The controller for the processing of personal data on furgix.com is Hortus d.o.o., Ludbreška 78, 40320 Donji Kraljevec, Croatia, VAT ID HR88861892304, e-mail: info@furgix.com (further details on the Contact page). A data protection officer is not required by law and has not been appointed.
| Activity | Data | Purpose | Legal basis |
|---|---|---|---|
| Visiting the website | IP address, date and time, page visited, browser, referrer (server logs) | operation, security, troubleshooting | Art. 6(1)(f) GDPR – legitimate interest |
| Transport request | e-mail address, pick-up and delivery location, description and photos of the goods, desired period, optionally name; upon acceptance of a quote additionally telephone number | brokering quotes, managing the request, contact | Art. 6(1)(b) GDPR – contract |
| Carrier account | company, name, address, VAT/tax number, telephone, e-mail, profile details, photos, balance and transactions | registration, verification, fee settlement, invoicing | Art. 6(1)(b) and (c) GDPR – contract and legal obligation |
| Chat and reviews | message text, review text and stars, shipper's name | communication between users, trust | Art. 6(1)(b) and (f) GDPR |
| E-mail notifications | e-mail address, notification content, delivery and open status | information about quotes, messages, reminders | Art. 6(1)(b) GDPR; reminders/digests: (f), can be unsubscribed at any time |
| Request form statistics | random session identifier, step reached, language – no cookie, not personally identifiable | improving the form | Art. 6(1)(f) GDPR |
Requests, quotes and chats are visible – without contact details – to registered Carriers or publicly. Contact details (name, telephone, e-mail) are disclosed only after a quote has been accepted and only to the respective Carrier or Shipper.
| Recipient | Purpose | Location / third country |
|---|---|---|
| The Carrier whose quote you accepted (or the Shipper who accepted your quote) | performance of the transport | EU / depending on the user |
| Hetzner Online GmbH | server hosting | Germany |
| Brevo (Sendinblue SAS) | sending e-mails | France |
| Functional Software, Inc. (Sentry) | error logging (technical data, possibly IP address) | USA – EU standard contractual clauses / Data Privacy Framework |
| DeepL SE | automatic translation of review and request texts (no personal data) | Germany |
| Google Ireland Ltd. (reCAPTCHA, Google Analytics, Google Ads) | protecting the request form against abuse; audience and conversion measurement – only with your consent via the cookie banner | Ireland / USA – Data Privacy Framework |
| OpenStreetMap Foundation (map tiles), Nominatim, OSRM | map display, place search and route calculation; your IP address is transmitted to the respective service | United Kingdom / EU |
| Bank, accountant, public authorities | processing of payments, legal obligations | Croatia |
We use strictly necessary cookies (session, language, cookie preference, CSRF protection) as they are required for the operation of the website (Art. 5(3) of Directive 2002/58/EC). Cookies for statistics (Google Analytics) and advertising (Google Ads – conversion measurement) and the reCAPTCHA service are loaded only after your consent via the cookie banner (Art. 6(1)(a) GDPR). You can change your choice at any time under Cookie settings.
We keep requests and quotes for the duration of the brokering and thereafter for 3 years from the end of the year to defend against claims. Billing data and invoices are kept for 11 years under Croatian accounting and tax law. Accounts not used for 5 years are deleted after notice. Server logs are deleted after 30 days. Records of rejected automated and failed login attempts (IP address, type of attempt) are kept for 90 days for security purposes. Chats and reviews remain as long as the associated request or profile exists.
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You may withdraw consent at any time with effect for the future. Please contact info@furgix.com; we respond within one month.
You also have the right to lodge a complaint with a data protection supervisory authority – either the authority of the EU Member State in which you reside, or the Croatian authority AZOP (Agencija za zaštitu osobnih podataka, Selska cesta 136, 10000 Zagreb, azop.hr).
The e-mail address and transport details are necessary for the brokering; without them we cannot forward quotes. The telephone number is required only to accept a quote so that the Carrier can reach you. All other information is voluntary. We do not carry out automated decision-making or profiling within the meaning of Art. 22 GDPR.
We update this Privacy Policy when our processing or the legal situation changes. The version published here applies. In the event of a discrepancy between language versions, the Croatian version prevails.