Privacy policy

Who we are

Danube — the websites danubecrm.com and danubetms.com and the Danube CRM and Danube TMS platform — is operated by Load Your Cargo BV, with its registered office at Kernenergiestraat 19/J10, Antwerp (Wilrijk), Belgium. Load Your Cargo BV is the controller of the personal data described in this policy.

This policy follows Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and the national laws that apply.

How to reach us about your data

For any question about your data, or to exercise your rights, contact us and mention “Data protection” in the subject:

• Email: contact@danubecrm.com or contact@danubetms.com
• Phone: +40 31 631 8930
• Post: Load Your Cargo BV, Kernenergiestraat 19/J10, Antwerp (Wilrijk), Belgium

What data we process

Only what we need for the reason you are in touch with us:

• Contact form and email: name, company, email address, phone number (if you give it), the topic you choose and your message.
• Demos, offers and contracts: name, role, company, contact details, our correspondence and the billing details needed to invoice.
• Platform accounts: the name, email address and sign-in details of each user, and the activity records needed to run and secure the account.
• Technical data: when you open a page, the hosting servers receive your IP address, browser type and the page requested. We use them only to deliver the site and keep it secure.

Data you keep in Danube CRM or Danube TMS

The data your company enters in the platform — clients, carriers, loads, emails, documents — belongs to your company. For that data your company is the controller and we act as processor, only on its instructions and under the data processing terms of the contract (Art. 28 GDPR). Questions about it should go to the company that uses Danube.

Why we use it, and on what legal basis

Each use has a legal basis under Art. 6 GDPR:

• Replying to your message and preparing an offer — steps taken at your request before a contract (Art. 6(1)(b)).
• Providing the Danube platform — performance of the contract with your company (Art. 6(1)(b)).
• Invoicing and accounting — legal obligation (Art. 6(1)(c)).
• Keeping the sites and the platform secure, including limiting abuse of the contact form — legitimate interest (Art. 6(1)(f)).
• Occasional news about Danube for business contacts — legitimate interest (Art. 6(1)(f)), or your consent where the law requires it (Art. 6(1)(a)). You can object or unsubscribe at any time.

Cookies

The websites danubecrm.com and danubetms.com set no cookies and use no analytics or advertising trackers. Fonts and images are served from our own domains, so opening a page sends nothing to third parties. The Danube platform stores only what is strictly necessary to keep you signed in.

Who receives the data

We do not sell personal data. We share it only with the recipients below; our providers act only on our instructions, under data processing agreements (Art. 28 GDPR):

• Vercel Inc. — hosts the websites and processes the contact form.
• Our hosting provider in Romania — hosts the email inboxes that receive the contact form.
• The providers that host the Danube platform, under data processing agreements.
• Accountants, lawyers and public authorities, when the law requires it or to defend our rights.

Transfers outside the EEA

Danube is operated in the EU. Some providers, such as Vercel, may process data outside the European Economic Area; those transfers are covered by the European Commission’s standard contractual clauses and, where applicable, by the EU–U.S. Data Privacy Framework.

How long we keep it

We keep personal data only as long as we need it:

• Messages that do not lead to a contract: up to 2 years after our last exchange.
• Contract and account data: for the duration of the contract, then for the legal limitation period.
• Accounting documents: 10 years, as required by law.
• Server logs: a few weeks at most. IP addresses used to limit abuse of the contact form: 10 minutes.

Your rights

Under the GDPR you have the rights below. We reply to every request within one month, and we never take decisions about you based solely on automated processing.

• to access your data and get a copy of it;
• to have it corrected;
• to have it erased (“the right to be forgotten”);
• to restrict how it is processed;
• to data portability;
• to object to processing, including direct marketing;
• to withdraw your consent at any time, without affecting earlier processing;
• to lodge a complaint with a supervisory authority — in Belgium the Data Protection Authority (www.dataprotectionauthority.be), or the authority where you live, such as ANSPDCP in Romania (www.dataprotection.ro).

Security

Every page and form is served only over encrypted connections (HTTPS), access to data is limited to the people who need it, and the sites send security headers that block common attacks. To report a security problem, see /.well-known/security.txt or write to the addresses above.

Changes to this policy

When this policy changes, we publish the new version on this page and update the date at the top.