Privacy Policy.
Bulletproof Logistics Privacy Notification
This Privacy Notification is effective as of December, 2023.
This Privacy Notification explains how Bulletproof Logistics (“Bulletproof”, “we”, “us”, “our”) use personal data about you on our websites, mobile applications, or other sites that display this Privacy Notification. This Privacy Notification will also apply to information gathered from your visits to our facilities.
Specific provisionsIn specific situations, other provisions apply or supplement this Privacy Notification:
a) when applying for a job with Bulletproof Logistics only the Privacy Notification for Recruitment applies;
b) when using our websites, the Policy on Cookies supplements the Privacy Notification.
Protecting your personal data
With offices and operations throughout the world, personal data will be transferred or be accessible internationally throughout Bulletproof’s global business. Any such transfers throughout Bulletproof’s global business take´s place in accordance with the applicable local data privacy laws and regulations.
Types of personal data that we use, purpose and the legal basis
Consumers
Bulletproof rarely use personal data about consumers; however, we might use personal data about you in order to deliver logistic services to you or our customers, e.g., custom clearance services, document and parcel freight etc.,
where we use:
• Contact information (e.g., name, address, email, and phone number)
• Delivery and packaging information
As per the applicable laws of certain jurisdictions, Bulletproof Logistics is required to document the personal data in financial transactions when fulfilling our agreement, e.g., when paying or receiving payment for delivery of goods and services etc.
Bulletproof customers (excluding consumers)
If you are a customer to Bulletproof, we use personal data about you in order to fulfil the agreement between the parties, e.g., the administration of the agreement, payment, delivery of goods and services etc.,
where we use:
• Business contact information (e.g., name, address, email, and phone number)
• Job title
• Gyroscope or accelerator information (used to detect if it’s an app user that is trying to login or if it’s a bot)
Bulletproof is also legally required to document the personal data in financial transactions when fulfilling our agreement, e.g., when paying or receiving payment for delivery of goods and services etc.
Suppliers, Vendors, or other Third Parties to Bulletproof
If you are a supplier, vendor, or another third party engaging with Bulletproof, we use personal data about you in order to fulfil the agreement between the parties, e.g., the administration of the agreement, payment, delivery of goods and services etc.,
where we use:
• Business contact information (e.g., name, address, email, and phone number)
• Job title
• Banking Information
• Third party compliance screening
Bulletproof is also, as per relevant laws, required to document the personal data in financial transactions when fulfilling our agreement, e.g., when paying or receiving payment for delivery of goods and services etc.
Consultants to Bulletproof
If you are a consultant to Bulletproof, we use personal data about you in order to fulfil the agreement between the parties, e.g., the administration of the agreement, payment and services etc.,
where we use:
• Business contact information (e.g., name, address, email, and phone number)
• Professional CV and job title
• Date of birth and other personal information as relevant
• Banking Information
• Information relating to the consultancy tasks
Bulletproof is also, as per relevant laws, required to document the personal data in financial transactions when fulfilling our agreement, e.g., when paying for delivery of consultancy services etc.
Guests at our facilities
If you visit our facilities and sites, we use personal data about you in order to identify you and to inform you about applicable visitor rules, where either:
i. our legitimate interest in correctly identifying you and providing you with visitor instructions overrides your interest in the information not being used, or
ii. your freely given consent when you choose to disclose your personal data to us, or
iii. the personal data is being collected for performance of any contractual obligations, are the legal bases for our use, where we use:
Contact information (e.g., name, address, email, and phone number)
Work related information (e.g., title, workplace)
Personal information (e.g., license plate, if you have used one of our parking lots)
Users of our applications (apps)
If you are a user of any of our applications, we use your personal data to develop, manage, and improve these applications. We do this to ensure you receive the best experience we believe to be possible, incl. that the content is relevant and presented to you in the most effective manner and to allow you to participate in/register for interactive features in these applications.
Additionally, the purpose is to keep our applications safe and secure, and administer our applications for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes.
