Privacy Policy for the Social Media Channels of GO! Express & Logistics Deutschland GmbH

We, GO! Express & Logistics Deutschland GmbH (hereinafter also referred to as “we” or “us”), hereby inform you about the processing of your personal data and your rights when visiting our social media presences on Facebook, Xing, LinkedIn and Instagram.

The following information relates to the processing of your personal data insofar as this takes place under our sole responsibility.

With regard to the processing of data when visiting our Facebook fan page, personal data is processed under joint responsibility with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter “Meta”). Meta provides further information on joint controllership and on the processing here. Under section 4.2 of this privacy policy, we inform you about our related purposes and legal basis. In addition, Meta also processes personal data under its sole responsibility and without our knowledge.

The “XING” platform is operated by New Work SE, Am Strandkai 1, 20457 Hamburg (hereinafter “XING”). In connection with your visit to this platform, data is also processed by XING. XING provides information on its data processing at https://privacy.xing.com/de/datenschutzerklaerung.

The LinkedIn platform is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter “LinkedIn”). In connection with your visit to this platform, data is also processed by LinkedIn. LinkedIn provides information on its data processing at https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.

The Instagram platform is also operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter “Meta”). In connection with your visit to this platform, data is also processed by Meta. Meta provides information on its data processing at https://privacycenter.instagram.com/policy.

1. Controller

GO! Express & Logistics Deutschland GmbH

Brühler Straße 9

53119 Bonn

Deutschland

Phone: +49 228 24393-0

Fax: +49 228 24393-590

info@general-overnight.com

www.general-overnight.com

2. Data Protection Officer

Mr. Attorney Boris Reibach

Scheja & Partners GmbH & Co. KG

Adenauerallee 136

53113 Bonn

Phone: +49 228 227226-0

verschlüsseltes Kontaktformular: https://www.scheja-partners.de/kontakt/kontakt.html

3. Your Rights as a Data Subject

As a data subject, you have the following rights under the General Data Protection Regulation (GDPR), provided that the respective legal requirements are met:

Access (Art. 15 GDPR): You have the right to obtain information about the data concerning you that is being processed.
Rectification (Art. 16 GDPR): You may request the correction of inaccurate data concerning you. In addition, you may request the completion of incomplete data.
Erasure (Art. 17 GDPR): In certain cases, you may request the deletion of your personal data.
Restriction of Processing (Art. 18 GDPR): In certain cases, you may request that the processing of your data be restricted.
Data Portability (Art. 20 GDPR): If you have provided data on the basis of a contract or consent and the processing is carried out by automated means, you may request to receive the data you provided in a structured, commonly used and machine-readable format or to have it transmitted to another controller.

Right to Object on Grounds Relating to Your Particular Situation:

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(f) GDPR (balancing of interests); this also applies to profiling based on these provisions.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Objection to Data Processing for Direct Marketing Purposes:

Insofar as we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such purposes; this also applies to profiling insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

Exercising Your Rights: To exercise any of the rights mentioned above, please contact datenschutz@general-overnight.com or write to the postal address stated above under section 1. Please ensure that we are able to clearly identify you.

If you wish to exercise your rights in relation to processing under joint responsibility with Meta (Facebook fan page), Meta will respond to your request. To ensure faster processing of your request, we recommend contacting Meta directly. Alternatively, you may also contact us. We will then forward your request to Meta for the purpose of responding to it.

If you believe that the processing of your personal data violates data protection law, you may also lodge a complaint with a supervisory authority, in particular in the EU Member State or federal state of your habitual residence, place of work or the place of the alleged infringement you complain about. This also applies to the supervisory authority responsible for us—provided that no postal service is concerned:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia

P.O. Box 20 04 44

40102 Düsseldorf

Phone: +29 211 384240

Email: poststelle@ldi.nrw.de

4. Details on Integrated Services and Functionalities

4.1 Interaction (Use of the respective Social Media Functions)

Data Categories	Profile name, profile picture, “like”/“dislike”/“favourite” information, content and time of a comment, “subscribe to channel” information, sharing of a post or video, “follower” request and status, content of the message, date and time of the message
Purpose(s)	Interaction with visitors, receipt and handling of inquiries, complaints or other feedback
Legal Basis	Art. 6(1)(f) GDPR (balancing of interests). In doing so, we pursue the legitimate interest of further developing our services and products as well as publicfacing communication for brand building.
Recipients	Internal departments
Third-country Transfer	No
Duration of Processing	All personal data is processed for as long as it is visible on the profile. You can largely determine the visibility yourself (e.g. by deleting a comment).

4.2 LinkedIn Job Advertisements

Data Categories	Profile name, profile picture, contact information, education, professional background, additional applicant data transmitted as part of an application, content of the message, date and time of the message
Purpose(s)	Performance of the application process
Legal Basis	Art. 6(1)(b) GDPR
Recipients	Hosting provider, internal departments, external service provider for technical support
Third-country Transfer	No
Storage period	Deletion of application documents within 6 months after completion of the application process.
Duration of Processing	All other personal data is only processed for as long as it is visible on the LinkedIn page. You can largely determine the visibility yourself (e.g. by deleting a comment).

4.3 Processing of Page Insights in Joint Responsibility with Meta on our Facebook Fanpage

Data Categories	Page Insights (Meta provides you with more detailed information here)
Purpose(s)	Optimisation of our fan page and social media presence with regard to userfriendliness as well as further development of our services and products
Legal Basis	Art. 6(1)(f) GDPR (balancing of interests). In doing so, we pursue the legitimate interest of making our fan page more user-friendly and further developing our services and products