Cookie Policy

This Cookie Policy (the "Policy") describes how cookies and similar technologies are used on the website operated under the trading brand "Premium Auto Bid" (the "Platform" or the "website"). It explains what these technologies are, which categories we use, the purpose and typical duration of each, the legal basis on which we rely, and the choices available to you to accept, refuse or withdraw your consent.

The Platform is operated by Premium Logistics SHPK, a limited liability company (shoqëri me përgjegjësi të kufizuar) organised under the laws of the Republic of Albania, with NUIS/NIPT M53004202C, registered with the National Business Center (Qendra Kombëtare e Biznesit, QKB), with its registered office at Rruga "Dubai", Lagjia nr. 2, cadastral zone 2066, property no. 89/38, 4-storey building, 2nd floor, Entrance 1, Kamëz, Tirana, Albania. In this Policy, "we", "us", "our" and "the Company" refer to Premium Logistics SHPK acting as the data controller for processing carried out through cookies on the Platform.

This Policy is effective from 4 June 2026 and was last updated on 4 June 2026. It applies to all visitors and users of the Platform across the markets we serve, namely Albania, Kosovo, North Macedonia and Montenegro. It should be read together with our Privacy Policy, which describes more broadly how we process personal data, the rights available to you, and our retention practices.

Premium Auto Bid is an independent vehicle sourcing, bidding and import-support platform that helps customers discover Copart auction vehicles, place bids on Copart in real time through the Copart API after identity verification, Member Terms acceptance and deposit approval, and coordinate purchase, transport, customs and import support. This Policy addresses only the use of cookies and similar technologies; it does not itself govern the auction, bidding, deposit or logistics services, which are described in their respective terms and policies.

Premium Auto Bid is not owned by, operated by, endorsed by, or officially affiliated with Copart, Inc. Copart and the Copart logo are trademarks of Copart, Inc. Premium Auto Bid places customer bids on Copart in real time through the Copart API; it is an independent platform and not an official Copart partner. The specific sample vehicle listings shown on the Platform are clearly labelled demonstration data, are not real Copart lots and are not biddable. Nothing in this Cookie Policy should be read to suggest any partnership or affiliation with Copart, Inc.

A cookie is a small text file that a website asks your browser to store on your device (computer, tablet or mobile phone) when you visit. When you return to the same website, or visit another website that recognises the cookie, the information stored can be read so that the website can, for example, remember your preferences, keep you signed in, or measure how the website is used.

Alongside cookies, websites commonly use other technologies that perform similar functions. In this Policy, references to "cookies" should be understood to include these similar technologies unless we state otherwise. They include, in particular:

• Local storage and session storage: mechanisms provided by your browser that allow small amounts of data to be stored on your device, for example to retain interface settings or temporary state.
• Pixels, tags and web beacons: tiny elements embedded in a page that can register that the page or a resource has loaded, sometimes used together with cookies for measurement.
• Software development kits and similar device identifiers: where applicable, components that allow a service to recognise a session or device for functional or analytics purposes.

First-party and third-party cookies

Cookies may be set by the Platform itself ("first-party cookies") or by a third-party service whose functionality is loaded on a page, such as an analytics provider ("third-party cookies"). We seek to keep the use of third-party cookies limited and proportionate, and we describe the third parties we may rely on in the section on third-party analytics below.

Session and persistent cookies

A "session" cookie exists only for the duration of your browsing session and is deleted when you close your browser. A "persistent" cookie remains on your device for a defined period or until you delete it, so that it can be read on future visits. The durations stated in this Policy are typical maximum lifetimes; actual lifetimes may be shorter, and you can delete cookies at any time using your browser controls.

We use cookies and similar technologies for a limited set of clearly defined purposes, which are:

• To make the Platform work: enabling core functions such as page navigation, security, load balancing and maintaining the state of a session so that the website behaves reliably.
• To respect your choices: remembering preferences you have expressed, in particular your language and locale selection, so that you do not have to set them again on each visit.
• To understand and improve usage: measuring, in aggregate, how visitors find and use the Platform so that we can diagnose problems and improve content, structure and performance.
• To record your consent: storing your cookie preferences so that we can apply them and demonstrate, if asked, the basis on which non-essential cookies were used.

