Privaatsuspoliitika

PRIVAATSUSPOLIITIKA

This document explains how DAGO Express GmbH, Karl-Marx-Straße 193, 15230 Frankfurt (Oder), Saksamaa (Vastutav tootleja) processes isikuandmed.

For questions regarding data protection, please contact the Vastutav tootleja by email:
eu-privacy@dagoexpress.com

I. Definitions

Vastutav tootleja – within the meaning of art. 4(7) GDPR, the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the eesmargid and means of the tootlemine of isikuandmed. In this document, the Vastutav tootleja is: DAGO Express GmbH, Karl-Marx-Straße 193, 15230 Frankfurt (Oder), Saksamaa

Isikuandmed – information relating to an identified or identifiable natural person, sealhulgas IP address, location data, online identifier, and information collected through kupsised.

Policy – this Privacy Policy.

GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the tootlemine of isikuandmed.

EMP – European Economic Area (EU countries + Iceland, Liechtenstein, Norway).

Veebileht – the veebileht operated by the Vastutav tootleja at https://dagoexpress.com

Kasutaja – any person who visits the veebileht, uses the Vastutav tootleja’s services, or contacts the Vastutav tootleja.

II. Tootlemine of Isikuandmed – Purposes and Legal Bases

The Vastutav tootleja conducts ongoing risk analyses to ensure that isikuandmed is processed securely – in particular, that only authorised persons have juurdepääs to the data.

1. Tootlemine of Customer Data

Your isikuandmed is processed for the following eesmargid:

Booking and provision of courier/forwarding services – oiguslik alus: art. 6(1)(b) GDPR;
Use of products and services offered – oiguslik alus: art. 6(1)(b) GDPR;
Performance of concluded lepings – oiguslik alus: art. 6(1)(b) GDPR;
Issuing and storing invoices and accounting documents – oiguslik alus: art. 6(1)(c) GDPR;
Establishment, exercise or defence of legal claims – oiguslik alus: art. 6(1)(f) GDPR;
Customer service and responding to enquiries – oiguslik alus: art. 6(1)(f) GDPR;
Handling kaebuss – oiguslik alus: art. 6(1)(f) GDPR;
Direct marketing of own products and services – oiguslik alus: art. 6(1)(f) GDPR or art. 6(1)(a) GDPR;
IT infrastructure management and system security – oiguslik alus: art. 6(1)(f) GDPR.

2. Use of the Veebileht

Isikuandmed of all veebileht kasutajas is processed:

for the provision of electronic services – oiguslik alus: art. 6(1)(b) GDPR;
for analytical and statistical eesmargid – oiguslik alus: art. 6(1)(f) GDPR;
for the establishment and defence of legal claims – oiguslik alus: art. 6(1)(f) GDPR.

The provision of isikuandmed is generally voluntary, but in some cases necessary for the conclusion of a leping, the provision of courier services, or the issuance of accounting documents.

3. Correspondence and Telephone Contact

In the case of correspondence by email or post, the isikuandmed contained therein is processed exclusively for the eesmark of communication and handling the matter. Oiguslik alus: art. 6(1)(f) GDPR.

4. Business Contacts

In the course of its business activities, the Vastutav tootleja also collects isikuandmed during business meetings or when exchanging business cards. Oiguslik alus: art. 6(1)(f) GDPR.

III. Kupsised

1. What are Kupsised?

Kupsised are small text files stored on the kasutaja’s device. They contain information such as session identifier, kasutaja settings, language preferences, visit time, and IP address.

2. Types of Kupsised

Necessary – enable the proper functioning of the veebileht.
Functional – store kasutaja settings and preferences.
Analytical – enable monitoring of veebileht traffic (e.g. Google Analytics).
Marketing – enable the display of personalised advertising (e.g. Google Ads, Facebook Ads).
Social Media – enable integration with social platforms.

3. Third-Party Providers

Google (Analytics, Ads, GTM, reCAPTCHA), Facebook/Meta, Microsoft (Advertising, Clarity), Cloudflare, Sentry, and other partners.

4. Nousolek Management

The kasutaja can change browser settings at any time to block or delete kupsised, as well as withdraw nousolek via the cookie banner interface.

5. Transfer Outside the EMP

Data from kupsised may be transferred to third countries only on the basis of appropriate legal safeguards such as Standard Lepingual Clauses (SCCs) or the EU-US Data Privacy Framework.

