Privacy Policy

State: April 2022

We appreciate your interest in using general-overnight.com. Our top priority is to protect your personal data. Below you will find information on the processing of your personal data and your rights when using general-overnight.com.

1. Controller

The data processing controller is:

GO! Express & Logistics Deutschland GmbH
Brühler Straße 9
53119 Bonn
Telephone: +49 228 24393-0
datenschutz@general-overnight.com

 

2. Data protection officer

You can reach our data protection officer at the following address:

Dr. Gregor Scheja
Scheja und Partner Rechtsanwälte mbB
Adenauerallee 136
D-53113 Bonn
Telephone: +49 228 2272260
https://www.scheja-partner.de/kontakt/kontakt.html

Dr. Gregor Scheja has also been appointed data protection officer for the following GO! companies:

GO! Express & Logistics West GmbH & Co. KGKronenweg 1850389Wesseling
GO! Express & Logistics GmbHEltersdorfer Str. 2190425Nürnberg
GO! General Overnight Express + City Logistics GmbHFranz-Grashof-Str. 5-768199Mannheim
GO! Express & Logistics GmbHPfarrgasse 811230Wien
GO! Express & Logistics Siegen GmbH Bilsteiner Straße 957462Olpe
GO! Express & Logistics Freiburg GmbHBurkheimer Str. 979111Freiburg
GO! Express & Logistics Villingen-Schwenningen GmbHSteinkirchring 3378056Villingen-Schwenningen
GO! Express & Logistics Karlsruhe GmbH Otto-Lilienthal-Str. 4c76275Ettlingen
GO! Express & Logistics Südwest GmbH & Co. KGRutesheimer Str. 170499Stuttgart
GO! EXPRESS & LOGISTICS Hamburg AGReiherdamm 4420457Hamburg (Steinwerder)
GO! Express & Logistics Frankfurt GmbH Stützeläckerweg 1360489Frankfurt
GO! Express & Logistics Bremen GmbH    Bordeaux-Str. 628309Bremen
GO! General Overnight Service  Lübeck GmbHKaninchenborn 3923560Lübeck
GO! Express & Logistics Eisenach GmbHRöberstr. 2G99848Wutha-Farnroda
GO! Express & Logistics Dresden GmbHStraße des 17. Juni 2501257Dresden
GO! Express & Logistics Göttingen GmbHReinhard-Rube-Str. 637077Göttingen
GO! Express & Logistics Osnabrück GmbHFrida-Schröer-Str. 1-349076Osnabrück

 

3. Your rights as a data subject

In accordance with the General Data Protection Regulation (GDPR), you have the following rights as a data subject, provided the relevant legal prerequisites are in place:

Access: You have the right to obtain confirmation about our processing of your personal data.

Rectification: You have the right to obtain the rectification of inaccurate personal data. You also have the right to have incomplete data completed.

Erasure: In certain cases, you have the right to have your personal data erased.

Restriction of processing: In certain circumstances, you have the right to obtain restriction of processing of your data.

Data portability: If you have provided us with data on the basis of a contract or consent, you have the right to obtain the data that you have provided in a structured, commonly used and machine-readable format. You also have the right to have this data transmitted to another controller.

Right to object

Right to object in an individual case                                                                                 

You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data. This right to object is based on Art. 6 (1) sentence 1 e) GDPR or Art. 6 (1) sentence 1 f) GDPR. This also applies to profiling based on these provisions. We will then no longer process this personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or unless the processing is used for the establishment, exercise or defence of legal claims.

Right to object to the processing of data for the purposes of direct marketing               

In individual cases, we process your data for direct marketing purposes. You have the right to object at any time to the processing of your personal data for the purposes of such marketing. If you object to the processing for the purposes of direct marketing, your personal data will no longer be processed for these purposes.

Withdrawal of consent: If you have given us consent to process your data, you can withdraw this consent at any time with effect for the future. The lawfulness of the processing of your data remains unaffected by this until consent is withdrawn (opt out). In addition to opting out using the means outlined in the section entitled “Asserting your rights”, you can also do so in accordance with the relevant information in “Opting out” in the "Services and cookies" section. 

