Privacy Policy

State: April 2022

Thank you for your interest in using our website. Protecting your personal data is our top priority. Below you will find information about how your personal data is processed and your rights in connection with your use of our website.

1. Controller

The data processing controller is:

GO! Express & Logistics Deutschland GmbH
Brühler Strasse 9
53119 Bonn, Germany
Telephone: +49 (0)228 24393-0
datenschutz@general-overnight.com

 

2. Data protection officer

You can contact our data protection officer in the following ways:

Dr. Gregor Scheja
Scheja und Partner Rechtsanwälte mbB
Adenauerallee 136
53113 Bonn, Germany
Telephone: +49 (0)228 2272 260
https://www.scheja-partner.de/kontakt/kontakt.html

Dr. Gregor Scheja has also been appointed data protection officer for the following GO! companies:

GO! Express & Logistics West GmbH & Co. KGKronenweg 1850389Wesseling
GO! Express & Logistics GmbHEltersdorfer Str. 2190425Nuremberg
GO! General Overnight Express + City Logistics GmbHFranz-Grashof-Str. 5-768199Mannheim
GO! Express & Logistics GmbHPfarrgasse 811230Vienna
GO! Express & Logistics Siegen GmbH Bilsteiner Straße 957462Olpe
GO! Express & Logistics Freiburg GmbHBurkheimer Str. 979111Freiburg
GO! Express & Logistics Villingen-Schwenningen GmbHSteinkirchring 3378056Villingen-Schwenningen
GO! Express & Logistics Karlsruhe GmbH Otto-Lilienthal-Str. 4c76275Ettlingen
GO! Express & Logistics Südwest GmbH & Co. KGRutesheimer Str. 170499Stuttgart
GO! EXPRESS & LOGISTICS Hamburg AGReiherdamm 4420457Hamburg (Steinwerder)
GO! Express & Logistics Frankfurt GmbH Stützeläckerweg 1360489Frankfurt am Main
GO! Express & Logistics Bremen GmbH    Bordeaux-Str. 628309Bremen
GO! General Overnight Service  Lübeck GmbHKaninchenborn 3923560Lübeck
GO! Express & Logistics Eisenach GmbHRöberstr. 2G99848Wutha-Farnroda
GO! Express & Logistics Dresden GmbHStraße des 17. Juni 2501257Dresden
GO! Express & Logistics Göttingen GmbHReinhard-Rube-Str. 637077Göttingen
GO! Express & Logistics Osnabrück GmbHFrida-Schröer-Str. 1-349076Osnabrück

 

3. Your rights as a data subject

As a data subject, you have the following rights under the General Data Protection Regulation (GDPR), insofar as their respective legal requirements are met:

  • Right to information (Article 15 GDPR): You have the right to receive information about any personal data of yours that is processed.
  • Right of amendment (Art. 16 GDPR): You can request the amendment of inaccurate personal data. In addition, you can request any incomplete data to be updated.
  • Right of deletion (Art. 17 GDPR): In certain cases, you can request that your personal data be deleted.
  • Right to restrict processing (Art. 18 GDPR): In certain cases, you can request that the processing of your data be restricted.
  • Right to data portability (Article 20 GDPR): If you have provided data on the basis of a contract or consent and the processing is carried out by automated means, you can request to receive the data that you have provided in a structured, commonly used and machine-readable format or you can request that it be transmitted to another controller.

 

Right to object on a case-by-case basis:

You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data in accordance with GDPR Article 6(1)(e) (performance of tasks carried out in the public interest or in the exercise of official authority) or GDPR Article 6(1)(f) (legitimate interest), including profiling based on these provisions.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Objection to data processing for the purpose of direct marketing:

Insofar as we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such purpose, including profiling to the extent that it is related to direct marketing.

If you object to processing for the purpose of direct marketing, we will no longer process your personal data for these purposes.

 

Revocation of consent (Article 7(3) GDPR): If you have given your consent to the processing of your data, you can revoke it at any time with effect for the future. This does not affect the legitimacy of the processing of your data prior to the revocation of your consent.

You can revoke your consent to cookies in the cookie centre. If you grant consent for individual services on our website, you will receive further information regarding the possibility to revoke your consent. See also item 5 (‘Exercising your right of revocation’).

Asserting your rights: To assert any of your aforementioned rights, please contact us at datenschutz@general-overnight.com or by post at the address specified above under item 1. Please ensure that we can identify you uniquely.

If you believe that the processing of your personal data violates data protection regulations, you can also lodge a complaint with a supervisory authority, in particular in the EU member state or federal state of your habitual residence, place of work or place of the alleged violation for which you are submitting a complaint.

