Privacy policy
Privacy policy
March 25, 2024
With the following information, we would like to inform you about the processing of your personal data collected by us and your rights arising from the data protection regulations, especially from the General Data Protection Regulation (Regulation (EU) 2016/679 – “GDPR”).
We will process your personal data for the purpose of carrying out commercial inquiries and/or recruitment processes based on applicable regulations. The legal basis for our actions is General Data Protection Regulation 2016/679/EU. Processing your personal data respects California Privacy Rights Act z 2020 r. („CCPA”) as well as Illinois Personal Information Protection Act (”PIPA”).
1. Administrator and Data Protection Officer
The administrator according to Article 4(7) of the GDPR is:
New Wave International Cargo (“NWIC”) – New Wave International Cargo Sp. z o.o. Sp. K. with its registered office in Warsaw 02-653, Al. Niepodległości 18, entered into the entrepreneurs register kept by the District Court for the Capital City of Warsaw in Warsaw, XIII Commercial Division of the National Court Register under the number KRS 0000504367. For matters related to the processing of personal data, please contact us at the email address: iod@newwaveic.com
Website: www.newwaveic.com
2. What are my rights as a data subject?
As a data subject, you have the following rights:
2.1 Right of access (Article 15 of the GDPR): You have the right to obtain information at any time about the categories of personal data processed, the purposes of processing, recipients or categories of recipients of your personal data, and the envisaged period of storage.
2.2 Right to rectification (Article 16 of the GDPR): You have the right to request rectification or completion of your personal data that is inaccurate or incomplete.
2.3 Right to erasure (“right to be forgotten”) (Article 17 of the GDPR): You have the right to request immediate erasure of your personal data. In particular, we are obliged as the controller to erase your data in the following cases:
- Your personal data are no longer necessary for the purposes for which they were collected.
- Processing of your personal data was based solely on your consent, which you have now withdrawn, and there is no other legal basis for the processing of your personal data.
- You have objected to processing based on legitimate interest or public interest, and we cannot demonstrate overriding legitimate grounds for the processing.
- Your personal data have been unlawfully processed.
- Erasure of your personal data is necessary to comply with a legal obligation to which we are subject.
- Your personal data have been collected in connection with the provision of information society services, in accordance with Article 8(1) of the GDPR.
Please note that the right to erasure is subject to limitations in the following cases, meaning that erasure is excluded:
- Your personal data are used to exercise the right to freedom of expression and information.
- Your personal data are necessary to comply with a legal obligation to which we are subject.
- Your personal data are used for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
- Your personal data are used for reasons of public interest in the area of public health.
- Your personal data are necessary for archival purposes in the public interest, for scientific or historical research purposes, or for statistical purposes.
- Your personal data are used by us for the establishment, exercise, or defense of legal claims.
2.4 Right to restriction of processing (Article 18 of the GDPR): You also have the right to request restriction of processing of your personal data; in such case, your personal data will be excluded from further processing. This right applies if:
- You contest the accuracy of your personal data and we need to verify their accuracy.
- Processing of your personal data is unlawful, and instead of requesting erasure of the data, you request restriction of processing.
- We no longer need your personal data for the purposes for which they were collected, but you still need those personal data for the establishment, exercise, or defense of legal claims.
- You have objected to processing of your personal data, and it has not yet been determined whether our legitimate grounds override your objection.
2.5 Right to data portability (Article 20 of the GDPR): You have the right to receive the personal data concerning you, which you have provided to us as the controller, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller. Furthermore, you have the right to request that your personal data be transmitted from us to another controller, where technically feasible. The requirements for the application of data portability are:
- Your personal data are processed automatically based on your consent or contract.
- Your personal data are not used to fulfill a legal obligation to which we are subject.
- Your personal data will not be used for the performance of a task carried out in the public interest.
- Your personal data will not be used for the exercise of official authority vested in us.
- Exercise of your right will not adversely affect the rights and freedoms of others.
2.6 Right to object (Article 21 of the GDPR): You have the right to object at any time to processing of your personal data based on reasons arising from your particular situation. This also applies to profiling when processing is based on our legitimate interest (Article 6(1)(f) of the GDPR) or public interest (Article 6(1)(e) of the GDPR).
Additionally, you have the right to object at any time to processing of your personal data for direct marketing purposes or profiling related to such direct marketing.
If you object to processing of your personal data based on legitimate interest, we will individually assess in each case whether we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. If we do not have compelling legitimate grounds on our side, or if your interests, rights, and freedoms prevail over ours, your personal data will cease to be processed. An exception is when your personal data are still needed for the establishment, exercise, or defense of legal claims.
