Privacy policy
What we collect when you ask us for a price, why we are allowed to hold it, how long we keep it, and how to make us stop.
- Version
- 1.0
- In force from
- 21 August 2026
- Applies to
- gtrans.lv and every language version of it
Before this page goes live. Every [TO CONFIRM] below marks a decision only G-Trans can make. They are deliberately visible rather than guessed at: a privacy policy that states something untrue about the controller, the retention period or the processors is worse than no policy at all, and it is the first document a data protection authority reads.
Nothing else on this page is invented. Where a fact was verifiable it is stated plainly; where it was not, it is marked.
1. Who is responsible for your data
The controller of the personal data described on this page is GTRANS BALTIC UAB, the company that trades as G-Trans and operates the website gtrans.lv.
- Controller
- GTRANS BALTIC UAB
- Company code
- 303340445
- VAT number
- LT100017324910
- Registered
- 1 July 2014
- Registered address
- Įsruties g. 2-28, LT-06218 Vilnius, Lithuania
- Operational address
- Daugavas iela 38, Mārupe, Mārupes novads, LV-2167, Latvia
- Write to us about data
- contact@gtrans.lv
- Or call
- +371 20 009 031
- Data protection officer
- [TO CONFIRM] — a DPO is only mandatory in the cases set out in Article 37 GDPR, and on the facts we can see one is unlikely to be required. If none is appointed, say so here rather than leaving the line out.
Both addresses are given because both are real: the company is registered in Lithuania and the day-to-day work happens in Latvia. Write to either and it reaches the same people. That split is also why section 10 — which authority supervises us — is the one question on this page still marked open.
2. What we actually collect
When you send a quote request
The form asks for what you are moving, where from, where to, when, whether a vehicle runs, and how to reach you. Specifically:
- Your details — name, and a phone number or email address. A company name and any notes you choose to add.
- The shipment — cargo type, collection and delivery country and city, the date you want, whether a vehicle drives, and for sea freight the load type, container size, volume, weight, commodity and Incoterm.
- Technical data attached automatically — the time the request arrived, a shortened version of your IP address (the last part is removed before it is written down), your browser's user-agent string, the page you sent the request from, and how long the form was open. The shortened IP and the timing exist to stop automated spam, not to identify you.
- Where you came from — if you arrived from an advert or a search result, the campaign parameters in that link (
utm_source,utm_medium,utm_campaign,utm_term,utm_content) and the click identifier the advertising platform added (gclid,wbraid,gbraid,fbclid,msclkid), plus the first page you landed on and the site you came from. This is how we know which adverts are worth paying for.
We do not ask for, and do not want, anything in the special categories of Article 9 GDPR. Please do not put health, political, religious or similar information in the notes box.
When you call, email or message us on WhatsApp
We hold whatever you send us, and the phone number or address you send it from, for as long as we need it to answer you and to keep a record of the job. WhatsApp is operated by WhatsApp Ireland Limited and your use of it is also governed by their own terms and privacy policy, which we do not control.
When you simply read the site
Our hosting provider keeps ordinary web server logs. With your consent, we also use Google Analytics 4 and Google Ads measurement — section 4 covers those in detail. Without consent, nothing is loaded that can identify you.
3. Why we hold it, and what makes that lawful
| What we do | Data | Lawful basis |
|---|---|---|
| Answer your quote request and, if you accept it, arrange the transport | Your contact details and the shipment details | Article 6(1)(b) — steps taken at your request before entering a contract, and then performance of that contract |
| Keep a record of requests and quotes so we can find them again | The same, plus the reference number | Article 6(1)(f) — our legitimate interest in running an auditable business |
| Stop automated spam reaching the form, and limit how often one connection can submit | Shortened IP address, user-agent, time on form | Article 6(1)(f) — our legitimate interest in keeping the form usable |
| Keep accounting records once a shipment has actually been invoiced | The transaction records required by law | Article 6(1)(c) — a legal obligation under accounting and tax law. The controller is Lithuanian and operates from Latvia, so [TO CONFIRM] which country's retention rules the accountant applies |
| Measure which pages and which adverts produce enquiries | Analytics and advertising cookies and identifiers | Article 6(1)(a) — your consent, given through the cookie banner and withdrawable at any time |
Where we rely on legitimate interests, we have weighed our interest against your rights and concluded that holding a business enquiry you sent us, in a form only we can read, is what you would reasonably expect. You can object at any time — see section 9.
4. Cookies, and what the banner really does
Nothing that measures you runs before you choose. The site sets Google Consent Mode to denied for advertising and analytics storage before any Google tag loads, and only switches it to granted for the categories you tick. Rejecting is one click, in the same row, in the same button, as accepting.
Strictly necessary — always on, no consent needed
| Name | What it does | Kept for |
|---|---|---|
gtrans_consent | Remembers the cookie choice you made, so we do not ask again on every page | 182 days |
gtrans_attribution | Browser session storage. Holds the campaign parameters from the link you arrived on, so that if you send a quote request we know which advert to credit. Deleted when you close the tab. | The browser session |
Analytics — only if you say yes
| Name | Set by | Kept for |
|---|---|---|
_ga, _ga_<id> | Google Analytics 4 — which pages are read and where visitors give up | Up to 2 years |
Advertising — only if you say yes
| Name | Set by | Kept for |
|---|---|---|
_gcl_au, _gcl_aw | Google Ads — connecting a quote request back to the advert that produced it | Up to 90 days |
[TO CONFIRM] Whether Google Ads runs in Consent Mode advanced or basic. In advanced mode — the current setting — Google's tag loads with everything denied and sends anonymous, cookieless signals that let Google estimate conversions it is not allowed to observe. In basic mode nothing Google-operated loads at all until you consent, and that estimation is lost. Both are lawful readings; the choice must be a conscious one, and this page must describe whichever is live.
