1 Purpose
1.1 Thank you for choosing Bahn Express. This privacy policy explains how we collect, use, share, and protect your personal data when you use our Services.
1.2 We at Bahn Express (hereinafter "Bahn Express" or "us" or "we" or “our”) are committed to your privacy. We go to the best possible extent to protect your data and keep it private and secure when you use our Services.
1.3 Our Service utilizes a pool of freelance and light entrepreneurs as drivers to transport vehicles internationally. Data related to assignments, such as schedules and compensation, is shared with drivers who are free to accept tasks without a minimum or maximum limit.
1.4 For the purposes of this Privacy Policy, "Service" refers to the comprehensive suite of operations provided by our company, which includes the international transportation and relocation of vehicles, the facilitation of driving assignments for drivers, and the delivery of cars to customers. This encompasses all related logistical and operational aspects necessary to execute these activities efficiently and effectively.
1.5 Data we may collect within the scope of our Service are with the purpose of providing best solutions, personalized experience and to continuously improve our Services. This privacy policy applies to the collection, use, and disclosure of personal data for [customer and driver account management], marketing and sales of Services, customer and driver agreements and when you use our services or visit our website.
2 What Information Do We Collect?
2.1 We collect data to provide our Services to you. Primarily we use the information you have provided to us. Additionally, we may utilize our own data to assist us in this process, provide insights, and extend offers from our third-party service providers.
2.2 Customer Information: We collect and process personal information such as names, emails, and phone numbers of our customers, who primarily consist of car dealerships and car resellers. This information is essential for facilitating communication, primarily through WhatsApp, and managing orders via our platform. Customer data is stored in a third-party platform, where information of car dealerships is maintained.
2.3 Driver and Transport Manager Information: For drivers and transport managers, we collect names, phone numbers, email addresses, and birth dates. This information is essential for facilitating communication, primarily through WhatsApp or our platform. Occasionally, we may need to collect social security, and passport copies for specific purposes for example when car dealerships request driver identification.We collect personal data from you when you utilize our Services:
(a) Basic information, such as name and contact details, e.g. email address and phone number;
(b) information relating to our relationship, such as Services and order details, contract information, payment details, billing information and your relation to a company you represent;
(c) marketing and communication data e.g., your interests and preferences, selections, marketing permissions and prohibitions;
(d) your interaction and related records such as correspondence, your comments, or responses to our surveys;
(e) personal data generated while visiting our website through cookies or otherwise, and how you use the website;
(f) driver location data collected through tracking devices used for operational purposes;
(g) other travel and logistics information, including flight arrangements for light entrepreneurs, shared with relevant parties to facilitate transportation Services; and
(e) other data, which is based on your consent and defined in detail on a case-by-case basis.
We may collect and use aggregated data for any purpose, where individual person is not identified from e.g., statistical data collected in connection with the provision of Services.
3 Marketing and Analytics
3.1 We may market and inform you about our Services. We may combine the personal data collected about you from publicly available sources, and from our different interactions with you. Furthermore, your personal data may also be used for market research and customer surveys. Processing of personal data is based on our legitimate interest to collect and analyse relevant information to better understand our customers and develop relevant services.
3.2 Based on your consent we may store and access information, including personal data, on your device in order to create personalized ads profile and deliver relevant content at the website (e.g., information and ads about the Services) as well as to measure the effectiveness of the advertising. Respectively, your personal data may also be processed to develop and improve the website, or for developing our own or our partners’ services.
4 Purpose for Processing of Personal Data
4.1 The purposes for which we process your data are:
(a) To provide and keep you updated on our transportation Services;
(b) To provide customer support;
(c) To gather analysis or valuable information so that we can improve our Service;
(d) To ensure the security of vehicles during transportation, drivers may be equipped with location-tracking devices to monitor the location of vehicles as necessary; and
(e) To provide you with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information.
4.2 We may process your personal data also for specific purposes if you have consented to such processing
5 Legal basis for processing Personal Data
5.1 We process your personal data for the performance of an agreement to provide our Services to you, or our processing is based on legitimate interest in providing quality services to our customers, to improve our Services, and to comply with legal obligations. For direct marketing purposes, the legal basis for processing personal data is consent, which you may cancel any time.
5.2 The processing of location data is based on the necessity of executing our contractual obligations. This data is used solely for operational purposes, including tracking vehicle locations to manage logistics and ensure timely delivery. We do not use this data for any other purpose without further consent.
6 Use of Cookies
6.1 When you visit our website, cookies and other similar technologies (“Cookies”) may be used to automatically collect information about your visit. It is possible for you to accept or refuse the use of the Cookies.