If you use our applications’ barcode scanning, QR code scanning, text recognition, or inspection/audit features, we may capture and use images from your device's camera. The images captured are used solely for the following purposes:
i. Barcode Scanning: To decode and retrieve information from barcodes
ii. QR Code Scanning: To read and interpret QR codes for specific actions or information retrieval
iii. Text Recognition: To recognize and extract text from images for various functionalities within the application
iv. Inspection/Audit: To document and inspect damages for record-keeping and analysis
Depending on what application of ours you use, we use the following categories of personal data:
i. Contact information (e.g., name, email)
ii. Login details (e.g., email, phone number, password)
iii. Your personalized settings in our applications
iv. Information about your use (e.g., errors, interaction information (such as scrolling and clicks))
v. Images
Our legal bases for using your personal data for the specified purposes are:
i. our legitimate interest in offering you secure applications that effectively presents relevant content to you, or
ii. your freely given consent when you (1) choose to disclose your personal data to us and signing up as a user in our applications, (2) allow us to use your personal data to improve our applications, and (3) when you allow our applications to access and utilize your device’s camera and images, or
iii. personal data collected for performance of any contractual obligations.
We do not use automated decisions that have a legal effect or similarly significantly affect you.
Business administration
If you contact us, we use personal data about you in order to document quality and compliance (for instance in relation to statutes of limitations, security, litigation, or regulatory investigations) where either:
i. our legitimate interest in improving our legal position overrides your interest in the information not being used, or
ii. your freely given consent when you choose to disclose your personal data to us,
iii. or the personal data is being collected for performance of any contractual obligations,
are the legal bases for our use, where we use:
• Contact information (e.g., name, address, email, and phone number)
• Other applicable information
When you are marketed to
If you:
a) are a customer (incl. consumer) of ours; or
b) visit our websites, incl. social media; or
c) use any of our apps; or
d) sign up for one of our newsletters;
you will receive information, notifications, newsletters, offers, or similar, depending on our relationship and your personal preferences.
Depending on our relationship, we use:
i. Contact information (e.g., name, address, email, and phone number)
ii. Content and your choices in relation to newsletters – contact forms and content etc.
iii. Your personalized settings in our apps
The marketing in newsletters, in our apps, and on our websites, including social media, is adapted based on our relationship and your personal preferences based on our knowledge of you through profiling, which includes the use of:
i. Content of newsletters signed up to
ii. Stated areas of interest
iii. Cookies as laid out in our Cookie Policy
iv. Information from your social media profiles
v. Information from our customer (incl. consumer) databases
vi. Information from our apps, incl. how you use these
Either:
a) our legitimate interest in doing an automatic evaluation of your personal data in order to personalize the marketing presented to you overrides your interests and fundamental rights, or
b) your freely given consent when you choose to disclose your personal data to us, or
c) personal data collected for performance of any contractual obligations provides the legal bases for our use of your personal data in relation to marketing activities.
We do not use automated decisions that have a legal effect or similarly significantly affect you.
Understanding our customers, consumers, and suppliers
We also make analyses in order to optimize our products, marketing, website, sales and to know more about our customers' preferences in relation to Bulletproof's products and maintaining a CRM database. We do this by making analyses of our databases with information about e.g., website use, customer preferences, purchase history, sales and by sending questionnaires where either:
i. our legitimate interest in using the personal data overrides your interest in the data not being used, or
ii. your freely given consent when you choose to disclose your personal data to us, or
iii. personal data collected for performance of any contractual obligations.,
We collect:
i. Information from our customer databases
ii. Cookies as laid out in our Cookie Policy
iii. User behavior and logs from our websites and databases
iv. The answers you provide regarding suggestions and preferences in the questionnaire
Compliance and security operations for all data subjects
We monitor user behavior and have implemented security solutions on our website as well as in our solutions and on our premises, where either:
a) our legitimate interest in anti-corruption, anti-fraud, anti-bribery, technical and physical security overrides your interest in the information not being used or
b) your freely given consent when you choose to disclose your personal data to us, or
c) personal data collected for performance of a contractual obligations.
We collect:
• Contact information (e.g., name, address, email, and phone number)
• Cookies as laid out in our Cookie Policy
• User behaviour and logs
• Images captured by video surveillance in marked areas at Bulletproof Logistics premises
Sharing of Personal Data
In addition to us sharing your Personal Data with Bulletproof Logistics Group Entities, we may in some situations also share your Personal Data with third parties such as business partners, suppliers, vendors, consultants, agencies, customers, consumers, governmental bodies, courts, and IT hosting, supply and service providers that we use for our group’s IT environment (Third Parties). We only share Personal Data where it is relevant and necessary for us to perform the activities described in this Privacy Notification, for example, the fulfilment of your order, the processing of your payment details, or the provision of support services.