You can change or withdraw your choice whenever you like:
You can also delete cookies in your browser at any time. Doing so removes the record of your choice, so the banner will ask again.
5. Who else sees it
We do not sell personal data and we do not share it for anyone else's marketing. It reaches these recipients and no others:
| Recipient | Why |
|---|---|
| Our hosting provider [TO CONFIRM] — the legal name and country of the hosting company, and whether the servers are inside the EU/EEA | The site and the lead file live on their servers. A data processing agreement must be in place before this page is published. |
| Our email provider [TO CONFIRM] — the mailbox provider for contact@gtrans.lv | Quote notifications and our replies pass through it. |
| Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland | Google Analytics 4 and Google Ads measurement — only after you consent. |
| The carriers and hauliers who move your shipment | A collection address, a delivery address and a contact number have to reach the driver, and the consignment note has to be filled in. Only what the job requires is passed on. |
| Customs authorities and customs agents | For shipments to or from Norway, and for sea freight, because those movements need a customs declaration. |
| Our accountant, and authorities entitled to ask | Where the law requires it. |
6. Data leaving the EEA
Google may process some of the analytics and advertising data described in section 4 outside the European Economic Area, including in the United States. Google relies on the EU–US Data Privacy Framework and on the European Commission's standard contractual clauses for those transfers. If you do not consent to analytics and advertising cookies, this does not happen.
Quote requests themselves are stored on the web server and are not transferred outside the EEA [TO CONFIRM] — confirm the physical location of the hosting servers, and correct this sentence if it is not accurate.
7. How long we keep it
[TO CONFIRM] Every period in this table. These are sensible defaults, not decisions that have been taken. Pick them deliberately: under Article 5(1)(e) you may not keep personal data longer than you need it, and "forever" is not a period.
| What | Proposed period |
|---|---|
| A quote request that never became a job | 12 months from the last contact [TO CONFIRM] |
| A quote request that became a shipment | As long as the accounting rules require for the transaction record [TO CONFIRM] |
| Submissions caught by the spam filter | 90 days, then deleted [TO CONFIRM] |
| Email correspondence | [TO CONFIRM] |
| Web server logs | Whatever the hosting provider's default is [TO CONFIRM] |
| Analytics data in Google Analytics 4 | The retention set in the GA4 property — 14 months is the recommended setting [TO CONFIRM] |
8. How it is kept
Quote requests are written to a file on the server before any email is attempted, so a mail failure cannot lose your enquiry. That file sits outside the public part of the website and is not reachable from a browser. The site is served over HTTPS. Access to the server and to the mailbox is limited to the people who need it.
No system is perfect. If something does go wrong and it is likely to put your rights at risk, we will tell the supervisory authority within 72 hours of becoming aware of it, and we will tell you if the risk is high.
9. Your rights
Under the GDPR you can ask us to:
- Show you what we hold about you, and give you a copy (Article 15).
- Correct it if it is wrong or incomplete (Article 16).
- Delete it, where we have no overriding reason to keep it (Article 17).
- Restrict what we do with it while a dispute about it is resolved (Article 18).
- Send it somewhere else in a machine-readable form, where we hold it on the basis of consent or a contract (Article 20).
- Object to anything we do on the basis of legitimate interests (Article 21).
- Withdraw consent for cookies at any time — it is one click, and it does not affect anything done before you withdrew it.
Write to contact@gtrans.lv. We answer within one month, as Article 12(3) requires. We may ask you for enough information to be sure it is really you before we hand anything over. Exercising these rights is free.
We do not make automated decisions about you with legal or similarly significant effects, and we do not profile you.
10. If you want to complain
Please raise it with us first — it is usually faster. But you have the right to go straight to a supervisory authority, either in the country where the controller is established or in the country where you live or work.
Which of these two supervises us is a genuine open question, not an oversight. The controller, GTRANS BALTIC UAB, is registered in Lithuania, which points to the Lithuanian authority; the operational address and most of the day-to-day work are in Latvia, and under Article 56 GDPR the lead authority follows the main establishment — the place where decisions about the purposes and means of processing are actually taken. That is a question of fact about how the business runs, and it needs the client's adviser rather than a guess here.
[TO CONFIRM — VDAI (LT) or DVI (LV), depends on where processing decisions are actually made]
Both are listed below so the answer can be deleted rather than researched. Whichever survives, verify its postal address and telephone number against the authority's own website on the day this page is published — regulators move offices. You may in any case complain to the authority in the country where you live or work, regardless of which one leads.
| Authority | If the controller is | Contact |
|---|---|---|
| Datu valsts inspekcija (Data State Inspectorate) | Determined instead by where the processing decisions are made | dvi.gov.lv · postal address and telephone [TO CONFIRM] |
| Valstybinė duomenų apsaugos inspekcija (State Data Protection Inspectorate) | GTRANS BALTIC UAB — the registered controller | vdai.lrv.lt · postal address and telephone [TO CONFIRM] |
11. Changes to this policy
If we change how we handle your data, we change this page and move the date at the top of it. Where the change matters — a new purpose, a new recipient, a different lawful basis — we will say so plainly rather than quietly editing a line.
Get a price
Tell us what and where.
We reply within 24 hours — same business day if you contact us before 12:00.