Privacy Policy
We are pleased about your visit to our website pflaum-logistik.ch and your interest in our company.
The protection of your personal data, such as date of birth, name, telephone number, address, etc., is important to us.
The purpose of this privacy policy is to inform you about the processing of your personal data that we collect when you visit our website.
Our data protection practices are in line with the legal provisions of the Swiss Federal Data Protection Act (DSG) and the EU General Data Protection Regulation (GDPR).
The following data protection declaration serves to fulfill the information obligations under the DSG and the GDPR.
These can be found, for example, in Art. 19 et seq. DSG and Art. 13 et seq. of the GDPR.
Owner or responsible person
The controller within the meaning of Art. 5(j) DSG or Art. 4 No. 7 GDPR is the person who alone or jointly with others decides on the purposes and means of processing personal data.
The controller pursuant to Art. 4 No. 7 GDPR is also the recipient of the personal data within the meaning of Art. 4 No. 9 GDPR.
Any third-party recipient will be identified separately.
With regard to our website, the owner or person responsible is:
Pflaum Shipping GmbH
Siemensstrasse 10
96129 Strullendorf
Germany
Email: info@pflaum-logistik.de
Tel.: + 49 0 9543.8222-0
Provision of the website and creation of Log files
Every time our website is accessed, our system automatically records data and information from the accessing device (e.g. computer, mobile phone, tablet, etc.).
Which personal data is collected and to what extent is it processed?
(1) Information about the browser type and version used;
(2) The operating system of the retrieval device;
(3) Host name of the accessing computer;
(4) The IP address of the retrieving device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) that were accessed on our website;
(7) Websites from which the user's system accessed our website (referrer tracking);
(8) Report whether the retrieval was successful;
(9) Amount of data transferred
This data is stored in the log files of our system.
This data is not stored together with personal data of a specific user, so that individual site visitors cannot be identified.
Legal basis for the processing of personal data
Personal data is processed in accordance with the principle of legality (Art. 6 Para. 1 DSG) and the principle of good faith (Art. 6 Para. 2 DSG or Art. 2 ZGB) as well as Art. 6 Para. 1 lit. f GDPR (legitimate interest).
purpose of data processing
The temporary (automated) storage of data is necessary for the completion of a website visit in order to enable the website to be delivered.
The storage and processing of personal data is also carried out to maintain the compatibility of our website for as many visitors as possible and to combat misuse and eliminate malfunctions.
For this purpose, it is necessary to log the technical data of the accessing computer in order to be able to react as early as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website.
We also use the data to optimize the website and to generally ensure the security of our information technology systems.
Duration of storage
The aforementioned technical data will be deleted as soon as it is no longer needed to ensure the compatibility of the website for all visitors, but no later than 3 months after accessing our website.
right to restriction, objection, correction and deletion
You can request the restriction of processing in accordance with Art. 18 GDPR or object to processing in accordance with Art. 21 GDPR at any time, as well as request the correction or deletion of data in accordance with Art. 16 or 17 GDPR.
You can find out what rights you are entitled to and how you can assert them at the bottom of this privacy policy.
Special functions of the website
Our site offers you various functions, the use of which involves us collecting, processing and storing personal data.
Below we explain what happens to this data:
Contact form(s)
-
Which personal data is collected and to what extent is it processed?
The data you have entered into our contact forms, which you have entered into the input mask of the contact form.
-
Legal basis for the processing of personal data
The processing of personal data is carried out in accordance with the principle of legality (Art. 6 Para. 1 DSG) and the principle of good faith (Art. 6 Para. 2 DSG or Art. 2 ZGB) as well as Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR (consent through a clear confirmatory action or behavior or explicit consent).
-
purpose of data processing
We will only use the data recorded via our contact form or forms to process the specific contact request received through the contact form.
Please note that in order to fulfill your contact request, we may also send you emails to the address provided.
The purpose of this is to enable you to receive confirmation from us that your request has been correctly forwarded to us.
However, sending this confirmation email is not mandatory for us and is for your information only. -
Duration of storage
Once your request has been processed, the data collected will be deleted immediately unless there are statutory retention periods.
-
right to restriction, objection, correction and deletion
You can request the restriction of processing in accordance with Art. 18 GDPR or object to processing in accordance with Art. 21 GDPR at any time, as well as request the correction or deletion of data in accordance with Art. 16 or 17 GDPR.
You can find out what rights you are entitled to and how you can assert them at the bottom of this privacy policy. -
Necessity of providing personal data
The use of the contact forms is voluntary.
You are not obliged to contact us via the contact form, but can also use the other contact options provided on our website.
If you would like to use our contact form, you must fill in the fields marked as mandatory.
