Privacy Policy

Data Protection Declaration according to GDPR (from 25/05/2018)

I. Name and address of the controller

The controller, within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the Member States and other data protection-related provisions, is:

Mr Andreas Kölling, Managing Director
EUROVAN Deutschland GmbH
Neckarauer Straße 35/41
68199 Mannheim
Germany
Tel. +49 (0) 621 397409 3
E-mail: info@eurovan.com
Website: www.eurovan.com


II. General information on data processing

1. Scope of processing of personal data

In principle, we only collect and process our users' personal data to the extent that this is necessary for carrying out our contracts. After the contractual duties have been fulfilled, we only process data according to given consent. An exception is when obtaining consent in advance is not possible for factual reasons, or the processing of data is permitted by legal provisions.

2. Legal basis for the processing of personal data

As long as we have obtained consent from the data subject for the processing of personal data, Art. 6 para. 1 (a) GDPR is the legal basis for the processing. When processing personal data is necessary for the fulfilment of a contract to which the data subject is party, Art. 6 para. 1 (b) GDPR is the legal basis for the processing. This also applies to processing operations required to carry out pre-contractual actions. If the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 para. 1 (c) GDPR is the legal basis for the processing. If the processing is necessary for safeguarding the legitimate interests of our company or a third party, and the interests and fundamental rights and freedoms of the data subject do not outweigh the interests of our company or a third party, Art. 6 para. 1 (f) GDPR is the legal basis for the processing.

3. Data erasure and storage duration

The data subject's personal data will be erased or blocked as soon as the purpose of the storage is no longer valid. Data can also be stored if required by the European or national legislator in EU provisions, laws or other directives to which the controller is subject. The data is then blocked or erased if a storage period stated by the rules expires, unless further storage is needed for the conclusion or fulfilment of a contract.

III. Provision of a website and the creation of log files

1. Description and scope of data processing

Every time our Internet site is accessed, our system automatically records data and information from the accessing computer's system. The following data is collected here:
(1) Information on the browser type and the version used
(2) The user's operating system
(3) The user's Internet service provider
(4) The user's IP address
(5) Date and time of access
(6) Websites which brought the user's system to our website
(7) Websites which the user's system accesses via our website.

The data is stored in our system's log files. This data is not stored together with the user's other personal data.

2. Legal basis for the processing of data

The legal basis for the temporary storage of the data and log files is Art. 6 para. 1 (f) GDPR.

3. The purpose of the data processing

The temporary storage of the IP address by the system is necessary in order to send the website to the user's computer. In order to do this, the user's IP address must be stored for the duration of the session. The data is stored in log files to guarantee the functionality of the website. The data also serves to optimise the website and to ensure the safety of our IT systems. This data is not evaluated for marketing purposes. For these purposes, the legal basis of the processing is our legitimate interests according to Art. 6 para. 1 (f) GDPR.

4. Duration of storage

The data is erased as soon as it is no longer needed for the purpose for which it was collected. In the case of collecting the data for providing the website, the data is no longer needed when the respective session is ended. In the case of storing data in log files, the data is no longer needed after seven days at the latest. Storing the data for longer is possible. If this is the case, the user's IP addresses are erased or masked so that reference to the accessing client is no longer possible.

5. Option of objection and elimination

The collection of data for the provision of the website and the storage of data in log files is necessary for operating the website. As a result, the user has no right to object.

IV. Use of cookies

1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in or by the browser on the user's computer system. If a user accesses a website, a cookie may be stored on the user's computer system. This cookie contains a distinctive string of characters which allows the browser to be clearly identified if the website is accessed again. We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser be identified even after visiting a different website. The following data is stored and transmitted in cookies:
(1) Language settings;
(2) Items in a shopping basket; and
(3) Login information.

Our website also uses cookies which enable the user'sInternett usage behaviour to be analysed. As a result, the following data can be transmitted:
(1) Search terms entered;
(2) Frequency of accessing websites; and
(3) Usage of website functions.

