GDPR Compliance

Your privacy rights and our commitment to protecting your personal data under GDPR regulations.

Last updated: March 8, 2024

GDPR Overview

The General Data Protection Regulation (GDPR) is a comprehensive data protection law in the European Union that came into effect on May 25, 2018. GDPR aims to give EU citizens control over their personal data and simplify the regulatory environment for international business by unifying data protection laws across Europe.

At PRIME, we are fully committed to GDPR compliance. This page explains how we collect, use, store, and protect your personal data in accordance with GDPR requirements. We respect your privacy rights and are dedicated to maintaining the highest standards of data protection.

Data Controller Information

Legal Entity

Company Name: PRIME Transportation LLC

Registration Number: EU-VAT-123456789

Legal Address: 123 Logistics Way, New York, NY 10001, USA

Representative: Sarah Johnson, Chief Privacy Officer

Contact Information

Email: privacy@primetransit.com

Phone: +1 (555) 123-GDPR

Data Protection Officer: dpo@primetransit.com

Website: https://primetransit.com

Your GDPR Rights

Right to Access

You have the right to obtain confirmation whether we process your personal data and access to that data.

Right to Rectification

You have the right to have your personal data rectified or completed if it is inaccurate or incomplete.

Right to Erasure

You have the right to have your personal data erased under certain circumstances.

Right to Portability

You have the right to receive your personal data in a structured format and transmit it to another controller.

Right to Restriction

You have the right to restrict the processing of your personal data under certain circumstances.

Right to Object

You have the right to object to the processing of your personal data based on legitimate interests.

How We Process Your Data

Lawful Basis for Processing

Contract Performance (Article 6(1)(b))

Processing necessary for the performance of a contract with you or to take steps at your request before entering into a contract.

Legitimate Interests (Article 6(1)(f))

Processing necessary for our legitimate interests, provided they are not overridden by your rights and interests.

Consent (Article 6(1)(a))

Processing based on your explicit consent, which you can withdraw at any time.

Legal Obligation (Article 6(1)(c))

Processing necessary for compliance with a legal obligation to which we are subject.

Categories of Personal Data

Identity Data

• Full name
• Email address
• Phone number
• Date of birth
• Profile picture

Usage Data

• IP address
• Browser type and version
• Operating system
• Device information
• Usage patterns and preferences

Location Data

• GPS coordinates
• Address information
• Delivery locations
• Route data

Financial Data

• Payment information
• Billing address
• Transaction history
• Invoice data

Data Retention & Deletion

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.

Account Data

Retained for the duration of your account plus 7 years for tax and legal compliance purposes.

Communication Data

Email and chat logs retained for 3 years for customer service and dispute resolution.

Analytics Data

Aggregated and anonymized analytics data retained indefinitely for service improvement.

Marketing Data

Marketing preferences and consent records retained until consent is withdrawn or account deletion.

Data Deletion Requests

You can request deletion of your personal data at any time. We will respond to your request within 30 days and delete your data unless we have a legal obligation to retain it.

International Data Transfers

As a global company, we may transfer your personal data to countries outside the European Economic Area (EEA). When we do so, we ensure appropriate safeguards are in place to protect your data.

Adequacy Decision

Transfers to countries recognized by the European Commission as providing adequate protection.

Standard Contractual Clauses

EU-approved contractual clauses ensuring equivalent protection for your data.

Binding Corporate Rules

Our internal rules for data protection approved by EU data protection authorities.

Certification Schemes

Compliance with approved certification schemes providing adequate safeguards.

Data Protection Officer

Contact Our DPO

Name:

Dr. Michael Chen

Email:

dpo@primetransit.com

Phone:

+1 (555) 123-4567

Office Hours:

Mon-Fri 9AM-6PM EST

DPO Responsibilities

Monitoring GDPR compliance
Handling data subject requests
Conducting data protection impact assessments
Advising on data protection matters
Acting as point of contact for supervisory authorities

Exercising Your GDPR Rights

To exercise any of your GDPR rights, please contact us using one of the methods below. We will respond to your request within 30 days.

Email Request

Send your request to our Data Protection Officer:

dpo@primetransit.com

Phone Request

Call our privacy hotline:

+1 (555) 123-GDPR

Required Information

To process your request efficiently, please include:

• Your full name and contact information
• Description of the right you wish to exercise
• Any relevant account or reference numbers
• Proof of identity (if required for security)
• Specific details about the data or processing in question

Complaints & Supervisory Authority

If you are not satisfied with our response to your GDPR request or believe we are not complying with GDPR, you have the right to lodge a complaint with a supervisory authority.

EU Supervisory Authorities

Lead Authority (Ireland):
Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28, Ireland

Phone: +353 (0)761 104 800
Email: info@dataprotection.ie

Local Authorities

You can find the contact details for your local supervisory authority at:

European Data Protection Board - Members

Policy Updates

We regularly review and update this GDPR page to ensure it remains accurate and compliant with current regulations. We will notify you of any significant changes that may affect your rights or our processing activities. The "Last updated" date at the top of this page indicates when the information was last revised.