Before publication, the lawyer must confirm the full name of the data operator, registration details, address, jurisdictions, retention periods, the list of processors and the actual mechanisms of the portal.
This Policy describes the basic principles of processing personal data of SGS Logistics Group LLC ("SGS", "we") when using the public site, contact forms and, in the relevant part, the SGS Logistics Group LLC.
1. What data we can receive
- contact data: name, work email, phone or messenger;
- company data: name, role, estimated volume of operations and interest in the product;
- the content of the request and the information you voluntarily add to the form;
- technical data about your interaction with the site: pages opened, language, referral source (UTM tags) and visit time — see section 9;
- account data and portal operational records — within the limits of a separate agreement and access settings.
- scans of dealer contracts and their versions, the full name of the signatory and of the company owner, legal and banking requisites — within the limits of the agreement and access settings.
2. What we use the data for
- to respond to a request and prepare a relevant B2B demo;
- to discuss partnerships, logistics or product access;
- to support the operation, security and auditing of the SGS Logistics Group LLC;
- to fulfill contractual and legal obligations;
- to improve the Site and Service based on Aggregated Data, as permitted by applicable law.
3. Legal grounds
Depending on the situation, the processing may be based on your consent, the need to respond to a pre-contractual request, the performance of a contract, a legitimate interest in the security and development of the service, or a legal obligation. The final wording should be consistent with the jurisdictions in which SGS actually operates.
4. To whom the data may be transferred
Access may be granted to authorized SGS employees and verified infrastructure, communications, CRM, analytics or support providers only to the extent necessary for their function. Access to contract scans and to the signatory’s full name is narrowed separately: only roles holding an explicit contract permission (administrator, finance, dealer manager) have it; the support team does not see these documents. On the dealer side the contract is available only to whoever manages their company card. Every view and download of a scan is written to the audit log. Data may also be disclosed if required by law or to protect rights and security.
5. International transfer
The logistics process can cover several countries. Where personal data is transferred between jurisdictions, SGS must apply appropriate contractual and technical safeguards. The specific mechanism must be confirmed before the production version is launched.
6. Storage period
We retain data no longer than is necessary to respond to the request, fulfill the contract, protect legitimate interests and comply with legal requirements. Dealer contract scans are kept for 36 months from the date a version was uploaded: every version carries a "keep until" date, after which the file is deleted automatically and only the record that such a version existed remains in the log. The period may be longer where the contract itself or the law requires it. Specific deadlines for other types of records depend on the type of record and should be recorded in the internal retention policy.
7. Your rights
Depending on applicable law, you may have the right to request access, correction, deletion, restriction or portability of data, object to processing or withdraw consent. Use to apply .
8. Security
SGS must implement organizational and technical measures proportionate to the risk: access control, logging, account protection, redundancy and incident response procedures. Public policy should describe only measures actually implemented.
9. Cookies and external services
The site does not use advertising cookies and does not profile visitors. Our own visit statistics keep an identifier in the tab's sessionStorage — it disappears with the tab, never becomes a cookie and never leaves SGS servers; the same storage holds the UTM tags of your first visit, and your language choice lives in localStorage. Third-party services that receive your IP address: Cloudflare Turnstile (bot protection on forms, sets its own cookies), Google Fonts (typefaces) and Google Maps — but the map loads ONLY after you press “Show map”, not before. Google Analytics is loaded only when a measurement ID is configured in the site settings, and it sets its own cookies; while that field is empty the script is not loaded at all. The site has no cookie consent banner. Before the commercial launch, counsel must confirm whether this list is sufficient and whether a consent mechanism is required in your jurisdiction.
10. Newsletters and marketing messages
Contact data from the site forms is used ONLY to answer your specific request and to continue the conversation about working together. SGS does not send marketing campaigns to these contacts, and the checkbox under the form does not grant that consent — it covers only the processing needed to reply. Should a newsletter ever appear, it will require separate, explicitly given consent with the option to opt out at any time; silence or a submitted request does not count as consent. You can withdraw consent or ask us not to contact you by writing to — this does not affect the lawfulness of processing before the withdrawal.
11. Changes and contacts
We may update the Policy along with changes to the service or legal requirements. The current version must include the effective date. Data questions: .