Privacy policy GO! Express App

State: February 2022

We appreciate your interest in using our app GO! Express. Our top priority is to protect your personal data. Below you will find information on the processing of your personal data and your rights when using our app.

1. Controller

The data processing controller is:

GO! Express & Logistics Deutschland GmbH
Brühler Straße 9
53119 Bonn
Telephone: +49 228 24393-0
datenschutz@general-overnight.com

If, in addition, individual processing activities are the joint responsibility of other data controllers, please refer to the information on the respective processing described in Section 5 below for further information.

2. Data protection officer

You can reach our data protection officer at the following address:

Dr. Gregor Scheja
Scheja und Partner Rechtsanwälte mbB
Adenauerallee 136
D-53113 Bonn
Telephone: +49 228 2272260
https://www.scheja-partner.de/kontakt/kontakt.html

3. Your rights as a data subject

In accordance with the General Data Protection Regulation (GDPR), you have the following rights as a data subject, provided the relevant legal prerequisites are in place:

Access: You have the right to obtain confirmation about our processing of your personal data.

Rectification: You have the right to obtain the rectification of inaccurate personal data. You also have the right to have incomplete data completed.

Erasure: In certain cases, you have the right to have your personal data erased.

Restriction of processing: In certain circumstances, you have the right to obtain restriction of processing of your data.

Data portability: If you have provided us with data on the basis of a contract or consent, you have the right to obtain the data that you have provided in a structured, commonly used and machine-readable format. You also have the right to have this data transmitted to another controller.

Right to object

Withdrawal of consent: If you have given us consent to process your data, you can withdraw this consent at any time with effect for the future. The lawfulness of the processing of your data remains unaffected by this until consent is withdrawn (opt out). In addition to opting out using the means outlined in the section entitled “Asserting your rights”, you can also do so in accordance with the relevant information in “Opting out” in the "Services and cookies" section.

Asserting your rights: To assert any of the above-mentioned rights, please contact us at datenschutz@general-overnight.com or by post at the address stated in clause 1. When doing so, please ensure that we can uniquely identify you.

Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a data protection authority, particularly in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data is unlawful.

4. Details on services, cookies, etc.

4.1. Own services

Functionality	Description of the service	Log files
Data category	Date and time of access, duration of visit, type of device, operating system used, functions that you use, quantity of data sent, type of event, IP address, domain name	URL accessed, user’s IP address, time and date of access, quantity of data transferred, web page from which the user came to the requested page (“referrer”), web page that is accessed by the user’s system via our website, http status, information on the browser type and the version used, user’s Internet service provider
Purpose(s)	Provision of the service	Statistical analyses, Website improvement, System security (e.g. prevention of abuse), troubleshooting
Legal base(s)	Article 6 (1) (b) and (f) GDPR	Article 6 (1) (b) and (f) GDPR
If applicable, pursued legitimate interests	Technical functionality	See Purposes
Recipients or categories of recipients	Hosting providers, internal departments, external service providers for technical support	Hosting providers, internal departments, external service providers for technical support, state bodies on request
Third country transfer; adequacy decision (yes/no)	--	--
If applicable, guarantees for third country transfer and access option for this	--	--
Storage periods or criteria for determining such periods	Immediately after data has been provided by the web server	7 days after creation
Obligation to provide personal data and, if applicable, consequences of failure to provide such data	No obligation to provide, automated collection by accessing the service	No obligation to provide, automated collection by accessing the service
If applicable, opting out	--	--
Source of the data	Collected directly when website/service is accessed	Collected directly when website/service is accessed

Functionality	GO! quick poll	Order tracking
Data category(ies)	First name and last name of participant, postcode, email address	Consignment note number (tracking number)
Purpose(s)	Customer satisfaction survey in order to improve service	Enable delivery tracking
Legal base(s)	Article 6(1)(c) and (f) of the GDPR	Article 6(1)(b) and (c) of the GDPR
Legitimate interests pursued if applicable	See purposes	--
Recipients or categories of recipients	Internal departments	Order processors used to process order tracking
Third-country transfer; adequacy decision (yes/no)	--	--
Guarantees for and access to third-country transfers if applicable	--	--
Retention periods or criteria for defining them	Up to six months; or in some cases up to 10 years in the case of profit distribution	After request is finalised
Obligation to provide personal data and consequences of not providing said data if applicable	Mandatory data is marked with a ‘*’; failure to provide this data means that your opinion is not taken into account in the customer satisfaction survey and you are not included in the prize draw	Data is not mandatory; failure to provide data means that no deliveries can be tracked online
Execution of revocation if applicable	--	--
Data source	Directly collected from participation form	Directly collected from input field

4.2. Integration of third-party services

We integrate third-party services to allow you to use their functions, services and features. These integrated third-party services are designed and provided by the respective providers. We therefore have no influence over the design, content and function of these third-party services or their providers’ processing of personal data. Please contact the providers of the integrated services directly for more information.

