Data Protection Policy

How we protect personal data in line with the GDPR and applicable law

This Data Protection Policy summarises how Arsa Transporter processes personal data in connection with this website. We do not operate logins or user profiles here. Personal data comes mainly from the contact form (name, email, phone, subject, message) and from Google Analytics as described in our Privacy Policy and Cookie Policy.

1. Data controller

The controller responsible for processing personal data in connection with this website and related enquiries is Arsa Transporter. You will find our contact details on our website and on our contact page.

2. Principles of processing

We process personal data lawfully, fairly, and in a transparent manner. We limit collection to what we actually need: handling contact enquiries and understanding aggregate website traffic through Google Analytics. We do not collect categories of data beyond those described in our Privacy Policy. We keep data no longer than necessary and protect it with appropriate technical and organisational measures.

3. Your rights under the GDPR

Where the GDPR applies, you may have the following rights in relation to your personal data (subject to conditions in law):

  • Right of access to your personal data.
  • Right to rectification of inaccurate data.
  • Right to erasure (“right to be forgotten”) in certain cases.
  • Right to restriction of processing and right to object in certain cases.
  • Right to data portability where processing is based on consent or contract and carried out by automated means.
  • Right to withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
  • Right to lodge a complaint with a supervisory authority.

4. Supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority in the Member State of your habitual residence, place of work, or the place of the alleged infringement, if you consider that processing infringes applicable data protection law.

5. Contact and requests

To exercise your rights or for any data protection questions, please contact us via our contact page or the contact details on our website. We will respond without undue delay and in any event within one month where the GDPR requires it (extensions may apply in complex cases).