Privacy policy
This document must be completed before the form is activated. The controller’s details, service providers, retention periods and any data transfers require confirmation. Text in brackets marks missing information.
1. Data controller
The data controller is [LEGAL COMPANY NAME], trading as Velocity Transport, at the address: [ADDRESS]. Contact for personal data enquiries: Kasperekzns@gmail.com.
2. What data we process and why
Once the form is activated, the information provided in an enquiry will be used to prepare a quote, contact you and arrange the transport details. This includes collection and delivery locations, vehicle details, a phone number and any voluntarily provided name, email address, date and additional information.
Preparing a quote at the data subject’s request may be based on Article 6(1)(b) GDPR. Other correspondence, including communication with company representatives, may be based on Article 6(1)(f) GDPR: the legitimate interest in handling correspondence and conducting business. [CONFIRM THE LEGAL BASES THAT APPLY TO THE ACTUAL PROCESSES].
Ticking the box next to the privacy policy confirms that you have read this information. It is not consent to marketing. Required details are needed to handle the enquiry; all other information is optional.
3. Recipients of data
Data may be processed by hosting, email and enquiry management providers under appropriate agreements. [COMPLETE: selected hosting, email provider, CRM and other recipients]. The project is prepared for hosting on Vercel; the controller must confirm the providers and scope of services.
4. Retention period
[SPECIFY RETENTION PERIODS OR CRITERIA for enquiries, correspondence, contractual documents and technical logs]. Data should be retained only for as long as necessary for the processing purpose, legal obligations or a justified need to pursue claims.
5. Your rights
Depending on the legal basis and the conditions set out in the GDPR, you may request access to, rectification or erasure of your data, restriction of processing or data portability, and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it without affecting the lawfulness of earlier processing.
You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office. Please send data-related requests to the controller at the address above.
6. Transfers outside the EEA
[DETERMINE WHETHER THE SELECTED PROVIDERS TRANSFER DATA OUTSIDE THE EEA. If so, describe the countries, legal basis, safeguards and how to obtain information about them].
7. Cookies, logs and profiling
The application contains no advertising tools, Google Analytics or user tracking mechanisms. It does not save enquiries in browser storage. There is no automated decision-making or profiling in the code.
The hosting provider may process technical data, such as IP addresses, request times and browser information, to operate and secure the website. [SPECIFY THE SCOPE AND RETENTION PERIOD OF LOGS AT THE SELECTED PROVIDER]. For more information, see Cookies.
8. Updates to this document
[EFFECTIVE DATE]. This policy should be updated whenever data processing practices change. The reference for the information obligation is Article 13 GDPR (EUR-Lex).