Privacy statement – GENERAL
This privacy statement applies to the processing of personal data by Cargo International B.V. (Cargo). Cargo processes a large amount of data from customers and consumers who use Cargo’s services. Both this customer and the consumer are very valuable to Cargo. Guaranteeing a careful and safe processing of the data of the customer and the consumer, in particular personal data, is therefore of great importance to Cargo. By means of this privacy statement we want to give you insight into how and for which purposes we process your personal data.
Personal data processed by Cargo (art. 4 paragraph 2 GDPR)
Cargo processes personal data about you because you use the services of Cargo and / or because you provide this information to Cargo itself. Personal data is data concerning an identified or identifiable natural person. This means that the information about a person must be traceable to become an individual person, or on the basis of the data it must be clear about what person it is. We process the following personal data from you:
- name, address, e-mail address, telephone number;
- vehicle registration number;
- contact information;
If you, as a consumer, make use of Cargo’s services, the following will also be applicable personal data processed:
- your payment details, for example bank account number or credit card number;
- in some cases, your first and last name;
- in some cases your address details;
- in some cases, information about the product or service that you purchased from our customer;
- other personal data that you actively provide, for example in correspondence and by telephone;
Purposes of processing personal data (Article 6, paragraph 1, sub b GDPR)
We process your personal data to implement our agreement. The Cargo websites and services are not aimed at activities that require the processing of special and / or sensitive personal data. Cargo therefore does not request this information from you. Cargo only processes data to the extent that this is necessary for its services. Your personal data is therefore only processed for the following purposes:
- for assessing your application;
- for drafting and executing the agreement;
- for processing export documentation
- for sending information about (changes to) your product or service.
If you use the Cargo websites, your personal data will be processed:
- for creating a personal environment (dashboard) on the Cargo websites
- for providing access to your personal environment;
- to analyze your behavior on Cargo’s websites in order to be able to use them
improve and adjust the range of products and services to your preferences;
- for analyzing your surfing behavior on the websites of Cargo on the basis of which Cargo products and services are tailored to your needs.
We will not process your personal data for other purposes without your permission. You can withdraw your consent at any time and without giving any reason.
During the connection procedure you were asked to give permission for the processing of various types of personal data. We do this to make sure that you agree with the processing. You are however always entitled to withdraw this permission. When you withdraw your permission we can no longer perform our services properly and in some cases need to terminate the service.
Third parties (Art. 4, paragraph 10 GDPR)
Cargo will share your personal data with third parties if this is necessary for the execution of the agreement or based on legal obligations.
Security measures (art. 32 GDPR)
We have taken various appropriate technical and organizational measures to protect your personal data, including measures against unauthorized access, unauthorized use, unauthorized modification, unlawful and unintended destruction and unintended advice. Your personal data is only consulted or processed by employees of Cargo. Our employees have a confidentiality obligation. Also with regard to this subject we have taken measures for third parties, who have signed an processor agreement.
Data retention period (art. 5 paragraph 1 sub e GDPR)
Cargo does not store your personal data longer than the mandatory legal term or, if such mandatory legal period does not apply, no longer than is strictly necessary for the realization of the objectives for which your personal data were obtained.
You have the right to access, correct, limit or delete personal data that Cargo processes about you unless Cargo cannot grant these rights on the basis of a legal obligation. A detailed description of your rights can be found in the document Rights of those involved. If you want to make use of these rights, you can contact Cargo.
In addition, the website uses tracking cookies, which track visitor behavior and can be used for advertisements and retargeting. With these cookies, target group statistics are also collected in an anonymous manner in order to be able to place advertisements in a more targeted manner.
