Privacy Policy

Thank you for visiting our website. Compliance with data protection regulations is extremely important to us. The goal of this Privacy Policy is to inform you, as a user of the website, about the nature, scope and purpose of the processing of your personal data and your rights in this context, insofar as you are considered a data subject within the meaning of Article 4 (1) of the General Data Protection Regulation.

 

1. Data controller

This website and the associated services are operated by:

GRIESHABER Logistik GmbH
Stettiner Strasse 1
88250 Weingarten
Germany
Phone: +49 751 5001-0
Fax: 49 751 5001-250
Email: info@grieshaberlog.com

 

2. Data protection officer

We have appointed a data protection officer.

Herold Unternehmensberatung GmbH
Mr Philipp Herold
Hafenstrasse 1a
23568 Lübeck
Email: datenschutz@grieshaberlog.com

 

3. General information

We have designed this website to collect as little data from you as possible. We always ensure that we only process your personal data on the basis of a legal principle or your consent. We comply with the provisions of the General Data Protection Regulation (GDPR), which has been in force since 25 May 2018, and the applicable national regulations, such as the German Federal Data Protection Act (“Bundesdatenschutzgesetz” or BDSG), the German Telecommunications Digital Services Data Protection Act (“Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz” or TDDDG) or other, more specific data protection laws.

4, Purpose of and legal basis for the processing of personal data

We always process your personal data for a specific purpose.

In summary, we process your personal data for the following purposes:

  1. To process your request when you contact us (e.g. email address, first name, last name)
  2. To provide you with a quotation in response to your request for a quotation (quote form).
  3. To send a newsletter containing information and updates about our services (e.g. name, email address).
  4. For technical reasons linked to the provision of our website, and to convey information to you via our website (e.g. IP address, cookies, browser information).
  5. To receive and process your application for one of our vacancies.
  6. To provide our services and perform the contract (e.g. shipment tracking).

The following applies with regard to the legal basis for the processing of your personal data:

We process personal data that is required to establish, implement or process our range of services (contract processing) in accordance with Art. 6 (1)(b) GDPR. Insofar as we obtain your consent to process your personal data, this consent forms the legal basis for the data processing in accordance with Art. 6 (1)(a) GDPR. We are also entitled to process your data in order to protect our legitimate interests, provided that such processing does not override your interests or fundamental rights and freedoms with regard to the processing of personal data (Art. 6 (1)(f) GDPR). Insofar as we use external service providers within the scope of commissioned data processing, the legal basis for such processing is Art. 28 GDPR.

 

5. Collection of personal data when you visit our website

If you merely make informational use of our website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which we require for technical reasons in order to display our website to you and to ensure its stability and security (the legal basis is Art. 6 (1)(1)(f) GDPR):

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access Status/HTTP status code
  • Data volume transmitted in each case
  • Website from which the request originated
  • Browser
  • Operating system and its interface
  • Language and version of the browser software

This website is hosted by an external hosting provider. Any personal data collected on this website is stored on the hosting provider’s servers.

We use the following hosting provider:

creoline GmbH
Bergstraße 9a
48341 Altenberge
Germany

We have concluded a data processing agreement (DPA) with the provider mentioned above. This is a data protection agreement that is required by law and ensures that the provider processes the personal data of our website visitors solely in accordance with our instructions and in compliance with the GDPR.

In addition to the aforementioned data, cookies are stored on your computer when you access our website. For more information about this, please refer to the “Cookies” section of this Privacy Policy as well as the relevant consent management tool.

6. Integration of services from other providers

Our website uses content, services and offerings from other providers. These include, for example, services that enable statistical evaluations of the website’s use and visitors. In order for this data to be retrieved and displayed in the user’s browser, the user’s IP address must be transmitted to the respective third-party providers.

Although we endeavour to exclusively use third-party providers that either only require your IP address to deliver content or use anonymised IP addresses, we are not able to stop them from potentially storing your IP address. Information about our current third-party providers is provided elsewhere in this Privacy Policy (see below).

 

Gravatar

Nature and scope of the processing

We use Gravatar to ensure proper provision of our website’s content. Gravatar is a service of Automattic Inc., which acts as a content delivery network (CDN) on our website.

