Privacy Policy
I. Data Controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) is:
SFS Express Logistics & Trading GmbH
Palmerstr. 6-8
A-2351 Wiener Neudorf
Austria
Email: dispo@sfs-express.com
Managing Director: Zekeriya Yurteri
SFS Express Logistics & Trading GmbH
Palmerstr. 6-8
A-2351 Wiener Neudorf
Austria
Email: dispo@sfs-express.com
Managing Director: Zekeriya Yurteri
II. General Information on Data Processing
The protection of your personal data is important to us. We process personal data in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). Processing follows the principles of Art. 5 GDPR: lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, and integrity and confidentiality.
1. Scope of Personal Data Processing
We collect and process personal data only insofar as this is necessary for the fulfilment of contracts or the provision of our services. After contract completion, processing only takes place with your consent.
2. Legal Basis
The processing of personal data is based on the following legal grounds:
- Art. 6(1)(a) GDPR: Consent of the data subject
- Art. 6(1)(b) GDPR: Contract performance or pre-contractual measures
- Art. 6(1)(c) GDPR: Compliance with legal obligations
- Art. 6(1)(f) GDPR: Legitimate interests of the company
- Art. 6(1)(a) GDPR: Consent of the data subject
- Art. 6(1)(b) GDPR: Contract performance or pre-contractual measures
- Art. 6(1)(c) GDPR: Compliance with legal obligations
- Art. 6(1)(f) GDPR: Legitimate interests of the company
3. Data Deletion and Storage Duration
Personal data is deleted as soon as the purpose of storage no longer applies. Storage beyond this may occur where required by law. Data is blocked or deleted when a statutory retention period expires, unless further storage is necessary for contract fulfilment.
4. Data Processing for Transport and Logistics Services
In the course of our services, we process: shipping and transport information, contact details of senders and recipients, signatures, account data, tax information, and location data. Data is shared with customs and tax authorities in transit and destination countries where legally required. International transfers are carried out on the basis of EU Standard Contractual Clauses.
III. Website Provision and Log Files
When visiting our website, the following data is automatically collected: browser type, operating system, internet service provider, IP address, date and time of access, and referring website. This data is stored in log files and is not combined with other personal data. Processing is based on Art. 6(1)(f) GDPR to ensure the operation of the website.
IV. Contact Form
When you use our contact form, the data you enter (name, email address, company, subject, message) is processed for the purpose of handling your enquiry. Processing is based on Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). Your data is deleted after your enquiry has been processed, unless statutory retention obligations apply.
V. Rights of Data Subjects
You have the following rights under the GDPR:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to notification (Art. 19 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent
- Right against automated decision-making (Art. 22 GDPR)
- Right to lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at)
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to notification (Art. 19 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent
- Right against automated decision-making (Art. 22 GDPR)
- Right to lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at)
VI. Disclosure to Third Parties
Your data is processed by us and by contracted service providers who are bound by the GDPR. No data is sold. Disclosure only takes place on the basis of legal obligations or official orders.
VII. Data Security
We implement technical and organisational measures in accordance with Art. 32 GDPR to protect your data against loss, alteration, theft, and unauthorised access.
VIII. Children and Minors
We do not knowingly process personal data of individuals under 16 years of age unless legally required. If such data is collected without parental consent, it will be deleted immediately.
IX. Hyperlinks
We accept no responsibility for the content or data protection practices of external linked websites. We recommend reviewing the privacy policies of external websites.
