Home » Privacy Policy

Privacy Policy

Thank you for visiting our website. Compliance with data protection regulations is extremely important to us. The goal of this Privacy Policy is to inform you, as a user of the website, about the nature, scope and purpose of the processing of your personal data and your rights in this context, insofar as you are considered a data subject within the meaning of Article 4 (1) of the General Data Protection Regulation.

1.       Data controller

This website and the associated services are operated by:

GRIESHABER Logistik GmbH

Stettiner Strasse 1

88250 Weingarten
Germany

Phone: +49 751 5001-0

Fax: 49 751 5001-250

Email: info@grieshaberlog.com

2.       Data protection officer

We have appointed a data protection officer.

www.mein-datenschutzbeauftragter.de

Mr Philipp Herold

Hafenstrasse 1a

23568 Lübeck

Email: datenschutz@grieshaberlog.com

3.       General information

We have designed this website to collect as little data from you as possible. We always ensure that we only process your personal data on the basis of a legal principle or your consent. We comply with the provisions of the General Data Protection Regulation (GDPR), which has been in force since 25 May 2018, and the applicable national regulations, such as the German Federal Data Protection Act (“Bundesdatenschutzgesetz” or BDSG), the German Federal Act on Privacy in Telecommunications and Telemedia (“Telekommunikation-Telemedien-Datenschutzgesetz” or TTDSG) or other, more specific data protection laws.

4.       Purpose of and legal basis for the processing of personal data

We always process your personal data for a specific purpose.

In summary, we process your personal data for the following purposes:

1. To process your request when you contact us (e.g. email address, first name, last name)
2. For technical reasons linked to the provision of our website, and to convey information to you via our website (e.g. IP address, cookies, browser information)
3. To receive and process your application for one of our vacancies

The following applies with regard to the legal basis for the processing of your personal data:

We process personal data that is required to establish, implement or process our range of services (contract processing) in accordance with Art. 6 (1)(b) GDPR. Insofar as we obtain your consent to process your personal data, this consent forms the legal basis for the data processing in accordance with Art. 6 (1)(a) GDPR. We are also entitled to process your data in order to protect our legitimate interests, provided that such processing does not override your interests or fundamental rights and freedoms with regard to the processing of personal data (Art. 6 (1)(f) GDPR). Insofar as we use external service providers within the scope of commissioned data processing, the legal basis for such processing is Art. 28 GDPR.

5.       Collection of personal data when you visit our website

If you merely make informational use of our website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which we require for technical reasons in order to display our website to you and to ensure its stability and security (the legal basis is Art. 6 (1)(1)(f) GDPR):

• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access Status/HTTP status code
• Data volume transmitted in each case
• Website from which the request originated
• Browser
• Operating system and its interface
• Language and version of the browser software

In addition to the aforementioned data, cookies are stored on your computer when you access our website. For more information about this, please refer to the “Cookies” section of this Privacy Policy as well as the relevant consent management tool.

6.       Integration of services from other providers

Our website uses content, services and offerings from other providers. These include, for example, services that enable statistical evaluations of the website’s use and visitors. In order for this data to be retrieved and displayed in the user’s browser, the user’s IP address must be transmitted to the respective third-party providers.

Although we endeavour to exclusively use third-party providers that either only require your IP address to deliver content or use anonymised IP addresses, we are not able to stop them from potentially storing your IP address. Information about our current third-party providers is provided elsewhere in this Privacy Policy (see below).

HubSpot Analytics

Nature and scope of the processing

We use HubSpot Analytics by HubSpot, Inc., Cambridge, Massachusetts, US, as an analysis service for the statistical evaluation of our website. The statistics in question include, for example, the number of times our website is accessed, visits to sub-pages and the length of each visit to the site. HubSpot Analytics uses cookies and other browser technologies to analyse user behaviour and recognise users. Among other things, it uses this information to compile reports on website activity.

Purpose and legal basis

Our use of HubSpot Analytics is based on your consent in accordance with Art. 6 (1)(a) GDPR and § 25 (1) TTDSG.

