The controller responsible for the processing of personal data on this website is:
Grassl & Co GmbH Internationale Spedition
Fabrikstraße 16
73230 Kirchheim unter Teck
Germany
Phone: +49 7021 7243-0
Email: info@grasslsped.de
We have appointed an external Data Protection Officer. You may contact him at:
D3 Datenschutz UG (haftungsbeschränkt) – Nico Villing
Hauptstraße 106/108, 78549 Spaichingen, Germany
Phone: +49 (0) 7424 603 939 0
Email: grassl@d3-datenschutz.de
For any inquiries regarding data protection, please direct your request preferably to the contact address mentioned above.
We process personal data only to the extent necessary to provide our website, process inquiries, perform pre-contractual measures, provide our transport, freight forwarding, logistics, customs, warehousing, insurance, and other services, communicate with customers, business partners, and interested parties, conduct application procedures, or to fulfill legal obligations.
Personal data includes all information relating to an identified or identifiable natural person. This includes, for example, names, contact details, communication data, IP addresses, usage data, contract and order data, shipping and recipient data, billing data, application data, or other information processed in the course of using our website or our services.
Data processing is primarily carried out on the basis of the following legal grounds:
Art. 6 (1) (a) GDPR: Where you have provided us with your consent, for example for optional cookies, analysis or marketing services, external media, or inclusion in an applicant or talent pool.
Art. 6 (1) (b) GDPR: Where processing is necessary for the performance of a contract or to take steps at the request of the data subject prior to entering into a contract, for example, inquiries regarding transport and logistics services, preparation of quotations, order processing, communication with customers, or job applications.
Art. 6 (1) (c) GDPR: Where we are legally obligated to process data, for example, due to commercial, tax, customs, transport, foreign trade, or other legal retention and documentation requirements.
Art. 6 (1) (f) GDPR: Where processing is necessary to safeguard our legitimate interests or those of a third party, provided that your interests, fundamental rights, and freedoms do not prevail. Our legitimate interests include the secure operation of the website, processing general inquiries, the organization and traceability of transport and logistics processes, IT security, prevention of abuse, internal documentation, the establishment, exercise, or defense of legal claims, as well as communication with customers, prospects, and business partners.
Regarding the storage of information on your end device or access to information on your end device, Section 25 of the TDDDG (German Telecommunications-Telemedia Data Protection Act) applies in addition. Where consent is required for this, the use of such cookies or comparable technologies occurs only after your prior consent. Technically necessary storage or access occurs without consent, provided it is necessary to provide the expressly requested website functionality.
As a rule, we store personal data only as long as it is necessary for the respective processing purposes. The decisive factors are, in particular, the duration of the processing of your inquiry, the execution of a contract or order, legal retention obligations, as well as any existing interests in proof, documentation, and legal enforcement.
Where legal retention obligations exist, particularly under commercial, tax, customs, transport, or foreign trade law, we store the data concerned for the duration of the respective statutory periods. In this case, further storage is based on Art. 6 (1) (c) GDPR.
Furthermore, personal data may be stored where this is necessary on a case-by-case basis for the establishment, exercise, or defense of legal claims. The legal basis for this is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the protection and enforcement of our legal interests.
Once the respective processing purpose has ceased to exist, statutory retention periods have expired, or legitimate interests in storage no longer apply, the data will be erased, provided no further legal basis for storage exists.
When accessing our website, technically necessary data is processed to ensure the website can be displayed, operated stably, and protected against attacks. This may include, in particular, the following data:
IP address, date and time of access, page or file accessed, amount of data transferred, browser type and version, operating system, referrer URL, host name of the accessing computer, status messages, error codes, and other technical connection data.
Processing is carried out to provide the website, ensure technical stability, IT security, error analysis, and prevent abuse or attacks.
The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the secure, functional, and stable operation of our website.
Server log files are generally stored only as long as necessary for the aforementioned purposes. Longer storage may occur if required to investigate security incidents, abuse, or attacks.
Our website is operated and provided with the support of technical service providers. In this context, personal data may be processed that is generated when visiting and using the website. This includes, in particular, server log data, IP addresses, technical connection data, and content submitted via forms or other website functions.
The processing is carried out for the provision, secure operation, technical maintenance, and further development of our website.
The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure, stable, and efficient operation of our website.