The user's data collected in this way is pseudonymised through technical measures. Therefore it is no longer possible to assign the data to the accessing user. The data is not stored together with the user's other personal data. When accessing our website, an info banner informs users of the use of cookies for analysis purposes and refers to this Data Protection Declaration. There is also information on how the storage of cookies can be disabled in the browser settings. a) Legal basis for the data processing The legal basis for the processing of personal data through the use of cookies is Art. 6 para. 1 (f) GDPR. b) The purpose of the data processing The purpose of processing technically necessary cookies is to make using the website easier for users. Some of our website's functions cannot be offered without the use of cookies. For this, it is necessary that the browser be recognised even after the user has moved to a different site. We require cookies for the following applications:
(1) Shopping basket
(2) Changing language settings
(3) Remembering search terms
(4) Queries
(5) Contact forms
(6) Callback service
(7) Online calculator.

The user data collected using technically necessary cookies is not used to create user profiles. Analysis cookies are used to improve the quality of our website and its contents. From the analysis cookies, we discover: How the website is used and how we can constantly optimise our offerings. For these purposes, the legal basis of the processing is our legitimate interests according to Art. 6 para. 1 (f) GDPR. c) Duration of storage, option of objection and elimination Cookies are stored on the user's computer and are transmitted from there to our site. Therefore, the user has full control over the use of cookies. By changing settings in your Internet browser, you can deactivate or limit the transmission of cookies. Cookies that are already stored can be erased at any time. This can take place automatically. If cookies are de-activated for our website, it is possible that not all website functions can be used to their fullest extent. Transmitting Flash cookies cannot be disabled via browser settings, but by changing settings in Flash Player.

V. Registering

1. Description and scope of data processing

Our website offers users the option of registering which requires the provision of personal data. The data is entered into a form, transmitted to us and stored. This data is not transmitted to third parties. The following data is collected as part of the registering process:
(1) E-mail address
(2) First and last name
(3) Address data
(4) Telephone numbers
(5) Any inventory data

Registration can be carried out in different ways, with different forms, e.g. quick request, complete request, callback service, online calculator, virtual tour, contact form, shop etc. At the time of registering, the following data is also stored:
(1) The user's IP address
(2) Date and time of registering

The registering process involves obtaining the user's consent for processing this data.

2. Legal basis for the processing of data

The legal basis for the processing of data when the user's consent is granted is Art. 6 para. 1 (a) GDPR. If registering serves the fulfilment of a contract to which the user is party, or serves the carrying out of pre-contractual actions, the legal basis for the processing of data is Art. 6 para. 1 (b) GDPR.

3. The purpose of the data processing

Registering the user is necessary for the fulfilment of a contract with the user or for carrying out of pre-contractual actions. The data is necessary for the buying process when ordering moving material, for subsequent shipment and for invoicing.

4. Duration of storage

The data is erased if it is no longer needed for the purpose for which it was collected. For data collected during the registering process for the fulfilment of a contract or carrying out of pre-contractual actions, the data will be erased when it is no longer needed for the implementation of the contract. Even after the conclusion of the contract, there may be a necessity to store the contract partner's personal data in order to fulfil contractual or statutory provisions.

5. Option of objection and elimination

As a user, you have the opportunity to cancel registration at any time. You can have the data stored about you changed at any time. If the data is necessary for the fulfilment of a contract or for carrying out of pre-contractual actions, erasure of the data in advance is only possible if contractual or statutory obligations do not prevent so.

6. Data processing upon entering into the contract via the online shop

When you register on one of our websites and/or enter into another contract with us, we will process the data required to enter into, execute or terminate the contract with you. This includes:
(1) First name, last name
(2) Billing and delivery address
(3) Email address
(4) Billing and payment data
(5) Date of birth
(6) Telephone number

