Data Protection

Data Protection – Privacy policy for customers and suppliers

Information about the processing of your data
The MBS Group is committed to protecting the privacy of anyone whose personal information is processed by MBS. Therefore, we would like to follow our information obligations regarding the processing of your personal data.

The responsible data processor is:
MBS Speditionsgesellschaft mbH
Hansestr. 57
D- 51149 Cologne

Contact details of the data protection officer:
If you have any questions regarding the processing of your personal data and requests for correction, deletion, limitation of processing and data transmission, please contact our Group Data Protection Officer.

By e-mail: data-protection@mbscgn.de

By Post:
MBS Speditionsgesellschaft mbH
Data Protection Officer
Hansestr. 57
D- 51149 Cologne

Processing purposes and legal basis:
We process your personal data in compliance with the provisions of the EU Data Protection Basic Regulation (DS-GVO), the Federal Data Protection Act (BDSG) and all other relevant laws.

First and foremost, data processing serves to justify, implement and terminate the contractual relationship. The primary legal basis for this is Article 6 (1) (b) DS-GVO. The processing of your data is necessary for the fulfillment of a contract that includes the delivery of the goods and the payment obligation.
In addition, we also process your data on the basis of Article 6 (1) (f) DS-GVO for the protection of our legitimate interests or their third parties (for example, public authorities). This may be necessary, for example:

To maintain IT security and IT operations
For direct marketing of similar or similar products and services of MBS and companies affiliated with MBS, for example through e-shots, newsletters or customer satisfaction surveys. We are very interested in knowing if you were satisfied with the service we provided or what we can change in the future. Therefore, following the engagement interaction, we will contact a randomly selected group of customers using the contact details provided by you or your company.
For the prevention and clarification of criminal offenses
For purposes of corporate governance, internal communications and other administrative purposes. In addition, we process your data in individual cases on the basis of your separately given consent acc. 6 (1) (a), 7 DSGVO and to fulfill statutory obligations, such as regulatory requirements, commercial and fiscal retention obligations or documentation requirements. The legal basis for this is Art. 6 para. 1 c) DS-GVO in conjunction with the respective legal foundations.

If we process your personal data for a purpose not mentioned above, we will inform you in advance.

Data categories and data source:
We process the following categories of data: Master and address data (such as first name, last name, name addition, address), contact and communication data (such as telephone numbers and e-mail address), contract data and data from the contractual relationship (such as product interest, type of contract) , Claim data, payment information (bank details). As a rule, the data is collected directly from us within the framework of the pre-contractual relationship or during the business relationship, but may also have been transmitted to us by your company in individual cases. As far as the data processing is based on address purchases, we have checked their legality prior to acquisition and point out their origin. We also process personally identifiable information that we have legitimately gained from publicly available sources (such as professional networks).

Data Receiver:
Within our company and the MBS Group, only those persons who need them to fulfill our contractual and legal obligations receive the personal data. We may also pass the information you have provided to our retailers. However, this only happens if it is necessary to process your data for the intended purpose. In addition, we serve to fulfill our contractual and legal obligations to some different service providers. A list of the contractors and service providers we use, which are not just temporary business relationships, can be viewed on request. In addition, we may transfer your personal information to other recipients outside the Company to the extent necessary to fulfill your contractual and legal obligations as an employer. This can e.g. be:

• Authorities (eg financial and customs authorities, courts)
• Bank of the contracting party (SEPA payment medium)
• Assignees and credit bureaus
• Third party debtors and bailiffs in garnishment
• Liquidators

In order to process your data technically, MBS sometimes uses external service providers. We may transfer and process your information outside of the country of residence or in one of the countries in which MBS operates. These can also be located outside the European Economic Area. If we transfer personal data to service providers or affiliated companies outside the European Economic Area (EEA), the transfer will only take place if the EU Commission has been confirmed by the EU Commission to have an adequate level of data protection or other appropriate data protection safeguards (eg binding corporate privacy rules or EU standard contractual clauses). available. You can also request detailed information at the contact information above.

Duration of data storage
MBS will store your personal information only for as long as necessary for the above purposes. After termination of employment your personal data will be stored as long as we are legally obliged to do so. This is regularly the result of legal proof and retention obligations, which are regulated inter alia in the Commercial Code and the Tax Code. The storage periods are thereafter up to ten years. In addition, personal data may be stored for the period in which claims can be asserted against us (statutory limitation period of xxx or up to xxx years).

Rights and obligations of the persons concerned
If the legal prerequisites are met, you are entitled to the following rights under Art. 14 para. 2 lit c, 15 to 22 DS-GVO: Right to Information, Correction, Deletion, Limitation of Processing and Data Transferability.

Right to
You have the right to object to the processing of your personal data for direct marketing purposes without giving reasons. If we process your data in order to safeguard legitimate interests, you can object to this processing for reasons that arise from your particular situation. We will then no longer process your personal information unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims.

Right of appeal to the supervisory authority
You have the option of complaining to the above-mentioned Data Protection Officer or to a data protection supervisory authority

Privacy policy Newsletter
For the processing of your personal data the general data protection notice of MBS Speditionsgesellschaft mbH applies. As far as you use and/or have subscribed to our newsletter, the following notes apply additionally.

The data protection notice newsletter informs you about which personal data is collected when sending out the newsletter, for which purposes it is processed, when this data is deleted and on which legal basis this is done.

What data is collected and for what purpose is it processed?
If you register for a newsletter, we use your e-mail address to send you the respective newsletter, in which we regularly inform you about interesting products and services of the MBS Group. The legal basis for this is your consent in accordance with Art 6 Paragraph 1 lit. a DSGVO.

In order to ensure your proper registration for the newsletter, i.e. to prevent unauthorized registrations on behalf of third parties, we will send you a confirmation e-mail after your initial newsletter registration using the double opt-in procedure, in which we ask you to confirm your registration.

In connection with your newsletter registration, we will also store your registration data (e.g. email address, surname, first name, title, company name (if specified), date and time of registration/confirmation of opt-in) so that we can trace and prove your registration at a later date. The legal basis for this storage is a legitimate interest, Art 6 para. 1 lit f, Art 7 para. 1 DSGVO. The legitimate interest is based on the obligation to provide evidence of consent.

How long do we store your data?
We store your email address to send you the newsletter until you unsubscribe or we stop sending the newsletter to you. After unsubscribing from the newsletter, your registration data will be stored for up to 10 years, limited to the purpose of securing evidence.

How can I cancel the sending of the newsletter?
You can revoke your consent to receive the newsletter of MBS Speditionsgesellschaft mbH at any time by clicking on the unsubscribe link at the end of a received newsletter.

Transfer of your data
Your data will not be passed on to third parties.

Here you can view and change your cookie settings.

YouTube with expanded data protection integration
This website integrates videos from the YouTube website. The operator of the website is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit one of these websites on which YouTube is integrated, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

We use YouTube in extended data protection mode. According to YouTube, videos that are played in extended data protection mode are not used to personalize browsing on YouTube. Ads that are played in extended data protection mode are also not personalized. No cookies are set in extended data protection mode. Instead, so-called local storage elements are stored in the user’s browser, which contain personal data similar to cookies and can be used for recognition. Details on the extended data protection mode can be found here: https://support.google.com/youtube/answer/171780.

After activating a YouTube video, further data processing operations may be triggered over which we have no influence.

The use of YouTube is based on our interest in presenting our online content in an appealing manner. Pursuant to Art. 6(1)(f) GDPR, this is a legitimate interest. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

For more information on how YouTube handles user data, please consult the YouTube Data Privacy Policy under: https://policies.google.com/privacy?hl=en.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active