Thank you for your interest in Cargodian GmbH. We are aware of the importance of the processing of personal data for the user and accordingly observe all relevant legal requirements. A use of the internet pages of Cargodian GmbH is basically possible without any indication of personal data, with the exception of legally required log files. However, if a person concerned wishes to make use of services of our company, it may become necessary to process personal data.
The processing of personal data, for example the name, address, e-mail address or telephone number of a person concerned, is always carried out in accordance with the data protection regulation and in compliance with the country-specific data protection regulations applicable to Cargodian GmbH. By means of this data protection declaration, we would like to inform the public about the type, scope and purpose of the personal data we collect, use and process. Furthermore, this data protection declaration informs affected persons about the rights to which they are entitled.
Cargodian GmbH, as the responsible for processing, has implemented numerous technical and organisational measures to ensure the most complete possible protection of the personal data processed via this website and also in principle within the company. Nevertheless, Internet-based data transmissions may have security gaps, so that absolute protection cannot be guaranteed. For this reason, every person concerned is free to transmit personal data to us by alternative means, such as by telephone.
In the following, Cargodian GmbH reports transparently about the responsible activities within its area of responsibility in order to inform all parties involved. The information covers not only processing activities directly related to the company’s websites, but also activities that go beyond these.
NAME AND ADDRESS OF THE RESPONSIBLE
Cargodian GmbH ( Amselstr. 2a, 83101 Rohrdorf, Germany ), hereinafter also “we”, “us”, inform you in the following about the processing of your personal data in the context of the use of our website https://www. cargodian .com, hereinafter also “website” as well as in the context of business relations between you and us.
If you have any questions regarding data protection in connection with our website, the services offered or existing business relationships, please contact us at contact@ cargodian .com. Please send a request for information to
Data Information and Security
or by e-mail to:
If you contact us by e-mail, the communication is not encrypted.
GENERAL INFORMATION ON DATA PROCESSING
a) What do we process your data for (purpose of processing) and on what legal basis?
We process personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). Personal data is processed by us to fulfil contractual obligations in accordance with Art. 6 Para. 1 S. 1 lit. b) GDPR. This includes in particular:
The execution of service / performance contracts and the associated business relationship.
The initiation of contractual relationships.
In addition, we process your data to protect our legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR, including
· for contacting you, insofar as a permanent business relationship with you or your employer exists or is intended (business contacts);
· for the purposes of auditing;
· to ensure IT security and IT operations;
· for advertising purposes, provided that you have not objected to the use of your data;
· for the purpose of compiling statistics;
· for purposes of prevention, clarification and reporting of criminal offences, e.g. fraud, e.g. deception of identity or fraudulent performance;
· for the assertion of legal claims including collection and defence in legal disputes.
· We process your data on the basis of your consent in accordance with Art. 6 Para. 1 S.1 lit.
a) GDPR for specific purposes, in particular
· Market research and customer surveys;
· for the personalised use of the website and personalised offers;
· for analytical purposes in order to optimise our offer for you.
· Any consent granted can be revoked at any time. This also applies to the revocation of declarations of consent that were given to us before the application of the GDPR, i.e. before 25.05.2018. The revocation of a consent is only effective for the future and does not affect the legality of the data processed until the revocation.
We process data on the basis of legal obligations in accordance with Art. 6 Para. 1 S.1 lit. c) GDPR:
Insofar as we are legally obliged to do so, we process personal data in order to comply with commercial, tax or data protection storage obligations or to fulfil security requirements. Further information on retention periods can be found under “Duration of data processing”.
b) What personal data are you obliged to provide?
For legally prescribed or contractual requirements, we have marked the respective input fields in the input masks, if applicable, on our websites, which must be filled in by you in order for us to provide the contract or service you request.
c) How long is your data stored?