Asserting your rights: To assert any of the above-mentioned rights, please contact us at datenschutz@general-overnight.com or by post at the address stated in clause 1. When doing so, please ensure that we can uniquely identify you.

Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a data protection authority, particularly in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data is unlawful.

4. Details on services, cookies, etc.

4.1. Own services

Functionality Description of the service Log files Contact form Newsletterregistration
Data category Date and time of access, duration of visit, type of device, operating system used, functions that you use, quantity of data sent, type of event, IP address, domain name URL accessed, user’s IP address, time and date of access, quantity of data transferred, web page from which the user came to the requested page (“referrer”), web page that is accessed by the user’s system via our website, http status, information on the browser type and the version used, user’s Internet service provider First name and surname of the person seeking contact, postal address, telephone number, email address, contents of message First name and surname of the recipient, salutation, email address, date and time of registration
Purpose(s) Provision of the service Statistical analyses, Website improvement, System security (e.g. prevention of abuse), troubleshooting Receipt and processing of enquiries, complaints or other feedback Sending of newsletter to customers
Legal base(s) Article 6 (1) (b) and (f) GDPR  Article 6 (1) (b) and (f) GDPR Article 6 (1) (a), (b) and (f) GDPR Article 6 (1) (a) GDPR
If applicable, pursued legitimate interests Technical functionality See Purposes See Purposes --
Recipients or categories of recipients Hosting providers, internal departments, external service providers for technical support Hosting providers, internal departments, external service providers for technical support, state bodies on request Hosting providers, internal departments, state bodies on request Internal departments, especially Marketing, Hosting providers, processors for sending newsletters, state bodies on request
Third country transfer; adequacy decision (yes/no) -- -- -- --
If applicable, guarantees for third country transfer and access option for this -- -- -- --
Storage periods or criteria for determining such periods Immediately after data has been provided by the web server 7 days after creation Once the matter has been conclusively processed, up to 10 years depending on content After unsubscribing from the newsletter
Obligation to provide personal data and, if applicable, consequences of failure to provide such data No obligation to provide, automated collection by accessing the service No obligation to provide, automated collection by accessing the service Mandatory information in the contact form flagged with “*”, other information helps to process your query faster but does not need to be specified No obligation to provide
If applicable, opting out -- -- -- Link to unsubscribe in each newsletter
Source of the data Collected directly when website/service is accessed Collected directly when website/service is accessed Collected directly in contact form Collected directly in newsletter registration form

 

 

Functionality Unsolicited application application form GO! courier application form Email contact GO! Shipping material order form
Data category(ies) First name and surname of applicant, title, telephone number, email address, content of cover letter, other application documents (CV, certificates) First name and surname of applicant, postal address, telephone number, email address, content of cover letter, if applicable details regarding the existence of a business registration and AFR certificate, as well as vehicle type/age in the case of independent courier operators Email address, message content Company, GO! customer number, title, first name and surname, postal address, email address, telephone number
Purpose(s) Receipt and processing of unsolicited applications Receipt and processing of applications as courier drivers Communication; receipt and processing of enquiries, complaints or other feedback Sale of shipping material
Legal base(s) Article 88(1) of the GDPR in conjunction with section 26(1) first sentence, 26(8) second sentence of the Federal Data Protection Act Article 88(1) of the GDPR in conjunction with section 26(1) first sentence, 26(8) second sentence of the Federal Data Protection Act Article 6(1)(a), (b), (c) and (f) of the GDPR Article 6(1)(b) and (c) of the GDPR
Legitimate interests pursued if applicable -- -- See purposes --
Recipients or categories of recipients Internal departments at relevant GO! station, in particular HR department Internal departments at relevant GO! station, in particular HR department Internal departments at relevant GO! station Internal departments at relevant GO! station
Third-country transfer; adequacy decision (yes/no) -- -- -- --
Guarantees for and access to third-country transfers if applicable -- -- -- --
Retention periods or criteria for defining them After six months insofar as this does not result in employment After six months insofar as this does not result in employment After issue is finalised; up to 10 years depending on content Delete data after order is processed?
Obligation to provide personal data and consequences of not providing said data if applicable Mandatory data is marked with a ‘*’; failure to provide this data means that the online application form cannot be used Mandatory data is marked with a ‘*’; failure to provide this data means that the online application form cannot be used Data is not mandatory Mandatory data in application form
Execution of revocation if applicable -- -- -- --
Data source Directly collected from application form Directly collected from application form Directly collected from email Directly collected from order form

