PRIVACY POLICY
Website: https://intransline.eu
Last updated: 29 October 2026

1. Who is responsible for processing your personal data

This Policy explains how INTRANSLINE OÜ processes the personal data of visitors to intransline.eu, people submitting enquiries and transport requests, and representatives of customers, consignors, consignees and other parties involved in transport operations.

Personal data controller:
INTRANSLINE OÜ
Registration number: 16041432
Registered address: Peterburi tee 46, Lasnamäe linnaosa, Tallinn, 11415, Estonia.
Email for personal data enquiries: info@intransline.eu.
Referred to below as the “Company” or “we”.

The Company is registered in Estonia. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Estonian law. The GDPR applies to processing in the context of the activities of our establishment in the EU, regardless of an individual's nationality or place of residence. Where particular processing is subject to mandatory requirements under the laws of another country, those requirements must also be complied with. This Policy does not restrict any rights you have under applicable law.

2. Personal data we process

Depending on the nature of your enquiry and the services provided, we may process:
• your first name and surname;
• business contact details: email address, telephone number, job title and organisation name;
• enquiry and shipment details: route, collection and delivery addresses, dates and deadlines, cargo characteristics, weight and volume, and transport instructions;
• contact details of representatives of the customer, consignor, consignee and other parties involved in the transport operation;
• the contents of enquiries, correspondence and documents provided to us;
• information required to prepare contracts, payment and settlement documentation, transport documents and customs documents, where necessary for a particular service or required by law.

Information about an organisation or cargo constitutes personal data to the extent that it relates to an identified or identifiable individual.

When you use the website, we may also process your IP address, browser and device information, the date and time of access, technical logs, selected language, cookie data and information about your privacy preferences. The actual data processed depends on the features used, the services enabled and your choices regarding non-essential technologies.

Do not submit health information or other special categories of personal data, full payment card details or copies of identity documents through the general enquiry form. If documents containing higher-risk data are required for a particular shipment or customs clearance, arrangements for their transfer will be agreed separately.

If you provide another person's data, make sure you have a lawful basis for doing so and inform that person of the disclosure, including by providing a link to this Policy. This does not relieve the Company of its own obligations to provide information.

3. Sources of personal data

We obtain data:
• directly from you, through website forms, email and other communication channels used;
• automatically when you visit the website;
• from customers, consignors, consignees, carriers, freight forwarders and other parties involved in transport operations when they include your details in documents or identify you as a contact person.

Where we obtain data from third parties, we inform you in accordance with Article 14 GDPR: within a reasonable period, no later than one month, or, if our first communication with you or the first disclosure to another recipient occurs earlier, no later than that event. Statutory exemptions apply only where the relevant conditions are met.

4. Purposes and legal bases for processing

Handling enquiries, calculating transport costs and preparing quotations.
For individuals acting on their own behalf with a view to entering into a contract, the legal basis is taking steps at their request before entering into a contract, under Article 6(1)(b) GDPR. For representatives of organisations, the legal basis is the Company's legitimate interest in conducting business correspondence, handling enquiries and establishing business relationships, under Article 6(1)(f) GDPR.

Organising and managing transport operations and communicating with the parties involved.
For individual customers, the legal basis is performance of a contract, under Article 6(1)(b) GDPR. For representatives of organisations and other contact persons, the legal basis is the legitimate interest in fulfilling agreed arrangements and coordinating transport, collection and delivery, under Article 6(1)(f) GDPR.

Accounting, compliance with mandatory requirements and providing information to competent authorities.
The legal basis is compliance with the Company's legal obligations, under Article 6(1)(c) GDPR, to the extent required by applicable law.

Website security and prevention of misuse and technical failures.
The legal basis is the Company's legitimate interest in ensuring the secure and reliable operation of the website and protecting information, under Article 6(1)(f) GDPR. Rules governing cookies and similar technologies apply in addition to this legal basis.

Handling complaints, resolving disputes and protecting rights.
The legal basis is the Company's legitimate interest in establishing, exercising or defending legal claims, under Article 6(1)(f) GDPR, or, where complying with a mandatory legal requirement, Article 6(1)(c) GDPR.

Non-essential analytics, advertising technologies and marketing communications.
If these features are used, consent is requested separately where required by law. Processing based on consent relies on Article 6(1)(a) GDPR. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

Where we rely on legitimate interests, we assess the necessity of processing and balance our interests against your rights and interests. You may object to such processing in the circumstances provided by law.