A CDN helps us to make our website’s content, in particular files such as graphics or scripts, available more quickly by means of regionally or internationally distributed servers. When you access this content, you establish a connection to the servers of Automattic Inc., San Francisco, California, US. Your IP address and possibly browser data such as your user agent are transmitted during this process. This data is processed solely for the above purposes and to maintain the security and functionality of Gravatar.

Purpose and legal basis

Our use of the content delivery network is based on our legitimate interests, i.e. our interest in ensuring the secure and efficient provision and optimisation of our website in accordance with Art. 6 (1)(f) GDPR.

We will intentionally transfer your personal data to third countries outside the European Economic Area, in particular the USA. The transfer of data to the USA is carried out in accordance with Art. 45(1) GDPR and on the basis of the adequacy decision of the European Commission. The involved US companies and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

In cases where no adequacy decision by the European Commission exists (including US companies not certified under the EU-U.S. DPF), we have agreed on other suitable safeguards with the recipients of the data within the meaning of 44 et seq. GDPR. These safeguards are – unless otherwise stated – the EU Commission’s standard contractual clauses pursuant to Implementation Decision (EU) 2021/914 of 4 June 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, before transferring your data to third countries, we obtain your consent in accordance with Art. 49 (1)(1)(a) GDPR, which you grant to us via the Consent Manager (or other forms, registrations, etc.). We wish to inform you that, in the case of transfers to third countries, there may be unknown risks with regard to the details of the processing (e.g. your data may be processed by security services in the third country to an unknown extent, without your or our knowledge and with unknown consequences for you which are beyond our control).

Storage period

The specific storage period for the processed data is outside our sphere of control and is determined by Automattic Inc. For more information, please refer to the privacy policy for Gravatar: https://automattic.com/privacy/.

 

WordPress static files

Nature and scope of the processing

This website uses WordPress as a content management platform to manage and deliver content. The provider is Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. The use of WordPress static files enables efficient delivery of website content and improves loading times for visitors to our website.

Purpose and legal basis

As part of using WordPress, “static files” are used. These files include static content such as images, CSS files, and JavaScript files necessary for displaying the website (Art. 6(1)(1)(f) GDPR). These static files are stored on our own servers or, where applicable, on an external Content Delivery Network (CDN). A CDN may be used to optimise the delivery of static files by storing them on servers in different locations around the world.

When using WordPress static files, no personal data is collected or processed unless you actively provide such data through forms or other interactions on the website. In such cases, the relevant data protection provisions outlined in our Privacy Policy apply.

WordPress is committed to adhering to European data protection standards when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision by the European Commission. In addition, we have entered into a Data Processing Agreement with WordPress.

More information about Data Processing Agreements, which satisfy the requirements for standard contractual clauses, can be found at https://wordpress.com/support/data-processing-agreements/.

Storage period

The specific storage period for the processed data is outside our sphere of control. More information about the data processed through the use of WordPress.com can be found in its privacy policy at https://de.wordpress.org/about/privacy/

 

Borlabs Cookie

Nature and scope of the processing

Our website uses the consent management technology provided by Borlabs Cookie to obtain your consent for storing certain cookies in your browser or using specific technologies, and to document this in compliance with data protection regulations. The provider of this technology is Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg (hereinafter referred to as Borlabs).

When you visit our website, a Borlabs cookie is stored in your browser to record your consent preferences or any withdrawals of consent. This information is not shared with the provider of Borlabs Cookie.

Purpose and legal basis

The use of Borlabs Cookie consent technology ensures compliance with the legal requirement to obtain consent for the use of cookies. The legal basis for this is Art. 6(1)(1)(c) GDPR.

Storage period

The collected data is stored until you request its deletion, you delete the Borlabs cookie yourself or the data storage purpose no longer applies. Mandatory legal retention periods remain unaffected. More details about how Borlabs Cookie processes data can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

 

Google Maps

Nature and scope of the processing

We use Google Maps to provide directions. Google Maps is a service provided by Google Ireland Limited that displays a map on our website.

When you access these features on our website, a connection is established with servers operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Your IP address and, if applicable, browser data such as your user agent are transmitted during this process. This data is processed solely for the above purposes and to maintain the security and functionality of Google Maps.

