Privacy policy

Controller

Bahnoperator Logistics GmbH, Kremser Gasse 35/1/Top 3, 3100 St. Pölten, Austria. Contact: sales@bahnoperator.com, +43 2742 24606.

Requests via the contact form

When you contact us via a form, we process the data you provide (company, name, email, optional phone and shipment data) to handle your request and prepare a contract. The legal basis is Art. 6(1)(b) GDPR. Data is deleted once it is no longer needed and no statutory retention obligations apply.

Email notifications

So that we can handle requests quickly, we send email notifications via the Resend service (Resend, Inc., San Francisco, USA). The details from the form are passed on to our team. A data processing agreement is in place with Resend, and any transfers to the USA are based on the EU-US Data Privacy Framework or on the European Commission’s standard contractual clauses. The legal basis is Art. 6(1)(b) GDPR.

Spam protection

To protect against automated requests we use a data-minimising proof-of-work method that works without cookies and without transfer to third parties.

Hosting and server log files

When you visit the website, technically necessary data (IP address, time, page requested, browser) is processed to provide the website and ensure its security. The website is hosted by Vercel Inc. (San Francisco, USA). The server functions run in Frankfurt am Main, and Vercel also delivers public pages via a global content delivery network. We store content and requests in a database operated by Neon (Databricks, Inc., San Francisco, USA) in Frankfurt am Main. Data processing agreements are in place with both providers. For any transfers to the USA, the providers rely on the EU-US Data Privacy Framework or on the European Commission’s standard contractual clauses. The legal basis is Art. 6(1)(f) GDPR.

Cookies and consent

We set technically necessary cookies without consent. These include the bo_consent cookie, which stores your choice in the cookie banner for twelve months, and session cookies in the protected editorial area. Some features, such as the checklist, store your progress only locally in your browser. The legal basis is Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021) in conjunction with Art. 6(1)(f) GDPR. We only load statistics and marketing services after you have consented in the cookie banner, in which case the legal basis is Art. 6(1)(a) GDPR. No such service is currently active. As soon as we use one, we will name it here and in the cookie banner. You can change or withdraw your consent at any time via the cookie settings in the footer.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You can lodge a complaint with the competent data protection authority, in Austria the Datenschutzbehörde (dsb.gv.at).

Note

This privacy policy is a draft and will be legally reviewed before the public launch.