Privacy Policy
This Privacy Policy is intended to provide information about the processing of personal data carried out through this website, including its subdomains and subdirectories, the contact form, commercial proposal request forms, shipment tracking tools, the Private Customer Area, as well as the processing of personal data relating to prospective customers for marketing campaigns, events and activities, competitions and promotions, as applicable.
The "Work with Us" section redirects users to Logista’s corporate careers portal. The processing of job applications shall be governed by the privacy policy available on that portal.
1. WHO IS THE DATA CONTROLLER?
Dronas 2002, S.L., owner of the Logista Parcel brand, with registered office at Polígono Industrial Nordeste, Calle Energía 25-29, Sant Andreu de La Barca (08740), Spain, Tax Identification Number (NIF) B-62745765, registered with the Commercial Registry of Barcelona, Volume 34151, Folio 163, Sheet B-243133, Entry 1, and email address parcel@logista.com, is the Data Controller.
Logista Parcel may provide its transport services through a network of branches covering the territories of Spain, Portugal and Andorra (the “Branch Network”). The Branch Network is made up of companies that are independent from Dronas and that act as Data Controllers in relation to their own customers with whom they establish a service relationship. Accordingly, they may have their own privacy policies and/or Data Protection Officer.
For the provision of these services, Dronas may, where appropriate, disclose personal data to the relevant Logista Parcel branch operating in the geographical area where the service is contracted. Such branch, together with Logista Parcel, shall act as Data Controller.
If a user of the Website has any comments or questions regarding the processing of personal data, they may contact the Data Protection Officer of Logista Parcel at Calle del Trigo 39, Polígono Industrial Polvoranca, Leganés, Madrid (28914), Spain, or by email at Info.lopd@logista.com.
2. FOR WHAT PURPOSES WILL WE PROCESS USERS’ DATA?
Users' personal data will be processed for the following purposes and on the legal bases indicated below:
PURPOSES | LEGAL BASIS | DESCRIPTION |
|---|---|---|
| Website Operation and Security | Legitimate interest, Article 6(1)(f) GDPR; provision of the requested service. | To enable the technical operation of the website, maintain security, prevent misuse and diagnose incidents. |
| Organisation and Management of Corporate Events and Activities | Legitimate interest (Article 6(1)(f) GDPR), performance of pre-contractual measures (Article 6(1)(b) GDPR), or consent where applicable. | To manage invitations, registrations, attendance and communications related to events organised or promoted by Logista Parcel. |
| Shipment Tracking | Performance of the requested service, Article 6(1)(b) GDPR, and legitimate interest, Article 6(1)(f) GDPR. | To enable users to check the status of shipments using the shipment number, reference number and/or postcode provided by the user. |
| Handling of Enquiries and Commercial Requests | Pre-contractual measures, Article 6(1)(b) GDPR, or legitimate interest, Article 6(1)(f) GDPR, depending on the circumstances. | To receive, organise and respond to enquiries, requests for information and commercial requests. |
| Marketing and Promotional Communications | Consent, Article 6(1)(a) GDPR. | To send updates, corporate information and offers from Logista Parcel where the user has authorised such communications. |
| Newsletter Management | Consent, Article 6(1)(a) GDPR. | To send news, updates, corporate information, content and marketing communications relating to Logista Parcel products or services by electronic means where the user has provided consent. |
| Registration, Access and Security of the Private Area | Performance of a contract, Article 6(1)(b) GDPR, and legitimate interest for security purposes, Article 6(1)(f) GDPR. | To create and manage accounts, authenticate users, change passwords, manage access rights and prevent unauthorised use, all within the framework of the contractual relationship maintained with any company of the group of Logista Parcel. |
| Private Area Services | Performance of a contract, Article 6(1)(b) GDPR; legal obligation, Article 6(1)(c) GDPR, where applicable. | To enable order tracking and access to documents, invoices, transactions and statistics, all within the framework of the contractual relationship maintained with any company of the group of Logista Parcel.
|
| Legal Compliance and Claims | Legal obligation, Article 6(1)(c) GDPR, and legitimate interest, Article 6(1)(f) GDPR. | To comply with legal requirements and to establish, exercise or defend legal claims.
|
3. WHAT PERSONAL DATA WILL WE PROCESS?
Depending on the purpose and the channel used, Logista Parcel may process the following categories of personal data:
- Identification data: name and surname, user identifier and, where necessary within the contractual relationship, customer number.
