Privacy Policy

1. Data Controller

Spedition HTL GmbH, Sternwartstraße 62, 40223 Düsseldorf, Germany is responsible for data processing on this website. Contact us at dispo@spedition-htl.com.

2. Data We Collect

We only collect the data required to deliver our services:

• Forms and quote requests: name, contact details, vehicle information, pick-up and delivery locations, transport preferences.
• Server logs and abuse protection: full IP address, browser type and version, operating system, referrer URL, date and time of the request. The IP address is used for submission rate limiting and bot detection, and appears in technical server logs — not in the internal notification email sent to our team. Legal basis: legitimate interest in preventing abuse (Article 6 (1)(f) GDPR).
• Essential cookie: a single cookie that remembers your language preference for future visits. No advertising cookies are set without your consent.
• The services subject to consent (audience measurement, address autocompletion, form protection against automated submissions, live chat) are loaded only after you explicitly accept them in the cookie banner. If you decline, they are not executed and set no cookies.

3. Purpose of Processing

We process personal data to respond to transport inquiries, issue commercial proposals, coordinate logistics, improve our services and maintain the security of the website.

4. Legal Bases

Data is processed on the basis of pre-contractual measures or contract execution (Article 6 (1)(b) GDPR), legal obligations (Article 6 (1)(c) GDPR) and our legitimate interest in securing the website (Article 6 (1)(f) GDPR).

5. Storage Period

Information linked to requests is kept for the duration of the business relationship and for as long as it remains necessary to our activity, in compliance with our legal obligations; you may request its deletion at any time, unless the law requires us to keep it (see "Your Rights" below). Technical logs (e.g. server access logs) are rotated automatically and in practice kept for only a few weeks, never longer than needed for operation and security. Rate-limiting counters live in memory only and are cleared whenever the server restarts. Certain data may be retained longer to comply with legal obligations or to protect our rights.

6. Data Recipients and Processors

Data is processed by Spedition HTL teams and by the logistics partners strictly necessary to carry out a given transport, all bound by contractual confidentiality. We never sell personal data and never share it for advertising purposes.

To operate the website and process your requests, we also rely on technical service providers who act only on our instructions:

• website hosting and delivery: server logs and IP address. Legal basis: legitimate interest in secure, stable operation (Article 6(1)(f) GDPR);
• hosting of our internal request-management tool, located in the European Union, where your quote request is recorded so it can be priced and followed up. Legal basis: pre-contractual measures (Article 6(1)(b) GDPR). Retention: see section 5;
• email delivery of your requests to our inbox and the business mailbox through which our staff reply to you. Legal basis: pre-contractual measures (Article 6(1)(b) GDPR);
• internal notification to our team that a request has arrived (name, route, contact method). Legal basis: legitimate interest in handling a request without delay (Article 6(1)(f) GDPR);
• with your consent only (Article 6(1)(a) GDPR): protecting the forms against automated abuse, address autocompletion in the quote form, audience measurement and live chat. You can withdraw this consent at any time through the cookie banner.

Some of these providers are established outside the European Union, in particular in the United States. These transfers are covered by the safeguards provided under the GDPR (European Commission adequacy decision or standard contractual clauses), a copy of which is available on request.

Until you accept, the services subject to consent are neither loaded nor executed and set no cookies.

The named list of our processors is available to you on simple request (see "Your Rights").

7. Your Rights

You have the rights of access, rectification, erasure, restriction, portability and objection, as well as the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement (Article 77 GDPR). You may also define directives regarding the fate of your data after death.

To exercise these rights, email dispo@spedition-htl.com with a description of your request. We will respond within 30 days.

8. Security Measures

We implement appropriate technical and organisational measures to protect data against loss, unauthorised access or disclosure. Nevertheless, online data transmission carries residual risks that you should be aware of.

9. Policy Updates

We may update this policy to reflect regulatory changes or service improvements. The effective date appears below. Significant changes will be announced on the site.