1. Controller details

The controller of personal data is: Spedale d.o.o. Radnih akcija 93, 11250 Belgrade, Republic of Serbia Telephone: +381 63 399-110 Email: sales@spedale.rs For any questions about privacy and data processing, you may write to us at the email address above with the subject line “Data Protection”.

2. Who this policy applies to

This Privacy Policy applies to visitors to spedale.rs, persons who send us enquiries, requests for quotations or documentation, and other persons who communicate with us through the contact details published on the website.

3. What data we may collect

Depending on how you use the website and communicate with us, we may process the following data:

• first and last name, company name and business role, email address and telephone number
• collection and delivery locations, type of goods, weight, dimensions and other characteristics of the shipment
• requested deadlines, message content, documents and attachments that you voluntarily provide
• IP address, device type, operating system, browser type and technical data about access to the website
• data about how the website is used, only if you have consented to the relevant analytics cookies

Please do not provide data that are not necessary to process your request, especially special categories of personal data. If documentation contains data about other natural persons, you are responsible for having an appropriate basis for providing those data to Spedale d.o.o.

4. How we collect data

• when you complete a contact form or request-for-quotation form
• when you contact us by email or telephone
• when you send us documentation or a shipment specification
• when you begin negotiations or a business relationship with us
• automatically, through technical server records and cookies, in accordance with the Cookie Policy

5. Processing purposes and legal basis

We use data to understand your request, contact you, prepare a quotation and take steps at your request before entering into a contract; to arrange transport, freight forwarding, warehousing, cargo insurance, administration and contractual obligations; and to conduct business communications.

Where necessary for a quotation or performance of a request, we may disclose relevant data to carriers, warehouses, freight forwarders, customs representatives, insurance companies, ports, terminals, airlines, rail operators and other partners. Only data necessary for the specific purpose are disclosed.

We process technical data to ensure the proper operation of the website, detect errors, protect against misuse and improve security. We process analytics data only with consent for analytics cookies, which you may withdraw at any time. We also process certain data to comply with legal accounting, tax, customs and transport obligations.

6. Documentation you provide to us

By sending documents through the contact form or to sales@spedale.rs, you confirm that you are authorised to provide them. We may share documentation and the data contained in it with third parties only where necessary to analyse a request, prepare a quotation, organise and perform transport, conduct customs, warehousing or insurance procedures, or fulfil legal and contractual obligations. Remove data that are not necessary before sending.

7. Data recipients

• employees and engaged persons of Spedale d.o.o. who need the data for their work
• carriers, logistics partners, customs representatives, warehouses, terminals, ports and insurance companies
• providers of IT, hosting, technical support, email and cloud services, and professional advisers
• public authorities and authorised persons where required by law or ordered

We require processors to process data only in accordance with our instructions and to apply appropriate safeguards. Spedale d.o.o. does not sell personal data.

8. Transfers of data to other countries

Due to the nature of international transport, data may be disclosed to partners, carriers, agents or competent authorities in other countries where necessary to prepare or perform the service. Where an adequate level of protection has not been established, we will endeavour to apply appropriate legal and organisational measures in accordance with applicable regulations. Certain providers of digital services may process data outside the Republic of Serbia.

9. Retention periods

We retain data only for as long as necessary for the purpose for which they were collected, unless a longer period is prescribed by law or necessary for legal claims.

• data from an enquiry that did not lead to cooperation: up to 24 months from the last communication
• data related to quotations, contracts and completed services: during the relationship and thereafter for statutory periods
• accounting, tax, customs and business documentation: for statutory periods
• technical and security logs: for a reasonably necessary period
• consent-based data: until consent is withdrawn, unless another basis exists

After the retention period expires, we delete or anonymise data, or retain them only where there is a legal obligation to do so.

10. Data security

We apply reasonable technical, organisational and administrative measures to protect against unauthorised access, loss, accidental deletion, alteration, disclosure, misuse and destruction. No method of transmission or storage over the internet can be guaranteed to be completely secure.

11. Your rights

In accordance with applicable regulations, you may have the right to information, access, rectification, completion, erasure, restriction of processing, objection to processing based on legitimate interest, withdrawal of consent, data portability and lodging a complaint with the Commissioner for Information of Public Importance and Personal Data Protection.

Rights are not absolute and may be limited by law. Send your request to sales@spedale.rs with the subject line “Data Protection”. Before acting, we may request additional information to confirm your identity.

12. Automated decision-making

Through spedale.rs, we do not make decisions that produce legal effects or significantly affect a user solely on the basis of automated data processing.

13. Children’s data

The website and services are intended primarily for business users and adults. We do not knowingly collect children’s data; minors should not provide data without the consent of a parent or representative. If we learn that data were provided without an appropriate basis, we will take reasonable steps to delete them.

14. Links to other websites

The website may contain links to third-party websites. Spedale d.o.o. does not manage them and is not responsible for their content, security or data-processing practices. We recommend that you read the privacy policies of those websites.

15. Changes to the Privacy Policy

We may amend this Policy from time to time to reflect changes in the operation of the website, business processes or regulations. The updated version will be published on this page with the date of the last update; we may also notify users of significant changes in another appropriate manner.

16. Contact

For questions, requests or complaints regarding data processing, contact: Spedale d.o.o. Radnih akcija 93, 11250 Belgrade, Republic of Serbia Telephone: +381 63 399-110 Email: sales@spedale.rs