Privacy policy – myEuropacific web portal and mobile apps

EUROPACIFIC Logistika d.o.o., Ankaranska cesta 5, 6000 Koper, Slovenia; registration no. 9271619000; VAT SI77589483; tel. +386 5 6626 380; fax +386 5 6626 384; e-mail info@europacific.com.

Data protection contact: Patricija (HR), via info@europacific.com.

This policy covers the myEuropacific web portal (myeuropacific.com), the myEuropacific mobile apps for Android and iOS, and the myEuropacific connectors for AI assistants. It complements the general Europacific Privacy Policy at www.europacific.com/en/legal/privacy, which covers our website and logistics services; the two use the same core rules.

• Account data: name, business e-mail, phone number, company and role, login and sign-in history.
• Shipment data: position folders (PF), containers, bills of lading, milestones, customs status and the documents shared with you.
• Communication: messages and e-mails you exchange with our operators.
• Mobile apps only: push notification token, device platform and app language; crash diagnostics if enabled. We do not collect location, contacts, photos or advertising IDs.
• Usage analytics (only with your consent): pages viewed, clicks, device and browser data, IP address and session recordings of your use of the portal, via PostHog.
• "Chat with Roket": the questions you type and the answers. Please do not enter sensitive personal data (e.g. health data, ID numbers) in the chat.
• AI connectors: when you connect an AI assistant to myEuropacific, we process your requests and return only the shipment data your account may see. The AI assistant provider processes your conversation under its own privacy policy.

• To provide our logistics services and the portal/apps under the contract with you or your company (Art. 6(1)(b) GDPR).
• To meet legal obligations, e.g. customs, tax and accounting rules (Art. 6(1)(c) GDPR).
• For our legitimate interests in information security, fraud and abuse prevention and service improvement (Art. 6(1)(f) GDPR).
• Usage analytics and session recording: only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in the cookie settings.
• Push notifications: only if you allow them on your device; you can switch them off at any time in the app or device settings.

Our authorised staff; processors that host and operate the service (Emergent Labs managed cloud for hosting and database, Cloudflare for content delivery and security, Microsoft 365 e-mail, PostHog Inc. for usage analytics, OpenAI for the "Chat with Roket" answers, SeaRates and Terminal49 for container tracking lookups, Google Firebase and Apple Push Notification service for push messages); carriers, ports, customs and other state authorities where needed to carry out your shipment or required by law. We never sell your data and do not use it for advertising.

Some processors (Microsoft, Google, Apple, Cloudflare, PostHog – US servers –, OpenAI, Terminal49) may process data in the United States or other third countries. Such transfers rely on the EU-US Data Privacy Framework where the provider is certified, otherwise on the European Commission's standard contractual clauses.

All data is encrypted in transit (HTTPS/TLS). Each user sees only their own company's and linked group companies' shipments. App sessions use short-lived tokens kept in the device's secure storage and can be revoked; document links expire after 5 minutes.

• Account data: while your account is active and up to 12 months after closure.
• Contract, shipment, invoice and accounting records: 10 years after the contract is fulfilled, as for all Europacific services.
• Customs records: at least 3 years, longer where customs law requires.
• Data on identified fraud or abuse: only as long as necessary to prevent fraud and abuse, reviewed at least annually and deleted no later than 5 years after the last incident, unless needed for legal claims.
• Longer only where needed for legal proceedings.

Necessary cookies and local storage (sign-in session, language, security) are always active. PostHog analytics cookies and session recording are used only if you accept them in the cookie banner; you can change your choice at any time. We do not use advertising cookies.

You may request access, rectification, erasure, restriction, data portability, and object to processing based on legitimate interest. Write to our data protection contact via info@europacific.com or EUROPACIFIC Logistika d.o.o., Ankaranska cesta 5, 6000 Koper. We reply within one month (extendable by two months in complex cases; we will tell you why).

Account deletion: at myeuropacific.com/delete-account or in the app (Settings → Delete account). Records we must keep by law are retained as stated in section 7.

Informacijski pooblaščenec Republike Slovenije (Information Commissioner), Dunajska cesta 22, 1000 Ljubljana; gp.ip@ip-rs.si; +386 1 230 97 30; www.ip-rs.si.

We may update this policy; the date above shows the current version. Material changes are announced in the portal or app.