Privacy policy
1. Controller and contact
GG Transporte, owner George-Adrian Gavrila, Mundenheimer Straße 254, 67061 Ludwigshafen am Rhein, Germany. Phone: +49 621 16655523. Privacy enquiries: info@ggtransporte.de.
2. Website access and security
We process the connection data necessary to deliver and secure the website, including IP address, access time, requested URL, browser information and errors. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in reliable and secure operation. Logs are used for these purposes; specific security incidents may require longer retention.
3. Contact and transport enquiries
We use names, business contact and company details, addresses, dates, cargo information and messages to respond, prepare quotations and handle orders. Article 6(1)(b) GDPR applies to requests from the contracting party; Article 6(1)(f) applies to business contacts and general business enquiries. Our interest is handling the enquiry and business communication. Required fields are marked. Without necessary details we may be unable to respond or arrange transport. An enquiry alone does not create a transport contract.
4. Transport, status and documents
We process collection and delivery addresses, contact persons, driver and vehicle details, reported milestones and times, and necessary transport records, proof of delivery and order-related photos. Necessary details are shared with assigned drivers, transport partners, authorised customers and recipients. The purposes are performing, coordinating and documenting transport under Article 6(1)(b) and (f) GDPR. Tracking shows reported milestones; the public website does not provide continuous GPS location tracking. Keep access details and personal shipment links confidential.
5. Email and delivery information
Business messages, quotations, confirmations, status notifications and invoices are sent using Brevo (Sendinblue). Recipient details, content, attachments and technical delivery information are processed to send messages and follow their delivery. The legal bases are contract performance and our interest in verifiable business communication, Article 6(1)(b) and (f). A contact form success message confirms that the message was saved, independently of delivery of an additional acknowledgement email.
6. Hosting and other providers
The website and portal use OpenAI ChatGPT Sites with Cloudflare infrastructure to process website, connection and stored portal data. Address searches and route calculations send entered location and address details to Google Maps through server-side interfaces. Optional transport document imports may use OpenAI to extract order information; results are reviewed before adoption. The purposes are handling orders and secure, efficient operation under Article 6(1)(b) and (f) GDPR. Other recipients may include commissioned IT services, tax advisers and authorities legally entitled to receive the data.
7. International processing
International providers may process data outside the European Economic Area. Transfers are subject to Articles 44 onwards GDPR, including adequacy decisions or appropriate safeguards such as EU standard contractual clauses. Contact info@ggtransporte.de for information about providers and transfer mechanisms used for your data.
8. WhatsApp and external links
The WhatsApp link opens the service only when selected. Contacting us there also involves processing your number, profile and message information by WhatsApp Ireland/Meta under its privacy terms. You may use telephone or email instead. We use your message to handle your enquiry under Article 6(1)(b) or (f) GDPR. Linked external services have their own privacy policies.
9. Cookies and abuse prevention
Portal sign-in uses necessary session cookies. The public presentation page does not set its own advertising or analytics cookies. Necessary device access is governed by section 25(2) TDDDG; non-essential functions would require prior consent. Contact form protection uses short-lived pseudonymous IP and email rate-limit identifiers and an identifier for duplicate messages. Rate-limit records expire after 15 minutes and are cleaned up during later requests; the message identifier remains with the message. Article 6(1)(f) applies to our legitimate interest in preventing spam and duplicates.
10. Retention
Retention depends on handling the enquiry, fulfilling the order, legal obligations for commercial and tax records, and the need to establish or defend claims. Resolved enquiries without another retention basis should be erased; legally required records are kept for the mandatory period. Security and delivery records are retained only as required for their purpose or a specific investigation. Erasure requests are also assessed against legal retention obligations.
11. Your rights
Subject to the GDPR, you may request access, correction, erasure, restriction and portability. Consent can be withdrawn for the future. You may object on grounds relating to your particular situation where processing is based on legitimate interests, and object to direct marketing at any time. Contact info@ggtransporte.de. We do not make solely automated decisions with legal or similarly significant effects.
12. Complaints and date
You may complain to a data protection authority, in particular where you live or work or where an alleged infringement occurred. The authority for Rhineland-Palatinate is Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz, www.datenschutz.rlp.de. Last updated: 22 September 2026.