Providing data for an initial enquiry is voluntary. However, without contact details and the information needed to calculate transport costs, we may be unable to respond, prepare a quotation or provide a service. When arranging a shipment, certain information may be required by contract or law. Optional fields may be left blank. Consent to marketing and non-essential cookies is not a condition for submitting an enquiry.

5. Recipients of personal data

To the extent necessary for the relevant purpose, data may be made available to:
• authorised employees and specialists of the Company;
• Wix.com Ltd., its relevant affiliates and subprocessors that support the operation of the website and its features;
• the Company's providers of email, data storage, information systems and technical support services;
• carriers, freight forwarders, warehouse operators, customs representatives and other parties involved in a particular transport operation;
• accountants, auditors, legal advisers and insurers, where necessary;
• public authorities and other recipients where there is a lawful basis for disclosure.

We limit the information disclosed to what is necessary for the particular task. Providers acting on our behalf as processors are bound by obligations concerning data processing and protection. Depending on their functions, parties involved in transport operations, professional advisers and public authorities may act as independent controllers and process data on their own legal bases.

6. Wix and international data transfers

The website operates on the Wix platform. In relation to visitors' personal data processed on our behalf, Wix acts as a processor under its Data Processing Addendum:
https://www.wix.com/about/privacy-dpa-users

Information about Wix's own processing of personal data:
https://www.wix.com/about/privacy

The list of Wix's subprocessors and information about their locations:
https://support.wix.com/en/article/list-of-wixs-sub-processors

According to information published by Wix, its infrastructure includes data centres in the United States and Ireland; Wix.com Ltd. is based in Israel. Depending on the services used, group companies and subprocessors in other countries may also be involved in processing. Ireland is part of the EU; a transfer to Ireland does not, in itself, constitute a transfer outside the European Economic Area (EEA).

Transfers to Israel covered by the relevant adequacy decision rely on the European Commission's adequacy decision under Article 45 GDPR. For Wix transfers to countries not covered by an applicable adequacy decision, its documentation provides for the European Commission's Standard Contractual Clauses and additional technical, contractual and organisational measures where necessary. The specific mechanism depends on the recipient and the circumstances of the transfer.

In addition to the use of Wix, international transport may require the transfer of the minimum necessary contact details and information from documents to parties involved in the transport operation and competent authorities in the countries of origin, transit and destination. The actual countries and recipients depend on the route and the arrangements for the particular shipment; you may contact the Company to clarify these before the relevant data is transferred.

Transfers outside the EEA are carried out using an applicable mechanism under Chapter V GDPR: an adequacy decision under Article 45 or appropriate safeguards under Article 46, including Standard Contractual Clauses and additional measures where necessary. Derogations under Article 49 are used only where their conditions are met and do not serve as a general substitute for safeguards for regular transfers.

You may contact info@intransline.eu to obtain information about the countries, recipients and protection mechanisms relevant to the processing of your data, and a copy of the relevant safeguards. Copies may be redacted where necessary to protect the rights of others and confidential information, without depriving you of meaningful information about the safeguards.

7. Retention periods

We determine retention periods separately for each purpose and do not retain personal data for longer than necessary.

Enquiries that do not result in a contract, and related correspondence, are retained while the enquiry is being handled and negotiations are ongoing. After negotiations have been completed or discontinued, the need for further retention depends on any agreed follow-up contact, outstanding issues or a justified need to establish, exercise or defend legal claims. Where no such grounds exist, the data is to be deleted or anonymised.

Shipment data is retained while obligations are being performed and thereafter for the applicable periods for bringing and defending claims. These periods depend on the type of transport, the contract, applicable transport rules and the existence of a dispute. Documents that must be retained for accounting purposes are subject to the following rules.

Accounting source documents are retained for seven years from the end of the financial year in which the relevant transaction was recorded in the accounts. Accounting records, contracts and other documents necessary to reconstruct business transactions during an audit are retained for seven years from the end of the relevant financial year. For documents relating to long-term obligations or rights, the seven-year period runs from the expiry of their term of validity. Specific mandatory retention periods apply where required by law.

Technical log retention periods depend on their purpose: detecting and resolving failures, maintaining security and investigating incidents. We take into account the time needed to detect and investigate the relevant event and the actual settings of the service used. You may contact the Company for information about the specific applicable period or the criteria used to determine it.