 

 

Functionality Service assistant Order & track registration GO! quick poll Order tracking
Data category(ies) GO! customer number, first name and surname, postcode, telephone number, email address GO! customer number, first name and surname, telephone number (landline and mobile number), email address First name and last name of participant, postcode, email address Consignment note number (tracking number)
Purpose(s) Assistance finding the right shipping solution Enable use of Internet portal for transport management Customer satisfaction survey in order to improve service Enable delivery tracking
Legal base(s) Article 6(1)(b) and (c) of the GDPR Article 6(1)(b) and (c) of the GDPR Article 6(1)(c) and (f) of the GDPR Article 6(1)(b) and (c) of the GDPR
Legitimate interests pursued if applicable -- -- See purposes --
Recipients or categories of recipients Internal departments at relevant GO! station Internal departments at relevant GO! station Internal departments Order processors used to process order tracking
Third-country transfer; adequacy decision (yes/no) -- -- -- --
Guarantees for and access to third-country transfers if applicable -- -- -- --
Retention periods or criteria for defining them After issue is finalised; up to 10 years depending on content After issue is finalised; up to 10 years depending on content Up to six months; or in some cases up to 10 years in the case of profit distribution After request is finalised
Obligation to provide personal data and consequences of not providing said data if applicable Mandatory data is marked with a ‘*’; failure to provide this data means that the service assistant cannot be used Mandatory data is marked with a ‘*’; failure to provide this data means that transport management is carried out outside of the Internet portal Mandatory data is marked with a ‘*’; failure to provide this data means that your opinion is not taken into account in the customer satisfaction survey and you are not included in the prize draw Data is not mandatory; failure to provide data means that no deliveries can be tracked online
Execution of revocation if applicable -- -- -- --
Data source Directly collected from use of service assistant Directly collected from registration form Directly collected from participation form Directly collected from input field

4.2. Integration of Third-party services, including cookies and similar technologies

We integrate third party services to enable you to use their functions, services and features. These integrated third-party services are designed and provided by the respective providers. We therefore have only limited influence over the design, content and function of these third-party services or the processing of personal data by their providers. Please contact the providers of the integrated services directly for more information.

We use cookies and similar technologies on our website in order to provide a comprehensive range of functions, to make the use of our website more comfortable and to be able to optimise our offers. Cookies are small text files that are generated by a web server and stored on your computer by means of the web browser used during the online visit.

On the one hand, we use so-called "session cookies". These are automatically deleted after the end of your browser session.

We also use long-term cookies, which are primarily used to provide you, as a visitor to our website, with permanently recurring settings. This enables us to adapt our website individually to your wishes. Long-term cookies also allow us to analyse the usage behaviour of visitors, but only within the scope of the cookie's validity period.

In addition, further cookies may also be set in connection with the integration of certain third-party services by their providers (so-called "third-party cookies").

If you do not wish cookies to be used, you can prevent cookies from being stored on your device by making the appropriate settings in your Internet browser or by making these settings in detail in the Cookie Center. Please note that the functionality and range of functions of our offer may be limited as a result. Furthermore, we will only set certain cookies if you have previously consented to this (see below). You can also make use of separate options to object to certain cookies (see below). For detailed information on the type, scope, purposes, legal grounds and options for objecting to data processing in connection with these cookies, please refer to the information in the table below.

Designation of cookies used

Details of the third party (contact details, type of responsibility, essential content of the joint-controller agreement, if applicable):
-

Data category(ies):
Cookie-ID

Purpose(s):
Storage of the selected station context for the delivery of context-based content.

Legal base(s):
The service is used on the basis of Section 25 (2) No. 2 TTDSG and is required for the ward finder / ward contact / pick-up times function.

