Privacy Policy

1. Data controller

The controller of the personal data is:

2. Scope

This Policy applies to personal data processed through:

• through the HFL Cargo website;
• through contact and quotation request forms;
• through the portal reserved for authenticated users;
• through contact by email, telephone or in person;
• the preparation and performance of logistics operations;
• the relationship with customers, prospective customers, suppliers and partners;
• through administrative, commercial and invoicing processes.

3. Personal data we may process

Depending on the relationship established and the purpose of the contact, we may process the following categories of data:

4. Purposes and legal bases

Where processing is based on consent, that consent may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.

5. Sources of data

Data may be obtained:

• directly from the data subject;
• from the company or organisation represented by the data subject;
• through customers, shippers, consignees or partners;
• through suppliers involved in an operation;
• through legitimate public or professional sources;
• automatically during use of the website and portal.

Where third-party data is provided to us, the person providing it must ensure that they are authorised to do so and that the relevant data subject has been given the appropriate information.

6. Recipients and service providers

Data may be disclosed, only where necessary, to:

• carriers, agents, freight forwarders and logistics operators;
• shipping lines and air carriers;
• warehouses, terminals, customs brokers and customs representatives;
• insurers and surveying or loss-adjusting entities;
• hosting, email, IT support and maintenance providers;
• accounting, legal and administrative service providers;
• banking institutions and payment service providers;
• tax, customs, judicial or administrative authorities;
• other entities where there is a legal obligation or valid authorisation.

Service providers processing data on our behalf are subject to contractual obligations of confidentiality, security and processing only on documented instructions.

7. International transfers

The international nature of logistics operations may require the disclosure of minimum contact and operational data to entities located outside the European Economic Area.

Where an international transfer of personal data takes place, the legally applicable mechanisms will be used, including adequacy decisions, standard contractual clauses or other safeguards recognised by data protection law.

You may request additional information about the applicable safeguards through comercial@hflcargo.com .

8. Retention period

Data are retained only for the period necessary for the purposes that justified their collection, taking into account:

• the duration of the commercial or contractual relationship;
• the period required to respond to and follow up on a quotation;
• applicable tax, accounting and administrative retention periods;
• limitation periods and the exercise or defence of legal rights;
• obligations relating to transport and documentation;
• consent and any subsequent withdrawal of that consent;
• security and fraud prevention requirements.

When the data is no longer required, it will be deleted, anonymised or kept blocked where retention is required by law or necessary for the defence of legal rights.

9. Data subject rights

Where applicable, the data subject may exercise the following rights:

To exercise a right, send your request to comercial@hflcargo.com , identifying the right you wish to exercise.

We may request additional information strictly necessary to confirm the identity of the requester and protect the data against unauthorised access.

10. Data security

Technical and organisational measures appropriate to the risk are adopted to protect data against destruction, loss, alteration, disclosure, unauthorised access or unlawful processing.

No system is completely invulnerable. In the event of a security incident, the legally required containment, assessment, documentation and notification measures will be adopted.

11. Cookies and external services

The website uses cookies strictly necessary for its operation and security. Other cookies or external services should only be enabled in accordance with the visitor's choices and applicable law.

The following may be used when configured:

• statistical measurement and performance services;
• maps and embedded content;
• spam and abuse prevention mechanisms;
• communication and support tools.

Please see the Cookie Policy to learn about the available categories, purposes and options.

12. Children's data

HFL Cargo's services are intended for businesses and professionals and are not directed at minors. We do not intentionally collect data relating to minors through public forms.

13. Automated decision-making

HFL Cargo does not use data collected through public forms to make solely automated decisions that produce legal effects or significantly affect the data subject.

14. Changes to the Privacy Policy

This Policy may be updated to reflect legal, technical or organisational changes. The date of the latest update will be shown at the beginning of the document.

Where changes are significant, additional means of communication may be used where appropriate.

15. Data protection contacts

For questions regarding this Policy or the processing of your personal data:

• Email: comercial@hflcargo.com
• Portugal: +351 912 783 784*
• Spain: +34 689 886 742
• Address: Avenida da Boavista, nº 1180, 2º andar-C, Lordelo do Ouro e Massarelos, 4100-113 Porto.