Tietosuojaseloste

TIETOSUOJASELOSTE

This document explains how DAGO Express GmbH, Karl-Marx-Straße 193, 15230 Frankfurt (Oder), Saksa (Rekisterinpitaja) processes henkilotiedot.

For questions regarding data protection, please contact the Rekisterinpitaja by email:
eu-privacy@dagoexpress.com

I. Definitions

Rekisterinpitaja – within the meaning of art. 4(7) GDPR, the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the tarkoitukset and means of the kasittely of henkilotiedot. In this document, the Rekisterinpitaja is: DAGO Express GmbH, Karl-Marx-Straße 193, 15230 Frankfurt (Oder), Saksa

Henkilotiedot – information relating to an identified or identifiable natural person, mukaan lukien IP address, location data, online identifier, and information collected through evasteet.

Policy – this Privacy Policy.

GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the kasittely of henkilotiedot.

ETA – European Economic Area (EU countries + Iceland, Liechtenstein, Norway).

Verkkosivusto – the verkkosivusto operated by the Rekisterinpitaja at https://dagoexpress.com

Kayttaja – any person who visits the verkkosivusto, uses the Rekisterinpitaja’s services, or contacts the Rekisterinpitaja.

II. Kasittely of Henkilotiedot – Purposes and Legal Bases

The Rekisterinpitaja conducts ongoing risk analyses to ensure that henkilotiedot is processed securely – in particular, that only authorised persons have paasy to the data.

1. Kasittely of Customer Data

Your henkilotiedot is processed for the following tarkoitukset:

Booking and provision of courier/forwarding services – oikeusperuste: art. 6(1)(b) GDPR;
Use of products and services offered – oikeusperuste: art. 6(1)(b) GDPR;
Performance of concluded sopimuss – oikeusperuste: art. 6(1)(b) GDPR;
Issuing and storing invoices and accounting documents – oikeusperuste: art. 6(1)(c) GDPR;
Establishment, exercise or defence of legal claims – oikeusperuste: art. 6(1)(f) GDPR;
Customer service and responding to enquiries – oikeusperuste: art. 6(1)(f) GDPR;
Handling valituss – oikeusperuste: art. 6(1)(f) GDPR;
Direct marketing of own products and services – oikeusperuste: art. 6(1)(f) GDPR or art. 6(1)(a) GDPR;
IT infrastructure management and system security – oikeusperuste: art. 6(1)(f) GDPR.

2. Use of the Verkkosivusto

Henkilotiedot of all verkkosivusto kayttajas is processed:

for the provision of electronic services – oikeusperuste: art. 6(1)(b) GDPR;
for analytical and statistical tarkoitukset – oikeusperuste: art. 6(1)(f) GDPR;
for the establishment and defence of legal claims – oikeusperuste: art. 6(1)(f) GDPR.

The provision of henkilotiedot is generally voluntary, but in some cases necessary for the conclusion of a sopimus, the provision of courier services, or the issuance of accounting documents.

3. Correspondence and Telephone Contact

In the case of correspondence by email or post, the henkilotiedot contained therein is processed exclusively for the tarkoitus of communication and handling the matter. Oikeusperuste: art. 6(1)(f) GDPR.

4. Business Contacts

In the course of its business activities, the Rekisterinpitaja also collects henkilotiedot during business meetings or when exchanging business cards. Oikeusperuste: art. 6(1)(f) GDPR.

III. Evasteet

1. What are Evasteet?

Evasteet are small text files stored on the kayttaja’s device. They contain information such as session identifier, kayttaja settings, language preferences, visit time, and IP address.

2. Types of Evasteet

Necessary – enable the proper functioning of the verkkosivusto.
Functional – store kayttaja settings and preferences.
Analytical – enable monitoring of verkkosivusto traffic (e.g. Google Analytics).
Marketing – enable the display of personalised advertising (e.g. Google Ads, Facebook Ads).
Social Media – enable integration with social platforms.

3. Third-Party Providers

Google (Analytics, Ads, GTM, reCAPTCHA), Facebook/Meta, Microsoft (Advertising, Clarity), Cloudflare, Sentry, and other partners.

4. Suostumus Management

The kayttaja can change browser settings at any time to block or delete evasteet, as well as withdraw suostumus via the cookie banner interface.

5. Transfer Outside the ETA

Data from evasteet may be transferred to third countries only on the basis of appropriate legal safeguards such as Standard Sopimusual Clauses (SCCs) or the EU-US Data Privacy Framework.