IV. Retention Periods for Isikuandmed

The Vastutav tootleja stores isikuandmed only for as long as necessary:

Leping and service data: for the duration of the leping, then 3-6 years (limitation period).
Accounting and tax data: 10 years for accounting documents, 6 years for business correspondence.
Contact data and enquiries: for the time necessary for tootlemine.
Marketing data: until withdrawal of nousolek or vastuvaie.
Technical data: up to 12 months.

V. Oigused of Data Subjects

You have the right to juurdepääs, parandamine, kustutamine, piiramine of tootlemine, data ulekantavus, and vastuvaie. Where tootlemine is based on nousolek, you may withdraw it at any time. You have the right to lodge a kaebus with a jarelevalveasutus (Bundesbeauftragter für den Datenschutz und die Informationsfreiheit - BfDI).

Contact: By post: DAGO Express GmbH, Karl-Marx-Straße 193, 15230 Frankfurt (Oder), Saksamaa By email: eu-privacy@dagoexpress.com

VI. Saajad of Data

Saajad of your isikuandmed include: legally authorised institutions (tax authorities, courts), external service providers (IT, advertising, legal), transport operators, payment service providers, hosting companies, and marketing agencies.

VII. Transfer of Isikuandmed Outside the EMP

Your isikuandmed may be transferred outside the EMP. The Vastutav tootleja ensures that this is done only on the basis of lawful safeguards under Chapter V GDPR:

Adequacy decision (art. 45 GDPR)
Standard Lepingual Clauses (art. 46 GDPR)
Binding Corporate Rules (BCRs)
Derogations for specific situations (art. 49 GDPR)

VIII. Automated Data Tootlemine

Isikuandmed may be processed automatically (sealhulgas profiling), but this does not produce legal effects. Profiling serves to improve veebileht functionality. Oiguslik alus: art. 6(1)(f) GDPR.

IX. Updates to the Privacy Policy

The Policy is regularly reviewed and updated as necessary.

Last updated: 13.01.2026

GDPR – INFORMATION CLAUSES

Below you will find detailed information clauses in accordance with art. 13 and 14 GDPR for various categories of andmesubjekts.

1. Information Clause for Customers

The Vastutav tootleja of your isikuandmed is DAGO Express GmbH, Karl-Marx-Straße 193, 15230 Frankfurt (Oder), Saksamaa.

For data protection matters: eu-privacy@dagoexpress.com

1.1 Purposes and Legal Bases for Tootlemine

Your isikuandmed is processed for the following eesmargid:

Booking and provision of courier/forwarding services – art. 6(1)(b) GDPR;
Use of products and services offered – art. 6(1)(b) GDPR;
Performance of concluded lepings – art. 6(1)(b) GDPR;
Issuing and storing invoices – art. 6(1)(c) GDPR;
Establishment, exercise or defence of legal claims – art. 6(1)(f) GDPR;
Customer service and responding to enquiries – art. 6(1)(f) GDPR;
Handling kaebuss – art. 6(1)(f) GDPR;
Direct marketing of own products and services – art. 6(1)(f) GDPR;
IT infrastructure management and system security – art. 6(1)(f) GDPR;
Archiving eesmargid – art. 6(1)(c) GDPR.

1.2 Saajad of Data

Saajad of your data include: legally authorised institutions (e.g. tax authorities, courts), external service providers (IT support, advertising, legal advice), entities involved in service provision (e.g. transport operators), payment service providers, hosting companies, and marketing agencies.

1.3 Retention Period

Accounting and tax documents: 10 years from the end of the calendar year.
Business correspondence: 6 years from the end of the calendar year.
Nousolek-based data (e.g. marketing): until withdrawal of nousolek or vastuvaie.

1.4 Oigused of Data Subjects

You have the right to juurdepääs, parandamine, kustutamine or piiramine of tootlemine, data ulekantavus, and vastuvaie to tootlemine. Where tootlemine is based on nousolek, you may withdraw it at any time. You have the right to object to the tootlemine of your data for direct marketing eesmargid at any time. You also have the right to lodge a kaebus with a jarelevalveasutus.

1.5 Requirement to Provide Data and Profiling

The provision of isikuandmed is a lepingual requirement insofar as it is necessary for the provision of courier/forwarding services. Failure to provide this data will make it impossible to conclude a leping or perform it properly. The provision of data for marketing eesmargid is voluntary. Your data is not processed automatically and is not subject to profiling.

