Controller and contact
EUROVIA TRANS SRL is the controller for personal data processed through euroviatrans.com and in connection with enquiries and transport operations. VAT number: RO22038723. Trade Register number: J2007001722050. Registered office: Str. Principală nr. 23, sat Tăutelec, comuna Cetariu, județul Bihor, Romania.
Privacy contact: iosif.h@euroviatrans.com; telephone +40 744 877 559. This contact does not imply that a data protection officer has been appointed.
Data and sources
We may receive your name, business contact details, the company represented, shipment routes, addresses, dates, goods details and correspondence through our form, email, telephone or WhatsApp. Collection and delivery contacts may also be personal data. Technical systems may process IP addresses, timestamps, browser information, technical requests and security events. Privacy preferences can be stored in your browser.
Do not include national identification numbers, bank details, identity documents, health information or other sensitive data in the quote form. Any documents needed for a specific operation will be requested separately with the appropriate explanation.
We may receive professional contact details from a customer, sender or consignee. Where information is obtained indirectly, we provide the required notice within one month or, if earlier, at the first communication or disclosure, as applicable, unless a lawful exception applies.
Purposes and legal grounds
- Responding to an individual asking to enter a contract personally: pre-contractual steps requested by that individual, Article 6(1)(b) GDPR.
- Performing a contract with an individual: Article 6(1)(b).
- Communicating with company representatives and coordinating collection, delivery and commercial records: legitimate interests, Article 6(1)(f), in managing professional relationships and delivering and documenting the service.
- Accounting, invoicing and mandatory requests from authorities: legal obligations, Article 6(1)(c).
- Preventing misuse and fraud, securing systems and establishing or defending claims: legitimate interests, Article 6(1)(f), balanced against your rights.
- Loading optional Google Maps content: consent, Article 6(1)(a), together with the applicable rules on accessing information on your device.
- Remembering privacy choices: our legitimate interest in respecting and demonstrating your choice and any applicable legal obligations.
Consent is not the basis for processing necessary to prepare or perform a contract or meet legal obligations. Refusing the map does not prevent a quote request. Enquiries do not automatically subscribe you to marketing.
Recipients and external services
Access is limited to authorised staff and, where necessary, providers of hosting, IT, email and form processing, people involved in the transport, accountants, advisers, insurers and competent authorities. We do not sell personal data. Processors are subject to contractual data protection obligations; third parties acting for their own purposes have separate responsibilities.
Web3Forms. Requests are transmitted through Web3Forms, operated by Web3Creative as our processor. Submission data and technical information necessary for delivery and protection against abuse may be processed by the service and its subprocessors. It reports operations from India, infrastructure in multiple regions and retention of submissions for up to three years. See https://web3forms.com/privacy and https://web3forms.com/dpa.
Google Maps. The map loads only after you choose to activate it. Google may then receive your IP address and browser, device and usage information and use identifiers or cookies. Information may be associated with your Google account if you are signed in, under Google's terms. For EEA users, the relevant provider is generally Google Ireland Limited together with the entities involved in delivering the service. See https://policies.google.com/privacy?hl=en.
External links. WhatsApp and external map links do not load those services automatically within our page. Opening them takes you to a third-party service with its own policies. Email and telephone remain available.
International transfers
Web3Forms and Google services can involve processing or access outside the EEA. We do not describe these services as processing exclusively within the EU. For transfers for which we are responsible, the applicable mechanism must cover the actual recipient, such as an adequacy decision or standard contractual clauses with the necessary assessment and supplementary measures. Web3Forms' DPA refers to standard contractual clauses. You may ask us for information and a copy of relevant safeguards, subject to protecting third-party confidential information. Google's independent processing is explained in its own notices.
Retention
- Enquiries not resulting in a contract are reviewed no later than 12 months after the last discussion. Data no longer needed is deleted. Only information justified for documenting an offer or defending rights may be retained for up to three years after the enquiry closes, subject to legal grounds for longer retention.
- Web3Forms reports retention for up to three years, with shorter periods depending on the service or applicable instructions. Erasure requests are also handled with the provider where no lawful reason requires retention.
- Contracts and operational records are generally kept during performance and for up to three years after the operation or relationship ends. Mandatory periods and justified litigation or limitation periods take precedence; unnecessary parts of a file are removed.
- Accounting records follow the applicable statutory period. The current general Romanian rule is five years from 1 July of the year following the financial year in which the records were created, subject to special cases.
- Technical logs follow the security needs and documented retention cycle of the actual service. Records concerning an incident may be kept while it and its consequences are resolved.
- Browser privacy choices last for up to 180 days unless changed or erased sooner. Withdrawal stops future loading of optional content.
Litigation, mandatory requests or other legal duties may justify limited extended retention. Backups follow documented deletion cycles and are not used to restart processing of erased data without a valid basis.
Your rights and security
Subject to GDPR conditions, you may request access, correction, erasure, restriction and data portability. You may object to processing based on legitimate interests on grounds relating to your situation. Consent may be withdrawn at any time without affecting prior lawful processing. Use Privacy settings for the map or email us for other requests.
We respond without undue delay and within one month. Where complexity or the number of requests makes it necessary, this may be extended by up to two further months; we explain the extension in the first month. Any refusal is explained with available complaint and judicial remedies. Requests are generally free, subject to lawful exceptions for manifestly unfounded or excessive requests. Identification checks are limited to what is necessary where reasonable doubts exist.
You may complain to the Romanian supervisory authority, ANSPDCP, at https://www.dataprotection.ro/?page=Plangeri_pagina_principala, to another competent supervisory authority, or seek a judicial remedy.
We apply risk-appropriate technical and organisational measures, including access controls, protection of data transmission and supplier checks. No online service guarantees absolute security; this does not remove our legal duties.
Providing data is voluntary, but the required form fields are necessary to assess the request. We do not use enquiry data for solely automated decisions with legal or similarly significant effects, advertising profiling or session recording. Changes in services or processing may require an updated notice and, where necessary, fresh consent.