The processing of personal data is based on Article 6 (1) (f) GDPR.

Legitimate interests pursued if applicable:
see purpose

Recipients or categories of recipients:
Contract processors, internal departments

Third country transfer (yes/no); If yes: adequacy decision, guarantees or relevant exemption provision:
no

Cookie validity / storage period:
Deletion after expiry of the session

Obligation to provide the personal data and, if applicable, consequences of not providing it:
No obligation to provide; automated collection when called up

Execution of revocation if applicable:
-

Data source:
Direct survey

Details of the third party (contact details, type of responsibility, essential content of the joint-controller agreement, if applicable):

Bing / Microsoft
Microsoft Ireland Operations Limited
One Microsoft Place
South County Business Park, Leopardstown
Dublin 18, D18 P521

https://advertise.bingads.microsoft.com/en-us/resources/policies/remarketing-in-paid-search-policies

Data category(ies):
User ID

Purpose(s):
Analysis in the form of user tracking via synchronisation of the ID in many Microsoft domains

Legal base(s):
The service is used on the basis of Section 25 (1) TTDSG.

Personal data is processed on the basis of Article 6 (1) (a) and (f) GDPR.

Legitimate interests pursued if applicable:
see purpose

Recipients or categories of recipients:
Internal departments, especially marketing, service providers

Third country transfer (yes/no); If yes: adequacy decision, guarantees or relevant exemption provision:
Yes, USA, standard data protection clauses.

Cookie validity / storage period:
1 year

Obligation to provide the personal data and, if applicable, consequences of not providing it:
No obligation to provide; non-provision leads to non-production of analyses.

Execution of revocation if applicable:
Opt-Out Cookie

Data source:
Direct survey

Details of the third party (contact details, type of responsibility, essential content of the joint-controller agreement, if applicable):
Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland

https://policies.google.com/privacy?hl=de

Data category(ies):
constant value (no personal data)

Purpose(s):
Analysis via Google Analytics; controlling the loading of a Google Analytics script tag

Legal base(s):
The service is used on the basis of Section 25 (1) TTDSG.

Legitimate interests pursued if applicable:
see purpose

Recipients or categories of recipients:
Order processors

Third country transfer (yes/no); If yes: adequacy decision, guarantees or relevant exemption provision:
Yes, USA, standard data protection clauses.

Cookie validity / storage period:
1 minute

Obligation to provide the personal data and, if applicable, consequences of not providing it:
No obligation to provide; non-provision leads to non-production of analyses.

Execution of revocation if applicable:
Opt-Out Cookie

Data source:
-

Details of the third party (contact details, type of responsibility, essential content of the joint-controller agreement, if applicable):
Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland

https://policies.google.com/privacy?hl=de

Data category(ies):
Browser information, usage data, IP address (IP masking, i.e. anonymised IP address is transmitted to Google).

Purpose(s):
Collection of statistics on the use of the website. (Reach measurement)

Legal base(s):
The service is used on the basis of Section 25 (1) TTDSG.

Personal data is processed on the basis of Article 6 (1) (a) and (f) GDPR.

Legitimate interests pursued if applicable:
see purpose

Recipients or categories of recipients:
Order processors, internal departments, especially marketing

Third country transfer (yes/no); If yes: adequacy decision, guarantees or relevant exemption provision:
Yes, USA, standard data protection clauses.

Cookie validity / storage period:
24 months

Obligation to provide the personal data and, if applicable, consequences of not providing it:
No obligation to provide; non-provision leads to non-production of analyses.

Execution of revocation if applicable:
Opt-Out Cookie

Data source:
Direct survey

Details of the third party (contact details, type of responsibility, essential content of the joint-controller agreement, if applicable):
Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland

https://policies.google.com/privacy?hl=de

Data category(ies):
Browser information, usage data, IP address (IP masking, i.e. anonymised IP address is transmitted to Google).

Purpose(s):
Measuring the success of offers on the website.

Legal base(s):
The service is used on the basis of Section 25 (1) TTDSG.

Personal data is processed on the basis of Article 6 (1) (a) and (f) GDPR.