This also applies to the supervisory authority responsible for us:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestrasse 2-4
40213 Düsseldorf, Germany

Phone: +49 (0)211 384 24 0
Email: poststelle@ldi.nrw.de

or in the case of a postal service:

Federal Commissioner for Data Protection and Freedom of Information
Graurheindorfer Strasse 153
53117 Bonn, Germany

Phone: +49 (0)228 9977 990 
Email: poststelle@bfdi.bund.de
De-mail: poststelle@bfdi.de-mail.de

4. Details on services, cookies, etc.

4.1. Own services

4.1.1. Provision of the website

Personal data processed:

Date and time of access, duration of visit, type of device, operating system used, features used, volume of data sent, type of event, IP address, domain name

Purpose(s):

Provision of the website

Legal base(s):

GDPR Article 6(1)(f) (legitimate interest). In doing so, we pursue the legitimate interest in providing our website.

Recipients of the personal data:

Hosting provider, internal departments, external service provider for technical support

Transfer to third countries: 

No

Duration of storage of personal data:

Deleted immediately after delivery by the web server

 

4.1.2. Log files

Personal data processed:

URL accessed, IP address, time and date of access, volume of data transmitted, website from which the user accessed the requested site (known as ‘referrer’), website accessed by the user’s system via our website, http status, information about the browser type and version used, user’s operating system, user’s Internet service provider 

Purpose(s):

Statistical evaluations, website improvement, system security (e.g. prevention of misuse), troubleshooting 

Legal base(s): 

GDPR Article 6(1)(f) (legitimate interest). In doing so, we pursue a legitimate interest in improving the website, system security (e.g. preventing misuse) and troubleshooting.

Recipients of the personal data:

Hosting providers, internal departments, external service providers for technical support, government agencies on request

Transfer to third countries: 

No

Duration of storage of personal data:

Deleted 7 days after creation 

 

4.1.3. Contact form

Personal data processed:

Title, first and last name of the person seeking the contact, postal address, telephone number, email address, fax number if applicable, content of message 

Purpose(s):

Receiving and processing enquiries, complaints or other feedback

Legal base(s):

GDPR Article 6(1)(f) (legitimate interest). In doing so, we pursue a legitimate interest in receiving and processing enquiries, complaints or other feedback

Recipients of the personal data:

Hosting providers, internal departments, government agencies on request 

Transfer to third countries: 

No

Duration of storage of personal data:

Deleted after final processing of request; depending on the content, it may be stored for up to 10 years after receipt.

Obligation to provide personal data and consequences of non-provision:Mandatory data is marked with ‘*’ in contact form; other information does not have to be provided. 

 

4.1.4. Newsletter registration

Personal data processed:

First name and surname of the recipient, title, email address, date and time of registration 

Purpose(s):

Sending newsletters for customers, proof of consent

Legal base(s):

GDPR Article 6(1)(a) (consent),

Article 6(1)(c) in conjunction with Article 5(1)(a)(2), Article 7(1) GDPR (fulfilment of statutory obligations)

 GDPR Article 6(1)(f) (legitimate interest). In doing so, we pursue a legitimate interest in that we can prove that consent has been granted.

Recipients of the personal data:

Internal departments, in particular marketing, hosting providers, processors for sending newsletters, government agencies on request

Transfer to third countries: 

No

Duration of storage of personal data:

Deleted after unsubscribing from newsletter: Title, first name, last name, email address

Deleted 3 years after unsubscribing from newsletter or discontinuation of our newsletter service: Title, first name, last name, email address

Obligation to provide personal data and consequences of failure to do so:

Mandatory data is marked with ‘*’ in newsletter registration form; other information does not have to be provided. 

Exercising your right of revocation:

You can revoke your consent via the unsubscribe link provided in each newsletter

 

4.1.5. Unsolicited application via application form

Personal data processed:

First name and surname of applicant, title, telephone number, email address, content of cover letter, other application documents (CV, certificates) 

 Purpose(s):

Receipt and processing of unsolicited applications

 Legal base(s):

Article 88(1) of the GDPR in conjunction with section 26(1) first sentence, 26(8) second sentence of the Federal Data Protection Act

Recipients of the personal data:

Internal departments, in particular HR department

Transfer to third countries: 

No

Duration of storage of personal data:

After six months insofar as this does not result in employment

Obligation to provide personal data and consequences of failure to do so:

Mandatory data is marked with a ‘*’; failure to provide this data means that the online application form cannot be used

 

4.1.6. GO! courier application form

Personal data processed:

First name and surname of applicant, postal address, telephone number, email address, content of cover letter, if applicable details regarding the existence of a business registration and AFR certificate, as well as vehicle type/age in the case of independent courier operators

Purpose(s):

Receipt and processing of applications for courier drivers

Legal base(s):

Article 88(1) of the GDPR in conjunction with section 26(1) first sentence, 26(8) second sentence of the Federal Data Protection Act

Recipients of the personal data:

Internal departments, in particular HR department

Transfer to third countries: 

No

Duration of storage of personal data:

After six months insofar as this does not result in employment

Obligation to provide personal data and consequences of failure to do so:

Mandatory data is marked with a ‘*’; failure to provide this data means that the online application form cannot be used

 

4.1.7. GO! shipping material order form

Personal data processed:

Company, GO! customer number, title, first name and surname, postal address, email address, telephone number

Purpose(s):

Sale of shipping material

Legal base(s):

Article 6(1)(b) and (c) of the GDPR

Recipients of the personal data:

Internal departments, processors

Transfer to third countries: 

No

Duration of storage of personal data:

Up to 10 years

Obligation to provide personal data and consequences of failure to do so:

Mandatory data is marked with ‘*’ in order form; failure to provide the information means that no shipping material can be ordered in this way

 

4.1.8. Service assistant

Personal data processed:

GO! customer number, first name and surname, postcode, telephone number, email address 

Purpose(s):

Assistance finding the right shipping solution

Legal base(s):

Article 6(1)(b) and (c) of the GDPR

Recipients of the personal data:

Internal departments

Transfer to third countries: 

No

Duration of storage of personal data:

After issue is finalised; up to 10 years depending on content

Obligation to provide personal data and consequences of failure to do so:

Mandatory data is marked with a ‘*’; failure to provide this data means that the service assistant cannot be used

 

4.1.9. Customer portal Order & Track registration

Personal data processed:

GO! customer number, first name and surname, telephone number (landline and mobile number), email address

Purpose(s):

Enable use of Internet portal for transport management

Legal base(s):

Article 6(1)(b) and (c) of the GDPR

Recipients of the personal data:

Internal departments

Transfer to third countries: 

No

Duration of storage of personal data:

After issue is finalised; up to 10 years depending on content

Obligation to provide personal data and consequences of failure to do so:

Mandatory data is marked with a ‘*’ in form; failure to provide this data means that transport management is carried out outside of the Internet portal

 

4.1.10. GO! quick poll

Personal data processed:

First name and surname of the participant, postcode, email address and satisfaction information 

Purpose(s):

Customer satisfaction survey to improve our service

Legal base(s):

Article 6(1)(c) and (f) of the GDPR (legitimate interest: sales promotion, customer acquisition)

Recipients of the personal data:

Internal departments

Transfer to third countries: 

No

Duration of storage of personal data:

Up to six months; or in some cases up to 10 years in the case of profit distribution

Obligation to provide personal data and consequences of failure to do so:

Mandatory data is marked with a ‘*’ in form; failure to provide this data means that your opinion is not taken into account in the customer satisfaction survey and you are not included in the prize draw

 

4.1.11. Order tracking

Personal data processed:

Consignment note number (tracking number)

Purpose(s):

Enable delivery tracking

Legal base(s):

Article 6(1)(b) and (c) of the GDPR

Recipients of the personal data:

Internal departments, processors for handling order tracking

Transfer to third countries: 

No

Duration of storage of personal data:

After issue is finalised; up to 10 years depending on content

Obligation to provide personal data and consequences of failure to do so:

Data is not mandatory; failure to provide data means that no deliveries can be tracked online

 

 

4.2. Cookies and similar technologies

Information about cookies and similar technologies can be found by clicking on the icon in the bottom left of the page.

Definitions

  1. Controller: GO! Express & Logistics Deutschland GmbH, Brühler Strasse 9, 53119 Bonn, info@general-overnight.com, www.general-overnight.com (hereinafter ‘we’)
  2. Cookies and similar technologies: Cookies are small text files that are stored on your device through the web browser you are using. Our website uses other technologies that store information on your device or access information that is already stored on your device.
  3. Improvement of the website: We analyse how visitors use our website in order to make it even more intuitive.
  4. User profile: Based on your website usage data, we create a user profile in order to analyse or predict certain factors relating to you (e.g. economic situation, personal preferences, interests). If you use a different browser, a new user profile is created.
  5. Personalised advertising: Based on your user profile, selected advertising is displayed to you for the purpose of promoting sales.
  6. Website usage data: We process how you navigate our website and which items you click on. See above for details.
  7. Processing: any handling of personal data (e.g. collecting, recording, organising, arranging, storing, modifying, transmitting of data). No data will be transmitted to third parties other than those expressly mentioned under item 2.
  8. Unsafe third countries: Countries outside the European Economic Area (EEA) for which the EU Commission has not adopted an adequacy decision (https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_de). Compliance with the data protection principles of European Union law is therefore not guaranteed and fundamental rights and freedoms may be violated. The exercise of the rights of data subjects under the General Data Protection Regulation (e.g. information, amendment, deletion, compensation) and enforcement by authorities or courts may also be difficult or not possible. See above for details.
  9. Revocation: As a data subject, you have the right to revoke your consent at any time. The revocation of consent shall not affect the legitimacy of the processing carried out on the basis of this consent prior to its revocation. You can revoke your consent above.