Privacy policy

Who is the controller

The controller of personal data collected through this website is ICON TRANS Sp. z o.o.

To ask about your data, email info@icontrans.pl or use the contact page. Put “personal data” in the subject so the message reaches the right person.

What we collect

We only receive what you send us, plus the technical data the server needs to deliver the page.

• Quote form: route, dates, cargo, contact name, company, email, phone, and optional company identifiers (NIP, REGON).
• Optional cargo description, a link to a large file, and photos you attach. Photos are stored on the server only so a forwarder can price the job.
• Contact form: name, email, phone, subject and message.
• Email we exchange after you write to us.
• Server logs: IP address, date, browser and the address of the page. The host keeps them to run and protect the site.
• If you accept statistics or marketing in the cookie banner: a cookie identifier, the pages you open, where you came from, device and browser, approximate location, IP address, and — for ads — the click identifier from the Google ad. Google receives this only after that consent.

Why and on what basis

• To prepare a transport quote and reply to an enquiry — steps before a contract (GDPR Article 6(1)(b)).
• To answer a message, keep correspondence, and protect the forms from abuse — legitimate interest (GDPR Article 6(1)(f)).
• To keep invoices and transport documents when an order goes ahead — legal duty (GDPR Article 6(1)(c)).
• To count visits and see how the site is used — consent (GDPR Article 6(1)(a)). Google Analytics runs through Google Tag Manager and stays off until you accept statistics.
• To keep daily totals of page views, clicks on the quote form, phone and email links, and of quote and contact emails that were sent — legitimate interest (GDPR Article 6(1)(f)). A total is not tied to a person, it does not use a cookie, and it is not sent to Google. Rows older than 14 months are deleted.
• To measure Google ads and to use the visit for advertising — consent (GDPR Article 6(1)(a)). Google Ads runs through Google Tag Manager and stays off until you accept marketing. The same rule applies to visitors in the European Economic Area, the United Kingdom and Switzerland.

Quote and contact data are not used for advertising, and we do not sell personal data.

You can refuse statistics and marketing separately. You can withdraw either consent later from the same banner (Manage consent). Refusing or withdrawing does not stop the quote or contact form. Before you accept, those Google tags do not run.

Who receives the data

Messages go to the Icon Trans mailbox that handles the request (information, operations, finance or HR).

The hosting provider processes data so the site and email can work. Quote and contact forms can use Cloudflare Turnstile to check that the sender is not a bot. Cloudflare then processes the technical data of that check as a processor.

If you accept statistics or marketing, Google Ireland Limited receives the analytics or advertising data described above. Google provides Google Analytics, Google Tag Manager and Google Ads. Some of that data is processed in the United States. The transfer uses the EU-US Data Privacy Framework and the standard contractual clauses required by the GDPR.

We do not sell the data. Messages from the forms stay with Icon Trans and the host. Analytics and advertising data leave the European Economic Area only after you consent, and only to Google under those safeguards.

How long we keep it

• A quote or a contact message that does not become an order: for as long as we need to handle it, and no longer than 12 months after the last message.
• Cargo photos and file links: for the same period, then deleted.
• Documents from a completed order: for the period required by tax and accounting rules.
• The language cookie: until it expires (about a month) or you delete it.
• The consent cookie: until it expires, you change the choice in the banner, or you delete it. It only remembers what you accepted.
• Analytics cookies: up to 14 months from the visit.
• Advertising cookies: up to 13 months from the visit.

Cookies

The site stores one functional cookie, icon_trans_lang. It remembers whether you chose Polish or English and is read on the next visit. It is not used to track you across other sites. A second functional cookie remembers your consent choice, so the banner does not ask on every page and so statistics and marketing tags stay off when you refuse.

The forms may also set cookies required by Cloudflare Turnstile for the bot check. WordPress itself may set a technical cookie when you are logged in to the admin. That does not apply to visitors.

Statistics cookies belong to Google Analytics. Marketing cookies belong to Google Ads. Both are loaded through Google Tag Manager, and only after you accept the matching category in the banner. The banner also lists preferences. We do not set a separate preferences cookie. The language cookie is functional and does not wait for that category.

You can block cookies in your browser. The language choice will then not be remembered, a form protected by Turnstile may not send, and an earlier consent choice will not be stored. You can change statistics and marketing consent at any time with Manage consent on the site.

Your rights

You can ask for access, a copy, correction, deletion, restriction, or — where it applies — that we hand the data to another controller. You can object when we rely on legitimate interest. Where we rely on consent, you can withdraw it at any time. Withdrawal does not undo processing that already happened.

Send the request to info@icontrans.pl. You can also complain to the President of the Personal Data Protection Office (UODO), ul. Stanisława Moniuszki 1A, 00-014 Warszawa, uodo.gov.pl.

We will update this page when the way we handle data changes. The date at the top is the latest version.