Privacy Policy

This personal data protection policy explains how Metafores Online collects, uses, stores and protects personal data when you visit the website, create an account, post a transport request, submit an offer, communicate through the Platform or use its services.

Use of Metafores Online is also governed by the Platform's terms of use. If you do not agree with this policy, you must not use the services of the Platform.

1. Data controller

The data controller is All World Services Ltd, with ID number 202686639 and registered address in Bulgaria, Krusha 3 str., 2850 Petrich, which operates Metafores Online.

For personal data matters, you may contact us at info@metaforesonline.gr.

2. Definitions

Platform or Metafores Online: the website, services, tools and features provided through Metafores Online for posting transport requests, submitting offers and facilitating communication between users and carriers.

User: the person who uses the Platform to post a transport request or look for a transport service.

Carrier: a natural or legal person who provides transport services and may submit offers through the Platform.

Personal data: any information relating to an identified or identifiable natural person.

3. Data we collect

Depending on how you use the Platform, we may collect the following categories of data:

  • account and login data, such as username, email, password in secure form, user role, account creation date, account confirmation, last login and preferred language,
  • identity and contact details, such as full name, display name, mobile phone, landline, email, address, city, postal code and country or region,
  • customer details, such as father's name, date of birth, profession and newsletter preference, where you provide them,
  • carrier or business details, such as company name, trade name, business activity, VAT/tax number, tax office, registered address, phone numbers, website, contact person details, service areas, total jobs and ratings,
  • transport request details, such as transport category and type, request title, details of items or services requested, pickup and delivery area, floor, availability of elevator or parking, need for personnel or lifting equipment and desired dates,
  • offer details, such as offer amount, expiry date, transport method, offer status, acceptance or rejection date and related messages,
  • communication messages through the Platform, including the content you write in forms, offers or conversations,
  • contact form details, such as name, email, phone, message and reCAPTCHA verification data,
  • notification details, such as preferred notification channels, email, mobile number, web push tokens and message delivery status,
  • technical data, such as IP address, request details, session data, cookies, security data, logs and information required for the operation, protection and diagnosis of the Platform.

4. How we collect data

We collect data when you provide it to us, for example during registration, profile updates, posting a transport request, submitting an offer, sending a message, accepting an offer, subscribing to notifications or submitting the contact form.

We also collect technical data automatically when you use the website, through cookies, session identifiers, logs, security mechanisms and verification tools such as Google reCAPTCHA.

5. Purposes of processing

We use personal data for the following purposes:

  • creating, managing and securing accounts,
  • identifying and signing in users, changing passwords and restoring access,
  • posting, searching and displaying transport requests,
  • submitting, managing, accepting, rejecting and tracking offers,
  • facilitating communication between users and carriers through the Platform,
  • sending functional notifications regarding registrations, requests, offers, acceptances, messages and other Platform actions,
  • handling requests submitted through the contact form,
  • sending informational messages or newsletters, if you have chosen to receive them,
  • preventing misuse, fraud, spam, unsolicited communication and unauthorized access,
  • reviewing and approving messages where required to protect users and the Platform process,
  • keeping records for accounting, tax, legal or evidentiary purposes,
  • technical operation, improvement, security, error monitoring and maintenance of the services.

6. Legal bases for processing

We process personal data on one or more of the following legal bases:

  • performance of a contract or steps prior to entering into a contract, when we provide the services of the Platform,
  • our legitimate interest in the security, operation, support, improvement and protection of the Platform and its users,
  • compliance with legal obligations, such as accounting, tax or regulatory obligations,
  • consent, where required, for example for newsletters, web push notifications or certain non-essential communications.

7. Public display and disclosure between users

Transport requests may be displayed publicly to visitors and members of the website, especially as to category, title, pickup and delivery areas, transport characteristics and related options. Profile details are not intended for public display, unless they appear in the context of Platform features.

When a user accepts a carrier's offer or when required for performance of the agreement, the necessary contact, location and transaction details may be disclosed between the involved parties so that the transport can be organized and performed.

Messages exchanged through the Platform may be visible to the involved parties and authorized administrators, especially for security, support, misuse control or content approval purposes.

8. Recipients and third-party providers

Personal data may be accessible to authorized personnel, partners or service providers who support the operation of the Platform, only to the extent required for the purposes of this policy.

The Platform uses infrastructure and processing services, such as AWS services for hosting, storage, databases, message queues, security, authentication and notification delivery. Indicatively, Amazon DynamoDB, Amazon S3, Amazon SQS, AWS Systems Manager, AWS Lambda, Amazon Cognito and related services may be used.

To protect against automated or abusive use, the contact form uses Google reCAPTCHA. During this verification, technical data such as a verification token and IP address may be sent to Google.

For sending email, SMS or web push notifications, notification providers, email services, SMS gateways or browser push mechanisms may be used, depending on the notification channel.

9. International transfers

Infrastructure services may operate in countries of the European Union or outside it, depending on the technical configuration and providers used. Where required, appropriate measures are taken to protect personal data in accordance with applicable law.

10. Cookies, sign-in and technical operation

The Platform uses necessary cookies and similar technologies for user sign-in, security, session maintenance, temporary data storage while creating a transport request, display of system messages and basic operation of the website.

Session cookies are necessary for the operation of specific services and have a limited duration. Disabling them may affect or make use of the Platform impossible.

11. Security

We take reasonable technical and organizational measures to protect personal data from unauthorized access, loss, alteration or misuse. These measures include, as applicable, access control, user authentication, secure session management, use of security services and event logging.

Although we make efforts to protect data, no method of transmission or storage on the internet can be considered completely secure.

12. Retention period

We retain personal data for as long as required to provide the services, manage accounts, requests, offers, communications and notifications, and for as long as required by lawful, tax, accounting, evidentiary or regulatory obligations.

When data is no longer necessary, it is deleted, anonymized or its processing is restricted, unless further retention is permitted or required by law.

13. Your rights

In accordance with applicable law, you have the right to request:

  • access to personal data concerning you,
  • correction of inaccurate or incomplete data,
  • deletion of data, where permitted by law,
  • restriction of processing,
  • objection to processing based on legitimate interest,
  • data portability, where applicable,
  • withdrawal of consent, where processing is based on consent.

To exercise your rights, you may contact us at info@metaforesonline.gr. We may need to verify your identity before responding to a request concerning personal data.

You also have the right to lodge a complaint with the competent data protection supervisory authority, in accordance with applicable law.

14. Newsletter and notifications

If you choose to receive newsletters or informational communications, we may use your contact details for that purpose. You may withdraw your consent or request discontinuation of informational messages.

Functional notifications related to the account, security, transport requests, offers, acceptances and Platform messages may be necessary for providing the service.

15. Minors' data

Use of the Platform is not permitted by persons under 18 years of age. We do not knowingly seek to collect personal data from minors.

16. Changes to the policy

We may amend this policy when required due to changes in the services, the law or the way the Platform operates. The latest version will be published on the website.

17. Contact

For any question regarding this policy or the processing of personal data, you may contact Metafores Online at info@metaforesonline.gr.