Legal
Privacy Policy
This policy explains how we handle personal data under the EU General Data Protection Regulation (GDPR).
1. Controller
MareCargo, Ethnikis Antistasis 76, Igoumenitsa (Nea Seleukeia), 46100, Greece. Email: info@marecargo.com. Phone: +30 2665 021164 / +30 6974 406754.
2. Public website and authenticated application
Public information and the public enquiry form are provided through marecargo.com, including marecargo.com/request-ticket.
Authenticated staff and Driver areas are provided through app.marecargo.com.
3. What we collect
Website enquiry / onboarding information: whether you contact us as a company or as a driver, the company or driver details you enter, your contact details, preferred contact language, expected routes and trip frequency, and any additional information you provide. Sending the public form delivers this information to MareCargo so we can follow up with you — it does not automatically create an operational Ticket Request.
Company and contact details: company name, contact person, email address and phone/mobile number, country and address information where you provide it.
Ticket Request and sailing information: selected ports and routes, ferry operator or sailing details where supplied, requested departure date and any special operational notes.
Vehicle information: truck and trailer registration details, vehicle type, dimensions and any relevant restrictions.
Driver and accompanying-person details: names and phone numbers of the driver and any second driver or assistant you name in the request.
Cargo information: cargo description, weight, dangerous-goods declarations and any other cargo details you supply.
Uploaded documents: transport, identity, booking or other documents you upload to support a Ticket Request (up to three files, max. 5 MB each). The file name, size and internal storage reference are also recorded.
Internal operational notes: notes added by MareCargo staff while coordinating or processing a request.
Staff account information: name, email address and assigned role for authorised staff accounts.
Driver account information: name, mobile phone number and account/session records for drivers who sign in to the Driver portal.
Technical security information: your IP address and browser user agent are stored with submissions to help prevent spam and abuse, and login/security events are logged for the same purpose.
4. Staff authentication
Staff accounts are created and managed by a MareCargo administrator. Staff sign in to app.marecargo.com with an email address and password. Roles are assigned by an administrator and determine what each staff member can access: Admin, Office Agent, Dispatcher or Super Dispatcher.
5. Driver authentication
Driver access uses a mobile phone number and a 6-digit PIN. Once authenticated, a secure session cookie keeps the Driver signed in to the Driver portal at app.marecargo.com.
6. Why we process it (legal basis)
To prepare and perform a transport or booking contract with you (Art. 6(1)(b) GDPR), to comply with transport, customs and accounting obligations (Art. 6(1)(c) GDPR), and on the basis of our legitimate interest in securing our systems against spam and abuse (Art. 6(1)(f) GDPR).
7. Where the data is stored and who can see it
Submissions are stored in our managed database and private file storage inside the EU. Uploaded documents are never public — they can only be opened by authorised MareCargo users according to their role and operational need, through short-lived, individually signed links.
A summary of each Ticket Request is also written to a spreadsheet in our own Google Workspace account so our operations team can process it. Only file names and internal storage references are written there — never the documents themselves.
Notification emails about Ticket Requests and website enquiries are sent through our Google Workspace account.
We use Cloudflare Turnstile for spam protection; your IP address is processed by Cloudflare during that check.
8. Service providers
The following service providers process data on our behalf for the current system:
- Lovable Cloud — managed database, authentication, file storage and application hosting.
- Cloudflare Turnstile — spam and abuse protection.
- Google Workspace — notification email delivery and Ticket Request spreadsheet summary.
9. How long we keep it
Ticket requests and uploaded documents are kept for as long as needed to handle the booking and to meet statutory retention duties, and are deleted at the latest 24 months after the request unless a longer legal retention period applies. Contact enquiries are deleted 12 months after the last correspondence. Spam-protection records are deleted after 24 hours.
10. Your rights
You may request access, rectification, erasure, restriction of processing, data portability, and object to processing based on legitimate interest. Write to info@marecargo.com and we will respond within one month. You also have the right to lodge a complaint with the Hellenic Data Protection Authority.
11. Cookies and browser storage
Our public website uses no advertising or analytics cookies. We use a secure session cookie to keep authenticated Drivers signed in, and browser storage to keep authorised staff signed in to the authenticated application. Cloudflare Turnstile may process technical data during spam-protection checks.