Information according to
Art. 13, 14 and 21 of the General Data Protection Regulation (GDPR) and others
Data protection laws
1 / Who is responsible for data processing and who can I contact?
Our responsible person is:
Name: INTERTEAM Speditionsgesellschaft Ingo Bernsee
Address: Kattjahren 8, 22359 Hamburg
Phone: +49 40 7310800
E-mail: service.hh@interteam.hamburg
2 / What do we process your data for and on what legal basis / Can you refuse the collection?
Our website collects a range of general data and information each time it is accessed by you or an automated system. This general data and information is stored in the log files of our server. The browser types and versions used, the operating system used by the accessing system, the website from which an accessing system accesses our website, the sub-websites that are accessed via an accessing system on our website, the date and time of access to the website, an Internet protocol address (IP address), the Internet service provider of the accessing system and other similar data and information used for security purposes in the event of attacks on our IT systems may be recorded. When using this general data and information, we do not draw any conclusions about the data subject. Rather, this information is required to correctly deliver the content of our website, to optimise the content of our website and the advertising for it, to ensure the long-term functionality of our IT systems and the technology of our website and to provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack. This anonymously collected data and information is therefore evaluated by us both statistically and with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimal level of protection for the personal data processed by us (Art. 6 para. 1 f GDPR). The anonymous data of the server log files are stored separately from all personal data provided by a data subject.
2.1 For the fulfilment of contractual obligations
We use personal data (e.g. name, address, email address, telephone number, nationality, gender, company name, legitimisation data, tax ID if applicable, customer number, SCHUFA score, Coface score) that you voluntarily provide to us in connection with the conclusion of a contract or the initiation of the conclusion of a contract (e.g. via our contact form, for the application, for contacting us via email) on the basis of the associated consent (Art. 6 para. 1 a GDPR). This data is then processed by us in accordance with the statutory provisions (e.g. the BDSG, the TMG and the GDPR). Which personal data is transmitted to the data controller is determined by the respective input mask used for registration or contact or by your decision as to which information you wish to provide us with.
We process the data required for the fulfilment of a contract or for the implementation of pre-contractual measures (e.g. to answer your questions about the product or a service) (Art. 6 para. 1 b GDPR).
Without the provision of personal data, we cannot fulfil our contractual obligations (e.g. invoicing, the provision of our services, the assertion of claims, correspondence with you).
2.2 As part of the balancing of interests (Art. 6 para. 1 f GDPR)
Where necessary, we process your data beyond the actual fulfilment of the contract to protect our legitimate interests or those of third parties (e.g.):
- Consultation of and data exchange with credit agencies (e.g. SCHUFA, Coface) to determine creditworthiness or default risks and the need for a seizure protection account or basic account;
- Examination and optimisation of procedures for needs analysis and direct customer contact;
- Assertion of legal claims and defence in legal disputes;
- Ensuring the IT security and IT operations of our company;
- Prevention and investigation of criminal offences;
- Video surveillance is used to collect evidence in the event of criminal offences or to prove transactions and deposits, e.g. at ATMs. They therefore serve to protect customers and employees as well as to exercise domiciliary rights;
- Measures for building and system security (e.g. access controls);
- Measures to safeguard domiciliary rights;
- Measures for business management and further development of services and products.
3 / Who works with the data?
3.1
The personal data is used exclusively by the departments involved in processing the contract.
3.2
Processors engaged by us (Art. 28 GDPR, basis for this: Art. 6 para. 1 a and b GDPR) may also receive data for these purposes. These are companies in the categories of IT services, logistics, printing services, telecommunications, legal and tax advice, tax consultants, debt collection, advice and consulting as well as sales and marketing. We store the data received predominantly on our in-house servers, but in some cases also on servers of specialised service providers within Germany.
3.3
The data will not be passed on to third parties who are not involved in the fulfilment of the contract. In particular, personal data will not be transferred to a third country or an international organisation.
4 / How long will your data be stored?
