Last Updated: 07 October 2025

Your privacy matters to us. Ganex Trans (“we,” “our,” “us”) is committed to protecting your personal information and complying with all applicable data protection laws and regulations, including the Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data (‘GDPR’).

This Privacy Policy explains how we collect, use, store, and share your personal information when you use our website https://www.ganex-trans.com/, contact us via forms or email, or use our logistics, transportation, customs brokerage, and warehousing services.

This Privacy Policy applies to all users, clients, and partners regardless of their place of residence, wherever their personal data is processed by Ganex Trans.

Personal Data:	Any information relating to an identified or identifiable individual.
Processing:	Any action or set of actions performed on personal data, including its collection, recording, storage, use, transmission, and other operations.
Data Controller:	Ganex Trans, which determines the purposes and means of processing your personal data.
Data Processor:	Any third party that processes data on behalf of Ganex Trans.
Sensitive Personal Data:	Data revealing racial or ethnic origin, health, biometric or genetic data, religious beliefs, criminal records, or similar categories requiring special protection.
Third Parties:	External service providers, contractors, or partners who may receive personal data to provide logistical or technical support.

We may collect and process the following categories of personal data:

• a) Contact and Identification Data
  • Full name, company name
  • Email address, phone number
  • Job title or role
  • Country and business address
• b) Transactional and Service Data
  • Shipping orders and consignment details
  • Customs documentation and declarations
  • Invoices, delivery confirmations, and payment records
• c) Technical and Website Usage Data
  • IP address, browser type, and device information
  • Pages visited, time spent on site, and referring URLs
  • Cookies and tracking technologies (see Section 10)
• d) Communication Data
  • Messages or inquiries submitted through our contact forms or email
  • Feedback and correspondence with our team
• HR and Supplier Data – for recruitment, payroll, and supplier management (if applicable).

We do not collect or process sensitive personal data (e.g., health, biometric, or religious data) unless strictly required by law for customs or legal compliance purposes.

We use your information to:

• Provide, manage, and fulfill logistics, transportation, and warehousing services
• Communicate with you regarding orders, shipments, and documentation
• Issue invoices and process payments
• Maintain records for customs and legal compliance
• Improve our website, services, and customer experience
• Respond to inquiries, feedback, and support requests
• Ensure security, detect fraud, and comply with legal obligations

Data Minimization:

We collect and process only the personal data necessary to provide and improve our services, in accordance with the principles of data minimization and purpose limitation. Data will not be retained or used for unrelated purposes.

Contact Forms and Consent

By submitting any contact or inquiry form on our website, you consent to the processing of your personal data as described in this Privacy Policy. This includes using your information to respond to your inquiry, provide requested information, and maintain communication related to your request.

We process your personal data on the following legal grounds:

• Performance of a Contract: To provide logistics or transportation services you request.
• Legal Obligation: To comply with customs, tax, or regulatory requirements.
• Legitimate Interests: We process business contact data to manage ongoing partnerships, respond to inquiries, ensure service quality, and protect our legal rights and interests in the course of business operations.
• Consent: For marketing communications or optional cookies (where required).

Marketing and Communications: We will only send you promotional or informational materials if you have provided explicit consent or if you are an existing client, in accordance with applicable direct marketing laws. You may withdraw consent or unsubscribe at any time.

We share data only when necessary and in compliance with applicable laws. This may include:

• Logistics Partners and Carriers: To execute transportation, customs, and delivery operations.
• IT and Cloud Service Providers: For hosting, data storage, and security monitoring.
• Legal and Regulatory Authorities: When required for customs, taxation, or law enforcement.
• Professional Advisors: Such as auditors or consultants, under confidentiality obligations.

All third parties receiving personal data act as data processors or joint controllers and are bound by written Data Processing Agreements (DPAs) or equivalent legal instruments. These agreements ensure that such parties process personal data exclusively under our instructions, apply appropriate technical and organizational security measures, and comply with GDPR.

Links to Third-Party Websites

Our website may contain links to third-party websites that we do not control. When users click on such links, they are directed to third-party websites where the respective privacy policies and data processing practices apply. Ganex Trans does not control and is not responsible for the content, privacy policies, or practices of such third-party websites. We strongly recommend reviewing the privacy policy of each website you visit through our links.

Personal data will never be sold, leased, or disclosed for marketing purposes without your explicit consent.

