1. Responsible party
The person responsible within the terms of the data protection law is
Night Star Express GmbH Logistik
(hereinafter referred to as "Night Star Express" or "we")
Heinrich-Hertz-Straße 1
D-59423 Unna
Phone: 02303/98688-0
Email: info@night-star-express.de
DATA PROTECTION STATEMENT (as of October 2019)
Thank you for visiting Night Star Express GmbH Logistik on the internet. With our Internet presence, we would like to inform customers and interested parties comprehensively and competently about our system and our services. Furthermore, we want to offer our customers and business partners the best possible service of a modern service company.
As part of this service, we receive technical information and information that you provide voluntarily.
In this privacy policy, you can find information about which of your data is used
by Night Star Express GmbH Logistik for which purposes.
The basic rule is:
We respect your privacy and are committed to keeping your personal data absolutely confidential. All data collected by Night Star Express GmbH Logistik are subject to the applicable data protection laws and are processed by us carefully and conscientiously.
As soon as possible contractors of Night Star Express GmbH Logistik are commissioned with the provision and processing of further service offers or services, they are of course contractually bound to the data protection guidelines of Night Star Express GmbH Logistik. In the following, we inform you in detail about the handling of your data when you visit and use our website under the URL http://www.night-star-express.de
2. Contact details of the data protection officer
Our data protection officer can be contacted at the following email address: datenschutz@night-star-express.de
3. Data collection and data processing
3.1 Access to our website and data security
Night Star Express collects and stores so-called log files data, which your browser automatically transmits. These are:
The collection of these data is necessary for technical reasons. They are not assignable to you for Night Star Express. These data are not merged with other data sources. Unfortunately, the use of the website is technically not possible without the provision of log files data.
We delete the log files data arising in this connection after storage is no longer required or restrict processing if contractual or legal retention periods exist. The legal basis for the temporary storage of data is Article 6 (1) (f) of the GDPR.
This website is SSL encrypted to protect your data. Night Star Express shall also take appropriate technical and organisational measures in accordance with Article 32 GDPR, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the probability of occurrence and the seriousness of the risk to the rights and freedoms of natural persons. It also ensures the confidentiality, integrity, availability and resilience of the systems and services related to the processing, as well as the rapid restoration of the availability of personal data in the event of a physical or technical incident.
3.2 Cookies
Cookies are small text files that are sent from our web server to the browser of your end device and stored on it. The cookies on our website are purely functional cookies. We use cookies in order to be able to guarantee an optimal display and functionality. These cookies are not used for tracking user data. Some functions of our website cannot be offered without the use of technically necessary cookies. These cookies are deleted from the storage medium of your end device after the end of your browser session (so-called session cookies). When you visit our website, the info banner informs you about the setting of cookies and by clicking on "further information" you will be forwarded to this data protection declaration.
The legal basis for the processing of personal data using technically absolutely necessary cookies is Art. 6 (1) (f) GDPR. However, you can generally deactivate cookies at any time in your browser.
3.3 Cookies for the analysis of surfing behaviour
This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses cookies, which are stored on your computer and which enable an analysis of your use of our website. The information generated by the cookie about your use of our website is usually transferred to a Google server in the USA and stored there.
Our website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are further processed in a shortened form, thus excluding the possibility of personal references. If the data collected about you contain a personal reference, this is immediately excluded and the personal data are therefore deleted immediately. As a result of this extension, your IP address will be previously truncated by Google within member states of the European Union or in other states which are parties to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there.
On our behalf, Google will use this information to evaluate your use of our website, to compile reports on website activities and to provide us with further services related to website and internet use. The legal basis is Art. 6 (1) (f) GDPR. The IP address transmitted by your browser within the framework of Google Analytics is not merged with other data from Google.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of these data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
We use Google Analytics to analyse and regularly improve the use of our website. With the statistics obtained, we can improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data are transferred to the USA, Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. In addition, we have concluded a data processing agreement with Google for the use of Google Analytics.
We store the data collected by Google Analytics for a period of 14 months.
Information about Google: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Terms and Conditions of Use:http://www.google.com/analytics/terms/de.html,
Privacy Policy survey: http://www.google.com/intl/de/analytics/learn/privacy.html
and the Privacy Policy: http://www.google.de/intl/de/policies/privacy.
