Customer portal myZUFALL

DATA PROTECTION DECLARATION

1. General References and Compulsory Information

Data Protection

The following information provides a simple overview of how ZUFALL processes your personal data, the purpose of such, and the rights that you have. Detailed information on the subject of data protection can be extracted from our comprehensive data protection declaration included in this text.

We view data protection as a customer-oriented quality feature. ZUFALL therefore takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and this data protection declaration. We thereby adhere to the principle of data avoidance and process only as little personal data as possible. We protect the data communicated by you through technical and organisational measures in order to protect them from incidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continually checked and improved in line with technical developments and organisational feasibility.

ZUFALL basically does not transfer, sell, assign or otherwise distribute your personal data to third parties, insofar as this is not legally required in the context of processing the contract or has been expressly approved by you.

What are Personal Data?

Personal data according to art. 4 DS-GVO are all information that pertains to an identified or an identifiable natural person, that is, all data that can be allocated to you directly or indirectly, e.g. name, address, phone number, e-mail address or date of birth.

Information as to the Responsible Authority

The responsible authority is the natural or legal person that, alone or together with others, decides on the purpose and means of processing personal data (e.g. names, e-mail addresses among others).

The responsible authority for data processing on this website is:

Friedrich Zufall GmbH & Co. KG
Internationale Spedition
Robert-Bosch-Breite 11
37079 Göttingen

Phone: +49 551 607-0
Fax +49 551 666-08
E-Mail: goettingen@zufall.de

Information, Blockage, Deletion, Correction

In the context of the valid legal provisions (art. 15 DS-GVO), you have the right to cost-free information as to your stored personal data, their origin and recipients, the purpose of the data processing and, if applicable, a right to correction, restriction, blockage or deletion of these data. To that end and for further questions on the topic of personal data, you can contact us at any time at the address indicated in the imprint or via datenschutz@zufall.de.

Revocation of Your Approval to Process Data

Many data processing procedures are possible only with your express approval. You can revoke consent that has already been granted at any time according to art. 7 para. 3 DS-GVO. A formless message per e-mail via datenschutz@zufall.de is sufficient for this. As a consequence, we can no longer continue the data processing that is based on this consent and are prohibited from doing so in the future. The legality of the data processing that occurred prior to the revocation is not affected by the revocation.

Right of Appeal with the Responsible Authorities

In the event of a violation related to the data protection law, you have a right of appeal according to art. 77 DS-GVO at the responsible state privacy agencies. This depends on the headquarters of the company. For the Göttingen location, this would be the state data privacy agency for the State of Lower Saxony (Prinzenstraße 5, 30159 Hannover).

Right to Data Portability

You have the right to have data that we process automatically based on your consent or in fulfilment of a contract provided to you or to a third party in a current, machine readable format according to art. 20 DS-GVO. Insofar as you demand the direct transfer of data to another responsible party, this will occur only to the extent that this is technically possible.

Restriction of Data Processing

According to art. 18 DSG-Vo, you can demand the restriction of the processing of your personal data, insofar as you contest the correctness of the data, or the processing is unlawful, you, however, reject their deletion and we no longer require the data, but you require these data to assert, exercise or defend legal claims or you have raised objection to the processing according to art. 21 DSG-VO.

Legally Required Data Protection Officer

We have appointed a data protection officer for our company.

Gunnar Heunisch
Robert-Bosch-Breite 11
37079 Göttingen

Phone: +49 (0) 551 607-487
E-Mail: datenschutz@zufall.de

2. Data Collection on Our Website

We look forward to your visit to our website and appreciate your interest in our company. This data protection declaration applies to the use of the domains www.zufall.de, www.myzufall.de and www.ausbildung-bei-zufall.de.

A variety of personal data is collected when you visit our websites. As standard, our webservers store technical access data such as the IP address of the computer that requested the data, the identification data for the browser type and the operating system that you used, the objects that you requested from us and retrieved, and the date and time of the request. These data, however, are not allocated to a specific person by us, but rather are used exclusively to improve the appearance and serviceability of our websites and to potentially recognize technical problems with our websites early-on. We do not create a user profile and also do not associate this with information to be personally allocated. Personal data are stored only if they are obligatory for the purpose as desired by you and that you have indicated, perhaps to process an order, to answer your questions, to provide special information and offers or to fulfil particular services for you.

