9.1 Registration as a user

You have the option of registering on our website by providing personal data.

Which personal data is transmitted to us in this process can be seen from the respective input mask used for registration. The personal data you enter is collected and stored exclusively for internal use by us and for our own purposes. We may arrange for data to be passed on to one or more data processors, for example a parcel service provider, who will also use the personal data exclusively for an internal use attributable to us.

By registering on our website, the IP address assigned by your internet service provider (ISP), the date and the time of registration are also stored. This is done only for the purpose of preventing our services from being misused. If necessary, this data may be used to clarify the situation surrounding any crimes committed. In this respect, the storage of this data is necessary for our protection. As a matter of principle, this data is not disclosed to third parties. This does not apply if we are legally obliged to pass on the data or if the data is passed on for the purpose of criminal prosecution.

Your registration, including voluntary provision of personal data, also serves us to offer you content or services which, due to the nature of the matter, can only be offered to registered users. Registered persons are free to change the personal data provided during registration at any time or to have it completely erased from our database.

Upon request, we will provide you at any time with information about which personal data is stored about you. Furthermore, we will correct or delete personal data at your request, insofar as this does not conflict with any statutory retention obligations. A data protection officer named in this Privacy Policy and all other employees are available to the data subject as contact persons in this context.

The processing of your data is in the interest of a convenient and easy use of our website. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f) GDPR.

9.2 Data processing when opening a customer account and for contract execution

Pursuant to Art. 6 (1) lit. b) GDPR, personal data is collected and processed if you provide it to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. We store and use the data provided by you for the purpose of processing the contract. After complete execution of the contract or deletion of your customer account, your data will be blocked taking into account tax and commercial law retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data or we are legally permitted to the further use of your data, about which we inform you accordingly below.

9.3 Data processing for order handling

The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract execution, insofar as this is necessary for the delivery of the goods. We disclose your payment data to the commissioned credit institution within the scope of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will explicitly inform you about this below. The legal basis for the transfer of data is Art. 6 (1) lit. b) GDPR.

9.4 Data processing for identity verification

Where necessary, we verify your identity on the legal basis of Art. 6 (1) lit. b) and f GDPR by using information from service providers. The authorisation to do so results from the protection of your identity and the prevention of fraud attempts at our expense. The circumstance and the result of our enquiry will be stored in your customer account or your guest account for the duration of the contractual relationship.

9.5 Contact support / Contact form

Personal data is collected when contacting us (e.g. via contact form or e-mail). Which data is collected in the case of the use of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 (1) lit. f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) lit. b) GDPR. Your data will be deleted after final processing of your request; this is the case if it can be inferred from the circumstances that the matter concerned has been conclusively clarified and the deletion does not conflict with any legal obligations to retain data.

9.6 Services / Digital Goods

We only transmit personal data to third parties if this is necessary within the framework of the Data Protection Agreement, for example to the credit institution commissioned with the payment processing.

No further transmission of data will take place unless you have expressly consented to the transmission. Your data will not be disclosed to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6 (1) lit. b) GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

9.7 Application Management / job exchange

We collect and process the personal data of applicants for the purpose of processing the application procedure. The processing may also take place electronically. This is particularly the case if an applicant submits the relevant application documents to us electronically, for example by e-mail or via a web form on the website. If we conclude an employment or service contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If we do not conclude a contract with the applicant, the application documents are automatically deleted two months after notification of the rejection decision, provided that no other legitimate interests on our part oppose deletion. Another legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the German Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz [AGG]).

The legal basis for processing your data is Art. 6 (1) lit. b) GDPR, Art. 88 GDPR icw § 26 (1) German Federal Data Protection Act (Bundesdatenschutzgesetz [BDSG]).

9.8 Heyflow

We use Heyflow forms so that interested parties, customers, applicants or other third parties (hereinafter “inquirers”) can contact us.

The provider of this technology is Heyflow GmbH, Jungfernstieg 49, 20354 Hamburg (hereinafter referred to as Heyflow).

Heyflow provides a technology for the creation of online interaction tools, so-called click tunnels, with the help of which the inquirers can contact us. For this purpose, the inquirers enter their request and the other data requested in the respective form (e.g. name, contact details, etc.) into the form and submit it. Some forms also offer the option of uploading your own files, for which the following explanations apply accordingly.

All requests are processed in Heyflow's systems on our behalf. We have concluded an order processing contract with Heyflow in accordance with Art. 28 GDPR. This contract ensures that Heyflow processes.

Further details about the provider can be found in Heyflow's privacy policy at: https://heyflow.app/de/datenschutz

The data is processed with the help of Heyflow on the basis of our legitimate interest in the most interactive and user-friendly communication possible with enquirers in accordance with Art. 6 para. 1 lit. f GDPR. The request data itself is processed on the basis of Art. 6 para. 1 lit. b GDPR, provided that your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In the case of an application, the processing of your data is based on Art. 88 GDPR in conjunction with Section 26 BDSG. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us in accordance with Art. 6 para. 1 lit. f GDPR or on your consent in accordance with Art. 6 para. 1 lit. a GDPR, provided that this has been requested; you can revoke this consent at any time in the future.

The data you have entered will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies, for example after your request has been processed. Mandatory statutory provisions - in particular retention periods - remain unaffected by this.

In the case of an application, the following also applies: If we are unable to make you a job offer, you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR for up to 6 months from the end of the application process (rejection or withdrawal of the application). The data will then be deleted. The retention serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the 6-month period has expired, for example due to an impending or pending legal dispute, the data will only be deleted when the purpose for further storage no longer applies. Longer storage may also take place if, for example, you have given your consent to longer storage in our applicant pool in accordance with Art. 6 para. 1 lit. a GDPR or if statutory retention obligations prevent deletion.