Privacy Policy
This policy explains how ALLCARTRANS Sp. z o.o. collects, uses, and protects personal data in accordance with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
Effective date: 15 April 2026
1. Data Controller
The controller of your personal data is:
ALLCARTRANS Sp. z o.o.ul. Plac na Bramie 8
37-700 Przemyśl, PL
E-mail: contact@allcartrans.com.pl
2. What Personal Data We Collect
We collect only the data you actively provide to us:
- Name — provided in the contact form
- Email address — provided in the contact form
- Message content — the inquiry you submit
- Inquiry subject — the category you select in the contact form
We do not use website analytics, advertising trackers, or any third-party tracking scripts. We do not collect IP addresses, device fingerprints, or behavioural data.
3. Purpose and Legal Basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Responding to your contact-form inquiry | Art. 6(1)(b) — performance of a contract or pre-contractual steps taken at your request |
| Internal record-keeping of business communications | Art. 6(1)(f) — legitimate interest (managing business operations) |
| Preventing spam and abuse (Cloudflare Turnstile security check) | Art. 6(1)(f) — legitimate interest (website security) |
4. Data Retention
Contact inquiries are retained for 12 months from the date of your submission, after which they are permanently deleted. If an inquiry leads to an ongoing business relationship, we retain the relevant data for the duration of that relationship and for a further 3 years thereafter, in line with standard commercial record-keeping obligations.
5. Third-Party Data Processors
We use the following sub-processors to operate this website. Each is bound by a Data Processing Agreement and processes data only on our documented instructions.
| Processor | Purpose | Location |
|---|---|---|
| Resend Inc. | Email delivery of contact-form submissions | USA (SCCs) |
| Cloudflare, Inc. | Website hosting, DDoS protection, and Turnstile spam prevention | USA / EU PoPs (SCCs) |
SCCs = Standard Contractual Clauses (European Commission approved transfer mechanism). We do not sell or share your personal data with any other third party.
7. Your Rights Under GDPR
As a data subject you have the following rights, free of charge:
- check_circleAccess (Art. 15) — Request a copy of the personal data we hold about you.
- check_circleRectification (Art. 16) — Ask us to correct inaccurate or incomplete data.
- check_circleErasure (Art. 17) — Request deletion of your data ("right to be forgotten").
- check_circleRestriction (Art. 18) — Ask us to limit processing while accuracy is contested or a dispute is resolved.
- check_circlePortability (Art. 20) — Receive your data in a machine-readable format.
- check_circleObjection (Art. 21) — Object to processing based on legitimate interest.
To exercise any right, email us at contact@allcartrans.com.pl. We will respond within one month.
8. Right to Lodge a Complaint
If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the Polish supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw — or with the supervisory authority of your habitual residence, place of work, or place of the alleged infringement within the European Union.
9. Changes to This Policy
We may update this policy to reflect changes in our processing activities or applicable law. Material changes will be announced on this page with an updated effective date. The current version is always available at /privacy-policy.
Privacy contact
For any privacy-related questions or to exercise your rights, contact us at contact@allcartrans.com.pl. Please include "Privacy Request" in the subject line.