Privacy notice

1. Who is responsible for your data

The controller is SC TARSINCOM SRL, VAT/CUI 8253254, Trade Register J33/231/1996, office at str. Ștefan cel Mare, nr. 82, Rădăuți, jud. Suceava.

For any question or request about personal data, write to contact@tarsin.ro (subject "Personal data") or call 0040 744 624 239, 0040 230 561 888. We have not appointed a data protection officer (DPO); requests are handled by the person responsible for data protection in the company.

2. What data we process

• Sender and recipient: name, phone, address (country, town, street, postcode), optionally e-mail and company.
• The parcel: AWB, number of parcels, weight, dimensions, declared contents, declared value, delivery instructions and, for the United Kingdom, customs data (description, quantity, value, HS code).
• Payment and cash on delivery: the price, the amount to collect on delivery, the currency, how and when it was collected, who collected it and the cash handover.
• Proof of delivery: the name of the person receiving the parcel, their signature, a photo of the parcel (not of the person), where needed the last 4 digits of their ID document, and the place and time of handover.
• Tracking on this site: the AWB searched, the PIN or the last 4 phone digits entered, the IP address and the time of the request (to protect against abuse).
• Parcel history: its states (registered, loaded, in transit, arrived, delivered, etc.), the location and the operator of each step.

3. Where the data comes from

We receive the sender's data from the sender, at the counter or the agency. The recipient's data is given to us by the sender, so that the parcel can be delivered; by handing over the parcel the sender confirms they may share it with us. If you are the recipient, this notice is addressed to you as well.

4. Why we use it and on what basis

We do not use the data for advertising and do not send marketing messages. We make no automated decisions with legal effects on you and do no profiling.

The recipient's name, address and phone are required: without them we cannot deliver the parcel.

5. Who else sees the data

• Partner agencies and stations that take in or hand over the parcel, on Tarsin's behalf and only for this service.
• Tarsin drivers and staff who carry and deliver the parcel, each only for their own runs and stations.
• Customs brokers and customs authorities, for parcels to the United Kingdom.
• Our technical providers: server hosting and the e-mail service (Mailgun), which process the data only on our instructions.
• Authorities and courts, when the law requires it.

We do not sell or rent the data to anyone.

6. Transfers outside the European Union

For parcels to or from the United Kingdom, the data needed for delivery and customs goes there; the European Commission has recognised that the United Kingdom ensures an adequate level of protection. Our e-mail provider belongs to a group based in the USA; those transfers are covered by the GDPR safeguards (standard contractual clauses or the EU–US Data Privacy Framework).

7. How long we keep the data

8. Customer search at the counter

When you send another parcel, the Tarsin agency or station can find you by name or phone and fill in the details from your earlier shipments, including the recipients you used before. This search is available only to Tarsin staff and partner agencies. If you do not want this, write to us and we will remove you from the search.

9. Your rights

• to know what data we hold about you and receive a copy (access and portability);
• to have wrong data corrected;
• to have your data erased when we are no longer required by law to keep it (for example, we cannot erase a parcel still under way or the accounting records);
• to ask for restricted processing, or to object to processing based on legitimate interest, including the counter search;
• to complain to the Romanian data protection authority (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28–30, Bucharest, www.dataprotection.ro; people in the United Kingdom may also complain to the ICO (ico.org.uk).

Send your request to contact@tarsin.ro. We answer within one month (in complex cases at most two more months, with notice). So that we do not give your data to someone else, we may ask for the AWB and the PIN from your receipt or, for broader requests, an identity document.

10. Employees, drivers and agents

For accounts in the Tarsin app and back office we process the name, e-mail, role, location or agency, sign-in and sync logs and the operations performed, on the basis of the employment or partnership contract and our legitimate interest in security. When a parcel is handed over, the place and time of handover are saved, only at that moment; we do not track drivers continuously. For drivers we keep only the expiry dates of the mandatory documents (licence, certificates, medical clearances), never results or diagnoses.

11. How we protect the data

Access is limited by role: each agency, station or driver sees only their own parcels. Connections are encrypted (HTTPS), data on work phones is encrypted and wiped at logout, proof-of-delivery files open only through temporary links, and public searches are rate limited. Without a code, tracking on this site shows only the parcel status, never names, phones or addresses.

12. Cookies on this site

Coletarie.tarsin.ro uses only strictly necessary cookies: the session cookie and the form protection cookie (XSRF-TOKEN). We use no analytics or advertising cookies, and the fonts are hosted on our own server, so no data about your visit is sent to third parties. For www.tarsin.ro, that site's cookie policy applies.

13. Changes

We may update this notice when the service or the law changes. The version in force and its date are shown on this page.