INTERMODAL PORTAL
Website Privacy Policy
Effective July 30, 2026
1. Introduction
This privacy policy tells you about the information we collect from you when you use our website at intermodalportal.com and when you use the Intermodal Portal application (the “IP”). It explains who is responsible for your personal data, why and how we use it, and the rights you have over it.
1.1 Scope and the GDPR
Where we act as a data controller, the General Data Protection Regulation (GDPR) requires us to give you information about us, about why and how we use your data, and about your rights. The GDPR generally applies to individuals who are in the EEA or the UK when their personal data is processed, and can apply to our processing regardless of nationality; equivalent protections apply to individuals in Switzerland under Swiss data protection law. If you are located in the United States, your personal data is generally governed by applicable U.S. federal and state laws. Depending on where you are located, other national data protection laws may also apply to the processing of your personal data.
1.2 Who we are
We are the Intermodal Portal, operated by XSolutions Consulting Services LLC (“XSolutions”, “we”, “us”, “our”) together with Niebo Solutions (“Niebo”). Our roles depend on the data in question:
Website data — for the personal data you provide through this website (inquiries, sign-ups, downloads and reviews), XSolutions is the controller.
Intermodal Portal application — for the account, identity and usage data processed in the IP, XSolutions and Niebo are joint controllers under Article 26 GDPR (see Section 2.6).
Data your organization uploads to the IP — where your organization (a Tenant) uploads or manages data in the IP, your organization is the controller; XSolutions acts as its processor and Niebo as sub-processor. Please contact your organization about that data.
Billing — for the contact data used to invoice Tenants, XSolutions is the sole controller.
XSolutions' mailing address is 20 Squadron Blvd., Suite 320, New City, New York, 10956, USA. You can contact us by mail at that address or by telephone at (845) 362-9675 ext. 802. Niebo Solutions sp. z o.o. is located at ul. Innowatorów 8, 62-070 Dąbrowa, Poland (tel. +48 506 575 448). For matters concerning the jointly controlled application data, compliance@intermodalportal.com is the joint contact point and reaches both XSolutions and Niebo.
We are not required to appoint a Data Protection Officer, so inquiries about our use of your personal data should be addressed to the contacts above. Our EU and UK representatives are listed in Section 2.9.
2. How we use your information
2.1 When you use our website (cookies)
When you browse our website, we and selected third parties use cookies and similar technologies. Cookies that are strictly necessary for the website to function are set automatically. Cookies that are not strictly necessary — including analytics cookies — are placed only if you opt in through our cookie banner. When you first visit the site, and again whenever our cookies change, the banner lets you accept or reject non-essential cookies and rejecting them is as easy as accepting. If you reject non-essential cookies, the website still works, although some non-essential features may be unavailable.
You can change or withdraw your cookie choices at any time using the “Cookie settings” link in our website footer.
Our cookie banner and the recording of your cookie choices are managed for us by GetResponse (provided by GetResponse Inc., a Delaware corporation, with its EU affiliate GetResponse S.A. in Poland), acting as our processor. GetResponse Inc. is certified under the EU–US Data Privacy Framework; where it processes data in the United States we rely on that certification, supported by the Standard Contractual Clauses (see Section 2.7).
Strictly necessary cookies (set automatically):
| Cookie name | Purpose | Further information |
|---|---|---|
| Necessary | Stores the visitor's cookie-consent choice for the Necessary category. | Expiry: 1 year |
| _GRECAPTCHA | Set by Google reCAPTCHA to protect our forms from spam and abuse (risk analysis). | Expiry: 180 days |
Non-essential cookies (set only with your consent):
| Cookie name | Purpose | Further information |
|---|---|---|
| gaVisitorUuid | Set by GetResponse to identify a returning visitor to the site. | Expiry: 1 year |
| Functional | Stores the visitor's cookie-consent choice for the Functional category. | Expiry: 1 year |
| Performance | Stores the visitor's cookie-consent choice for the Performance (analytics) category. | Expiry: 1 year |
| Targeting | Stores the visitor's cookie-consent choice for the Targeting (marketing) category. | Expiry: 1 year |
| Other | Stores the visitor's cookie-consent choice for the Other category. | Expiry: 1 year |
The analytics cookies above are provided by Google (a third party) and are placed only if you opt in; they involve a transfer of data to the United States, for which we rely on the safeguards described in Section 2.7. Google reCAPTCHA, which we use to protect our forms, is also provided by Google and may transfer data to the United States. Our cookie-consent banner is provided by GetResponse Inc., which is certified under the EU–US Data Privacy Framework for any processing of data in the United States.
2.2 When you submit an inquiry via our website
When you submit an inquiry, we may ask for your name, contact telephone number and email address. We use this to respond to your query and to follow up on your interest, based on our legitimate interest in providing accurate information prior to a sale. Your inquiry is stored and processed as an email hosted by Microsoft in the United States and may be logged in a CRM on a cloud server in the United States or the EU (see Section 2.7). We do not make automated decisions that affect you. We keep inquiry emails for two to seven years in accordance with our retention policy; CRM records are kept for one year if we receive no response, and opt-outs are actioned immediately.
2.3 When you sign up to receive ongoing information
When you sign up for a newsletter or promotional emails, we ask for your name and email address and rely on your consent to send you that information. You can withdraw your consent at any time and we will stop. We do not currently share your details with a third-party mailing system, and we do not make automated decisions that affect you. We keep your data while we produce and distribute the information; if you withdraw consent, we mark your details as unused and delete them after two years.
