Last update: 08.09.2026
1. Data Controller
The Data Controller is BRENTA LOGISTICS EOOD, UIC 208758682, VAT No. BG208758682, with registered office and management address: 24 Dr. Lyuben Popov Str., Varna, Bulgaria, represented by Manager Ivanesa Stefanova Ivanova.
Tel.: +359 894 707 940 | Email: [email protected]
2. What Data We May Process
- identification and contact data: name, company, phone number, email address;
- inquiry data: loading and delivery address/city, vehicle details, preferred dates, and additional instructions;
- data required for contract performance, invoicing, payment, transport, and customs documentation;
- correspondence via email, telephone, WhatsApp, or other communication channels used;
- technical data concerning website visits when using logs, security mechanisms, analytical, or marketing tools;
- data provided in connection with complaints or other customer services.
3. Purposes and Legal Bases
We process personal data only when we have an applicable legal basis, including:
- taking steps at the request of the data subject prior to entering into a contract and performance of a contract – for quotes, orders, transport, and related services;
- compliance with legal obligations – accounting, tax, regulatory, and other applicable legal requirements;
- legitimate interest – protection of legal claims, system security, prevention of abuse, management of business relationships, and service improvement, provided that the interests and fundamental rights of individuals do not override these interests;
- consent – when required by law, such as for specific marketing communications or non-essential cookies/technologies.
4. Data Recipients
To the extent necessary, personal data may be provided to:
- carriers, freight forwarders, and logistics partners;
- ports, terminals, customs representatives, and other participants in the agreed service;
- hosting, IT, email, communication, and security service providers;
- accountants, banks, payment service providers, and professional advisors;
- public authorities, when required by law;
- providers of analytical, advertising, or social services only when lawfully activated and with the necessary consent.
5. International Transfers
In the case of international services or the use of service providers located outside the European Economic Area (EEA), it may be necessary to transfer personal data to third countries. In such cases, Brenta Logistics applies an appropriate mechanism under the GDPR, such as an adequacy decision, standard contractual clauses, or another valid legal basis when necessary.
When the performance of a requested international service itself requires providing specific data to a recipient outside the EEA, processing is carried out only to the extent necessary and under applicable legal conditions.
6. Retention Periods
We do not store personal data for longer than necessary for the respective purpose. The specific period depends on the nature of the relationship, legal obligations, and the need to establish, exercise, or defend legal claims:
- unsuccessful/unaccepted inquiries – stored for a limited period necessary for communication and follow-up service, unless another legal basis applies;
- contractual, transport, accounting, and tax documents – stored for the periods required by applicable legislation;
- data related to legal claims – stored until the expiration of statutory limitation periods and the conclusion of related proceedings;
- data processed based on consent – stored until consent is withdrawn or until the purpose no longer exists, unless another legal basis requires further retention.
7. Is Provision of Data Mandatory?
Data marked as required in forms or requested for a specific service is necessary for us to process your inquiry or fulfill your order. If not provided, we may be unable to prepare a quote or provide the service.
8. Rights of Individuals (Data Subjects)
Under the terms of the GDPR, you have the right to request:
- access to your personal data;
- rectification of inaccurate or incomplete data;
- erasure (right to be forgotten), when statutory conditions are met;
- restriction of processing;
- data portability, where applicable;
- objection to processing based on legitimate interest;
- withdrawal of consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise your rights, you can write to [email protected]. We may request reasonable information to confirm your identity when necessary for data protection.
9. Complaint to a Supervisory Authority
You have the right to lodge a complaint with a competent supervisory authority for personal data protection. For an entity established in Bulgaria, the lead national authority is the Commission for Personal Data Protection (CPDP / КЗЛД), without limiting other rights under the GDPR.
10. Automated Decision-Making
Unless explicitly stated otherwise on the website or for a specific service, Brenta Logistics does not use personal data from forms for decisions based solely on automated processing that produce legal effects or similarly significantly affect the individual.
11. Security
We implement appropriate technical and organizational measures according to the risk to protect data against unauthorized access, loss, destruction, or unlawful processing.
12. External Services and Links
The website may contain links, maps, videos, social media buttons, or other third-party services. These providers may process data in accordance with their own privacy policies. Non-essential tracking technologies should only be activated upon valid consent when required.
13. Changes
This policy may be updated in the event of changes to services, technologies, or legal requirements. The current version is published on the website.
Last update: 08.09.2026