We make reference to the fact that data transfer on the internet (e.g. in communications per e-mail) can feature security breaches. Complete protection of data from access by third parties is not possible.

AWStats Web Statistics

We use the AWStats program in order to be able to statistically assess our site. This program evaluates log files that are created by the web servers based on visitor queries. The data cannot be assigned to a specific person and are deleted after the statistical evaluation.

Contact Form and User Registration

If, per the contact form, you send us questions such as e.g. questioning a current price or a follow up on a shipment, or register with ZUFALL as a user, your information from the request form and including the contact data there indicated will be stored by us for the purpose of processing the request and in case of subsequent questions and, if required, will be forwarded to associated companies. Please send us only the information that is required to process your request.

The processing of the data as indicated in the contact form thus takes place exclusively based on your approval (art. 6 para. 1 lit. a DS-GVO). The data remain with us until you request that we delete them, you revoke your consent for storage or the purpose of the data storage lapses (e.g. after the processing of your request has been concluded). Mandatory legal provisions – in particular retention periods – remain unaffected. A formless message per e-mail is adequate if you would like to withdraw your consent. The legality of the data processing procedures until the time of revocation remains unaffected.

Social Media Plugins

Facebook Plugins (Like & Share Button)

Our pages integrate plugins for the Facebook social network, Provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. You will recognize the Facebook plugins by the Facebook logo or the “Like button” on our page. An overview of the Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/.

If you make use of our pages, the plugin produces a direct connection between your browser and the Facebook server. Facebook is thereby informed that you have visited our page with your IP address. If you click the Facebook “Like button” or leave a comment while you are logged into your Facebook account, you can link the contents of our pages on your Facebook profile. Facebook can thereby allocate the visit to our pages to your user account. We make reference to the fact that, as a provider of the pages, we obtain no knowledge of the content of the data transmitted or their use through Facebook. Further information on this can be found in the Facebook data protection declaration at: https://de-de.facebook.com/policy.php.

If you desire that Facebook not allocate the visit to our pages to your Facebook user account, then please log out of your Facebook user account before visiting our page.

Instagram Plugin

Instagram service functions are integrated on our pages. These functions are offered through Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

If you are logged into your Instagram account, you can link the contents of our pages with your Instagram profile by clicking the Instagram button. Instagram can thereby allocate the visit to our pages to your user account. We make reference to the fact that, as the provider of the pages, we obtain no knowledge of the content of the data transmitted or their use by Instagram.

Further information on this can be found in the Instagram data protection declaration: https://instagram.com/about/legal/privacy/.

3. Data Protection in Marketing

We comply with the legal regulations of the DS-GVO and the UWG in the context of marketing.

If we obtained a one-time approval from you for purposes of advertising, you can revoke this at any time without providing a reason, at datenschutz@zufall.de.

If you receive advertising from us in the context of existing customer relations in accord with the provisions of § 7 para. 3 UWG  – this would be the case if we intend to inform you about the sale of a similar product or service, if you have not objected to our sending advertising messages and we have made your contact data available in conjunction with your fulfilment of the contract –you can revoke this usage at any time atdatenschutz@zufall.de.

If you receive advertising from us based on a balancing of interests according to art. 6 para. 1 lit. f DS-GVO, you can object to this at any time at datenschutz@zufall.de.

4. Newsletter

Our newsletter provides you with information on current topics such as changes at the ZUFALL logistics group or news from the logistics sector. The information is intended to simplify the working relationship between you and the ZUFALL logistics group and assure a uniform level of understanding.

Newsletter Data

If you would like to receive the newsletter offered on our website, we require an e-mail address from you and information that permits us to check that you are the owner of the indicated e-mail address and that you agree to receive the newsletter. Further data will not be collected or only on a voluntary basis in the context of your consent (art. 6 para. 1 lit. a DS-GVO). We use these data exclusively to send requested information.

