Data controller
The portal is operated by Across Customs. The data controller's full registered name and address will be added to this notice upon legal approval.
Data processed
- Company details: registered name, tax or registry number, address, phone, email, service areas.
- Authorised person and user details: full name, position, mobile phone, sign-in email. Passwords are stored only as one-way hashes.
- Operation details: direction, tractor and trailer plates, driver phone, declaration/MRN number, notes.
- Uploaded commercial documents: customs declaration, invoice, certificate of origin, CMR and other commercial documents.
- Security records: a one-way hash of the IP address and operation timestamps, to prevent abuse.
No identity documents
The portal does not request or store ID cards, passports or driving licences. Please do not upload such documents; if uploaded, the office deletes them.
Purposes
- Opening a record for the transport operation and carrying out the customs process
- Notifying the company or applicant of the operation status
- Collecting service fees and keeping accounting records
- Managing the company account and user permissions
- Meeting legal obligations and information security
Legal grounds
Under KVKK art. 5/2: processing directly related to entering into or performing a contract (c), the data controller's legal obligation (ç) and legitimate interest (f). The definitive grounds will be confirmed by legal review.
Transfers and hosting
Data is processed by the Across Customs office only to the extent needed to carry out the operation. Portal data is hosted by a cloud infrastructure provider in the European Union (Frankfurt) region; the KVKK art. 9 provisions on transfers abroad are under legal review.
Retention
Data is kept for the periods required by applicable legislation and for as long as the operation requires, then deleted, destroyed or anonymised.
Your rights (KVKK art. 11)
- Learn whether your personal data is processed and request information about it
- Learn the purpose of processing and whether data is used accordingly
- Know the third parties to whom data is transferred in Türkiye or abroad
- Request correction of incomplete or inaccurate data, and erasure where conditions are met
- Request that third parties who received the data be notified of these actions
- Object to an adverse outcome resulting solely from automated analysis
- Claim compensation for damage caused by unlawful processing
For questions: info@acrosscustoms.com