Our Privacy Policy

Introduction

GDETS operates a suite of web applications to support digital freight sales, booking, and management for logistics professionals. Our Privacy Policy applies to any website visitor (“Visitor“) or registered user (“User“) of GDETS. Our Users and Visitors use GDETS to compare freight shipping options, educate themselves with regards to freight processes or current market conditions, book and pay for their shipments, manage them, and coordinate and communicate with their respective logistics providers. This involves sharing information regarding shipment routes, cargo details, and business information about themselves and their logistics needs and services.

Services

This Privacy Policy, including our Cookie Policy, applies to your use of our Services. This Privacy Policy applies to this site, GDETS Market Intelligence services and other GDETS-related sites, apps, communications and services (“Services”), including my off-site Services, such as our freight support staff, but excluding services that explicitly state that they are offered under a different privacy policy.

Data Controllers and Contracting Parties

Any of the GDETS entities is a controller of your personal data provided to, or collected by or for, or processed in connection with such GDETS entity’s Services. As a GDETS Visitor or User, the collection, use and sharing of your personal data is subject to this Privacy Policy and our Cookie Policy, as they may be updated from time to time. As for the use and processing of business data that does not contain personal information, see our Terms of Use.

Data We Collect

Data You Provide To Us
Registration and account information
To create an account you need to provide data including your company name, email address, some information about your shipping habits such as frequency, mobile number, and a password. Upon booking a shipment, you also provide a payment method. In some cases, you may invite additional users to access your account; we retain this data as well. We will collect data about your location country and preferences such as language. We collect all this data to allow you to open an account and use our services. Our legal basis for this is the need for collecting and processing this data in order to fulfill our side of the contract with you, and perform our Services.
Searches
As part of our Services, you search for freight quotes, book them and upload relevant commercial details to process the shipment. When you search for a shipment, we retain the parameters that you searched for. We also retain information about shipments booked, phone calls conducted regarding that search, on-site and emailed messages with both our team and the selected logistics provider, as well as payment information. For shipments to take place, you will also frequently need to upload commercial documents, like your commercial invoice, power of attorney, hazardous material statements and other shipment-related documentation. These documents in turn may contain other personal data. We use this information to help streamline your shipments and they are only accessible to relevant GDETS employees and the relevant service provider. We collect and process this data for several reasons –first, is to be able to supply our Services to you. Second, we also process and collect this data to improve our future services to you, and to all our customers. The legal basis for this is in order to perform the contract to which you are a party – and also our legitimate interest to provide you with our Services.
Posting and Uploading
We collect data from you when you provide, post or upload it to our Services, or when you communicate with GDETS staff or your service providers or your buyers by phone, email, chat, or our in-app messenger. In this case we collect and process this data in order to supply our Services to you, and to give you support whenever it is needed. Our legal basis for this is the performance of the contract to which you are a party – and also our legitimate interest to provide you with support and respond to your requests and enquiries.
Data From Others

Partners
We may receive data about your company when you use the services of GDETS providers and partners, such as insurance agencies, customs brokerages, logistics providers, and credit score assessment companies. We use this data in order to provide our Services to you. If you provided any of our partners with relevant personal data, they may share it with us. Depending on the context, our legal basis for collecting this data is the performance of the contract to which you are a party – and also our legitimate interest to process your requests.
Service Use
We log usage data when you visit or otherwise use our Services, including our sites and platform technology, such as when you view or click on web pages or freight quotes, perform a search, or engage with our content. We use log-ins, cookies, device information and internet protocol (“IP”) addresses to identify you and log your use. We use them to analyze trends, administer our websites, track users’ movement around the websites, and gather different kinds of demographic information. We also use them for data security purposes. Our legal basis for this is our legitimate interest to provide you with access to the Services.
Cookies and Other Similar Technologies
We use cookies and similar technologies (e.g. pixels, ad tags and device identifiers) to recognize you and/or your device(s) on, off and across different Services and devices. We also allow some others to use cookies as described in our Cookie Policy below. You can control cookies through your browser settings and other tools. Our website and our services are intended for business users (freight is not typically a popular personal hobby). For more information please see our Cookie Policy.
Your Device and Location
We (indirectly) receive data from your devices and networks, including location data through third-party technology. When you visit or leave our Services (including our plugins or similar technology on the sites of others), we receive the URL of the site you came from. Our third party technologies also may get information about your IP address, proxy server, operating system, web browser, device identifier and features, and/or ISP. For specific, location-related tools, we will ask you to opt-in before we use GPS or other tools to identify your precise location. We collect and process this data to render our Services to you, where relevant, and to improve our Services for you and other Users. The legal basis for this is your consent (again, where this is relevant), for the performance of the contract to which you are a party, and our legitimate interest to provide you with our Services.
Messages
If you communicate through our Services, we learn about that. It is supposed to work that way and would be weird if we didn’t. We collect information about your messages when you send, receive, or engage with messages in connection with our Services. We also use automatic scanning technology on messages (which is kind of cool, if you think about it). We collect and process this data to render our Services to you, where relevant, and to improve our Services for you and other Users. Our legal basis for this is your consent.
Information Provided from Freight Partners/Employers
When your employer or shipping partner uses GDETS services and invites you to the platform, they give us data about you. If an employer or business partner (supplier, customer, handling agent, customer broker etc.) invites you to collaborate on GDETS, they may provide us with personal data about you and business data about your company. For example, they may share your company name, role at the company, contact details, and permissions levels when you manage their shipments. We may use this data to establish a business connection with you, or to improve our Services. Depending on the context, our legal basis for collecting this data is the consent you give us for this purpose, our legitimate interest, and/or for the purposes of pre-contractual discussions with you.
Other
Your freight shouldn’t stand still. Neither does our development. GDETS often introduces new features to make freight tick, like live shipment tracking. If we collect materially different personal data or materially change how we use your data, we will notify you and may also modify this Privacy Policy.