Transfer and protection of your personal data
As a global organization with offices and operations throughout the world, we will transfer Personal Data collected by us on an aggregated or individual level to various divisions, subsidiaries, joint ventures, and affiliated companies of Bulletproof Logistics around the world for the purposes stated above and in accordance with applicable laws and regulations, as well as to contractors and sub-contractors to Bulletproof Logistics (data processors and sub-processors) for storage and service purposes.
Your Personal Data will not be disclosed to anyone outside Bulletproof Logistics unless permitted or required under applicable legislations and regulations and where necessary subject to appropriate written assurances from third parties who have access to your personal data, in which they must guarantee that they will protect the data with security measures designed to provide an adequate level of protection.
Unless you are otherwise notified, any transfers of your Personal Data will be based on applicable local data privacy laws, which among other includes appropriate international data transfer mechanisms and safeguards such as an adequacy decision, Standard Contractual Clauses, and/or Binding Corporate Rules.
Automated decisions
Bulletproof uses automated decision-making in relation to some of your personal data for some services and products. An example is our fraud prevention and detection efforts on our online platforms.
You may request that Bulletproof Logistics provides information about the decision-making methodology and ask us to verify that the automated decision has been made correctly.
We may reject the request, as permitted by applicable law, including when providing the information would result in a disclosure of a trade secret or would interfere with the prevention or detection of fraud or other crime. However, generally in these circumstances we will verify that the algorithm and source data are functioning as anticipated without error or bias.
Security measures
We choose to use suppliers that implement security in accordance with industry practices for good IT security, and we only use encrypted data communications when transferring sensitive and confidential personal data. We also maintain organizational, physical, and technical security arrangements for all the personal data we hold. We have protocols, controls and relevant policies, procedures, and guidance to maintain these arrangements taking into account the risks associated with the categories of personal data and the using we undertake. We store personal data on servers with limited access located in secured facilities, and our security measures are evaluated on an ongoing basis. The servers are protected by anti-virus software and firewalls, among other measures.
Personal Data Retention
Bulletproof stores your personal data for as long as it is necessary to fulfil the purpose of the use, unless Bulletproof Logistics is obliged under applicable laws and regulations or is entitled to store the personal data for a longer period, more specifically:
i. We retain your personal data as long as we have an ongoing relationship with you (in particular, if you have an account with us or have not withdrawn your marketing consent).
ii. We will only keep the personal data while your account is active or for as long as needed to provide services to you.
iii. We retain your personal data for as long as needed in order to comply with our global legal and contractual obligations.
We will also retain your Personal Data where this is advisable to safeguard or improve our legal position (for instance in relation to statutes of limitations, security, litigation, or regulatory investigations).
Data Subjects rights
You are entitled, in the circumstances and under the conditions, and subject to the exceptions, set out in applicable law, to:
a) Request access to the personal data we use about you: You have the right to ask us for information about or access to your personal data. There are some exemptions, which means you may not always receive all the data we use.
b) Request rectification of your personal data: this right entitles you to have your personal data be corrected if it is inaccurate or incomplete.
c) Object to the use of your personal data: this right entitles you to request that we no longer use your Personal Data. However, it only applies in certain circumstances, and we may not need to stop the use if we can give legitimate reasons to continue using your personal data.
d) Request the erasure of your personal data: this right entitles you to request the erasure of your personal data in certain circumstances.
e) Request the restriction of the use of your personal data: this right entitles you to request that we only use your personal data in limited circumstances, including with your consent.
f) Request portability of your personal data: this right entitles you to receive a copy (in a structured, commonly used, and machine-readable format) of personal data that you have provided to us or request us to transmit such personal data to another data controller.
g) Withdraw your consent: You can withdraw your consent at any time by opting out in the email or by contacting us. However, this will not affect our right to use personal data obtained prior to the withdrawal of your consent, or our right to continue parts of the use based on other legal bases than your consent.
h) File a complaint: You can always lodge a complaint with a data protection authority, for example The Office of the Privacy Commissioner of Canada.
Please note that certain personal data may be exempt from the above-mentioned rights pursuant to applicable data privacy laws, or other laws and regulations.
Contact information
Please contact us at info@bulletprooflogistics.com, Subject.: Data Privacy - if you have a general question about how Bulletproof Logistics uses and/or protects your personal data, if you wish to exercise your rights, or if you wish to make a complaint about how Bulletproof Logistics uses your personal data.