Salfort s.r.o.
Last updated: May 2026
1. Introduction
This Privacy Policy constitutes a formal legal notice governing the collection, processing, storage, transfer, disclosure and protection of personal data by Salfort s.r.o. in connection with its international business operations, including without limitation freight forwarding, air cargo transportation, industrial procurement, supply-chain coordination, sourcing, export-import activities, provision of special materials, industrial equipment, spare parts and related B2B commercial services.
This Privacy Policy is intended exclusively for business-to-business (B2B) relationships and commercial interactions. The Company does not intentionally provide services to consumers within the meaning of applicable consumer protection legislation.
The Company processes personal data strictly in accordance with Regulation (EU) 2016/679 (GDPR), applicable Czech legislation, applicable European Union regulations, international commercial compliance obligations and recognized standards of lawful corporate data governance.
This Privacy Policy explains how Salfort s.r.o. (“Salfort”, “Company”, “we”, “our”, or “us”) collects, uses, stores, protects and processes personal data in connection with the use of the website www.salfort.com and related business communications.
Salfort s.r.o. operates in the fields of international logistics, air cargo transportation, industrial supply, procurement of special materials, equipment and spare parts for aluminum production plants, and related B2B commercial activities.
The Company processes personal data in accordance with:
- Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR);
- Applicable laws of the Czech Republic;
- Applicable EU data protection regulations.
2. Data Controller
Salfort s.r.o.
639/6 Nad Petruskou
Prague 120 00
Czech Republic
VAT: CZ17972922
Email: [email protected]
Website: www.salfort.com
3. Personal Data We Collect
The website may collect and process the following categories of personal data:
3.1 Technical Data
- IP address;
- Browser type and version;
- Operating system;
- Device information;
- Website usage statistics;
- Cookies and analytics data.
3.2 Communication Data
If you contact us via email or website forms, we may process:
- Name;
- Company name;
- Email address;
- Telephone number;
- Message content;
- Business-related communication data.
3.3 Business and Contractual Data
In connection with logistics, procurement and industrial supply activities, we may process:
- Business contact information;
- Company identification data;
- Contractual and transaction-related information;
- Shipping and delivery information;
- Commercial correspondence.
4. Purpose of Processing
Personal data may be processed for the following purposes:
- operation, administration, maintenance and cybersecurity protection of the website and related IT systems;
- establishment, negotiation, execution and administration of commercial and contractual relationships;
- performance of freight forwarding, transportation, procurement, sourcing, industrial supply and related logistics operations;
- management of inquiries, quotations, requests for proposals (RFQ), procurement requests and commercial communications;
- verification of counterparties, business partners and authorized representatives;
- compliance with legal, regulatory, tax, customs, export-control, sanctions-screening, anti-fraud and compliance obligations;
- protection and enforcement of the Company’s legal rights, contractual rights and legitimate business interests;
- prevention of unauthorized access, fraud, abuse, cybersecurity incidents or unlawful activities;
- maintenance of internal records, audit documentation and corporate compliance systems;
- analytical and statistical assessment of website traffic using Google Analytics;
- defense, establishment or enforcement of legal claims.
The Company reserves the right to process personal data where such processing is necessary for legitimate commercial, operational, legal or compliance-related purposes permitted under applicable law.
Personal data may be processed for the following purposes:
- Operation and security of the website;
- Communication with business partners and clients;
- Responding to inquiries;
- Performance of contracts and pre-contractual measures;
- Logistics and transportation coordination;
- Procurement and supply activities;
- Compliance with legal obligations;
- Protection of legitimate business interests;
- Website traffic analysis using Google Analytics.
5. Legal Basis for Processing
The Company processes personal data exclusively on lawful grounds under Article 6 GDPR, including:
- Article 6(1)(a) GDPR — consent of the data subject;
- Article 6(1)(b) GDPR — performance of a contract or implementation of pre-contractual measures;
- Article 6(1)(c) GDPR — compliance with legal and regulatory obligations;
- Article 6(1)(f) GDPR — legitimate interests pursued by the Company.
Legitimate interests of the Company may include, without limitation:
- operation and protection of business activities;
- management of international commercial operations;
- fraud prevention and cybersecurity protection;
- legal risk management;
- enforcement of contractual rights;
- protection of confidential business information;
- maintenance of corporate compliance systems.
Where consent constitutes the legal basis for processing, such consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.
We process personal data on the basis of:
- Article 6(1)(a) GDPR – consent;
- Article 6(1)(b) GDPR – performance of a contract;
- Article 6(1)(c) GDPR – compliance with legal obligations;
- Article 6(1)(f) GDPR – legitimate interests.
6. Cookies and Google Analytics
The website uses cookies and Google Analytics to improve website functionality and analyze traffic.
