GDPR Notice
Our compliance with the EU and UK General Data Protection Regulation (GDPR).
1. Data Controller
Afrika Cargo Flow Logistics (Pty) Ltd ("we") is the data controller for personal data processed via the afrikacargoflow.com platform.
2. EU Representative (Article 27)
Where required, our EU Representative is [EU Representative, to be appointed when serving EU clients]. EU/UK data subjects may also contact us directly at privacy@afrikacargoflow.com.
3. Lawful Basis for Processing (Article 6)
- Article 6(1)(b), performance of a contract (executing your freight bookings).
- Article 6(1)(c), legal obligation (tax, customs, anti-money-laundering).
- Article 6(1)(f), legitimate interests (fraud prevention, service improvement).
- Article 6(1)(a), consent (marketing, non-essential cookies).
4. International Transfers (Chapter V)
Personal data of EU/UK subjects is transferred to South Africa and other African countries to perform freight services. We rely on:
- Standard Contractual Clauses (SCCs) approved by the European Commission (Decision 2021/914).
- Supplementary safeguards including encryption in transit and at rest.
- Transfer Impact Assessments where required.
5. Your Rights (Articles 15 to 22)
- Right of access, get a copy of your personal data.
- Right to rectification, correct inaccurate data.
- Right to erasure, "right to be forgotten".
- Right to restriction, limit how we process your data.
- Right to data portability, receive your data in a structured format.
- Right to object, including to direct marketing and profiling.
- Right not to be subject to automated decision-making.
Exercise rights via your account at /account/privacy or email privacy@afrikacargoflow.com. We will respond within 30 days.
6. Data Protection Impact Assessments
We conduct DPIAs for high-risk processing activities including GPS tracking, KYC verification, and any new third-party integration that handles personal data.
7. Data Breach Notification
Where a personal data breach is likely to result in a risk to your rights, we will notify the relevant supervisory authority within 72 hours and inform affected data subjects without undue delay.
8. Lodging a Complaint
You may lodge a complaint with the supervisory authority in your EU Member State of habitual residence, or with the UK Information Commissioner's Office:
UK ICO, ico.org.uk
EU authorities edpb.europa.eu