IV. Retention Periods for Henkilotiedot

The Rekisterinpitaja stores henkilotiedot only for as long as necessary:

Sopimus and service data: for the duration of the sopimus, then 3-6 years (limitation period).
Accounting and tax data: 10 years for accounting documents, 6 years for business correspondence.
Contact data and enquiries: for the time necessary for kasittely.
Marketing data: until withdrawal of suostumus or vastustaminen.
Technical data: up to 12 months.

V. Oikeudet of Data Subjects

You have the right to paasy, oikaiseminen, poistaminen, rajoittaminen of kasittely, data siirrettavyys, and vastustaminen. Where kasittely is based on suostumus, you may withdraw it at any time. You have the right to lodge a valitus with a valvontaviranomainen (Bundesbeauftragter für den Datenschutz und die Informationsfreiheit - BfDI).

Contact: By post: DAGO Express GmbH, Karl-Marx-Straße 193, 15230 Frankfurt (Oder), Saksa By email: eu-privacy@dagoexpress.com

VI. Vastaanottajat of Data

Vastaanottajat of your henkilotiedot include: legally authorised institutions (tax authorities, courts), external service providers (IT, advertising, legal), transport operators, payment service providers, hosting companies, and marketing agencies.

VII. Transfer of Henkilotiedot Outside the ETA

Your henkilotiedot may be transferred outside the ETA. The Rekisterinpitaja ensures that this is done only on the basis of lawful safeguards under Chapter V GDPR:

Adequacy decision (art. 45 GDPR)
Standard Sopimusual Clauses (art. 46 GDPR)
Binding Corporate Rules (BCRs)
Derogations for specific situations (art. 49 GDPR)

VIII. Automated Data Kasittely

Henkilotiedot may be processed automatically (mukaan lukien profiling), but this does not produce legal effects. Profiling serves to improve verkkosivusto functionality. Oikeusperuste: art. 6(1)(f) GDPR.

IX. Updates to the Privacy Policy

The Policy is regularly reviewed and updated as necessary.

Last updated: 13.01.2026

GDPR – INFORMATION CLAUSES

Below you will find detailed information clauses in accordance with art. 13 and 14 GDPR for various categories of rekisteroitys.

1. Information Clause for Customers

The Rekisterinpitaja of your henkilotiedot is DAGO Express GmbH, Karl-Marx-Straße 193, 15230 Frankfurt (Oder), Saksa.

For data protection matters: eu-privacy@dagoexpress.com

1.1 Purposes and Legal Bases for Kasittely

Your henkilotiedot is processed for the following tarkoitukset:

Booking and provision of courier/forwarding services – art. 6(1)(b) GDPR;
Use of products and services offered – art. 6(1)(b) GDPR;
Performance of concluded sopimuss – art. 6(1)(b) GDPR;
Issuing and storing invoices – art. 6(1)(c) GDPR;
Establishment, exercise or defence of legal claims – art. 6(1)(f) GDPR;
Customer service and responding to enquiries – art. 6(1)(f) GDPR;
Handling valituss – art. 6(1)(f) GDPR;
Direct marketing of own products and services – art. 6(1)(f) GDPR;
IT infrastructure management and system security – art. 6(1)(f) GDPR;
Archiving tarkoitukset – art. 6(1)(c) GDPR.

1.2 Vastaanottajat of Data

Vastaanottajat of your data include: legally authorised institutions (e.g. tax authorities, courts), external service providers (IT support, advertising, legal advice), entities involved in service provision (e.g. transport operators), payment service providers, hosting companies, and marketing agencies.

1.3 Retention Period

Accounting and tax documents: 10 years from the end of the calendar year.
Business correspondence: 6 years from the end of the calendar year.
Suostumus-based data (e.g. marketing): until withdrawal of suostumus or vastustaminen.

1.4 Oikeudet of Data Subjects

You have the right to paasy, oikaiseminen, poistaminen or rajoittaminen of kasittely, data siirrettavyys, and vastustaminen to kasittely. Where kasittely is based on suostumus, you may withdraw it at any time. You have the right to object to the kasittely of your data for direct marketing tarkoitukset at any time. You also have the right to lodge a valitus with a valvontaviranomainen.

1.5 Requirement to Provide Data and Profiling

The provision of henkilotiedot is a sopimusual requirement insofar as it is necessary for the provision of courier/forwarding services. Failure to provide this data will make it impossible to conclude a sopimus or perform it properly. The provision of data for marketing tarkoitukset is voluntary. Your data is not processed automatically and is not subject to profiling.

