Principle:
We hereby inform you pursuant to Art. 13, 14 and 21 GDPR about the processing of your personal data and your rights in this regard. Which data is processed in detail and how it is used depends largely on the requested or agreed services.

1. RESPONSIBLE BODY WITHIN THE MEANING OF DATA PROTECTION LAW
NGL Navigator Global Logistics GmbH
Lohstrasse 33
D-85445 Schwaig
Tel.: 08122 – 18779-0
E-Mail: info@ngl-germany.eu

2. Contact data of our data protection officer
Our data protection officer will be happy to provide you with information or suggestions on the subject of data protection:

Dominik Fünkner

PROLIANCE GmbH
Datenschutzbeauftragter
Leopoldstr. 21
80802 München
Email: datenschutzbeauftragter@datenschutzexperte.de
Website: www.datenschutzexperte.de

3. PURPOSES AND LEGAL BASIS OF PROCESSING
We process your personal data in accordance with the provisions of the European Data Protection Basic Regulation (GDPR) and the Federal Data Protection Act (Bundesdatenschutzgesetz BDSG) for the purpose of establishing, implementing and fulfilling the contract and for implementing pre-contractual measures. Insofar as the disclosure of personal data is required for the initiation or execution of contractual relationships or in the context of the execution of pre-contractual measures, processing Art. 6 para. 1 lit. b GDPR is lawful.

If you expressly consent to the processing of personal data for certain purposes (e.g. passing on data to third parties, evaluation of data for marketing purposes, advertising), the lawfulness of this processing is given on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR. Any consent given can be revoked at any time (see section 9 of this data protection information). Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected by this.

As far as necessary and legally permissible, we process your data beyond the actual contractual purposes to fulfil legal obligations (Art. 6 para. 1 lit. c GDPR). In addition, processing may be carried out by us or third parties to safeguard legitimate interests (Art. 6 para. 1 lit. f GDPR); we will inform you of this separately, stating the legitimate interest, insofar as this is prescribed by law.

4. CATEGORIES OF PERSONAL DATA
We process data that is related to the contract reasons or the pre-contractual measures. This can be general data on your person or persons of your company (such as name, address and contact data) as well as any other data that you transmit to us within the framework of the conclusion of the contract.

5. Web form for requesting an offer
A web form is provided on our website, through which you can contact us to request a free quote for our services by email. The transmission of personal data via the web form is specially encrypted. If you make use of this possibility, the data entered in the input mask will be transmitted to us and stored. These data are: freight type, departure city of delivery, destination city of delivery, trading conditions, weight (kg), dimensions, emails & messages. At the time the message is sent, the following data will also be stored: date and time. The data will not be passed on to third parties in this context. The data will be processed exclusively within the scope of the specified purpose – to send an offer.

Your personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. The personal data collected in order to obtain an offer will be deleted as soon as the offer has been sent and a prompt contact with you has taken place or was unsuccessful. A continued processing takes place only, if it is necessary in the context of a resulting initiation and completion of a contract and/or for the fulfilment of resulting contractual purposes.

6. DATA RECIPIENTS
We pass on your personal data within our company exclusively to those departments that need this data to fulfil their contractual and legal obligations or to implement our legitimate interest. We may transfer your personal data to companies affiliated with us insofar as this is permissible within the framework of the purposes and legal bases set out in Section 3 of this Privacy Policy. Your personal data will be processed on our behalf on the basis of order processing contracts in accordance with Art. 28 GDPR. In these cases, we ensure that the processing of personal data is carried out in accordance with the General Data Protection Regulation. The categories of recipients in this case are host providers and providers of customer management systems and software.

Data will otherwise only be passed on to recipients outside the company if this is permitted or required by law, if it is necessary for the processing of the contract or, at your request, for the implementation of pre-contractual measures, if you have given your consent or if we are authorized to provide information. Under these conditions, recipients of personal data may be, for example:

• Public bodies and institutions (e.g. public prosecutor’s office, police, supervisory authorities, tax office) where there is a legal or official obligation.
• Recipients to whom the transfer is directly necessary in order to establish or fulfil the contract, such as shipping companies, airlines, transshipment companies, logistics service providers and agents. During a credit check, we pass on company data to Creditsafe.
• Other data recipients may be those for whom you have given us your consent for data transmission.

