1. Applicability
The General Data Protection Regulation applies where BirExpress S.R.L. processes personal data in the context of its European business activities and its private-use driver workflow.
2. Lawfulness, fairness, and transparency
BirExpress S.R.L. processes personal data on identified legal grounds and provides this public legal information through birexpress.ro so users and partners can understand the general handling of data in the BirExpress Driver environment.
3. Purpose limitation and data minimization
Data is processed only for defined business purposes such as account access, route execution, dispatch coordination, compliance, security, and service maintenance. The company aims to limit collection to information relevant for those purposes.
4. Accuracy
Users and company administrators should keep account and operational data accurate. Corrections may be requested through the company's internal contact channels.
5. Storage limitation
Personal data is retained according to operational necessity, legal obligations, audit needs, and internal retention standards applicable to transport and business records.
6. Integrity and confidentiality
Access controls, credential-based authentication, and internal authorization measures are used to reduce the risk of unauthorized access or disclosure.
7. Data subject rights
Where applicable, data subjects may request:
- Access to their personal data.
- Rectification of inaccurate data.
- Erasure where retention is no longer justified.
- Restriction or objection to certain processing.
- Data portability where the legal conditions are met.
- Information about the handling of a complaint with a supervisory authority.
8. Processors and third parties
Where BirExpress S.R.L. uses third-party service providers, processing should be governed by appropriate contractual, confidentiality, and data protection safeguards proportionate to the service.
9. Cross-border data handling
Because transport operations may involve multiple European jurisdictions, relevant data may be accessed or processed across borders where operationally necessary. Appropriate safeguards should be applied when required by law.
10. Contact and complaints
Users seeking to exercise G.D.P.R-related rights should contact BirExpress S.R.L. through the official company communication channels made available to them by the company or their business contact.