Service:

YouTube videos

Provider/recipient:

YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (represented by Google LLC., Amphitheatre Parkway, Mountain View, CA 94043, USA)

Purpose:

To display YouTube videos

Legal grounds:

Article 6 (1) (f) GDPR

If applicable, pursued legitimate interests:

Facilitating the viewing of YouTube videos

Provider’s privacy policy:

https://policies.google.com/privacy?hl=en-GB&gl=en-GB

Other information:

The videos are embedded using YouTube's “privacy-enhanced mode”.

4.3. Cookies

We use cookies on general-overnight.com to provide an extensive range of functions, to make the website easier to use and to optimise our offerings. Cookies are small text files that are generated by a web server and stored on your computer by the web browser you are using during your online visit.

We use long-term cookies. This enables us to adapt our website to your individual requirements. Long-term cookies also allow us to analyse visitors’ usage behaviour via Google Analytics, but only for the period of time for which the cookies are valid.

If you do not wish cookies to be used, you can prevent them from being stored on your device by configuring the relevant settings in your web browser. Please note that the functionality and range of functions that we offer may be restricted as a result. Moreover, we will only set certain cookies on your device if you have consented to this in advance (see below). You can also avail of specific opt-out options for certain cookies (see below). Please refer to the following information for details on the type, scope, purposes, legal grounds and opt-out options vis-a-vis data processing in relation to these cookies.

4.3.1. First-party cookies

Cookie name	Google Analytics / Google Firebase Tracking Cookie	Neos Session Cookie	Station Cookie
Person in charge	GO! Express & Logistics Deutschland GmbH	GO! Express & Logistics Deutschland GmbH	GO! Express & Logistics Deutschland GmbH
Designation	_track	Neos_Session	go_application_station_context
Data category(ies)	Cookie ID, device / browser data, IP addresses, Website activities Automatically captured events: language, page_location, page_referrer, page_title, screen_resolution	Cookie ID, website activity	Cookie ID
Purpose(s)	Analysis of usage for optimization purposes (Google Analytics)	Assignment of online activities of a single browser session to a user	Storage of the selected station context for delivery of context-based content
Legal base(s)	Article 6(1)(a) of the GDPR	Article 6(1)(b) and (f) of the GDPR	Article 6(1)(b) and (f) of the GDPR
Legitimate interests pursued if applicable	--	See purposes	See purposes
Recipients or categories of recipients	Contract processors, internal departments, especially marketing	Contract processors, internal departments	Contract processors, internal departments
Third-country transfer; adequacy decision (yes/no)	USA; no	no	no
Guarantees for and access to third-country transfers if applicable	Standard contract clauses https://privacy.google.com/businesses/compliance	/	/
Retention periods or criteria for defining them	6 months	Deletion at the end of the session	Deletion at the end of the session
Obligation to provide personal data and consequences of not providing said data if applicable	No obligation to provide	No obligation to provide; automated collection on demand	No obligation to provide; automated collection on demand
Execution of revocation if applicable	The revocation of consent can be exercised at any time via the app under the "More" tab	/	/
Data source	Direct survey on/after submission of consent	Direct survey when calling up the website	Direct survey when calling up the website

4.3.2 Third party cookies

Cookie name	Google Ads Conversion Tracking
Person in charge	GO! Express & Logistics Deutschland GmbH
Designation	gcl_aw; _gcl_dc
Data category(ies)	Each Adwords customer receives a different cookie. Cookies cannot therefore be traced via the websites of Adwords customers. The information collected using the conversion cookie is used to generate conversion statistics for Adwords customers who have opted for conversion tracking. Adwords customers learn the total number of users who clicked on their ad and were directed to a page tagged with a conversion tracking tag. However, you will not receive information that personally identifies users.
Purpose(s)	Analysis of usage for optimization purposes
Legal base(s)	Article 6(1)(a) of the GDPR
Legitimate interests pursued if applicable	/
Recipients or categories of recipients	Contract processors, internal departments, especially marketing
Third-country transfer; adequacy decision (yes/no)	USA; no
Guarantees for and access to third-country transfers if applicable	Standard contract clauses https://privacy.google.com/businesses/compliance
Retention periods or criteria for defining them	up to 360 days
Obligation to provide personal data and consequences of not providing said data if applicable	No obligation to provide
Execution of revocation if applicable	You may revoke your consent at any time by refusing to accept cookies (e.g. by setting your browser so that it does not automatically accept cookies) or Deactivation of cookies by browser setting that blocks cookies from the domain "www.googleadservices.com" (https://services.google.com/sitestats/de.html).
Data source	Direct survey on / after submission of consent