Principle:
We hereby inform you pursuant to Art. 13, 14 and 21 GDPR about the processing of your personal data and your rights in this regard. Which data is processed in detail and how it is used depends largely on the requested or agreed services.

1. RESPONSIBLE BODY WITHIN THE MEANING OF DATA PROTECTION LAW
NGL Navigator Global Logistics GmbH
Lohstrasse 33
D-85445 Schwaig
Tel.: 08122 – 18779-0
E-Mail: info@ngl-germany.eu

2. Contact data of our data protection officer
Our data protection officer will be happy to provide you with information or suggestions on the subject of data protection:

Dominik Fünkner

PROLIANCE GmbH
Datenschutzbeauftragter
Leopoldstr. 21
80802 München
Email: datenschutzbeauftragter@datenschutzexperte.de
Website: www.datenschutzexperte.de

3. PURPOSES AND LEGAL BASIS OF PROCESSING
We process your personal data in accordance with the provisions of the European Data Protection Basic Regulation (GDPR) and the Federal Data Protection Act (Bundesdatenschutzgesetz BDSG) for the purpose of establishing, implementing and fulfilling the contract and for implementing pre-contractual measures. Insofar as the disclosure of personal data is required for the initiation or execution of contractual relationships or in the context of the execution of pre-contractual measures, processing Art. 6 para. 1 lit. b GDPR is lawful.

If you expressly consent to the processing of personal data for certain purposes (e.g. passing on data to third parties, evaluation of data for marketing purposes, advertising), the lawfulness of this processing is given on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR. Any consent given can be revoked at any time (see section 9 of this data protection information). Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected by this.

As far as necessary and legally permissible, we process your data beyond the actual contractual purposes to fulfil legal obligations (Art. 6 para. 1 lit. c GDPR). In addition, processing may be carried out by us or third parties to safeguard legitimate interests (Art. 6 para. 1 lit. f GDPR); we will inform you of this separately, stating the legitimate interest, insofar as this is prescribed by law.

4. CATEGORIES OF PERSONAL DATA
We process data that is related to the contract reasons or the pre-contractual measures. This can be general data on your person or persons of your company (such as name, address and contact data) as well as any other data that you transmit to us within the framework of the conclusion of the contract.

5. Web form for requesting an offer
A web form is provided on our website, through which you can contact us to request a free quote for our services by email. The transmission of personal data via the web form is specially encrypted. If you make use of this possibility, the data entered in the input mask will be transmitted to us and stored. These data are: freight type, departure city of delivery, destination city of delivery, trading conditions, weight (kg), dimensions, emails & messages. At the time the message is sent, the following data will also be stored: date and time. The data will not be passed on to third parties in this context. The data will be processed exclusively within the scope of the specified purpose – to send an offer.

Your personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. The personal data collected in order to obtain an offer will be deleted as soon as the offer has been sent and a prompt contact with you has taken place or was unsuccessful. A continued processing takes place only, if it is necessary in the context of a resulting initiation and completion of a contract and/or for the fulfilment of resulting contractual purposes.

6. DATA RECIPIENTS
We pass on your personal data within our company exclusively to those departments that need this data to fulfil their contractual and legal obligations or to implement our legitimate interest. We may transfer your personal data to companies affiliated with us insofar as this is permissible within the framework of the purposes and legal bases set out in Section 3 of this Privacy Policy. Your personal data will be processed on our behalf on the basis of order processing contracts in accordance with Art. 28 GDPR. In these cases, we ensure that the processing of personal data is carried out in accordance with the General Data Protection Regulation. The categories of recipients in this case are host providers and providers of customer management systems and software.

Data will otherwise only be passed on to recipients outside the company if this is permitted or required by law, if it is necessary for the processing of the contract or, at your request, for the implementation of pre-contractual measures, if you have given your consent or if we are authorized to provide information. Under these conditions, recipients of personal data may be, for example:

• Public bodies and institutions (e.g. public prosecutor’s office, police, supervisory authorities, tax office) where there is a legal or official obligation.
• Recipients to whom the transfer is directly necessary in order to establish or fulfil the contract, such as shipping companies, airlines, transshipment companies, logistics service providers and agents. During a credit check, we pass on company data to Creditsafe.
• Other data recipients may be those for whom you have given us your consent for data transmission.