1.6 Transfer of Henkilotiedot Outside the ETA

Your henkilotiedot may be transferred to third countries outside the ETA. The Rekisterinpitaja ensures that any transfer outside the ETA is made solely on the basis of lawful grounds and safeguards under Chapter V GDPR (adequacy decision, Standard Sopimusual Clauses, BCRs, approved codes of conduct/certifications, or derogations under art. 49 GDPR). You have the right to obtain a copy of the safeguards applied.

2. Information Clause for Business Partners

The Rekisterinpitaja of your henkilotiedot is DAGO Express GmbH, Karl-Marx-Straße 193, 15230 Frankfurt (Oder), Saksa.

For data protection matters: eu-privacy@dagoexpress.com

2.1 Purposes and Legal Bases for Kasittely

Performance of the concluded sopimus – art. 6(1)(b) GDPR;
Initiation of possible cooperation – art. 6(1)(b) GDPR;
Documentation and settlement according to tax and commercial regulations – art. 6(1)(c) GDPR;
Establishment, exercise or defence of legal claims – art. 6(1)(f) GDPR;
Handling valituss – art. 6(1)(f) GDPR;
Direct marketing mukaan lukien newsletter – art. 6(1)(f) GDPR;
Credit check – art. 6(1)(f) GDPR;
Geolocation monitoring of transport – art. 6(1)(b) and (f) GDPR;
Verkkosivusto analysis and service optimisation – art. 6(1)(f) and (a) GDPR;
IT infrastructure management – art. 6(1)(f) GDPR.

2.2 Vastaanottajat of Data

Vastaanottajat of your data include: legally authorised institutions, external service providers (IT support, advertising, legal advice), transport operators, payment service providers, hosting companies, and marketing agencies.

2.3 Retention Period

Accounting and tax documents: 10 years.
Business correspondence: 6 years.
Geolocation data and system logs: maximum 12 months.

2.4 Oikeudet of Data Subjects

You have the right to paasy, oikaiseminen, poistaminen, rajoittaminen of kasittely, data siirrettavyys, and vastustaminen. You have the right to object to direct marketing at any time. You also have the right to lodge a valitus with a valvontaviranomainen.

2.5 Requirement to Provide Data and Profiling

The provision of data is a sopimusual requirement for the conclusion and performance of the sopimus. The provision of data for marketing tarkoitukset is voluntary. Your data is not processed automatically and is not subject to profiling.

2.6 Transfer of Henkilotiedot Outside the ETA

Your data may be transferred to third countries. The Rekisterinpitaja ensures that this is done only on the basis of lawful safeguards under Chapter V GDPR.

3. Information Clause for Tyontekijat

The Rekisterinpitaja of your henkilotiedot is DAGO Express GmbH, Karl-Marx-Straße 193, 15230 Frankfurt (Oder), Saksa.

For data protection matters: eu-privacy@dagoexpress.com

3.1 Purposes and Legal Bases for Kasittely

For sopimus performance (art. 6(1)(b) GDPR): - Performance of the employment sopimus; - Ensuring information protection; - Provision of employer’s equipment.

For compliance with legal obligations (art. 6(1)(c) GDPR and art. 9(2)(b) GDPR): - Calculation and payment of salaries; - Sopimus settlement (social insurance, taxes, accounting); - Health and safety obligations; - Maintenance of personnel files; - Social insurance and tax obligations.

For oikeutettu etus (art. 6(1)(f) GDPR): - Ensuring business continuity; - Establishment of claims; - Personnel management; - Ensuring security; - Work organisation.

3.2 Vastaanottajat of Data

Legally authorised bodies: social insurance institutions, tax office, employment agencies, health and safety authorities;
Works Council – according to the Works Constitution Act (Betriebsverfassungsgesetz);
Business partners – only business data (name, position, business email);
Processors: email services, hosting, IT support, legal advice, employee benefits, group insurance.

3.3 Retention Period

Establishment of claims: up to 3 years;
Accounting, tax and payroll documents: 10 years;
Other personnel and business documents: up to 6 years.

3.4 Oikeudet of Data Subjects

You have the right to paasy, oikaiseminen, poistaminen (right to be forgotten), rajoittaminen of kasittely, data siirrettavyys, and vastustaminen. Where kasittely is based on suostumus, you may withdraw it at any time. You also have the right to lodge a valitus with a valvontaviranomainen.

3.5 Requirement to Provide Data

The provision of henkilotiedot in connection with employment is a statutory requirement. Failure to provide data will make it impossible to conclude and perform the sopimus.

