Privacy policy

Who the controller is

The data controller is TCT24 Srl, Corso Trapani 43, 10139 Turin (TO), Italy, VAT IT10421260968, REA 2530038.

For any request about your data write to info@tct24.it. We have not appointed a data protection officer (DPO): the law does not require one for a company like ours.

Which data we process and where it comes from

• Quick quote on the website: pick-up and delivery places, date, weight and vehicle; if you confirm the request, also your name, company, email, phone and notes. You enter them yourself.
• Correspondence (email, phone, WhatsApp): name, contact details, company and the content of messages and attachments (orders, transport documents, invoices). It comes from you or your company.
• Customers and suppliers: contact persons, billing and payment data (IBAN, invoices, due dates).
• Carriers and drivers: name, phone, language and vehicle plate; for the transports we follow, the vehicle position reported by the driver at check-ins (town and time; the exact address stays internal), transport documents (CMR, proofs of delivery) and check-in photos. They come from the carrier or from the driver, through the link we send them.
• Shipment tracking: whoever opens the tracking link sees the position published by our operators (rounded coordinates), the estimated delivery and, if published, the CMR. Of each access we record only date, time and country, never the IP address.
• Technical website data: to protect the quote from abuse, Cloudflare checks that you are not an automated program (Turnstile) and we count requests per IP address through an encrypted fingerprint kept for at most 24 hours. A technical cookie remembers for 15 minutes that the check was passed. No browsing data is used to profile you.
• Anonymous campaign measurement: if you arrive from one of our stickers, brochures or cards with a QR code, the address carries the source (for example utm_source=adesivo). Your browser remembers it only for the duration of the visit and we count, anonymously, the visits and the clicks on phone, email and WhatsApp for that campaign, plus the quote request if you send one. We do not record your IP address, cookies or identifiers, and we use no third-party tools.

Why we use it and on which legal basis

• Performance of a contract (Art. 6(1)(b) GDPR): answering your quote request, organising and carrying out the transport, keeping you informed about the shipment.
• Legal obligations (Art. 6(1)(c)): invoicing, accounting, retention of transport and tax documents.
• Legitimate interest (Art. 6(1)(f)): handling correspondence and business relationships, following transports in progress (including driver check-ins), protecting our receivables, preventing abuse of the website and protecting our systems.
• Consent (Art. 6(1)(a)): only where we expressly ask for it, for example for commercial communications not linked to an ongoing relationship. You can withdraw it at any time.

The indicative price of the quote is calculated automatically from the route and vehicle data: it is not profiling and has no legal effect. The actual offer is always prepared by a person.

Who can see the data

The data is handled by our operators in Italy and Poland, only as far as their work requires. For some activities we rely on providers that process data on our instructions (processors):

• Email and domain: cyber-folks (Poland, EU).
• Internal management system and database: our Torre di Controllo, with a Supabase database and Cloudflare network protection.
• Automatic reading of emails: messages received at info@tct24.it are classified by an Anthropic (USA) artificial-intelligence system to tell transport requests from operational messages; Anthropic processes the data only on our instructions and does not use it to train its models.
• Routes and maps: OpenRouteService and Photon (Germany) and Mapbox (USA) receive only the addresses and coordinates of the stops, never your name.
• Freight exchange: on trans.eu (Poland) we publish route and cargo to find a vehicle, without any customer personal data.
• Invoicing: Fatture in Cloud (TeamSystem, Italy).
• Automatic website emails: Resend (USA).
• Carriers entrusted with the transport: they receive the data needed for pick-up and delivery (addresses, contact person, phone).
• Professionals and banks: accountant, legal advisers, banks and insurers, when needed.

Some providers are based in the United States: the transfer is covered by the European Commission's standard contractual clauses or by the Data Privacy Framework. Relationships with customers and carriers in the United Kingdom are covered by the Commission's adequacy decision.

How long we keep it

• Website quote requests not followed by an order: 12 months.
• Quotes, correspondence and contact persons' data: for the duration of the relationship and up to 5 years after the last contact.
• Contracts, invoices, transport and tax documents: 10 years, as required by law.
• Driver check-ins and position: together with the shipment documents; the tracking link expires at the latest 30 days after delivery, tracking accesses are kept for 12 months.
• Fingerprints of website IP addresses: 24 hours; verification cookie: 15 minutes.

Your rights

You can ask us at any time for access to your data, rectification, erasure, restriction of processing and portability, and you can object to processing based on our legitimate interest or withdraw a consent. Write to info@tct24.it: we answer within one month.

If you believe the processing breaches the law, you can lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of your country.

Other information

We do not take decisions based solely on automated processing that produce legal effects on you. The website is not aimed at children under 16.

The data requested for the quote and the transport is necessary: without it we cannot prepare the offer or carry out the service.

We may update this notice: the version in force is always the one published here, with the date of the last update (12 October 2026).