If you object to processing of your personal data for direct marketing purposes or profiling related to such direct marketing, your personal data will no longer be processed for those purposes.
2.7 Right to lodge a complaint with a supervisory authority (Article 77 of the GDPR): You also have the right to lodge a complaint with a supervisory authority at any time, especially in the Member State of your habitual residence, place of work, or place of the alleged infringement if you believe that the processing of personal data concerning you is contrary to data protection regulations.
2.8 Right to withdraw consent (Article 7 of the GDPR): If you have given us consent to process your personal data, you may withdraw this consent at any time without giving reasons and informally. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
3. General information regarding the topic of ‘purposes’
As a rule, the processing of your personal data by [Company Name] is always associated with a specific, clear, and legally justified purpose, defined before the commencement of processing activities, in accordance with the principle of purpose limitation specified in Article 5(1)(b) of the GDPR. In the further part of this privacy policy, when processing activities are cited, a description of the specific purpose is also included.
4. General information regarding the topic of ‘legal basis’
We process your personal data in accordance with the GDPR. Therefore, the processing of your personal data always relies on an appropriate legal basis. Article 6 of the GDPR defines the legal bases for processing personal data.
4.1 Legal bases for processing personal data
Consent
If we obtain your consent to process your personal data, such processing will be based on Article 6(1)(a) of the GDPR. The following example illustrates this legal basis: You receive electronic and/or telephone advertisements from us, and you have given prior consent.
Contractual necessity
If the processing of your personal data is necessary for the performance of a contract with you or for pre-contractual measures taken at your request, the legal basis for processing your personal data is Article 6(1)(b) of the GDPR.
Legal obligation
In cases where the processing of your personal data is necessary to fulfill a legal obligation to which we are subject, such processing is based on Article 6(1)(c) of the GDPR.
Vital interests
If the processing of your personal data is necessary to protect your vital interests or the vital interests of another person, such processing is carried out pursuant to Article 6(1)(d) of the GDPR.
Public interest
In cases where we process your personal data to perform a task that serves a public interest or in the exercise of official authority delegated to us, the legal basis is Article 6(1)(e) of the GDPR.
Legitimate interests
If the processing of personal data is necessary to protect the legitimate interests of our company or a third party, and at the same time the interests, fundamental rights, and freedoms of the individual requiring the protection of personal data do not override our legitimate interest, the legal basis for processing is Article 6(1)(f) of the GDPR.
4.2 Legal bases for processing special categories of personal data
In exceptional cases where it is necessary to process special categories of personal data, such as:
• data concerning racial or ethnic origin (e.g., skin color or specific languages),
• data concerning political opinions (e.g., membership in a political party),
• data concerning religious or philosophical beliefs (e.g., affiliation with a sect),
• data concerning trade union membership,
• genetic data,
• biometric data (e.g., fingerprints or photographs),
• data concerning health (e.g., identification numbers concerning disability) or data concerning a person’s sex life or sexual orientation,
such processing is based on one of the following legal bases defined in Article 9 of the GDPR:
Explicit consent
If you have given us explicit consent to process the above categories of personal data, this constitutes the legal basis for processing under Article 9(2)(a) of the GDPR.
Compliance with social security and employment law obligations
If the processing of special categories of personal data related to you is necessary to fulfill a legal obligation arising from social security or employment law, the legal basis for this processing is Article 9(2)(b) of the GDPR.
Protection of vital interests
If the processing of special categories of personal data related to you is necessary to protect your vital interests or the vital interests of another person, such processing is carried out pursuant to Article 9(2)(c) of the GDPR.
Data made manifestly public by the data subject
If special categories of your personal data that were previously made public by you are processed, the processing of this data is based on Article 9(2)(e) of the GDPR.
Establishment, exercise, or defense of legal claims
If the processing of special categories of personal data related to you serves us in establishing, exercising, or defending legal claims, the legal basis for processing is Article 9(2)(f) of the GDPR.
Substantial public interest
In the case of processing special categories of your personal data to protect a substantial public interest arising from Union or Member State law, this processing is based on Article 9(2)(g) of the GDPR.
Assessment of work capacity or other medical purposes, such as healthcare
If the processing of special categories of personal data related to you results from a provision of Union or Member State law or a collective agreement with a medical professional and is carried out for the purposes of preventive or occupational medicine, assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment, or the management of health or social care systems and services, such processing is based on Article 9(2)(h) of the GDPR.