The legal basis for this is Article 6 para. 1 a) and b) GDPR, i.e., you provide us with the data on the basis of the respective contractual relationship between us (for example, managing your customer/user account, execution of a sales contract). To process your email address in the event of a purchase made on our websites, we are also required by the legal specifications of the German Civil Code (BGB) to send you an electronic order confirmation (Article 6 para. 1 c) GDPR). Insofar as we do not use your data for advertising purposes, we store the data collected for the execution of the contract for its duration as well as until expiry of the statutory or any contractual warranty and guarantee rights. After expiry of this period, we retain the information of the contractual relationship for the statutory periods required by commercial and tax law. For this period, the data will be reprocessed solely in the case of a review by the financial administration. To process a purchase contract via our website, the following additional data processing is required: Your payment data will be passed on to our payment service providers who process the payment(s). We will pass on information about your delivery address to our contracted logistics companies and shipping partners. In order to ensure that the delivery of goods takes place according to your wishes, we will forward your email address and, if necessary, your telephone number to the logistics company and/or shipping partner commissioned by us to handle the delivery. They may contact you prior to delivery in order to coordinate the details of the delivery with you. The respective data is transmitted solely for the respective purposes and is erased after delivery.

VI. Contact form and e-mail contact

1. Description and scope of data processing

A contact form is available on our website which can be used for getting in contact with us electronically. If a user uses this form, the data entered in the mask will be transmitted to us and stored. This data includes:
(1) Name
(2) E-mail address
(3) Street name
(4) Place
(5) Country
(6) Phone / fax number
(7) Request for contact
(8) Message

At the time of sending the message, the following data is also stored:
(1) The user's IP address; and
(2) Date and time of registering.

As part of sending the contact form, your consent for processing the data is obtained and this Data Protection Declaration is referred to. Alternatively, you can contact us via the e-mail address provided. In this case, the user's personal information transmitted with the e-mail is stored. This data is not transmitted to third parties. The data is used solely for processing the conversation.

2. Legal basis for the processing of data

The legal basis for the processing of data when the user's consent is granted is Art. 6 para. 1 (a) GDPR. The legal basis for the processing of data transmitted via e-mail is Art. 6 para. 1 (f) GDPR. If the aim of the e-mail is the conclusion of a contract, the legal basis for the processing of data is Art. 6 para. 1 (b) GDPR.

3. The purpose of the data processing

The purpose of processing the personal data entered in the mask is solely for processing the request. In the event of e-mail contact, the necessary legitimate interest is also based on the processing of the data. The other personal data processed while sending the contact form serves to prevent misuse of the contact form and to ensure the security of our IT systems.

4. Duration of storage

The data is erased if it is no longer needed for the purpose for which it was collected. For personal data entered on the contact form and any data which is sent via e-mail, the data is no longer needed when the relevant conversation with the user has ended. The conversation is considered ended when it can be assumed from the circumstances that the subject of the conversation has been clarified. The personal data collected while sending the contact form will be erased after a period of no more than seven days.

5. Option of objection and elimination

The user has the option to withdraw their consent to the processing of personal data at any time. If the user gets in contact with us via e-mail, they can object to the storage of their personal data at any time. If this is the case, the conversation cannot be continued. The withdrawal can be sent electronically and/or by post to the controller stated above and/or confidentially to the data protection officer. All personal data stored as a result of the customer getting in contact is erased in this case if no legitimate interests exist.

VII. Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you can assert the following rights against the controller:

1. Right of access

You can request that the controller confirm whether your personal data is being processed by us. If so, you can request the following information from the controller:
(1) The purposes for which the personal data is processed
(2) The categories of personal data which are processed
(3) The recipients and/or the categories of recipients to whom your personal data has been or will be disclosed
(4) The planned duration of storage of your personal data or, if specific information on this is not possible, criteria for determining the storage duration
(5) The existence of the right to request from the controller rectification or erasure of personal data, a right of restriction of processing of personal data by
the controller or the right to object to such processing
(6) The right to lodge a complaint with a supervisory authority
(7) All available information on the source of the data, if the personal data was not collected from the data subject; and
(8) The existence of automated decision-making, including profiling, referred to in Art. 22 para. 1 and 4 GDPR and, at least in these cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject. You have the right to request information on whether your personal data is transmitted to a third country or an international organisation. In this context, you can request that you are informed of the appropriate safeguards in conjunction with the transfer pursuant to Art. 46 GDPR.

2. Right to rectification

If your personal data is incorrect or incomplete, you have the right vis-à-vis the controller to have the data rectified and/or completed. The controller must rectify the data immediately.