In certain cases, your personal data may be transferred to and processed in other countries where our partners, service providers, or servers are located. Such transfers are conducted only when necessary for the execution of logistics, customs, contractual, or technical operations and in full compliance with applicable data protection legislation, including the General Data Protection Regulation (GDPR).

When personal data is transferred outside the European Economic Area (EEA), we ensure that:

• The transfer is made to a country that provides an adequate level of personal data protection, as officially recognized by the European Commission or the authorized data protection authority of Ukraine; or
• We enter into Standard Contractual Clauses (SCCs) or equivalent data transfer agreements approved by the European Commission; or
• We apply other appropriate safeguards, such as explicit data subject consent or transfer necessity for contract performance (e.g., for transportation or customs operations).

All parties involved in international data processing are required to maintain the same level of confidentiality, integrity, and security of personal data as guaranteed under EU law. You may contact us at any time to request more information about the legal basis, safeguards, or destinations applicable to the transfer of your personal data.

We retain personal data only for as long as necessary to:

• Fulfill the purpose for which it was collected;
• Comply with legal, tax, or regulatory obligations;
• Resolve disputes or enforce agreements.

Retention periods may vary depending on service type (e.g., logistics records are retained for 5–7 years for compliance).

All users of the Website shall have the following rights with respect to the processing of their personal data:

We will respond to rights requests within 30 days, unless extended due to complexity.

We take the security of your personal data seriously and implement a combination of technical and organizational measures to protect it.

Our Security Measures:

• Encryption : All personal data is encrypted both in transit and at rest.
• Access Controls: Multi-factor authentication and role-based access ensure that only authorized personnel can access data.
• Data Minimization: Sensitive personal data is pseudonymized or anonymized wherever possible.
• Staff Awareness: Regular training and awareness programs are conducted to ensure employees understand data protection responsibilities.
• System Testing: We perform regular security audits, penetration tests, and maintain incident response procedures to detect and mitigate vulnerabilities.

This Cookie Policy explains what cookies are, how we use them, the types of cookies we use (i.e., the information we collect using cookies and how that information is used), and how to manage your cookie settings.

Cookies are small text files used to store small pieces of information. They are stored on your device when a website loads in your browser. These cookies help ensure that the website functions properly, enhance security, provide a better user experience, and analyse performance to identify what works and where improvements are needed.

Like most online services, our website uses both first-party and third-party cookies for various purposes. First-party cookies are primarily necessary for the website to function properly and do not collect any personally identifiable data.

The third-party cookies used on our website primarily help us understand how the website performs, track how you interact with it, keep our services secure, deliver relevant advertisements, and enhance your overall user experience while improving the speed of your future interactions with our website.

This will allow you to revisit the cookie consent banner and update your preferences or withdraw your consent immediately.

Additionally, different browsers offer various methods to block and delete cookies used by websites. You can adjust your browser settings to block or delete cookies. Below are links to support documents on how to manage and delete cookies in major web browsers.

• Chrome
• Safari
• Firefox
• Internet Explorer

If you are using a different web browser, please refer to its official support documentation.

You can manage or disable cookies in your browser settings or via our cookie banner.

If a personal data breach occurs, we will take immediate and proportionate steps to contain, assess, and mitigate the incident. A personal data breach may include unauthorized access, disclosure, alteration, loss, or destruction of personal data, whether accidental or unlawful.

• Under GDPR: We will notify the relevant supervisory authority within 72 hours, and affected individuals if necessary.

We will also inform affected data subjects as soon as reasonably possible, explaining the nature of the incident, the types of data involved, and actions they can take to protect themselves.

Changes to This Privacy Policy:

We are constantly reviewing our Privacy Policy to ensure compliance with data protection legislation. Our apps are also constantly evolving and new features and services may change how we process your personal data. Any substantive or material change to this Privacy Policy will be brought to your attention.

In the event of material changes relating to Personal Data, we will notify Users, Clients, and Consultants by posting a notice on the Website and/or by sending an informational email. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your Personal Data.

If you have opted out of receiving email notifications regarding changes to our legal documentation, you remain solely responsible for reviewing and familiarizing yourself with such changes.

Following amendments to this Privacy Policy, we may require Users, Clients, and Consultants to provide renewed consent to the updated version. Unless otherwise stated, all amendments shall become effective thirty (30) days after the publication of the revised version of this Privacy Policy.

Our electronic or otherwise stored copies of this Privacy Policy shall be deemed to be the authentic, complete, valid, and enforceable version of the Policy in effect at the time of your interaction with the Website. Updates will be published on this page with a new “Last Updated” date.