1. Introduction
Your privacy matters to us. This Privacy Policy describes the types of data we collect, the purposes and legal bases of processing, retention periods, recipients, your rights and the security measures we apply.
By using the website https://cargostelia.com and/or submitting a request through our contact forms, you confirm that you have read and understood this policy. If you do not agree with its terms, please do not use the contact forms and limit your use of the website to public browsing.
2. Data controller
The controller of personal data is:
- Name: Cargo Stelia S.R.L.
- Business activity: road transport, maritime containers, distribution and logistics solutions
- Website: https://cargostelia.com
- Email: office@cargostelia.com
- Phone: +40 765 264 068
- Operating area: Romania, the European Union and international routes (including CIS), according to the services offered
For any request related to data protection, you may contact us at the email address above, with the subject line “Data protection / GDPR”.
3. What data we process
3.1. Data provided voluntarily through forms
When you request a quote or contact us through the website, we may collect:
- first and last name;
- email address;
- phone number;
- company name (if provided);
- route / transport type details;
- message content and any other information you voluntarily include;
- date and time of submission;
- minimal technical information associated with submission (for example, a form security token).
3.2. Technical and browsing data
While using the website, technical data necessary for operation and security may be processed, such as:
- session data (for form security and the administration panel);
- cookie preference / consent stored locally in the browser;
- IP address and server technical logs (to the extent generated by the hosting infrastructure), used for security, troubleshooting and abuse prevention.
Details about cookies and similar technologies are described in the Cookie Policy.
3.3. Data we do not intentionally request
We do not request special categories of data (for example data concerning health, racial or ethnic origin, religious beliefs, biometric data). Please do not include such information in messages sent through the form.
4. Sources of data
Data comes primarily directly from you, through:
- completing the form on the contact page or the homepage;
- subsequent email or phone communications related to a request already submitted;
- interaction with the website (session, cookie preferences, security elements).
5. Purposes and legal bases of processing
We process data only for specified, explicit and legitimate purposes:
- Reviewing and responding to quote / contact requests — legal basis: steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR) and/or legitimate interest in responding to commercial inquiries (Art. 6(1)(f) GDPR);
- Operational communication regarding route, transport type, timing and logistics details — legal basis: Art. 6(1)(b) and/or (f) GDPR;
- Internal lead management (recording, tracking, internal archiving of requests) — legal basis: legitimate interest (Art. 6(1)(f) GDPR);
- Website security (CSRF protection, sessions, prevention of abuse and spam) — legal basis: legitimate interest (Art. 6(1)(f) GDPR);
- Compliance with applicable legal obligations (for example, retention needed in a commercial/accounting context, responding to authority requests) — legal basis: Art. 6(1)(c) GDPR;
- Managing cookie consent — legal basis: consent (Art. 6(1)(a) GDPR) where required, and legitimate interest / legal obligation for strictly necessary cookies.
We do not use data for automated profiling that produces legal effects concerning you, and we do not sell personal data.
6. How we store and manage requests
Requests submitted through website forms are recorded in Cargo Stelia’s internal system (secure file storage, accessible only to authorised staff via the administration panel) and may be forwarded by email to the company’s operational address so we can respond promptly.
Access to this data is restricted and used exclusively for the purposes described in this policy.
7. Recipients of data
Data may be disclosed only when necessary, to:
- authorised Cargo Stelia staff (commercial / operational / administrative team);
- technical service providers (hosting, email, IT maintenance), acting as processors under confidentiality and security obligations;
- logistics partners or subcontractors, only if necessary to prepare / perform a transport solution you requested;
- public authorities, where there is a legal obligation or a valid request.
We do not transfer data to third parties for marketing purposes without your consent.
8. Transfers outside the European Economic Area
As a rule, data is processed in Romania / the European Union. If, for technical reasons (for example hosting or email infrastructure), a transfer outside the EEA occurs, it will be carried out only with appropriate GDPR safeguards (such as standard contractual clauses or other applicable legal mechanisms).
9. Retention period
We keep data only for as long as necessary for the purposes for which it was collected:
- quote / contact requests: for the duration of handling the request and, afterwards, for a reasonable commercial follow-up and internal record period (usually up to 24–36 months), unless a legal or contractual reason requires a longer period;
- session / security data: for the session duration or until the related technical mechanisms expire;
- cookie preference: until deleted from the browser or until consent expires / is reset;
- data required for legal obligations: according to applicable legal deadlines.
After the relevant periods expire, data is deleted, anonymised or restrictively archived, as appropriate.
10. Your rights
Under the GDPR, you have the following rights:
- right of access — you may request confirmation of whether we process your data and a copy of that data;
- right to rectification — you may ask for inaccurate data to be corrected or incomplete data to be completed;
- right to erasure (“right to be forgotten”), under the conditions of the law;
- right to restriction of processing;
- right to object — especially where processing is based on legitimate interest;
- right to data portability, where applicable;
- right to withdraw consent, where processing is based on consent (withdrawal does not affect the lawfulness of prior processing);
- right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) — www.dataprotection.ro.
To exercise your rights, send a request to office@cargostelia.com. We may ask for additional information to verify your identity, in order to prevent unauthorised access to data.
We generally respond within no more than 30 days, with the possibility of extension under the GDPR in complex cases.
11. Data security
We apply appropriate technical and organisational measures to protect data against unauthorised access, loss, alteration or disclosure, including:
- restricted access to the administration panel;
- form protection against forged requests (CSRF);
- anti-spam measures on forms;
- protection of sensitive folders through server configuration;
- use of secure connections (HTTPS), where the hosting infrastructure allows / has it enabled;
- need-to-know principle for internal access to requests.
No data transmission over the internet is completely risk-free; however, we commit to maintaining a level of protection proportionate to the risk and the nature of the data processed.
12. Minors
The website and services of Cargo Stelia are intended for companies and adults interested in transport and logistics services. We do not intentionally request data from minors. If you become aware that a minor has sent us data, please contact us for deletion.
13. Links to other websites
The website may contain links to external pages. We do not control the privacy policies of those websites and recommend that you review them separately before submitting data.
14. Updates to this policy
We may periodically update this Privacy Policy to reflect legislative, technical or operational changes. The version in force is the one published on this page, with the last update date indicated above. In the event of significant changes, we may display a visible notice on the website.
15. Contact
For questions, GDPR requests or clarifications regarding this policy:
- Email: office@cargostelia.com
- Phone: +40 765 264 068
- Form: contact page
- Cookie Policy: see details