1.6 Transfer of Isikuandmed Outside the EMP

Your isikuandmed may be transferred to third countries outside the EMP. The Vastutav tootleja ensures that any transfer outside the EMP is made solely on the basis of lawful grounds and safeguards under Chapter V GDPR (adequacy decision, Standard Lepingual Clauses, BCRs, approved codes of conduct/certifications, or derogations under art. 49 GDPR). You have the right to obtain a copy of the safeguards applied.

2. Information Clause for Business Partners

The Vastutav tootleja of your isikuandmed is DAGO Express GmbH, Karl-Marx-Straße 193, 15230 Frankfurt (Oder), Saksamaa.

For data protection matters: eu-privacy@dagoexpress.com

2.1 Purposes and Legal Bases for Tootlemine

Performance of the concluded leping – art. 6(1)(b) GDPR;
Initiation of possible cooperation – art. 6(1)(b) GDPR;
Documentation and settlement according to tax and commercial regulations – art. 6(1)(c) GDPR;
Establishment, exercise or defence of legal claims – art. 6(1)(f) GDPR;
Handling kaebuss – art. 6(1)(f) GDPR;
Direct marketing sealhulgas newsletter – art. 6(1)(f) GDPR;
Credit check – art. 6(1)(f) GDPR;
Geolocation monitoring of transport – art. 6(1)(b) and (f) GDPR;
Veebileht analysis and service optimisation – art. 6(1)(f) and (a) GDPR;
IT infrastructure management – art. 6(1)(f) GDPR.

2.2 Saajad of Data

Saajad of your data include: legally authorised institutions, external service providers (IT support, advertising, legal advice), transport operators, payment service providers, hosting companies, and marketing agencies.

2.3 Retention Period

Accounting and tax documents: 10 years.
Business correspondence: 6 years.
Geolocation data and system logs: maximum 12 months.

2.4 Oigused of Data Subjects

You have the right to juurdepääs, parandamine, kustutamine, piiramine of tootlemine, data ulekantavus, and vastuvaie. You have the right to object to direct marketing at any time. You also have the right to lodge a kaebus with a jarelevalveasutus.

2.5 Requirement to Provide Data and Profiling

The provision of data is a lepingual requirement for the conclusion and performance of the leping. The provision of data for marketing eesmargid is voluntary. Your data is not processed automatically and is not subject to profiling.

2.6 Transfer of Isikuandmed Outside the EMP

Your data may be transferred to third countries. The Vastutav tootleja ensures that this is done only on the basis of lawful safeguards under Chapter V GDPR.

3. Information Clause for Tootajad

The Vastutav tootleja of your isikuandmed is DAGO Express GmbH, Karl-Marx-Straße 193, 15230 Frankfurt (Oder), Saksamaa.

For data protection matters: eu-privacy@dagoexpress.com

3.1 Purposes and Legal Bases for Tootlemine

For leping performance (art. 6(1)(b) GDPR): - Performance of the employment leping; - Ensuring information protection; - Provision of employer’s equipment.

For compliance with legal obligations (art. 6(1)(c) GDPR and art. 9(2)(b) GDPR): - Calculation and payment of salaries; - Leping settlement (social insurance, taxes, accounting); - Health and safety obligations; - Maintenance of personnel files; - Social insurance and tax obligations.

For oigustatud huvis (art. 6(1)(f) GDPR): - Ensuring business continuity; - Establishment of claims; - Personnel management; - Ensuring security; - Work organisation.

3.2 Saajad of Data

Legally authorised bodies: social insurance institutions, tax office, employment agencies, health and safety authorities;
Works Council – according to the Works Constitution Act (Betriebsverfassungsgesetz);
Business partners – only business data (name, position, business email);
Processors: email services, hosting, IT support, legal advice, employee benefits, group insurance.

3.3 Retention Period

Establishment of claims: up to 3 years;
Accounting, tax and payroll documents: 10 years;
Other personnel and business documents: up to 6 years.

3.4 Oigused of Data Subjects

You have the right to juurdepääs, parandamine, kustutamine (right to be forgotten), piiramine of tootlemine, data ulekantavus, and vastuvaie. Where tootlemine is based on nousolek, you may withdraw it at any time. You also have the right to lodge a kaebus with a jarelevalveasutus.

3.5 Requirement to Provide Data

The provision of isikuandmed in connection with employment is a statutory requirement. Failure to provide data will make it impossible to conclude and perform the leping.

