Privacy Policy eXpresso

Introduction

Being the operator of this platform, FRIGOSPED GmbH Internationale Spedition, Sälzerstraße 1, 56235 Ransbach-Baumbach (hereinafter “we”) is the data controller in charge of processing personal data of any users of the platform “eXpress-o”. You can find our contact details in the imprint of the website, while the contacts for questions concerning the processing of your personal data are provided directly in this Privacy Statement.
We are strongly committed to protecting your privacy and your private and personal data. We collect, save, and use your personal data strictly in accordance with the provisions of this Privacy Statement and the applicable data protection provisions, including without limitation the European General Data Protection Regulation (GDPR) and national data protection provisions.
With this Privacy Statement, we wish to inform you to what extent and for what purpose your personal data is processed in connection with the use of our platform.

Personal data

Personal data is all information about an identified or identifiable individual. This includes information about your identity such as your name, your e-mail address, or your postal address. Any information that cannot be directly linked to your identity (e.g. statistical details such as the number of users of the website) is, however, not considered to be personal data.
You can essentially use our website without disclosing your identity and without providing any personal data. In that case, we will merely collect general information about your visit to our website. However, some of the services offered require you to provide certain personal data. As a rule, we will process such data only for purposes connected with the use of this website, including without limitation for the provision of the desired information. Whenever personal data is collected, you are only required to provide the data that is absolutely essential. Also, you may be asked to provide additional details, which is optional information provided voluntarily. We let you know in each case whether the input fields are for mandatory or optional details. More specific details are provided in the relevant section of this Privacy Statement.
There is no automated decision-making on the basis of your personal data in connection with the use of our website.

Processing personal data

We store the information provided by you on protected dedicated servers located within the European Union. Technical and organisational measures are taken to protect such servers against loss, destruction, access, modification, or dissemination of your data by unauthorized persons. Access to your data will be permitted only to a limited number of persons in charge of the technical, commercial, or editorial support of the servers. Notwithstanding regular controls, full protection against all risks cannot be provided.
Your personal data is transmitted over the Internet in encrypted form. We use SSL (Secure Socket Layer) encryption for transmission of data.

Disclosure of personal data to third parties

We use your personal information exclusively for providing the services that you have requested from us. Insofar as we use external service providers in performing the service requested, such external service providers will also access the data exclusively for the purpose of performing the service. By taking the necessary technical and organisational measures we ensure compliance with data protection policies and we demand the same of our external partners.
Moreover, we will not disclose the data to any third parties, including without limitation for advertising purposes, without your express consent. We will disclose your personal data only if you have given your consent to disclosure of the data or insofar as we are entitled or obligated to do so under legal provisions and/or administrative or judicial orders. This may include, without being limited to, giving information for purposes of criminal prosecution, in order to avert danger, or in order to enforce intellectual property rights.
Insofar as we transfer your personal data ourselves or through service providers to countries outside the European Union, we comply with the special requirements of Art. 44 ff. DSGVO for this purpose and also oblige our service providers to comply with these regulations. We will therefore only transfer your data to countries outside the European Union which are subject to the level of protection guaranteed by the DSGVO. This level of protection is guaranteed in particular by an appropriateness decision of the EU Commission (with regard to data exchange with the USA under the EU-US Privacy-Shield on the basis of the appropriateness decision of the EU Commission of July 12, 2016) or by the use of standard data protection clauses in accordance with Art. 46 para. 2 c) DSGVO.

Legal basis of data processing

Insofar as we obtain your consent to processing your personal data, Article 6(1)(a) of the GDPR constitutes the legal basis for such data processing.
Insofar as we process your personal data because processing is necessary for the performance of a contract or is necessary under a quasi-contractual relationship with you, the lawfulness of data processing is based on Article 6(1)(b) of the GDPR.
Insofar as we process your personal data because processing is necessary for compliance with a legal obligation, the lawfulness of data processing is based on Article 6(1)(c) of the GDPR.
Furthermore, Article 6(1)(f) of the GDPR may constitute the legal basis for data processing, if processing of your personal data is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by your interests or your fundamental rights and freedoms which require protection of personal data.
Throughout this Privacy Statement, we refer to the legal basis on which we process your personal data.

Deletion of data and duration of storage

We invariably delete or block any personal data provided by you as soon as the purpose of storage of such data has ceased to apply. However, we may continue to store your personal data beyond that, if such storage is governed by legal provisions to which we are subject, including without limitation the legal obligation to retain business records and documentation. In such a case, we will delete or block the personal data after the prescribed period of time has expired.

