BUDAMAR LOGISTICS, a.s., in connection with the adoption of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and Act No. 18/2018 Coll. on the protection of personal data, provides information on the processing of personal data of data subjects in relation to the the provision of services in the area of comprehensive forwarding and transport activities within the logistics chain.
Controller of Personal Data
The controller of personal data is BUDAMAR LOGISTICS, a.s., with registered office at Horárska 12, 821 09 Bratislava, Company ID: 35 736 046, registered in the Commercial Register of the Municipal Court Bratislava III, Section: Sa, Entry No. 3067/B.
Purpose of Personal Data Processing
BUDAMAR LOGISTICS, a.s. processes only such personal data as is necessary to ensure the proper operation of the company with the aim of providing customers with quality services in the field of forwarding and transport activities within the logistics chain, to create an appropriate working environment for employees, to comply with legal obligations, and also to protect its own legitimate interests.
Legal Basis for Personal Data Processing
In processing personal data, BUDAMAR LOGISTICS, a.s. acts in accordance with applicable and valid Act No. 18/2018 Coll. on Personal Data Protection and on the amendment of certain acts (hereinafter referred to as the "Personal Data Protection Act") and Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter referred to as the GDPR).
The legal basis for the processing of personal data are:
- Specific legal regulations, in particular: the Social Insurance Act, the Labour Code, valid wage and accounting regulations, the Commercial Code, the Civil Code, the Trade Licensing Act, the Act on Occupational Safety and Health Protection
- The data subject's consent to the processing of personal data, depending on the purpose of the data processing
- Performance of a contract to which the data subject is a contracting party
- Processing of personal data for the protection of the life, health or property of the data subject
- The legitimate interest of BUDAMAR LOGISTICS, a.s.
Recipient
Your personal data is not transferred to other information systems and are recorded solely within BUDAMAR LOGISTICS, a.s.
Consent of the Data Subject
BUDAMAR LOGISTICS, a.s. obtains the data subject’s consent freely, without coercion or pressure, and without conditioning the consent on the threat of refusal of a contractual relationship, provided services, or obligations arising for the controller from legally binding acts of the European Union, an international treaty binding on the Slovak Republic, or national law.
The data subject may withdraw their consent at any time.
BUDAMAR LOGISTICS, a.s. respects privacy and considers the provided personal data to be confidential.
Conditions and Method of Personal Data Processing
BUDAMAR LOGISTICS, a.s. processes the personal data of data subjects in its information systems using both automated and non-automated processing means. BUDAMAR LOGISTICS, a.s. does not disclose the processed personal data, except in cases where a specific legal regulation or a decision of a court
BUDAMAR LOGISTICS, a.s. will not process the personal data of data subjects without their explicit consent or other statutory legal basis for any other purpose, nor to a greater extent, than stated in this information notice. Personal data will not be subject to automated individual decision-making or profiling.
Period of Personal Data Retention
The retention period of personal data is determined according to the purpose of processing and the requirements of specific legal regulations. Specific retention periods are set out in the internal registry plan prepared in accordance with the Archives and Registry Act.
BUDAMAR LOGISTICS, a.s. will dispose of personal data whose processing purpose and retention period have ended in the prescribed manner. BUDAMAR LOGISTICS, a.s. will ensure that the personal data of data subjects is processed in a form that allows the identification of individual data subjects for a period no longer than is necessary to achieve the purpose of the processing. BUDAMAR LOGISTICS, a.s. does not transfer personal data to third countries or international institutions.
Rights of the Data Subject Associated with the Processing of Their Personal Data
The data subject has the right to contact BUDAMAR LOGISTICS, a.s. at any time and request information and access to the processing of their personal data. Furthermore, they have the right to erasure, the right to rectify inaccurate or incomplete personal data, the right to restrict the processing, the right to object to profiling and automated decision-making, and the right to data portability.
In case of suspicion that personal data are being unlawfully processed, the data subject may file a petition to initiate proceedings on personal data protection with the Office for Personal Data Protection of the Slovak Republic, located at Hraničná 12, 820 07 Bratislava 27, or contact the Office via its website: www.dataprotection.gov.sk.
Security
BUDAMAR LOGISTICS, a.s. applies appropriate technical and organizational measures to protect all personal data against accidental or intentional manipulation, loss, destruction, or access by unauthorized person. This also applies to all purchased external services.