We do not use cookies to build advertising profiles, we do not sell information collected through cookies, and we do not use cookies to make automated decisions that produce legal or similarly significant effects about you.

We group the cookies and similar technologies used on the Platform into the four categories described below. For each category we explain its purpose, give representative examples, and state typical durations. Strictly necessary cookies are always active because the Platform cannot function properly without them; all other categories are used only with your consent.

4.1 Strictly necessary cookies

These cookies are essential to provide the Platform and the services you have requested. They cannot be switched off through our consent controls because the website would not work correctly without them. They are typically used to:

• Maintain the integrity and continuity of your browsing session and, where you sign in, keep you authenticated as you move between pages.
• Support security functions, such as detecting abusive or fraudulent activity and protecting submitted forms against cross-site request forgery.
• Balance load across our infrastructure and route requests so the website remains available and responsive.
• Store your cookie consent choices so that we can honour them and avoid asking you repeatedly.

Typical duration: most strictly necessary cookies are session cookies that expire when you close your browser. Cookies that record your consent are persistent and are typically retained for up to twelve (12) months so that your preferences continue to apply.

4.2 Functional cookies (including language and locale preference)

Functional cookies allow the Platform to remember choices you make and to provide enhanced, more personalised features. They are used with your consent and are not essential to the basic operation of the website. They are typically used to:

• Remember your language and locale preference (for example Albanian or English) so that content is shown in your chosen language on subsequent visits.
• Retain interface preferences such as layout or display settings you have selected.
• Remember non-sensitive details you have entered to avoid asking you to re-enter them within a reasonable period.

Typical duration: functional cookies are generally persistent and are typically retained for up to twelve (12) months, after which the preference is re-established on your next interaction.

4.3 Analytics and performance cookies

Analytics and performance cookies help us understand how visitors interact with the Platform by collecting information in an aggregated form. They are used with your consent. Where our analytics configuration permits, we apply measures such as IP truncation/anonymisation and limited retention to reduce the data collected. They are typically used to:

• Count visits and traffic sources so we can measure and improve the performance of the Platform.
• Understand which pages are most and least visited and how visitors move through the website.
• Detect and diagnose errors, slow pages and other technical problems so we can fix them.

Typical duration: analytics cookies are usually persistent, with lifetimes ranging from the end of the session up to a maximum of approximately twenty-four (24) months, depending on the specific cookie and provider settings.

4.4 Preference cookies

Preference cookies store optional settings that tailor your experience beyond core functionality, such as remembering that you have dismissed a notice or how you prefer certain non-essential elements of the Platform to be displayed. They are used with your consent. Typical duration: preference cookies are generally persistent and are typically retained for up to twelve (12) months.

Because the Platform is under active development and our analytics configuration may change, the specific cookie names, providers and exact lifetimes may vary over time. The categories, purposes and maximum durations described above govern, and we will update this Policy if the categories of cookies we use change materially.

Our use of cookies is subject to Albanian Law no. 9887 dated 10.03.2008 "On the Protection of Personal Data" (as amended) and, where applicable, the EU General Data Protection Regulation (GDPR). The independent supervisory authority for data protection in Albania is the Information and Data Protection Commissioner (IDP).

The legal basis on which we rely depends on the category of cookie:

• Strictly necessary cookies are used without your consent because they are essential to deliver the Platform and the services you have requested. Where these cookies involve the processing of personal data, we rely on our legitimate interest in operating a secure and functioning website and, where relevant, on the necessity of processing to provide the service you have asked for.
• Functional, analytics/performance and preference cookies are non-essential and are used only on the basis of your prior, freely given, specific, informed and unambiguous consent, expressed through an affirmative action.

Where personal data collected through cookies is further processed, that processing is carried out in accordance with our Privacy Policy and applicable data-protection law. We do not use non-essential cookies until you have given consent, and consent can be refused or withdrawn at any time without detriment to the core functionality of the Platform.

By selecting the option to accept non-essential cookies through our consent controls, you consent to the use of the categories you have accepted. If you only continue to use strictly necessary cookies, the non-essential categories remain inactive. Your consent choices are themselves recorded by a strictly necessary cookie so that we can apply and evidence them.