3.6 Transfer of Isikuandmed Outside the EMP

As a rule, employee data is not transferred outside the EMP. In the event of such a transfer, the Vastutav tootleja applies all obligations provided for in Chapter V GDPR.

4. Information Clause for Lepingors/Freelancers

The Vastutav tootleja of your isikuandmed is DAGO Express GmbH, Karl-Marx-Straße 193, 15230 Frankfurt (Oder), Saksamaa.

For data protection matters: eu-privacy@dagoexpress.com

4.1 Purposes and Legal Bases for Tootlemine

Performance of the concluded leping – art. 6(1)(b) GDPR;
Compliance with legal obligations – art. 6(1)(c) GDPR;
Legitimate interests (business contacts, protection of claims) – art. 6(1)(f) GDPR.

4.2 Saajad of Data

Saajad of your data are exclusively: authorised tootajad, legally authorised institutions, and sublepingors (e.g. IT support, advertising, legal services).

4.3 Retention Period

Establishment of claims: up to 3 years;
Business correspondence: 6 years;
Accounting and tax documents: 10 years.

4.4 Oigused of Data Subjects

You have the right to juurdepääs, parandamine, kustutamine, piiramine of tootlemine, data ulekantavus, and vastuvaie. You also have the right to lodge a kaebus with a jarelevalveasutus.

4.5 Requirement to Provide Data and Profiling

The provision of data is a lepingual and statutory requirement. Failure to provide data will make it impossible to conclude a leping. Your data is not processed automatically and is not subject to profiling.

4.6 Transfer Outside the EMP

Your data may be transferred to third countries. The Vastutav tootleja ensures that this is done only on the basis of lawful safeguards under Chapter V GDPR.

5. Information Clause for Kandidaadid (Recruitment)

The Vastutav tootleja of your isikuandmed is DAGO Express GmbH, Karl-Marx-Straße 193, 15230 Frankfurt (Oder), Saksamaa.

For data protection matters: eu-privacy@dagoexpress.com

5.1 Purposes and Legal Bases for Tootlemine

Conducting the recruitment process – art. 6(1)(a), (b) and (c) GDPR;
Establishment, exercise or defence of legal claims – art. 6(1)(f) GDPR;
With separate nousolek for future recruitment – art. 6(1)(a) GDPR.

5.2 Saajad of Data

Saajad of your data are exclusively: authorised tootajad, legally authorised institutions, and sublepingors (e.g. IT support, legal services).

5.3 Retention Period

For establishment of claims: up to 3 years after the end of recruitment;
With nousolek for future recruitment: 12 months after the end of current recruitment.

5.4 Oigused of Data Subjects

You have the right to juurdepääs, parandamine, kustutamine, piiramine of tootlemine, data ulekantavus, and vastuvaie. Where tootlemine is based on nousolek, you may withdraw it at any time. You also have the right to lodge a kaebus with a jarelevalveasutus.

5.5 Requirement to Provide Data and Profiling

The provision of data within the scope required by labour law (name, date of birth, education, employment history) is a statutory requirement. Failure to provide this data will make participation in recruitment impossible. Your data is not processed automatically and is not subject to profiling.

5.6 Transfer Outside the EMP

Your data may be transferred to third countries. The Vastutav tootleja ensures that this is done only on the basis of lawful safeguards under Chapter V GDPR.

6. Information Clause for the Contact Form

The Vastutav tootleja of your isikuandmed is DAGO Express GmbH, Karl-Marx-Straße 193, 15230 Frankfurt (Oder), Saksamaa.

For data protection matters: eu-privacy@dagoexpress.com

6.1 Purposes and Legal Bases for Tootlemine

Your isikuandmed is processed for the eesmark of responding to enquiries submitted via the contact form. Oiguslik alus: art. 6(1)(f) GDPR (oigustatud huvi in responding to enquiries).

6.2 Saajad of Data

Saajad of your data are exclusively: authorised tootajad, legally authorised institutions, and sublepingors (e.g. IT support, advertising, legal services).

6.3 Retention Period

Your data is stored for the time necessary to respond to the enquiry. For enquiries of a business correspondence nature, data is stored for 6 years in accordance with the German Commercial Code.

6.4 Oigused of Data Subjects

You have the right to juurdepääs, parandamine, kustutamine, piiramine of tootlemine, data ulekantavus, and vastuvaie. You also have the right to lodge a kaebus with a jarelevalveasutus.