3.4 Google Maps
This website uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This allows us to display interactive maps directly on our website and enables you to use the map function conveniently. This constitutes a legitimate interest within the sense of Article 6 (1) (f) of the GDPR.
The maps are all integrated in the "extended data protection mode", i.e. no data about you as a user are transferred to Google unless you load the map by clicking on it. Only when you load the map will the data mentioned in section 3.1 be transferred to Google. We have no influence on this transmission. The transmission is carried out regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your information is directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button.
Google stores your data as user profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have a right of objection to the creation of these user profiles, and you must contact Google to exercise this right.
For more information on the purpose and scope of data collection and processing by Google, please see their privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework
3.5 YouTube
This website uses plugins from the YouTube page operated by Google. The provider of the site is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. By integrating the YouTube videos you can play them directly from the website. YouTube is used for an attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Article 6 (1) (f) of the GDPR.
The videos are all embedded in the "enhanced privacy mode", which means that no data about you as a user are transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in section 3.1 be transferred to Google. We have no influence on this data transmission. This is done regardless of whether YouTube provides a user account that you are logged in with or no user account exists. If you are logged in to Google, your information is directly associated with your account. If you don't want the assignment with your profile on YouTube, you have to log out before activating the button. YouTube stores your data as user profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have a right of objection to the creation of these user profiles, and you must contact YouTube to exercise this right.
For more information on the purpose and scope of data collection and processing by YouTube, please see the Privacy Policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
3.6 Contact form
You can contact us via our contact form, by email or by phone. When you contact us by email or via our contact form, the data you voluntarily provide us with (your email address, your name, first name and telephone number, as well as the personal data you provide during communication) will be stored by us in order to process your contact. Without providing these data, we cannot process your contact. We have a legitimate interest in this with Art. 6 (1) (f) GDPR as the legal basis. If the contact by form, email or telephone is connected with the conclusion of a contract, Art. 6 (1) (b) GDPR is also the legal basis for the processing. We delete the data arising in this connection after storage is no longer required or restrict processing if contractual or legal retention periods exist. If this is necessary to process your contact request, we also transfer these data to our cooperation companies (logistics service providers).
The processing of other data (e.g. your IP address, date and time of sending) during the sending of your contact request should prevent misuse of the contact form. The legal basis in this respect is Article 6 (1) (f) of the GDPR. These data will be deleted after a period of 7 days at the latest.
If you contact us, you can object to the storage of your personal data in accordance with the requirements under point 7.
3.7. Press distribution list
With your consent, you can register for our press distribution list, which will give you current information about our company. You can register for this by simply clicking on the link "Registration press distribution list" by email. You will then soon receive a confirmation email.
Your email address is the only mandatory information for registering for the press distribution list. The provision of further data is voluntary and is used, for example, to be able to address you personally. We do not pass on your data to third parties and do not use them for other purposes. The data will be processed on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.
You can revoke your consent at any time and unsubscribe from the press distribution list. You can declare the revocation by sending us an email to presse@night-star-express.de or a message to the contact data given in the page details. The revocation of your consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
3.8 Tracking and tracing
The "Shipment Tracking" function gives you the free opportunity to find out about the status of your shipping order. Pose queries to our database using the shipment number, and you can see where and in which processing step your shipment is. Personal data will not be displayed.
To enable you to track your shipment, we use the service of 1st Log AG, Industriestrasse 47 in 6300 Zug (Switzerland). We have concluded a contract processing agreement with 1st Log AG. The legal basis for this order processing is Art. 6 (1) (f) GDPR. Further information on the purpose and scope of data collection and their processing can be found in the provider's data protection declaration. The data protection declaration can be found on the website at https://tracking.1st-scan.net/de.
After successful response to your request, the received tracking number will be deleted from our website records within 14 days.
3.9. My NSE
Customers registered with Night Star Express have the possibility to register with us via the link "My NSE" and thereby gain access to our Night Star Express IT.