7. TRANSFER TO A THIRD COUNTRY
Personal data will only be transferred to countries outside the EEA (European Economic Area) or to an international organization if this is necessary for the performance of the contract or, at your request, for the implementation of pre-contractual measures, if the transfer is required by law or if you have given us your consent. In such cases, the recipients may include local agents, shipping companies, airlines and other logistics service providers as part of our order processing.

8. DURATION OF DATA STORAGE
If necessary, we process and store your personal data for the duration of our business relationship, which includes, for example, the initiation and execution of a contract or for the fulfilment of contractual purposes. In addition, we are subject to various storage and documentation obligations, including those arising from the German Commercial Code (Handelsgesetzbuch HGB) and the Fiscal Code (Abgabenordnung AO). The time limits for storage and documentation specified there are between two and ten years. Finally, the storage period is also assessed according to the statutory limitation periods, which, for example, according to §§ 195 et seq. of the German Civil Code (Bürgerlichen Gesetzbuches BGB), can generally be three years, but in certain cases also up to thirty years.

9. YOUR RIGHTS
Every data subject has the right to information pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR, the right to notification pursuant to Art. 19 GDPR and the right to data portability pursuant to Art. 20 GDPR.

In addition, you have the right to appeal to a data protection supervisory authority pursuant to Art. 77 GDPR if you are of the opinion that the processing of your personal data is not lawful. The right of appeal shall be without prejudice to any other administrative or judicial remedy. If the processing of data is based on your consent, you are deemed to be in accordance with Art. 7 ABS. 3 GDPR and are entitled to revoke your consent to the use of your personal data at any time with effect for the future. Please note that we may need to retain certain data for a period of time to comply with legal requirements.

Right of objection:
If the processing of personal data concerning you is carried out on the basis of Art. 6 para. 1 lit. f GDPR in order to safeguard legitimate interests, you have the right pursuant to Art. 21 GDPR to object to the processing of such data at any time for reasons arising from your particular situation. We will then no longer process this personal data unless we can prove compelling reasons for processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

10. NECESSITY OF PROVIDING PERSONAL DATA
As a rule, the provision of personal data for the purpose of establishing or fulfilling a contract or for implementing pre-contractual measures is neither required by law nor by contract. You are therefore not obliged to provide the personal data. However, the provision of personal data is usually necessary for the decision to conclude a contract, for the performance of a contract or for pre-contractual measures. They should and must always only provide personal data that is necessary for the conclusion of the contract, the performance of the contract or pre-contractual measures. If you do not provide us with any personal data, we may not be able to make a decision within the framework of contractual measures.

11. AUTOMATED DECISION MAKING
In principle, we do not use fully automated decision-making pursuant to Art. 22 GDPR for the establishment or implementation of the business relationship or for pre-contractual measures. Should we use these procedures in individual cases, we will inform you of this separately or obtain your consent if this is required by law. To protect your rights, you can contact us at any time at the above data.

12. Definitions
Our privacy policy should be simple and understandable for everyone. As a rule, the data protection declaration uses the official terms of the General Data Protection Regulation (GDPR). The official definitions are explained in Art. 4 GDPR.

13. Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us.

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of accessing computer
• Time of server request

The data collected is used only for statistical purposes and to improve the website. However, the website operator reserves the right to subsequently check the server log files if there are concrete indications of illegal use.

14. Google – general notes
For more information about data processing by Google, please refer to Google’s privacy policy. You can also change your settings in their privacy centre so that you can manage and protect your data. For more information about Google’s use of data for advertising purposes, preferences and opt-out options, please visit Google’s webpages at: https://support.google.com/analytics/answer/6004245?hl=en (“Google’s Privacy Policy”) https://www.google.com/intl/de/policies/privacy/partners/ (“Google’s use of data when you use the websites or apps of our partners”), http://www.google.com/policies/technologies/ads (“Google’s use of data for advertising purposes”), http://www.google.de/settings/ads (“Manage information Google uses to display advertisements”) and http://www.google.com/ads/preferences/ (“Determine which advertisements Google displays to you”).