Your personal data will be deleted as soon as it is no longer required for the purposes mentioned. However, we may have to continue to store your data until the expiry of the retention obligations and periods stipulated by the legislator or supervisory authorities, which may result from the German Commercial Code, the German Fiscal Code and the Money Laundering Act, among others, and which generally amount to 6 to 10 years. In addition, we may store your data until the expiry of the statutory limitation periods (i.e. as a rule 3 years; in individual cases, however, up to 30 years), insofar as this is necessary for the assertion, exercise or defence of legal claims. After this period, the corresponding data is routinely deleted.
Who receives your data?
In the context of the above data processing and the respective legal basis mentioned (execution of contract, in the legitimate interest, with consent or due to legal processing obligations), your data may be passed on to the following categories of recipients:
· auxiliary persons, e.g. service providers,
· other service providers, e.g. for the provision of the website, newsletter dispatch or feedback handling,
· government bodies and authorities, e.g. due to legal regulations or police and investigation activities.
· It may happen that personal data are transferred to third countries or to international organisations. For your protection and the protection of your personal data, appropriate guarantees are provided for such data transfers in accordance with and in compliance with the legal requirements.
Insofar as these transfers are not based on a legal basis or are made to a country for which no adequacy decision issued by the EU Commission has been made, we use the EU standard contractual clauses.
Information on EU standard contractual clauses can be found here on the websites of the European Union.
WHICH RIGHTS DO YOU HAVE?
a) Your rights at a glance
It is important for us to make our processes fair and transparent. It is therefore important for us that those affected can exercise the following rights if the respective legal requirements are met:
· Right to information, Art. 15 GDPR
· Right of rectification, Art. 16 GDPR
· Right of deletion (“right to be forgotten”), Art. 17 GDPR
· Right to restrict processing, Art. 18 GDPR
· Right to data transferability, Art. 20 GDPR
· Right of appeal, Art. 21 GDPR
To exercise your rights, you can contact us by e-mail at firstname.lastname@example.org. For identification purposes we ask you to provide the following information:
and optionally: relationship with Cargodian GmbH, further information to clearly identify you in our systems
If you send us a copy of your identity card, please black out all details except for your name, first name and address.
In order to be able to process your application, as well as for identification purposes, we would like to point out that we will process your personal data in accordance with Art. 6 para. 1 lit. c GDPR.
Furthermore, in accordance with Art. 77 GDPR in conjunction with § 19 BDSG you have the right to appeal to a supervisory authority. The supervisory authority responsible for Cargodian GmbH is
Der Landesbeauftragte für den Datenschutz
und die Informationsfreiheit im Freistaat Bayern
b) How can you withdraw your consent?
If you have given us your consent to process your personal data, we hereby inform you that you can revoke this consent at any time with effect for the future.
If you have given your consent on this website, please visit the page on which you originally gave your consent to revoke it.
In all other cases or if you have problems to revoke your consent on this website, you can of course also contact us at any time directly at the e-mail address email@example.com
Please note that the consent you have revoked will only have effect for the future and will not affect the lawfulness of processing in the past. In some cases, despite your revocation, we are entitled to further process your personal data on another legal basis – for example, to fulfil a contract.
c) Information on your right of objection under Art. 21 GDPR
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you which is carried out pursuant to Article 6 paragraph 1 letter e or f FADP; this also applies to profiling based on these provisions.
The controller will no longer process the personal data concerning you, unless he can demonstrate compelling reasons for processing which are justified on grounds of protection and which outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
If the personal data concerning you are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing, including profiling, insofar as it is linked to such direct marketing.
If you object to processing for the purposes of direct marketing, the personal data concerning you will no longer be processed for those purposes.
You have the possibility to exercise your right of objection in relation to the use of information society services, without prejudice to Directive 2002/58/EC, by using automated procedures involving technical specifications.
