Privacy information for the GO! Express App pursuant to Art. 13 General Data Protection Regulation (GDPR)

We, GO! Express & Logistics Deutschland GmbH, hereby inform you about the processing of your personal data and the rights to which you are entitled in connection with the use of our GO! Express App.

1. Name and Contact Details of the Controller

GO! Express & Logistics Deutschland GmbH

Brühler Straße 9

53119 Bonn

Phone: +49 228 24393-0

datenschutz@general-overnight.com

2. Contact Details of the Data Protection Officer

Boris Reibach, LL.M.

Scheja & Partners GmbH & Co. KG

Adenauerallee 136

53113 Bonn

Germany

Tel.: +49 228-227 226 0

Contact form: https://www.scheja-partners.de/kontakt/kontakt.html

3. Rights of data subjects

As a data subject, under the General Data Protection Regulation (GDPR) you have the following rights, pro-vided that the respective legal requirements are met:

Access (Art. 15 GDPR): You have the right to request confirmation as to whether we process per-sonal data concerning you; if this is the case, you have the right to information about such pro-cessing.
- Rectification (Art. 16 GDPR): You may request the correction of inaccurate data concerning you. In addition, you may request the completion of incomplete data concerning you.
Erasure (Art. 17 GDPR): You may request the deletion of your personal data, including, among oth-er things, where processing was unlawful or is no longer necessary.
Restriction of processing (Art. 18 GDPR): You may request that the processing of your data be re-stricted, including, among other things, instead of deletion of the data.
Data portability (Art. 20 GDPR): If you have provided data on the basis of a contract or consent and processing is carried out by automated means, you may request to receive the data you provided in a structured, commonly used and machine-readable format or to have it transmitted to another controller.
Withdrawal of consent (Art. 7(3) GDPR): If you have given consent to the processing of your data, you may withdraw this consent at any time with effect for the future. The lawfulness of the pro-cessing of your data until withdrawal remains unaffected.

Right to object on grounds relating to your particular situation:

You have the right, on grounds relating to your particular situation, to object at any time to processing of personal data concerning you that is based on Art. 6(1)(f) GDPR (balancing of interests).

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Objection to data processing for direct marketing purposes:

Where we process your personal data for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such purposes; this also applies to profiling insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

Assertion of your rights: To exercise all of your rights referred to above, please contact datenschutz@general-overnight.com or use the contact details of the controller stated above under section 1.

You can withdraw your consent to cookies in the Cookie Center. If you give consent for individual services on our website, you will receive further information on withdrawal options when giving consent and under section 5 ("Exercising withdrawal").

If you believe that the processing of your personal data violates data protection law, you may also lodge a complaint with a supervisory authority, in particular in the EU Member State or federal state of your habitual residence, place of work or the place of the alleged infringement.

This also applies to the supervisory authority responsible for us: State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestr. 2-4, 40213 Düsseldorf, Telephone: +49 211 38424-0, Email: poststelle@ldi.nrw.de

Insofar as postal services are affected, the supervisory authority responsible for us is: The Federal Commissioner for Data Protection and Freedom of Information, Graurheindorfer Str. 153, 53117 Bonn, Telephone: +49 228 997799-0, Email: poststelle@bfdi.bund.de

4. Details of integrated own services and functionalities

Below, we would like to inform you about which personal data we process in the context of our app. For the push notification function, the requested device permission is necessary, as the requested function can-not be used without this permission. Device permissions are requested when the function is called. You can also configure them in your device settings in advance or subsequently.

You can delete the app from your device at any time. This will also delete information previously stored locally.

