Source: https://christ-logistik.com/en/privacy-policy/
Timestamp: 2019-04-21 18:22:50+00:00

Document:
In general, we collect and use your personal data only where this is required to provide a functional website and handle our contracts. Once our contractual obligations have been fulfilled, we will only use your data after you have given your consent. An exception will be made in those cases where obtaining prior consent is not possible for factual reasons or the processing of the data is permitted by legal regulations.
To the extent that we obtain consent from the data subject for the processing of personal data, Art. 6(1) (a) GDPR shall serve as the legal basis. Where the processing of personal data is necessary to perform a contract to which the data subject is party, Art. 6(1) (b) GDPR shall serve as the legal basis. This shall also apply to any processing operations required to implement measures prior to entering into a contract.
Where the processing of personal data is necessary to comply with a legal obligation to which our company is subject, Art. 6(1) (c) GDPR shall serve as the legal basis.
Where the processing is necessary to protect a legitimate interest of our company or of a third party, provided that this interest is not outweighed by the interests, fundamental rights and freedoms of the data subject, Art. 6(1) (f) GDPR shall serve as the legal basis.
Personal data of the data subject will be erased or blocked as soon as the purpose of storage ceases to apply. The data may be stored beyond this period if this has been provided for by the European or national legislative body in regulations or provisions pertaining to European Union law or other provisions to which the controller is subject. The data will also be blocked or erased if a storage period required by the standards specified above expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
In general, you may visit our website without telling us who you are. We will only learn about technical data, such as the name of your internet service provider, your IP address, date and time of access, the website from which you accessed our website and the web pages you visit on our site. This information will be stored in log files on our system and evaluated for internal statistical purposes of website analysis as well as for the demand-oriented design of our web pages. The data will not be stored in combination with any other personal data, so you will remain completely anonymous. We will not create any pseudonymized user profiles.
The legal basis for the temporary storage of your data and of the log files shall be Art. 6(1) (f) GDPR.
Temporary storage of your IP address by the system is necessary to enable the website to be delivered to your computer. This requires storing your IP address for the duration of the session.
Log files are stored to ensure the proper functioning of our website. The data also serves us to optimize our website and ensure the security of our IT systems. The data will not be analyzed for marketing purposes in this context.
Our legitimate interest in data processing pursuant to Art. 6(1) (f) GDPR also lies in these purposes.
The data will be erased once it is no longer required to achieve the purpose for which it was collected. Where the data has been collected for the purpose of providing the website, this is the case when the relevant session has ended.
Regarding the storage of data in log files, the data will be erased after seven days at the latest. Further storage is possible. In this case, the user’s IP address will be erased or alienated, so it will no longer be possible to assign the accessing client.
For the operation of our website, it is absolutely necessary to collect the data for providing the website and store the information in log files. Therefore, the user has no possibility to object.
The legal basis for the processing of personal data using cookies shall be Art. 6(1) (f) GDPR.
Cookies are also used for the purpose of improving the quality of our website and its content. Cookies tell us how our website is used, which allows us to steadily improve our services.
Our legitimate interest in the processing of personal data pursuant to Art. 6(1) (f) GDPR also lies in these purposes.
Our website uses functionalities of Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
We have enabled the IP Anonymization feature on our website. This means that your IP address will be truncated by Google within the Member States of the European Union or in other contracting parties to the Agreement on the European Economic Area before it is transmitted to the United States. Only in exceptional cases will the complete IP address be transmitted to a Google server in the United States and truncated there. On our account, Google will use this information for the purposes of analyzing your use of this website, compiling reports on website activity and providing us with other services related to the use of this website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be linked with any other data held by Google.
We have concluded a contract on commissioned data processing with Google, fully implementing the requirements of the German data protection authorities regarding the use of Google Analytics.
Our website uses the “Demographics and Interests reports” feature provided by Google Analytics, which enables us to generate reports including information on age, gender and interests of our website visitors. This data is obtained from interest-based ads by Google as well as from third-party website visitor data. This information cannot be linked to you as an individual. You can disable this feature at any time via the ads settings in your Google account or generally prohibit the collection of your data via Google Analytics as laid out in the “Objection to Data Collection” section.
Our website uses Google Ads, an online advertising program provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
As part of Google Ads, we also use its conversion tracking tool. When you click on an ad placed by Google, a cookie will be set for conversion tracking. Such cookies will be invalid after 30 days and are not meant to identify you as an individual. If the user visits certain pages of this website and the cookie is still valid, Google and the website operator will be able to recognize that the user has clicked on the ad and has been forwarded to this page.