Purpose and legal basis

Our use of Google Maps is based on your consent in accordance with Art. 6 (1)(a) GDPR and § 25 (1) TTDSG.

We will intentionally transfer your personal data to third countries outside the European Economic Area, in particular the USA. The transfer of data to the USA is carried out in accordance with Art. 45(1) GDPR and on the basis of the adequacy decision of the European Commission. The involved US companies and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

In cases where no adequacy decision by the European Commission exists (including US companies not certified under the EU-U.S. DPF), we have agreed on other suitable safeguards with the recipients of the data within the meaning of 44 et seq. GDPR. These safeguards are – unless otherwise stated – the EU Commission’s standard contractual clauses pursuant to Implementation Decision (EU) 2021/914 of 4 June 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, before transferring your data to third countries, we obtain your consent in accordance with Art. 49 (1)(1)(a) GDPR, which you grant to us via the Consent Manager (or other forms, registrations, etc.). We wish to inform you that, in the case of transfers to third countries, there may be unknown risks with regard to the details of the processing (e.g. your data may be processed by security services in the third country to an unknown extent, without your or our knowledge and with unknown consequences for you which are beyond our control).

Storage period

The specific storage period for the processed data is outside our sphere of control and is determined by Google Ireland Limited. For more information, please refer to the privacy policy for Google Maps: https://policies.google.com/privacy.

 

HubSpot Forms

Nature and scope of the processing

We have integrated HubSpot Forms on our website. HubSpot Forms is a service of HubSpot, Inc. and provides marketing automation software for marketing services and products, including SEO and content creation, lead management, email marketing and web analytics.

HubSpot Forms is used to save data entered in forms (e.g. when contacting us via our contact form) and to send newsletters. Data provided may be stored in our customer relationship management system (CRM system).

In this case, your data will be forwarded to the operator of HubSpot Forms, HubSpot, Inc, Cambridge, Massachusetts, US.

Purpose and legal basis

We use HubSpot Forms to process your data for the purpose of handling and managing your contact request in accordance with Art. 6(1)(b) GDPR.

The use of HubSpot Forms and its integrated services is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, specifically the optimisation of our marketing efforts and the improvement of our service quality on the website.

Storage period

The specific storage period for the processed data is outside our sphere of control and is determined by HubSpot, Inc. For more information, please refer to the Privacy Policy for HubSpot Forms: https://legal.hubspot.com/privacy-policy

 

HubSpot Analytics

Nature and scope of the processing

We use HubSpot Analytics by HubSpot, Inc., Cambridge, Massachusetts, US, as an analysis service for the statistical evaluation of our website. The statistics in question include, for example, the number of times our website is accessed, visits to sub-pages and the length of each visit to the site.

HubSpot Analytics uses cookies and other browser technologies to analyse user behaviour and recognise users.

Among other things, it uses this information to compile reports on website activity.

Purpose and legal basis

This is a marketing, content management, web analytics and search engine optimisation service.

Our use of HubSpot Analytics is based on your consent in accordance with Art. 6 (1)(a) GDPR and § 25 (1) TDDDG.

We will intentionally transfer your personal data to third countries outside the European Economic Area, in particular the USA. The transfer of data to the USA is carried out in accordance with Art. 45(1) GDPR and on the basis of the adequacy decision of the European Commission. The involved US companies and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

In cases where no adequacy decision by the European Commission exists (including US companies not certified under the EU-U.S. DPF), we have agreed on other suitable safeguards with the recipients of the data within the meaning of 44 et seq. GDPR. These safeguards are – unless otherwise stated – the EU Commission’s standard contractual clauses pursuant to Implementation Decision (EU) 2021/914 of 4 June 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, before transferring your data to third countries, we obtain your consent in accordance with Art. 49 (1)(1)(a) GDPR, which you grant to us via the Consent Manager (or other forms, registrations, etc.). We wish to inform you that, in the case of transfers to third countries, there may be unknown risks with regard to the details of the processing (e.g. your data may be processed by security services in the third country to an unknown extent, without your or our knowledge and with unknown consequences for you which are beyond our control).

