Privacy Policy — KG Cargo Ltd.

Last updated: 5 August 2026

This Privacy Policy explains how KG Cargo Ltd. (“KG Cargo”, “we”, “us”, “our”) collects, uses and protects personal data when you visit our website http://www.kgcargo-bg.com (the “Website”) or when you contact us about our freight forwarding and logistics services.

We are committed to processing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Bulgarian Personal Data Protection Act and other applicable data protection laws.

1. Who we are (data controller)

The data controller responsible for this Website and for the processing described in this Policy is:

KG Cargo Ltd.
Registered address: zh.k. Druzhba 2, bl. 285, ent. V, fl. 8, suite 8.2, Sofia 1582, Bulgaria
Company registration number (UIC): 202315089
VAT number: BG202315089
Contact email: sales@kgcargo-bg.com

If you have any questions about this Privacy Policy or about our data processing, you can contact us at sales@kgcargo-bg.com.

2. What personal data we collect

We may collect and process the following categories of personal data:

  1. Contact details
    • Name, job title, company name
    • Email address, phone number
    • Postal address (if you provide it)
  2. Communication data
    • Information you include in emails, contact forms or RFQ (request for quotation) requests
    • Notes from calls or meetings, where relevant
  3. Shipment-related data (if you request quotes or services)
    • Company details, VAT and EORI numbers
    • Origin and destination, shipment characteristics
    • Names and contact details of contact persons
  4. Website usage data
    • IP address, browser type, device information
    • Pages visited, time spent, referring URL
    • Cookies and similar technologies (see our Cookie Policy)
  5. Newsletter and marketing data
    • Name, email address
    • Subscription preferences, open and click behaviour

We typically collect this data directly from you when you use our Website, contact us or work with us. Some data (for example company information) may also come from public sources or from your colleagues.

3. Purposes and legal bases of processing

We process your personal data for the following purposes and on the following legal bases:

  1. Responding to enquiries and providing quotes
    • Purpose: to respond to your messages, RFQ requests and questions about our services.
    • Legal basis:
      • Art. 6(1)(b) GDPR – performance of a contract or steps prior to entering into a contract;
      • Art. 6(1)(f) GDPR – our legitimate interest in responding to business requests.
  2. Providing freight forwarding and logistics services
    • Purpose: to organise and manage shipments, customs processing, insurance and related services.
    • Legal basis:
      • Art. 6(1)(b) GDPR – performance of a contract with you or your company;
      • Art. 6(1)(f) GDPR – our legitimate interest in fulfilling obligations towards our customers and partners.
  3. Maintaining business relationships
    • Purpose: to manage ongoing customer, partner and supplier relationships, including day-to-day communication.
    • Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in maintaining and developing business relationships.
  4. Direct marketing to business contacts
    • Purpose: to send relevant logistics updates, event invitations or content to business contacts.
    • Legal basis:
      • Art. 6(1)(f) GDPR – our legitimate interest in informing existing or potential business customers; or
      • Art. 6(1)(a) GDPR – consent, where required by law.
  5. Website operation and improvement
    • Purpose: to operate, secure and improve our Website, including analytics (for example which pages are used most).
    • Legal basis:
      • Art. 6(1)(f) GDPR – our legitimate interest in running a secure and efficient Website;
      • for non-essential cookies and analytics: Art. 6(1)(a) GDPR – consent.
  6. Compliance and legal claims
    • Purpose: to comply with legal obligations and to establish, exercise or defend legal claims.
    • Legal basis:
      • Art. 6(1)(c) GDPR – compliance with a legal obligation;
      • Art. 6(1)(f) GDPR – our legitimate interest in defending our rights and interests.

4. Who we share your personal data with

We may share personal data with:

  • Service providers and processors
    (for example IT hosting providers, CRM systems, email services and analytics providers) who process data on our behalf under written contracts.
  • Logistics partners and subcontractors
    (for example carriers, customs brokers, insurance brokers and agents) where this is necessary to provide the requested logistics services.
  • Professional advisers
    (for example lawyers, accountants and auditors) where necessary.
  • Authorities and public bodies
    where required by law or for the establishment, exercise or defence of legal claims.

We do not sell your personal data.

5. International data transfers

Some of our service providers or partners may be located outside the EU/EEA. Where personal data is transferred to a country that has not been recognised by the European Commission as providing an adequate level of protection, we will ensure appropriate safeguards in line with Chapter V GDPR – in particular the EU Standard Contractual Clauses – together with any additional measures required in the individual case. You may request information about the safeguards applied by writing to sales@kgcargo-bg.com.

6. How long we keep your data

We keep personal data only for as long as necessary for the purposes described above or as required by law. Retention periods may vary depending on the context, but in general:

  • Business contact and communication data – for the duration of the business relationship and for a reasonable period afterwards.
  • Contract and shipment-related data – for the duration of the contract and for 5 years thereafter, in line with statutory retention obligations.
  • Accounting and tax documents – for the periods required by Bulgarian accounting and tax legislation.
  • Website analytics data – for the retention period configured in the analytics tool used, as a rule no longer than 14 months from collection.
  • Newsletter data – until you unsubscribe or withdraw your consent.

When a retention period expires, the data is deleted or irreversibly anonymised.

7. Your rights as a data subject

Under the GDPR you have the following rights in relation to your personal data, subject to the conditions and limitations set out in the Regulation:

  • Right of access – to obtain confirmation whether we process your data and to receive a copy of it.
  • Right to rectification – to have inaccurate data corrected and incomplete data completed.
  • Right to erasure – to request deletion of your data in certain circumstances.
  • Right to restriction of processing – to limit our processing in certain cases.
  • Right to data portability – to receive your data in a structured, commonly used, machine-readable format where the processing is based on consent or contract and is carried out by automated means.
  • Right to object – to object to processing based on legitimate interests, including direct marketing.
  • Right to withdraw consent – where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise your rights, please contact us at sales@kgcargo-bg.com. We may need to verify your identity before we respond. We answer requests within one month of receipt; where a request is complex or we receive a number of requests, this period may be extended by up to two further months, and we will inform you of the extension.

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU/EEA member state of your habitual residence, place of work or place of the alleged infringement. The supervisory authority competent for KG Cargo Ltd. is:

Commission for Personal Data Protection (Комисия за защита на личните данни)
2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
kzld@cpdp.bg · www.cpdp.bg

8. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration, including access control, encrypted transmission of our Website traffic, backups and confidentiality obligations for our staff and processors. However, no system and no transmission over the internet can be guaranteed to be 100% secure.

9. Cookies and links to other websites

Our Website uses cookies and similar technologies. Details of the categories of cookies used, the legal basis for each category and how you can manage your preferences are set out in our Cookie Policy.

Our Website may also contain links to third-party websites. We are not responsible for the privacy practices or the content of those websites and we recommend that you review their privacy policies.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example when our services, our systems or the legal requirements change. The latest version is always available on this page and shows the “Last updated” date. If the changes are significant, we may also inform you through other channels, for example by email or by a notice on the Website.

11. Automated decision-making and provision of data

11.1 We do not carry out automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you. Quotes and decisions on individual shipments are prepared by our staff.

11.2 Providing contact details and shipment data is not a statutory requirement, but it is necessary for us to respond to your enquiry and to enter into and perform a contract with you. If you do not provide it, we will not be able to prepare a quote or arrange the transport. Where specific data is required by law – for example for customs clearance or for the carriage of dangerous goods – this will be stated explicitly in the individual case.

This English version is a translation. In case of discrepancy, the Bulgarian version prevails.