15. Google Analytics
“This website uses Google Analytics, a web analytics service provided by Google, Inc. (Google) Google Analytics uses cookies, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google Inc. under any circumstances. You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above”.

We only use Google Analytics with IP anonymization enabled. This means that the IP address of the user is abbreviated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area, which means that a personal reference can be excluded. Google Inc., headquartered in the USA, is certified for the US-European Privacy Shield Agreement, which ensures compliance with the data protection level applicable in the EU. Processing takes place in accordance with Art. 6 para. 1 lit. f GDPR or § 15 para. 3 TMG on the basis of our legitimate interest in the statistical analysis of user behaviour for optimization and marketing purposes.

16. Browser add-on to disable Google Analytics
The Google Analytics opt-out browser add-on gives website visitors more control over what information Google Analytics collects about the websites they visit. The add-on informs the Google Analytics JavaScript (ga.js) that no information about the website visit should be transmitted to Google Analytics. If you want to use this feature, download the add-on and install it for your current web browser. The browser add-on to disable Google Analytics is available for Internet Explorer, Google Chrome, Mozilla Firefox Apple Safari and Opera.

Link: Browser-Add-onClick

17. Privacy policy for the use of Google Maps
This website uses Google Maps API to visually display geographic information. When Google Maps is used, Google also collects, processes and uses data on the use of the Maps functions by visitors to the websites. The Google Maps Terms of Use can be found at http://www.google.com/intl/de_en/help/terms_maps.html (“Google Maps Terms of Use”). You automatically consent to the collection, processing and use of automated data by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, its agents and third parties when you use this website.

Information on data protection regarding our processing of customer and interested party data in accordance with Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)

May 2018

Dear business partner,
We hereby inform you pursuant to Art. 13, 14 and 21 GDPR about the processing of your personal data and your rights in this regard. Which data is processed in detail and how it is used depends largely on the requested or agreed services.

1. RESPONSIBLE WITH REFERENCE TO THE OF DATA PROTECTION LAW
NGL Navigator Global Logistics GmbH
Lohstrasse 33
D – 85445 Schwaig
Germany
Phone: +49(0)8122 – 18779 – 0
Email: info@ngl-germany.eu

2. CONTACT DETAILS OF OUR DATA PROTECTION OFFICER
Dominik Fünkner
datenschutzbeauftragter@datenschutzexperte.de

3. PURPOSES AND LEGAL BASIS OF PROCESSING
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (Bundesdatenschutgesetz, BDSG) for the purpose of establishing, implementing and fulfilling contracts and for implementing pre-contractual measures. Insofar as the disclosure of information is required for the initiation or implementation of contractual relationships or in the context of the implementation of pre-contractual measures, Art. 6 para. 1 lit. b GDPR is legally binding.

If you expressly consent to the processing of personal data for certain purposes (e.g. passing on data to third parties, evaluation of data for marketing purposes, advertising), the lawfulness of this processing is given on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR. Any consent given can be revoked at any time (see section 9 of this data protection information). Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected by this.

As far as necessary and legally permissible, we process your data beyond the actual contractual purposes to fulfil legal obligations (Art. 6 para. 1 lit. c GDPR).

In addition, processing may be carried out by us or third parties to safeguard legitimate interests (Art. 6 para. 1 lit. f GDPR); we will inform you of this separately, stating the legitimate interest, insofar as this is prescribed by law.

4. CATEGORIES OF PERSONAL DATA
We process data that are related to the performance of the contract or the pre-contractual measures. This can be general data concerning your person or persons of your company (such as name, address and contact data) as well as any other data that you transmit to us within the framework of the conclusion of the contract.

5. CONTACT VIA INTERNET PRESENCE
We process personal data which we receive from you in the course of establishing contact or establishing the contractual relationship or in the course of pre-contractual measures or which you send to us through our contact form and offer form via our website.