Storage period

The specific storage period for the processed data is outside our sphere of control and is determined by HubSpot, Inc. For more information, please refer to the privacy policy for HubSpot Analytics: https://legal.hubspot.com/privacy-policy

 

Google Analytics

Nature and scope of the processing

We use Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analytics service for the statistical evaluation of our online offering. The statistics in question include, for example, the number of times our website is accessed, visits to sub-pages and the length of each visit to the site.

Google Analytics uses cookies and other browser technologies to analyse user behaviour and recognise users.

Among other things, it uses this information to compile reports on website activity.

Purpose and legal basis

Our use of Google Analytics is based on your consent in accordance with Art. 6 (1)(a) GDPR and § 25 (1) TTDSG.

We will intentionally transfer your personal data to third countries outside the European Economic Area, in particular the USA. The transfer of data to the USA is carried out in accordance with Art. 45(1) GDPR and on the basis of the adequacy decision of the European Commission. The involved US companies and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

In cases where no adequacy decision by the European Commission exists (including US companies not certified under the EU-U.S. DPF), we have agreed on other suitable safeguards with the recipients of the data within the meaning of 44 et seq. GDPR. These safeguards are – unless otherwise stated – the EU Commission’s standard contractual clauses pursuant to Implementation Decision (EU) 2021/914 of 4 June 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, before transferring your data to third countries, we obtain your consent in accordance with Art. 49 (1)(1)(a) GDPR, which you grant to us via the Consent Manager (or other forms, registrations, etc.). We wish to inform you that, in the case of transfers to third countries, there may be unknown risks with regard to the details of the processing (e.g. your data may be processed by security services in the third country to an unknown extent, without your or our knowledge and with unknown consequences for you which are beyond our control).

Storage period

The specific storage period for the processed data is outside our sphere of control and is determined by Google Ireland Limited. For more information, please refer to the privacy policy for Google Analytics: https://policies.google.com/privacy

 

Google Tag Manager

Nature and scope of the processing

We use Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags via an interface, allowing us to control the precise integration of services on our website.

This enables us to flexibly integrate additional services in order to analyse user interactions with our website.

Purpose and legal basis

Our use of Google Tag Manager is based on your consent in accordance with Art. 6 (1)(a) GDPR and § 25 (1) TTDSG.

We will intentionally transfer your personal data to third countries outside the European Economic Area, in particular the USA. The transfer of data to the USA is carried out in accordance with Art. 45(1) GDPR and on the basis of the adequacy decision of the European Commission. The involved US companies and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

In cases where no adequacy decision by the European Commission exists (including US companies not certified under the EU-U.S. DPF), we have agreed on other suitable safeguards with the recipients of the data within the meaning of 44 et seq. GDPR. These safeguards are – unless otherwise stated – the EU Commission’s standard contractual clauses pursuant to Implementation Decision (EU) 2021/914 of 4 June 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, before transferring your data to third countries, we obtain your consent in accordance with Art. 49 (1)(1)(a) GDPR, which you grant to us via the Consent Manager (or other forms, registrations, etc.). We wish to inform you that, in the case of transfers to third countries, there may be unknown risks with regard to the details of the processing (e.g. your data may be processed by security services in the third country to an unknown extent, without your or our knowledge and with unknown consequences for you which are beyond our control).

Storage period

The specific storage period for the processed data is outside our sphere of control and is determined by Google Ireland Limited. For more information, please refer to the privacy policy for Google Tag Manager https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/

 

Pamyra

Nature and scope of the processing

We have integrated the Pamyra plugin on our website, a service provided by Pamyra GmbH, Lützner Str. 116, 04177 Leipzig. This service allows you to make online price enquiries and subsequently place orders directly on our website.

Purpose and legal basis

The legal basis for data processing is our legitimate interest in managing our business operations in accordance with Art. 6(1)(f) GDPR.To ensure secure processing of data when using Pamyra on our website, we have entered into a data processing agreement with the company in accordance with Art. 28 GDPR.