PROVISION OF THE WEBSITE AND CREATION OF LOG FILES
When users visit our website, our system automatically collects data and information from the computer system of the calling computer each time our website is accessed. The following data (“technical information”) is collected:
Information about the browser type and version used
The user’s operating system (also device type, i.e. PC, mobile phone, etc.)
The IP address of the user
Date and time of access
Location of the access (e.g. opening the website via a Google link)
The collected data is temporarily stored in log files, which are deleted daily. Before deletion, the log files are read out and analysed. In doing so, we pursue the purpose of (network) security, for example to ward off cyber attacks, marketing, continuous improvement of the website and its alignment with the needs and requirements of our customers. For example, this analysis enables us to deliver the website optimised for your web browser.
The legal basis for the collection, temporary storage and further processing is our legitimate interest in offering our customers an optimal and profitable website with maximum functionality and maximum comfort, Art. 6 para. 1 lit. f GDPR.
External Hosting: This website is hosted by our external service provider Odoo.com ( Hoster) Personal data collected on this website is stored on the hoster’s servers. This may include, but is not limited to, IP addresses, contact requests, contact information, web page access and other data generated by a website.
The use of the hoster is for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).
Our hoster will only process your data to the extent necessary to fulfill its performance obligations and will follow our instructions with regard to this data.
When all cookies are deleted, any opt-out cookies already set will also be deleted, so that you will have to re-declare any opt-outs you have already declared.
We distinguish between cookies that are absolutely necessary for the technical functions of the website and optional cookies.
To enable you to determine your desired data protection settings for visiting our website as individually as possible, we will give you the opportunity below to set your preferences for the categories operational necessity, statistics, comfort and personalisation for you.
Category “Operational necessity”
These cookies are necessary for the operation of the site.
To further improve our offer and our website, we collect anonymous data for statistics and analysis. With the help of these cookies we can, for example, determine the number of visitors and the effect of certain pages on our website and optimise our content.
“C o nvenience” category
We use these cookies to make the use of the site easier for you. For example, the language you have selected can be displayed again initially on your next visit.
These cookies are used to display personalized content according to your interests. This enables us to present you with offers that are particularly relevant to you.
Which cookies of the category “operational necessity” do we use?
Which cookies of the category “Statistics” do we use?
On this website, the controller has integrated the component of Google Analytics (with the anonymizer function). Google Analytics is a web analytics service. Web analytics is the collection, gathering, and analysis of data about the behavior of visitors to websites. A web analysis service collects, inter alia, data about the website from which a person has come (the so-called referrer), which sub-pages were visited, or how often and for what duration a sub-page was viewed. Web analytics are mainly used for the optimization of a website and in order to carry out a cost-benefit analysis of Internet advertising.
The operator of the Google Analytics component is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. For the web analytics through Google Analytics the controller uses the application “_gat. _anonymizeIp”. By means of this application the IP address of the Internet connection of the data subject is abridged by Google and anonymised when accessing our websites from a Member State of the European Union or another Contracting State to the Agreement on the European Economic Area. The purpose of the Google Analytics component is to analyze the traffic on our website. Google uses the collected data and information, inter alia, to evaluate the use of our website and to provide online reports, which show the activities on our websites, and to provide other services concerning the use of our Internet site for us.
Google Analytics places a cookie on the information technology system of the data subject. The definition of cookies is explained above. With the setting of the cookie, Google is enabled to analyze the use of our website. With each call-up to one of the individual pages of this Internet site, which is operated by the controller and into which a Google Analytics component was integrated, the Internet browser on the information technology system of the data subject will automatically submit data through the Google Analytics component for the purpose of online advertising and the settlement of commissions to Google. During the course of this technical procedure, the enterprise Google gains knowledge of personal information, such as the IP address of the data subject, which serves Google, inter alia, to understand the origin of visitors and clicks, and subsequently create commission settlements. Google Analytics cookies are stored based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.