Every Google Ads customer gets an individual cookie. The cookies cannot be tracked via the websites of Google Ads customers. The information obtained via conversion cookies serve the purpose of compiling conversion statistics for Google Ads customers who decide to use conversion tracking. Customers learn about the total number of users who have clicked on their ads and have been forwarded to a page provided with a conversion tracking tag. However, they will not receive any information allowing them to identify the user as an individual. If you do not want to participate in tracking, you can object to such use by easily disabling the Google conversion tracking cookie in your web browser’s user settings. You will then not be included in any conversion tracking statistics.
“Conversion cookies” are stored based on Art. 6(1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both website and advertising services.
You can modify your browser setting to notify you when you receive a cookie, enabling you to allow only specific cookies, refuse to accept certain cookies or cookies in general and decide to delete cookies automatically when you close your browser. Disabling cookies means that you might not be able to use all the functionalities provided on our website.
Our website uses Google reCAPTCHA (“reCAPTCHA”), a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
The purpose of reCAPTCHA is to check whether the data on our website (e.g. in a contact form) is entered by a human instead of an automated program. Google reCAPTCHA analyzes the website visitor’s behavior based on various characteristics. Analysis will start automatically as soon as the visitor accesses our website. For evaluation purposes, reCAPTCHA analyzes different pieces of information (e.g. IP address, the time spent on our site or mouse movements made by the user). The data collected during the analysis will be transmitted to Google.
The analysis is carried out entirely as a background operation. Website users will not be informed about the analysis. Data processing is based on Art. 6(1) (f) GDPR. The website operator has a legitimate interest in protecting its website from improper, automated spying as well as from spam.
You also have the option of contacting us using the email addresses provided on our website. In this case, the user’s personal data transmitted by email will be stored.
In this context, your data will not be shared with any third parties. Your data will only be used for processing the conversation.
The legal basis for the processing of the data where the user’s consent has been granted shall be Art. 6(1) (a) GDPR. The legal basis for the processing of the data in the course of sending an email shall be Art. 6(1) (f) GDPR. Where the contact by email is aimed at the conclusion of a contract, the additional legal basis for the processing shall be Art. 6(1) (b) GDPR.
The processing of personal data entered in the forms only serves to process the communication initiated by you. In cases where the communication is initiated by email, this shall also constitute the necessary legitimate interest in data processing.
Any other personal data processed during the sending process serves to prevent misuse of the contact form and ensure the security of our IT systems.
The data will be erased once it is no longer required to achieve the purpose for which it was collected. For any personal data entered in the contact form or transmitted to us by email, this shall be the case when the conversation with the user has ended. The conversation shall be considered terminated when it is evident from the circumstances that the matter in question has been conclusively settled.
You may, at any time, withdraw your consent to process your personal data. You may object to the storage of your personal data at any time by getting in touch with us. In this case, the conversation cannot be continued.
Any personal data stored in the course of the communication initiated by you will be deleted.
For the performance of a contract or the implementation of measures prior to entering into a contract, we will store personal data in our systems. This involves the collection of both data required for communication (name, phone number, email address, address) and contract master data (contractual relationship, scope of services, description of services) as well as data related to contract billing and payment to the extent necessary to process the respective order.
For the execution of the order, it might be necessary to engage employees bound by instructions. This may happen for the purposes of transport services, customs clearance or the performance of any additional services agreed upon, such as handicraft activities. In these cases, your personal data will only be shared to the extent necessary for the performance of the contract by the service provider.
The legal basis for the processing of the data where the user’s consent has been granted shall be Art. 6(1) (a) GDPR. Where the processing of personal data is required for the performance of a contract, the contract shall provide the legal basis pursuant to Art. 6(1) (b) GDPR. Art. 6(1) (b) GDPR shall also apply to processing operations necessary to implement measures prior to entering into a contract; for example in cases involving inquiries relating to our services.
If our company is subject to a legal obligation requiring the processing of personal data, e.g. for compliance with tax obligations, processing shall be based on Art. 6(1) (c) GDPR.
The data is collected and provided for the purpose of rendering services or initiating a contractual relationship.
Personal data of the data subject will be erased or blocked as soon as the purpose of storage ceases to apply. For the performance of a contract, we will store your data at least until the contract has been fully terminated. Upon termination of the contract, the data will be kept in line with legal retention periods.
As part of applications, we collect and process personal data of applicants for the purpose of handling the application procedure. The data may also be processed electronically. This is particularly the case where applicants transmit their application documents electronically, for example by email or over a contact form available on our website.
