Data privacy statement


Configure Cookie Preferences


In the following statement, we inform you about the collection of personal data when using our website. Personal data is all data that refers to you personally, e.g. name, address, e-mail addresses, user behaviour. We have taken extensive technical and operational safeguards to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security procedures are regularly reviewed and adapted in line with technological progress.


1        Party responsible for data processing

The person responsible in accordance with Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is trans-o-flex Express GmbH, Hertzstr. 10, D-69469 Weinheim, Phone +49 6201 988 0, e-mail: (further information can be found in our legal notice).


2        Data protection officers’ contact point

You can contact our data protection officers at datenschutzbeauftragter@tof.deor by writing to our postal address additionally specifying “the data protection officer”.


3        Your rights

You have the following rights with respect to us as regards your personal data.


3.1        General rights

You have a right to information, correction, deletion, limitation of processing, objection to processing and data portability. As far as processing is based on your consent, you have the right to revoke it with effect for the future.


3.2         Rights in the processing of data on the basis of legitimate interest

In accordance with Art. 21 (1) of the GDPR, you have the right, at any time and for reasons arising from your particular situation, to object to the processing of personal data relating to you pursuant to Art. 6 (1) (e) of the GDPR (data processing in the public interest) or based on Art. 6 (1) (f) GDPR (data processing for the protection of a legitimate interest), which also applies to profiling based on this provision. In the event of you lodging an objection, we will no longer process your personal information unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims.


3.3       Rights as regards direct advertising

If we process your personal data in order to conduct direct advertising, you have the right, in accordance with Art. 21 (2) GDPR, to object at any time to the processing of your personal data for the purpose of such advertising, which also applies to profiling, as far as this is associated with such direct advertising. In the event of you objecting to your data being processed for the purpose of direct advertising, we will no longer process your personal data for these purposes.


3.4        Right to complain to a supervisory authority

You also have the right to complain about the processing of your personal data by us to a competent data protection supervisory authority.


4        Collection of personal data when visiting our website

When using our website merely for informative purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following information that is technically necessary for us in order to display our website and to ensure its stability and security. The legal basis for this is Art. 6 (1) (f) GDPR:

IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transferred, website from which the request comes, browser, operating system, and its interface, language and version of the browser software.


5       Contact by e-mail or contact form

When you contact us by e-mail or via a contact form, the details you provide (category, salutation, last name, address and e-mail address) will be stored by us to enable us to answer your questions. Insofar as we use our contact form to request entries that are not required for contacting us, we have always marked these as optional. This information serves to concretise your enquiry and to improve the handling of your request. Notification of this information is provided expressly on a voluntary basis and with your consent, Art. 6 (1) (a) GDPR. As far as this information relates to communication channels (e.g. e-mail address, telephone number), you also consent to us contacting you via this communication channel to answer your request. You can of course revoke this consent at any time for the future. We delete the data that arises in this context after its storage is no longer required, or limit the processing if there are statutory retention requirements.


6        Newsletter

You can use your e-mail address to subscribe to our newsletter, which informs you about our latest products and services, if you agree to receive the newsletter and thereby consent to the processing of your personal data. The legal basis for this processing is Art. 6 (1) clause 1 lit. a GDPR. We store your e-mail address for as long as you subscribe to our newsletter. In addition, we store your IP addresses and times when you register and confirm to prevent misuse of your personal information. The service is provided by our e-mail service provider CleverReach, which processes GDPR-compliant data in Europe and therefore also uses what is known as the “double opt-in” procedure for consent. You will first receive an e-mail with a link that you can use to confirm that you are the owner of the e-mail address and would like to be notified through our e-mail service. If your subscription is not confirmed within 72 hours of requesting the confirmation e-mail, the personal data you have provided will not be processed, but automatically deleted. You can unsubscribe from the newsletter and thus revoke your consent at any time by clicking on the link contained in each newsletter. Your personal data will not be passed on to third parties.


7        Applications

You can apply to our company electronically, in particular via e-mail or web forms. Needless to say, we will only use your information for the purpose of processing your application and will not pass it on to third parties. Please note that unencrypted e-mails are not transmitted with access protection.

You can also apply online to our company via our application portal. Your online application will be forwarded via an encrypted connection directly to our HR department and, as you might expect, will be treated confidentially. Needless to say, we will only use your information for the purpose of processing your application and will not pass it on to third parties.

If you have applied for a specific vacancy and it has already been filled, and we would like to consider you for another job for which we deem you to be better suited, we may forward your application within the company. Please let us know if you do not consent to your application being forwarded.

Your personal data will be deleted immediately after completion of the application process, or after a maximum of six months, unless you have explicitly given us your consent for your data to be stored for longer or a contract has been concluded. The legal basis is Art. 6 (1) (a), (b) and (f) GDPR as well as § 26 Federal Data Protection Act (‘BDSG’).


8      Mytof

Mytof provides you with an interactive tool for consignment tracking, communication with trans-o-flex customer service and placing trans-o-flex now collection orders. If you are already a trans-o-flex customer, you will have received your access data for Mytof from customer service and which you can amend and correct at any time under the user profile menu item. The processing of your personal data in the event of changes will be carried out for the further fulfilment of the contract (Art. 6 (1) lit. b GDPR).


