Information regarding the collection, processing and use of data
In this document we would like inform you about our Data Privacy Statement. Here you will find information about the collection and use of personal data when you access our website. We comply with the data protection law applicable in Germany. You can access this statement on our website at any time. We explicitly note that the transfer of data on the internet (e.g. when communicating by e-mail) is not wholly secure and cannot be fully protected against access by third parties.
The following data protection provisions apply to the online presence of Frankenfeld Spedition – at https://www.frankenfeld.de/.
I. Name and address of the controller
The controller within the meaning of the General Data Protection Regulation and other national data protection legislation of the Member States as well as other provisions of data protection legislation is:
Frankenfeld Spedition GmbH
Tel.: +49 (0)5246 705-0
II. Contacting the controller
Any data subject can contact our controller directly at any time should they have any queries regarding or suggestions on how to improve our data protection.
III. General points about data processing
1. Scope of the processing of personal data
We only ever process and use the personal data of our users to the extent this is necessary to execute our contracts. After having fulfilled our contractual obligations, we only process data once consent to do so has been granted. An exception applies in those cases where, for practical reasons, it is not possible to obtain prior consent, or processing of the data is permitted by statutory provisions.
2. Legal basis for the processing of personal data
For our company, Art. 6 (1) a of the General Data Protection Regulation (GDPR) is the legal basis for processing activities, for which we obtain consent for a certain processing purpose. If the processing of personal data is needed to perform a contract to which the data subject is party, as is the case for example with processing activities that are necessary for goods to be delivered or any other service or return service to be performed, the processing is based on Art. 6 (1) b GDPR. The same applies to such processing activities for the purpose of initiating contracts, for example in cases of queries regarding our products and services. If our company is subject to a legal obligation requiring the processing of personal data, for example in order to fulfil tax obligations, the processing is based on Art. 6 (1) c GDPR. It occasionally happens that the processing of personal data is necessary to safeguard the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our company premises were injured and his or her name, age, health insurance data or other vital information had to be passed onto a physician, hospital or other third parties. The processing would be based on Art. 6 (1) d GDPR. Ultimately, the processing could be based on Art. 6 (1) f GDPR. This is the legal basis for processing activities which are not covered by any of the other aforementioned legal bases, when the processing is necessary to safeguard a legitimate interest pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. Such processing activities are permitted to us in particular because special reference was made to them by the European legislator. It considered that a legitimate interest is to be assumed where the data subject is a client of the controller (Recital 47 sentence 2 GDPR).
3. Data erasure and storage duration
The data subject’s personal data is erased or blocked as soon as the purpose for which it is stored no longer applies. It may be stored beyond this time if that is permitted by the European or national legislator in EU laws, regulations and other legal acts to which the controller is subject. Data is also blocked or erased when a storage period prescribed by the aforementioned norms expires unless there is a necessity to store the data for a longer period for the purposes of the conclusion or performance of a contract.
4. Right to object and have data erased
At any time, the user has the right to withdraw his or her consent to the processing of personal data. If the user contacts us by e-mail, he or she can at any time object to the storage of his or her personal data. In such a case, the correspondence is not continued. Exceptions to this are the collection of data in order to provide the website and the storage of data in log files, which are essential for the operation of the website. Consequently, the user has no right to object to this.
5. Statutory or contractual provisions regarding the provision of personal data; necessity for the purposes of the conclusion of a contract; obligation on the part of the data subject to provide personal data; possible consequences of such data not being provided
We should like to point out that the provision of personal data is in some cases prescribed by law (e.g. tax legislation) or may also arise from contractual arrangements (e.g. information about the contractual party). For a contract to be concluded, it may be necessary for a data subject to disclose personal data that we subsequently have to process. The data subject is, for example, under an obligation to provide personal data when our company concludes a contract with it. The non-provision of personal data might result in him or her not being able to conclude the contract with the company. Before a data subject provides personal data, he or she must contact one of our employees. Our employees will, in relation to the specific case, inform the data subject as to whether the provision of personal data is prescribed by statute or required by contract or is necessary for the contract to be concluded, whether an obligation exists to provide the personal data, and what the consequences of not providing the personal data would be.
6. Automated decision-making
As a responsible business, we do not use automatic decision-making or profiling.
7. Amendments to our Data Protection Regulations
We reserve the right to amend this Data Privacy Statement in order to ensure it always meets the legal requirements applicable at the time or to implement in the Data Protection Declaration any adjustments to our services, e.g. the introduction of new services. The new Data Protection Declaration will then apply when you next visit our website.
IV. Provision of the website and creation of log files
The website of Frankenfeld Spedition GmbH collects general data and information, when a data subject or automated system calls up the website. This general data and information are stored in the log files of the server. The following may be collected: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrers), (4) the sub-websites, which are controlled by an accessing system on our website, (5) the date and time of access to the website, (6) an Internet Protocol address (IP address), (7) the Internet service provider of the accessing system and (8) any other similar data and information that may be used in the event of attacks on our information technology systems. In its use of this general data and information, Frankenfeld Spedition GmbH does not draw any conclusions identifying the data subject. Rather, this information is needed to (1) correctly deliver our website content, (2) optimise our website content as well as the advertising for it, (3) ensure the permanent functioning of our IT systems and the technology of our website, and (4) in the event of a cyberattack to provide law enforcement agencies with the information necessary to effect prosecutions. This data and information collected anonymously is analysed by Frankenfeld Spedition GmbH firstly statistically, secondly with the aim of improving data protection and data security in our company, and finally in order to ensure an optimal level of protection for the personal data we process. The anonymous data in the server log files is stored separately from all personal data disclosed to us by a data subject.
