Privacy Policy

Last updated: 3 August 2026

1. Data controller

The controller of personal data is HUGO-TRANS SP. Z O.O. with its registered office at ul. Powstańców 31, 48-250 Głogówek, NIP: 7551941647, REGON: 526078970, KRS: 0001052196 (hereinafter: the “Controller”).

Contact for data protection matters: [email protected], tel. +48 77 437 41 59.

2. Scope of processed data

Depending on how the website and contact channels are used, the Controller may process:

  • first and last name,
  • company name,
  • e-mail address,
  • phone number,
  • inquiry content and information relating to the transport order, including route and type of cargo,
  • technical data from server logs (including IP address, date and time of the request, browser and device information),
  • technical data transferred to providers of services necessary to display the website, in particular Google Fonts, Google Maps and providers of the Leaflet library and map tiles (CARTO / OpenStreetMap).

3. Purposes and legal bases of processing

Personal data are processed for the following purposes:

  • handling inquiries submitted via the contact form, e-mail or telephone and preparing a quote — Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR,
  • conclusion and performance of a contract for transport or forwarding services — Art. 6(1)(b) GDPR,
  • compliance with legal obligations incumbent on the Controller — Art. 6(1)(c) GDPR,
  • establishment, exercise or defence of legal claims — Art. 6(1)(f) GDPR,
  • ensuring the proper operation and security of the website — Art. 6(1)(f) GDPR.

4. External services

The following external services are used in the operation of the website:

  • Google Fonts — for the display of fonts,
  • Google Maps — to present the location of the Controller’s registered office on the contact page,
  • Leaflet and CARTO / OpenStreetMap map tiles — to present the area-of-operations map on the homepage.

The website does not use analytics or advertising tools for user profiling, in particular Google Analytics or Meta Pixel.

5. Retention period

Personal data are stored for the period necessary to achieve the purposes for which they were collected, including:

  • correspondence and inquiries — up to 3 years from the last contact,
  • contract-related data — for the duration of the contract and thereafter for the period required by law or until limitation periods expire,
  • technical data from server logs — according to the hosting provider’s configuration, usually no longer than 12 months,
  • data processed by providers of external services — in accordance with the rules applied by those providers.

6. Recipients of data

Personal data may be disclosed to:

  • providers of hosting and website maintenance,
  • e-mail service providers,
  • Google Ireland Limited / Google LLC — in respect of Google Fonts and Google Maps,
  • providers of the Leaflet library and CARTO / OpenStreetMap map tiles,
  • providers of accounting services,
  • subcontractors and logistics partners — solely to the extent necessary to perform the carriage,
  • authorities authorised under applicable law.

7. Transfers outside the EEA

Use of Google services and certain content delivery network (CDN) resources may involve the transfer of technical data, in particular the IP address, to countries outside the European Economic Area. In such cases, mechanisms provided for by the GDPR apply, including standard contractual clauses or adequacy decisions, where applicable.

8. Rights of the data subject

The data subject has the right to access, rectification, erasure, restriction of processing, data portability, objection to processing based on Art. 6(1)(f) GDPR, and to lodge a complaint with the President of the Personal Data Protection Office.

Requests concerning the exercise of rights should be sent to: [email protected].

9. Cookies

The rules governing the use of cookies and similar technologies are set out in the Cookies Policy.

10. Voluntary provision of data

Provision of personal data is voluntary, but necessary in order to respond to an inquiry or prepare a quote. Failure to provide the data makes it impossible to carry out those activities.

11. Changes to this policy

The Controller reserves the right to amend this Privacy Policy. The current version of the document is published on the website together with the date of its update.