8.1      Registration

When you register for the first time without already being a customer, the data provided by you (first and last name, e-mail address, telephone number, fax number, company name, department, address) will be collected and stored in order to successfully complete the registration, set up a customer master account and provide the services for consignment tracking, damage reports and the placing of “trans-o-flex now” collection orders. Insofar as we use the user profile creation form to request information that is not required for the creation of an account and the use of the services, we have always marked this as optional. This information helps us to process our services better. The e-mail address you provide will also be used to send you a new password if necessary. We process this data on the basis of Art. 6 (1) lit. b, f GDPR.


  1. 2    Consignment tracking

As a registered user you have the possibility to track the consignment and the associated consignment events and to retrieve damage reports. We will use the e-mail address you provide to notify you in the event of non-delivery so that you can make arrangements for the delivery. The processing of sender data for the purpose of transmitting consignment tracking and notifications takes place on the basis of Art. 6 (1) lit. b GDPR.


8.3      Create employee accounts

When using the Mytof tool, you also have the option of creating employee accesses. The employee master data provided by you (first and last name, e-mail address, company, address) will be processed on the basis of Art. 6 (1) lit. f GDPR, whereby our legitimate interests are the execution of the contract and the proper and smooth course of business. The employees concerned have the right at any time to object to this processing with effect for the future.


8.4      trans-o-flex now – new collection order

Newly registered users can request a collection consignment under the “trans-o-flex now” – new collection order menu item. The collection address details provided by you upon registration will be stored and processed for the purpose of providing the service. The legal basis is the performance of the contract pursuant to Art. 6 (1) lit. b, GDPR.


8.5      Satisfaction analysis/offer submission

If you place an order for a “trans-o-flex now” new collection order, you will also be asked for a telephone number. This will only be used to check your satisfaction over the phone and perhaps to present other contract models of trans-o-flex. The legal basis for the processing of your personal data for these purposes is our legitimate interest in direct advertising pursuant to Art. 6 (1) lit. f GDPR and, if you are interested in other contract models, the implementation of pre-contractual measures pursuant to Art. 6 (1) lit. b GDPR. You can object to the processing of your telephone number for the purpose of direct advertising at any time with effect for the future.

  1. “trans-o-flex insight”

With “trans-o-flex insight”, we provide trans-o-flex recipients a shipment tracking option. You can use this recipient service both via our app and via our homepage. trans-o-flex insight can be used with or without registration.


9.1. trans-o-flex insight without registration

Without registration  you can use the shipment tracking for individual shipments. To do so, you must enter the shipment number, the postal code and the house number in the corresponding field. Personal data will not be collected.


9.2. trans-o-flex insight with registration


9.2.1 Registration

To register for the app and the web service on our homepage, the data you provide (e-mail address, password, first and last name, address) will be collected and stored in order to successfully complete the registration, create a user account for you and provide a verification code for it so that you can make full use of the consignee service for tracking shipments. As part of the use of the recipient service, the sender data, the shipment number and shipment-related characteristics are processed. The e-mail address you provide will also be used to enable you to use the “Reset password” function if necessary. The use of the recipient service for shipment tracking via a user account is governed by the terms of use, which the customer confirms each time he logs in. The processing of personal data associated with the registration and provision of the consignee service for shipment tracking is primarily carried out for the fulfillment of the contract pursuant to Art. 6 (1) (b) GDPR. In addition, the aforementioned data categories are processed to ensure the data security of the user account pursuant to Art. 6 (1) (f) GDPR. In this context, changes to user data in the “Profile” area are also logged. To ensure the data security of the user account, a verification code must be entered during initial registration. For this reason, we have a legitimate interest in processing your data.

9.2.2 Use of Google reCAPTCHA

In order to ensure sufficient data security when submitting forms, we use in certain cases the service reCAPTCHA of the company Google Inc. This serves primarily to distinguish whether the input is made by a natural person or abusively by machine and automated processing. The service includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google. The deviating data protection regulations of Google Inc. apply here. Further information on the data protection guidelines of Google Inc. can be found at  or

9.2.3 Automatic account deletion

You can delete your account at any time. For this purpose, you will find a button within the app. Your data will be deleted immediately if there are no legal retention periods to the contrary.

10      Use of social plugins

This website uses social plugins of the providers

  • YouTube (host: YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA)
  • Xing (host: Xing SE, Dammtorstr. 30, 20354 Hamburg, Germany)
  • LinkedIn (host: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)

By default, these plugins collect data from you and send it to the servers of the respective provider. To protect your privacy, we have taken technical measures to ensure that your information cannot be collected by the providers of the respective plug-in without your consent. When you access a page that integrates such plugins, these are initially disabled. Only after clicking on the respective icon are the plugins enabled, implying that you give your consent to your data being transmitted to the respective provider. The legal basis for the use of the plugins is Art. 6 (1) lit. a and lit. f GDPR.