We will intentionally transfer your personal data to third countries outside the European Economic Area, in particular the USA. In cases where no adequacy decision by the European Commission exists (e.g. in the USA), we have agreed on other suitable warranties with the recipients of the data within the meaning of 44 et seq. GDPR. These warranties are – unless otherwise stated – the EU Commission’s standard contractual clauses pursuant to Implementation Decision (EU) 2021/914 of 4 June 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, before transferring your data to third countries, we obtain your consent in accordance with Art. 49 (1)(1)(a) GDPR, which you grant to us via the Consent Manager (or other forms, registrations, etc.). We wish to inform you that, in the case of transfers to third countries, there may be unknown risks with regard to the details of the processing (e.g. your data may be processed by security services in the third country to an unknown extent, without your or our knowledge and with unknown consequences for you which are beyond our control).

Storage period

The specific storage period for the processed data is outside our sphere of control and is determined by HubSpot, Inc. For more information, please refer to the privacy policy for HubSpot Analytics: https://legal.hubspot.com/privacy-policy.

HubSpot CDN

Nature and scope of the processing

We use HubSpot CDN to ensure proper provision of our website’s content. HubSpot CDN is a service of HubSpot, Inc., which acts as a content delivery network (CDN) on our website to ensure the functionality of other services provided by HubSpot, Inc. Details of said services can be found elsewhere in this Privacy Policy. This section only covers our use of the CDN. A CDN helps us to make our website’s content, in particular files such as graphics or scripts, available more quickly by means of regionally or internationally distributed servers. When you access this content, you establish a connection to the servers of HubSpot, Inc., Cambridge, Massachusetts, US, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed solely for the above purposes and to maintain the security and functionality of HubSpot CDN.

Purpose and legal basis

Our use of the content delivery network is based on our legitimate interests, i.e. our interest in ensuring the secure and efficient provision and optimisation of our website in accordance with Art. 6 (1)(f) GDPR.

We will intentionally transfer your personal data to third countries outside the European Economic Area, in particular the USA. In cases where no adequacy decision by the European Commission exists (e.g. in the USA), we have agreed on other suitable warranties with the recipients of the data within the meaning of 44 et seq. GDPR. These warranties are – unless otherwise stated – the EU Commission’s standard contractual clauses pursuant to Implementation Decision (EU) 2021/914 of 4 June 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

Storage period

The specific storage period for the processed data is outside our sphere of control and is determined by HubSpot, Inc. For more information, please refer to the privacy policy for HubSpot CDN: https://legal.hubspot.com/de/privacy-policy.

Hubspot Forms

Nature and scope of the processing

We have integrated HubSpot Forms on our website. HubSpot Forms is a service of HubSpot, Inc. and provides marketing automation software for marketing services and products, including SEO and content creation, lead management, email marketing and web analytics. HubSpot Forms is used to save data entered in forms, e.g. when you contact us via our contact form. Data provided in this way may be stored in our customer relationship management system (CRM system).

In this case, your data will be forwarded to the operator of HubSpot Forms, HubSpot, Inc, Cambridge, Massachusetts, US.

Purpose and legal basis

Our use of this service is based on your consent in accordance with Art. 6 (1)(a) GDPR and § 25 (1) TTDSG.

We will intentionally transfer your personal data to third countries outside the European Economic Area, in particular the USA. In cases where no adequacy decision by the European Commission exists (e.g. in the USA), we have agreed on other suitable warranties with the recipients of the data within the meaning of 44 et seq. GDPR. These warranties are – unless otherwise stated – the EU Commission’s standard contractual clauses pursuant to Implementation Decision (EU) 2021/914 of 4 June 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, before transferring your data to third countries, we obtain your consent in accordance with Art. 49 (1)(1)(a) GDPR, which you grant to us via the Consent Manager (or other forms, registrations, etc.). We wish to inform you that, in the case of transfers to third countries, there may be unknown risks with regard to the details of the processing (e.g. your data may be processed by security services in the third country to an unknown extent, without your or our knowledge and with unknown consequences for you which are beyond our control).

Storage period

The specific storage period for the processed data is outside our sphere of control and is determined by HubSpot, Inc. For more information, please refer to the Privacy Policy for HubSpot Forms: https://legal.hubspot.com/privacy-policy.

Bootstrap cdn

Nature and scope of the processing

We use Bootstrap CDN to properly deliver the content of our website. Bootstrap CDN is a service of Bootstrap, which acts as a content delivery network (CDN) on our website.

A CDN helps us to make our website’s content, in particular files such as graphics or scripts, available more quickly by means of regionally or internationally distributed servers. When you access this content, you establish a connection to the servers of Bootstrap, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed solely for the above purposes and to maintain the security and functionality of Bootstrap CDN.