7. TRANSFER TO A THIRD COUNTRY
Personal data will only be transferred to countries outside the EEA (European Economic Area) or to an international organization if this is necessary for the performance of the contract or, at your request, for the implementation of pre-contractual measures, if the transfer is required by law or if you have given us your consent. In such cases, the recipients may include local agents, shipping companies, airlines and other logistics service providers as part of our order processing.

8. DURATION OF DATA STORAGE
If necessary, we process and store your personal data for the duration of our business relationship, which includes, for example, the initiation and execution of a contract or for the fulfilment of contractual purposes. In addition, we are subject to various storage and documentation obligations, including those arising from the German Commercial Code (Handelsgesetzbuch HGB) and the Fiscal Code (Abgabenordnung AO). The time limits for storage and documentation specified there are between two and ten years. Finally, the storage period is also assessed according to the statutory limitation periods, which, for example, according to §§ 195 et seq. of the German Civil Code (Bürgerlichen Gesetzbuches BGB), can generally be three years, but in certain cases also up to thirty years.

9. YOUR RIGHTS
Every data subject has the right to information pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR, the right to notification pursuant to Art. 19 GDPR and the right to data portability pursuant to Art. 20 GDPR.

In addition, you have the right to appeal to a data protection supervisory authority pursuant to Art. 77 GDPR if you are of the opinion that the processing of your personal data is not lawful. The right of appeal shall be without prejudice to any other administrative or judicial remedy. If the processing of data is based on your consent, you are deemed to be in accordance with Art. 7 ABS. 3 GDPR and are entitled to revoke your consent to the use of your personal data at any time with effect for the future. Please note that we may need to retain certain data for a period of time to comply with legal requirements.

Right of objection:
If the processing of personal data concerning you is carried out on the basis of Art. 6 para. 1 lit. f GDPR in order to safeguard legitimate interests, you have the right pursuant to Art. 21 GDPR to object to the processing of such data at any time for reasons arising from your particular situation. We will then no longer process this personal data unless we can prove compelling reasons for processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

10. NECESSITY OF PROVIDING PERSONAL DATA
As a rule, the provision of personal data for the purpose of establishing or fulfilling a contract or for implementing pre-contractual measures is neither required by law nor by contract. You are therefore not obliged to provide the personal data. However, the provision of personal data is usually necessary for the decision to conclude a contract, for the performance of a contract or for pre-contractual measures. They should and must always only provide personal data that is necessary for the conclusion of the contract, the performance of the contract or pre-contractual measures. If you do not provide us with any personal data, we may not be able to make a decision within the framework of contractual measures.

11. AUTOMATED DECISION MAKING
In principle, we do not use fully automated decision-making pursuant to Art. 22 GDPR for the establishment or implementation of the business relationship or for pre-contractual measures. Should we use these procedures in individual cases, we will inform you of this separately or obtain your consent if this is required by law. To protect your rights, you can contact us at any time at the above data.

12. Definitions
Our privacy policy should be simple and understandable for everyone. As a rule, the data protection declaration uses the official terms of the General Data Protection Regulation (GDPR). The official definitions are explained in Art. 4 GDPR.

13. Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us.

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of accessing computer
• Time of server request

The data collected is used only for statistical purposes and to improve the website. However, the website operator reserves the right to subsequently check the server log files if there are concrete indications of illegal use.

14. Google – general notes
For more information about data processing by Google, please refer to Google’s privacy policy. You can also change your settings in their privacy centre so that you can manage and protect your data. For more information about Google’s use of data for advertising purposes, preferences and opt-out options, please visit Google’s webpages at: https://support.google.com/analytics/answer/6004245?hl=en (“Google’s Privacy Policy”) https://www.google.com/intl/de/policies/privacy/partners/ (“Google’s use of data when you use the websites or apps of our partners”), http://www.google.com/policies/technologies/ads (“Google’s use of data for advertising purposes”), http://www.google.de/settings/ads (“Manage information Google uses to display advertisements”) and http://www.google.com/ads/preferences/ (“Determine which advertisements Google displays to you”).

15. Google Analytics
“This website uses Google Analytics, a web analytics service provided by Google, Inc. (Google) Google Analytics uses cookies, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google Inc. under any circumstances. You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above”.