4.1. Provision of the app

Processed personal data	Date and time of access, duration of visit, type of end device, operating system used, functions used, amount of data sent, type of event, IP address, domain name
Purpose(s)	Provision of the app
Legal basis/bases	Section 25 (2) no. 2 TDDDG, Art. 6(1)(f) GDPR (bal-ancing of interests). In doing so, we pursue the legitimate interest of providing our app.
Recipients	Hosting provider, IT service provider
Third-country transfer	No
Storage period	Deletion immediately after delivery by the web server

4.2. Log files

Processed personal data	URL accessed, IP address, time and date of ac-cess, amount of data transferred, website from which the user accessed the requested page (so-called “referrer”), website accessed by the user’s system via our website, HTTP status, information about browser type and version used, user’s op-erating system, user’s internet service provider
Purpose(s)	Statistical evaluations, improvement of the app, system security (e.g. prevention of misuse), error diagnosis
Legal basis/bases	Section 25 (2) no. 2 TDDDG, Art. 6(1)(f) GDPR (bal-ancing of interests). In doing so, we pursue the legitimate interest of improving the app, system security (e.g. prevention of misuse), and error diagnosis. Art. 6(1)(c) GDPR (compliance with a legal obliga-tion). This includes disclosures to public authorities upon request.
Recipients	Hosting provider, IT service provider, public au-thorities upon request
Third-country transfer	No
Storage period	Deletion 7 days after creation

4.3. Shipment tracking / order tracking

Processed personal data	Shipment number, IP address, selected language, API access credentials
Purpose(s)	Enabling shipment tracking (retrieval and display of the current shipment status)
Legal basis/bases	Section 25 (2) no. 2 TDDDG, Art. 6(1)(b) GDPR (contract), Art. 6(1)(c) GDPR (compliance with a legal obligation). This includes disclosures to pub-lic authorities upon request.
Recipients	IT service provider, public authorities upon request
Third-country transfer	No
Storage period	Deletion after final processing of the matter; de-pending on the content, up to 10 years
Obligation to provide data and consequences of non-provision	There is no obligation to provide the data; failure to provide it means that the shipment cannot be tracked online.

4.4. Push notifications

Processed personal data	Shipment number, IP address
Purpose(s)	Receipt of notifications and information displayed on your device
Legal basis/bases	Section 25 (1) TDDDG; Art. 6(1)(a) GDPR (consent)
Recipients	Hosting provider, IT service provider
Third-country transfer	No
Storage period	We store the data only as long as necessary to achieve the purpose.
Obligation to provide data and consequences of non-provision	There is no obligation to provide the data; failure to provide it means that no push notifications can be sent.
Exercise of withdrawal	Consent can be withdrawn at any time in the app settings (under “More”).

4.5. App tracking

Processed personal data	IP address
Purpose(s)	Enabling the improvement of our app
Legal basis/bases	Section 25 (1) TDDDG; Art. 6(1)(a) GDPR (consent)
Recipients	IT service provider
Third-country transfer	No
Storage period	We store the data only as long as necessary to achieve the purpose.
Obligation to provide data and consequences of non-provision	There is no obligation to provide the data; failure to provide it means that no user activities will be processed.
Exercise of withdrawal	Consent can be withdrawn at any time in the app settings (under “More”).

4.6. Station search

Processed personal data	Manually entered address or postal code, country, language, IP address
Purpose(s)	Enabling the search for a GO! station near the entered postal code
Legal basis/bases	Section 25 (2) no. 2 TDDDG, Art. 6(1)(f) GDPR (bal-ancing of interests); our legitimate interest is to enable you to view the nearest GO! station and thus provide a service.
Recipients	IT service provider
Third-country transfer	No
Storage period	We store the data only as long as necessary to achieve the purpose.
Obligation to provide data and consequences of non-provision	There is no obligation to provide the data; failure to provide it means that station search is not pos-sible.

4.7. Loading news

Processed personal data	Country, language, page number/offset, IP address
Purpose(s)	Enabling retrieval of current posts for the news wall
Legal basis/bases	Section 25 (2) no. 2 TDDDG, Art. 6(1)(f) GDPR (bal-ancing of interests); our legitimate interest is to enable you to take note of our news and to pro-vide information about our company and our products.
Recipients	IT service provider
Third-country transfer	No
Storage period	We store the data only as long as necessary to achieve the purpose.
Obligation to provide data and consequences of non-provision	There is no obligation to provide the data; failure to provide it means that no news can be loaded.