VI. Contact form and e-mail contact
Our website includes a contact form that can be used to contact us electronically. When a user opts to make contact in this way, the data entered in the form is transferred to and stored by us. This data is:
– Your name (mandatory field)
– Your e-mail address (mandatory field)
– Your message
We also offer you the opportunity to make an online application. The following data of applicants are transferred and stored:
– Given name
– Date of birth
– Phone number
– E-mail address
– Your message as well as any applications documents you may have attached such as letters, CVs, references, certificates.
As part of the dispatch process, your consent to the processing of data is obtained and you are referred to this data privacy statement. We process the personal data from the form solely for the purposes of processing the contact request and application. If you contact us by e-mail, we also have a required legitimate interest in processing the data. Alternatively, you can contact us via the e-mail address provided. We then store your personal data transferred with the e-mail. No data is passed onto third parties in this connection. The data is used solely for the processing of the correspondence.
VII. Rights of the data subject
Please use the information provided under Contact to assert your rights. Please ensure that it is possible for us to identify you uniquely as an individual.
You can assert the following rights at any time:
– to be provided with information about your personal data that we have stored and its processing,
– to have incorrect personal data rectified,
– to have your personal data that we have stored erased,
– to have the processing of data restricted if statutory obligations have prevented us from yet being able to erase your data,
– to make a complaint against the processing of your data by us, and
– request data portability if you have consented to the data processing or have concluded a contract with us.
If you have granted consent, you can withdraw it at any time with effect for the future. This does not affect the lawfulness of the processing of your data that has taken place before such withdrawal.
You can at any time lodge a complaint by contacting the supervisory authority responsible for you. Which supervisory authority is responsible for you depends on which federal state you reside, work in or where the alleged infringement occurred. A list of supervisory authorities (for the non-public sector) and their addresses can be found at: www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
The right to erasure does not apply to the extent that processing is necessary:
(1) for exercising the right of freedom of expression and information;
(2) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the area of public health in accordance with Art. 9(2) letters h and i as well as Art. 9(3) GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89(1) GDPR in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
(5) for the establishment, exercise or defence of legal claims.
IIX. Use of social media plugins
2. Google Maps
Our website uses functions of the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.
Whenever you access any of our pages that include XING functions, a connection is established to XING servers. To the best of our knowledge, no personal data is stored. In particular, no IP addresses are stored and no user behaviour is analysed.
YouTube is an internet video portal that enables video publishers to publish videos for free and allows other users to view, rate and comment on them, also for no charge. YouTube permits the publication of all types of videos, which is why not only whole films and TV programmes, but also music videos, trailers or videos created by users themselves can be accessed via the internet portal. The company which operates YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Every time you access an individual page of this website that is operated by the controller responsible for processing and into which a YouTube component (YouTube video) has been integrated, the respective YouTube component automatically causes the browser on the IT system of the data subject to download a display of the corresponding YouTube component from YouTube. More information about YouTube can be viewed at: https://www.youtube.com/yt/about/de/. As part of this technical process, YouTube and Google receive information about which specific sub-page of our website is visited by the data subject. If the data subject is simultaneously logged into YouTube, when a sub-page is accessed that includes a YouTube video, YouTube recognises which specific sub-page of our website the data subject is visiting. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject. YouTube and Google informed, via the YouTube component, that the data subject has visited our website if the data subject is simultaneously logged into YouTube when the website is accessed; this occurs irrespective of whether or not the data subject clicks a YouTube. If the data subject does not want this information to be transferred to YouTube and Google in this manner, he or she can prevent the transfer by logging out of their YouTube account before accessing our website. The data protection provisions published by YouTube, which can be accessed at https://www.google.de/intl/de/policies/privacy/, provide information about the collection, processing and use of personal data by YouTube and Google.
IX. Website analysis services
This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files, which are saved on your computer and enable an analysis of your use of the website. The information generated by a cookie on your usage of the website is sent to and stored on a Google server in the United States. We have activated the IP anonymisation. On this website, your IP address is therefore first of all truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the complete IP address transferred to a Google server in the United States and truncated there. On behalf of the operator of this website, Google uses this information to analyse your usage of the website, compile reports on website activity and provide other services connected to the use of the website and the Internet for the website operator. The IP address your browser supplies to Google Analytics is never combined with any other data held by Google. You can prevent the storage of cookies using the relevant setting in your browser software. However, we would like to point out that you may then not be able to fully use all the functions of this website. Furthermore, you can prevent Google from collecting and processing the data generated by the cookie and relating to your use of the website (including your IP address) by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de