4.1
If necessary, we process and store your personal data only for the period of time required to achieve the purpose of storage or if this has been provided for by the European legislator or another legislator in laws or regulations to which the controller is subject. We are subject to various statutory retention and documentation obligations arising from the German Commercial Code (HGB), the German Fiscal Code (AO), the German Banking Act (KWG) and the German Money Laundering Act (GwG), among others. Section 147 AO, for example, stipulates a retention obligation of up to ten years. If you have given your consent to the processing of personal data (Art. 6 para. 1 a GDPR), we will delete this data at the latest as soon as you withdraw your consent and insofar as there is no other legal basis for the processing.
4.2
If you have given your consent to the processing of personal data (Art. 6 para. 1 a GDPR), we will delete this data at the latest as soon as you withdraw your consent and insofar as there is no other legal basis for the processing.
4.3
If the storage purpose no longer applies or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data is routinely blocked or deleted in accordance with the statutory provisions, provided that it is no longer required for contract fulfilment or contract initiation.
5 / Is there automated processing?
We process your personal data when you place an order (name, order number, date) within our in-house IT system, in part automatically, insofar as this is necessary for the fulfilment of our contractual obligations (Art. 6 Para. 1 b GDPR, Art. 22 Para. 2 a GDPR). We store this automatically processed data on our own server, which is located in our offices. We do not make any decisions within the meaning of Art. 22 GDPR that are based solely on automated processing - including profiling - and/or have legal effect on you or significantly affect you in a similar manner. If we use these procedures in individual cases, we will inform you of this separately if this is required by law.
6 / Data protection for applications and in the application process
We collect and process the personal data of applicants for the purpose of handling the application process (Art. 6 para. 1 a and b GDPR). Processing may also be carried out electronically. This is particularly the case if an applicant sends the relevant application documents to the controller by electronic means, for example by email or via a web form on the website. We cannot process the application without collecting the data. If you enter into an employment relationship with us, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If no employment contract is concluded with the applicant, the application documents will be automatically deleted two (2) months after notification of the rejection decision, unless deletion conflicts with any other legitimate interests of the controller. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).
7 / What data protection rights do you have?
You have the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to data portability under Art. 20 GDPR and the right to object to the processing of your data under Art. 21 GDPR.
In addition, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), cf. section 8./.
The cancellation / your request should be sent to:
Name: Ingo Bernsee
Address: Kattjahren 8, 22359 Hamburg
Phone: +49 40 7310800
E-mail: service.hh@interteam.hamburg
8 / Right of appeal
You have the right to lodge a complaint with a supervisory authority, in particular in your country of residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR. GDPR violates.
The competent supervisory authority for Hamburg is
The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Straße 22, 20495 Hamburg
Phone: (040) 4 28 54 - 40 40
E-Fax: (040) 4 279 - 11811
E-Mail: mailbox@datenschutz.hamburg.de
The competent supervisory authority for Berlin is:
Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstraße 219, 10969 Berlin
Phone: 030 138890
Fax: 030 2155050
E-mail: mailbox@datenschutz-berlin.de
9 / SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
10 / Data collection on this website
Cookies
Our Internet pages use so-called "cookies". Cookies are small data packets and do not cause any damage to your end device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or they are automatically deleted by your web browser.
Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g. cookies for processing payment services).
Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function or the display of videos). Other cookies can be used to analyse user behaviour or for advertising purposes.
Cookies that are required to carry out the electronic communication process, to provide certain functions that you have requested (e.g. for the shopping basket function) or to optimise the website (e.g. cookies to measure the web audience) (necessary cookies) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in the storage of necessary cookies for the technically error-free and optimised provision of its services. If consent to the storage of cookies and comparable recognition technologies has been requested, the processing is carried out exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG); the consent can be revoked at any time.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
You can find out which cookies and services are used on this website in this privacy policy.
Consent with Complianz
Our website uses the consent technology of Complianz to obtain your consent to the storage of certain cookies on your end device or to the use of certain technologies and to document these in compliance with data protection regulations. The provider of this technology is Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, Netherlands (hereinafter referred to as "Complianz").
Complianz is hosted on our servers, so no connection is established to the servers of the provider of Complianz. Complianz stores a cookie in your browser in order to be able to assign the consents you have given or revoke them. The data collected in this way is stored until you ask us to delete it, delete the Complianz cookie yourself or the purpose for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected.
Complianz is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.
Contact form
If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.
This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time.
We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions - in particular retention periods - remain unaffected.