Legitimate interests pursued if applicable:
see purpose

Recipients or categories of recipients:
Order processors, internal departments, especially marketing

Third country transfer (yes/no); If yes: adequacy decision, guarantees or relevant exemption provision:
Yes, USA, standard data protection clauses.

Cookie validity / storage period:
3 months

Obligation to provide the personal data and, if applicable, consequences of not providing it:
No obligation to provide; non-provision leads to non-production of analyses.

Execution of revocation if applicable:
Opt-Out Cookie

Data source:
Direct survey

Details of the third party (contact details, type of responsibility, essential content of the joint-controller agreement, if applicable):
Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland

https://policies.google.com/privacy?hl=de

Data category(ies):
Browser information, usage data, IP address (IP masking, i.e. anonymised IP address is transmitted to Google).

Purpose(s):
Collection of statistics on the use of the website (reach measurement). The statistics are analysed in order to improve the performance of the website and the user experience based on the findings.

Legal base(s):
The service is used on the basis of Section 25 (1) TTDSG.

Personal data is processed on the basis of Article 6 (1) (a) and (f) GDPR.

Legitimate interests pursued if applicable:
see purpose

Recipients or categories of recipients:
Order processors, internal departments, especially marketing

Third country transfer (yes/no); If yes: adequacy decision, guarantees or relevant exemption provision:
Yes, USA, standard data protection clauses.

Cookie validity / storage period:
24 hours

Obligation to provide the personal data and, if applicable, consequences of not providing it:
No obligation to provide; non-provision leads to non-production of analyses.

Execution of revocation if applicable:
Opt-Out Cookie

Data source:
Direct survey

Details of the third party (contact details, type of responsibility, essential content of the joint-controller agreement, if applicable):
Bing / Microsoft
Microsoft Ireland Operations Limited
One Microsoft Place
South County Business Park, Leopardstown
Dublin 18, D18 P521

https://advertise.bingads.microsoft.com/en-us/resources/policies/remarketing-in-paid-search-policies

Data category(ies):
User ID

Purpose(s):
Collecting data on visitor behaviour across multiple websites to present more relevant advertising and limit the number of advertisements

Legal base(s):
The service is used on the basis of Section 25 (1) TTDSG.

Personal data is processed on the basis of Article 6 (1) (a) and (f) GDPR.

Legitimate interests pursued if applicable:
see purpose

Recipients or categories of recipients:
Internal departments, especially marketing, service providers

Third country transfer (yes/no); If yes: adequacy decision, guarantees or relevant exemption provision:
Yes, USA, standard data protection clauses.

Cookie validity / storage period:
1 day

Obligation to provide the personal data and, if applicable, consequences of not providing it:
No obligation to provide; non-provision leads to non-production of analyses.

Execution of revocation if applicable:
Opt-Out Cookie

Data source:
Direct survey

Details of the third party (contact details, type of responsibility, essential content of the joint-controller agreement, if applicable):
Bing / Microsoft
Microsoft Ireland Operations Limited
One Microsoft Place
South County Business Park, Leopardstown
Dublin 18, D18 P521

https://advertise.bingads.microsoft.com/en-us/resources/policies/remarketing-in-paid-search-policies

Data category(ies):
User ID

Purpose(s):
Tracking visitors across multiple websites to present relevant advertising based on the visitor's preferences.

Legal base(s):
The service is used on the basis of Section 25 (1) TTDSG.

Personal data is processed on the basis of Article 6 (1) (a) and (f) GDPR.

Legitimate interests pursued if applicable:
-

Recipients or categories of recipients:
Internal departments, especially marketing, service providers

Third country transfer (yes/no); If yes: adequacy decision, guarantees or relevant exemption provision:
Yes, USA, standard data protection clauses.

Cookie validity / storage period:
1 year

Obligation to provide the personal data and, if applicable, consequences of not providing it:
No obligation to provide; non-provision leads to non-production of analyses.

Execution of revocation if applicable:
Opt-Out Cookie

Data source:
Direct survey

Details of the third party (contact details, type of responsibility, essential content of the joint-controller agreement, if applicable):
Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland

https://policies.google.com/privacy?hl=de

Data category(ies):
Website information, current date, whether agreed or not.

