Privacy policy

Updated 01/10/2026

1. Controller

Cargo-Tech Solutions, Milheirós, Maia, Portugal. info@cargo-tech.solutions.

2. Data processed

Company data (name, VAT, address), user data (name, email), driver data (name, phone, email), plates, shipper data and the content of the DeCA.

3. Purpose and legal basis

Providing the contracted service (performance of a contract) and complying with legal retention duties. Driver and shipper data is processed on behalf of the user, who is the controller; CTS is the processor.

4. Processor

CTS processes driver, shipper and plate data under the user's instructions, only to generate and deliver the documents. These terms constitute the processing agreement (art. 28 GDPR).

5. Hosting and sub-processors

Data and PDFs are hosted in the European Union. Sub-processors: Stripe (payments), SMTP2GO (transactional email). We do not sell data.

6. Retention

DeCA are kept 18 months by default, up to 5 years at the customer's choice. Public download URLs stay active at least during the service plus 7 days, and are withdrawn 7 days after the end of the service. Account data is deleted 12 months after cancellation.

7. Your rights

Access, rectification, erasure, restriction, portability and objection by writing to info@cargo-tech.solutions. You may complain to the CNPD (Portugal) or your national authority.

8. Cookies

Only technical session and language cookies. No tracking or advertising cookies.