Data used for consent-based marketing is used until consent is withdrawn or the relevant purpose ends. Minimal records of an opt-out may be retained to respect your choice. Evidence of consent and its withdrawal may be retained for the period necessary to demonstrate compliance with legal requirements and defend legal claims.

Cookie lifetimes depend on the particular cookie or technology: session cookies expire at the end of the relevant session, while persistent cookies expire at the end of their specified lifetime or when deleted by the user. Withdrawal of consent is also taken into account for non-essential technologies.

In the event of a dispute, investigation or mandatory legal requirement, necessary data may be retained until the relevant process has concluded and applicable periods have expired. Once there are no longer grounds for retention, data is deleted or anonymised. Removal of residual copies from backup systems depends on their update cycles and the relevant provider's procedures; access to such copies is restricted.

8. Cookies and similar technologies

The website uses strictly necessary cookies and similar technologies to operate its core functions and maintain security. Whether a technology is necessary is determined by its function, rather than solely by the category label used by its provider.

If non-essential analytics, advertising or other technologies requiring consent by law are enabled, they may be activated only after you have given prior consent. Continuing to browse the website does not, in itself, constitute consent.

The consent panel allows you to accept non-essential technologies, reject them or select individual categories. You can change your preferences and withdraw consent using the cookie settings control on the website. Withdrawal of consent stops further use of the relevant technologies on the basis of that consent; cookies already stored in your browser may, if necessary, be deleted through your browser settings.

Information about the technologies actually used, their providers, purposes and lifetimes is provided in the cookie settings panel or its linked list before consent is obtained. Information about standard Wix technologies is also available at:
https://support.wix.com/en/article/cookies-and-your-wix-site
The list of standard Wix technologies does not replace information about additional services actually enabled on this website.

You can also restrict cookies through your browser settings. Blocking strictly necessary technologies may impair certain website functions.

9. Your rights

In the circumstances provided by applicable law, you may:
• obtain confirmation of processing, access to your data and a copy of it;
• have inaccurate data corrected and incomplete data completed;
• request the erasure of your data;
• request restriction of processing;
• receive the data you have provided in a structured, commonly used and machine-readable format and transmit it to another controller, where processing is automated and based on consent or a contract;
• object to processing based on legitimate interests on grounds relating to your particular situation;
• object at any time to direct marketing, including profiling related to such marketing;
• withdraw consent without affecting the lawfulness of processing before its withdrawal;
• lodge a complaint with a competent supervisory authority.

To exercise your rights, contact info@intransline.eu. Where we have reasonable doubts about the identity of the person making a request, we may ask for additional information that is necessary and proportionate to confirm their identity.

We respond without undue delay and, as a rule, no later than one month after receiving a request. Taking into account the complexity and number of requests, this period may be extended by a further two months; we will notify you of the extension and the reasons for it within the first month. If we cannot fulfil a request, we will explain the reasons and provide information about available avenues of complaint and redress within the time limits required by law.

The exercise of rights is generally free of charge. For manifestly unfounded or excessive requests, the GDPR permits a reasonable fee or refusal where the statutory conditions are met.

Some rights are not absolute: for example, erasure may be limited by an obligation to retain documents or the need to defend legal claims.

In Estonia, you may lodge a complaint with the Estonian Data Protection Inspectorate — Andmekaitse Inspektsioon:
https://www.aki.ee
Email: info@aki.ee.

Under the GDPR, you may also contact a supervisory authority, in particular in the EU/EEA country of your habitual residence, place of work or the alleged infringement. This Policy does not restrict additional remedies available under the applicable laws of other countries.

10. Data security and automated decision-making

We apply technical and organisational measures proportionate to the nature of the data and the risks of processing, including access restrictions and user access rights management. When selecting and reviewing these measures, we take into account the systems used, the purposes of processing and the available safeguards.

We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

11. Language versions and changes to this Policy

This Policy may be provided in several languages for the convenience of visitors to our international website. The language versions are intended to convey the same terms of data processing. If you identify a discrepancy or ambiguity, you may request clarification at info@intransline.eu. Translation does not restrict your rights under applicable law.

The current version is published on the website with its revision date. Before processing data for a new purpose, we provide the necessary additional information and, where required, obtain separate consent. Material changes are communicated to affected individuals in a manner appropriate to the nature of the changes and the requirements of the law.