Purpose(s):
Storing a user's consent status to use different services from Google, as well as security checks and protection against login information fraud and unauthorised attacks.

Legal base(s):
The service is used on the basis of Section 25 (1) TTDSG.

Personal data is processed on the basis of Article 6 (1) (a) and (f) GDPR.

Legitimate interests pursued if applicable:
see purpose

Recipients or categories of recipients:
Order processors, internal departments, especially marketing

Third country transfer (yes/no); If yes: adequacy decision, guarantees or relevant exemption provision:
Yes, USA, standard data protection clauses.

Cookie validity / storage period:
2 years

Obligation to provide the personal data and, if applicable, consequences of not providing it:
No obligation to provide; non-provision leads to non-production of analyses.

Execution of revocation if applicable:
Opt-Out Cookie

Data source:
Direct survey

Details of the third party (contact details, type of responsibility, essential content of the joint-controller agreement, if applicable):
Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland

https://policies.google.com/privacy?hl=de

Data category(ies):
Visitor ID

Purpose(s):
Matching ads to Google searches; the cookie allows Google to remember the most frequent search queries or previous interactions with ads and thus display tailored ads.

To distinguish visitors.

Legal base(s):
The service is used on the basis of Section 25 (1) TTDSG.

Personal data is processed on the basis of Article 6 (1) (a) and (f) GDPR.

Legitimate interests pursued if applicable:
see purpose

Recipients or categories of recipients:
Order processors, internal departments, especially marketing

Third country transfer (yes/no); If yes: adequacy decision, guarantees or relevant exemption provision:
Yes, USA, standard data protection clauses.

Cookie validity / storage period:
6 months

Obligation to provide the personal data and, if applicable, consequences of not providing it:
No obligation to provide; non-provision leads to non-production of analyses.

Execution of revocation if applicable:
Opt-Out Cookie

Data source:
Direct survey

Details of the third party (contact details, type of responsibility, essential content of the joint-controller agreement, if applicable):
Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland

https://policies.google.com/privacy?hl=de

Data category(ies):
Ad clicks

Purpose(s):
Registration of the user's actions on the website after viewing or clicking on one of GO!'s advertisements and reporting; the purpose is to measure the effectiveness of an advertisement and to display targeted advertisements to the user.

Legal base(s):
The service is used on the basis of Section 25 (1) TTDSG.

Personal data is processed on the basis of Article 6 (1) (a) and (f) GDPR.

Legitimate interests pursued if applicable:
see purpose

Recipients or categories of recipients:
Order processors, internal departments, especially marketing

Third country transfer (yes/no); If yes: adequacy decision, guarantees or relevant exemption provision:
Yes, USA, standard data protection clauses.

Cookie validity / storage period:
365 days

Obligation to provide the personal data and, if applicable, consequences of not providing it:
No obligation to provide; non-provision results in user actions not being evaluated and processed for advertising purposes

Execution of revocation if applicable:
Opt-Out Cookie

Data source:
Direct survey

Details of the third party (contact details, type of responsibility, essential content of the joint-controller agreement, if applicable):
Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland

https://policies.google.com/privacy?hl=de

Data category(ies):
Collects website statistics and tracked conversion rates.

Purpose(s):
Collection of website usage statistics and measurement of conversions; purpose is to display relevant advertisements 

Legal base(s):
The service is used on the basis of Section 25 (1) TTDSG.

Personal data is processed on the basis of Article 6 (1) (a) and (f) GDPR.

Legitimate interests pursued if applicable:
see purpose

Recipients or categories of recipients:
Order processors, internal departments, especially marketing

Third country transfer (yes/no); If yes: adequacy decision, guarantees or relevant exemption provision:
Yes, USA, standard data protection clauses.

Cookie validity / storage period:
1 month

Obligation to provide the personal data and, if applicable, consequences of not providing it:
No obligation to provide; non-provision results in user actions not being evaluated and processed for advertising purposes

Execution of revocation if applicable:
Opt-Out Cookie

Data source:
Direct survey