If you do not fill out the required information in the contact form, you will either not be able to send the request or we will not be able to process your request due to a lack of information.
login area / registration
-
Scope of processing of personal data and personal data collected
The registration and login data you have entered with us or that we have provided to you.
-
Legal basis for the processing of personal data
The processing of personal data is carried out in accordance with the principle of legality (Art. 6 para. 1 DSG) and the principle of good faith (Art. 6 para. 2 DSG or Art. 2 ZGB) as well as Art. 6 para. 1 lit. b GDPR (implementation of (pre-)contractual measures).
-
purpose of data processing
You have the option of using a separate login area on our website.
In order for us to verify your authorization to use the protected area or the protected documents, you must enter your login details (email or user name and password) in the corresponding form.
If required, we can send you your login details or the option to reset your password by email upon request. -
Duration of storage
The data collected will be stored as long as you maintain a user account with us.
-
right to restriction, objection, correction and deletion
You can request the restriction of processing in accordance with Art. 18 GDPR or object to processing in accordance with Art. 21 GDPR at any time, as well as request the correction or deletion of data in accordance with Art. 16 or 17 GDPR.
You can find out what rights you are entitled to and how you can assert them at the bottom of this privacy policy. -
Necessity of providing personal data
Certain pages and their contents are not publicly accessible.
Certain users can gain access to the protected area via the login area on our site.
The use of the content protected by the login area is not possible without entering personal data.
If you wish to use our login area, you must fill in the mandatory fields (user name and password).
Entering the data requires the existence of a user account.
Registration is not possible if the data you entered is incorrect.
If you enter incorrect data or do not enter it at all, you will not be able to use the protected area.
However, the rest of the site can still be used without logging in.
Disclosure of information to third parties
Personal data is processed in accordance with the principle of legality (Art. 6 para. 1 DSG) and the principle of good faith (Art. 6 para. 2 DSG or Art. 2 ZGB).
The transfer of information to third parties depends on the scope of the activities or offers of our website or our business model described below.
As a general rule, we only keep your information for as long as necessary and treat it confidentially.
Excluded from this are the transfer of personal data to debt collection service providers, to public bodies and authorities as well as to private individuals,
who are entitled to it due to legal provisions, court decisions or official orders
and transfer to authorities for the purpose of initiating legal proceedings or for law enforcement purposes in the event of an infringement of our legally protected rights.
Integration of external web services and processing of data outside the EU
On our website we use active content from external providers, so-called web services.
By accessing our website, these external providers may receive personal information about your visit to our website.
In this case, data may be processed outside of Switzerland and the EU.
You can prevent this by installing an appropriate browser plug-in or by disabling the execution of scripts in your browser.
This may result in functional limitations on the websites you visit.
We use the following external web services:
-
Legally ok
We use the Legally ok service of Legally ok GmbH, Schochenmühlestrasse 6, 6340 Baar, Switzerland, email: hello@legally-ok.com, Website: https://www.legally-ok.com/.
Processing takes place exclusively in Switzerland in accordance with the data protection legislation applicable there.
Processing also takes place in a third country outside the EU. An adequacy decision has been issued by the Commission for this third country. On the EU Commission website (link: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_de) you will find an up-to-date list of all adequacy decisions.The legal basis for the transmission and processing is Art. 31 (1) DSG and Art. 6 (1) (c) GDPR. The use of this service helps us comply with our legal obligations.
The service is used to reload the content of our legal texts onto our website. The latest legal texts are reloaded via the integration on our site. This integration can also be used to reload other technical modules relating to the legal texts or legally required elements.
You will find out what rights you have with regard to processing at the end of this privacy policy.
Further information on how the transferred data is handled can be found in the provider's privacy policy at https://www.legally-ok.com/datenschutz/.
Data security and data protection, communication via email
Your personal data is protected by technical and organizational measures during collection, storage and processing so that it is not accessible to third parties.
If communication is carried out unencrypted via email, we cannot guarantee complete data security during transmission to our IT systems. Therefore, we recommend encrypted communication or sending information with a high level of confidentiality by post.
Duration of data storage and rights of the data subject
Duration of storage
We only store personal data to the extent and for as long as is necessary to fulfil the purposes for which the personal data was collected.
is necessary, we have a legitimate overriding interest in storing the data or we are legally obliged to do so.
Right to information
You have the right to request confirmation as to whether we process your personal data.
If this is the case, you have the right to information about the information specified in Section 25 ff. DSG or Art. 15 Para. 1 GDPR,
provided that the information cannot be refused, restricted or postponed by the owner of the data collection (cf. Art. 26 et seq. DSG or Art. 15 para. 4 GDPR).
We would be happy to provide you with a copy of the data.
Right to rectification
According to Art. 32 (1) DSG or Art. 16 GDPR, you have the right to request that incorrectly stored personal data (such as address, name, etc.) be corrected, provided that this claim does not conflict with any legal obligation.
