Last updated: 1 January 2024 · Effective from 1 January 2024
1. Who We Are
CargoGMBH Logistics AG ("CargoGMBH", "we", "us", "our") is a company incorporated under the laws of Switzerland, registered at the commercial register of the Canton of Zürich (CHE-201.015.778), with its registered office at Bahnhofstrasse 10, 8001 Zürich, Switzerland.
CargoGMBH is the data controller for personal data collected through our website, client portal, mobile application and in the course of providing logistics services.
2. Data We Collect
2.1 Information you provide to us
- Contact and account data: name, job title, employer, email address, phone number, postal address.
- Shipping data: sender and recipient names and addresses, goods descriptions, package dimensions and weights, special handling instructions.
- Payment data: billing address, payment method details (processed securely by our payment partner; we do not store full card numbers).
- Communications: records of emails, chat messages and calls with our team for service and legal purposes.
- Account credentials: username and encrypted password for the CargoGMBH client portal.
2.2 Information collected automatically
- Usage data: pages visited, time spent, clicks, scroll depth, referrer URLs.
- Device data: IP address, browser type and version, operating system, device identifiers.
- Location data: approximate location derived from IP address. GPS data is not collected from users' devices without explicit consent.
- API data: request logs, API key identifiers, endpoint usage and response times for developers using our API.
3. How We Use Your Data
We process personal data only where we have a lawful basis to do so:
- Performance of contract: to book, manage, track and deliver shipments; process payments; provide customer support; generate shipping documents.
- Legal obligation: customs declarations require personal data of shippers and consignees. We are legally required to retain certain shipment records for up to 10 years.
- Legitimate interests: to improve our services, detect and prevent fraud, maintain system security, and send service-related communications.
- Consent: for marketing emails and newsletter subscriptions. You may withdraw consent at any time.
We do not use personal data for automated decision-making or profiling that produces legal or significant effects on individuals.
4. Who We Share Data With
We share personal data only as necessary to deliver our services or where required by law:
- Carrier partners: airlines, shipping lines and trucking companies require shipper, consignee and cargo details to fulfil transportation contracts.
- Customs authorities: we are legally required to submit shipment and personal data to customs and border authorities in relevant countries.
- IT and cloud service providers: hosting, CRM, email and analytics tools used under strict data processing agreements.
- Payment processors: Stripe and SIX Group process payments; they are independently PCI-DSS compliant.
- Professional advisors: lawyers, auditors and insurers, subject to professional confidentiality obligations.
- Law enforcement: where required by applicable law, court order or to protect rights and property.
We do not sell, rent or trade personal data to third parties for marketing purposes.
5. Data Retention
We retain personal data for as long as necessary to fulfil the purposes for which it was collected, subject to legal requirements:
- Shipment records: 10 years (Swiss commercial law requirement).
- Customs declarations: as required by applicable customs authorities (typically 3–7 years).
- Client account data: for the duration of the relationship plus 3 years.
- Marketing data: until you unsubscribe or request deletion.
- Website logs: 12 months.
6. Your Rights
Under the revFADP and GDPR, you have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you.
- Rectification: request correction of inaccurate or incomplete data.
- Erasure: request deletion of your data, subject to legal retention obligations.
- Restriction: request that we limit processing of your data.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interests.
- Withdraw consent: at any time, where processing is based on consent.
To exercise your rights, contact our Data Protection Officer at support@cargogmbh.com. We will respond within 30 days. You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) at www.edoeb.admin.ch.
7. Security
CargoGMBH implements appropriate technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure or destruction. These include:
- TLS 1.3 encryption for all data in transit
- AES-256 encryption for data at rest
- Multi-factor authentication for all internal systems
- Annual third-party penetration testing
- ISO 27001 certified information security management system
- Staff data protection training updated annually
8. Cookies
We use cookies and similar technologies on our website. By category:
- Strictly necessary: required for login sessions, security tokens and shopping cart functionality. Cannot be disabled.
- Performance: anonymised analytics (Plausible Analytics — privacy-preserving, no cross-site tracking).
- Functional: language and currency preferences.
- Marketing: only activated with your explicit consent. Currently not used.
You can manage cookie preferences at any time via the cookie settings banner or your browser settings.
9. International Data Transfers
As a global logistics company, some personal data is transferred internationally to deliver shipments. Where data is transferred outside Switzerland or the EEA, we ensure appropriate safeguards are in place, including:
- EU Standard Contractual Clauses (SCCs) with all non-EEA processors
- Adequacy decisions for approved countries
- Binding Corporate Rules where applicable
For all data protection enquiries, requests to exercise your rights, or to report a concern, please contact:
CargoGMBH Logistics AG — Data Protection Officer
Bahnhofstrasse 10, 8001 Zürich, Switzerland
Email: support@cargogmbh.com
Phone:
We may update this Privacy Policy from time to time. Material changes will be communicated by email to registered users and by a prominent notice on this page, at least 30 days before they take effect.