You can opt out of cookies by setting your internet browser correctly so that it no longer stores cookies. You can also delete all previously saved information via your browser settings.
|_fbp||Advertisement||3 months||This cookie is set by Facebook to deliver advertisement when they are on Facebook or a digital platform powered by Facebook advertising after visiting this website.|
|_ga||Analytics||2 years||This cookie is installed by Google Analytics. The cookie is used to calculate visitor, session, camapign data and keep track of site usage for the site's analytics report. The cookies store information anonymously and assigns a randoly generated number to identify unique visitors.|
|_gat_gtag||Analytics||1 day||Identification code of website for tracking visits.|
|_gid||Analytics||1 day||This cookie is installed by Google Analytics. The cookie is used to store information of how visitors use a website and helps in creating an analytics report of how the wbsite is doing. The data collected including the number visitors, the source where they have come from, and the pages viisted in an anonymous form.|
|_hjDoneTestersWidgets||third party||365 days||Hotjar cookie. This cookie is set once a visitor submits their information in the Recruit User Testers widget. It is used to ensure that the same form does not re-appear if it has already been filled in.|
|_hjid||third party||365 days||Hotjar cookie. This cookie is set when the customer first lands on a page with the Hotjar script. It is used to persist the Hotjar User ID, unique to that site on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID.|
|_hjIncludedInSample||third party||365 days||Hotjar cookie. This session cookie is set to let Hotjar know whether that visitor is included in the sample which is used to generate funnels.|
|_hjRecordingLastActivity||third party||session||This should be found in sessionStorage (as opposed to cookies). This gets updated when a visitor recording starts and when data is sent through the WebSocket (the visitor performs an action that Hotjar records).|
|_hjShownFeedbackMessage||third party||365 days||This cookie is set when a visitor minimizes or completes Incoming Feedback. This is done so that the Incoming Feedback will load as minimized immediately if they navigate to another page where it is set to show.|
|fr||Advertisement||3 months||The cookie is set by Facebook to show relevant advertisments to the users and measure and improve the advertisements. The cookie also tracks the behavior of the user across the web on sites that have Facebook pixel or Facebook social plugin.|
|hjTLDTest||third party||session||Checks to determine if cookies can be loaded on the site, and is removed shortly afterward.|
|NID||Session||6 months||The NID cookie contains a unique ID Google uses to remember your preferences and other information, such as your preferred language (e.g. English), how many search results you wish to have shown per page (e.g. 10 or 20), and whether or not you wish to have Google’s SafeSearch filter turned on.|
|PHPSESSID||Session||session||This cookie is native to PHP applications. The cookie is used to store and identify a users' unique session ID for the purpose of managing user session on the website. The cookie is a session cookies and is deleted when all the browser windows are closed.|
Rights of those involved
The General Data Protection Regulation (GDPR) grant the following rights to persons whose personal data are processed:
Right to information (art. 15 GDPR)
A data subject must be informed of the processing of his personal data and the purpose of it. Also when the purpose of processing changes, the person concerned will be informed about this.
Right to view (art. 15 GDPR)
A data subject has the right to view the personal data that is processed by him / her. The controller must provide the data subject a copy of the personal data that will be processed.
Right to rectification (art. 16 GDPR)
A data subject has the right to have his or her incorrect personal data corrected. The rectification must take place immediately. The controller has to inform any recipient to whom personal data have been provided of any rectification, unless this is impossible or requires a disproportionate amount of effort.
Right to data change / oblivion (art. 17 GDPR)
The controller is obliged to delete the personal data of the data subject without unreasonable delay when:
- personal data is no longer needed for the purposes for which they were collected or processed;
- the data subject withdraws his consent and there is no other legal basis for processing;
- the data subject objects to the processing;
- the personal data has been processed unlawfully.
Right of objection / right to limit processing (art. 18 GDPR)
The right to restriction means that the personal data may not (temporarily) be processed and changed. This restriction must be clearly indicated by the controller. When the restriction is lifted, the person concerned must be informed.
Right to transferability / data portability (art. 20 GDPR)
This right means that a data subject must be able to access the data of a controller in structured, current and machine-readable form and has the right to have this information transferred to another controller or have it transferred directly. Whitout being hindered unless this detracts from the rights and freedoms of others.
Right not to be subject to automated individual decision-making / profiling (art. 22 GDPR)
In some cases, automated individual decision-making is possible:
- it is necessary for the formation or implementation of an agreement;
- it is permitted by EU or national law;
- it is based on the explicit consent of the person concerned.