MEDIAŠPED Privacy Policy - Information on how we process personal data in accordance with GDPR (Article 13) for our freight forwarding and logistics services.
For any questions, requests or inquiries related to the protection of personal data in our organization, you can contact us at: info@mediasped.com.
This privacy notice describes how MEDIAŠPED d.o.o. (data controller) collects, stores and otherwise processes certain information, including personal data, as provided for by Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation — GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2). This notice applies to personal data processed in connection with our website mediasped.com, our freight forwarding and logistics services, and your other interactions with our organization.
The following table summarizes the categories of personal data we process, the types of data, retention periods, and legal bases for processing:
We carefully store and protect personal data using organizational, technical and logical-technical procedures and measures. These protect data against accidental or intentional unauthorized access, destruction, modification or loss, and unauthorized disclosure or other forms of processing. Our measures include encryption, secure servers, access controls, regular software updates, physical security of premises and data storage locations, password policies, and employee training. We impose the same security requirements on our contractual data processors.
Your personal data may be processed by our employees who need the data to perform their duties (all bound by confidentiality), competent state authorities where required by law, and the following categories of contractual data processors who may only process data on our behalf and within the scope of their contract:
As a rule, our organization does not transfer personal data to third countries (i.e., outside the EU/EEA). The exception is occasional transfers of certain technical data to servers of processors located in the USA (e.g., Google Analytics cookies), where these processors have adopted appropriate safeguards such as Standard Contractual Clauses or have completed certification under the EU-US Data Privacy Framework in accordance with Regulation (EU) 2016/679.
Under the GDPR, you have the following rights regarding your personal data, which you can exercise at any time by contacting us:
Personal data is retained only as long as necessary to fulfill the purpose for which it was collected, or as long as required by law. Business and shipping records are typically retained for 7 years in accordance with Slovenian commercial law. Invoice data is retained for 10 years as required by the Value Added Tax Act (ZDDV-1). Contact inquiry data is retained until the purpose of communication is fulfilled or up to 4 years from the last communication. After the applicable retention period expires, we securely delete or anonymize your data within 15 days.
Our services are intended for individuals aged 15 and older. If we become aware that we have collected personal data from a person under 15 without parental consent, we will take all necessary steps to delete that data. Parents or guardians may contact us at any time to request deletion of such data.
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Significant changes will be communicated via our website or by other appropriate means. We encourage you to review this page periodically. The date of the last update is shown at the top of this policy.
If you have any questions about this Privacy Policy, the processing of your personal data, or wish to exercise your rights, please contact us: