Privacy policy GO! Express App
State: February 2022
We appreciate your interest in using our app GO! Express. Our top priority is to protect your personal data. Below you will find information on the processing of your personal data and your rights when using our app.
1. Controller
The data processing controller is:
GO! Express & Logistics Deutschland GmbH
Brühler Straße 9
53119 Bonn
Telephone: +49 228 24393-0
datenschutz@general-overnight.com
If, in addition, individual processing activities are the joint responsibility of other data controllers, please refer to the information on the respective processing described in Section 5 below for further information.
2. Data protection officer
You can reach our data protection officer at the following address:
Dr. Gregor Scheja
Scheja und Partner Rechtsanwälte mbB
Adenauerallee 136
D-53113 Bonn
Telephone: +49 228 2272260
https://www.scheja-partner.de/kontakt/kontakt.html
3. Your rights as a data subject
In accordance with the General Data Protection Regulation (GDPR), you have the following rights as a data subject, provided the relevant legal prerequisites are in place:
Access: You have the right to obtain confirmation about our processing of your personal data.
Rectification: You have the right to obtain the rectification of inaccurate personal data. You also have the right to have incomplete data completed.
Erasure: In certain cases, you have the right to have your personal data erased.
Restriction of processing: In certain circumstances, you have the right to obtain restriction of processing of your data.
Data portability: If you have provided us with data on the basis of a contract or consent, you have the right to obtain the data that you have provided in a structured, commonly used and machine-readable format. You also have the right to have this data transmitted to another controller.
Withdrawal of consent: If you have given us consent to process your data, you can withdraw this consent at any time with effect for the future. The lawfulness of the processing of your data remains unaffected by this until consent is withdrawn (opt out). In addition to opting out using the means outlined in the section entitled “Asserting your rights”, you can also do so in accordance with the relevant information in “Opting out” in the "Services and cookies" section.
Asserting your rights: To assert any of the above-mentioned rights, please contact us at datenschutz@general-overnight.com or by post at the address stated in clause 1. When doing so, please ensure that we can uniquely identify you.
Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a data protection authority, particularly in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data is unlawful.
4. Details on services, cookies, etc.
4.1. Own services
| Functionality | Description of the service | Log files |
| Data category | Date and time of access, duration of visit, type of device, operating system used, functions that you use, quantity of data sent, type of event, IP address, domain name | URL accessed, user’s IP address, time and date of access, quantity of data transferred, web page from which the user came to the requested page (“referrer”), web page that is accessed by the user’s system via our website, http status, information on the browser type and the version used, user’s Internet service provider |
| Purpose(s) | Provision of the service | Statistical analyses, Website improvement, System security (e.g. prevention of abuse), troubleshooting |
| Legal base(s) | Article 6 (1) (b) and (f) GDPR | Article 6 (1) (b) and (f) GDPR |
| If applicable, pursued legitimate interests | Technical functionality | See Purposes |
| Recipients or categories of recipients | Hosting providers, internal departments, external service providers for technical support | Hosting providers, internal departments, external service providers for technical support, state bodies on request |
| Third country transfer; adequacy decision (yes/no) | -- | -- |
| If applicable, guarantees for third country transfer and access option for this | -- | -- |
| Storage periods or criteria for determining such periods | Immediately after data has been provided by the web server | 7 days after creation |
| Obligation to provide personal data and, if applicable, consequences of failure to provide such data | No obligation to provide, automated collection by accessing the service | No obligation to provide, automated collection by accessing the service |
| If applicable, opting out | -- | -- |
| Source of the data | Collected directly when website/service is accessed | Collected directly when website/service is accessed |
| Functionality | GO! quick poll | Order tracking |
| Data category(ies) | First name and last name of participant, postcode, email address | Consignment note number (tracking number) |
| Purpose(s) | Customer satisfaction survey in order to improve service | Enable delivery tracking |
| Legal base(s) | Article 6(1)(c) and (f) of the GDPR | Article 6(1)(b) and (c) of the GDPR |
| Legitimate interests pursued if applicable | See purposes | -- |
| Recipients or categories of recipients | Internal departments |
Order processors used to process order tracking |
| Third-country transfer; adequacy decision (yes/no) | -- | -- |
| Guarantees for and access to third-country transfers if applicable | -- | -- |
| Retention periods or criteria for defining them | Up to six months; or in some cases up to 10 years in the case of profit distribution | After request is finalised |
| Obligation to provide personal data and consequences of not providing said data if applicable | Mandatory data is marked with a ‘*’; failure to provide this data means that your opinion is not taken into account in the customer satisfaction survey and you are not included in the prize draw | Data is not mandatory; failure to provide data means that no deliveries can be tracked online |
| Execution of revocation if applicable | -- | -- |
| Data source | Directly collected from participation form | Directly collected from input field |
4.2. Integration of third-party services
We integrate third-party services to allow you to use their functions, services and features. These integrated third-party services are designed and provided by the respective providers. We therefore have no influence over the design, content and function of these third-party services or their providers’ processing of personal data. Please contact the providers of the integrated services directly for more information.
Service:
YouTube videos
Provider/recipient:
YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (represented by Google LLC., Amphitheatre Parkway, Mountain View, CA 94043, USA)
Purpose:
To display YouTube videos
Legal grounds:
Article 6 (1) (f) GDPR
If applicable, pursued legitimate interests:
Facilitating the viewing of YouTube videos
Provider’s privacy policy:
https://policies.google.com/privacy?hl=en-GB&gl=en-GB
Other information:
The videos are embedded using YouTube's “privacy-enhanced mode”.
4.3. Cookies
We use cookies on general-overnight.com to provide an extensive range of functions, to make the website easier to use and to optimise our offerings. Cookies are small text files that are generated by a web server and stored on your computer by the web browser you are using during your online visit.
We use long-term cookies. This enables us to adapt our website to your individual requirements. Long-term cookies also allow us to analyse visitors’ usage behaviour via Google Analytics, but only for the period of time for which the cookies are valid.
If you do not wish cookies to be used, you can prevent them from being stored on your device by configuring the relevant settings in your web browser. Please note that the functionality and range of functions that we offer may be restricted as a result. Moreover, we will only set certain cookies on your device if you have consented to this in advance (see below). You can also avail of specific opt-out options for certain cookies (see below). Please refer to the following information for details on the type, scope, purposes, legal grounds and opt-out options vis-a-vis data processing in relation to these cookies.
4.3.1. First-party cookies
| Cookie name | Google Analytics / Google Firebase Tracking Cookie | Neos Session Cookie | Station Cookie |
| Person in charge | GO! Express & Logistics Deutschland GmbH | GO! Express & Logistics Deutschland GmbH | GO! Express & Logistics Deutschland GmbH |
| Designation | _track | Neos_Session |
go_application_station_context |
| Data category(ies) | Cookie ID, device / browser data, IP addresses, Website activities Automatically captured events: language, page_location, page_referrer, page_title, screen_resolution |
Cookie ID, website activity | Cookie ID |
| Purpose(s) | Analysis of usage for optimization purposes (Google Analytics) | Assignment of online activities of a single browser session to a user | Storage of the selected station context for delivery of context-based content |
| Legal base(s) | Article 6(1)(a) of the GDPR | Article 6(1)(b) and (f) of the GDPR | Article 6(1)(b) and (f) of the GDPR |
| Legitimate interests pursued if applicable | -- | See purposes | See purposes |
| Recipients or categories of recipients | Contract processors, internal departments, especially marketing | Contract processors, internal departments | Contract processors, internal departments |
| Third-country transfer; adequacy decision (yes/no) | USA; no | no | no |
| Guarantees for and access to third-country transfers if applicable | Standard contract clauses https://privacy.google.com/businesses/compliance | / | / |
| Retention periods or criteria for defining them | 6 months | Deletion at the end of the session | Deletion at the end of the session |
| Obligation to provide personal data and consequences of not providing said data if applicable | No obligation to provide | No obligation to provide; automated collection on demand | No obligation to provide; automated collection on demand |
| Execution of revocation if applicable | The revocation of consent can be exercised at any time via the app under the "More" tab | / | / |
| Data source | Direct survey on/after submission of consent | Direct survey when calling up the website | Direct survey when calling up the website |
4.3.2 Third party cookies
| Cookie name | Google Ads Conversion Tracking |
| Person in charge | GO! Express & Logistics Deutschland GmbH |
| Designation | gcl_aw; _gcl_dc |
| Data category(ies) | Each Adwords customer receives a different cookie. Cookies cannot therefore be traced via the websites of Adwords customers. The information collected using the conversion cookie is used to generate conversion statistics for Adwords customers who have opted for conversion tracking. Adwords customers learn the total number of users who clicked on their ad and were directed to a page tagged with a conversion tracking tag. However, you will not receive information that personally identifies users. |
| Purpose(s) | Analysis of usage for optimization purposes |
| Legal base(s) | Article 6(1)(a) of the GDPR |
| Legitimate interests pursued if applicable | / |
| Recipients or categories of recipients | Contract processors, internal departments, especially marketing |
| Third-country transfer; adequacy decision (yes/no) | USA; no |
| Guarantees for and access to third-country transfers if applicable | Standard contract clauses https://privacy.google.com/businesses/compliance |
| Retention periods or criteria for defining them | up to 360 days |
| Obligation to provide personal data and consequences of not providing said data if applicable | No obligation to provide |
| Execution of revocation if applicable | You may revoke your consent at any time by refusing to accept cookies (e.g. by setting your browser so that it does not automatically accept cookies) or Deactivation of cookies by browser setting that blocks cookies from the domain "www.googleadservices.com" (https://services.google.com/sitestats/de.html). |
| Data source | Direct survey on / after submission of consent |