Legal
Privacy Policy
1. Data Controller
The data controller for your personal data is:
2. Data We Collect
We may collect the following types of personal data:
- Account data: name, email, phone, address
- Cookie data: preferences, session
- Support data: messages, requests, attachments
- Booking data: dates, vehicle, identity documents, driving licence
3. Purposes of Processing
- Delivery of the contracted service (transport, moving, rental, recycling)
- Management of bookings and payments
- Customer communication (responding to enquiries, follow-up)
- Compliance with legal obligations
- Direct marketing (only with prior consent)
4. Legal Basis
- Consent: when you provide your data voluntarily (Art. 6(1)(a) GDPR)
- Performance of contract: to provide the requested services (Art. 6(1)(b) GDPR)
- Legitimate interest: to improve our services and prevent fraud (Art. 6(1)(f) GDPR)
- Legal obligation: to comply with applicable legal requirements (Art. 6(1)(c) GDPR)
5. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes described:
- Account data: while the business relationship is active + legal retention period
- Booking data: 10 years (Swiss tax obligations)
- Support data: 3 years from the last communication
- Cookie data: maximum 26 months
6. Recipients and Data Processors
Your data may be shared with the following service providers:
- Website hosting: Vercel
- Database and request handling: Supabase (data centre in Zurich, Switzerland)
- Email: Gmail / Google Workspace (Google LLC)
7. International Transfers
Some of our providers may be located outside the European Economic Area (EEA) or Switzerland. In such cases, we ensure that appropriate safeguards (standard contractual clauses, adequacy decisions) are in place to protect your data.
8. Your Rights
You have the following rights regarding your personal data:
- Right of access: request a copy of your data
- Right of rectification: correct inaccurate data
- Right of erasure: request the deletion of your data
- Right to object: object to the processing of your data
- Right to data portability: receive your data in a structured format
- Right to restriction: restrict the processing of your data
9. How to Exercise Your Rights
To exercise any of your rights, send an email to kontakt@baiportransport.com stating your request and attaching a copy of your identity document. We will respond within 30 days.
10. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. These measures include encryption, access control and regular backups.
11. Minors
Our services are not directed at persons under 18 years of age. We do not knowingly collect personal data from minors. If we discover that we have collected data from a minor, we will delete it immediately.
12. Changes to This Policy
We reserve the right to update this privacy policy. Changes will be published on this page with a new update date. We recommend reviewing it periodically.
13. Privacy Contact
For any privacy-related enquiries, you can contact us at:
See also our Data Processing & Frequently Asked Questions