6. RECIPIENTS OF DATA
We pass on your personal data within our company exclusively to those departments that need this data to fulfil their contractual and legal obligations or to implement our legitimate interest. We may transfer your personal data to companies affiliated with us insofar as this is permissible within the framework of the purposes and legal bases set out in Section 3 of this Privacy Information.

Your personal data will be processed on our behalf on the basis of order processing contracts in accordance with Art. 28 GDPR. In these cases, we ensure that the processing of personal data is carried out in accordance with the General Data Protection Regulation. The categories of recipients in this case are host providers as well as providers of customer management systems and software.

Data will otherwise only be passed on to recipients outside the company if this is permitted or required by law, if it is necessary for the processing of the contract or, at your request, for the implementation of pre-contractual measures, if you have given your consent or if we are authorized to provide information. Under these conditions, recipients of personal data may be, for example:

• Public bodies and institutions (e.g. public prosecutor’s office, police, supervisory authorities, tax office) where there is a legal or official obligation.

• Recipients to whom the transfer is directly necessary in order to establish or fulfil the contract, such as shipping companies, airlines, handling companies, logistics service providers and agents. We pass on company data to Creditsafe for credit checks.
Other data recipients may be those for whom you have given us your consent for data transmission.

7. TRANSFER TO A THIRD COUNTRY
Transfer of personal data to countries outside the EEA (European Economic Area) or to an international organization shall only take place to the extent that this is necessary for the processing and thus the fulfilment of the contract or, at your request, for the implementation of pre-contractual measures, the disclosure is required by law or you have given us your consent. In such cases, the recipients may include local agents, shipping companies, airlines and other logistics service providers as part of our order processing.

8. DURATION OF DATA STORAGE
If necessary, we process and store your personal data for the duration of our business relationship, which includes, for example, the initiation and execution of a contract or for the fulfilment of contractual purposes.

In addition, we are subject to various storage and documentation obligations arising from the German Commercial Code (Handelsgesetzbuch HGB) and the German Fiscal Code (Abgabenordnung AO). The time limits for storage and documentation specified there are between two and ten years.

Finally, the storage period is also assessed according to the statutory limitation periods, which, for example, according to §§ 195 et seq. of the German Civil Code (Bürgerliches Gesetzbuch BGB), can generally be three years, but in certain cases also up to thirty years.

9. YOUR RIGHTS
Every data subject has the right to information pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR, the right to notification pursuant to Art. 19 GDPR and the right for data portability pursuant to Art. 20 GDPR. In addition, you have the right to appeal to a data protection supervisory authority pursuant to Art. 77 GDPR if you are of the opinion that the processing of your personal data is not lawful. The right of appeal shall be without prejudice to any other administrative or judicial remedy. If the processing of data is based on your consent, you are entitled pursuant to Art. 7 GDPR to revoke your consent to the use of your personal data at any time with effect for the future. Please note that we may need to retain certain data for a period of time to comply with legal requirements.

Right of objection:
Insofar as the processing of personal data concerning you is carried out on the basis of Art. 6 para. 1 lit. f GDPR for the protection of legitimate interests, you have, in accordance with Art. 21 GDPR, the right to object to the processing of your data at any time for reasons arising from your particular situation. We will then no longer process this personal data unless we can prove compelling reasons for the processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

10. NECESSITY OF PROVIDING PERSONAL DATA
As a rule, the provision of personal data for the purpose of establishing or fulfilling a contract or for implementing pre-contractual measures is neither required by law nor by contract. You are therefore not obliged to provide any personal data. However, the provision of personal data is usually necessary for the decision to conclude a contract, for the performance of a contract or for pre-contractual measures.
You should at all times provide only such personal data as is necessary for the conclusion of the contract, the performance of the contract or pre-contractual measures. If you do not provide us with any personal data, we may not be able to make a decision within the framework of any contractual measures.

11. AUTOMATED DECISION MAKING
In principle, we do not use fully automated decision-making pursuant to Art. 22 GDPR for the establishment or implementation of the business relationship or for pre-contractual measures. If we should use these procedures in individual cases, we will inform you about it separately or obtain your consent if this is required by law.

You can contact us at any time at the above data contact in order to protect your rights.

With kind regards
NGL Navigator Global Logistics GmbH