We only use Google Analytics with IP anonymization enabled. This means that the IP address of the user is abbreviated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area, which means that a personal reference can be excluded. Google Inc., headquartered in the USA, is certified for the US-European Privacy Shield Agreement, which ensures compliance with the data protection level applicable in the EU. Processing takes place in accordance with Art. 6 para. 1 lit. f GDPR or § 15 para. 3 TMG on the basis of our legitimate interest in the statistical analysis of user behaviour for optimization and marketing purposes.

16. Browser add-on to disable Google Analytics
The Google Analytics opt-out browser add-on gives website visitors more control over what information Google Analytics collects about the websites they visit. The add-on informs the Google Analytics JavaScript (ga.js) that no information about the website visit should be transmitted to Google Analytics. If you want to use this feature, download the add-on and install it for your current web browser. The browser add-on to disable Google Analytics is available for Internet Explorer, Google Chrome, Mozilla Firefox Apple Safari and Opera.

Link: Browser-Add-onClick

17. Data protection declaration for the use of Google Maps
This website uses Google Maps API to display geographic information visually. When using Google Maps, Google also collects, processes and uses data about the use of the Maps functions by visitors to the website. The Google Maps Terms of Use can be found at http://www.google.com/intl/de_de/help/terms_maps.html (“Google Maps Terms of Use”). You automatically agree to the collection, processing and use of the automatically collected data by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, its representatives and third parties when you use this website.

Google Re/Marketing Services
We use the marketing and remarketing services (“Google Marketing Services” for short) of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), (“Google”). The Google marketing services allow us to display advertisements for and on our website in a more targeted manner in order to only present users with advertisements that potentially match their interests. If, for example, a user is shown ads for products that he was interested in on other websites, this is referred to as “remarketing”. For these purposes, when our and other websites on which Google marketing services are active are accessed, Google executes a code directly and so-called (re)marketing tags (invisible graphics or code, also known as “web referred to as “beacons”) integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user’s device (comparable technologies can also be used instead of cookies). The cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file notes which websites the user visits, what content he is interested in and which offers he clicked on, as well as technical information on the browser and operating system, referring websites, visiting times and other information on the use of the online offer. The IP address of the user is also recorded, whereby we inform Google Analytics that the IP address is shortened within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases completely to a transferred to the Google server in the USA and shortened there. The IP address is not merged with the user’s data within other Google offers. The above information can also be combined by Google with such information from other sources. If the user then visits other websites, the ads tailored to his interests can be displayed to him. The external services Google User Content googleusercontent.com and sedo Domain Parking sedoparking.com from Sedo GmbH are loaded on our website for the optimal presentation of content.

User data is processed pseudonymously as part of Google Marketing Services. This means that Google does not store and process, for example, the name or e-mail address of the user, but processes the relevant data in relation to cookies within pseudonymous user profiles. This means that from Google’s point of view, the ads are not managed and displayed for a specifically identified person, but for the cookie owner, regardless of who this cookie owner is. This does not apply if a user has expressly allowed Google to process the data without this pseudonymization. The information collected by Google Marketing Services about users is transmitted to Google and stored on Google’s servers in the USA. The Google marketing services we use include the online advertising program “Google AdWords”. In the case of Google AdWords, each AdWords customer receives a different “conversion cookie”. This means that cookies cannot be tracked via the websites of AdWords customers. The information obtained with the help of the cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.

We can integrate third-party advertisements based on the Google marketing service “DoubleClick”. DoubleClick uses cookies that enable Google and its partner websites to serve ads based on users’ visits to this website and other websites on the Internet. We can include third-party advertisements based on the Google marketing service “AdSense”. AdSense uses cookies to enable Google and its partner websites to serve ads based on users’ visits to this website and other websites on the Internet.

We can also use the “Google Optimizer” service. Google Optimizer allows us to understand the effects of various changes on a website (e.g. changes to the input fields, the design, etc.) as part of so-called “A/B testing”. For these test purposes, cookies are stored on the users’ devices. Only pseudonymous user data is processed. We also use the “Google Tag Manager” to integrate and manage the Google analysis and marketing services on our website.

For more information on how Google uses data for marketing purposes, see the overview page: https://policies.google.com/technologies/ads, Google’s privacy policy is at https://policies.google.com/privacy
If you wish to object to interest-based advertising by Google Marketing Services, you can use the setting and opt-out options provided by Google: https://adssettings.google.com/authenticated.