Once enabled, the plugins also record personal data such as your IP address and send it to the servers of the respective provider, where this data is stored. In addition, enabled social plug-ins set a cookie with a unique identifier when the relevant website is called up. This allows providers to create profiles of your usage behaviour. This also happens even if you are not a member of the social network of the respective provider. If you are a member of the provider’s social network and you are logged into the social network during your visit to this website, your data and information about the visit to this website may be linked to your profile on the social network. We have no influence over the exact scope of the data collected from you by the respective provider. For more information on the scope, nature and purpose of the data processing and rights and settings options for the protection of your privacy, please refer to the privacy policy of the respective provider of the social network. These are available at the following addresses:



10.1.      YouTube

Our website incorporates a plugin from YouTube, belonging to Google Inc., based in San Bruno/California, USA. We use the YouTube plugin in “advanced privacy mode”. In this mode, according to YouTube, information about visitors to our website will not be stored unless you watch the video. In this case, a connection to YouTube’s servers will be set up and data will be passed to YouTube. This data includes device-related information as well as protocol data incl. IP addresses. If you are logged in to your YouTube account at the same time, your surfing behaviour can also be assigned to your personal account. You can prevent this linking by logging out of your account beforehand. For information on which data is collected when using YouTube and how this is used, please refer to Google’s privacy policy: MG and/or Art. 6 (1) (f) GDPR.
The legal basis for the use is § 15 subsection 3 German Teleservices Act (TMG) and Art. 6 (1) (f) GDPR.


11        Use of cookies

When you use our website, cookies are stored on your computer. Cookies are small text files that are stored on your hard drive, assigned to the browser you are using, and that provide certain information to the body that sets the cookie. Cookies cannot run programmes or transmit viruses to your computer. They serve to make the Internet offering altogether more user-friendly and effective. We also use cookies to identify you for subsequent visits if you have an account with us. Otherwise you would have to log in again for each visit. In order to allow a choice of the different cookies, we use a cookie content manager to provide you with individual settings. This website uses the following types of cookies, the scope and functioning of which are explained below.


11.1        Transient cookies

These cookies are automatically deleted when you close the browser. In particular, these are the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This allows your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.


11.2      Persistent cookies

These cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.


11.3        Prevention of cookies

You can configure your browser setting according to your wishes and for example refuse to accept third-party cookies or all cookies. Please be aware that you may not be able to use all the functions of this website.


11.4      Legal basis and storage duration

The legal bases for possible processing of personal data and its duration of storage vary and are presented in the following sections.


12        Website analysis

For purposes of analysing and optimising our websites, we use various services, which are presented below. For example, we can analyse how many people visit our site, which information is most requested, or how people find it. Among other things, we collect data on the website from which a person came to a website (a referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. This helps us to design and improve our offers in a user-friendly way. The data collected is not used to personally identify individual users. Anonymous or at most pseudonymous data is collected. The legal basis for this is your permission due to Art. 6 (1) (a) GDPR.


12.1        Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Ireland Limited (“Google”). The usage includes the Universal Analytics operating mode. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID, thereby allowing the activities of a user to be analysed across devices.

Google Analytics uses cookies, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymisation is enabled on this website, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. We use Google Analytics only with IP anonymisation enabled to ensure an anonymous collection of IP addresses (known as IP masking). The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data. For more information about terms of use and data protection and privacy, please visit

On behalf of the host of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website host. The legal basis for the use of Google Analytics is Art. 6 (1) (a) GDPR.

The legitimate interest in data processing lies in the optimisation of our website, the analysis of the use of our website and the adaptation of the contents. The interests of the users are sufficiently protected by pseudonymisation.

The personal data will be transferred to the USA on basis of the standard contractual clauses, in order to maintain the European level of data protection despite the transfer.

The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months.

You can prevent the storage of cookies by selecting the appropriate setting in your browser; in which case, however, we point out that you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie relating to your use of the website (including your IP address) and Google from processing this data by downloading and installing the Opt-out cookies prevent the future collection of your data when you visit this website. To prevent Universal Analytics from collecting data across multiple devices, you must opt-out on all systems used. If you click here, the opt-out cookie will be set:


Further information on the use of data by Google, setting and objection options can be found in Google’s privacy policy ( as well as in the settings for the display of advertising by Google (


13        Data transfer

As a rule, we never transfer your data to third parties, unless we are legally obliged to do so, or the data transfer is necessary for the execution of the contractual relationship or you have previously expressly consented to the forwarding of your data.

External service providers and partner companies, such as online payment providers or the shipping company commissioned with the delivery only receive your data if this is necessary for the processing of your order. In these cases, however, the amount of data transmitted is limited to the minimum required. Insofar as our service providers come into contact with your personal data, we ensure within the scope of order processing pursuant to Art. 28 GDPR that they comply with the provisions of data protection laws in the same way. Please also note the respective privacy policies of the providers. The respective service provider is responsible for the content of third-party services, whereby we check – within the bounds of what is reasonable – the services for their compliance with legal requirements.

We attach great importance to processing your data within the EU / EEA.


14   Data security

We have taken extensive technical and operational safeguards to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security procedures are regularly reviewed and adapted in line with technological progress.

As of April 2021

Do you have any questions?
Do not hesitate to contact us!