How We Protect your Information

• We take great care in making sure the data you give us and the data we collect from you is well protected. Therefore, we implemented adequate and appropriate security measures, both physical and digital. Please note, however, that we cannot guarantee that the information will not be compromised as a result of unauthorized penetration to our servers.
• Data security and protection is dependent on both the security of our systems, and the security of the User’s systems and devices. Please make sure you use adequately strong passwords, and that you do not share them with anyone.

How We Share Information

• We use service providers and third parties to help us provide our Services (e.g., maintenance, analysis, audit, payments, fraud detection, marketing and development). They may have access to some of your personal data as reasonably necessary to perform these tasks on our behalf, and are contractually obligated not to disclose or use it for other purposes. If you’ve already read this far, it shows that you’re pretty diligent. So take our word for it that we’re also very diligent and ensure that our partners treat your data with the respect it deserves.
• The following is a list of third parties to which we provide your personal data:

  Name	Purpose
  Amazon Web Services	A cloud provider used for storage purposes
  Google Cloud Platform	A cloud provider used for storage purposes
  PandaDoc	Sales and e-signing services
  MongoDB	Transaction support and file storage
  Netsuite	Inventory management and CRM
  Salesforce	CRM
  Atlassian	Issue tracking and project management
  ZenDesk	Customer support

• GDETS is a group of entities. Gdets entities, like our subsidiaries offices around the world, may share your business data internally to provide and develop our Services. We may combine information internally across the different Services covered by this Privacy Policy to be more relevant and useful to you and others.
• It is possible that we will need to disclose personal information about you when required by law, subpoena, or other legal process or if we have a good faith belief that disclosure is reasonably necessary to (1) investigate, prevent, or take action regarding suspected or actual illegal activities or to assist government enforcement agencies; (2) enforce our agreements with you, (3) investigate and defend ourselves against any third-party claims or allegations, (4) protect the security or integrity of our Service (such as by sharing with companies facing similar threats); or (5) exercise or protect the rights and safety of GDETS, our users, personnel, or others. We attempt to notify Users about legal demands for their personal data when appropriate in our judgment, unless prohibited by law or court order or when the request is an emergency. We may dispute such demands when we believe, in our discretion, that the requests are overbroad, vague or lack proper authority, but we do not promise to challenge every demand.
• We can also share your personal data as part of a sale, merger or change in control, or in preparation for any of these events. Any other entity which buys us or part of our business will have the right to continue to use your data, but only in the manner set out in this Privacy Policy unless you agree otherwise.
• We may also share your data when you explicitly give us permission to do so. This can happen, for example, in marketing offers we may present you from time to time.

Additional Information on Data Transfers

• We transfer data to the following companies for storage: AWS, Google Cloud, MongoDB, PandaDoc and Netsuite. The servers hosting the data are located in the EU and the United States.
• As we mentioned earlier, we may transfer your data between different entities of the GDETS group. Any such transfer will be covered by our internal processing agreement, which contractually obliges each member of our group to ensure that any personal data being transferred will receive proper and adequate data protection wherever it is transferred to.
• When we transfer your personal data to third-parties, we will always make sure, through contractual obligations such as the European Standard Contractual Clauses (“SCCs”) and other legal mechanisms (such as Adequacy Decisions by the European Commission) that your Personal Data is being adequately protected and handled with care.