Purpose and legal basis

Our use of the content delivery network is based on our legitimate interests, i.e. our interest in ensuring the secure and efficient provision and optimisation of our website in accordance with Art. 6 (1)(f) GDPR.

We will intentionally transfer your personal data to third countries outside the European Economic Area, in particular the USA. In cases where no adequacy decision by the European Commission exists (e.g. in the USA), we have agreed on other suitable warranties with the recipients of the data within the meaning of 44 et seq. GDPR. These warranties are – unless otherwise stated – the EU Commission’s standard contractual clauses pursuant to Implementation Decision (EU) 2021/914 of 4 June 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

Storage period

The specific storage period for the processed data is outside our sphere of control and is determined by Bootstrap. For more information, please see the privacy policy for Bootstrap CDN: https://www.bootstrapcdn.com/privacy-policy/.

eRecht24

Nature and scope of the processing

We use eRecht24 CDN to properly provide the content of our website. eRecht24 CDN is a service of eRecht24 GmbH & Co. KG, which acts as a content delivery network (CDN) on our website. A CDN helps us to make our website’s content, in particular files such as graphics or scripts, available more quickly by means of regionally or internationally distributed servers. When you access this content, you establish a connection to the servers of eRecht24 GmbH & Co. KG, Lietzenburger Str. 94, 10719 Berlin, Germany, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed solely for the above purposes and to maintain the security and functionality of eRecht24 CDN.

Purpose and legal basis

Our use of the content delivery network is based on our legitimate interests, i.e. our interest in ensuring the secure and efficient provision and optimisation of our website in accordance with Art. 6 (1)(f) GDPR.

Storage period

The specific storage period for the processed data is outside our sphere of control and is determined by eRecht24 GmbH & Co. KG. For more information, please refer to the privacy policy for eRecht24 CDN: https://www.e-recht24.de/datenschutzerklaerung.html.

Usercentrics

Nature and scope of the processing

We have integrated Usercentrics on our website. Usercentrics is a consent solution provided by Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, which makes it possible to obtain and document the users’ consent to the storage of cookies. Usercentrics uses cookies or other web technologies to recognise users and to store the status of their consent (whether granted or revoked).

Purpose and legal basis

Our use of this service is based on our need to obtain the legally required consent for the use of cookies in accordance with Art. 6 (1)(c) GDPR.

Storage period

The specific storage period for the processed data is outside our sphere of control and is determined by Usercentrics GmbH. For more information, please refer to the privacy policy for Usercentrics: https://usercentrics.com/privacy-policy/.

7.       Cookies

Cookies are small text files that are stored on your data carrier and save certain settings and data that are transmitted to/from our system via your browser. A cookie typically contains the name of the domain from which the cookie data was sent as well as information about the age of the cookie and an alphanumeric identifier.

Cookies enable our systems to recognise the user’s device and make any previously saved preferences immediately available. When a user accesses the platform, a cookie is immediately transferred to their computer’s hard disk. Cookies help us to improve our website and provide you with a better and more tailored service. They enable us to recognise your computer or (mobile) device when you return to our website and thereby:

• to store information about your preferred activities on the website and thus to tailor our website to your individual interests.
• to speed up the processing of your requests.

We work with third-party services that help us to make our online services and our website more appealing for you. Therefore, cookies from these partner companies (third-party providers) are also stored on your hard drive when you visit our website. These cookies automatically delete themselves after a specified time period.

For more information about these third-party providers, please refer to the Cookie Consent Tool and the privacy policies stored therein: https://usercentrics.com/.

If you wish to prevent the use of browser cookies on your device, you can configure your browser to block the storage of cookies. Please note that by doing so you may only be able to use our website to a limited extent or not at all. If you only wish to accept our own cookies, but not those of our service providers and partners, you can do so by selecting the option “Block third-party cookies” in your browser’s settings. We do not accept any responsibility for the use of third-party cookies.

8.       Contacting us

You can contact us by email. In this case, we will store the personal data you provide in order to process your enquiry and contact you accordingly. In this context, the requested data is transmitted to us by you on a purely voluntary basis.

Depending on the nature of your enquiry, the legal basis for this processing is Art. 6 (1)(b) GDPR for enquiries submitted by you as part of a pre-contractual measure, or Art. 6 (1)(1)(f) GDPR if your enquiry is of a different nature. In this case, our legitimate interest is based on the purposes described in section 4 a.) Should personal data be requested that we do not need for the fulfilment of a contract or in defence of our legitimate interests, such data is transmitted to us on the basis of your consent in accordance with Art. 6 (1)(a) GDPR.

