Privacy policy
Last updated: 7 October 2026
1. Who we are and what this policy covers
This policy applies to:
- the cargo-drive.eu website;
- the Cargo Drive transport management system (TMS);
- the Cargo Drive driver app (iOS and Android);
- the Cargo Drive carrier portal.
Cargo Drive is owned and operated by KODAI, UAB.
No data protection officer has been appointed – please use the contact details above for all questions.
2. Our role
When we are the data controller. We decide ourselves how to process the data of website visitors, people who contact us and our clients' contact persons.
When we are the data processor. Our clients – haulage and forwarding companies – process data about their drivers, employees, carriers and cargo in the system. We process this data on the client's behalf and according to its instructions. In that case the data controller is your employer or the company you work with, so please contact them first about your rights – we will help them.
3. What data we process and why
3.1. Website visitors
The server automatically logs your IP address, browser type and time of visit. This data is needed for the website to work securely (GDPR Art. 6(1)(f)).
3.2. When you contact us
Your name, contact details and whatever you share in your message or during a call. We use it to reply to you and, if you wish, to prepare an offer (GDPR Art. 6(1)(b) and (f)).
3.3. Clients and system users
First name, last name, company, position, email, phone, sign-in and security data (sign-in times, two-factor authentication, passkeys, action audit log). We use it to provide the service, perform the contract, issue invoices and keep the system secure (GDPR Art. 6(1)(b), (c) and (f)).
3.4. Driver app
On the client's behalf we process: the driver's first name, last name and sign-in data; active business trip data; the assigned truck and semi-trailer; photos, amounts and approval statuses of expense receipts; documents assigned to the driver; the device's push notification identifier.
The app asks for permission to use the camera and photo gallery – only to upload receipts and documents.
The app does not collect the phone's location, crash or usage statistics data.
3.5. Carrier portal
On the client's behalf we process: the carrier contact person's email, one-time sign-in codes, uploaded cargo documents (e.g. CMR), invoices and their statuses, and the sign-in log.
3.6. Telematics
On the client's behalf we receive from the telematics providers it has chosen: vehicle location, routes, mileage and fuel data, driver working and rest times, and the countries the driver has been in. This is used to plan and run trips and to calculate business trips and per diems.
4. Who we share data with
We do not sell data. Data may only be received by:
- hosting, cloud and email service providers;
- map service providers;
- telematics providers the system is connected to on the client's instruction;
- app notification services (Apple, Google);
- accounting and other systems the client chooses to integrate with Cargo Drive;
- public authorities – only when required by law.
All providers process data under contracts with us.
We do not transfer data outside the European Economic Area.
5. How long we keep data
| Data | Period |
|---|---|
| Website server logs | 2 years |
| Enquiries, if no contract is concluded | 2 years after the enquiry is resolved |
| Client contract and invoice data | For the term of the contract and 10 years after it ends (accounting record retention requirements) |
| Data processed on the client's behalf (app, portal, telematics) | As agreed with the client; when the contract ends – returned or deleted on the client's instruction |
6. Cookies
The cargo-drive.eu website does not use cookies, visitor analytics or third-party tracking tools.
The system and the carrier portal use only cookies that are strictly necessary for sign-in and security.
7. How we protect data
Access is restricted by user groups, departments and positions; two-factor authentication and passkeys are available; important changes are recorded in the audit log.
8. Your rights
You have the right to access, correct and erase your data, to restrict its processing, to object to processing based on legitimate interest, and to receive your data in a portable format.
Email us at go@cargo-drive.eu – we will reply within one month. If we process the data as a processor (section 2), we will forward your request to the data controller.
You may also lodge a complaint with the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).
9. Changes
The current version is always published on this page with its update date. We will inform system and app users about material changes in the system, in the app or by email before they take effect.