- Contact details: email address, telephone number and company.
- Enquiry data: message content and any other information voluntarily provided.
- Private Area access and usage data: user identifier, protected credentials, authentication logs, access date and time, and actions performed.
- Commercial relationship data accessible through the Private Area: orders, documents, invoices, transactions and statistics.
- Technical and browsing data: IP address, browser, device, identifiers, technical logs and cookie preferences.
- Marketing communications data: contact details and proof of consent, objection or unsubscribe requests.
- Shipment tracking data: shipment number, reference number, destination postcode and shipment status information.
- Data related to participation in events and corporate activities: identification data, contact details, company, professional position and any other information provided during registration or participation.
Regarding contact forms, please note the following:
- Fields marked with an asterisk (*) are mandatory. Failure to complete such fields may prevent the processing of the request.
- Users guarantee the accuracy, validity and authenticity of the data provided and undertake to notify any relevant changes.
- Free-text fields should not contain confidential information, special categories of personal data or other particularly sensitive information that is not necessary for the enquiry.
4. HOW LONG DO WE RETAIN USERS’ PERSONAL DATA?
Personal data will be retained for as long as necessary to provide the requested service or achieve the relevant purpose and, thereafter, for the legally required retention periods to address any potential liabilities.
Processing Activity | Retention Period |
|---|---|
Website operation and security | For the period technically necessary and for the retention periods established for security logs. |
Enquiries and commercial requests | Until the enquiry has been resolved and thereafter for the period necessary to deal with potential liabilities. |
Marketing and promotional communications | Until consent is withdrawn, retaining only the minimum evidence necessary to demonstrate the withdrawal or objection. |
| Newsletter management | Until the data subject withdraws consent or objects to the processing. |
| Registration, access and security of the Private Area | For the duration of the contractual relationship and for the period necessary to complete actions arising from its termination. |
| Private Area services | For the duration of the contractual relationship and for the period necessary to complete actions arising from its termination. |
| Legal compliance and claims | For the period necessary to comply with the applicable legal obligation or for the establishment, exercise or defence of legal claims. |
| Management of corporate events and activities | During the organisation and holding of the event and, thereafter, for the period necessary to address liabilities or maintain the commercial relationship based on the applicable legal basis. |
| Shipment tracking | For the period necessary to respond to the user’s request and, thereafter, for the period necessary to address any liabilities arising from the service. |
5. WILL WE SHARE YOUR DATA WITH THIRD PARTIES?
Personal data may be processed by technology, hosting, maintenance, support, communications and Private Area management providers, as well as by other companies within the Logista Parcel group, acting as data processors where appropriate.
Data may also be disclosed to public administrations, authorities, courts and tribunals where there is a legal obligation to do so or where necessary for the establishment, exercise or defence of legal claims.
For the performance and execution of contracts and the provision of requested services, personal data may be processed or disclosed, where necessary, to suppliers, partners and subcontractors involved in providing the service, including logistics operators, carriers, warehouses, technology providers and other ancillary service providers.
Certain technology providers or external platforms may process data from countries located outside the European Economic Area. Where an international transfer takes place, Logista Parcel shall implement the appropriate legal safeguard, such as an adequacy decision, Standard Contractual Clauses or any other mechanism provided for under applicable data protection laws.
6. WHAT RIGHTS DO USERS HAVE WHEN THEY PROVIDE THEIR DATA?
Data subjects may exercise their rights of access, rectification, erasure, objection, restriction of processing and, where applicable, data portability. They may also withdraw their consent at any time.
Requests may be submitted through the following channels:
Dronas 2002, S.L.U.
P.I. Nordeste, C/ Energía 25-29
08740 Sant Andreu de La Barca (Barcelona), Spain
or by email to: Info.lopd@logista.com
If users consider that their rights have not been adequately addressed, they may lodge a complaint with the Spanish Data Protection Agency (AEPD) through www.aepd.es.
7. RIGHT TO AMEND THIS POLICY
Logista Parcel reserves the right to amend this Privacy Policy in order to adapt it to legislative or case law developments, technical changes or new services involving the processing of personal data. The version in force at any given time shall be the version published on the Website.