Privacy policy

This policy explains which personal data Darvic Logistic SRL processes when you use darviclogistic.ro, ask us for a quote or contact us, why we process it, how long we keep it and what your rights are under Regulation (EU) 2016/679 (the “GDPR”) and Romanian law.

1. Who we are

The data controller is:

We have not appointed a data protection officer (DPO), as we are not required to. For any question about your data, write to contact@darviclogistic.ro.

2. What data we process

The quote request form

• About the load: loading and unloading place, loading date and whether it is flexible, type of transport, estimated weight, number of pallets or dimensions, required temperature (refrigerated loads only) and any details you write.
• Contact details: your name, company (optional), email address, phone number and how you would like us to reply (phone, WhatsApp or email).
• Your confirmation: the date and time you ticked the consent box and sent the request.
• Technical data: the IP address the request was sent from, the language of the site and where the request started (the form at the top of the page, a specific service or the full form).
• The campaign that brought you to the site: the utm_source, utm_medium, utm_campaign, utm_term and utm_content parameters of the page address, if present (for example after clicking an ad or a link in an email). They describe the campaign, not the person.

Phone, WhatsApp and email

When you call or write to us, we process your phone number or email address, your name and what you tell us about the load. For WhatsApp, the WhatsApp privacy policy also applies.

Visiting the site

The server hosting the site automatically records, in technical logs, the IP address, date and time, the page requested and the browser used. The site uses essential cookies (session and form protection) and, only with your consent, analytics cookies. The details are in the cookie policy.

3. Why we process it and on what legal basis

• To send you a quote and, if you accept it, to enter into and perform the transport contract: Article 6(1)(b) GDPR (steps taken at your request before entering into a contract, and performance of the contract). If you send the request on behalf of a company, we process your contact details on the basis of our legitimate interest in communicating with customers and prospective customers: Article 6(1)(f) GDPR.
• To prevent abuse and automated submissions (limiting the number of requests from one IP address, spam filters) and to keep proof of the request and of when you confirmed it: our legitimate interest in protecting the site and being able to show what was requested, Article 6(1)(f) GDPR.
• To learn which channels and campaigns bring in requests (request source and UTM parameters): our legitimate interest in assessing our marketing, Article 6(1)(f) GDPR.
• To comply with legal obligations (invoicing, accounting, transport documents, requests from authorities): Article 6(1)(c) GDPR.
• To measure the site’s audience (if we enable Google Analytics or Google Tag Manager): only with your consent, Article 6(1)(a) GDPR and Article 4(5) of Romanian Law no. 506/2004. You can withdraw your consent at any time from “Cookie settings” in the site footer.

For processing based on legitimate interest, we have weighed our interest against your rights: we use little data, only for the purposes above, and you can object at any time (section 7).

We do not make automated decisions or carry out profiling with legal effects on you.

4. How long we keep it

• Quote requests that do not become a contract, including the IP address, UTM parameters and confirmation time: 24 months after our last contact with you, then we delete or anonymise them.
• Requests that become a contract and the related correspondence: for the duration of the contract and then as long as accounting and tax law and the limitation periods require.
• Exports of requests generated in our admin panel (CSV/XLSX files): deleted automatically after 7 days.
• Emails received and sent: as long as the request or contract they belong to.
• Cookies: the periods listed in the cookie policy.

5. Who we share it with

We do not sell or rent your data. We only share it with those who need it for the purposes above:

• Hostinger (Hostinger International Ltd.), which hosts the site, the database and the email service through which we receive requests and send your confirmation, as our processor under a data processing agreement.
• Google (Google Ireland Limited), only if we enable Google Analytics or Google Tag Manager, and only after your consent.
• Partners involved in the transport you order, as far as needed: the sender and consignee named on the CMR note, ferry operators on routes to the UK and Ireland, customs authorities.
• Our advisers (accountant, lawyer), bound by confidentiality, and public authorities when the law requires it.

6. Transfers outside the European Economic Area

For transports to the UK, data on the transport documents reaches partners in the United Kingdom, a country covered by a European Commission adequacy decision. If we enable Google Analytics, Google may transfer data to the United States under the EU–US Data Privacy Framework or standard contractual clauses. WhatsApp (Meta) may transfer data outside the EEA under its own policy.

7. Your rights

You have the right:

• to know whether we process data about you and to receive a copy (right of access);
• to have inaccurate or incomplete data corrected (rectification);
• to have your data erased when we no longer have grounds to keep it (erasure);
• to have processing restricted, for example while we check a complaint;
• to receive the data you gave us in a structured, commonly used format and pass it to another controller (portability);
• to object to processing based on legitimate interest (objection);
• to withdraw your consent at any time, without affecting the processing carried out before.

Write to us at contact@darviclogistic.ro. We reply within one month; for complex requests this can be extended by two further months, and we will let you know. We may ask for additional information to confirm your identity.

Complaints to the supervisory authority

If you believe we process your data unlawfully, you can lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28–30, sector 1, 010336 Bucharest, Romania, www.dataprotection.ro, anspdcp@dataprotection.ro, or with the authority of the EU country where you live or work. Please write to us first: most issues can be solved quickly.

8. How we protect your data

The site uses an encrypted connection (HTTPS). Quote requests arrive in an admin panel that only authorised people in the company can access, with their own account and password; exports are deleted automatically, and access to the server and to email is password-protected.

9. Children

Our services are aimed at businesses and adults. We do not knowingly collect data about anyone under 16.

10. Changes

We may update this policy when our services, the site or the law change. The version in force is always on this page, with the date of the last update at the top.