Analytic Tools

• Google Analytics. Our website uses a tool called “Google Analytics” to collect information about use of the website. Google Analytics collects information such as how often users visit this website, what pages they visit when they do so, and what other websites they used prior to coming to this website. We use the information we get from Google Analytics to maintain and improve the website and our products. We do not combine the information collected through the use of Google Analytics with Personal Data we collect. Google’s ability to use and share information collected by Google Analytics about your visits to this website is restricted by the Google Analytics Terms of Service, available at https://marketingplatform.google.com/about/analytics/terms/us/, and the Google Privacy Policy, available at http://www.google.com/policies/privacy/. You may learn more about how Google collects and processes data specifically in connection with Google Analytics at http://www.google.com/policies/privacy/partners/. You may prevent your data from being used by Google Analytics by downloading and installing the Google Analytics Opt-out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout/.
• Hotjar. The Website uses Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices. This includes a device’s IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf. For further details, please see Hotjar’s privacy policy at https://www.hotjar.com/legal/policies/privacy. You can opt-out to the creation of a user profile, Hotjar’s storing of data about your usage of our Website and Hotjar’s use of tracking cookies on other websites on this link https://www.hotjar.com/legal/compliance/opt-out.
• Facebook Pixels and SDKs. We use Facebook pixels or SDKs, which are tools that provide help to website owners and publishers, developers, advertisers, business partners (and their customers) and others integrate, use and exchange information with Facebook, as such the collection and use of information for ad targeting. Please note that third parties, including Facebook, use cookies, web beacons, and other storage technologies to collect or receive information from your websites and elsewhere on the internet and use that information to provide measurement services and target ads. Facebook’s ability to use and share information is governed by the Facebook Tools Terms, available at: https://www.facebook.com/legal/technology_terms/. You can prevent your data from being used by Facebook Pixels and SDKs by exercising your choice through these mechanisms: http://www.aboutads.info/ choices or http://www.youronlinechoices.eu/..
• Microsoft Clarity. We use Microsoft Clarity, which is a tool that allows us to better understand how users and other visitors interact with our websites, so we could use this information to adapt and improve our websites and services. Please note that third parties, including Microsoft, may collect personal information about you while you use and browse our website. The use of Microsoft Clarity is subject to the Terms of Service available at: https://clarity.microsoft.com/terms. To read more about Microsoft’s data collection practice and privacy statements, please see the Microsoft Privacy Statements, available here: https://privacy.microsoft.com/en-us/privacystatement. If you wish to opt-out of Microsoft Clarity, you may exercise your choice through this mechanism: http://www.youronlinechoices.eu.
• Intercom. We use Intercom, which is a service that enables us to communicate with our websites visitors to answer their questions, give support where needed, and help them make the most out of our services and websites. Through this service, some personal data about you is being collected and processed, and a unique cookie ID is created for each user – so we know who you are, and how can we help you. To learn more about Intercom’s data and privacy practices, please read Intercom’s Privacy Policy available here: https://www.intercom.com/legal/privacy.
• Our website and Services are always changing and improving – so we reserve the right to remove or add new analytic tools from time to time.