3.6 Transfer of Henkilotiedot Outside the ETA

As a rule, employee data is not transferred outside the ETA. In the event of such a transfer, the Rekisterinpitaja applies all obligations provided for in Chapter V GDPR.

4. Information Clause for Sopimusors/Freelancers

The Rekisterinpitaja of your henkilotiedot is DAGO Express GmbH, Karl-Marx-Straße 193, 15230 Frankfurt (Oder), Saksa.

For data protection matters: eu-privacy@dagoexpress.com

4.1 Purposes and Legal Bases for Kasittely

Performance of the concluded sopimus – art. 6(1)(b) GDPR;
Compliance with legal obligations – art. 6(1)(c) GDPR;
Legitimate interests (business contacts, protection of claims) – art. 6(1)(f) GDPR.

4.2 Vastaanottajat of Data

Vastaanottajat of your data are exclusively: authorised tyontekijat, legally authorised institutions, and subsopimusors (e.g. IT support, advertising, legal services).

4.3 Retention Period

Establishment of claims: up to 3 years;
Business correspondence: 6 years;
Accounting and tax documents: 10 years.

4.4 Oikeudet of Data Subjects

You have the right to paasy, oikaiseminen, poistaminen, rajoittaminen of kasittely, data siirrettavyys, and vastustaminen. You also have the right to lodge a valitus with a valvontaviranomainen.

4.5 Requirement to Provide Data and Profiling

The provision of data is a sopimusual and statutory requirement. Failure to provide data will make it impossible to conclude a sopimus. Your data is not processed automatically and is not subject to profiling.

4.6 Transfer Outside the ETA

Your data may be transferred to third countries. The Rekisterinpitaja ensures that this is done only on the basis of lawful safeguards under Chapter V GDPR.

5. Information Clause for Hakijat (Recruitment)

The Rekisterinpitaja of your henkilotiedot is DAGO Express GmbH, Karl-Marx-Straße 193, 15230 Frankfurt (Oder), Saksa.

For data protection matters: eu-privacy@dagoexpress.com

5.1 Purposes and Legal Bases for Kasittely

Conducting the recruitment process – art. 6(1)(a), (b) and (c) GDPR;
Establishment, exercise or defence of legal claims – art. 6(1)(f) GDPR;
With separate suostumus for future recruitment – art. 6(1)(a) GDPR.

5.2 Vastaanottajat of Data

Vastaanottajat of your data are exclusively: authorised tyontekijat, legally authorised institutions, and subsopimusors (e.g. IT support, legal services).

5.3 Retention Period

For establishment of claims: up to 3 years after the end of recruitment;
With suostumus for future recruitment: 12 months after the end of current recruitment.

5.4 Oikeudet of Data Subjects

You have the right to paasy, oikaiseminen, poistaminen, rajoittaminen of kasittely, data siirrettavyys, and vastustaminen. Where kasittely is based on suostumus, you may withdraw it at any time. You also have the right to lodge a valitus with a valvontaviranomainen.

5.5 Requirement to Provide Data and Profiling

The provision of data within the scope required by labour law (name, date of birth, education, employment history) is a statutory requirement. Failure to provide this data will make participation in recruitment impossible. Your data is not processed automatically and is not subject to profiling.

5.6 Transfer Outside the ETA

Your data may be transferred to third countries. The Rekisterinpitaja ensures that this is done only on the basis of lawful safeguards under Chapter V GDPR.

6. Information Clause for the Contact Form

The Rekisterinpitaja of your henkilotiedot is DAGO Express GmbH, Karl-Marx-Straße 193, 15230 Frankfurt (Oder), Saksa.

For data protection matters: eu-privacy@dagoexpress.com

6.1 Purposes and Legal Bases for Kasittely

Your henkilotiedot is processed for the tarkoitus of responding to enquiries submitted via the contact form. Oikeusperuste: art. 6(1)(f) GDPR (oikeutettu etu in responding to enquiries).

6.2 Vastaanottajat of Data

Vastaanottajat of your data are exclusively: authorised tyontekijat, legally authorised institutions, and subsopimusors (e.g. IT support, advertising, legal services).

6.3 Retention Period

Your data is stored for the time necessary to respond to the enquiry. For enquiries of a business correspondence nature, data is stored for 6 years in accordance with the German Commercial Code.

6.4 Oikeudet of Data Subjects

You have the right to paasy, oikaiseminen, poistaminen, rajoittaminen of kasittely, data siirrettavyys, and vastustaminen. You also have the right to lodge a valitus with a valvontaviranomainen.

