1. Controller and contact details
TOP CARGO LOGISTICS SL, Spanish tax ID B16977431, with its registered office at Calle Sant Antoni 35, 2.ª planta, 08201 Sabadell (Barcelona), Spain, is the controller of enquiry data.
For privacy matters and to exercise your rights, email info@topcargologistics.es, mentioning “Data protection”, or write to the registered office.
2. Data and purposes
We process the name or professional identification, company and email address you provide. For warehousing enquiries you may add a telephone number. Depending on the enquiry, we also receive origin, destination, transport mode, truck type, dates, goods, warehouse, services, pallets, volume, temperature and your message.
These details are used to respond, prepare a quote and manage communications about your request. Fields marked with an asterisk are necessary for that enquiry; other fields are optional. The form cannot be processed without the required details.
Technical connection data and antispam checks are used to protect the service. Making an enquiry does not subscribe you to advertising.
3. Legal bases
For quotes requested by a professional who will be a party to the contract, the basis is taking precontractual steps at that person’s request: Article 6(1)(b) GDPR. For general enquiries and company contact persons, we rely on legitimate interests in responding to communications and maintaining professional relationships: Article 6(1)(f) GDPR and, where applicable, Article 19 of Spain’s LOPDGDD.
Form security relies on legitimate interests in protecting the website against abuse. You may object to processing based on legitimate interests on grounds relating to your particular situation. Legal requirements will be addressed under Article 6(1)(c) GDPR where applicable.
4. Retention
Enquiries that do not lead to a contract will be kept for a maximum of 12 months from the last communication, unless an activity requested by the individual remains open. Afterwards, data will be deleted or only data needed to address liabilities will be retained with restricted access for the applicable statutory periods.
If a service is contracted, data needed to perform it and meet legal obligations will be handled in accordance with the information provided for the contractual relationship.
Antispam stores challenge signatures and technical counters with addresses pseudonymised using HMAC, without storing the enquiry text or the plain IP address in that record. Challenges expire after 20 minutes and counters after one hour; expired records are purged when the next request is processed. Expiry does not mean immediate physical deletion if no new requests arrive.
SERINFON information of 28 October 2026: backups 7 days; web access logs processed daily, with historical archives and no confirmed effective age limit; Nginx errors rotated daily with 21 historical files; Apache errors rotated by size or at month end, with no fixed deletion period for compressed archives; ModSecurity 7 days; authentication and Exim rotated weekly with four historical files; email statistics 10 days. Four historical files alone do not establish an exact 28-day maximum, as a current active file may also exist. These periods describe technical logs, not retention of mailbox messages.
5. Providers, recipients and transfers
On this website, forms are received by the website’s own hosting and forwarded to the company’s internal email. ALTCHA verification uses files and validation hosted on the website itself; the ALTCHA Cloud service is not used and enquiries are not forwarded to FormSubmit.
According to SERINFON’s reply of 28 October 2026, infrastructure is provided by AXARNET COMUNICACIONES, S.L. Backups use Acronis International GmbH technology and are stored on AXARNET’s own infrastructure in Valencia, Spain, for 7 days; Acronis Cloud is not used. Support may access data from countries outside the EEA without a specific geographical restriction, subject to prior AXARNET authorisation and controlled access. The provider documentation also refers to WebPros (cPanel/WHM) technology.
6. Rights and complaints
You may request access, rectification, erasure, objection, restriction and portability, where applicable. If any processing were based on consent, you could withdraw it without affecting the lawfulness of earlier processing.
Use the contact details in section 1 and explain your request. Additional identification information will only be requested if there are reasonable doubts about your identity. The usual response period is one month; it may be extended by two further months where the GDPR permits, with notice within the first month.
You may lodge a complaint with the Spanish Data Protection Agency if you believe your rights have been infringed.
7. Automated decisions and alternative contact
No decisions based solely on automated processing with legal or similarly significant effects are envisaged. Antispam may reject a technical request; if you cannot use the form, email the corporate address so that a person can handle your enquiry.
SERINFON provides web hosting and email; TOP CARGO LOGISTICS SL remains responsible for enquiry data. According to information received on 28 October 2026, technical support access may take place from outside the European Economic Area. The provider has not specified the countries or supplied TOP CARGO with documentation establishing the instrument applicable to each access; a general reference to standard contractual clauses does not establish that they apply to this service. That documentation has been requested. No claim is made that all access takes place from the European Union. You can request current provider and safeguard information at info@topcargologistics.es. Data may be disclosed to authorities where required by law.