Your Choices & Obligations

• Data Retention
  We keep most of your personal data for as long as your account is open, and for a maximum of 5 years after the termination of your account. Unless we are legally obligated to retain your personal data for a longer period (as further detailed in the Account Closure Section below). We retain your personal data while your account is in existence or as needed to provide you Services. This includes data you or others provided to us and data generated or inferred from your use of our Services. Even if you only use our Services when searching for freight quotes every once in a while, we will retain your information and keep your profile open until you decide to close your account. In some cases we choose to retain certain information in a depersonalized or aggregated form.
• Your Rights to Access and Control Your Personal Data ((some of the below rights might apply only to individuals protected by the GDPR)
  We provide many choices about the collection, use and sharing of your data, including opt-outs and communication controls. For personal data that we have about you:
  Right to Access and/or Take Your Data: You can ask us to review your data which we hold, and for a copy of your personal data. The copy of the personal data you provided will be transferred to you in machine readable form.
  Delete Data: You can delete personal data from your profile page or ask us to erase or delete all or some of your personal data (e.g., if it is no longer necessary to provide Services to you).
  Change or Correct Data: You can edit some of your personal data through your account. You can also ask us to change, update or fix your data in certain cases, particularly if it’s inaccurate.
  Object to, or Limit or Restrict, Use of Data: You can ask us to stop using all or some of your personal data (e.g., if we have no legal right to keep using it) or to limit our use of it (e.g., if your personal data is inaccurate or unlawfully held).
  Right to Data Portability: if you ask us to give you a copy of your personal data in a machine readable form, you may take the personal data and transmit it to another controller.
  You have the right to request information about our legal basis for transferring your personal data.
• While we will try to accommodate all requests to exercise rights, we may need to occasionally limit, or refuse, some of them. This may happen if we have different legal obligations, or if we believe we have a legal basis to refuse it. We may also charge certain amounts for the exercise of rights, where the law allows it – and only when we will believe it is necessary. Upon a request, we may need to ask you to give us additional information, in order to confirm your identity and prevent exposure of personal data to unauthorized persons. You may contact us using the contact information below, and we will consider your request in accordance with applicable laws.
• Account Closure We keep some of your data even after you close your account. If you choose to close your GDETS account, your personal data will generally stop being visible to others on our Services within 24 hours. We generally delete closed account information within 30 days of account closure, except as noted below. We retain your data even after you have closed your account if reasonably necessary to comply with our legal obligations (including law enforcement requests), meet regulatory requirements (including financial regulations and FMC), resolve disputes, maintain security, prevent fraud and abuse, enforce our Terms of Use, or fulfill your request to “unsubscribe” from further messages from us. Except as otherwise stated in this Section, we will keep the personal data for a maximum of 5 years after you ask to close your account. We will retain de-personalized information after your account has been closed. Information you have shared with others will remain visible after you closed your account or deleted the information from your own profile or mailbox, and we do not control data that other Users copied out of our Services. Note for example that in some cases your name, email, or phone may appear on freight quotes and contracts which we will keep indefinitely for regulatory reasons, or for the integrity of our financial records, even after you stop being a User.

Data of Children

We do not offer our products or services for use by children and, therefore, we do not knowingly collect personal data from or about children under the age of eighteen (18). Frankly, we’d be surprised if they’d be interested in our services to begin with. If you are under the age of eighteen (18), do not provide any personal data to us. In the event that we become aware that you provide personal data in violation of applicable privacy laws, we reserve the right to delete it. If you believe that we might have personal data of children under the age of eighteen (18), please contact us at legal@Gdets.com.

Specific Provisions Applicable Under California Privacy Law

• Our California Do Not Track Notice. Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. Please note that we do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers, but we may allow third parties, such as companies that provide us with analytics tools, to collect personally identifiable information about an individual consumer’s online activities over time and across different web sites when a consumer uses the Services.
• Your Choices. You have certain choices about your Personal Information. Where you have consented to the processing of your Personal Information, you may withdraw that consent at any time and prevent further processing by contacting us as described in this Privacy Policy.

Other Important Information

• Security We monitor for and try to prevent security breaches. Please use the security features available through our Services. We implement security safeguards designed to protect your data, such as enforcing the use of HTTPS. We regularly monitor our systems for possible vulnerabilities and attacks. However, we cannot warrant the security of any information that you send us. There is no guarantee that data may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards.
• Lawful Bases for Processing We have lawful bases to collect, use and share personal data about you. You choose to use our Services and have choices about our use of your personal data. At any time, you can withdraw whichever optional consent you have provided by requesting to withdraw. We will only collect and process personal data about you where we have lawful bases. Lawful bases include consent (where you have given consent), contract (where processing is necessary for the performance of a contract with you (e.g. to deliver the GDETS Services you have requested)) and legitimate interests. Legitimate interests will include processing your personal data for the purposes of GDETS legitimate interests or for the legitimate interests of third parties (e.g., your employer or company), provided that such processing shall not outweigh your rights and freedoms. For example, we may process your personal data to:
  • Protect you, us, or others from threats (such as security threats or fraud);
  • Comply with laws that apply to us;
  • Enable or administer our business, manage corporate transactions, such as mergers or acquisitions; and
  • Understand and improve our business or customer relationships generally.

Where we rely on your consent to process personal data, you have the right to withdraw or decline your consent at any time and where we rely on legitimate interests, you have the right to object.

Contact Information

You can contact us or use other options to resolve any complaints. If you have questions or complaints regarding this Policy, please contact GDETS here at hello@gdets.xyz. Thanks for trusting GDETS with your business and your data.