or 3 years of account inactivity
Verification documents: Duration of account plus 1 year

After retention periods expire, data is permanently deleted or irreversibly anonymized.

9. Your Data Protection Rights

Under GDPR, you have the following rights:

Right to access — request a copy of your personal data (Article 15)
Right to rectification — correct inaccurate or incomplete data (Article 16)
Right to erasure — request deletion of your data, subject to legal retention requirements (Article 17)
Right to restriction — limit how we process your data in certain circumstances (Article 18)
Right to data portability — receive your data in a machine-readable format (Article 20)
Right to object — object to processing based on legitimate interest (Article 21)
Right to lodge a complaint — contact the Slovak supervisory authority (UOOU SR) at dataprotection.gov.sk

To exercise any of these rights, contact us at the email below. We will respond within 30 days.

10. Data Security

We implement industry-standard security measures including encryption in transit (TLS 1.3) and at rest, regular security audits, access controls, and secure development practices.

While no system is completely secure, we take all reasonable technical and organizational measures to protect your data from unauthorized access, alteration, or disclosure.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. For material changes, we will notify you via email or a prominent notice on our platform at least 30 days before the changes take effect.

Continued use of Cargoqon after changes become effective constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or want to exercise your data protection rights, contact us:

Cargoqon s.r.o.

Email: privacy@cargoqon.com