TERMS AND CONDITIONS – LOGIFIE sp. z o.o.

1. Who is the data controller

The administrator of your personal data is Logifie sp. z o.o. with its registered office in Jesionowa 9a/311 , 40-159 Katowice, entered into the Register of Entrepreneurs of the National Court Register (KRS): 0001221730, NIP: 9542902637, REGON: 54389402000000 (hereinafter: "Company" or "Administrator").

Contact: [email protected] , +48 511 155 226

Contact regarding personal data (GDPR): [email protected] (can be the same as contact email) or by letter to the registered office address with the note "GDPR".

2. Where do we get your data from

We may obtain your data:

• directly from you (e.g. via form, email, phone, contract, recruitment),
• from other entities (e.g. from our client/counterparty, sender/recipient, subcontractor) – in particular when you are a contact person for the execution of orders.

The scope of the information obligation depends on whether we collected the data directly from you (Art. 13 GDPR) or from another source (Art. 14 GDPR).

3. What data do we process

Depending on the case, we may process, among others:

• identification and contact data (name, surname, business email/phone),
• company data (company name, position, address, NIP – if applicable),
• content of correspondence and commercial/operational arrangements,
• data in transport and billing documents (e.g. CMR/POD, invoices) to the extent that they contain personal data,
• if applicable: data necessary for security and settlements (e.g. platform access data, driver/subcontractor identifiers, data from track&trace systems regarding statuses and events).

4. For what purposes and on what basis do we process data

A. Contact and quote requests (including contact form)

Purpose: handling inquiries sent via contact form, email or phone, preparing an offer, contact and conducting correspondence.

Basis: Art. 6(1)(b) GDPR (actions prior to concluding a contract) and/or Art. 6(1)(f) GDPR (legitimate interest of the Administrator – communication and handling of cases).

Scope of data: name and surname (if provided), email, phone number (if provided), company (if provided), message content and technical data related to sending the form (e.g. date and time of submission).

Period: for the time of handling the case and then for the period necessary to defend claims.

B. Conclusion and performance of contracts/orders (transport/forwarding)

Purpose: performance of services, organization of transport, operational contact, settlements, complaint handling.

Basis: Art. 6(1)(b) GDPR (contract) and Art. 6(1)(c) GDPR (legal obligations) and/or Art. 6(1)(f) GDPR (legitimate interest – efficient implementation and security).

C. Accounting, taxes and legal obligations

Purpose: issuing and storing accounting documents/settlements, handling complaints in accordance with regulations.

Basis: Art. 6(1)(c) GDPR (legal obligation).

D. Claims and security

Purpose: establishment, pursuit or defense of claims, prevention of fraud, ensuring information security.

Basis: Art. 6(1)(f) GDPR (legitimate interest).

E. B2B Marketing

Purpose: direct marketing of the Company's services in business relations.

Basis: Art. 6(1)(f) GDPR (legitimate interest) or Art. 6(1)(a) GDPR (consent), if required in a given channel.

F. Recruitment

Purpose: conducting recruitment and contact with the candidate.

Basis: Art. 6(1)(b) GDPR (actions before concluding a contract) and Art. 6(1)(a) GDPR (consent – if you provide data exceeding those required or consent to future recruitments).

5. Is providing data mandatory

Providing data is voluntary, but:

• without contact details we will not be able to answer the inquiry,
• without data necessary for the contract/order, we will not be able to conclude or execute it.

6. Who can we disclose data to (recipients)

Data may be transferred to:

• IT service providers (hosting, email, website maintenance, operating/accounting/TMS systems),
• accounting office, banks and payment operators,
• insurers, law firms and advisors (e.g. in case of damages/claims),
• subcontractors (e.g. carriers) if necessary to perform the service,
• public authorities – when required by law.

7. Transfer of data outside the EEA

If we use providers whose processing involves transferring data outside the European Economic Area, we apply mechanisms compliant with GDPR, in particular Standard Contractual Clauses (SCC).

8. How long we keep data

We store data:

• for the time of handling the inquiry and correspondence,
• for the period of execution of the contract/order and settlements,
• then for the period required by regulations (e.g. accounting/tax) and/or until the limitation periods for claims expire,
• in the case of marketing consent – until it is withdrawn or effective objection (depending on the basis).

9. Your rights

You have the right to: access data, rectification, deletion, restriction of processing, data portability (where applicable), objection to processing based on legitimate interest and withdrawal of consent (if we process based on consent).

You also have the right to lodge a complaint with a supervisory authority. In Poland: President of the Personal Data Protection Office (PUODO).

10. Automated decision making and profiling

The Company does not, as a rule, make decisions towards you solely in an automated manner that would produce legal effects or similarly significantly affect you.

If applicable to marketing tools/cookies: profiling may occur within analytical/marketing tools – details are described in the Cookies Policy.

PART II – WEBSITE, COOKIES, SOCIAL MEDIA

11. Data of website visitors (logs, security)

Purpose: ensuring website operation, security, technical statistics, service development.

Basis: Art. 6(1)(f) GDPR.

Scope: IP, browser/device data, server logs.

12. Cookies and similar technologies

The website may use cookies and similar technologies:

• necessary for operation,
• analytical/statistical,
• marketing (if implemented and you consent).

Details are published in the Logifie Cookies Policy: cookies .

13. Social Media

Logifie sp. z o.o. maintains profiles in social media. In connection with maintaining them, we may process data of users who interact with our profiles (e.g. through comments, reactions, private messages) for the purpose of:

• communication and handling inquiries,
• running the profile and informing about the Company's activities and services.

Social platform providers are separate data controllers (and in certain scopes may act as joint controllers, e.g. in connection with page statistics). Detailed information on data processing can be found in the privacy policies of these platforms.

PART III – DATA IN TRANSPORT AND FORWARDING ACTIVITIES

14. Contact persons at clients/contractors

Purpose: ongoing communication, contract execution, operational arrangements, settlements, complaint handling.

Basis: Art. 6(1)(b) and f GDPR.

15. Persons indicated in transport documents (e.g. loading/unloading)

Purpose: organization and implementation of transport, confirmation of receipt/delivery, operational contact.

Basis: Art. 6(1)(b) and f GDPR.

16. Subcontractors and drivers (if applicable)

Purpose: organization of cooperation, verification of entitlements necessary to perform services, settlements, security.

Basis: Art. 6(1)(b), c and/or f GDPR (depending on the situation).

17. Data security

We apply adequate technical and organizational measures (including access control, authorizations, backups, updates, verification of suppliers) to protect data against loss, unauthorized access and breaches.

18. Policy Changes

We may update the Terms and Conditions in case of changes in processes, tools or regulations. The current version is published on the website.

19. Contact

In matters of personal data protection, please contact: [email protected] .