Public interest in the area of public health
If the processing of special categories of personal data related to you is necessary due to reasons of public interest in the area of public health, including protection against serious cross-border health threats such as pandemics, such processing is based on Article 9(2)(i) of the GDPR.
Archiving purposes, scientific / historical research, or statistical purposes
If the processing of special categories of personal data related to you results from Union or Member State law that provides for processing for archiving purposes, scientific or historical research purposes, or statistical purposes in the public interest, such processing is based on Article 9(2)(j) of the GDPR.
5. General information regarding the topic of ‘data retention obligation and deletion periods’
Unless otherwise specified, we delete personal data in accordance with Article 17 of the GDPR or restrict their processing in accordance with Article 18 of the GDPR. Apart from the specified retention periods outlined in this privacy policy, we process and store your personal data only for the time necessary to fulfill our contractual and legal obligations. Personal data that are no longer needed after achieving the purpose are regularly deleted, unless further processing is necessary for a limited time, which may arise from other legally permissible purposes.
6. General information regarding ‘sharing of personal data’
Recipient of your data
Generally, we do not sell or rent user data. The transfer of personal data to third parties outside the scope described in this privacy policy will only occur when necessary for processing the specific service requested. To this end, we collaborate with service providers in areas such as marketing, sales, IT, logistics, and human resources, among others. We choose these service providers very carefully. In other cases, we may disclose data to government authorities upon their request. However, this only occurs when there is a legal obligation, such as a court decision.
Locations where your personal data is processed
In general, we process your data in Poland (EU/EEA).
7. Cookies
7.1 General information about ‘cookies’
We use cookies on our website. Cookies are small text files that are stored on your hard drive in accordance with the browser you use, and through which certain information is transmitted to the website that sets the cookie. Many of the cookies we use are deleted after the end of the browser session (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser during your next visit (persistent cookies).
Various types of cookies are used on our website for different purposes. For better understanding, each cookie has been assigned to one of the following categories:
Technically necessary
Cookies belonging to this category are essential to ensure the basic functionality and/or security of this website.
Functionality
Cookies in this category are used to enhance user comfort, such as by storing preferences like language settings, text size adjustments, usernames, or local settings.
Marketing
These cookies are used by advertisers to display ads that are relevant to their potential customers.
Performance and analysis
This type of cookie is used by us to analyze website usage for the purpose of measuring and improving its performance.
In the settings of the browser you use, you have the option to reject the acceptance of cookies or, for example, to limit this refusal to cookies from other sites, so-called third-party cookies. However, the browser settings you choose may prevent you from using all the features of our website to their fullest extent. Here you will find further information on managing cookies in the respective browsers:
• How to delete cookies in Internet Explorer (microsoft.com)
• Clear, enable, and manage cookies in Chrome browser – Computer – Google Chrome Help
• Delete browsing, search, and download history in Firefox browser | Firefox Help (mozilla.org)
8. List of entities processing personal data
List of entities owning tools processing personal data along with full address details:
- WordPress:
Owner: Automattic Inc.
Adress: 60 29th Street #343, San Francisco, CA 94110, USA
Website: wordpress.com - Google Analytics:
Owner: Google LLC
Adress: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Website: analytics.google.com - Facebook:
Owner: Meta Platforms, Inc. (dawniej Facebook, Inc.)
Adress: 1601 Willow Road, Menlo Park, California 94025, USA
Website: facebook.com - Instagram:
Owner: Meta Platforms, Inc.
Adress: 1601 Willow Road, Menlo Park, California 94025, USA
Website: instagram.com - Threads:
Owner: Meta Platforms, Inc. (dawniej Facebook, Inc.)
Adress: 1601 Willow Road, Menlo Park, California 94025, USA
Website: threads.net - Google AdWords (obecnie Google Ads):
Owner: Google LLC
Adress: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Website: ads.google.com - Google Display Network:
Owner: Google LLC
Adress: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Website: ads.google.com - Google PMax (prawdopodobnie Google PageMax):
Owner: Google LLC
Adress: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA - Google Tag Manager:
Owner: Google LLC
Adress: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Website: tagmanager.google.com - Salesforce:
Owner: Salesforce.com, Inc.
