INFORMATION ABOUT COLLECTION AND PROCESSING AND OF YOUR PERSONAL DATA
Care and transparency are the foundation for trusting cooperation with our customers. Therefore, we are informing you about how we process your data and how you can exercise the rights you have under the General Data Protection Regulation. What personal data we process and for what purpose depends in each case on the contractual relationship.
1. WHO IS RESPONSIBLE FOR DATA PROTECTION?
The responsible party is:
ITA Shipping S.L.U.
Alfonso XII, 30 – 5°
28014 Madrid – Spain
Represented by the Director Mark Winkelmann
2. HOW CAN YOU CONTACT THE DATA PROTECTION OFFICER?
You can contact our Data Protection Officer under:
Dr. Klaus zu Hoene – intersoft consulting services AG
Data Protection Officer
Beim Strohhause 17, 20097 Hamburg
3. WHAT PERSONAL DATA OF YOURS DO WE USE?
If you make an enquiry, get a quote from us or enter into a contract with us, we process your personal data. We also process your personal data for other purposes, including fulfilment of legal duties, protection of a legitimate interest or due to consent that you have given.
The following categories of personal data: are concerned, depending on the legal basis:
– Company name
– First name, Surname
– Official address
– Official communication data (telephone, e-mail address)
– Basic contract data especially contract number, period, notice of termination, type of contract
– Sales and invoicing data
– Payment and account data
– Account information, particularly registration and log-ins
In the course of setting up the contract we will also access data which has been provided to us by third parties. The following types of personal data are concerned, depending on the type of the contract:
– Information about credit standing (via credit agencies)
4. WHAT ARE THE SOURCES OF THE DATA?
We process personal data which we receive from our customers .
We receive personal data from the following places:
– Credit agencies
– Publicly accessible sources: Trade or association registers, record of debtors, land registries
– Other group companies
5. FOR WHAT PURPOSES DO WE PROCESS YOUR DATA AND ON WHAT LEGAL BASIS?
We process your personal data particularly under consideration of the General Data Protection Regulation (GDPR) and the Federal Data Protection Law and all other applicable laws.
5.1 Due to consent that you have given (Art. 6. Sec. 1 a GDPR)
If you have declared your voluntary consent for us to collect, process or transfer certain personal data, then this consent constitutes the legal basis for processing this data.
In the following cases, we will process your personal data on the basis of consent given by you:
– Contact form: Personal data is collected by us if you give this to us yourself, for example if you get in contact with us. If we ask for inputs on our contact form that are not required to make contact, we have marked these as optional. These details help us to make your enquiry more concrete and deal more efficiently with your issue. Supply of these details is on an entirely voluntary basis and with your consent. Where this concerns communication channels (for example-mail addresses, telephone numbers), you also consent to us possibly contacting you via these channels to answer your issue.
– Sending of an e-mail newsletter
– personalised newsletter tracking
– Market research (e.g., customer satisfaction survey)
– Marketing and advertising- formation of customer profiles
– Publication of a customer reference (name and picture)
5.2 To fulfill a contract (Art. 6 Sec. 1 b GDPR)
We use your personal data to complete a contractual obligation. Within this contractual relationship, we will process your data in particular to carry out the following activities:
– Contract-related contact
– Ongoing customer support, Service Centre
– Account administration
– Accounts receivable management
– Tracking and tracing Delivery/shipment of consignment/notification of problems
– Passing to the service provider concerned for fulfilment of contract
5.3 For fulfilment of legal obligations (Art. 6 Sec. 1 c GDPR) or in the public interest (Art. 6 Sec. 1 e GDPR)
As a company, we are subject to various legal obligations. It may be necessary to process personal data to discharge these obligations.
– Duties of checking and reporting
– Prevention/defence of illegal acts
– IATA guidelines
5.4 Due to a legitimate interest (Art. 6 Sec. 1 f GDPR)
In certain cases, we will process your data to protect our legitimate interest or that of a third party.
– Direct marketing or market and opinion research
– Central customer data management in the group of companies
– Consultation and data exchange with credit agencies to establish credit or default risks
– Guarantee of IT security and the IT operation
6. TO WHOM IS YOUR DATA PASSED ON?
Your personal details will be disclosed to various internal or public bodies to fulfil our contractual and legal obligations.
Companies in the group of companies:
The LetMeShip Group maintains a central customer administration which is accessible to the employees of all companies in order to be able to offer the whole spectrum of our services from one point. The companies in the LetMeShip Group can call you up under this link www.letmeship.com.
External service providers
– IT service providers (e.g., servicing providers, hosting providers)
– Service providers for File and data destruction
– Print service providers
– Payment service providers
– Advice and Consultation
– Service providers for marketing or sales
– Credit agencies
– Contract traders
– Service providers for telephone support (call centre)
– Webhosting service provider
– DHL Express
– DHL Paket
– Der Kurier
Furthermore, we may be obliged to pass your personal data to other recipients, such as to authorities, to fulfill legal obligations of disclosure.
– Tax authorities
– Customs authorities
– Social security agencies
– Responsible authorities for reporting of contraventions of the IATA guidelines
7. IS YOUR DATA TRANSFERRED TO COUNTRIES OUTSIDE THE EUROPEAN UNION (SO-CALED THIRD COUNTRIES)?
Countries outside the European Union (and the European Economic Area, EEA) deal differently with the protection of personal data to countries within the European Union. We also employ service providers located outside the European Union for processing your data. There is currently no resolution of the EU Commission that these third countries generally offer an appropriate level of protection.