Storage period

The specific storage period for the processed data is outside our sphere of control. More information about data protection at Pamyra can be found at https://www.pamyra.de/rechtliches/datenschutzerklaerung

 

7. Cookies

Cookies are small text files that are stored on your data carrier and save certain settings and data that are transmitted to/from our system via your browser. A cookie typically contains the name of the domain from which the cookie data was sent as well as information about the age of the cookie and an alphanumeric identifier.

Cookies enable our systems to recognise the user’s device and make any previously saved preferences immediately available. When a user accesses the platform, a cookie is immediately transferred to their computer’s hard disk. Cookies help us to improve our website and provide you with a better and more tailored service. They enable us to recognise your computer or (mobile) device when you return to our website and thereby:

  • to store information about your preferred activities on the website and thus to tailor our website to your individual interests.
  • to speed up the processing of your requests.

We work with third-party services that help us to make our online services and our website more appealing for you. Therefore, cookies from these partner companies (third-party providers) are also stored on your hard drive when you visit our website. These cookies automatically delete themselves after a specified time period.

If you wish to prevent the use of browser cookies on your device, you can configure your browser to block the storage of cookies. Please note that by doing so you may only be able to use our website to a limited extent or not at all. If you only wish to accept our own cookies, but not those of our service providers and partners, you can do so by selecting the option “Block third-party cookies” in your browser’s settings. We do not accept any responsibility for the use of third-party cookies.

 

8. Contacting us

You can contact us by email. In this case, we will store the personal data you provide in order to process your enquiry and contact you accordingly. In this context, the requested data is transmitted to us by you on a purely voluntary basis.

Depending on the nature of your enquiry, the legal basis for this processing is Art. 6 (1)(b) GDPR for enquiries submitted by you as part of a pre-contractual measure, or Art. 6 (1)(1)(f) GDPR if your enquiry is of a different nature. In this case, our legitimate interest is based on the purposes described in section 4 a.) Should personal data be requested that we do not need for the fulfilment of a contract or in defence of our legitimate interests, such data is transmitted to us on the basis of your consent in accordance with Art. 6 (1)(a) GDPR.

 

9. Application procedure

We publish job vacancies on our website. You can apply for these positions by email. If you decide to apply for a vacancy, we will process the personal data that you provide and send to us in this context solely for the purpose of implementing the application process.

The legal basis for the processing of your personal data in the context of our application process is section 26 (1) in conjunction with (2) BDSG.

If your application is unsuccessful, we will delete your data as soon as the statutory six-month retention period under labour law has expired. This mandatory storage period begins when we dispatch the notice of rejection to you. If you have expressly granted your consent for us to use your data again to contact you about future vacancies that may be of interest to you, we will continue to store your data on the basis of your consent.

If we conclude an employment contract with you following the application process, we will initially continue to store your data to the necessary and permissible extent before transferring it to your personnel file.

Your personal data may be processed by third parties on our behalf on the basis of order processing contracts in accordance with Art. 28 GDPR. In such cases, we take steps to ensure that the processing of your personal data is carried out in accordance with the General Data Protection Regulation.

Otherwise, we will only share your data with recipients outside the company if this is permitted or required by law, if the transfer is necessary to fulfil our legal obligations or if you have consented to the transfer. We will not intentionally transfer your data to a third country.

The provision of personal data in the context of application processes is neither legally nor contractually required. Therefore, you are not obliged to provide your personal data. However, we require your personal data in order to review your application and to decide whether to offer you an employment contract. When applying to our company you should, however, only provide the personal data that is required for the initiation and processing of your application. If you do not provide us with any personal data when applying for a position at our company, we will be unable to reach a decision on whether or not to offer you an employment contract.

Please note that applications sent to us by email are transmitted in an unencrypted format. Consequently, there is a risk that unauthorised parties could intercept and use this data.

 

10. Newsletter

You can choose to subscribe to our newsletter, in which we provide information about interesting offers and promotions. The types of products and services promoted are stated in the declaration of consent.

We use the double opt-in procedure for the newsletter registration. This means that after you have registered, we will send an email to the specified address, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your data will be blocked for processing and automatically deleted after one month. In addition, we will store the IP address used in each case, as well as the time of the registration and confirmation. This process serves the purpose of being able to prove your registration and, if necessary, investigate any potential misuse of your personal data.

