Acting in accordance with Art. 13(1) and (2) of the GDPR, OTSL Sp. z o.o. informs you of the rules for processing the personal data of clients, counterparties, drivers and other persons connected with the provision of transport and forwarding services. Below you will find information on the controller, purposes, recipients and your rights.
The Polish-language version of this document is the legally binding one. This is an informational translation.
1. Data controller
The controller is OTSL Sp. z o.o., ul. Batalionow Chlopskich 71, 25-671 Kielce, Poland. NIP PL9592058362, REGON 524132606, KRS 0001012523, share capital PLN 20,000. Contact: info@otsl.pl, tel. +48 539 225 151. No data protection officer (DPO) has been appointed; for all data matters contact: info@otsl.pl.
2. Purposes, legal bases and retention period
- Provision of TSL services [Art. 6(1)(b) GDPR], for the duration of the contract and the limitation of claims.
- KSeF and tax obligations [Art. 6(1)(c) GDPR in conjunction with the VAT Act], 5 years.
- Pursuit of claims, debt recovery and the right of lien [Art. 6(1)(f) GDPR], until proceedings are concluded.
- Security and verification of counterparties, drivers and vehicles [Art. 6(1)(f) GDPR].
3. Categories of recipients
- subcontractors (carriers, further forwarders, drivers);
- operators of freight exchanges, GPS systems and logistics platforms;
- state authorities (KAS, ITD, customs services, Minister of Finance / KSeF);
- partners (insurers, law firms, accounting offices, debt collection companies).
4. Transfers outside the EEA
Data may be transferred outside the EEA in accordance with the CMR Convention or on the basis of the Standard Contractual Clauses.
5. Rights of data subjects
You have the right of access and to obtain a copy of the data, rectification, erasure or restriction (subject to the obligations to retain carriage and tax documentation), objection, and complaint to the President of the UODO (ul. Stawki 2, 00-193 Warszawa, Poland).
6. Source of data
Where data is obtained not from the data subject (e.g. driver data received from the carrier), the scope covers first name, surname, ID or passport number, telephone number, vehicle registration number and geolocation data. Providing the data is voluntary but necessary to conclude the contract and provide services in accordance with the OWSU.
7. Automated decision-making
The controller does not take decisions based solely on automated processing, including profiling, that would produce legal effects concerning data subjects or similarly significantly affect them.