2.4 When you download a sample document
When you request a sample document (such as a white paper or report), we may ask for your name, company name and email address. We use this to deliver the document and to follow up on your interest, based on our legitimate interest in marketing to prospects. We do not currently share your details with a third-party mailing system; your information may be logged in a CRM on a cloud server in the United States (see Section 2.7). We do not make automated decisions that affect you. CRM records are kept for one year if we receive no response, and opt-outs are actioned immediately.
2.5 When you submit a review about us
When you submit a review, we record your name, email address and IP address. We use this to provide verified, independent views to potential customers, based on our legitimate interest in marketing our services; your name and review (but not your email or IP address) may be displayed publicly. We do not make automated decisions that affect you. We store this data while we are marketing the product or service the review refers to, after which it is deleted. You may ask us to remove your review at any time.
2.6 When you use the Intermodal Portal application
The Intermodal Portal application is operated jointly by XSolutions and Niebo Solutions, who act as joint controllers under Article 26 GDPR for the account, identity and usage data processed in the IP: first and last name; company email address; company telephone number; a tracking ID; IP address; and usage and platform-analytics data. We use this to verify and manage authorized users and access, to operate and secure the platform, and to analyze usage in order to improve it. Our lawful basis is our legitimate interests (Article 6(1)(f)) in providing and securing a business platform; you have the right to object (Section 2.8). We do not use this data for advertising and do not sell it.
Essence of our joint-controller arrangement: XSolutions operates the hosting infrastructure (Microsoft Azure, United States), IT operations and security; both companies collaborate on the platform’s features and on how account and usage data are used. You may exercise your rights, or raise any privacy question, with either company using compliance@intermodalportal.com — your request will be handled jointly, and you may contact either of us regardless of how we divide responsibilities between ourselves.
We use trusted service providers who act on our instructions under GDPR-compliant terms: Microsoft Azure (hosting), Cloudflare (network security and content delivery), and Postmark / ActiveCampaign (transactional email). Where your organization controls data in the IP, Niebo acts as XSolutions’ sub-processor for that data. We keep account identity data while your account is active and for up to 12 months afterward, usage data and tracking IDs for 13 months, and IP addresses in security logs for 90 days, after which the data is deleted or anonymized unless we must keep it longer by law.
2.7 International information transfers
XSolutions is a U.S.-based company, and the Intermodal Portal and our website data are hosted in the United States (including on Microsoft Azure and Microsoft 365). If you are located outside the United States, your personal data will be processed and stored in the United States.
Where we transfer personal data of individuals in the EEA, the UK or Switzerland to the United States, we rely on appropriate safeguards under Chapter V of the GDPR — principally the European Commission’s Standard Contractual Clauses (and the UK Addendum for UK data), and, where applicable, our providers’ certification under the EU–US Data Privacy Framework — together with a transfer impact assessment and any additional measures needed. You may request a copy of the relevant safeguards using the contacts in this policy.
2.8 Your rights as a data subject
If you are in the EEA or the UK, you have the following rights over your personal data:
to be informed about, and to access, the personal data we hold about you, and to have inaccurate data corrected;
to withdraw your consent at any time where we rely on consent;
to receive a copy of the data you provided, in a machine-readable format, where we process it based on consent or a contract (data portability);
to have your data erased where we process it based on consent or legitimate interests;
to restrict our use of your data if you believe it is unlawful;
to object to processing based on our legitimate interests, including any direct marketing;
not to be subject to decisions based solely on automated processing or profiling (we do not carry out such processing).
Because XSolutions and Niebo are joint controllers of the application data, you may exercise these rights against either company. To make a request, use the contacts in Section 1.2; we aim to respond within one month. Where the data is controlled by your organization (Tenant), please contact your organization and we will assist it as its processor.
2.9 Your right to complain
If you have a complaint about our use of your information, we prefer you contact us first so we can address it:
XSolutions Consulting Services LLC — 20 Squadron Blvd., Suite 320, New City, NY 10956, USA; (845) 362-9675 ext. 802; compliance@intermodalportal.com.
You also have the right to lodge a complaint with a data protection supervisory authority. In the EEA this is the authority in your country of residence or work (and, given our joint operations, the Polish supervisory authority (UODO) may be relevant); in the UK it is the Information Commissioner’s Office (ICO).
Individuals in the EU/EEA and the UK may also contact our representatives:
EU representative: IT Governance Europe Limited — eurep@itgovernance.eu; The Mill, Newtown Link Rd, Stagreenan, Drogheda, Co. Louth, A92 CD3D, Ireland.
UK representative: GRCI Law Limited — ukrep@grcilaw.com; Unit 3, Clive Court, Bartholomew’s Walk, Cambridgeshire Business Park, Ely, Cambridgeshire, CB7 4EA, UK.
Please include our company name in any correspondence with a representative.
2.10 Children
The website and the Intermodal Portal are intended for businesses and their authorized users. They are not directed to children, and we do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
2.11 Updates to this privacy policy
We review and, where appropriate, update this policy as our services and use of personal data evolve. If we intend to use your personal data in a way not previously identified, we will provide information about it and, where necessary, seek your consent. We update the version number and date each time this document changes.