Privacy Policy

1. Data Controller

The data controller for the processing of your personal data is MickMind (Mick Baruffato), operating the CargoM8.dev platform. We only process data that is necessary to provide our services. Contact: [email protected].

2. What Data We Collect

• Identity data: name, email, phone number, profile photo
• Company data: company name, CVR number, address, transport permits
• Transport data: routes, cargo descriptions, bids, delivery status, vehicle information
• Financial data: subscription tier, billing history (card details are stored by Stripe, not by us)
• Technical data: IP address, browser type, device information, session data
• Communication data: messages sent through the platform, support requests

3. Purpose and Legal Basis (GDPR Art. 6)

We process your data for the following purposes:

• Account creation and management (legal basis: contract, Art. 6(1)(b))
• Transport job matching and bid processing (legal basis: contract, Art. 6(1)(b))
• Payment processing via Stripe (legal basis: contract, Art. 6(1)(b))
• Platform security and fraud prevention (legal basis: legitimate interest, Art. 6(1)(f))
• Compliance with bookkeeping and tax obligations (legal basis: legal obligation, Art. 6(1)(c))
• Service improvement using aggregated analytics (legal basis: legitimate interest, Art. 6(1)(f))
• Marketing communications, only with your consent (legal basis: consent, Art. 6(1)(a))

4. Sub-processors and Data Sharing

We share data only with the following service providers (sub-processors):

• Hetzner Online GmbH (Germany, EU) — infrastructure and hosting
• Stripe Inc. (EU entity) — payment processing
• HERE Technologies (EU) — route calculation and geocoding
• Resend (email delivery) — transactional emails
• Cloudflare (EU data localization) — CDN and security

5. Your Rights (GDPR Art. 15-22)

Under the GDPR, you have the right to:

• Access your personal data (Art. 15)
• Rectify inaccurate or incomplete data (Art. 16)
• Request erasure of your data (Art. 17)
• Restrict processing of your data (Art. 18)
• Data portability in a machine-readable format (Art. 20)
• Object to processing based on legitimate interest (Art. 21)
• Withdraw consent at any time (Art. 7(3))
• Lodge a complaint with Datatilsynet ([email protected])

6. Data Retention

Account data is retained for the duration of your account plus 30 days after deletion. Financial records are retained for 7 years per the Danish Bookkeeping Act. Transport records are retained for 5 years. Technical logs are retained for 90 days. After retention periods expire, data is permanently deleted or irreversibly anonymized.

7. Cookies

CargoM8.dev uses only strictly necessary cookies: an authentication session cookie and a language preference cookie (NEXT_LOCALE). We do NOT use marketing, advertising, or third-party tracking cookies. No Google Analytics, no Facebook Pixel, no fingerprinting.

8. International Data Transfers

All personal data is stored and processed within the European Union (EU/EEA). Our primary infrastructure is hosted on Hetzner servers in Germany. We do not transfer personal data outside the EU/EEA unless the recipient provides adequate safeguards (Standard Contractual Clauses, GDPR Art. 46).

9. Contact

For questions about data protection, contact us at [email protected]