Use of our Platform

Information relating to your computer

Every time you access our platform, we will collect the following information relating to your computer, regardless of whether or not you have registered: the IP address of your computer, the inquiry of your web browser, and the time stamp of that inquiry. In addition, the status and the amount of data transmitted in the course of the inquiry are collected. We also collect product and version information about the web browser used and the operating system of the computer. Furthermore, we record the website from which our own website has been accessed. The IP address of your computer is stored only for the duration of your use of our website; afterwards, it is deleted or anonymised by truncation. The remaining data is stored for a limited period of time.
We use this data to operate the platform, more specifically for troubleshooting, or in order to assess the degree of utilisation of the platform, or to carry out adjustments or improvements thereof. Such purposes also constitute our legitimate interest in data processing in accordance with Article 6(1)(f) of the GDPR.

Use of cookies

Like many other websites, our platform uses cookies. Cookies are small text files that are stored on your computer and store certain settings and data of your web browser for the exchange with our platform. A cookie typically contains the name of the domain from which the cookie file was sent, information about the age of the cookie, and an alphanumeric identifier.
Cookies enable us recognise your computer and make any default settings immediately available. We use different cookies to achieve this purpose.
Essential cookies enable basic functions and are necessary for the proper functioning of the website. This also constitutes a legitimate interest in the processing of the data in accordance with Article 6(1)(f) of the GDPR.
The cookies we use are so-called session cookies, which are automatically deleted after the browser session ends. In individual cases, we may use cookies with a longer storage period so that your preferences and preferences can be taken into account the next time you use our platform.
Most web browsers are set to accept cookies by default. However, you can disable the storage of cookies or set up your web browser to inform you when you receive a cookie. It is also possible to manually delete stored cookies in the browser settings. Please note that your use of our website may be limited or restricted if you refuse to save cookies or delete necessary cookies.

Registration

To enable the use of the web portal, Frigosped first sets up an administrator-account for its clients or business partners. In this respect, the Administrator has to provide the data requested during the registration process, namely his title, first and last name, his gender as well as his telephone number and e-mail address. We also record the date and time of registration and the IP-address. Afterwards, the client or business partner can allow his employees access to the portal, strictly observing the requirements of the terms of use of the web portal. In this respect, we record the date and time of use of the portal and your IP address with each use of the web portal. If the customer or business partner enables you to access the portal using an individual account, we may also collect the following data: Title, first and last name, your gender as well as your telephone number and e-mail address. This depends in particular on the information you provided during registration, which the client or business partner is responsible for carrying out in each individual case. Frigosped is not responsible for the independent data processing of the business partner or clients insofar, e.g. for documentation purposes.
You must register to use our web portal. To do so, you must provide the data requested during registration, namely your title, first and last name, gender, telephone number and e-mail address. We also record the date and time of registration and your IP-address.
If you give your consent, processing of data provided for registration purposes is based on Article 6(1) (a) of the GDPR. If you register with us for the purposes of performance or initiation of a contract, the legal basis for processing of the data is additionally constituted by Article 6(1)(b) of the GDPR.
The information mandatorily required for registration is needed to execute or initiate a contract for certain services to be provided by us.
With the registration a user account is created for you. The data in the user account will be stored by us as long as an active customer relationship or business partnership exists. You can request the deletion of your customer account at any time.

Communication via web-portal

The web portal provided by us offers you the possibility of electronic information exchange with us. Within the scope of this information exchange, in particular the upload and deposit of documents, various data are generated and processed by us. On the one hand, this is data that is technically necessary for the provision of electronic data exchange. This includes your IP address and information about your browser.
If you use the upload service, the documents you upload will only be forwarded to us on your behalf after you have actively approved them. For the purpose of checking the completeness and legibility of the uploaded information, we may technically check if this is necessary.
In addition, documents that you make available to us within the scope of using our web portal may contain personal data, for example, proofs of delivery and invoices may contain your first and last name and your address. All the aforementioned data are those which we process for the fulfilment or initiation of a contract. The legal basis for the processing of this data is therefore Art. 6 para. 1 lit. b) DSGVO.
The data will be stored by us for as long as they are necessary for the fulfilment of the contract. In addition, we store this data for the fulfilment of post-contractual obligations and due to commercial and tax law retention periods for the legally prescribed period. This retention period is usually 10 years to the end of the respective calendar year.

Google Maps

We use the map service Google Maps for our online offer. Google Maps is a service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). The maps included in our online offer are retrieved directly from Google according to Google’s specifications, so that Google always receives your IP address when displaying the map. Google also uses cookies for the various services, which can also be used to evaluate your user behaviour. In order to comply with data protection regulations, the terms of use for the map service contain the regulations that serve to protect your data. Google’s terms of use for the map service can be found at https://www.google.com/intl/en_US/help/terms_maps/, general explanations by Google on data protection can be found at https://policies.google.com/privacy?hl=en&gl=en. The legal basis for the integration of the map service is Article 6(1)(f) of the GDPR; our legitimate interest lies in the provision of map material for your orientation. When setting cookies by Google, we ask for your consent when you visit our website. The legal basis for data processing within the framework of the use of the map service is your consent in accordance with Article 6(1)(a) of the GDPR. Order processing
If you place an order, we will use your personal information only within our company and our affiliated companies and the enterprise appointed to process purchase orders.

