Legal
Data Processing
Detailed information about how we process and protect your personal data.
Processing Activities
| Data Type | Purpose | Legal Basis | Retention |
|---|---|---|---|
| Name, email, phone | Management of enquiries and bookings | Performance of contract | Duration of relationship + 10 years |
| Postal address | Delivery of transport/moving service | Performance of contract | Duration of relationship + 10 years |
| Driving licence, ID/Passport | Vehicle rental (identity verification) | Legal obligation / Contract | Duration of rental + 10 years |
| Photos of furniture/items | Assessment of recycling/transport service | Consent | 90 days after service completion |
Technical and Organisational Measures
- Data encryption in transit (TLS/SSL)
- Role-based access control
- Regular encrypted backups
- Internal information security policies
- Staff training in data protection
- Access monitoring and logging
Sub-processors
| Provider | Service | Location |
|---|---|---|
| Vercel Inc. | Website hosting | USA (with standard contractual clauses) |
| Supabase | Database and request handling | Zurich, Switzerland |
| Gmail / Google Workspace (Google LLC) | Email delivery | USA (with standard contractual clauses) |
Data Breach Procedure
In the event of a data breach affecting personal data, Baipor Group GmbH will notify the competent data protection authority within 72 hours and, if there is a high risk to the rights and freedoms of data subjects, will notify them without undue delay.
See also our Privacy Policy