1. Controller

The data controller responsible for processing your personal data is:

Transroad Logistics S.L.
Carrer de l'Empordà 1-7
08211 Castellar del Vallès, Barcelona, Spain
CIF: B13738190
Email: gdpr@trans-road.com
Phone: +34 932 000 000

2. Data We Collect

We collect the following personal data when you submit a freight quote request:

Full name
Email address
Phone number
Company name
Shipment details (goods description, weight, origin, destination)

We also collect anonymised usage data through Google Analytics 4 (see Section 6), but only if you consent via the cookie banner.

3. Purpose and Legal Basis

Purpose	Legal Basis
Responding to your freight quote request	Art. 6(1)(b) GDPR — steps taken at your request prior to entering a contract
Following up on submitted quotes	Art. 6(1)(f) GDPR — our legitimate interest in providing freight services
Analytics (with your consent)	Art. 6(1)(a) GDPR — your explicit consent via the cookie banner

4. Data Retention

We retain your quote request data for 24 months from the date of submission. After this period, personal data is deleted or anonymised. You may request earlier deletion at any time by contacting gdpr@trans-road.com.

5. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights:

Right of access (Art. 15) — request a copy of your data
Right to rectification (Art. 16) — correct inaccurate data
Right to erasure (Art. 17) — request deletion ("right to be forgotten")
Right to restriction (Art. 18) — limit how we process your data
Right to data portability (Art. 20) — receive your data in a structured format
Right to object (Art. 21) — object to processing based on legitimate interest
Right to withdraw consent (Art. 7(3)) — for analytics cookies, withdraw at any time via your browser settings

To exercise any of these rights, contact us at gdpr@trans-road.com. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD — Agencia Española de Protección de Datos).

6. Analytics Cookies (Google Analytics 4)

With your consent, we use Google Analytics 4 (GA4) to collect anonymised usage statistics. GA4 is configured with IP anonymisation enabled. Consent is required before any analytics data is collected, and can be revoked at any time by clearing your browser's cookie storage or declining via the cookie banner.

Google LLC (headquartered in the USA) acts as a data processor for analytics data under the EU–US Data Privacy Framework. See Google's Privacy Policy.

7. Sub-Processors and Third Parties

Sub-Processor	Purpose	Location
Supabase Inc.	Database storage of quote requests	EU (Frankfurt, Germany)
Google LLC	Analytics (GA4) — consent required	USA (EU Privacy Framework)
Vercel Inc.	Website hosting and delivery	EU / USA

8. International Data Transfers

Certain sub-processors (Google Analytics, Vercel) may transfer data outside the EEA. These transfers are covered by the EU–US Data Privacy Framework or Standard Contractual Clauses (SCCs) as approved by the European Commission under Art. 46 GDPR.

9. Cookies

We use only one category of cookie: analytics cookies (Google Analytics 4) which require your explicit consent. We do not use any advertising, tracking, or third-party marketing cookies. Essential session cookies (used for the Portal authentication) are exempt from consent under the ePrivacy Directive.

10. Policy Updates

We may update this Privacy Policy from time to time. Material changes will be notified via the website. The date of the last update is shown at the top of this page.