Data protection
Data protection
Data protection
When you use this service, SWMH Logistik GmbH processes your personal data. With this privacy policy, we inform you how and why we process your data and how we ensure that it remains confidential and protected.
We take data protection seriously: as a matter of principle, we only process personal data if this is necessary for the provision of a service or offer or if it is provided voluntarily by the user. We also use technical and operational security measures to protect personal data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. We regularly review and modernise these precautions.
If you have applied for a job with us, you will find the necessary data protection information here.
We collect the data that is generated when you access our digital offers automatically. Otherwise, we collect data based on your entries or messages or through the use of cookies or similar technologies.
Provision of digital services:
Product optimization:
Communication:
Advertising:for our own products
In order to use our digital services, it may be necessary to transfer certain personal data to third countries, i.e. countries where the GDPR does not apply. However, we only allow your data to be processed in a third country if the specific requirements of Art. 44 ff. GDPR are met and thus an adequate level of data protection is guaranteed in that country. This means that the third country must either have an adequacy decision by the European Commission or suitable safeguards in accordance with Art. 46 GDPR or one of the conditions of Art. 49 GDPR. Unless otherwise stated below, we use the currently valid [standard contractual clauses](https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/? uri=CELEX:32021D0914&from=DE “current version of the standard contractual clauses”) for the transfer of personal data to processors in third countries.
In order to protect your privacy and ensure a level of protection appropriate to the risk, we take technical and organizational measures in accordance with legal requirements, taking into account the state of the art, implementation costs, and the nature, scope, circumstances, and purposes of processing, as well as the varying likelihood and severity of threats to the rights and freedoms of natural persons. These measures ensure the confidentiality, integrity, availability, and resilience of your data. This includes, among other things, the use of recognized encryption methods (SSL or TLS) and pseudonymization.
However, we would like to point out that, due to the structure of the Internet, it is possible that the rules of data protection and the above-mentioned security measures may not be observed by other persons or institutions outside our area of responsibility. In particular, unencrypted data disclosed, e.g., by email, may be read by third parties. We have no technical influence on this.
We delete or anonymize your personal data as soon as it is no longer required for the purposes for which we collected or used it.
However, we may still need to store your data until the expiry of the retention obligations and periods imposed by the legislator or supervisory authorities, which may arise from the German Commercial Code, the German Fiscal Code, and the German Money Laundering Act (usually 6 to 10 years). In addition, we may retain your data until the expiry of the statutory limitation periods (i.e., usually 3 years, but in individual cases up to 30 years) if this is necessary for the assertion, exercise, or defense of legal claims. After that, the relevant data will be deleted.
You can contact the data protection officer with your request by mail or by email at swmh-datenschutz@atarax.de.
This privacy policy is updated from time to time. The date of the last update can be found at the beginning of this information.
You will find detailed data protection information below.
If cookies, device identifiers, or other personal data are stored or accessed on your device for processing purposes, this is done on one of the legal bases of Art. 6 GDPR.
In order to be able to provide the telemedia service you have expressly requested, we also take into account the provisions of Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG), in particular the requirement under Section 25 (2) No. 2 TDDDG.
You can find an overview of the technologies used under Privacy settings.
Cookies are text files that contain data from visited websites or domains and are stored by a browser on users' devices. A cookie primarily serves to store information about a user during or after their visit to an online offering. The stored information may include, for example, language settings on a website, login status, a shopping cart, or video interactions. The term “cookies” also includes other technologies that perform the same functions as cookies (e.g., when user information is stored using pseudonymous online identifiers, also known as “user IDs”).
There are the following types of cookies and functions:
When our offer is used, we automatically employ essential technologies and process the following information:
The collection of these logs and their temporary storage and processing are necessary to ensure system security and integrity (in particular to ward off and defend against attempts at attack or damage) and are carried out in accordance with our legitimate interest (§ 25 (2) No. 2 TDDDG, Art. 6 (1) f GDPR).
The storage period for this log data is usually seven days; for reliable detection of AI bots, it is 30 days. From this point on, this specific server log data is anonymized based on our legitimate interest in statistical evaluation to assess AI bots and their impact on our content (Art. 6 (1) f GDPR).
The legal basis for the aforementioned data processing is our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR.
The following tools and cookies are strictly necessary technologies, i.e., essential for providing our services as requested by the user.
The legal basis for the data processing described below is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.
To obtain and store your consent under data protection law, we use “CookieHint and Consent”. This is a Joomla! plugin for creating a consent banner on the website. The plugin also blocks all types of cookies and scripts on the website so that they are only activated after consent has been given.
The Google Tag Manager service is an organizational tool that enables us to control services. The tool only uses the IP address to establish a connection to the server and to function technically. Otherwise, no personal data is processed by the tool itself. Tag Manager ensures that other services are only executed if the conditions (tags) specified in Tag Manager are met. This allows us to ensure, for example, that tools requiring consent are only loaded after you have given your consent. Tag Manager does not access the data processed by the tools.
We use embeds, i.e., embedded content, to offer you interesting content. The respective embedding is carried out using a technical process known as framing. Framing involves simply inserting a provided HTML link into the code of a website to create a display frame on our pages, enabling the content stored on the servers of the third-party platform to be played.