Adress: The Landmark @ One Market, Suite 300, San Francisco, CA 94105, USA
Website: salesforce.com - TMW:
Owner: TMW Systems, Inc. (część Trimble)
Adress: 6085 Parkland Blvd., Suite 330, Mayfield Heights, OH 44124, USA
Website: tmwsystems.com - CargoWise One:
Owner: WiseTech Global Limited
Adress: Level 12, 100 Arthur Street, North Sydney, NSW 2060, Australia
Website: wisetechglobal.com - SpeedTrans:
Owner: Maciosoft Spółka Z Ograniczoną Odpowiedzialnością
Adress: Grodziska 23, 96-321 Musuły, Polska
Website: listprzewozowy.com.pl/ - Freshdesk:
Owner: Freshworks Inc.
Adress: 2950 S. Delaware Street, Suite 201, San Mateo, CA 94403, USA
Website: freshdesk.com - LinkedIn:
Owner: Microsoft Corporation
Adress: One Microsoft Way, Redmond, WA 98052-6399, USA
Website: linkedin.com - E-container
Owner: RRMEDIA SP. Z O.O.
Adress: UL. JANKA WIŚNIEWSKIEGO 31 LOK.328 81-156 GDYNIA
Website: e-containers.eu - Trans.eu
Owner: Trans.eu Group S.A.
Adress: ul. Racławicka 2-4 53-146 Wrocław
Website: trans.eu - Winsadib
Owner: Andrzej Huzar Huzar Software
Adress: ul. Tczewska 14 51-429 Wrocław
Website: huzar.pl - Wyjątkowy-prezent
Owner: Wyjątkowy Prezent Sp. z o.o.
Adress: ul. Edwarda Jelinka 27 01-646 Warszawa
Website: wyjatkowyprezent.pl - Notino
Owner: Notino, s.r.o
Adress: Londýnské náměstí 881/6 63900 Brno, Czechy
Website: notino.pl - Timocom
Owner: TIMOCOM Sp. z o.o.
Adress: ul. Powstańców Śląskich 15 53-332 Wrocław
Website: timocom.pl - Transporeon
Owner: Transporeon GmbH
Adress: Heidenheimer Straße 55/1 89075 Ulm Germany
Website: transporeon.com - Mailchimp
Owner: Intuit Mailchimp
Adress: 405 N Angier Ave. NE Atlanta, GA 30308 USA
Website: mailchimp.com - Zapier
Owner: Zapier, Inc.
Adress: 548 Market St. #62411, San Francisco, CA 94104-5401
Website: zapier.com - RMIS i TruckStop
Owner: Internet Truckstop Group, LLC
Adress: 1444 S. Entertainment Avenue., Suite 110, Boise, ID 83709
Website: truckstop.com - Prezent Idealny
Owner: BonCard Polska Sp. z o.o.
Adress: ul. Starołęcka 7 61-361 Poznań
Website: prezentidealny.com - SHIPPEO
Owner: Shippeo
Adress: 60-62 rue d’Hauteville, 75010 Paris, France
Website: shippeo.com - Windward
Owner: Windward Ltd.
Adress: 2 Hashlosha St., Tel Aviv, Israel
Website: windward.ai - Insert
Owner: InsERT S.A.
Adress: ul. Jerzmanowska 2 54-519 Wrocław
Website: insert.com.pl - OpenPhone
Owner: DP-Dock GmbH
Adress: Ballindamm 39, 20095 Hamburg, Germany
Website: openphone.com - UPS
Owner: UPS Polska sp. z o.o.
Adress: ul. Prądzyńskiego 1/3, 01-222 Warszawa
Website: ups.com - POWER DAT
Owner: DAT Solutions
Adress: PO Box 783801 PHILADELPHIA, PA 19178-3801
Website: dat.com - DocuSign
Owner: DocuSign Inc
Adress: 221 Main St Ste 1550, San Francisco, California, 94105-1947
Website: docusign.com - Quickbook
Owner: Intuit Inc.
Adress: Mountain View, 2700 Coast Ave, United States
Website: quickbooks.intuit.com - S-net
Owner: S-NET Communications, Inc.
Adress: 1100 Woodfield Rd, Suite 101 Schaumburg, IL 60173
Website: snetconnect.com - Wirtualna-centrala
Owner: VoxNet Sp. z o.o. sp.
Adress: ul. Sztygarów 2, 41-807 Zabrze
Website: alekontakt.pl - GIFT MALL POLAND Sp z o.o.
Owner: GIFT MALL POLAND Sp z o.o.