The access to our Night Star Express IT is done via the database "Depotplatz". In order to provide a time and person-independent delivery and collection method for recipients, senders and transporters, we use the service of LLL Management GmbH, Industriestrasse 47, CH-6300 Zug (Switzerland). The legal basis for this order processing is Art. 6 (1) (f) GDPR.
The separately provided privacy policy within the Night Star Express IT applies to this section.
Further information on the purpose and scope of data collection and its processing can be found in the provider's data protection declaration. The privacy policy can be found on the website at https://depotplatz.de/de/customer.
The collected data will be deleted if the customer objects to the processing or if the data is no longer required for the provision of services and there are no legal obligations to retain the data.
3.10. Application
You have the possibility to apply by email or by post. All data voluntarily provided by you in this context will be used to process your application and thus for pre-contractual purposes or to prepare for employment. The legal basis is Article 88 (1) of the GDPR in conjunction with Article 26 (1) in conjunction with (8) (2) BDSG [German Federal Data Protection Act]. In the event that you have given us a declaration of consent to the processing of your data, a further legal basis is Art. 88 (1) GDPR in conjunction with Section 26 (2) (8) sentence 2 BDSG.
On our website we offer you the opportunity to apply for jobs at various locations. For this purpose, your personal data may be transferred to the respective location. This has the advantage that the respective locations can check directly whether you are eligible for the job. In this context, the declarations on data protection of the respective location must be observed.
Your applicant data will remain stored for 6 months after the position has been taken or after a rejection. Immediately after the position has been taken, your data will be blocked for any use other than the clarification of applicant claims, unless you have received the position. Your applicant data will only be stored beyond this if you have given us your express consent to further storage, or if we have a justified interest (e.g. in the event of legal action or legal defence). If we establish an employment relationship with you, your data will be processed to carry out and process the employment relationship and for contractual purposes.
4. Legal and contractual obligations to provide
It is neither contractually nor legally required that you provide us with your data.
5. Storage duration and deletion of data
We delete the personal data after storage is no longer required or restrict processing if contractual or legal retention periods exist.
Other data will be deleted as indicated in the respective paragraph.
If data are required as evidence, they are kept for the duration of the statutory limitation periods or until the end of the corresponding proceedings. The limitation period can be up to 30 years, whereby the regular limitation period ends after 3 years.
6. Transfer of your data
We will only pass on your data to third parties if we are entitled or obliged to do so under the applicable law. The same applies if we receive your data from third parties.
An authorisation is also given if third parties process the data on our behalf: If we do not carry out our business activities (e.g. operating the website, creating and sending advertising material, data analysis and, if necessary, data cleansing) ourselves, but have them carried out by other companies, and these activities are connected with the processing of your data, we have previously contractually obliged these companies to use the data only for the purposes legally permitted by us. We are authorised to control these companies in this respect. An obligation to pass on data exists, for example, when a law enforcement agency makes a request.
We store your email address, telephone number, any contact persons and address data in the "Depotplatz" database maintained by LLL Management GmbH, Industriestraße 47, CH-6300 Zug (Switzerland). The legal basis for this order processing is Art. 6 (1) (b) GDPR. The collected data will be deleted if you object to the processing, or if the data are no longer required for the provision of services and if there are no legal obligations to retain data.
7. Your rights
You can object to the processing of personal data concerning you by us at any time for reasons arising from your particular situation. You can use the above-mentioned contact options for this purpose. If you object, we will no longer process your personal data, unless we can prove compelling reasons for processing that are worthy of protection, which outweigh your interests, rights and freedoms, or the processing takes place due to legal claims on our part.
You also have the right to revoke any consent you have given with effect for the future. However, the lawfulness of the data processing operations based on the consent remains unaffected until the exercise of the withdrawal.
You have the right at all times to obtain information free of charge about the data stored by us, (Art. 15 GDPR) to correct incorrect data (Art. 16 GDPR), to restrict processing (Art. 18 GDPR) and to have data blocked or deleted. You also have the right to receive your data in a structured, common and machine-readable format and to have your data transferred by us to someone else (Art. 20 GDPR).
You can address your respective request to us by using the contact data mentioned in paragraphs 1 and 2.
In addition to the rights mentioned above, you also have the right to complain to a data protection authority.