Privacy policy
This policy explains what personal data MAP Logistic OOD collects when you use this website, ask us for a price or book a transport, why we do it, who helps us, how long we keep the data and what your rights are.
1. Who is responsible
The controller of your data is MAP Logistic OOD, EIK 208038880, str. Ivan Vazov 3, 2600 Dupnitsa, Bulgaria. For anything about your data, write to info@maplogisticltd.com or call +359 883 232 888.
2. When you ask for a price
The quote form asks for the vehicle (type, whether it runs, how many), the route (countries, towns, type of pickup place), when the vehicle is ready, and how to reach you: your name, email address and/or phone number and preferred channel. Businesses also give the company name and, optionally, the VAT number. You can add a message.
With the request we also store the language of the page, the page you sent it from, campaign tags in the link (UTM) and the referring website, and your time zone, so we can state our reply time in your local time.
We use this to answer your request and prepare the transport (steps before a contract, Art. 6(1)(b) GDPR). The page, campaign and referrer details help us understand which pages bring requests (our legitimate interest, Art. 6(1)(f)).
When you give an EU VAT number, we check it in the European Commission's VIES register, to invoice your company correctly.
To get a quote you need to give your name, an email address or phone number, the route, the vehicle and when it is ready; businesses also give the company name. Without the transport details we can't carry out the contract.
3. News by email
If you tick “Email me occasional news and route prices”, we may email you news and prices on our routes (consent, Art. 6(1)(a) GDPR). You can withdraw consent at any time, with the link in each email or by writing to us.
4. When you message or call us
When you contact us by WhatsApp, Viber, phone or email, we use what you send to answer you and to arrange the transport. WhatsApp and Viber are run by their own providers under their own privacy policies.
5. When we transport your vehicle
To carry out a transport we use your contact details, the vehicle's details (make, model, VIN), the pickup and delivery addresses, the contact person at each end and the transport documents, such as the CMR consignment note (contract, Art. 6(1)(b), and our legal obligations as a carrier and for accounting, Art. 6(1)(c) GDPR).
We also receive the names and phone numbers of the seller or other contact person at pickup and delivery from the customer who books.
When our driver photographs the CMR consignment note at pickup, the VIN is read from the photo automatically, so we can link the car to its transport.
Our tracker shows a vehicle's status by its VIN. Most of our trucks send their GPS position about every hour; the tracker shows only an approximate position of the truck and where the vehicle is going, and no names or phone numbers.
6. Security and statistics
Cloudflare Turnstile checks that the quote form is sent by a person. To limit repeated requests, we keep a pseudonymised form of your IP address (a keyed hash, not the address itself) for about a day. Our hosting provider processes IP addresses and technical data to deliver the website. This protects the site and your data (our legitimate interest, Art. 6(1)(f) GDPR).
We measure visits with Plausible Analytics, which uses no cookies and builds no profile of you, and page speed with Vercel Speed Insights. We do this in our legitimate interest in improving the site (Art. 6(1)(f) GDPR).
7. Cookies and storage on your device
This website sets no cookies. Your browser's local storage keeps an unsent quote request, so you can finish it later, and your answer to the language suggestion. Both stay on your device, and you can clear them in your browser at any time. An unsent request older than 30 days is no longer offered, and it is deleted the next time you open the form.
When you fill in the quote form, Cloudflare Turnstile reads signals from your browser and device to check that the form is sent by a person. It runs only on the form, because it is strictly necessary to protect the form from automated abuse.
8. Who helps us
These providers process data for us under a contract, each only as far as its service needs it:
- Vercel (hosting; our server functions run in Dublin, Ireland)
- Supabase (database, hosted in Ireland)
- Resend (sending our emails)
- Cloudflare (domain name service and Turnstile)
- Hostinger (our mailbox)
- Plausible Analytics (visit statistics, without cookies)
- Mapbox (maps on our tracker, road distances between towns, and the map position of pickup and delivery addresses)
- Anthropic (reading the VIN from photos of transport documents)
- Telegram (alerts to our dispatch team, without personal data)
Cloudflare also uses the browser and device signals that Turnstile reads as a controller, to improve bot detection; see its Turnstile privacy notice.
When your vehicle travels on a partner carrier's truck, we give that carrier what it needs for the pickup and delivery. We also give data to authorities, our accountants and our insurer when the law or a claim requires it.
9. Transfers outside the EU
Some of these providers are based in the United States or process data there. In that case the transfer is covered by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses. You can ask us for a copy of the safeguards.
10. How long we keep your data
- Requests that don't lead to a transport: we delete your contact details 24 months after the request.
- Transports: we anonymise your contact details 24 months after delivery. Invoices and accounting records are kept as long as Bulgarian accounting and tax law requires.
- Photos of signed CMR notes and of delivered vehicles: 12 months.
- The pseudonymised IP records used against repeated requests: about a day.
- News by email: until you withdraw consent.
11. Your rights
You can ask us for access to your data, its correction or deletion, to restrict its use, or for a copy in a portable format, and withdraw consent at any time. Write to info@maplogisticltd.com; we answer within one month.
You can also complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or the data protection authority where you live.
12. Your right to object
You can object at any time, on grounds relating to your situation, to our use of your data based on our legitimate interest. We then stop, unless we have compelling legitimate grounds that override your interests, or need the data for a legal claim.
You can object to the use of your data for news and offers by email at any time, without giving a reason, and we then stop using it for that. Use the link in each email or write to info@maplogisticltd.com.
13. Automated price range
After a request, the site may show an indicative price range, calculated automatically from our route prices. It isn't a decision about you: a person always sends you the final price.
14. Changes to this policy
When we change this policy, we update it on this page and change the date at the top.