1. Introduction
Bipex ("we," "our," or "us") is committed to protecting the privacy of our employees who use the Bipex Courier mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.
The Bipex Courier App is an internal operational tool designed exclusively for Bipex employees to manage and complete package deliveries. By using this App, you acknowledge that you have read and understood this Privacy Policy.
**Data Controller:**
Bipex
Albania
Contact: info@bipex.al
2. Information We Collect
2.1 Personal Information
We collect the following personal information when you use the App:
- **Account Information:** Email address, name, and password for authentication purposes.
- **Authentication Tokens:** Secure access tokens to maintain your logged-in session.
2.2 Location Data
The App collects location data to enable delivery operations:
- **Precise Location (GPS):** We collect your precise geographic location to track deliveries, optimize routes, and verify delivery locations.
- **Background Location:** The App collects location data even when the app is closed or not in use. This is necessary for continuous delivery tracking and operational efficiency.
**Important:** Location tracking is essential for the core functionality of this courier application and is used solely for business operations.
2.3 Camera and Media
The App accesses your device's camera to:
- **Delivery Proof Photos:** Capture photographic evidence of successful deliveries (up to 3 images per delivery).
- **Customer Signatures:** Record digital signatures from recipients as proof of delivery.
These images are uploaded to our servers and associated with the relevant delivery records.
2.4 Order and Delivery Data
We collect information related to your work activities:
- Order details and package information
- Delivery status updates and history
- Delivery notes and comments
- Timestamps of delivery events
3. How We Use Your Information
We use the collected information for the following purposes:
- **Delivery Operations:** To facilitate package pickup, tracking, and delivery.
- **Employee Management:** To monitor work performance and delivery efficiency.
- **Proof of Delivery:** To maintain records of completed deliveries, including photos and signatures.
- **Route Optimization:** To improve delivery routes and operational efficiency.
- **Security:** To protect against unauthorized access and ensure the integrity of our systems.
- **Legal Compliance:** To comply with applicable laws and regulations.
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- **Employment Contract:** Processing is necessary for the performance of your employment contract with Bipex.
- **Legitimate Interests:** Processing is necessary for our legitimate business interests in operating an efficient delivery service.
- **Legal Obligations:** Processing is necessary to comply with legal obligations, including record-keeping requirements.
5. Data Sharing and Disclosure
We do not sell your personal information. We may share your data in the following circumstances:
- **Within Bipex:** Your information is shared with authorized personnel within Bipex for operational purposes.
- **Service Providers:** We may share data with third-party service providers who assist in our operations (e.g., cloud hosting providers), subject to confidentiality agreements.
- **Legal Requirements:** We may disclose information if required by law, court order, or government request.
- **Business Transfers:** In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
6. Data Retention
We retain your personal data for the following periods:
- **Account Information:** Retained for the duration of your employment and for a period thereafter as required by law.
- **Location Data:** Retained for operational purposes and archived for a reasonable period for dispute resolution.
- **Delivery Records (Photos, Signatures):** Retained for a minimum of 5 years to comply with commercial record-keeping requirements.
- **Authentication Tokens:** Automatically expire and are refreshed periodically.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Secure encrypted connections (HTTPS) for all data transmission
- Secure token-based authentication
- Access controls limiting data access to authorized personnel
- Regular security assessments
8. Your Rights
Under Albanian data protection law (aligned with GDPR principles), you have the following rights:
- **Access:** Request access to your personal data.
- **Rectification:** Request correction of inaccurate data.
- **Erasure:** Request deletion of your data (subject to legal retention requirements).
- **Restriction:** Request restriction of processing in certain circumstances.
- **Data Portability:** Request a copy of your data in a portable format.
- **Objection:** Object to processing based on legitimate interests.
To exercise these rights, contact us at info@bipex.al.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this document. Continued use of the App after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy, please contact us:
**Email:** info@bipex.al