We have taken special measures to ensure that your data is processed just as securely in these third countries as it would be in the European Union. We sign data protection clauses provided by the Commission of the European Union with service providers in third countries. These clauses provide guarantees for the protection of your data with service providers in third countries.
If you wish to inspect the existing guarantees, you can contact us under Datenschutz@letmeship.com.
8. HOW LONG IS MY DATA STORED?
We will store your personal data as long as is required to fulfil our legal and contractual obligations.
If storage of data is no longer required to fulfil our legal and contractual obligations, your data will be deleted unless
– Fulfilment of duty to retain for reasons of tax and trade law. Retention times from German Commercial Code (HGB) or Tax Law are named. The retention periods are 10 years.
– Preservation of evidence in the context of legal statute of limitation. According to the statutes of limitation in the German Civil Code (BGB), these retention periods can be extended to 30 years and the regular statute of limitation is 3 years.
9. WHAT RIGHTS DO YOU HAVE IN CONNECTION WITH PROCESSING MY DATA?
Every affected person has the right to information in accordance with Art. 15 of the GDPR, the right to correction in accordance with Art 16 of the GDPR, the right to deletion in accordance with Art. 17 of the GDPR, the right to restriction of processing in accordance with Art. 18 of the GDPR, the right to objection in accordance with Art. 21 of the GDPR and the right to data transferability in accordance with Art. 20 of the GDPR. The restrictions in accordance with §§ 34 and 35 Federal Data Protection law apply to the right to information and deletion.
9.1 Right to object
You can object at any time to the use of your data for promotional purposes without incurring costs other than the transmission costs at the basic tariff. Specifically, you can unsubscribe from the newsletter by clicking the link provided at the end of the newsletter.
• What rights do you have in case of data being processed due to your legitimate interest or the public interest?
You have the right, in accordance with Art. 21 Sec. 1 GDPR, for reasons arising from your particular situation, to object to the processing of personal data relating to you arising on the basis of Art 6 Sec 1 e GDPR (data processing in the public interest) or due to Art. 6 Sec. 1 f GDPR (data processing for protection of a legitimate interest), and this applies to any profiling supported by this regulation.
In the event of your objection, we will no longer process your personal data unless we can demonstrate compelling reasons to do so that outweigh your interests, rights and freedoms, or the processing is for the purpose of making, exercising or defending legal claims.
• What are your rights in relation to data processing for operation of direct advertising?
If we process your personal data to operate direct advertising, then you have the right, according to Art. 21 Sec. 2 of the GDPR to object to the processing of the personal data relating to you for the purpose of this kind of advertising; this also applies to profiling, if this is in connection with such direct advertising.
If you object to the processing for purposes of ditrect advertising, we will no longer process your personal data for these purposes.
9.2 Withdrawal of consent
You can withdraw your consent to the processing of your personal data at any time. Please note that this withdrawal is only effective for the future. Specifically, you can unsubscribe from the newsletter by clicking the link provided at the end of the newsletter.
9.3 Right to Information
You have the right to demand that we tell you whether we are storing your personal data. If you wish, we will inform you what data is concerned, for what purposes the data is processed, to whom this data is disclosed, how long it is stored for and what other rights you have in relation to this data.
9.4 Further Rights
Furthermore, you have the right to have incorrect data corrected or the deletion of your data. If there is no further reason to store your data, we will delete it or restrict processing of it. You can also require us to make available to you or to a person in an organisation of your choice, all personal data that you have provided us with in a structure, accessible and machine-readable format.
In addition, there is a right to complain to the responsible Data Protection Authority (Art. 77 GDPR together with § 19 Federal Data Protection Law).
9.5 Exercising your rights
To exercise your rights, you can approach the responsible person or the Data Protection Officer under the contact details given, and especially at: firstname.lastname@example.org. We will process your enquiry immediately and in accordance with legal stipulationsand inform you what actions we have taken.
10. IS THERE AN OBLIGATION TO PROVIDE YOUR PERSONAL DATA?
To enter into a business relationship with us, you must provide us with the information necessary for execution of the contract or that we are required to collect due to legal stipulations. If you do not provide us with this data, then processing and carrying out the contractual arrangements will not be possible for us.
11. DATA COLLECTION AND PROCESSING ON OUR WEB-PAGES
When our website is called up, we temporarily store general technical information such as the software and hardware you are using, the IP address of the requesting computer, the internet page from which you are visiting us, along with the date, time and duration of your visit. We only collect this data to guarantee the functionality of our website.
This website uses Google Analytics, a web analytics service provided by Google LLC, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). Responsible authority for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The use includes the operation mode Universal Analytics. This makes it possible to assign data, sessions and interactions across several devices to a pseudonymous user ID and thus to analyse the activities of a user across all devices.
The personal data is transferred to the USA under the EU-US Privacy Shield on the basis of the European Commission’s adequacy decision. You can download the certificate here.
The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. Our legitimate interest in data processing via Google Analytics also lies in these purposes. The legal basis for our use of Google Analytics is Art. 6 Para. 1 S. 1 lit. a DSGVO. OR Art. 6 Para. 1 S. 1 lit. f DSGVO.
The data sent by us and linked to cookies or user IDs (e.g. user ID) are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.
You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser add-on to deactivate Google Analytics.
Opt-out cookies prevent the future collection of your data when you visit this website. To prevent Universal Analytics from collecting your information across multiple devices, you must opt-out from all systems you use. If you click here, the opt-out cookie will be set: Disable Google Analytics.
12. CHANGES TO THIS INFORMATION
If the type of data processing should change significantly, this information will be updated promptly, and you will be informed promptly of the changes.