Google Tag Manager
We use the service called Google Tag Manager from Google. “Google” is a group of companies and consists of the companies Google Ireland Ltd. (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA and other affiliated companies of Google LLC. The Google Tag Manager is an auxiliary service and only processes personal data for technically necessary purposes. The Google Tag Manager ensures that other components are loaded, which in turn may collect data. The Google Tag Manager does not access this data.

For more information about Google Tag Manager, see Google’s privacy policy. Please note that American authorities, such as secret services, could possibly gain access to personal data due to American laws such as the Cloud Act, which is inevitably exchanged with Google due to the Internet Protocol (TCP) when this service is integrated.

Google Photos (ggpht.com)
A web service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland (hereinafter: ggpht.com) is loaded on our website.
We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to ggpht.com. The legal basis for data processing is Article 6 Paragraph 1 Letter f GDPR. The legitimate interest consists in an error-free function of the website. If a corresponding consent has been requested, the processing takes place exclusively on the basis of Article 6 (1) (a) GDPR; the consent can be revoked at any time.

The data will be deleted as soon as the purpose of their collection has been fulfilled. Further information on the handling of the transmitted data can be found in the data protection declaration of ggpht.com: https://www.google.com/intl/de/policies/privacy/.

You can prevent ggpht.com from collecting and processing your data by deactivating the execution of script code in your browser or by installing a script blocker in your browser (you can find these at www.noscript.net or www. ghostery.com)

YouTube
Our website uses plugins from the Google-operated YouTube site. The site operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. A connection to the YouTube servers is automatically established when you visit one of our pages equipped with a YouTube plugin. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. This can be prevented by logging out of your YouTube account.
Further information on the handling of user data can be found in YouTube’s data protection declaration at: https://www.google.de/intl/de/policies/privacy.

18. Cookies and cookie banners (ULTIMATE GDPR & CCPA plugin)
We use so-called cookies on various pages of our online offer in order to make the use of our website more comfortable and to enable the use of certain functions. Cookies are small text files that are placed on your device and saved by your browser. Most of the cookies we use are so-called “session cookies”. They are automatically deleted after your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit. You can also set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general or activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of our website may be restricted. When accessing the website, the ULTIMATE GDPR & CCPA cookie banner appears. This was developed by the company createIT. The cookie banner is controlled by the ULTIMATE GDPR & CCPA plugin from createIT.

Information on data protection regarding our processing of customer and interested party data in accordance with Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)

May 2018

Dear business partner,
We hereby inform you pursuant to Art. 13, 14 and 21 GDPR about the processing of your personal data and your rights in this regard. Which data is processed in detail and how it is used depends largely on the requested or agreed services.

1. RESPONSIBLE WITH REFERENCE TO THE OF DATA PROTECTION LAW
NGL Navigator Global Logistics GmbH
Lohstrasse 33
D – 85445 Schwaig
Germany
Phone: +49(0)8122 – 18779 – 0
Email: info@ngl-germany.eu

2. CONTACT DETAILS OF OUR DATA PROTECTION OFFICER
Dominik Fünkner
datenschutzbeauftragter@datenschutzexperte.de

3. PURPOSES AND LEGAL BASIS OF PROCESSING
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (Bundesdatenschutgesetz, BDSG) for the purpose of establishing, implementing and fulfilling contracts and for implementing pre-contractual measures. Insofar as the disclosure of information is required for the initiation or implementation of contractual relationships or in the context of the implementation of pre-contractual measures, Art. 6 para. 1 lit. b GDPR is legally binding.

If you expressly consent to the processing of personal data for certain purposes (e.g. passing on data to third parties, evaluation of data for marketing purposes, advertising), the lawfulness of this processing is given on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR. Any consent given can be revoked at any time (see section 9 of this data protection information). Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected by this.

As far as necessary and legally permissible, we process your data beyond the actual contractual purposes to fulfil legal obligations (Art. 6 para. 1 lit. c GDPR).

In addition, processing may be carried out by us or third parties to safeguard legitimate interests (Art. 6 para. 1 lit. f GDPR); we will inform you of this separately, stating the legitimate interest, insofar as this is prescribed by law.

4. CATEGORIES OF PERSONAL DATA
We process data that are related to the performance of the contract or the pre-contractual measures. This can be general data concerning your person or persons of your company (such as name, address and contact data) as well as any other data that you transmit to us within the framework of the conclusion of the contract.