6.5 Requirement to Provide Data and Profiling

The provision of isikuandmed (in particular name and email address) is voluntary but necessary in order to respond to your enquiry. Your data is not processed automatically and is not subject to profiling.

6.6 Transfer Outside the EMP

Your data may be transferred to third countries. The Vastutav tootleja ensures that this is done only on the basis of lawful safeguards under Chapter V GDPR.

7. Information Clause for Transport Partners (GPS Monitoring)

The Vastutav tootleja of your isikuandmed is DAGO Express GmbH, Karl-Marx-Straße 193, 15230 Frankfurt (Oder), Saksamaa.

For data protection matters: eu-privacy@dagoexpress.com

7.1 Purposes and Legal Bases for Tootlemine

Execution of transport/forwarding orders – art. 6(1)(b) or (f) GDPR;
Monitoring of routes and GPS location (order supervision, logistics optimisation, cargo security) – art. 6(1)(f) GDPR;
Proper operational support (communication, instructions) – art. 6(1)(f) GDPR;
Establishment, exercise or defence of claims – art. 6(1)(f) GDPR;
Compliance with legal obligations (andmesubjekt requests, archiving) – art. 6(1)(c) GDPR.

7.2 Saajad of Data

Customers: to the extent necessary for order fulfilment (driver name, phone number, vehicle location);
Supporting service providers: IT providers, insurers, law firms, accounting/HR service providers;
Public authorities: authorised state and regulatory authorities upon request.

7.3 Retention Period

For the duration of cooperation and full order completion;
For the limitation period for lepingual claims;
GPS monitoring data: up to 30 days after order completion;
For statutory archiving and tax retention periods.

7.4 Oigused of Data Subjects

You have the right to juurdepääs, parandamine, kustutamine, piiramine of tootlemine, data ulekantavus, and vastuvaie. You also have the right to lodge a kaebus with a jarelevalveasutus.

7.5 Requirement to Provide Data

The provision of your data is a lepingual requirement for the execution of transport orders. Failure to provide data (sealhulgas GPS location data) may make service provision impossible and lead to termination of cooperation.

7.6 Transfer Outside the EMP

Your data may be transferred to third countries. The Vastutav tootleja ensures that this is done only on the basis of lawful safeguards under Chapter V GDPR.

8. Information Clause for Social Media

The Vastutav tootleja of your isikuandmed is DAGO Express GmbH, Karl-Marx-Straße 193, 15230 Frankfurt (Oder), Saksamaa.

For data protection matters: eu-privacy@dagoexpress.com

Joint Vastutav tootlejaship / Independent Vastutav tootlejas:

Facebook and Instagram: Joint vastutav tootlejaship with Meta Platforms Ireland Limited for statistical eesmargid (Audience Insights).
LinkedIn: LinkedIn Ireland Unlimited Company is an independent vastutav tootleja.
YouTube: Google Ireland is an independent vastutav tootleja.
X (Twitter): Twitter International Unlimited Company is an independent vastutav tootleja.
TikTok: TikTok Technology Limited is an independent vastutav tootleja.

8.1 Purposes and Legal Bases for Tootlemine

Provision of innovative services – art. 6(1)(f) GDPR;
Responding to enquiries and comments – art. 6(1)(f) GDPR;
Statistical analysis and communication improvement – art. 6(1)(f) GDPR;
Establishment of legal claims – art. 6(1)(f) GDPR.

8.2 Saajad of Data

Saajad of your data include: legally authorised institutions, external service providers, and the respective platform operators (Meta, Google, Microsoft, TikTok, etc.).

8.3 Retention Period

Your data is stored for as long as necessary for the tootlemine eesmargid or until you request deletion. For protection of claims up to 3 years.

8.4 Oigused of Data Subjects

You have the right to juurdepääs, parandamine, kustutamine, piiramine of tootlemine, data ulekantavus, and vastuvaie. You also have the right to lodge a kaebus with a jarelevalveasutus. You may exercise your oigused against both the Vastutav tootleja and the respective platform operator.

8.5 Requirement to Provide Data

The use of social media profiles is voluntary. Tootlemine is carried out in accordance with the terms of use of the respective platform.

8.6 Transfer Outside the EMP

Your data may be transferred by platform operators to third countries. The Vastutav tootleja and platform operators ensure that this is done only on the basis of lawful safeguards under Chapter V GDPR.