Data privacy statement
In the following statement, we inform you about the collection of personal data when using our website. Personal data is all data that refers to you personally, e.g. name, address, e-mail addresses, user behaviour. We have taken extensive technical and operational safeguards to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security procedures are regularly reviewed and adapted in line with technological progress.
1 Party responsible for data processing
The person responsible in accordance with Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is Trans-o-flex Express GmbH, Hertzstr. 10, D-69469 Weinheim, Tel. + 49 (0)6201 988-0, e-mail: email@example.com (further information can be found in our legal notice).
2 Data protection officers’ contact point
You can contact our data protection officers at firstname.lastname@example.org, or by writing to our postal address additionally specifying “the data protection officer”.
3 Your rights
You have the following rights with respect to us as regards your personal data.
3.1 General rights
You have a right to information, correction, deletion, limitation of processing, objection to processing and data portability. As far as processing is based on your consent, you have the right to revoke it with effect for the future.
3.2 Rights in the processing of data on the basis of legitimate interest
In accordance with Art. 21 (1) of the GDPR, you have the right, at any time and for reasons arising from your particular situation, to object to the processing of personal data relating to you pursuant to Art. 6 (1) (e) of the GDPR (data processing in the public interest) or based on Art. 6 (1) (f) GDPR (data processing for the protection of a legitimate interest), which also applies to profiling based on this provision. In the event of you lodging an objection, we will no longer process your personal information unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims.
3.3 Rights as regards direct advertising
If we process your personal data in order to conduct direct advertising, you have the right, in accordance with Art. 21 (2) GDPR, to object at any time to the processing of your personal data for the purpose of such advertising, which also applies to profiling, as far as this is associated with such direct advertising. In the event of you objecting to your data being processed for the purpose of direct advertising, we will no longer process your personal data for these purposes.
3.4 Right to complain to a supervisory authority
You also have the right to complain about the processing of your personal data by us to a competent data protection supervisory authority.
4 Collection of personal data when visiting our website
When using our website merely for informative purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following information that is technically necessary for us in order to display our website and to ensure its stability and security. The legal basis for this is Art. 6 (1) (f) GDPR:
IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transferred, website from which the request comes, browser, operating system, and its interface, language and version of the browser software.
5 Contact by e-mail or contact form
When you contact us by e-mail or via a contact form, the details you provide (category, salutation, last name, address and e-mail address) will be stored by us to enable us to answer your questions. Insofar as we use our contact form to request entries that are not required for contacting us, we have always marked these as optional. This information serves to concretise your enquiry and to improve the handling of your request. Notification of this information is provided expressly on a voluntary basis and with your consent, Art. 6 (1) (a) GDPR. As far as this information relates to communication channels (e.g. e-mail address, telephone number), you also consent to us contacting you via this communication channel to answer your request. You can of course revoke this consent at any time for the future. We delete the data that arises in this context after its storage is no longer required, or limit the processing if there are statutory retention requirements.
You can use your e-mail address to subscribe to our newsletter, which informs you about our latest products and services, if you agree to receive the newsletter and thereby consent to the processing of your personal data. The legal basis for this processing is Art. 6 (1) clause 1 lit. a GDPR. We store your e-mail address for as long as you subscribe to our newsletter. In addition, we store your IP addresses and times when you register and confirm to prevent misuse of your personal information. The service is provided by our e-mail service provider CleverReach, which processes GDPR-compliant data in Europe and therefore also uses what is known as the “double opt-in” procedure for consent. You will first receive an e-mail with a link that you can use to confirm that you are the owner of the e-mail address and would like to be notified through our e-mail service. If your subscription is not confirmed within 72 hours of requesting the confirmation e-mail, the personal data you have provided will not be processed, but automatically deleted. You can unsubscribe from the newsletter and thus revoke your consent at any time by clicking on the link contained in each newsletter. Your personal data will not be passed on to third parties.
You can apply to our company electronically, in particular via e-mail or web forms. Needless to say, we will only use your information for the purpose of processing your application and will not pass it on to third parties. Please note that unencrypted e-mails are not transmitted with access protection.
You can also apply online to our company via our application portal. Your online application will be forwarded via an encrypted connection directly to our HR department and, as you might expect, will be treated confidentially. Needless to say, we will only use your information for the purpose of processing your application and will not pass it on to third parties.
If you have applied for a specific vacancy and it has already been filled, and we would like to consider you for another job for which we deem you to be better suited, we may forward your application within the company. Please let us know if you do not consent to your application being forwarded.
Your personal data will be deleted immediately after completion of the application process, or after a maximum of six months, unless you have explicitly given us your consent for your data to be stored for longer or a contract has been concluded. The legal basis is Art. 6 (1) (a), (b) and (f) GDPR as well as § 26 Federal Data Protection Act (‘BDSG’).
Mytof provides you with an interactive tool for consignment tracking, communication with Trans-o-flex customer service and placing Trans-o-flex Now collection orders. If you are already a Trans-o-flex customer, you will have received your access data for Mytof from customer service and which you can amend and correct at any time under the user profile menu item. The processing of your personal data in the event of changes will be carried out for the further fulfilment of the contract (Art. 6 (1) lit. b GDPR).