We use the double opt-in procedure as evidence of your consent; that is, you will obtain a verification link from us at the e-mail address indicated by you after your registration on the website. You are included in the newsletter mailing list only after being verified by the registration link. We delete your data if the link has not been verified by you within 30 days.

The approval granted for the storage of the data, the e-mail address and its use to send the newsletter can be revoked at any time by using the “deregister” link in the newsletter or per formless e-mail to datenschutz@zufall.de. The legality of data processing that has already taken place remains unaffected by the revocation.

The data that you deposited for the purpose of receiving the newsletter will be stored by us until your deregistration from the  news letter and then deleted here and also at our service providers after the newsletter has been cancelled. Data that have been stored by us for other purposes (e.g. e-mail addresses for the user section) remain unaffected.

Newsletter2Go

This website uses the external Newsletter2Go service to send newsletters. The provider is Newsletter2Go GmbH, Nürnberger Straße 8, 10787 Berlin, Germany.

Newsletter2Go is a service that, among others, organizes and analyses the sending of newsletters. The data submitted by you for the purpose of obtaining the newsletter are stored on the Newsletter2Go servers in Germany.

If you do not desire an analysis through Newsletter2Go, you must cancel the newsletter. We make a corresponding link available for this in every newsletter. Furthermore, you can also cancel the newsletter directly on the website.

More details can be seen in the Newsletter2Go data protection provisions at: https://www.newsletter2go.de/features/datenschutz-2/.

Detailed information on Newsletter2Go functions can be seen at the following link: https://www.newsletter2go.de/features/newsletter-software/.

5. Data Protection for Order Processing

It becomes necessary to process and store personal data during the course of processing an order. All data that you provide in the context of processing an order, for example information about the orderer or recipient, will fundamentally be handled by us exclusively for the purpose of order fulfilment and with the highest confidentiality. The legal basis for the collection and processing of data is the fulfilment of the contract concluded with you (art. 6 para. 1 lit. b DS-GVO). The stored data are subject to the legal periods of storage and deletion.

The data are forwarded to other companies within or outside of ZUFALL logistics group only if this is also further required for the purpose of fulfilment of the contract.

In the context of existing client relations, we reserve the right to send you information on our own similar products or services of the ZUFALL logistics group. If you desire not to be contacted in this regard, you also have the right of revocation in this case at any time.

6. Data Protection in an Application Procedure

If you would like to apply for a current job posting per mail or e-mail or send us an unsolicited application, you will be providing us with personal data. The legal basis for the data processing is art. 6 para. 1 lit. a or b DS-GVO, and art. 88 DS-GVO in conjunction with § 26 BDSG-new. By sending the application documentation via the ausbildung-bei-zufall.de portal (online application), you declare that you agree to our data protection provisions. Forwarding your application documentation in this case takes place encrypted and it will be forwarded to the responsible clerk. If the application documentation reaches us in another way, you will obtain a confirmation of receipt from us and reference to our principles of data protection. Please note that, as a rule, the submission will take place unencrypted if you send us your application documentation per e-mail.

In the course of your application, the following personal data as listed will be collected and processed in particular: last name, first name; address; phone number; e-mail address; application documentation (cover letter, CV, attestations, certificates, etc.).

Please send us only the information that we require to process your application. We do not require any information from you that is not usable according to the General Equal Treatment Act (e.g. race, ethnic background, religion, ideology, or sexual identity) or other sensitive data regarding your person (e.g. pregnancy, membership in a trade union, bodily or mental health or sex life).

The collection and processing of your application data will take place exclusively for the purpose of filling positions within our company. Your data are basically forwarded only to the in-house department responsible for the application process and the expert departments of our company. Forwarding your personal application data to other companies of the ZUFALL logistics group will take place only following previous, express consent by you. Any use that goes beyond that or the forwarding of your application data to third parties will not occur.

The application documentation is stored by us for six months after concluding the application process and is then destroyed. This does not apply insofar as the legal provisions prevent a deletion, further storage is required for the purpose of maintaining evidence or you have expressly approved longer storage (e.g. for future job offers). If your application is successful, the indicated data can be used for administrative issues in the context of employment.