Customer-specific data processing

We use your personal information with regard to the processing of transport-, traffic-, forwarding- and storage-contracts only within our company and affiliated companies and only pass it on to our contractual partners if and insofar as this is necessary for processing orders or business contacts.
For order processing we cooperate with various companies in the context of logistics services. Thus, if necessary, we pass on contact details (for example name and address) to the respective transport company that has been commissioned to carry out the order. In doing so, we ensure that our partners also comply with data protection regulations. The legal basis for this is Art. 6 para. 1 lit. b) DSGVO, because the processing of your personal data is necessary for the fulfilment of the contract with you.
The data will be stored by us for as long as it is necessary to fulfill the contract. In addition, we store this data for the fulfillment of post-contractual obligations and based on commercial and tax retention periods for the legally prescribed period. This retention period is usually 10 years at the end of the respective calendar year.

Business partner specific data processing

In order to continuously record the status of orders, it is basically possible to use a mobile application, which is designed to ensure flexible access to the web portal during order execution. For example, it should be possible to record location data and transfer documents to the web portal in a timely and flexible manner.
Different categories of data can be processed in connection with the use of the mobile application. If the mobile application is used, we store in particular the call number of the mobile device used. Furthermore, status data and thus location data can be communicated via the application. For this purpose, the map application installed on the mobile device can also be accessed.
Status data can be substantiated by GPS data. However, this requires in any case that the employee activates the GPS function of the mobile application himself. With regard to the transmission of location data, it is the responsibility of the business partner to create the necessary legal basis in accordance with Section 9.6 of the “eXpress-o” terms of use.
Furthermore, the upload of documents requires access to the camera function of the mobile device and, to a limited extent, to the corresponding storage capacities of the end device.
In addition to the data required for the technical use of the mobile application, in particular the IP address and telephone number of the end device, location data of employees of our business partners (drivers) may also be processed. These are only stored by us until the order has been completely processed. Also, access to the respective mobile end devices is only carried out to ensure the functions described above and ends immediately after the upload of documents or the provision of the delivery status.
The mobile application is provided solely for the purpose of making the processing of the respective order as effective and unbureaucratic as possible. This is also our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f) DSGVO.
The deletion of the data accruing in this respect is carried out after complete execution of the order; legal storage obligations remain unaffected in each case.

Your rights; contact

We are strongly committed to explaining how we process personal data and to inform you about your rights as transparently as possible. If you want more detailed information or wish to exercise your rights, you can contact us at any time so that we can take care of your concerns.

Rights of persons concerned

You have extensive rights with respect to the processing of your personal data. First of all, you have an extensive right to information and under certain circumstances may demand correction and/or deletion or blocking of your personal data. You can also demand restriction of processing and you have a right of objection. You also have a right to data portability with a view to personal data that you have transmitted to us.
If you wish to assert any of your rights and/or want more detailed information concerning your rights, please contact our customer service. Alternatively, you may contact our data protection officer.

Revocation of consent and objection

You may at any time revoke your consent with future effect. Revocation of the consent does not affect the legality of any processing performed on the basis of such consent given up until the revocation thereof. In such cases as well, please contact our customer service and/or our data protection officer.
Insofar as the processing of your personal data is not based on consent given by you but on another legal basis, you can object to the data processing. Your objection will lead to a review and, if necessary, to termination of the data processing. You will be informed of the outcome of the review and – if the data processing is to be continued nonetheless – you will receive further information from us on why the data processing is admissible.

Data protection officer; contact

We have appointed a data protection officer who supports us in data protection issues and who you can contact directly. If you have questions regarding our handling of personal data or if you require other information on data protection issues, please do not hesitate to contact our Data Protection Officer:
Beratungshaus Jens Protze, An der Hauptstraße 4a, 04720 Döbeln, jens.protze@t-online.de

Complaints

If you are of the opinion that the processing of your personal data does not comply with this Privacy Statement or the applicable data protection provisions, you have the right to file a complaint with a supervisory authority. You can file a complaint with our data protection officer. Our data protection officer will review the matter and inform you of the outcome of the review.

Further information

Amendments of this Privacy Statement

Any revision of this Privacy Statement is identified by the date specified (see below). We reserve the right to amend this Privacy Statement at any time with effect for the future. Amendments will be made, among other things, in case of technical adjustments of the website or changes of the data protection laws. The Privacy Statement as amended from time to time is always made available directly through our website. We recommend obtaining information on any changes of this Privacy Statement on a regular basis.
This Privacy Statement was last revised in: July 2020