Adress: ul. Bonifraterska 17, 00-203 Warszawa
Website:
https://giftmall.pl/
New Wave International Cargo:
In the scope of Global Data Protection
March 25, 2024
With the following information, we would like to inform you about the processing of your personal data collected by us and your rights arising from the data protection regulations, especially from the General Data Protection Regulation (Regulation (EU) 2016/679 – “GDPR”).
We will process your personal data for the purpose of carrying out commercial inquiries and/or recruitment processes based on applicable regulations. The legal basis for our actions is General Data Protection Regulation 2016/679/EU. Processing your personal data respects California Privacy Rights Act z 2020 r. („CCPA”) as well as Illinois Personal Information Protection Act (”PIPA”).
1. Administrator and Data Protection Officer
The administrator according to Article 4(7) of the GDPR is:
New Wave International Cargo (“NWIC”) – New Wave International Cargo Sp. z o.o. Sp. K. with its registered office in Warsaw 02-653, Al. Niepodległości 18, entered into the entrepreneurs register kept by the District Court for the Capital City of Warsaw in Warsaw, XIII Commercial Division of the National Court Register under the number KRS 0000504367. For matters related to the processing of personal data, please contact us at the email address: iod@newwaveic.com
Website: www.newwaveic.com
2. What are my rights as a data subject?
As a data subject, you have the following rights:
2.1 Right of access (Article 15 of the GDPR): You have the right to obtain information at any time about the categories of personal data processed, the purposes of processing, recipients or categories of recipients of your personal data, and the envisaged period of storage.
2.2 Right to rectification (Article 16 of the GDPR): You have the right to request rectification or completion of your personal data that is inaccurate or incomplete.
2.3 Right to erasure (“right to be forgotten”) (Article 17 of the GDPR): You have the right to request immediate erasure of your personal data. In particular, we are obliged as the controller to erase your data in the following cases:
- Your personal data are no longer necessary for the purposes for which they were collected.
- Processing of your personal data was based solely on your consent, which you have now withdrawn, and there is no other legal basis for the processing of your personal data.
- You have objected to processing based on legitimate interest or public interest, and we cannot demonstrate overriding legitimate grounds for the processing.
- Your personal data have been unlawfully processed.
- Erasure of your personal data is necessary to comply with a legal obligation to which we are subject.
- Your personal data have been collected in connection with the provision of information society services, in accordance with Article 8(1) of the GDPR.
Please note that the right to erasure is subject to limitations in the following cases, meaning that erasure is excluded:
- Your personal data are used to exercise the right to freedom of expression and information.
- Your personal data are necessary to comply with a legal obligation to which we are subject.
- Your personal data are used for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
- Your personal data are used for reasons of public interest in the area of public health.
- Your personal data are necessary for archival purposes in the public interest, for scientific or historical research purposes, or for statistical purposes.
- Your personal data are used by us for the establishment, exercise, or defense of legal claims.
2.4 Right to restriction of processing (Article 18 of the GDPR): You also have the right to request restriction of processing of your personal data; in such case, your personal data will be excluded from further processing. This right applies if:
- You contest the accuracy of your personal data and we need to verify their accuracy.
- Processing of your personal data is unlawful, and instead of requesting erasure of the data, you request restriction of processing.
- We no longer need your personal data for the purposes for which they were collected, but you still need those personal data for the establishment, exercise, or defense of legal claims.
- You have objected to processing of your personal data, and it has not yet been determined whether our legitimate grounds override your objection.
2.5 Right to data portability (Article 20 of the GDPR): You have the right to receive the personal data concerning you, which you have provided to us as the controller, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller. Furthermore, you have the right to request that your personal data be transmitted from us to another controller, where technically feasible. The requirements for the application of data portability are:
- Your personal data are processed automatically based on your consent or contract.
- Your personal data are not used to fulfill a legal obligation to which we are subject.
- Your personal data will not be used for the performance of a task carried out in the public interest.
- Your personal data will not be used for the exercise of official authority vested in us.
- Exercise of your right will not adversely affect the rights and freedoms of others.
2.6 Right to object (Article 21 of the GDPR): You have the right to object at any time to processing of your personal data based on reasons arising from your particular situation. This also applies to profiling when processing is based on our legitimate interest (Article 6(1)(f) of the GDPR) or public interest (Article 6(1)(e) of the GDPR).
Additionally, you have the right to object at any time to processing of your personal data for direct marketing purposes or profiling related to such direct marketing.
If you object to processing of your personal data based on legitimate interest, we will individually assess in each case whether we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. If we do not have compelling legitimate grounds on our side, or if your interests, rights, and freedoms prevail over ours, your personal data will cease to be processed. An exception is when your personal data are still needed for the establishment, exercise, or defense of legal claims.
