This policy sets out the rules for processing and protecting the personal data of users of the otsl.pl website and of OTSL clients, counterparties and drivers. It reflects the GDPR (EU Regulation 2016/679), the Polish Act on Providing Services by Electronic Means and the specifics of the TSL (transport, forwarding, logistics) sector.
The Polish-language version of this document is the legally binding one. This is an informational translation.
I. General provisions
This document sets out the rules for processing and protecting the data of users of the otsl.pl website and of clients, counterparties and drivers cooperating with OTSL. It is based on the GDPR, the Act on Providing Services by Electronic Means and the regulations governing transport and forwarding activity.
II. Data controller
The controller is OTSL Spolka z ograniczona odpowiedzialnoscia, ul. Batalionow Chlopskich 71, 25-671 Kielce, Poland. NIP PL9592058362, REGON 524132606, KRS 0001012523, share capital PLN 20,000. Contact: info@otsl.pl, tel. +48 539 225 151.
III. Purposes and legal bases of processing
- Provision of TSL services, carriage contracts, forwarding and logistics orders, supply chain coordination [Art. 6(1)(b) GDPR].
- Financial settlements and KSeF, tax and accounting obligations, structured invoices via the National e-Invoicing System (KSeF) [Art. 6(1)(c) GDPR].
- Security and debt recovery, legitimate interest: pursuing claims, the right of lien and detention of the shipment under § 6 of the OWSU, defence against complaints [Art. 6(1)(f) GDPR].
- Verification of counterparties, monitoring payment reliability and carrier authorisations in public registers and freight exchanges.
- Website statistics, measuring site traffic using Google Analytics 4, enabled only after you give consent [Art. 6(1)(a) GDPR].
IV. Recipients of data and transfers outside the EEA
Data may be disclosed to subcontractors (carriers), drivers, telematics (GPS) system operators, freight exchanges, and tax and customs authorities. Invoice data is transferred to the Minister of Finance (KSeF). After consent, statistical data is processed by the analytics provider (Google Ireland Ltd.). For transport outside the EEA (e.g. the United Kingdom) and for analytics tools, data is transferred in accordance with the CMR Convention or on the basis of the EU Standard Contractual Clauses.
V. Retention period
- carriage documentation (CMR), for the period required by the CMR Convention and the Transport Law (until claims become time-barred);
- tax documentation, 5 years from the end of the year in which the tax payment deadline fell (with archiving in KSeF);
- claims and debt recovery, until proceedings are finally concluded or claims become time-barred (§ 7 of the OWSU);
- Google Analytics statistical data, up to 14 months or until consent is withdrawn.
VI. Rights of data subjects
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. For data processed on the basis of consent (statistics), you may withdraw it at any time without affecting the lawfulness of earlier processing, using the „Cookie settings” link in the website footer. Complaints may be addressed to the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa.
VII. Automated decisions and profiling
The controller does not take decisions based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you. No data protection officer (DPO) has been appointed; for all data matters contact: info@otsl.pl.
VIII. Cookies and tracking technologies
The website uses essential cookies for correct operation (session, language choice, storage of the consent decision). Optional tools, including Google Analytics 4 collecting pseudonymised, aggregated traffic statistics, are enabled only after consent is given in the banner. You can change or withdraw your decision at any time via the „Cookie settings” link in the footer or in your browser settings. Details are described in a separate Cookie Policy.
Legal status as of 09.07.2026.