This third-party content is displayed to you with your consent (Art. 6 (1) (a) GDPR).
Some of this content comes from social networks or other companies, including those in the USA. By integrating their content, cookies and similar technologies may be used by them and data may be transferred to them, including to the USA (e.g., your IP address, browser information, cookie ID, pixel ID, page accessed, date and time of access). Details on the integrated content of the individual networks or these companies, which is stored on their servers and for the provision of which your IP address is transmitted to these companies, as well as on the data processing carried out by these companies, which may also include advertising purposes, can be found in the following lines.
We use cookies and tracking tools to optimize our digital offerings based on your usage. To do this, we measure the development of reach and the use of content and functions, and use A/B testing to determine which variants users prefer.
We want to continuously develop and improve our products. To do this, we need to analyze usage. This serves to evaluate visitor traffic to our digital offerings and may include behavior, interests, or demographic information about visitors, such as age or gender, as pseudonymous values. With its help, we can see, for example, when our digital offerings are used most frequently or which functions are popular. This enables us to identify areas that need optimization.
In addition to usage analysis, we also use testing procedures to test different versions of our digital offerings or their components, for example, and to increase certain user actions or reactions if necessary.
For these purposes, profiles, i.e., data summarized for a usage process, are created and information is stored in a browser or on a terminal device and read from it. The information collected includes, in particular, websites visited and elements used there, as well as technical information such as the browser used, the computer system used, and information on usage times.
The IP addresses of users are also stored. We use an IP masking procedure (i.e., pseudonymization by shortening the IP address) for your protection. In general, no clear data of users (such as email addresses or names) is stored in the context of web analysis, A/B testing, and optimization, but rather pseudonyms, so that neither we nor the providers of the software used, who act as processors for us, know the actual identity of the users.
Google Analytics
We use Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to measure and analyze the use of our online offering on the basis of a pseudonymous user identification number. This identification number does not contain any unique data such as names or email addresses. It serves to assign analytics information to a device in order to determine which content users have accessed within one or more usage processes, which search terms they have used, whether they have accessed this content again, or how they have interacted with our online offering. The time and duration of use are also stored, as well as the sources of users who refer to our online offering and technical aspects of their end devices and browsers. In the process, pseudonymous profiles of users are created with information from the use of different devices, and cookies may be used.
Google Analytics does not log or store individual IP addresses for EU users. However, Analytics provides approximate geographic location data by deriving the following metadata from IP addresses: city (and the derived latitude and longitude of the city), continent, country, region, subcontinent (and ID-based counterparts). For EU traffic, IP address data is used exclusively for this derivation of geolocation data before it is immediately deleted. It is not logged, is not accessible, and is not used for any further purposes. When Google Analytics collects measurement data, all IP queries are carried out on EU-based servers before the traffic is forwarded to Analytics servers for processing. The retention period for the data is 14 months (this concerns data at user and event level). Aggregated data is anonymized and is not deleted.
Google is our processor, with whom we have concluded the agreements required for this purpose. We have also taken measures to ensure appropriate and adequate safeguards for the protection of personal data in the context of transfers to third countries by concluding EU standard contractual clauses and, where necessary, implementing additional measures to protect the rights of data subjects.
The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.
If you apply to us as a newspaper delivery person, we collect your data (e.g. first name, last name, email address, telephone number, where applicable address) if you provide it to us of your own accord. Your personal data will be used solely for processing your application.
Your personal data are processed in the context of the decision on the possible establishment of an employment relationship with you (§ 26 BDSG, Article 1 (1) sentence 1 (a), 88 GDPR) and where we are legally obliged to do so. Without the personal data, we cannot reach a decision on the establishment of an employment relationship with you and cannot fulfil statutory obligations. In individual cases, processing may also take place because the personal data are required for the assertion or defence of legal claims (so-called legitimate interests in the processing pursuant to Article 6 (1) (f) GDPR) or because you have given your consent (e.g. for further applications for other positions and/or positions at other companies). You may withdraw such consent at any time with effect for the future.
As a rule, we delete your personal data as soon as they are no longer required for the above-mentioned purposes, generally six months after completion of the application procedure, provided that no employment relationship is established and you have not authorised us to process the data for other applications. In individual cases, we store personal data where this is necessary in order to be able to assert or defend legal claims of the company (statutory limitation periods of up to 30 years).
In the case of unsolicited applications, by submitting your application you consent to your application being stored initially for a period of up to twelve months.
When you contact us, we only collect personal data (e.g. name, e-mail address, telephone number) if you provide it to us voluntarily. This information is expressly provided on a voluntary basis. The purpose of processing your data is to process and respond to your enquiry. This is also our legitimate interest in data processing in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR.
In the case of a telephone enquiry, your data will also be processed by telephone applications and in some cases also via a voice dialogue system in order to support us in the distribution and processing of enquiries.
We will delete your data that we have received in the course of contacting you as soon as your request has been fully processed and no further communication with you is required or requested by you.
