Website: https://sglogist.com/ Last updated: 21.07.2026

1. GENERAL PROVISIONS

1.1. These rules (“Rules”) govern the relationship between the Visitor / User / Client and the Service Provider regarding the provision of Services through the Website.

1.2. The Service Provider places information about the offered Services and other information related to its activities on the Website. Changes, including information about the Services and their cost, may be made by the Service Provider unilaterally, without prior notice to the User. Information remains valid until the Service Provider updates it, unless otherwise stated.

1.3. Complete and unconditional agreement with, and acceptance of, these Rules occurs when the Client places an Order in the manner established on the Website.

1.4. These Rules, and in particular the processing of personal data described in Section 3, are governed by the laws of the European Union — in particular Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) — and the national law of the Republic of Bulgaria implementing it, in particular the Personal Data Protection Act (PDPA).

2. DEFINITIONS

2.1. Website Visitor — a person who visits the Website without the intention of placing an Order.

2.2. User — a Website visitor who accepts the terms of this Agreement and wishes to place an Order on the Website.

2.3. Client — a User who has placed an Order on the Website.

2.4. Service Provider / Data Controller — the entity determining the purposes and means of processing personal data collected through the Website:

SEA GATE LOGISTICS BG EOOD UIC (EIK): 205682375 Address: Bulgaria, Burgas 8000, 1 Demokratsiya Str., Entr. A, Fl. 3, Off. 8

2.5. Website — the internet site owned by the Service Provider, located at https://sglogist.com/, where the Services are presented.

2.6. Services — informational services provided by the Service Provider and available for ordering on the Website.

2.7. Order — a duly formed request by the Client for the provision of a Service chosen on the Website.

2.8. Personal Data — any information relating to an identified or identifiable natural person, as defined in Article 4(1) GDPR.

3. PROTECTION OF PERSONAL DATA

3.1. Legal basis for processing

By submitting a form on the Website, the Client/User provides their personal data to the Service Provider, which processes it in accordance with Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act, on one or more of the following legal bases (Article 6(1) GDPR):

• Consent (Art. 6(1)(a)) — where the User has actively agreed to processing, e.g. for newsletters or marketing communications. Consent can be withdrawn at any time (see Section 3.6);
• Performance of a contract / pre-contractual steps (Art. 6(1)(b)) — to process and respond to an Order or inquiry;
• Legal obligation (Art. 6(1)(c)) — where processing is required to comply with applicable law (e.g. accounting or customs/logistics record-keeping obligations);
• Legitimate interests (Art. 6(1)(f)) — for internal reporting, website security, fraud prevention, and improving the Website and Services, provided these interests are not overridden by the User’s rights and freedoms.

3.2. Purposes of processing

The Service Provider processes the Client’s/User’s personal data for the following purposes:

• internal reporting;
• responding to user inquiries and Orders;
• improving the quality of the Website and Services;
• enhancing customer service;
• resolving disputes and claims;
• monitoring and securing Website operation;
• sending service and, where consented to, marketing correspondence;
• conducting surveys;
• generating anonymized/aggregated statistical data.

3.3. Categories of personal data collected

• first, last, and (where provided) middle name;
• phone number;
• email address;
• any other data voluntarily submitted by the User through a Website form.

The Service Provider does not knowingly collect special categories of data (Art. 9 GDPR) through the Website and asks Users not to submit such data in free-text fields.

3.4. Data retention

Personal data is retained only for as long as necessary to fulfil the purposes set out in Section 3.2, or as required by applicable law (e.g. Bulgarian accounting and tax legislation), after which it is deleted or anonymized.

3.5. Disclosure and recipients of data

3.5.1. The Service Provider does not sell personal data and will not disclose the data received from the Client/User to third parties, except:

• to employees, contractors, or service providers (e.g. hosting, IT support, email or CRM providers) who process data on the Service Provider’s behalf under a data processing agreement compliant with Art. 28 GDPR;
• where disclosure is required by applicable EU or Bulgarian law, or by a binding order of a competent court or authority;
• to protect the rights, property, or safety of the Service Provider, its Users, or third parties.

3.5.2. Where personal data is transferred outside the European Economic Area, the Service Provider ensures such transfer is subject to appropriate safeguards under Chapter V GDPR (such as the European Commission’s Standard Contractual Clauses or an adequacy decision).

3.6. Data subject rights

Under the GDPR, the Client/User has the right to:

• access the personal data held about them (Art. 15);
• rectify inaccurate or incomplete data (Art. 16);
• erase their data (“right to be forgotten”), where applicable (Art. 17);
• restrict processing in certain circumstances (Art. 18);
• data portability — receive their data in a structured, commonly used format (Art. 20);
• object to processing based on legitimate interests or for direct marketing (Art. 21);
• withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;
• lodge a complaint with a supervisory authority — see Section 3.8.

Requests can be sent to the contact details in Section 3.9. The Service Provider will respond within the timeframes required by the GDPR (generally within one month).

3.7. Security

The Service Provider implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration.

3.8. Supervisory authority

Users located in the EU have the right to lodge a complaint with a data protection supervisory authority. As the Service Provider is established in Bulgaria, the competent authority is:

Commission for Personal Data Protection (CPDP) Address: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria Phone: +359 2 915 3580 Email: kzld@cpdp.bg Website: www.cpdp.bg

Users may also contact the supervisory authority in their own EU member state of residence.

3.9. Contact

Questions or requests regarding personal data processing can be sent to the Service Provider using the contact details published on the Website, or by post to the address in Section 2.4.

3.10. Cookies and reCAPTCHA

This Website uses cookies and similar technologies necessary for its operation and, where applicable, for analytics — used only with the User’s consent where required by law.

This site is protected by Google reCAPTCHA, and use of reCAPTCHA is subject to the Google Privacy Policy and Google Terms of Service.

4. FINAL PROVISIONS

4.1. The Service Provider reserves the right to unilaterally amend these Rules. Changes take effect upon publication on the Website. Material changes affecting the processing of personal data will, where required by law, be brought to Users’ attention.

4.2. These Rules are governed by, and construed in accordance with, the law of the European Union and the Republic of Bulgaria.