Enquiry by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, your enquiry including all personal data (name, enquiry) will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.
This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time.
The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.
11 / Analysis tools and advertising
Plausible analytics
We use Plausible Analytics on our website. The provider is Plausible Insights OÜ, Västriku tn 2, 50403, Tartu, Estonia.
Plausible Analytics enables us to analyse the behaviour of our website visitors. The following data is collected for this purpose: Page URL, HTTP request, HTTP referrer, browser, operating system, device type and IP address. The HTTP request and IP address are stored in a hash for 24 hours; within this period, a user can be recognised if they visit the website again. It is not possible to identify the person.
If consent has been obtained, the above-mentioned service is used exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 TDDDG. Consent can be revoked at any time. If consent has not been obtained, this service is used on the basis of Art. 6 para. 1 lit. f GDPR; the website operator has a legitimate interest in analysing the user behaviour of our website visitors as meaningfully as possible.
12 / Plugins and tools
Google reCAPTCHA
We use "Google reCAPTCHA" (hereinafter referred to as "reCAPTCHA") on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of reCAPTCHA is to check whether data is entered on this website (e.g. in a contact form) by a human or by an automated programme. For this purpose, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. To analyse this, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website by the website visitor or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.
The data is stored and analysed on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its website from abusive automated spying and SPAM. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
For more information about Google reCAPTCHA, please refer to the Google Privacy Policy and the Google Terms of Service at the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.
The company is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.
Wordfence
We have integrated Wordfence on this website. The provider is Defiant Inc, Defiant, Inc, 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter "Wordfence").
Wordfence serves to protect our website from unwanted access or malicious cyberattacks. For this purpose, our website establishes a permanent connection to the Wordfence servers so that Wordfence can compare its databases with the accesses made on our website and block them if necessary.
The use of Wordfence is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its website as effectively as possible against cyberattacks. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's end device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.wordfence.com/help/general-data-protection-regulation/.
ManageWP
We manage this website with the help of the ManageWP tool. The provider is GoDaddy.com WP Europe, Trg republike 5, 11000 Belgrade, Serbia (hereinafter ManageWP).
With ManageWP, we can monitor the security and performance of our website and create automatic backups, among other things. ManageWP therefore has access to all website content, including our databases. ManageWP is hosted on the provider's servers.
The use of ManageWP is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the most effective and secure operation of its website(s). If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
The company is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/4957.
13 / Google maps
We use the interactive map of google maps on our website, a service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA - hereinafter "Google"). When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or customising the design of its website. Such an analysis is carried out in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. If you do not agree to the future transmission of your data to Google in the context of the use of Google Maps, you have the option of completely deactivating Google Maps by switching off the JavaScript application in your browser. You will then no longer be able to use Google Maps on our website. The data is processed to protect our legitimate interest in the optimisation and economic operation of our website (Art. 6 para. 1 f GDPR). Further information and Google's privacy policy can be found at www.google.de/policies/privacy/. Google is certified under the Privacy Shield Agreement and thus offers an adequate level of data protection in accordance with Art. 45 GDPR. You can find more information on this at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
14 / Credit report
In order to safeguard our legitimate interests (Art. 6 (1) f GDPR), we may obtain credit information on the basis of mathematical-statistical procedures from Coface (Compagnie Française d'Assurance pour le Commerce Extérieur SA (Coface) and Bisnode Deutschland GmbH. For this purpose, we transmit the personal data required for a credit check to Bisnode and use the information received on the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship. The credit report may contain probability values (score values) that are calculated on the basis of scientifically recognised mathematical-statistical procedures and whose calculation includes address data, among other things. Your interests worthy of protection are taken into account in accordance with the statutory provisions.
Further information and the privacy policy of Coface and Bisnode Deutschland GmbH can be found at
a)
Bisnode
https://www.bisnode.de/datenschutz/
b)
Coface
http://www.coface.de/Home/Allgemeine-Informationen/Datenschutz
*Abbreviations
GDPR | – | General Data Protection Regulation |
BDSG | – | Federal Data Protection Act |
TMG | – | Telemedia Act |
MLA | – | Money Laundering Act |
HGB | – | Commercial Code |
KWG | – | Banking Act |
AO | – | Fiscal Code |