The cookie is used to store personal information, such as the access time, the location from which the access was made, and the frequency of visits of our website by the data subject. With each visit to our Internet site, such personal data, including the IP address of the Internet access used by the data subject, will be transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass these personal data collected through the technical procedure to third parties. The data subject may, as stated above, prevent the setting of cookies through our website at any time by means of a corresponding adjustment of the web browser used and thus permanently deny the setting of cookies. Such an adjustment to the Internet browser used would also prevent Google Analytics from setting a cookie on the information technology system of the data subject. In addition, cookies already in use by Google Analytics may be deleted at any time via a web browser or other software programs.
Transfer to a third country: Google LLC is based in the USA. Storage period: 14 months. Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.com/intl/en/policies/privacy/ and under http://www.google.com/analytics/terms/us.html. Google Analytics is further explained under the following Link https://www.google.com/analytics/.
The GTM (Google Tag Manager) tool is used for integration. With this service, website tags can be managed via an interface. The Google Tool Manager only implements tags. This means: no cookies are used and no personal data is collected. The Google Tool Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it will remain for all tracking tags as long as they are implemented with the Google Tag Manager.
Which “convenience” category cookies do we use?
Which cookies in the “Personalization” category do we use?
On our website we only refer to our business channels on LinkedIn and Twitter by a direct link. However, we do not use so-called “social media plugins”, through which information about the person concerned is passed on.
Online presence in social media: We maintain online presences within social networks and platforms in order to be able to communicate with customers, interested parties and users active there and to inform them about our services. We point out that user data may be processed outside the European Union. This can result in risks for the users, because the enforcement of the users’ rights could be made more difficult. Furthermore, user data is generally processed for market research and advertising purposes. For example, user profiles can be created from the user behaviour and the resulting interests of the users. The user profiles can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users’ computers, in which the usage behaviour and interests of the users are stored. Furthermore, data may also be stored in the user profiles regardless of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them). The processing of users’ personal data is based on our legitimate interests in effective information of users and communication with users in accordance with Art. 6 para. 1 lit. f. GDPR. If users are asked by the respective providers to give their consent to data processing (i.e. to give their consent e.g. by ticking a check box or confirming a button), the legal basis for processing is Art. 6 para. 1 lit. a., Art. 7 GDPR. For a detailed presentation of the respective processing and the possibilities of objection (opt-out), we refer to the following linked information of the providers. Also in the case of requests for information and the assertion of user rights, we would like to point out that these can most effectively be asserted with the providers. Only the providers have access to the data of the users and can directly take appropriate measures and provide information. Should you nevertheless require assistance, you can contact us.
On this website, we have integrated components of YouTube. YouTube is an Internet video portal that enables video publishers to set video clips and other users free of charge, which also provides free viewing, review and commenting on them. YouTube allows you to publish all kinds of videos, so you can access both full movies and TV broadcasts, as well as music videos, trailers, and videos made by users via the Internet portal. The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, UNITED STATES. The YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, UNITED STATES.
YouTube is used to help make our website appealing. This constitutes a justified interest pursuant to Art. 6 (1) (f) GDPR.
DESCRIPTION OF OUR DATA PROCESSING ACTIVITIES
We offer various services via our websites and through our activity/presence in social networks such as LinkedIn or XING. In order to provide these services, we have to collect and process personal data of the user or our customer.
The processing activities within the meaning of Art. 13 GDPR are described below:
a) Contact with/by (potential) customers
If you are a customer of Cargodian GmbH, we may need to collect and use information about you or people within your organization to provide services to you and/or notify you of content published by Cargodian GmbH. that is likely to be important and useful to you.
Description and scope of data processing
On our website it is possible to contact us via the provided e-mail address. In this case, the user’s personal data transmitted with the e-mail will be stored. It is also conceivable that initial contact is usually made via corresponding social networks such as XING or LinkedIn. In this case, the personal data is recorded which is related to the contact and relevant for the further business relationship. We only collect data about our customers to a very limited extent. The following data is collected: