Privacy Policy

Controller

The data controller is EXLOGISTICS 2024 Ltd., UIC 207833018, with registered office in Sofia, Bulgaria. The company can be contacted at office.exlogistics@gmail.com or by phone at +359876159450.

Data categories

• Name, company, phone, email and inquiry content.
• Cargo, route, receiver, timing and transport document data.
• Contract, invoice, payment and correspondence data where a commercial relation is established.
• Security logs and basic visit statistics.

Purposes and legal basis

• Responding to inquiries, preparing offers and clarifying shipment parameters: pre-contractual steps requested by the client.
• Organizing transport, forwarding, warehousing, delivery coordination and document flow: performance of a contract.
• Accounting, tax reporting, legal retention and regulatory obligations: compliance with legal obligations.
• Security, claim handling, business communication and protection of legitimate interests: legitimate interest, balanced against the rights of the data subject.

Recipients

• Carrier partners, warehouse operators, forwarding partners and other parties needed for a specific shipment.
• Accounting, legal, IT, hosting and communication service providers acting under appropriate confidentiality or processing terms.
• Public authorities where disclosure is required by applicable law or a lawful request.

Retention

Personal data is kept only for the period necessary for the relevant purpose. Inquiry data may be kept for follow-up communication, contractual and accounting data is kept according to applicable statutory retention periods, and operational correspondence is retained as needed for proof, claims and business continuity.

International transfers

Where logistics coordination requires communication with partners outside Bulgaria or outside the European Economic Area, only the data necessary for the specific shipment or service is shared. Appropriate safeguards are applied where required by data protection law.

Security

EXLOGISTICS 2024 applies organizational and technical measures intended to protect personal data against unauthorized access, loss, misuse or unlawful disclosure. Access is limited to persons and partners who need the information for the relevant business purpose.

Data subject rights

You may request access, correction, deletion, restriction, objection or portability where applicable law allows it. You may also lodge a complaint with the competent data protection authority if you believe your rights have been violated.