1.
The Privacy Policy of Tankel Logistics Sp. z o.o. (hereinafter – Policy) explains how personal data of natural persons (hereinafter – the Data Subject) is processed in connection with the website tankel-logistics.com (hereinafter – the Website) and the services provided by Tankel Logistics.
2.
The data controller is Tankel Logistics Sp. z o.o., with its registered office at ul. Kościelna 10/26, 98-100 Łask, Poland, entered in the National Court Register (KRS) under number 0001025087, NIP 5214010493 (hereinafter – the Data Controller). The Data Subject can contact the Data Controller regarding personal data at info@tankel-logistics.com or by post at the above address.
3.
This Policy applies to:
3. 1.
visitors to the Website;
3. 2.
persons who contact the Data Controller or request a quote;
3. 3.
contact persons of the Data Controller’s clients, suppliers and business partners.
4.
The terms used in this Policy are:
4. 1.
Personal data – any information relating to an identified or identifiable natural person;
4. 2.
Processing – any operation performed on personal data, such as collection, recording, storage, use, disclosure or erasure;
4. 3.
Processor – a natural or legal person or other body which processes personal data on behalf of the Data Controller;
4. 4.
GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation);
4. 5.
Other terms used in this Policy correspond to the terms defined in the GDPR and the Polish Act of 10 May 2018 on the Protection of Personal Data.
5.
The Data Controller processes the following personal data for the following purposes and on the following legal bases:
5. 1.
Contact form: name, last name, email address, phone number and the content of the message. Purpose: responding to the enquiry. Legal basis: the Data Controller’s legitimate interest in answering enquiries (Art. 6(1)(f) GDPR) or, where the enquiry concerns the Data Controller’s services, taking steps at the Data Subject’s request before entering into a contract (Art. 6(1)(b) GDPR).
5. 2.
Quote form: pickup and delivery country and postcode, cargo dimensions, weight, quantity and stackability, additional information provided by the Data Subject, name, email address, phone number and company name. Purpose: preparing a quote and following up on it. Legal basis: taking steps at the Data Subject’s request before entering into a contract (Art. 6(1)(b) GDPR) and the Data Controller’s legitimate interest in following up on quote requests (Art. 6(1)(f) GDPR).
5. 3.
Email, phone and WhatsApp: data provided by the Data Subject when contacting the Data Controller directly. Purpose: responding to and handling the request. Legal basis: as in paragraph 5.1. When the Data Subject uses WhatsApp, WhatsApp also processes the data under its own privacy policy.
5. 4.
Clients and business partners: names, business contact details, job titles and company details of contact persons, and shipment details, including contact details of consignees needed for delivery. Purpose: providing transport, warehousing and customs services, invoicing and communication about shipments. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) where the Data Subject is a party to it, the Data Controller’s legitimate interest in cooperating with the companies the Data Subject represents (Art. 6(1)(f) GDPR), and compliance with legal obligations, including accounting, tax and customs regulations (Art. 6(1)(c) GDPR).
5. 5.
Website usage data: IP address, device and browser information, pages visited, referral source and actions taken on the Website, such as clicks. This data is collected by the tools described in Chapter III. Legal basis: the Data Subject’s consent for analytics and advertising tools (Art. 6(1)(a) GDPR) and the Data Controller’s legitimate interest in operating the Website securely (Art. 6(1)(f) GDPR).
5. 6.
Legal claims: where necessary, personal data is processed to establish, exercise or defend legal claims. Legal basis: the Data Controller’s legitimate interest (Art. 6(1)(f) GDPR).
6.
Providing personal data is voluntary. However, without the data marked as required in the Website forms, the Data Controller cannot respond to the enquiry or prepare a quote.
7.
The Data Controller does not make decisions based solely on automated processing, including profiling, that produce legal effects for the Data Subject or similarly significantly affect them.
8.
Cookies are small text files stored on the Data Subject’s device when visiting a website. The Website uses the following tools:
9.
Analytics and advertising tools are used only with the Data Subject’s consent. The Data Subject can give or withdraw consent at any time in the cookie settings on the Website. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
10.
The Data Subject can also configure their browser to block or delete cookies. Blocking some cookies may limit the functionality of the Website.
11.
The Website contains links to other services, such as LinkedIn and WhatsApp. The Data Controller is not responsible for their privacy practices. The Data Subject should read their privacy policies separately.
12.
The Data Controller shares personal data only to the extent necessary, with:
12. 1.
IT service providers, including the Website hosting and form provider (Webflow) and the analytics and advertising providers listed in Chapter III;
12. 2.
email and other office software providers;
12. 3.
carriers, warehouses and customs agencies involved in handling the Data Subject’s shipment;
12. 4.
accounting, legal and other professional advisers;
12. 5.
public authorities, such as customs, tax authorities and courts, where required by law.
13.
Processors may process personal data only on the instructions of the Data Controller.
14.
Some service providers, including Webflow, Google and Microsoft, may process personal data outside the European Economic Area, including in the United States. For shipments to or from the United Kingdom, the shipment data needed is also transferred to the United Kingdom. Such transfers take place in line with GDPR requirements: on the basis of an adequacy decision of the European Commission, such as the EU–US Data Privacy Framework, or other appropriate safeguards, such as standard contractual clauses.
15.
Personal data is stored for the following periods:
15. 1.
enquiries and quote requests that do not lead to cooperation – up to 24 months after the last contact;
15. 2.
data related to contracts – for the duration of cooperation and afterwards until the limitation periods for claims expire;
15. 3.
accounting and tax documents – for 5 years from the end of the calendar year in which the tax payment deadline expired, as required by Polish law;
15. 4.
data processed based on consent – until consent is withdrawn, or until the storage period of the cookie or tool expires;
15. 5.
data needed for legal claims – until the claims are finally resolved.
16.
The Data Controller applies appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access.
17.
The Data Subject has the right to:
17. 1.
access their personal data and receive a copy of it;
17. 2.
have their personal data rectified;
17. 3.
have their personal data erased;
17. 4.
restrict the processing of their personal data;
17. 5.
data portability;
17. 6.
object to processing based on the Data Controller’s legitimate interest;
17. 7.
withdraw consent at any time, where processing is based on consent;
17. 8.
lodge a complaint with the supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
18.
To exercise their rights, the Data Subject can contact the Data Controller at info@tankel-logistics.com.
19.
The Data Controller responds to requests within one month. For complex requests, this period may be extended by up to two further months, and the Data Subject will be informed of the extension.
20.
Exercising the Data Subject’s rights is free of charge.
21.
The Data Controller may update this Policy from time to time. The date of the latest update – 13.10.2026.