3. Right to restriction of processing

Under the following conditions, you can request the restriction of the processing of your personal data:
(1) If you dispute the accuracy of the personal data for a period which enables the controller to verify the accuracy of the personal data.
(2) The processing is unlawful and you refuse the erasure of the personal data and request the restriction of its use instead.
(3) The controller no longer needs the personal data for the purposes of the processing, but it is required by you for the establishment, exercise or defence of legal claims.
(4) If you have objected to processing pursuant to Art. 21 para. 1 GDPR pending the verification whether the legitimate grounds of the controller outweigh your grounds. Where processing of your personal data has been restricted, with the exception of storage, the data may only be processed; with your consent; for the establishment, exercise or defence of legal claims; for the protection of the rights of another natural or legal person, or; for reasons of important public interest of the Union or of a Member State. If the restriction of processing pursuant to the above provisions has been implemented, you will be informed by the controller before the restriction of processing is lifted.

4. Right to erasure

a. Erasure obligation You can request that the controller erase your personal data without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:
(1) Your personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
(2) You withdraw your consent upon which the data was processed under Art. 6 para. 1 (a) GDPR or Art. 9 para. 2 (a) GDPR, and there is no other legal basis for the processing.
(3) You file an objection to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you file an objection to the processing pursuant to Art. 21 para. 2 GDPR.
(4) Your personal data was unlawfully processed.
(5) Your personal data has to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
(6) Your personal data has been collected in relation to the services offered of information society pursuant to Art. 8 para. 1 GDPR.
b. Providing information to third parties Where the controller has made the personal data public and is obligated pursuant to Art. 17 para. 1 GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you, as the data subject, have requested the erasure by such controllers of any links to, or copies or replications of, this personal data. c. Exceptions The right to erasure does not exist to the extent that processing is necessary for the following reasons:
(1) Exercising the right of freedom of expression and information.
(2) Compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) Reasons of public interest in the area of public health in accordance with Art. 9 para. 2 points (h) and (i) as well as Art. 9 para. 3.
(4) Further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes according to Art. 89 para. 1 GDPR, in so far as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing.
(5) The establishment, exercise or defence of legal claims.

5. Right of information

If you have asserted the right to rectification, erasure or limitation of processing against the controller, the controller is obliged to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed by the controller of who these recipients are.

6. Right to data portability

You have the right to receive your personal data which you have provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transmit that data to another controller without hindrance from the controller to which the personal data has been provided, where:
(1) The processing is based on consent according to Art. 6 para. 1 (a) GDPR or Art. 9 para. 2 (a) GDPR or is based on a contract according to Art. 6 para. 1 (b) GDPR.
(2) The processing is carried out by automated means. In exercising your right, you also have the right to have your personal data transmitted directly from one controller to another, where technically feasible. This may not affect the freedoms and rights of other persons. The right to data portability shall not apply to processing personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right to object

You have the right to object, at any time and on grounds relating to your particular situation, to the processing of your personal data which is based on Art. 6 para. 1 (e) or (f) GDPR, including profiling based on those provisions. The controller shall no longer process your personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing serves the establishment, exercise or defence of legal claims. Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. This includes profiling to the extent that it is related to such direct marketing. Where you object to processing for direct marketing purposes, your personal data shall no longer be processed for such purposes. You have the option, in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, to exercise your right to object by automated means using technical specifications.

8. Right to withdraw the declaration of consent for data protection-related matters

You have the right to withdraw your declaration of consent for data protection matters at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent given before its withdrawal.

9. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority The State Commissioner for Data Protection and Freedom of Information, Königstrasse 10 a, 70173 Stuttgart, Tel.: 0711/615541-0, fax: 0711/615541-15 email: poststelle@lfdi.bwl.de, or in the Member State of your habitual residence, your place of work or the place of the alleged infringement if you consider that the processing of your personal data infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

VIII. Forwarding personal data to third parties

Forwarding personal data to third parties as necessary for the fulfilment of a contract is permissible according to (Art. 6 para. 1 (b) GDPR) and needs no separate consent. Relevant data necessary for processing an order may or must be forwarded to external service providers, such as relocation services, tax authorities, hauliers, sub-contractors, agents, skilled workers, etc.
Social media and web analysis services

1. Google Analytics

This website uses Google Analytics, a web analysis service from Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and allow analysis of your website usage. The information produced by the cookie about your use of this website is generally transmitted to a Google server in the USA where it is stored. In the event that IP anonymisation is activated on this website, your IP address shall be truncated by Google within Member States of the European Union or in other States party to the Agreement on the European Economic Area. Only in exceptional cases is the complete IP address transmitted to a Google server in the USA where it is truncated. On behalf of the operator of this website, Google uses this information to assess your usage of this website, to compile reports on website activity and to provide other services for the website operator connected with the use of the website and the Internet. The IP address transmitted by Google Analytics from your browser is not associated with any other data held by Google. In addition, you can prevent the storage of cookies by adjusting the correct setting in your browser software; however, we would point out that if you make this adjustment, not all the features of this website can be used in full. You may also prevent Google collecting the data (including your IP address) generated by the cookie and related to your use of the website, as well as the processing of that data by Google, by downloading and installing the browser Add-On available at the following link https://tools.google.com/dlpage/gaoptout?hl=en Further information on terms of use and data protection can be found at https://www.google.com/analytics/terms/gb.html or at https://policies.google.com/ We would like to point out that on this website, Google Analytics was expanded using the code "gat._anonymizeIp();" in order to guarantee the anonymised collection of IP addresses (IP masking).

2. Facebook plug-ins (Like button)

On our sites, plug-ins are integrated from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. The Facebook plug-ins can be recognised by the Facebook logo or the Like button on our website. An overview of Facebook plug-ins can be found at: http://developers.facebook.com/docs/plugins/. When you visit our websites, the plug-in creates a direct connection between your browser and the Facebook server. Through this connection, Facebook is informed that you have visited our website with your IP address. When you click on the Facebook Like button while you are logged into your Facebook account, you can link the content of our website to your Facebook profile. This means that Facebook can associate your visit to our website with your user account. We would like to point out that we, as provider of the website, receive no knowledge of the content of the data transmitted or how Facebook uses it. Further information on this can be found in Facebook's privacy policy at http://en-gb.facebook.com/policy.php If you don't want Facebook to associate your visit to our website with your Facebook account, please log out of your Facebook account.

3. YouTube

Our website uses plug-ins from the Google-operated website YouTube. The operator of the site is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our websites which has a YouTube plug-in, a connection to YouTube's servers is made. Information on which sites you have visited is transmitted to YouTube servers. If you are logged into your YouTube account, you allow YouTube to directly associate your Internet usage behaviour with your personal profile. You can stop this by logging out of your YouTube account. YouTube is used to appropriately present our online offerings. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR. Further information on how YouTube handles user data can be found in their privacy policy at: https://policies.google.com/privacy

IX. Submission of application documents

In the course of your written application, including online application, your application data will be collected and processed in the manner permissible pursuant to the GDPR. This includes in particular your:
Contact information (name/first name, date and place of birth, address, telephone number, email, etc.) and application documents (letter of application, CV, certificates, other training certificates and qualifications, etc.).
Your personal application data will be collected and processed exclusively for the purpose of filling positions within our HR department. Your data will only be forwarded to the internal positions and specialist departments of our school responsible for the specific application process. This is necessary for the implementation of any employment relationship with you in our company. Your personal application data will not be transferred to other companies without first receiving your prior, express consent. Any further use or transfer of your application data to third parties will not take place.
Your personal application data will be erased automatically six months after completing the application process. This does not apply insofar as statutory provisions preclude erasure, where further storage is required for the purpose of providing evidence or you have expressly consented to longer storage for e.g. future job advertisements. If a contract of employment is entered into with an applicant, the transmitted data will be stored and processed for the purpose of the employment relationship in compliance with legal requirements. Status: September 2018
abcdefghijklmnopqrstuvwxyz
abcdefghijklmnopqrstuvwxyz