To receive the newsletter, you only need to provide your email address. The provision of additional, specially marked data is optional; this data is used to communicate with you in a personalised manner. Once you have confirmed your registration, we will store your email address for the purpose of sending the newsletter. The legal basis for this is Art. 6(1)(1)(c) GDPR.

Your personal data may be processed by third parties on our behalf on the basis of order processing contracts in accordance with Art. 28 GDPR. In such cases, we take steps to ensure that the processing of your personal data is carried out in accordance with the General Data Protection Regulation.

You have the option at any time to withdraw your consent to receiving the newsletter and unsubscribe from it. You can withdraw your consent by clicking the link provided in every newsletter email, or by sending a message to the contact details specified in the legal notice.

 

11. Social media presence

We maintain a presence on social networks in order to present our company in the best possible light, to communicate with you as a user, customer or prospective customer, and to inform you about the services we offer. Our use of social networks involves the processing of data outside the European Union (EU) and the European Economic Area (EEA). An equivalent level of data protection to that which exists in the EU cannot be guaranteed in all countries outside the EU.
In this context, there may be risks for you as a user if the transmitted data is processed in so-called “third countries” with an inadequate level of data protection.

This makes it more difficult to enforce your existing user rights. In addition, the processing of your data by the provider in the third country may be contrary to your interests. 
We only transfer personal data to third countries with a confirmed adequate level of protection or where the transfer is protected through contractual agreements or other appropriate safeguards.

In addition to the respective social network providers, we also collect and process personal user data on so-called “fan pages”. This section of our Privacy Policy contains information about which kinds of data we collect from you on our social media sites, how we use it and how you can object to our use of your data. For the respective data processing purposes and data categories, please refer to the respective services, which are listed in more detail below.

The social media activities performed by us and detailed below are carried out on the basis of a balancing of interests in accordance with Art. 6 (1)(f) GDPR.

In order to make these activities possible, cookies are used which record user behaviour and enable user profiling.
A specific list of the purposes for which user data is processed can be found in the privacy policies of the respective providers. Via the corresponding settings in your user account, you can restrict the profiling activities that are associated with you – at least to a certain extent. For detailed information about this process, please read the corresponding privacy policy of the provider concerned.

The relevant platforms are:

Platform

Data controller

Privacy policies of the platform operators

Facebook

Meta Platforms Ireland Ltd
4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

https://privacycenter.instagram.com/policy/

Instagram

Meta Platforms Ireland Ltd
4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

https://privacycenter.instagram.com/policy/

YouTube

Google Ireland Limited
Gordon House, Barrow Street, Dublin 4, Ireland

https://policies.google.com/privacy?hl=de

XING

New Work SE
Am Strandkai 1, 20457 Hamburg, Germany

https://privacy.xing.com/de/datenschutzerklaerung

LinkedIn

LinkedIn Ireland Unlimited Company
Wilton Place, Dublin 2, Ireland

https://de.linkedin.com/legal/privacy-policy?

GRIESHABER Logistik GmbH operates profiles on the listed platforms in order to draw attention to its products and services and to interact with customers, prospective customers and other users of the platform.

In this context, the platform operators also use specific data collected from users of the platform (e.g. if a photo within a profile was marked with “Like” or commented on) in order to compile aggregated usage statistics and make them available to the respective profile operators (so-called “Insights” or “Analytics”). As the profile operator, we also receive these usage statistics. The information we receive as the profile operator does not enable us to personally identify individual users. The profile operator has no access to the personal data that the platform operator processes in order to create the usage statistics. The respective platform operators exclusively determine which data is processed for these purposes, and in what manner. As the profile operator, GRIESHABER Logistik GmbH can neither legally nor actually influence the processing of this data by the platform operators.

With regard to data processing in the context of compiling usage statistics, GRIESHABER Logistik GmbH and the respective platform operators are the joint data controllers within the meaning of Art. 26 GDPR.

Where possible, shared responsibility agreements are in place with the respective platform operators.