If you object to processing of your personal data for direct marketing purposes or profiling related to such direct marketing, your personal data will no longer be processed for those purposes.
2.7 Right to lodge a complaint with a supervisory authority (Article 77 of the GDPR): You also have the right to lodge a complaint with a supervisory authority at any time, especially in the Member State of your habitual residence, place of work, or place of the alleged infringement if you believe that the processing of personal data concerning you is contrary to data protection regulations.
2.8 Right to withdraw consent (Article 7 of the GDPR): If you have given us consent to process your personal data, you may withdraw this consent at any time without giving reasons and informally. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
3. General information regarding the topic of ‘purposes’
As a rule, the processing of your personal data by [Company Name] is always associated with a specific, clear, and legally justified purpose, defined before the commencement of processing activities, in accordance with the principle of purpose limitation specified in Article 5(1)(b) of the GDPR. In the further part of this privacy policy, when processing activities are cited, a description of the specific purpose is also included.
4. General information regarding the topic of ‘legal basis’
We process your personal data in accordance with the GDPR. Therefore, the processing of your personal data always relies on an appropriate legal basis. Article 6 of the GDPR defines the legal bases for processing personal data.
4.1 Legal bases for processing personal data
Consent
If we obtain your consent to process your personal data, such processing will be based on Article 6(1)(a) of the GDPR. The following example illustrates this legal basis: You receive electronic and/or telephone advertisements from us, and you have given prior consent.
Contractual necessity
If the processing of your personal data is necessary for the performance of a contract with you or for pre-contractual measures taken at your request, the legal basis for processing your personal data is Article 6(1)(b) of the GDPR.
Legal obligation
In cases where the processing of your personal data is necessary to fulfill a legal obligation to which we are subject, such processing is based on Article 6(1)(c) of the GDPR.
Vital interests
If the processing of your personal data is necessary to protect your vital interests or the vital interests of another person, such processing is carried out pursuant to Article 6(1)(d) of the GDPR.
Public interest
In cases where we process your personal data to perform a task that serves a public interest or in the exercise of official authority delegated to us, the legal basis is Article 6(1)(e) of the GDPR.
Legitimate interests
If the processing of personal data is necessary to protect the legitimate interests of our company or a third party, and at the same time the interests, fundamental rights, and freedoms of the individual requiring the protection of personal data do not override our legitimate interest, the legal basis for processing is Article 6(1)(f) of the GDPR.
4.2 Legal bases for processing special categories of personal data
In exceptional cases where it is necessary to process special categories of personal data, such as:
• data concerning racial or ethnic origin (e.g., skin color or specific languages),
• data concerning political opinions (e.g., membership in a political party),
• data concerning religious or philosophical beliefs (e.g., affiliation with a sect),
• data concerning trade union membership,
• genetic data,
• biometric data (e.g., fingerprints or photographs),
• data concerning health (e.g., identification numbers concerning disability) or data concerning a person’s sex life or sexual orientation,
such processing is based on one of the following legal bases defined in Article 9 of the GDPR:
Explicit consent
If you have given us explicit consent to process the above categories of personal data, this constitutes the legal basis for processing under Article 9(2)(a) of the GDPR.
Compliance with social security and employment law obligations
If the processing of special categories of personal data related to you is necessary to fulfill a legal obligation arising from social security or employment law, the legal basis for this processing is Article 9(2)(b) of the GDPR.
Protection of vital interests
If the processing of special categories of personal data related to you is necessary to protect your vital interests or the vital interests of another person, such processing is carried out pursuant to Article 9(2)(c) of the GDPR.
Data made manifestly public by the data subject
If special categories of your personal data that were previously made public by you are processed, the processing of this data is based on Article 9(2)(e) of the GDPR.
Establishment, exercise, or defense of legal claims
If the processing of special categories of personal data related to you serves us in establishing, exercising, or defending legal claims, the legal basis for processing is Article 9(2)(f) of the GDPR.
Substantial public interest
In the case of processing special categories of your personal data to protect a substantial public interest arising from Union or Member State law, this processing is based on Article 9(2)(g) of the GDPR.
Assessment of work capacity or other medical purposes, such as healthcare
If the processing of special categories of personal data related to you results from a provision of Union or Member State law or a collective agreement with a medical professional and is carried out for the purposes of preventive or occupational medicine, assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment, or the management of health or social care systems and services, such processing is based on Article 9(2)(h) of the GDPR.