When you register for the first time without already being a customer, the data provided by you (first and last name, e-mail address, telephone number, fax number, company name, department, address) will be collected and stored in order to successfully complete the registration, set up a customer master account and provide the services for consignment tracking, damage reports and the placing of Trans-o-flex Now collection orders. Insofar as we use the user profile creation form to request information that is not required for the creation of an account and the use of the services, we have always marked this as optional. This information helps us to process our services better. The e-mail address you provide will also be used to send you a new password if necessary. We process this data on the basis of Art. 6 (1) lit. b, f GDPR.
8. 2 Consignment tracking
As a registered user you have the possibility to track the consignment and the associated consignment events and to retrieve damage reports. We will use the e-mail address you provide to notify you in the event of non-delivery so that you can make arrangements for the delivery. The processing of sender data for the purpose of transmitting consignment tracking and notifications takes place on the basis of Art. 6 (1) lit. b GDPR.
8.3 Create employee accounts
When using the Mytof tool, you also have the option of creating employee accesses. The employee master data provided by you (first and last name, e-mail address, company, address) will be processed on the basis of Art. 6 (1) lit. f GDPR, whereby our legitimate interests are the execution of the contract and the proper and smooth course of business. The employees concerned have the right at any time to object to this processing with effect for the future.
8.4 Trans-o-flex Now – new collection order
Newly registered users can request a collection consignment under the Trans-o-flex Now – new collection order menu item. The collection address details provided by you upon registration will be stored and processed for the purpose of providing the service. The legal basis is the performance of the contract pursuant to Art. 6 (1) lit. b, f GDPR.
8.5 Satisfaction analysis/offer submission
If you place an order for a Trans-o-flex Now new collection order, you will also be asked for a telephone number. This will only be used to check your satisfaction over the phone and perhaps to present other contract models of Trans-o-flex. The legal basis for the processing of your personal data for these purposes is our legitimate interest in direct advertising pursuant to Art. 6 (1) lit. f GDPR and, if you are interested in other contract models, the implementation of pre-contractual measures pursuant to Art. 6 (1) lit. b GDPR. You can object to the processing of your telephone number for the purpose of direct advertising at any time with effect for the future.
9 Use of social plugins
This website uses social plugins of the providers
- YouTube (host: YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA)
- Xing (host: Xing SE, Dammtorstr. 30, 20354 Hamburg, Germany)
- LinkedIn (host: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)
By default, these plugins collect data from you and send it to the servers of the respective provider. To protect your privacy, we have taken technical measures to ensure that your information cannot be collected by the providers of the respective plug-in without your consent. When you access a page that integrates such plugins, these are initially disabled. Only after clicking on the respective icon are the plugins enabled, implying that you give your consent to your data being transmitted to the respective provider. The legal basis for the use of the plugins is Art. 6 (1) (a) and (f) GDPR.
The legal basis for the use is § 15 subsection 3 German Teleservices Act (TMG) and Art. 6 (1) (f) GDPR.
10.1 Transient cookies
These cookies are automatically deleted when you close the browser. In particular, these are the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This allows your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.
10.2 Persistent cookies
These cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
10.3 Prevention of cookies
You can configure your browser setting according to your wishes and for example refuse to accept third-party cookies or all cookies. Please be aware that you may not be able to use all the functions of this website.
10.4 Legal basis and storage duration
The legal bases for possible processing of personal data and its duration of storage vary and are presented in the following sections.
11 Website analysis
For purposes of analysing and optimising our websites, we use various services, which are presented below. For example, we can analyse how many people visit our site, which information is most requested, or how people find it. Among other things, we collect data on the website from which a person came to a website (a referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. This helps us to design and improve our offers in a user-friendly way. The data collected is not used to personally identify individual users. Anonymous or at most pseudonymous data is collected. The legal basis for this is Art. 6 (1) (f) GDPR.
11.1 Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Ireland Limited (“Google”). The usage includes the Universal Analytics operating mode. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID, thereby allowing the activities of a user to be analysed across devices.
On behalf of the host of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website host. The legal basis for the use of Google Analytics is Art. 6 (1) clause 1 lit. f GDPR.
The legitimate interest in data processing lies in the optimisation of our website, the analysis of the use of our website and the adaptation of the contents. The interests of the users are sufficiently protected by pseudonymisation.
The personal data will be transferred to the USA under the EU-US Privacy Shield on the basis of the European Commission’s Adequacy Decision. You can retrieve the certificate here.
The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months.
12 Data transfer
As a rule, we never transfer your data to third parties, unless we are legally obliged to do so, or the data transfer is necessary for the execution of the contractual relationship or you have previously expressly consented to the forwarding of your data.
External service providers and partner companies, such as online payment providers or the shipping company commissioned with the delivery only receive your data if this is necessary for the processing of your order. In these cases, however, the amount of data transmitted is limited to the minimum required. Insofar as our service providers come into contact with your personal data, we ensure within the scope of order processing pursuant to Art. 28 GDPR that they comply with the provisions of data protection laws in the same way. Please also note the respective privacy policies of the providers. The respective service provider is responsible for the content of third-party services, whereby we check – within the bounds of what is reasonable – the services for their compliance with legal requirements.
We attach great importance to processing your data within the EU / EEA.
13 Data security
We have taken extensive technical and operational safeguards to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security procedures are regularly reviewed and adapted in line with technological progress.
As of July 2019