Privacy policy GDPR

PERSONAL DATA PROTECTION – GDPR

At Centrum Trans B.V., we are committed to protecting the personal information of our users, customers, carriers and business partners in accordance with the principles established by Regulation (EU) 2016/679, known as the General Data Protection Regulation (GDPR).

Personal data protection is an essential part of our transport, logistics and digital service activities provided through centrumtrans.com.

This document explains the principles governing the processing of personal data, the applicable safeguards and the rights of individuals whose information is processed under the responsibility of Centrum Trans B.V.

1. Data controller

Centrum Trans B.V. acts as the data controller for personal information collected and managed for its own business, contractual and administrative purposes.

For questions concerning the protection of your personal data, please contact us at sales@centrumtrans.com.

Where Centrum Trans B.V. processes information on behalf of other organisations, it shall fulfil the responsibilities and obligations applicable to its role under the GDPR.

2. Principles of personal data processing

Centrum Trans B.V. is committed to processing personal data in accordance with the following principles:

  • Lawfulness, fairness and transparency: personal data must be processed on a valid legal basis, with clear and understandable information provided to individuals.
  • Purpose limitation: data must be collected for specific, explicit and legitimate purposes and must not subsequently be used in ways incompatible with those purposes.
  • Data minimisation: only information that is adequate, relevant and necessary for each activity should be collected.
  • Accuracy: reasonable steps must be taken to keep information up to date and correct inaccurate data when necessary.
  • Storage limitation: personal data must not be retained longer than necessary unless a legal obligation or another legitimate reason justifies continued retention.
  • Integrity and confidentiality: appropriate measures must be applied to protect information against unauthorised access, loss, alteration or unlawful disclosure.
  • Accountability: the company must be able to demonstrate compliance with its applicable data protection obligations.

3. Purposes and legal bases for processing

As part of its operations, Centrum Trans B.V. may need to process personal information to manage enquiries, business relationships, user accounts, transport requests, logistics operations, contractual documentation, invoicing and administrative obligations.

Each processing activity must have an appropriate legal basis, which may include, depending on the circumstances:

  • Performance of a contract or steps taken at the individual's request before entering into a contract.
  • Compliance with a legal obligation.
  • Pursuit of a legitimate interest, provided that the individual's rights and freedoms do not override that interest.
  • The individual's freely given, specific, informed and unambiguous consent, where required.
  • Any other legal basis recognised by the GDPR that applies to the particular processing activity.

Where processing is based on consent, that consent may be withdrawn at any time without affecting the lawfulness of processing carried out before the withdrawal.

4. Rights of data subjects

Individuals whose personal data is processed by Centrum Trans B.V. have the rights recognised under the GDPR, subject to the applicable legal conditions and exceptions.

  • Right of access: request confirmation of whether personal data is being processed and obtain information about that processing.
  • Right to rectification: request the correction of inaccurate data or the completion of incomplete information.
  • Right to erasure: request the deletion of personal data where the relevant legal conditions are met.
  • Right to object: object to certain processing activities based on legitimate interests or carried out for direct marketing purposes.
  • Right to restriction: request the restriction of processing in circumstances specified by law.
  • Right to data portability: receive personal data provided in a structured, commonly used and machine-readable format and, where applicable, transmit it to another controller.
  • Right to withdraw consent: withdraw permission previously given for consent-based processing.
  • Rights relating to automated decisions: exercise the safeguards provided by the GDPR concerning certain decisions based solely on automated processing, including profiling.

To exercise these rights, please send your request to sales@centrumtrans.com, specifying the right you wish to exercise and providing the information necessary to process your request.

Where reasonable doubts exist about the requester's identity, additional information strictly necessary for verification may be requested.

5. Response times for requests

Centrum Trans B.V. shall handle requests concerning data protection rights without undue delay and, as a general rule, within one month of receiving them.

This period may be extended by a further two months where necessary due to the complexity or number of requests. In such cases, the individual will be informed of the extension and the reasons for it within the first month.

Exercising these rights is generally free of charge. However, the GDPR provides exceptions for requests that are manifestly unfounded or excessive.

6. Data retention and deletion

Personal data shall only be retained for as long as necessary to fulfil the purposes for which it was collected.

Where applicable, certain information may be retained for additional periods to comply with legal, accounting, tax or contractual obligations, or for the establishment, exercise or defence of legal claims.

Once the applicable retention periods have expired, personal data must be appropriately deleted or anonymised unless a lawful justification for retaining it remains.

7. Security and confidential processing

Centrum Trans B.V. recognises the importance of protecting personal data against risks associated with its storage, use and transmission.

The company must implement technical and organisational measures appropriate to the risks of each processing activity, including, where relevant, access controls, information security safeguards, authorisation management and procedures aimed at preventing security incidents.

Staff members and service providers with legitimate access to personal information must comply with their applicable confidentiality and information protection obligations.

In the event of a personal data breach, Centrum Trans B.V. must assess its consequences and comply with the documentation, notification and communication requirements imposed by the GDPR, where applicable.

8. Service providers and international transfers

Centrum Trans B.V. may rely on external service providers for certain activities, including website hosting, IT maintenance, administrative management and other services related to its business operations.

Where these providers process personal data on behalf of Centrum Trans B.V., the safeguards and agreements required by the GDPR must be established.

Any transfers of personal data outside the European Economic Area must, where they occur, rely on a legally recognised mechanism, such as an adequacy decision, standard contractual clauses or other applicable safeguards.

9. Supervisory authority and complaints

If you believe that the processing of your personal data does not comply with applicable regulations, you may contact Centrum Trans B.V. at sales@centrumtrans.com to submit an enquiry or complaint.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

In the Netherlands, the authority responsible for supervising personal data protection is the Autoriteit Persoonsgegevens.

10. Additional information and updates

Centrum Trans B.V. may revise this information when necessary to reflect legal, technological or organisational developments.

Updates will be published on centrumtrans.com, without prejudice to any additional notices required by the GDPR.

For enquiries concerning personal data processing or the exercise of your rights, please contact sales@centrumtrans.com.