Public interest in the area of public health
If the processing of special categories of personal data related to you is necessary due to reasons of public interest in the area of public health, including protection against serious cross-border health threats such as pandemics, such processing is based on Article 9(2)(i) of the GDPR.
Archiving purposes, scientific / historical research, or statistical purposes
If the processing of special categories of personal data related to you results from Union or Member State law that provides for processing for archiving purposes, scientific or historical research purposes, or statistical purposes in the public interest, such processing is based on Article 9(2)(j) of the GDPR.
5. General information regarding the topic of ‘data retention obligation and deletion periods’
Unless otherwise specified, we delete personal data in accordance with Article 17 of the GDPR or restrict their processing in accordance with Article 18 of the GDPR. Apart from the specified retention periods outlined in this privacy policy, we process and store your personal data only for the time necessary to fulfill our contractual and legal obligations. Personal data that are no longer needed after achieving the purpose are regularly deleted, unless further processing is necessary for a limited time, which may arise from other legally permissible purposes.
6. General information regarding ‘sharing of personal data’
Recipient of your data
Generally, we do not sell or rent user data. The transfer of personal data to third parties outside the scope described in this privacy policy will only occur when necessary for processing the specific service requested. To this end, we collaborate with service providers in areas such as marketing, sales, IT, logistics, and human resources, among others. We choose these service providers very carefully. In other cases, we may disclose data to government authorities upon their request. However, this only occurs when there is a legal obligation, such as a court decision.
Locations where your personal data is processed
In general, we process your data in Poland (EU/EEA).
7. Cookies
7.1 General information about ‘cookies’
We use cookies on our website. Cookies are small text files that are stored on your hard drive in accordance with the browser you use, and through which certain information is transmitted to the website that sets the cookie. Many of the cookies we use are deleted after the end of the browser session (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser during your next visit (persistent cookies).
Various types of cookies are used on our website for different purposes. For better understanding, each cookie has been assigned to one of the following categories:
Technically necessary
Cookies belonging to this category are essential to ensure the basic functionality and/or security of this website.
Functionality
Cookies in this category are used to enhance user comfort, such as by storing preferences like language settings, text size adjustments, usernames, or local settings.
Marketing
These cookies are used by advertisers to display ads that are relevant to their potential customers.
Performance and analysis
This type of cookie is used by us to analyze website usage for the purpose of measuring and improving its performance.
In the settings of the browser you use, you have the option to reject the acceptance of cookies or, for example, to limit this refusal to cookies from other sites, so-called third-party cookies. However, the browser settings you choose may prevent you from using all the features of our website to their fullest extent. Here you will find further information on managing cookies in the respective browsers:
• How to delete cookies in Internet Explorer (microsoft.com)
• Clear, enable, and manage cookies in Chrome browser – Computer – Google Chrome Help
• Delete browsing, search, and download history in Firefox browser | Firefox Help (mozilla.org)
8. List of entities processing personal data
List of entities owning tools processing personal data along with full address details:
- WordPress:
Owner: Automattic Inc.
Adress: 60 29th Street #343, San Francisco, CA 94110, USA
Website: wordpress.com - Google Analytics:
Owner: Google LLC
Adress: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Website: analytics.google.com - Facebook:
Owner: Meta Platforms, Inc. (dawniej Facebook, Inc.)
Adress: 1601 Willow Road, Menlo Park, California 94025, USA
Website: facebook.com - Instagram:
Owner: Meta Platforms, Inc.
Adress: 1601 Willow Road, Menlo Park, California 94025, USA
Website: instagram.com - Threads:
Owner: Meta Platforms, Inc. (dawniej Facebook, Inc.)
Adress: 1601 Willow Road, Menlo Park, California 94025, USA
Website: threads.net - Google AdWords (obecnie Google Ads):
Owner: Google LLC
Adress: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Website: ads.google.com - Google Display Network:
Owner: Google LLC
Adress: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Website: ads.google.com - Google PMax (prawdopodobnie Google PageMax):
Owner: Google LLC
Adress: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA - Google Tag Manager:
Owner: Google LLC
Adress: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Website: tagmanager.google.com - Salesforce:
Owner: Salesforce.com, Inc.