For any questions regarding these rules and their application, please contact us at: gdpr@budamar.sk
GDPR IN REPORTING OF CONCERNS (THIRD-PARTY WHISTLEBLOWER REPORTS)
This document provides information on the processing of personal data in BUDAMAR LOGISTICS, a.s. (hereinafter the “Company”) in relation to reports submitted by third parties, in particular suppliers, concerning suspected violations of the principles defined in the Supplier Code of Conduct, as well as other unlawful or unethical conduct that may endanger the public interest, health, safety, or the reputation of the Company.
The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 18/2018 Coll. on Personal Data Protection and on Amendments to Certain Acts.
1. Responsibility for Personal Data Processing
BUDAMAR LOGISTICS, a.s., registered office: Horárska 12, 821 09 Bratislava, Company ID (IČO): 35 736 046, registered in the Commercial Register of the Municipal Court Bratislava III, Section: Sa, Insert No.: 3067/B (hereinafter “BUDAMAR” or the “Controller”), processes the personal data of reporters and other persons to the extent and under the conditions specified in this document and, as the controller, is responsible for their protection and processing. Unless otherwise provided by law, BUDAMAR is also responsible for the processing of personal data by processors engaged for this purpose.
2. Definitions
Personal Data - means any information relating to an identified or identifiable natural person, an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Concern - is a submission regarding a violation of the Company’s internal principles defined in the Supplier Code of Conduct, as well as other unlawful or unethical acts that may endanger the public interest, health, safety, or the reputation of the Company. Specifically, this includes suspected violations of human rights, unethical behaviour, unfair business practices, environmental harm or breaches of environmental regulation
Whistleblower submitting a concern – means a natural person, especially a supplier or their employee, who comes into contact with the Company's activities and submits a concern as defined above.
Data subject – an identified or identifiable natural person whose personal data are processed. Data subjects include in particular:
- the natural person who submitted the concern,
- the natural person named in the concern or against whom the concern is directed (e.g., an employee or statutory representative of the Company or another entity).
Data Controller - means BUDAMAR LOGISTICS, a.s., which determines the purposes and means of the processing of personal data and is responsible for their processing.
Data Processor - means a subject that processes personal data on behalf of Data Controller. Data Controller may authorize Data Processor to process personal data if the Data Processor provides sufficient guarantees to ensure compliance of the processing with the GDPR and the Personal Data Protection Act.
Processing of personal data – means any operation or set of operations performed on personal data or sets of personal data, such as collection, recording, organisation, structuring, storage, alteration, retrieval, consultation, use, disclosure by transmission or dissemination, alignment or combination, restriction, erasure, regardless of whether carried out by automated or non-automated means.
3. Categories of Personal Data
Depending on the content of the Concern, the specific purpose of processing, and the legal basis, the following categories of personal data may be processed in particular:
- identification and contact details of the Whistleblower (name, surname, e-mail, phone number, company details),
- data provided in the content and data relating to persons concerned by the report
- data concerning the method of verifying and handling the concern.
If a concern is submitted anonymously, the personal data of the Whistleblower is not processed.
4. Purpose of Personal Data Use and Legal Basis for Processing
Personal data is processed for the purposes of:
- Verifying and handling concerns made by third parties (especially suppliers);
- Protecting the legitimate interests of the Company, consisting of adhering to ethical principles, preventing damage, and ensuring the proper functioning of the internal control environment.
The legal basis for processing is the legitimate interest according to Article 6, paragraph 1, letter f) of the GDPR.
5. Recipients of Personal Data
Personal data may be disclosed only to persons authorized to investigate concerns or to other entities in cases where required by law or where it is necessary to protect Company’s legitimate interests, always in full compliance with GDPR requirements.
6. Period of Personal Data Retention
Personal data and related documentation are retained for the period necessary to investigate the concern and implement any measures, usually no longer than 12 months from closure of the case. The Company ensures their protection and confidential treatment.
7. Rights of Data Subjects and Contact Information
If the data subject has concerns that, during the processing of personal data based on legitimate interest, the processing outweighs their fundamental rights and freedoms, they may object to it.
For questions concerning personal data processing and the exercise of these rights, you may contact the Data Protection Officer at: gdpr@budamar.sk
8. Final provisions
This information is effective from December 1, 2025. The Company reserves the right to update it in accordance with applicable legal regulations and internal process changes.