If you contact us via WhatsApp, we process your data on the basis of your consent (Article 6 (1) sentence 1 (a) GDPR). We recommend that you only use WhatsApp if your query concerns general questions about working as a delivery person. We expressly advise you not to apply to us via WhatsApp, not to send us application documents via WhatsApp and not to communicate about your application via WhatsApp.
If you wish to use WhatsApp to contact us, we recommend that you provide us with an additional means of contact outside WhatsApp (e.g. telephone number, email address) so that we can respond to your enquiry in this way. Should you nevertheless expressly require a response via WhatsApp, we kindly ask you to let us know this explicitly and to take note of the following:
WhatsApp is a messaging service operated by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Like Facebook, WhatsApp belongs to Meta, headquartered at 1 Hacker Way, Menlo Park, California 94025, USA.
WhatsApp does not guarantee an adequate level of data protection, in particular for data in the context of an employment relationship or an application for an employment relationship. Due to the assumed transfer of data outside the European Union, the high European level of data protection generally does not apply. Possible risks that may not be completely excluded in connection with data transfers include, in particular:
In order to show you adverts for our own products, we use the services of advertising partners or cooperate with advertising partners and advertising networks (remarketing). These use cookies, pixels or similar technical means to display and analyse advertisements.
Adverts can be adapted to the respective user, for example by using information from the browser on usage (such as pages visited, visiting times, length of stay). User-specific adverts are also possible. In addition, analyses of reach or for billing purposes can be carried out in pseudonymised form. The details of the services used, co-operation partners and individual objection options are presented below.
The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.
You can obtain an overview of all the tools and cookies we use as well as a cancellation option by clicking on Data protection settings.
To draw attention to our offers, we place adverts in the Google search network and advertising banners in the Google display network (banners on third-party websites) and use the conversion measurement and remarketing of Google Ads and Analytics. We can combine adverts with search terms or use individual adverts to advertise products and services that you have viewed on our site. With Ads remarketing lists, we can optimise search and display campaigns if you have already visited our site. With conversion measurement, we see the success of interest-based advertising in the Google search network and advertising banners in the Google display network (banners on third-party websites) based on the analysis of user behaviour for more targeted advertising.
For this interest-based advertising, Google analyses your user behaviour with cookies that are set when you click on ads or visit our websites. We and Google then receive information that you have clicked on an advert and have been forwarded to us. Based on these evaluations, we can recognise which of the advertising measures used are particularly effective and can optimise them as a result.
The statistics that Google provides us with include the number of users who have clicked on one of our adverts and show which of our websites you have been redirected to. We can also target you more specifically if you have already visited our website. We can also track which search terms were clicked on particularly often and which adverts lead to the purchase of a subscription, for example.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: Through the integration of Ads Advertising, Google receives the information that you have called up the corresponding part of our website or clicked on an advert from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out your IP address and store it.
You can also find more information on this in the notes on website statistics and in the data protection provisions of Google.
You can prevent this technology by disabling the use of cookies via your browser settings, deselecting individual types of ads in Google's ad settings, disabling interest-based ads on Google or disabling cookies from advertising providers with the help of the respective deactivation help of the network advertising initiative. We and Google will then only receive statistical information on how many users have visited a page and when. This can only be prevented by appropriate browser extensions.
Our website uses Google Audience, a service provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google Audience uses, among other things, cookies that are stored on your computer as well as on other mobile devices (e.g. smartphones, tablets, etc.) and that enable an analysis of the use of the respective devices. The data are in part evaluated across devices. Google Audience gains access to the cookies that are created in the course of using Google AdWords and Google Analytics.
When the service is used, data such as, in particular, the IP address and user activities may be transmitted to a Google server and stored there. Google may transfer this information to third parties where this is required by law or where third parties process these data. You can prevent the collection and forwarding of personal data (in particular your IP address) as well as the processing of these data by deactivating the execution of JavaScript in your browser or by installing a tool such as “NoScript”.
You can furthermore prevent the collection by Google of the data generated by the Google cookie and relating to your use of the website (including your IP address) as well as the processing of these data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
Further information on data protection when using Google Audience can be found at the following link: https://support.google.com/analytics/answer/2700409?hl=en&ref_topic=2611283.
SWMH Logistik GmbH
Hultschiner Straße 8
D-81677 München
Germany
atarax group of companies
Luitpold-Maier-Str. 7
D-91074 Herzogenaurach
Germany
Phone: 09132 79800
Email: swmh-datenschutz@atarax.de.
Right to object
If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR or Art. 6 para. 1 sentence 1 lit. e) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR. In the event of such an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
In the case of direct marketing, you have the right to object at any time to the processing of personal data concerning you. If you object to processing for direct marketing purposes, the personal data will no longer be processed for these purposes.
Right to lodge a complaint with the supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority against the processing of your personal data if you feel that your rights under the GDPR have been violated. As a rule, you can contact the supervisory authority of your usual place of residence, your workplace or our company headquarters.
We link to websites of other providers or have integrated elements from them into our website. This data protection information does not apply to them - we have no influence on these sites and cannot check that others comply with the applicable data protection regulations.
We reserve the right to change or adapt this privacy policy at any time in compliance with the applicable data protection regulations.