Privacy notice

The controller is Aivomaa Oy (business ID 3592993-6), Finland. For data protection matters: admin@rahtis.eu.

Company data: name, business ID, VAT number, addresses, billing details, bank account and e-invoicing address.

User data: email address, name, telephone number, role and the company the user belongs to.

Driver data: name, telephone or WhatsApp number and languages. This data is entered by the carrier on the vehicle record.

Transport data: stop addresses and coordinates, schedules, cargo weight, names and telephone numbers of contacts at the stops, and the job's change log.

Documents: CMR notes, loading and unloading photographs and damage photographs attached to the job by the carrier.

Log data: sign-ins, status changes, messages sent and incident records.

Performance of a contract: brokering transport, bringing the parties together, following the job and delivering the documents.

Legal obligation: accounting and invoicing.

Legitimate interest: security of the service, prevention of misuse and investigation of incidents.

Data is obtained from the companies themselves: from the application, company details, vehicle records and transport orders. Company details are checked against public registers.

The other party to a job receives the data the work requires: the carrier sees stop addresses and contacts, the shipper sees the progress of the job and its documents.

The platform's technical service providers act as processors: hosting and database, application platform, address and routing service, map service, and the email delivery service.

Address data is passed to the address and routing service in order to obtain coordinates and compute distance. No other personal data is passed there.

[This clause is to be completed with counsel.]

Transport and invoicing data belonging to the accounts is retained for the period required by accounting law.

Cancelled and test jobs that were never invoiced and carry no documents may be deleted.

The incident log is retained for a limited period and is cleaned automatically.

The data subject has the right of access, the right to have inaccurate data corrected, and the right to request erasure or restriction of processing, and to object to processing.

Requests are sent to admin@rahtis.eu. A request concerning a driver is best addressed first to that driver's own employer, who entered the data.

The data subject has the right to lodge a complaint with the Office of the Data Protection Ombudsman.

Access to data is restricted by role, and the restriction is enforced in the database rather than only in the interface. Secret keys exist only on the server side.

A shipper does not see the carrier's personnel contact details, and a carrier does not see the shipper's billing details, unless the work requires it.