Legal
Privacy Policy
This policy explains how we handle personal data under the EU General Data Protection Regulation (GDPR).
1. Controller
MareCargo, Ethnikis Antistasis 76, Igoumenitsa (Nea Seleukeia), 46100, Greece. Email: info@marecargo.com. Phone: +30 2665 021164 / +30 6974 406754.
2. What we collect
Ticket requests: company name, contact person, email address, mobile phone, country, truck and trailer plate numbers, driver names, selected ports, departure date, cargo details, dangerous-goods declaration, free-text notes and any documents you upload (up to three files, max. 2 MB each).
Contact enquiries: name, company, email address, phone number, subject and your message.
Technical data: your IP address and browser user agent are stored with each submission as evidence of the request and to detect abuse.
Team accounts: email address and role for staff who access our internal dashboard.
3. Why we process it (legal basis)
To prepare and perform a transport or booking contract with you (Art. 6(1)(b) GDPR), to comply with transport, customs and accounting obligations (Art. 6(1)(c) GDPR), and on the basis of our legitimate interest in securing our systems against spam and abuse (Art. 6(1)(f) GDPR).
4. Where the data is stored and who can see it
Submissions are stored in our managed database and private file storage inside the EU. Uploaded documents are never public — they can only be opened by authorised MareCargo staff through short-lived, individually signed links.
A summary of each ticket request is also written to a spreadsheet in our own Google Workspace account so our operations team can process it. Only file names and internal storage references are written there — never the documents themselves.
We use Cloudflare Turnstile for spam protection; your IP address is processed by Cloudflare during that check.
5. How long we keep it
Ticket requests and uploaded documents are kept for as long as needed to handle the booking and to meet statutory retention duties, and are deleted at the latest 24 months after the request unless a longer legal retention period applies. Contact enquiries are deleted 12 months after the last correspondence. Spam-protection records are deleted after 24 hours.
6. Your rights
You may request access, rectification, erasure, restriction of processing, data portability, and object to processing based on legitimate interest. Write to info@marecargo.com and we will respond within one month. You also have the right to lodge a complaint with the Hellenic Data Protection Authority.
7. Cookies
Our public website uses no advertising or analytics cookies. Local browser storage is used only to keep authorised staff signed in to the internal dashboard.