Built for the GDPR.
Frachta is an EU-built platform. This page summarises our GDPR commitments, your rights, and how to exercise them.
Jump to section
01Our commitment
Frachta is designed with privacy by default. The platform is operated by SIA "HEIDA LTD" in Rīga, data is hosted in the EU, and processing follows Regulation (EU) 2016/679 (the GDPR).
02Legal bases we rely on
We process personal data on the bases of contract, legal obligation, legitimate interests and, where required, consent — as detailed in our Privacy Policy.
03Your rights
You have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase data (“right to be forgotten”)
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
04How to exercise your rights
Email privacy@frachta.lv with your request. We respond within one month, as required by the GDPR, and may ask you to verify your identity.
05Data Protection Officer
Your point of contact for all data-protection matters is privacy@frachta.lv.
If a DPO is formally appointed, name them here with direct contact details; otherwise confirm with counsel that Art. 37 GDPR does not require one at the current scale.
06International data transfers
Where data must leave the EEA, we rely on adequacy decisions or Standard Contractual Clauses with appropriate safeguards.
07Data breach procedure
We maintain an incident-response process and will notify the supervisory authority within 72 hours and affected individuals where legally required, without undue delay.
08Supervisory authority
You may lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) or your local EU supervisory authority.
09Data processing agreements
For data your company controls — partners, orders, invoices, bank statements — Frachta acts as a processor under a Data Processing Agreement, which includes our subprocessor list. Request a countersigned copy at privacy@frachta.lv.
10Contact
Questions about this page? Write to privacy@frachta.lv. Related documents: Privacy Policy, Terms & Conditions, Cookie Policy and the Data Processing Agreement.