Adress: The Landmark @ One Market, Suite 300, San Francisco, CA 94105, USA
Website: salesforce.com - TMW:
Owner: TMW Systems, Inc. (część Trimble)
Adress: 6085 Parkland Blvd., Suite 330, Mayfield Heights, OH 44124, USA
Website: tmwsystems.com - CargoWise One:
Owner: WiseTech Global Limited
Adress: Level 12, 100 Arthur Street, North Sydney, NSW 2060, Australia
Website: wisetechglobal.com - SpeedTrans:
Owner: Maciosoft Spółka Z Ograniczoną Odpowiedzialnością
Adress: Grodziska 23, 96-321 Musuły, Polska
Website: listprzewozowy.com.pl/ - Freshdesk:
Owner: Freshworks Inc.
Adress: 2950 S. Delaware Street, Suite 201, San Mateo, CA 94403, USA
Website: freshdesk.com - LinkedIn:
Owner: Microsoft Corporation
Adress: One Microsoft Way, Redmond, WA 98052-6399, USA
Website: linkedin.com - E-container
Owner: RRMEDIA SP. Z O.O.
Adress: UL. JANKA WIŚNIEWSKIEGO 31 LOK.328 81-156 GDYNIA
Website: e-containers.eu - Trans.eu
Owner: Trans.eu Group S.A.
Adress: ul. Racławicka 2-4 53-146 Wrocław
Website: trans.eu - Winsadib
Owner: Andrzej Huzar Huzar Software
Adress: ul. Tczewska 14 51-429 Wrocław
Website: huzar.pl - Wyjątkowy-prezent
Owner: Wyjątkowy Prezent Sp. z o.o.
Adress: ul. Edwarda Jelinka 27 01-646 Warszawa
Website: wyjatkowyprezent.pl - Notino
Owner: Notino, s.r.o
Adress: Londýnské náměstí 881/6 63900 Brno, Czechy
Website: notino.pl - Timocom
Owner: TIMOCOM Sp. z o.o.
Adress: ul. Powstańców Śląskich 15 53-332 Wrocław
Website: timocom.pl - Transporeon
Owner: Transporeon GmbH
Adress: Heidenheimer Straße 55/1 89075 Ulm Germany
Website: transporeon.com - Mailchimp
Owner: Intuit Mailchimp
Adress: 405 N Angier Ave. NE Atlanta, GA 30308 USA
Website: mailchimp.com - Zapier
Owner: Zapier, Inc.
Adress: 548 Market St. #62411, San Francisco, CA 94104-5401
Website: zapier.com - RMIS i TruckStop
Owner: Internet Truckstop Group, LLC
Adress: 1444 S. Entertainment Avenue., Suite 110, Boise, ID 83709
Website: truckstop.com - Prezent Idealny
Owner: BonCard Polska Sp. z o.o.
Adress: ul. Starołęcka 7 61-361 Poznań
Website: prezentidealny.com - SHIPPEO
Owner: Shippeo
Adress: 60-62 rue d’Hauteville, 75010 Paris, France
Website: shippeo.com - Windward
Owner: Windward Ltd.
Adress: 2 Hashlosha St., Tel Aviv, Israel
Website: windward.ai - Insert
Owner: InsERT S.A.
Adress: ul. Jerzmanowska 2 54-519 Wrocław
Website: insert.com.pl - OpenPhone
Owner: DP-Dock GmbH
Adress: Ballindamm 39, 20095 Hamburg, Germany
Website: openphone.com - UPS
Owner: UPS Polska sp. z o.o.
Adress: ul. Prądzyńskiego 1/3, 01-222 Warszawa
Website: ups.com - POWER DAT
Owner: DAT Solutions
Adress: PO Box 783801 PHILADELPHIA, PA 19178-3801
Website: dat.com - DocuSign
Owner: DocuSign Inc
Adress: 221 Main St Ste 1550, San Francisco, California, 94105-1947
Website: docusign.com - Quickbook
Owner: Intuit Inc.
Adress: Mountain View, 2700 Coast Ave, United States
Website: quickbooks.intuit.com - S-net
Owner: S-NET Communications, Inc.
Adress: 1100 Woodfield Rd, Suite 101 Schaumburg, IL 60173
Website: snetconnect.com - Wirtualna-centrala
Owner: VoxNet Sp. z o.o. sp.
Adress: ul. Sztygarów 2, 41-807 Zabrze
Website: alekontakt.pl - GIFT MALL POLAND Sp z o.o.
Owner: GIFT MALL POLAND Sp z o.o.
Adress: ul. Bonifraterska 17, 00-203 Warszawa
Website:
https://giftmall.pl/
New Wave International Cargo:
In the scope of Global Data Protection