You are in control of non-essential cookies and can accept, refuse or change your choices at any time. You can do so both through the controls we provide on the Platform and through your browser settings.

On-site controls

1. When you first visit the Platform, you can choose whether to accept or refuse non-essential cookies through the consent notice presented to you.
2. You can revisit and change your preferences at any later time using the cookie settings made available on the Platform.
3. Withdrawing consent stops the future use of the relevant non-essential cookies; it does not undo processing that was lawfully carried out before withdrawal.

Browser controls

Most web browsers allow you to view, manage, block and delete cookies. The exact steps vary by browser, but you can usually find these controls within the browser's settings or preferences menu, under headings such as "Privacy", "Cookies" or "Site data". Through your browser you can typically:

• See which cookies are stored and delete them individually or all at once.
• Block all cookies, block third-party cookies only, or allow cookies only from sites you visit.
• Set the browser to delete cookies automatically when you close it, or to warn you before a cookie is stored.
• Use a private or incognito browsing mode, which generally clears cookies when the session ends.

If you block or delete strictly necessary cookies through your browser, parts of the Platform may not work properly: for example, you may be unable to stay signed in, complete secure forms, or have your language preference remembered. Blocking non-essential cookies will not prevent you from browsing the public pages of the Platform.

Subject to your consent, we may use one or more third-party analytics providers to help us measure and improve how the Platform performs. These providers may set their own cookies or use similar technologies to collect information in an aggregated form about how the Platform is used, on our behalf and according to our configuration.

Where we use such providers:

• We aim to configure analytics to limit the data collected, for example by enabling IP anonymisation/truncation and setting conservative retention periods where these options are available.
• We do not permit analytics providers to use the data collected through the Platform for their own independent advertising purposes through this configuration.
• Any transfer of personal data outside Albania or the European Economic Area is carried out only where an appropriate legal basis and safeguards exist, as further described in our Privacy Policy.

Third-party providers are independent controllers or processors for their own technologies and operate under their own privacy and cookie notices. We encourage you to review those notices to understand how each provider processes information. Because our configuration may evolve, we will keep this Policy aligned with the analytics technologies actually in use.

"Do Not Track" (DNT) is a setting available in some web browsers that, when enabled, sends a signal to websites expressing a preference not to be tracked. There is currently no uniform industry or legal standard that defines how websites must respond to DNT signals.

Because our use of non-essential cookies is in any event based on the consent you give through our on-site controls, our handling of non-essential cookies follows your consent choices rather than a separate DNT setting. If a widely accepted standard for responding to DNT or similar browser-level signals is adopted in our markets, we will review this approach and update this Policy accordingly. In all cases you can refuse or withdraw consent to non-essential cookies as described above.

We may update this Cookie Policy from time to time to reflect changes in the cookies and similar technologies we use, in the services we provide, or in applicable law and regulatory guidance. When we make changes, we will revise the "Last updated" date at the top of this Policy.

Where a change materially affects the categories of non-essential cookies we use or the basis on which we use them, we will take reasonable steps to bring the change to your attention and, where required, ask for your consent again before the relevant cookies are used. Your continued use of the Platform after an update takes effect, together with your recorded consent choices, governs the cookies that are applied.

If you have any questions about this Cookie Policy, about the cookies used on the Platform, or about how we process personal data collected through cookies, or if you wish to exercise your data-protection rights, you can contact us using the details below.

• Data protection / privacy enquiries: privacy@premlogistics.com
• General enquiries: info@premlogistics.com
• Legal enquiries: legal@premlogistics.com
• Operator: Premium Logistics SHPK (trading as Premium Auto Bid), NUIS/NIPT M53004202C
• Registered office: Rruga "Dubai", Lagjia nr. 2, cadastral zone 2066, property no. 89/38, 4-storey building, 2nd floor, Entrance 1, Kamëz, Tirana, Albania
• Website: premlogistics.com

You also have the right to lodge a complaint with the Information and Data Protection Commissioner (IDP) of the Republic of Albania if you believe that our processing of your personal data does not comply with applicable law. This Policy is governed by the laws of the Republic of Albania, and the competent courts of Tirana have jurisdiction over any dispute arising from it, without prejudice to any mandatory rights you may have under applicable law.