6.5 Requirement to Provide Data and Profiling

The provision of henkilotiedot (in particular name and email address) is voluntary but necessary in order to respond to your enquiry. Your data is not processed automatically and is not subject to profiling.

6.6 Transfer Outside the ETA

Your data may be transferred to third countries. The Rekisterinpitaja ensures that this is done only on the basis of lawful safeguards under Chapter V GDPR.

7. Information Clause for Transport Partners (GPS Monitoring)

The Rekisterinpitaja of your henkilotiedot is DAGO Express GmbH, Karl-Marx-Straße 193, 15230 Frankfurt (Oder), Saksa.

For data protection matters: eu-privacy@dagoexpress.com

7.1 Purposes and Legal Bases for Kasittely

Execution of transport/forwarding orders – art. 6(1)(b) or (f) GDPR;
Monitoring of routes and GPS location (order supervision, logistics optimisation, cargo security) – art. 6(1)(f) GDPR;
Proper operational support (communication, instructions) – art. 6(1)(f) GDPR;
Establishment, exercise or defence of claims – art. 6(1)(f) GDPR;
Compliance with legal obligations (rekisteroity requests, archiving) – art. 6(1)(c) GDPR.

7.2 Vastaanottajat of Data

Customers: to the extent necessary for order fulfilment (driver name, phone number, vehicle location);
Supporting service providers: IT providers, insurers, law firms, accounting/HR service providers;
Public authorities: authorised state and regulatory authorities upon request.

7.3 Retention Period

For the duration of cooperation and full order completion;
For the limitation period for sopimusual claims;
GPS monitoring data: up to 30 days after order completion;
For statutory archiving and tax retention periods.

7.4 Oikeudet of Data Subjects

You have the right to paasy, oikaiseminen, poistaminen, rajoittaminen of kasittely, data siirrettavyys, and vastustaminen. You also have the right to lodge a valitus with a valvontaviranomainen.

7.5 Requirement to Provide Data

The provision of your data is a sopimusual requirement for the execution of transport orders. Failure to provide data (mukaan lukien GPS location data) may make service provision impossible and lead to termination of cooperation.

7.6 Transfer Outside the ETA

Your data may be transferred to third countries. The Rekisterinpitaja ensures that this is done only on the basis of lawful safeguards under Chapter V GDPR.

8. Information Clause for Social Media

The Rekisterinpitaja of your henkilotiedot is DAGO Express GmbH, Karl-Marx-Straße 193, 15230 Frankfurt (Oder), Saksa.

For data protection matters: eu-privacy@dagoexpress.com

Joint Rekisterinpitajaship / Independent Rekisterinpitajas:

Facebook and Instagram: Joint rekisterinpitajaship with Meta Platforms Ireland Limited for statistical tarkoitukset (Audience Insights).
LinkedIn: LinkedIn Ireland Unlimited Company is an independent rekisterinpitaja.
YouTube: Google Ireland is an independent rekisterinpitaja.
X (Twitter): Twitter International Unlimited Company is an independent rekisterinpitaja.
TikTok: TikTok Technology Limited is an independent rekisterinpitaja.

8.1 Purposes and Legal Bases for Kasittely

Provision of innovative services – art. 6(1)(f) GDPR;
Responding to enquiries and comments – art. 6(1)(f) GDPR;
Statistical analysis and communication improvement – art. 6(1)(f) GDPR;
Establishment of legal claims – art. 6(1)(f) GDPR.

8.2 Vastaanottajat of Data

Vastaanottajat of your data include: legally authorised institutions, external service providers, and the respective platform operators (Meta, Google, Microsoft, TikTok, etc.).

8.3 Retention Period

Your data is stored for as long as necessary for the kasittely tarkoitukset or until you request deletion. For protection of claims up to 3 years.

8.4 Oikeudet of Data Subjects

You have the right to paasy, oikaiseminen, poistaminen, rajoittaminen of kasittely, data siirrettavyys, and vastustaminen. You also have the right to lodge a valitus with a valvontaviranomainen. You may exercise your oikeudet against both the Rekisterinpitaja and the respective platform operator.

8.5 Requirement to Provide Data

The use of social media profiles is voluntary. Kasittely is carried out in accordance with the terms of use of the respective platform.

8.6 Transfer Outside the ETA

Your data may be transferred by platform operators to third countries. The Rekisterinpitaja and platform operators ensure that this is done only on the basis of lawful safeguards under Chapter V GDPR.