You can also request that the data we have stored about you be completed at any time.
A corresponding adjustment will be made immediately.
Right to delete
According to Art. 17 (1) GDPR, you have the right to have us delete the personal data collected about you if
- the data is either no longer needed;
- due to the withdrawal of your consent, the legal basis for processing no longer applies;
- there are no longer any legitimate reasons for processing;
- your data is processed unlawfully;
- a legal obligation requires it.
According to Art. 17 Para. 3 GDPR, the right does not exist if
- the processing is necessary for the exercise of the right to freedom of expression and information;
- your data has been collected on the basis of a legal obligation;
- the processing is necessary for reasons of public interest;
- the data is necessary to assert, exercise or defend legal claims.
Right to restriction of processing
According to Art. 18 Para. 1 GDPR, you have the right in individual cases to request the restriction of the processing of your personal data.
This is the case if
- the accuracy of your personal data is disputed;
- the processing is unlawful and you do not consent to erasure;
- the data are no longer required for the purpose of processing, but the data collected serve to assert, exercise or defend legal claims;
- an objection to the processing has been lodged in accordance with Art. 21 (1) GDPR and it is still unclear which interests prevail.
Right to withdraw
If you have given us your express consent to the processing of your personal data (Art. 6 Para. 6 DSG and Art. 31 Para. 1 DSG; Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR), you can revoke this consent at any time.
Please note that this does not affect the legality of the processing carried out on the basis of the consent until the revocation.
Information that we are legally obliged to retain will be deleted after the retention period has expired.
Right to objection
According to Art. 21 GDPR, you have the right to object at any time to the processing of personal data concerning you which has been collected on the basis of Art. 6 (1) (f) GDPR (within the scope of a legitimate interest).
If you have given us your express consent to process your personal data (Art. 6 Para. 6 DSG and Art. 31 Para. 1 DSG), you can revoke this consent at any time.
Please note that this does not affect the legality of the processing carried out on the basis of the consent until the revocation.
You are only entitled to this right if there are special circumstances that speak against the storage and processing.
Information that we are legally obliged to retain will be deleted after the retention period has expired.
How do you exercise your rights?
You can exercise your rights at any time by contacting the contact details below:
Pflaum Shipping GmbH
Siemensstrasse 10
96129 Strullendorf
Germany
Email: info@pflaum-logistik.de
Tel.: + 49 0 9543.8222-0
Right to data portability
According to Art. 20 GDPR, you have the right to have the personal data concerning you transferred to us.
We provide the data in a structured, common and machine-readable format.
The data can be sent either to you or to a responsible person designated by you.
We will provide you with the following data upon request:
- Data collected on the basis of consent (Art. 31 para. 1 DSG and Art. 6 para. 1 letter a GDPR);
- Data that we have received from you within the framework of existing contracts (Art. 31 Para. 2 Letter a DSG as well as Art. 6 Para. 1 Letter b GDPR and Art. 9 Para. 2 Letter a GDPR);
- Data that has been processed as part of an automated procedure.
We will transfer the personal data directly to a responsible party of your choice, provided this is technically feasible.
Please note that we are not permitted to transfer data that interferes with the overriding interests of third parties, or are only permitted to do so to a limited extent, in accordance with Art. 26 (1) (b) DSG or Art. 20 (4) GDPR.
Notifications to the FDPIC and possibility of legal action
According to Art. 49 DSG, data subjects can file a complaint with the supervisory authority if there are sufficient indications that data processing could violate data protection regulations.
The supervisory authority for data protection in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).
Further information can be found in the contact form of the FDPIC: https://www.edoeb.admin.ch/edoeb/de/home/deredoeb/kontakt.html
If you suspect that your data is being processed unlawfully on our website, you can seek judicial clarification of the issue in accordance with Art. 32 DSG.
As a rule, an action must be brought in accordance with Article 28 et seq. of the Swiss Civil Code.
If you are affected by the processing of your data by federal bodies, the procedure is governed by Art. 41 DSG.
In this case, you can also contact the FDPIC (see reference to the contact form above).
Right to lodge a complaint with the supervisory authority in accordance with Article 77 (1) GDPR
If you suspect that your data is being processed unlawfully on our website, you can of course seek legal clarification of the issue at any time.
In addition, any other legal options are open to you.
Irrespective of this, you have the option of contacting a supervisory authority in accordance with Art. 77 (1) GDPR.
You have the right to lodge a complaint pursuant to Art. 77 GDPR in the EU Member State of your residence, your place of work and/or the place of the alleged infringement, i.e. you can choose the supervisory authority to which you wish to address your complaint from the locations mentioned above.
The supervisory authority to which the complaint was submitted will then inform you of the status and results of your submission, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.