Cookies may include:
- Essential cookies;
- Functional cookies;
- Analytical cookies.
Google Analytics may collect anonymized statistical information regarding website usage.
Users may manage cookie preferences through browser settings.
7. Disclosure and International Processing of Personal Data
Salfort does not sell personal data.
Personal data may be disclosed strictly on a need-to-know basis and exclusively where necessary for legitimate operational, contractual, technical, legal or regulatory purposes, including:
- public authorities, courts, regulators or supervisory bodies where required by applicable law;
- external legal, tax, accounting, compliance or professional advisors;
- IT service providers and technical contractors supporting website infrastructure, hosting, cybersecurity or analytics;
- banks, insurers or financial institutions where required for lawful business operations;
- auditors or corporate compliance service providers.
The Company does not intentionally transfer personal data outside the European Economic Area (EEA).
Should international transfers become necessary in the future, such transfers shall be implemented exclusively in accordance with GDPR requirements, including adequacy decisions, Standard Contractual Clauses (SCCs) or other legally recognized safeguards.
The Company reserves the right to disclose personal data where such disclosure is necessary for:
- protection of legal rights;
- prevention of fraud or unlawful activity;
- protection of business operations;
- compliance with legal obligations;
- enforcement of contractual rights or claims.
Salfort does not sell personal data.
Personal data may be disclosed only where necessary:
- To public authorities where required by law;
- To IT service providers supporting website operations;
- To legal or professional advisors.
The Company does not intentionally transfer personal data outside the European Union.
8. Data Retention
Personal data shall be retained only for the period reasonably necessary for:
- fulfillment of contractual and commercial purposes;
- compliance with legal, accounting, tax, customs and regulatory obligations;
- maintenance of audit trails and corporate compliance documentation;
- defense, establishment or enforcement of legal claims;
- protection of legitimate business interests.
Retention periods may vary depending on the nature of the business relationship, applicable legal obligations and operational necessity.
Upon expiry of the applicable retention period, personal data shall be securely deleted, anonymized or otherwise disposed of in accordance with applicable legal and technical standards.
Personal data shall be retained only for the period necessary for:
- Fulfillment of contractual purposes;
- Compliance with legal obligations;
- Protection of legitimate interests;
- Resolution of disputes.
9. Data Security and Confidentiality
The Company implements commercially reasonable and appropriate technical, administrative and organizational security measures designed to protect personal data against accidental, unlawful or unauthorized:
- access;
- disclosure;
- misuse;
- destruction;
- alteration;
- loss;
- cybersecurity compromise.
Such measures may include access control systems, restricted authorization procedures, cybersecurity protocols, internal confidentiality procedures and technical monitoring systems.
Notwithstanding the foregoing, no electronic transmission, storage system or internet-based communication can be guaranteed as fully secure. To the maximum extent permitted by applicable law, the Company disclaims liability for unauthorized access arising from circumstances beyond its reasonable control.
Salfort implements appropriate technical and organizational measures to protect personal data against:
- Unauthorized access;
- Loss;
- Misuse;
- Disclosure;
- Alteration or destruction.
10. Rights of Data Subjects
Subject to applicable legal limitations and exemptions under GDPR and related legislation, data subjects may exercise the following rights:
- right of access;
- right to rectification;
- right to erasure;
- right to restriction of processing;
- right to object to processing;
- right to data portability;
- right to withdraw consent;
- right to lodge a complaint with a competent supervisory authority.
The Company reserves the right to verify the identity of any requesting individual prior to responding to data protection requests.
Requests which are manifestly unfounded, excessive, repetitive or inconsistent with applicable legal obligations may be refused or subject to administrative handling permitted under GDPR.
All requests may be submitted to: [email protected]
Under GDPR, data subjects have the right to:
- Access personal data;
- Rectify inaccurate data;
- Request erasure;
- Restrict processing;
- Object to processing;
- Data portability;
- Withdraw consent;
- Lodge a complaint with a supervisory authority.
Requests may be sent to: [email protected]
11. Third-Party Links
The website may contain links to external websites. Salfort is not responsible for the privacy practices or content of third-party websites.
12. Amendments and Reservation of Rights
The Company reserves the unrestricted right to amend, supplement, update or replace this Privacy Policy at any time without prior notice where required by:
- changes in applicable legislation;
- operational requirements;
- technical developments;
- regulatory obligations;
- corporate restructuring;
- risk-management or compliance considerations.
The most current version shall be published on the Company website and shall become effective upon publication unless otherwise specified.
Continued use of the website following publication of updated versions constitutes acknowledgment of the revised Privacy Policy.
Salfort reserves the right to amend this Privacy Policy at any time.
Updated versions shall be published on the website.
13. Contact Information
For any questions regarding this Privacy Policy or personal data processing, please contact:
Salfort s.r.o.
Email: [email protected]