Data Processing Policy

The Controller

  1. The controller is Global Freight Logistics Network OÜ (“The Company”), a company established in Estonia and registered with the Estonian Commercial Register under no. 14596203.
  2. To contact The Company please use the chat support available at https://fr8.network/ or write to [email protected] Otherwise please address your correspondence to the following address:

    Global Freight Logistics Network OÜ
    Tina 9,
    Tallinn, 10126
    Estonia
  3. Processing of Personal Data

  4. The Companymay process personal data for the purpose of
    1. performance of its contractual duties to the data subject. The basis of processing personal data is article 6(1)(b) of the General Data Protection Regulation. Provision of the personal data which The Company collects about a data subject is necessary for entering into and performance of the contract between The Company and the data subject ;
    2. compiling analytics about the use of this website and of the services provided by The Company.The basis of processing of personal data is article 6(1)(f) of the General Data Protection Regulation.
    3. performance of due diligence measures set forth in the laws on prevention of money laundering and similar laws even if the law itself does not require performance of such measure, but market practice does (e.g., if financial institutions decline to transact with The Company if such measures are not performed). The basis of processing of personal data is article 6(1)(f) of the General Data Protection Regulation.
  5. Other than the personal data input or shown by the data subject itself on this website,
    1. The Company collects personal data about location (including IP address) from which and time when the data subject accesses this website , and
    2. receives data from partners or service providers to whose page the data subject is redirected in process of transacting with The Company. For instance, the providers of identification service or of digital signature or smart-contract service.
  6. The Company transfers personal data collected by it to recipients belonging to the following categories:
      providers of communication platforms,
      providers of analytics,
      providers of digital signature service and of identification service,
      providers of servers and access to network (such as Internet),
      entities belonging to the same group as The Company.
  7. Furthermore, The Company’s sub-contractors in the fields of IT and marketing who process personal data in the same servers where The Company stores personal data may have access to personal data. Furthermore, professional advisors (e.g., attorneys, auditors) and financial institutions who are subject to duties of confidentiality may gain access to such data when providing services to The Company.
  8. The Company does not transfer personal data outside the European Union and countriesin respect of which the EU Commission has adopted a decision referred to in article 45(1) of the General Data Protection Regulation (including the United States of America, provided that the Privacy Shield Framework applies).
  9. Without prejudice to the a data subject’s right to erasure, The Company stores personal data for the longer of the following periods :
    1. the period on the passing of which contractual claims from the contract between The Company and the data subject become statute-barred;
    2. the period for which The Company must keep information under applicable laws (including applicable laws on prevention of money-laundering and financing of terrorism) where The Company is under a duty, whether contractual or not, to keep such information or where the best market practice requires it.
  10. The Company may obtain biometric data about data subjects from providers of identification service (from when the data subject was identified) or from providers of digital signature or smart-contract service. In that event processing is based on article 9(2)(a) of the General Data Protection Regulation.
  11. Rights of the Data Subject

  12. The data subject has the following rights:
    1. to obtain from The Company confirmation whether personal data concerning him or her is processed,
    2. where personal data concerning him or her is processed, obtain from The Company the information listed in article 15(1) of the General Data Protection Regulation,
    3. to request that The Company rectify incorrect personal data pertaining to the data subject,
    4. to provide to The Company additional data so that incomplete personal data pertaining to the data subject is completed,
    5. to request that The Company delete, on conditions set forth in article 17 of the General Data Protection Regulation, personal data pertaining to the data subject,
    6. to request that The Company restrict processing personal data pertaining to the data subject in situations explained in article 18(1) of the General Data Protection Regulation,
    7. to receive from The Company, in .csv format, the personal data which he or she has provided to The Company,
    8. to object, on conditions set forth in article 21 of the General Data Protection Regulation, to processing of his or her personal data when The Company processes the personal data for the purposes of other legitimate interests pursued by The Company,
    9. to withdraw consent for processing biometric data. Withdrawal of consent shall not affect the lawfulness of processing the data prior to the withdrawal. Please note that in that event The Company might be unable to transact with you in any way whatsoever (including by making payments) unless you come to The Company’s office to be identified by a member of staff of The Company,
    10. to lodge a complaint with a supervisory authority (Andmekaitseinspektsioon, [email protected], Väike-Ameerika 19, Tallinn 10129, Estonia).
  13. 11. To exercise any of the rights referred to in clause 10 (except for the right to lodge a complaint with a supervisory authority) the data subject should write to The Company using the details set forth in clause 2. The Company shall answer to the request without undue delay and in any event within one month of the receipt of the request (that period may, taking account of the circumstances, be extended by two months). The time of answering will depend on the number of requests The Company receives as well as on the content of a particular request.
  14. Cookies

  15. Cookies are small text files placed on your device when you visit a website.
  16. Third parties (such as the providers of identification service) may place cookies, for instance for the purposes of advertising and analytics, to your device if you use this website.
  17. Most browsers allow you to control cookies, including turn off their acceptance by your device, through their settings’ preferences. However, if you turn off the ability of your device to accept such cookies, you may lose access to this website and the services provided via it.
  18. Most devices also allow you to delete the cookies which have already been set into your device.Browser manufacturers provide help pages relating to cookie management in their products.
    1. Chrome
    2. Microsoft Edge
    3. Internet Explorer
    4. Firefox
    5. Safari (desktop)
    6. Safari (mobile)
    7. Opera