We record your personal data that is relevant for the application procedure or that you transmit to us as part of the application procedure.
We collect your personal data for the purpose of handling the application procedure and in the context of your employment relationship based on Art. 6(1) (b) GDPR and Art. 88 GDPR in conjunction with section 26 para. 1 sentence 1 of the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG).
We collect and store your personal data to handle the application procedure or, in the event of concluding an employment contract, to process this contractual relationship.
In the event of concluding an employment contract with the applicant, the data transmitted shall be stored for the purpose of processing this contractual relationship in compliance with any legal requirements. If no employment contract is concluded with the applicant, the application documents are deleted automatically six months after the date of notification of rejecting the application, unless there are any other legitimate interests of the controller preventing the deletion. Another legitimate interest would be a burden of proof in a process under the German General Act on Equal Treatment (Allgemeines Gleichbehandlungsgesetz, AGG).
If your personal data is processed, you are a data subject within the meaning of the GDPR, which means that you can assert the following rights before the controller.
You have the right to obtain confirmation from the controller as to whether personal data concerning you is processed.
any information available on the source of the personal data if it has not been collected from you, the data subject.
You have the right to request information as to whether the personal data concerning you is transferred to a third-party country or an international organization. In this context, you have the right to be informed about the appropriate safeguards under Art. 46 GDPR relating to such transfer.
You have the right to demand from the controller the rectification and/or completion of the personal data concerning you, provided that such information is inaccurate or incomplete. The controller shall carry out the rectification without delay.
if you have objected to the processing pursuant to Art. 21(1) GDPR and it is not yet clear whether the justified reasons of the controller outweigh your reasons.
Where the processing of the personal data concerning you has been restricted, such data will, except for its storage, only be processed with your consent or for the establishment, exercise or defense of any legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the European Union or of a Member State.
If the processing has been restricted according to the requirements described above, you will be informed by the controller before the restriction is dropped.
The personal data concerning you is no longer required for the purposes for which it was collected or otherwise processed.
You withdraw your consent on which processing was based pursuant to Art. 6(1) (a) GDPR or Art. 9(2) (a) GDPR, and there is no other legal basis for processing.
You object to the processing pursuant to Art. 21(1) GDPR, and there are no overriding legitimate reasons for the processing, or you object to the processing pursuant to Art. 21(2) GDPR.
The personal data is to be erased for compliance with a legal obligation under Union or Member State law to which the controller is subject.
The personal data concerning you has been collected with regard to services offered by the information society pursuant to Art. 8(1) GDPR.
If the controller has made your personal data public and is obliged to erase such data pursuant to Art. 17(1) GDPR, the controller, taking into account the technology available and the implementation cost, shall take adequate (including technical) measures to inform any controllers processing the personal data about the fact that you, the data subject, have requested them to erase any links to or copies or replications of such personal data.
for the establishment, exercise or defense of any legal claims.
If you have asserted the right to rectification, erasure or restriction of processing before the controller, the controller shall be obliged to inform each recipient to whom the personal data concerning you has been disclosed about such rectification, erasure or restriction of processing of the data, unless this proves to be impossible or would involve disproportionate effort.
the data is processed using automated means.
Asserting this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another controller, to the extent that this is technically feasible. This shall not affect the freedom and rights of other individuals.
The right to data portability shall not apply to the processing of personal data required for the performance of a task carried out in the public interest or in the exercise of official authority transferred to the controller.
For reasons arising from your specific situation, you have, at any time, the right to object to the processing of the personal data concerning you, which is based on Art. 6(1) (e) or (f) GDPR.
The controller shall then no longer process the personal data concerning you, unless he has evidence of compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of any legal claims.
If you object to the processing of personal data concerning you for direct marketing purposes, your data will no longer be processed for such purposes. In the context of using information society services, notwithstanding Directive 2002/58/EC, you may assert your right to object by automated means that make use of technical specifications.
You have the right to withdraw your declaration of consent under data protection law at any time. Withdrawal of your consent shall not affect the lawfulness of the processing based on your consent before withdrawal.
Regardless of any other administrative or legal remedy, you have the right to lodge a complaint with a supervisory authority, especially in the Member State where you have your permanent residence, place of work or place of the suspected infringement, if you believe that the processing of the personal data concerning you violates the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant about the state and results of the complaint, including the option of legal remedy pursuant to Art. 78 GDPR.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 88
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 6
 Art. 78