7. Our Social Media Presence

Data Processing through Social Networks

We maintain publicly accessible profiles on social networks. The social networks that we use can be found individually below. As a rule, social networks such as Facebook, Google+ etc. can comprehensively analyse your user behaviour if you visit their websites or a website with integrated social media contents (e.g. Like buttons or advertising banners ). Numerous processing procedures relevant to data protection are triggered by visiting our social media presences. In detail: If you are logged into your social media account and visit our social media presence, the provider of the social media portal can allocate this visit to your user account. Under certain circumstances, your personal data can, however, also be collected if you are not logged-in or have no account at the respective social media portal. This data collection in this case takes place, for example, via cookies that are stored on your end device or through acquiring your IP address. With the aid of the data collected in this way, the operators of the social media portals create user profiles in which your preferences and interests are filed. In this way, interest-related advertising can be displayed in- and outside of the respective social media presence. Insofar as you have an account at the respective social network, the interest-related advertisement can be displayed on all devices on which you are logged-in or were logged-in. Please additionally note that we cannot trace all processing procedures carried out on the social media portals. Depending on the provider, further processing steps can therefore be carried out by the operators of the social media portals. Details on this can be seen in the terms of use and the data protection provisions of the respective social media portals.

Legal Basis

Our appearances on social media should assure the greatest possible comprehensive presence on the internet. It is hereby a matter of an authorized interest in the sense of art. 6 para. 1 lit. f DSGVO. The analytical processes initiated by social networks are based on possibly deviating legal bases that are to be indicated by the operators of the social networks (e.g. consent in the sense of art. 6 para. 1 lit. a DSGVO).

Responsible Party and the Assertion of Rights

If you visit one of our social media appearances (e.g. Facebook), we, together with the operator of the social media platform, are jointly responsible for the data processing procedures triggered by this visit. You can basically assert your rights (information, correction, deletion, limitation of processing, data transferability and objections) with respect to us as well as the operator of the respective social media portal (e.g. with respect to Facebook). Please note that, despite joint responsibility together with the social media portal operator, we do not have total influence on the data processing procedures of the social media portals. Our options are significantly directed by the company policies of the respective provider.

Storage Period

The data collected directly by us via social media presence are deleted by our systems as soon as the purpose of their storage lapses, you request the deletion, you revoke your consent for storage or the purpose of the data storage lapses. Stored cookies remain on the end device until you delete them. Mandatory legal stipulations – in particular storage periods – remain unaffected. We have no influence on the duration of storage of your data that are stored by the operators of the social networks for their own purposes. For details on this please see the information directly at the operators of the social media networks (e.g. in their data protection declaration, see below).

Social Networks in Detail

Facebook

We have a profile on Facebook. The provider is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Facebook is certified according to the EU-US Privacy Shield. You can adapt your advertising preferences in your user account. To do this, click on the following link and log in: https://www.facebook.com/settings?tab=ads

See details in Facebook’s data protection declaration: https://www.facebook.com/about/privacy/

Twitter

We use the Twitter short messaging system. The provider is Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. Twitter is certified according to the EU-US Privacy Shield.
You can adapt your Twitter data protection preferences in your user account. To do this, click on the following link and log in:https://twitter.com/personalization

 

See details in Twitter’s data protection declaration:https://twitter.com/de/privacy

Instagram

We have a profile on Instagram. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. See details on the handling of your personal data in the Instagram data protection declaration: https://help.instagram.com/519522125107875

XING

We have a profile on XING. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. See details on the handling of your personal data in the XING data protection declaration: https://privacy.xing.com/de/datenschutzerklaerung

8. Changes to the Data Protection Declaration

The content of our data protection declaration is checked regularly. ZUFALL reserves the right to change the data protection declaration at any time without advance notice.  If we change the content of this data protection declaration, we will make these changes known on our online presence. We will nevertheless always have earlier versions of the data protection declaration available and easy to find.

February 18, 2019