Beyond this, data processing is only carried out to a very limited extent by GRIESHABER Logistik GmbH in its capacity as the profile operator:

    • Processing of usernames and comments deleted for breach of netiquette. These are kept as evidence in the event of legal disputes within the statutory limitation period
    • Processing of usernames and individual messages when you contact us via messenger services
    • For recruitment of potential applicants on career platforms

For these purposes, we generally only process your name, message content, comment content and the profile information that you make “public”.

 

12. Rights of the data subject

You have the right:

  • to request information about your personal data that we process in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, to restrict or object to the processing; the existence of a right of appeal, the origin of your data if it was not collected by us, as well as the use of automated decision-making including profiling and, if applicable, meaningful and detailed information about this
  • to demand the correction of incorrect or incomplete personal data stored by us without delay in accordance with Art. 16 GDPR
  • to request, in accordance with Art. 17 GDPR, the erasure of your personal data that is stored by us, unless its processing is necessary to exercise our right to freedom of expression and information, for compliance with a legal obligation, for reasons that lie in the public interest or to assert, exercise or defend legal claims
  • to request that we restrict the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful but you have objected to its erasure and we no longer require the data; however, you need it for the assertion, exercise or defence of legal claims, or if you have objected to the processing in accordance with Art. 21 GDPR
  • to receive, in accordance with Art. 20 GDPR, the personal data that you have provided to us in a structured, common and machine-readable format or to request its transfer to another data controller (data portability)
  • to withdraw your consent at any time in accordance with Art. 7 (3) GDPR. Consequently, we will no longer be permitted to continue processing your data on the basis of your previously granted consent
  • to appeal to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority in your usual place of residence or workplace or our company headquarters for this purpose.
  • Right to object

If your personal data is processed on the basis of our legitimate interests in accordance with Art. 6 (1)(1)(f) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, insofar as the grounds for your objection are linked to your personal situation or the focus of your objection is direct advertising. In the latter case, you have a general right of objection, which we will implement without the need for you to specify a particular situation.

If you wish to exercise your right of withdrawal or objection, you can simply send an email to datenschutz@grieshaberlog.com.

 

13. Disclosure of your personal data

Your personal data will be disclosed as described below.

Your data will also be disclosed if we are entitled or obliged to do so due to statutory provisions and/or official or court orders. In particular, this may involve the provision of information for the purposes of criminal prosecution, hazard prevention or the enforcement of intellectual property rights.

Insofar as we share your data with service providers within the necessary scope, they will only have access to your personal data to the extent necessary to complete the respective tasks. These service providers are obliged to treat your personal data in accordance with the applicable data protection laws, in particular the GDPR. Insofar as your personal data is processed on our behalf on the basis of commissioned data processing contracts in accordance with Art. 28 GDPR, we ensure that the processing of your personal data is carried out in accordance with the General Data Protection Regulation.

We attach importance to processing your data within the EU/EEA. However, we may use service providers that process data outside the EU/EEA. In such cases, we ensure that an adequate level of data protection – comparable to the standards within the EU – is established by the recipient before transferring your personal data. For example, we may achieve this by means of EU standard contracts or binding corporate rules or special agreements with the company in question.

 

14. Data security

We implement technical and organisational measures in order to secure our website and prevent the loss, destruction, access, modification or distribution of your data by unauthorised parties.

In particular, we transmit your personal data in an encrypted format. We use the SSL/TLS (Secure Sockets Layer/ Transport Layer Security) encoding system for this purpose. We also continuously improve our security measures in line with technological developments.

 

15. Storage period for personal data

With regard to the storage period, we delete personal data as soon as its storage is no longer necessary for the fulfilment of the original purpose, provided that it is not subject to any statutory retention periods. The statutory retention periods will ultimately determine the storage period for your personal data. The corresponding data is routinely deleted at the end of the storage period. If mandatory retention periods exist, we restrict our processing of the data in question by means of blocking.

 

16. References and links

When you access web pages via links on our website, you may again be asked to provide information such as your name, address, email address, browser properties, etc. This Privacy Policy does not apply to the collection, disclosure or approach of personal data by third parties.

Third-party service providers may be subject to different and/or their own regulations governing the collection, processing and use of personal data. Before entering your personal data elsewhere, you are therefore advised to check the respective third-party websites to find out how they handle your personal data.

Issued: March 2025