Our Commitment to Data Protection

At shipcon , we recognize the importance of data privacy and are fully committed to complying with the General Data Protection Regulation (GDPR). This regulation enhances the protection of personal data for individuals within the European Union and gives you greater control over how your information is collected and used.

What is GDPR?

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It replaces the Data Protection Directive 95/46/EC and is designed to harmonize data privacy laws across Europe, protect and empower all EU citizens' data privacy, and reshape the way organizations across the region approach data privacy.

Data Collection Principles

We collect and process personal data only when necessary and in accordance with the GDPR principles:

Lawfulness, Fairness, and Transparency: We process personal data lawfully, fairly, and in a transparent manner.
Purpose Limitation: We collect personal data for specified, explicit, and legitimate purposes.
Data Minimization: We only collect data that is adequate, relevant, and limited to what is necessary.
Accuracy: We ensure personal data is accurate and kept up to date.
Storage Limitation: We keep personal data in a form that permits identification for no longer than necessary.
Integrity and Confidentiality: We process personal data in a manner that ensures appropriate security.

Your Data Rights

Under GDPR, you have specific rights regarding your personal data:

Right to Access

You have the right to request access to the personal data we hold about you.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data under certain circumstances.

Right to Restrict Processing

You have the right to request restriction of processing your personal data.

Right to Data Portability

You can receive your personal data in a structured, commonly used format.

Right to Object

You have the right to object to certain types of processing of your personal data.

Data Security Measures

shipcon implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk:

Encryption: Encryption: Data is encrypted in transit. Personal data is encrypted at rest at the database column level; backups and uploaded documents are protected by access control on restricted infrastructure.
Access Controls: Strict access controls limit who can view and process personal data.
Regular Audits: We conduct regular security audits and vulnerability assessments.
Employee Training: All employees receive comprehensive data protection training.
Incident Response: We maintain an incident response plan for potential data breaches.
Data Minimization: We collect only the data necessary for our services.

Third-Party Data Sharing

We may share personal data with third parties only when necessary to provide our services, and we ensure all third parties comply with GDPR requirements:

Transportation partners for shipment delivery
Customs authorities for international shipments
IT service providers for system maintenance
Legal authorities when required by law

We have Data Processing Agreements in place with all third parties that process personal data on our behalf.

Data Retention Policy

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Our retention periods are:

Customer account data - 7 years after last activity
Financial transaction records - 7 years
Shipment records - 5 years
Marketing data - 2 years after last engagement

GDPR Compliance