Privacy Policy.

This Personal Data Protection and Processing Policy aims to inform clients, partners, carriers, employees, and job applicants about how 2B Logistics Ltd. collects, uses, stores, and protects personal data. As a data controller, the company exercises its rights and obligations in compliance with the applicable legislation pursuant to Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act.

Company: 2B Logistics Ltd.

UIC: 207632129

Registered office: Plovdiv, South District, 1 Balkanska Zora St.

Email: dispo@2b-log.com

Phone: +359 882 06 42 36, +359 882 53 45 58

2B Logistics Ltd. processes personal data relating to:

•Clients and prospective clients who submit inquiries through the website contact form

•Commercial partners and carriers

•Employees and job applicants

The following personal data is collected from individuals employed by 2B Logistics Ltd. as well as from job applicants:

•Personal identification data: names, personal identification number or foreigner personal number, permanent and/or current address, telephone, ID card or passport details, email address, and other documents specific to the relevant position

•Education and professional qualifications: education, work experience, professional skills, and qualifications

•Health data: health status, medical certificates, sick leave certificates, and all related documentation

•Financial data: bank account certificate (upon employment)

Job applicant data is processed only after consent is given through the application for the specific position, in response to a specific job posting, and by providing the required documents.

2B Logistics Ltd. processes personal data solely for clearly defined, lawful, and transparent purposes, namely:

•Providing transport, logistics, and freight forwarding services — to fulfill commitments to clients and partners, including organizing transport, tracking deliveries, communicating regarding shipments, and ensuring reliable and efficient service.

•Preparing quotations, contracts, and processing inquiries — upon receiving inquiries from clients, partners, or carriers, 2B Logistics Ltd. processes the provided personal data to prepare individual quotations, conduct negotiations, and conclude and fulfill contracts.

•Compliance with legal obligations — 2B Logistics Ltd. processes personal data when necessary to comply with regulatory requirements related to: payment of wages and related tax, health, and social security obligations; submitting data to the National Social Security Institute and the National Revenue Agency; preparing and submitting accounting, tax, and statistical reports; and fulfilling other rights and obligations as an employer and commercial entity under applicable legislation.

•Recruitment and personnel management — 2B Logistics Ltd. collects and processes job applicant data to assess suitability for a specific position. For employed staff, data necessary for employment relations, human resources management, training, and development is processed.

•Marketing and market research — 2B Logistics Ltd. processes data to analyze the market, assess interest in offered services, improve service quality, and prepare statistics and reports on the effectiveness of its operations.

Personal data of individuals employed under employment contracts, as well as job applicants, is collected in connection with applications for employment at 2B Logistics Ltd. and is stored in personal files, on paper, and in an electronic database. Some data may also be stored on other technical media, subject to appropriate security measures. Access to personal data and personal files is restricted to the designated responsible person.

Personal data of job applicants who are not selected is retained for no longer than six months after the completion of the recruitment process, after which it is destroyed.

•Every employee has the right to request access to their personal data, including requesting confirmation of whether data relating to them is being processed, and to be informed of the purposes of processing, the categories of data, and the recipients of the data.

•Every employee has the right to request the deletion or correction of their personal data if its processing does not comply with the requirements of the law.

•Every employee has the right to object to the provision of their personal data to third parties without the required legal basis.

•Every employee has the right to be notified in case of a personal data security breach that is likely to result in a high risk to their rights and freedoms.

•Every employee has the right to file a complaint with the competent supervisory authority — the Commission for Personal Data Protection (CPDP).

In case of a suspected or established security breach:

•The designated responsible person conducts an investigation and notifies the company management.

•Immediate measures are taken to mitigate the risk.

•If there is a risk to the rights and freedoms of data subjects, the Commission for Personal Data Protection (CPDP) and the affected individuals are notified.

The supervisory authority in the Republic of Bulgaria is the Commission for Personal Data Protection (CPDP)

Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.

Phone: +359 2 91-53-518

Email: kzld@cpdp.bg

Website: www.cpdp.bg

This policy may be updated in the event of changes to legal requirements or to the way we process personal data.