6.2 Cookies are files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyse our Service.
6.3 If the Cookies are collected, you have the option to disable them through the cookie banner or clear your Cookie history for all visited websites via your browser settings.
6.4 Accepting Cookies will enable you to get the best from our website. If you refuse Cookies, some aspects of the website may not work on your device, and you may not be able to access all areas thereof.
7 Data Sharing and Disclosures of Personal Data
7.1 We may share your personal data with third-party service providers who assist us in providing our Services. These may include intermediaries who assist us in finding suitable light entrepreneurs to facilitate our Services. We may also disclose your personal data to comply with legal obligations or protect our legal interests.
7.2 Customer and driver information may be shared with international car dealerships as necessary. International dealerships may require confirmation from both the seller and the buyer.
7.3 Location data collected is stored securely and is accessible only to authorized personnel who require this information to fulfil their job responsibilities. This data can only be checked in real-time and is only checked when necessary for example, when there is a good reason to believe that the car is being used against instructions or is missing. We ensure that this data is handled in compliance with our privacy practices and any applicable legal requirements.
8 Transfer of Personal Data Outside of the EU or EEA
8.1 The data we collect is processed by us within the European Union (EU)/European Economic Area (EEA) and in third party data processing facilities within the EU/EEA.
8.2 Some of our service providers may have access or are located outside the EU/ EEA and their processing of your personal data will involve a transfer of data outside of EU/EEA. We will take necessary steps to provide appropriate safeguards for international data transfers and to the extent necessary implement supplementary measures for protection of personal data as required by applicable laws. Personal data is transferred only to countries that have been deemed to provide an adequate level of protection of personal data, and where not we will implement the standard contractual clauses and implement necessary technical, organisational, or contractual supplementary measures to ensure that personal data has the same protection as in EU/EEA.
9 Retention of Personal Data
9.1 We will retain your personal data only for as long as necessary to provide Services to you, and for one (1) year after that, or as long as required by law as different data categories have different retention periods. After that, we will securely dispose of your personal data.
9.2 To comply with our data minimization practices, personal information such as passport copies and social security numbers are securely deleted once these are no longer needed for their specific purpose. Other personal data may be retained as required for continued use according to what is stated above.
10 Your Rights
10.1 You have certain rights regarding your personal data:
10.1.1 Right to Access: You have the right to access your personal data that we hold.
10.1.2 Right to Rectify Personal Data: You have the right to request that we correct any inaccurate or incomplete personal data that we hold.
10.1.3 The Right to Object to the Processing: You have the right to object to the processing of your personal data for certain purposes.
10.1.4 The Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
10.1.5 The Right to Be Forgotten: You have the right to request that we erase your personal data under certain circumstances.
10.1.6 The Right to Restriction of the Processing: You have the right to request that we restrict the processing of your personal data under certain circumstances.
10.1.7 The Right to Give and Withdraw Your Consent: You have the right to give or withdraw your consent for the processing of your personal data.
11 Data Security
11.1 We use the stringent technical measures and best practices within the Platform to ensure the confidentiality, integrity, and availability of data stored within our Service.
11.2 [Our platform runs on a web application that requires login information. Users can review, correct, and delete their personal data or accounts at any time. We ensure the security of all data transmitted and stored within our systems using industry-standard encryption methods.]
11.3 Hosting and Data Transmission Security: Platform is hosted on international cloud hosting service provider.
11.4 Data Storage and Encryption: Data within the Platform is integrated with CRM, which collects data and is integrated into the platform. All data is encrypted to ensure data integrity and availability.
12 Service Providers
12.1 We may use third parties to facilitate our Service ("Service Providers"), to provide the Service on our behalf, to perform Service-related services or to assist us in analysing how our Service is used.
12.2 These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
13 Data Security
13.1 Although our good faith efforts to store your data in a secure operating environment that is not available to the public, please remember that unfortunately no data transmission or storage is 100% risk free. You provide your personal data at your own risk, and we cannot guarantee the absolute security of your data. In the unfortunate case of a security breach that that endangers your privacy or data we will inform you as well as the relevant authorities, as required by law. We may also temporarily shut down services to protect the personal data.
14 Changes to the Privacy Policy
14.1 We may update this privacy policy from time to time. We will notify you of any significant changes by posting a notice on our website or by sending you an email.
15 Contact Us
15.1 If you have any concerns or questions about this privacy policy or our use of your personal data, please feel free to get in touch with us at atte@bahnexpress.fi.
15.2 This Privacy Policy has been updated on 27 February 2025.