9.       Application procedure

We publish job vacancies on our website. You can apply for these positions by email. If you decide to apply for a vacancy, we will process the personal data that you provide and send to us in this context solely for the purpose of implementing the application process.

The legal basis for the processing of your personal data in the context of our application process is section 26 (1) in conjunction with (2) BDSG.

If your application is unsuccessful, we will delete your data as soon as the statutory six-month retention period under labour law has expired. This mandatory storage period begins when we dispatch the notice of rejection to you. If you have expressly granted your consent for us to use your data again to contact you about future vacancies that may be of interest to you, we will continue to store your data on the basis of your consent.

If we conclude an employment contract with you following the application process, we will initially continue to store your data to the necessary and permissible extent before transferring it to your personnel file.

Your personal data may be processed by third parties on our behalf on the basis of order processing contracts in accordance with Art. 28 GDPR. In such cases, we take steps to ensure that the processing of your personal data is carried out in accordance with the General Data Protection Regulation.

Otherwise, we will only share your data with recipients outside the company if this is permitted or required by law, if the transfer is necessary to fulfil our legal obligations or if you have consented to the transfer. We will not intentionally transfer your data to a third country.

The provision of personal data in the context of application processes is neither legally nor contractually required. Therefore, you are not obliged to provide your personal data. However, we require your personal data in order to review your application and to decide whether to offer you an employment contract. When applying to our company you should, however, only provide the personal data that is required for the initiation and processing of your application. If you do not provide us with any personal data when applying for a position at our company, we will be unable to reach a decision on whether or not to offer you an employment contract.

Please note that applications sent to us by email are transmitted in an unencrypted format. Consequently, there is a risk that unauthorised parties could intercept and use this data.

10.    Social media presence

We maintain a presence on social networks in order to present our company in the best possible light, to communicate with you as a user, customer or prospective customer, and to inform you about the services we offer. Our use of social networks involves the processing of data outside the European Union (EU) and the European Economic Area (EEA). An equivalent level of data protection to that which exists in the EU cannot be guaranteed in all countries outside the EU.
In this context, there may be risks for you as a user if the transmitted data is processed in so-called “third countries” with an inadequate level of data protection.

This makes it more difficult to enforce your existing user rights. In addition, the processing of your data by the provider in the third country may be contrary to your interests.
In the USA, there is no level of data protection comparable to the requirements of the GDPR. It is possible for US government agencies to access personal information without our or your knowledge. It is unlikely that you will be able to enforce your rights in the USA.

In addition to the respective social network providers, we also collect and process personal user data on so-called “fan pages”. This section of our Privacy Policy contains information about which kinds of data we collect from you on our social media sites, how we use it and how you can object to our use of your data. For the respective data processing purposes and data categories, please refer to the respective services, which are listed in more detail below.

The social media activities performed by us and detailed below are carried out on the basis of a balancing of interests in accordance with Art. 6 (1)(f) GDPR.

In order to make these activities possible, cookies are used which record user behaviour and enable user profiling.
A specific list of the purposes for which user data is processed can be found in the privacy policies of the respective providers. Via the corresponding settings in your user account, you can restrict the profiling activities that are associated with you – at least to a certain extent. For detailed information about this process, please read the corresponding privacy policy of the provider concerned.

The relevant platforms are:

GRIESHABER Logistik GmbH operates profiles on the listed platforms in order to draw attention to its products and services and to interact with customers, prospective customers and other users of the platform.

In this context, the platform operators also use specific data collected from users of the platform (e.g. if a photo within a profile was marked with “Like” or commented on) in order to compile aggregated usage statistics and make them available to the respective profile operators (so-called “Insights” or “Analytics”). As the profile operator, we also receive these usage statistics. The information we receive as the profile operator does not enable us to personally identify individual users. The profile operator has no access to the personal data that the platform operator processes in order to create the usage statistics. The respective platform operators exclusively determine which data is processed for these purposes, and in what manner. As the profile operator, GRIESHABER Logistik GmbH can neither legally nor actually influence the processing of this data by the platform operators.

With regard to data processing in the context of compiling usage statistics, GRIESHABER Logistik GmbH and the respective platform operators are the joint data controllers within the meaning of Art. 26 GDPR.