5. CONTACT VIA INTERNET PRESENCE
We process personal data which we receive from you in the course of establishing contact or establishing the contractual relationship or in the course of pre-contractual measures or which you send to us through our contact form and offer form via our website.

6. RECIPIENTS OF DATA
We pass on your personal data within our company exclusively to those departments that need this data to fulfil their contractual and legal obligations or to implement our legitimate interest. We may transfer your personal data to companies affiliated with us insofar as this is permissible within the framework of the purposes and legal bases set out in Section 3 of this Privacy Information.

Your personal data will be processed on our behalf on the basis of order processing contracts in accordance with Art. 28 GDPR. In these cases, we ensure that the processing of personal data is carried out in accordance with the General Data Protection Regulation. The categories of recipients in this case are host providers as well as providers of customer management systems and software.

Data will otherwise only be passed on to recipients outside the company if this is permitted or required by law, if it is necessary for the processing of the contract or, at your request, for the implementation of pre-contractual measures, if you have given your consent or if we are authorized to provide information. Under these conditions, recipients of personal data may be, for example:

• Public bodies and institutions (e.g. public prosecutor’s office, police, supervisory authorities, tax office) where there is a legal or official obligation.

• Recipients to whom the transfer is directly necessary in order to establish or fulfil the contract, such as shipping companies, airlines, handling companies, logistics service providers and agents. We pass on company data to Creditsafe for credit checks.
Other data recipients may be those for whom you have given us your consent for data transmission.

7. TRANSFER TO A THIRD COUNTRY
Transfer of personal data to countries outside the EEA (European Economic Area) or to an international organization shall only take place to the extent that this is necessary for the processing and thus the fulfilment of the contract or, at your request, for the implementation of pre-contractual measures, the disclosure is required by law or you have given us your consent. In such cases, the recipients may include local agents, shipping companies, airlines and other logistics service providers as part of our order processing.

8. DURATION OF DATA STORAGE
If necessary, we process and store your personal data for the duration of our business relationship, which includes, for example, the initiation and execution of a contract or for the fulfilment of contractual purposes.

In addition, we are subject to various storage and documentation obligations arising from the German Commercial Code (Handelsgesetzbuch HGB) and the German Fiscal Code (Abgabenordnung AO). The time limits for storage and documentation specified there are between two and ten years.

Finally, the storage period is also assessed according to the statutory limitation periods, which, for example, according to §§ 195 et seq. of the German Civil Code (Bürgerliches Gesetzbuch BGB), can generally be three years, but in certain cases also up to thirty years.

9. YOUR RIGHTS
Every data subject has the right to information pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR, the right to notification pursuant to Art. 19 GDPR and the right for data portability pursuant to Art. 20 GDPR. In addition, you have the right to appeal to a data protection supervisory authority pursuant to Art. 77 GDPR if you are of the opinion that the processing of your personal data is not lawful. The right of appeal shall be without prejudice to any other administrative or judicial remedy. If the processing of data is based on your consent, you are entitled pursuant to Art. 7 GDPR to revoke your consent to the use of your personal data at any time with effect for the future. Please note that we may need to retain certain data for a period of time to comply with legal requirements.

Right of objection:
Insofar as the processing of personal data concerning you is carried out on the basis of Art. 6 para. 1 lit. f GDPR for the protection of legitimate interests, you have, in accordance with Art. 21 GDPR, the right to object to the processing of your data at any time for reasons arising from your particular situation. We will then no longer process this personal data unless we can prove compelling reasons for the processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

10. NECESSITY OF PROVIDING PERSONAL DATA
As a rule, the provision of personal data for the purpose of establishing or fulfilling a contract or for implementing pre-contractual measures is neither required by law nor by contract. You are therefore not obliged to provide any personal data. However, the provision of personal data is usually necessary for the decision to conclude a contract, for the performance of a contract or for pre-contractual measures.
You should at all times provide only such personal data as is necessary for the conclusion of the contract, the performance of the contract or pre-contractual measures. If you do not provide us with any personal data, we may not be able to make a decision within the framework of any contractual measures.

11. AUTOMATED DECISION MAKING
In principle, we do not use fully automated decision-making pursuant to Art. 22 GDPR for the establishment or implementation of the business relationship or for pre-contractual measures. If we should use these procedures in individual cases, we will inform you about it separately or obtain your consent if this is required by law.

You can contact us at any time at the above data contact in order to protect your rights.

With kind regards
NGL Navigator Global Logistics GmbH