Where possible, shared responsibility agreements are in place with the respective platform operators.

Beyond this, data processing is only carried out to a very limited extent by GRIESHABER Logistik GmbH in its capacity as the profile operator:

• Processing of usernames and comments deleted for breach of netiquette. These are kept as evidence in the event of legal disputes within the statutory limitation period
• Processing of usernames and individual messages when you contact us via messenger services
• For recruitment of potential applicants on career platforms

For these purposes, we generally only process your name, message content, comment content and the profile information that you make “public”.

11.    Rights of the data subject

You have the right:

• to request information about your personal data that we process in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, to restrict or object to the processing; the existence of a right of appeal, the origin of your data if it was not collected by us, as well as the use of automated decision-making including profiling and, if applicable, meaningful and detailed information about this
• to demand the correction of incorrect or incomplete personal data stored by us without delay in accordance with Art. 16 GDPR
• to request, in accordance with Art. 17 GDPR, the erasure of your personal data that is stored by us, unless its processing is necessary to exercise our right to freedom of expression and information, for compliance with a legal obligation, for reasons that lie in the public interest or to assert, exercise or defend legal claims
• to request that we restrict the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful but you have objected to its erasure and we no longer require the data; however, you need it for the assertion, exercise or defence of legal claims, or if you have objected to the processing in accordance with Art. 21 GDPR
• to receive, in accordance with Art. 20 GDPR, the personal data that you have provided to us in a structured, common and machine-readable format or to request its transfer to another data controller (data portability)
• to withdraw your consent at any time in accordance with Art. 7 (3) GDPR. Consequently, we will no longer be permitted to continue processing your data on the basis of your previously granted consent
• to appeal to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority in your usual place of residence or workplace or our company headquarters for this purpose
• Right to object

If your personal data is processed on the basis of our legitimate interests in accordance with Art. 6 (1)(1)(f) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, insofar as the grounds for your objection are linked to your personal situation or the focus of your objection is direct advertising. In the latter case, you have a general right of objection, which we will implement without the need for you to specify a particular situation.

If you wish to exercise your right of withdrawal or objection, you can simply send an email to datenschutz@grieshaberlog.com.

12.    Disclosure of your personal data

Your personal data will be disclosed as described below.

Your data will also be disclosed if we are entitled or obliged to do so due to statutory provisions and/or official or court orders. In particular, this may involve the provision of information for the purposes of criminal prosecution, hazard prevention or the enforcement of intellectual property rights.

Insofar as we share your data with service providers within the necessary scope, they will only have access to your personal data to the extent necessary to complete the respective tasks. These service providers are obliged to treat your personal data in accordance with the applicable data protection laws, in particular the GDPR. Insofar as your personal data is processed on our behalf on the basis of commissioned data processing contracts in accordance with Art. 28 GDPR, we ensure that the processing of your personal data is carried out in accordance with the General Data Protection Regulation.

We attach importance to processing your data within the EU/EEA. However, we may use service providers that process data outside the EU/EEA. In such cases, we ensure that an adequate level of data protection – comparable to the standards within the EU – is established by the recipient before transferring your personal data. For example, we may achieve this by means of EU standard contracts or binding corporate rules or special agreements with the company in question.

13.    Data security

We implement technical and organisational measures in order to secure our website and prevent the loss, destruction, access, modification or distribution of your data by unauthorised parties.

In particular, we transmit your personal data in an encrypted format. We use the SSL/TLS (Secure Sockets Layer/ Transport Layer Security) encoding system for this purpose. We also continuously improve our security measures in line with technological developments.

14.    Storage period for personal data

With regard to the storage period, we delete personal data as soon as its storage is no longer necessary for the fulfilment of the original purpose, provided that it is not subject to any statutory retention periods. The statutory retention periods will ultimately determine the storage period for your personal data. The corresponding data is routinely deleted at the end of the storage period. If mandatory retention periods exist, we restrict our processing of the data in question by means of blocking.

15.    References and links

When you access web pages via links on our website, you may again be asked to provide information such as your name, address, email address, browser properties, etc. This Privacy Policy does not apply to the collection, disclosure or approach of personal data by third parties.

Third-party service providers may be subject to different and/or their own regulations governing the collection, processing and use of personal data. Before entering your personal data elsewhere, you are therefore advised to check the respective third-party websites to find out how they handle your personal data.

Issued: March 2023