Where service providers process personal data on our behalf, we conclude data processing agreements with them pursuant to Art. 28 GDPR.
Our service providers include, in particular:
Our website uses cookies and similar technologies. Cookies are small text files stored on your device. Similar technologies may include, for example, Local Storage, Session Storage, pixels, tags, scripts, or other technical identifiers.
We distinguish between technically necessary services and optional services.
Technically necessary cookies and similar technologies are required to ensure that the website and its basic functions can be provided properly. These may include functions for session management, security, language settings, form functions, and storing your privacy preferences. These are used on the basis of Section 25 para. 2 TDDDG. The subsequent processing of personal data is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure, stable, and user-friendly operation of the website.
Optional services, in particular analytics, marketing, tracking, external media, mapping, social media, or other third-party services, are only used if you have given your prior consent. The legal basis is Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TDDDG.
You may withdraw your consent at any time with effect for the future or change your selection. We provide an option on the website to adjust your cookie and privacy settings.
The cookies and similar technologies actually used, including the provider, purpose, category, and storage period, should be displayed in the cookie layer or in the cookie settings accessible there.
We use Real Cookie Banner to manage and document your cookie and privacy preferences. In this context, technical information is stored on your device to record your consent decision and take it into account during subsequent visits to the website. The storage of this information is necessary to technically implement and properly manage your selection.
Our website may use technically necessary cookies or similar technologies to provide certain basic functions. These include, in particular, the technical delivery of the website, security functions, form functions, the storage of your cookie settings, and the storage of a selected language version.
If a language preference is stored via the website, this serves to display the website in your preferred language. In particular, the selected language may be processed or stored on your device. For this purpose, we use the “Polylang” plugin on our website.
Where the processing is necessary to provide the website function requested by you, it is based on Section 25 para. 2 TDDDG. The subsequent processing of personal data is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in providing our multilingual website in a user-friendly and functional manner.
Where analytics, marketing, or third-party services are used on our website, the following data may be processed depending on the service: IP address, device and browser information, usage data, interaction data, referrer URL, technical identifiers, cookie IDs, or comparable information.
Depending on their implementation, such services are used in particular to analyze website usage, improve our content, measure reach, measure the success of marketing activities, integrate external content, or provide additional functions.
Optional services are only used on the basis of your consent. The legal basis is Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TDDDG. You may withdraw your consent at any time with effect for the future.
The specific services used, providers, purposes, legal bases, storage periods, and any transfers to third countries must be reviewed based on the actual website implementation and supplemented in the final version.
Google services may be used on our website. The provider is generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Depending on the service, processing may also be carried out by Google LLC in the USA or by other Google entities.
Google services may be used in particular for the technical management of website functions, the display of external content, analysis of website usage, the integration of maps, or other functions. This may involve the processing of IP addresses, device and browser information, technical connection data, usage data, cookie information, and other technical identifiers.
Where Google services are not technically necessary, they are only loaded after you have given your prior consent. The legal basis is Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TDDDG. You may withdraw your consent at any time with effect for the future.
Google reCAPTCHA
Google reCAPTCHA is used on our website to protect forms against automated submissions, spam, and misuse.
Google reCAPTCHA is only activated on our website after you have given your consent. Until consent has been provided, the service is not loaded.
When using the service, in particular the IP address, browser and device information, technical connection data, and other information required to identify automated access may be transmitted to and processed by Google.
The legal basis for activating the service is your consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TDDDG.
Google Maps
Google Maps is used on our contact page to display our location and/or provide a mapping function.
Google Maps is only activated on our website after you have given your consent. Until consent has been provided, the map is not loaded by Google. Instead, a notice is displayed allowing you to open the cookie or privacy settings and provide your consent.
When Google Maps is activated, the IP address, device and browser information, location and/or usage information, and technical data may be transmitted to and processed by Google.
The legal basis for activating the service is your consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TDDDG.
Google Fonts
We use Google Fonts to display fonts. However, the fonts used are hosted locally on our own server. When you access our website, no connection to Google servers is therefore established to retrieve the fonts.
Due to the local integration of Google Fonts, no personal data of website visitors is transmitted to Google for the purpose of providing the fonts. Consent is therefore not required for the use of locally hosted fonts.
If you contact us via the contact form, by email, by telephone, or by any other means, we process the data you provide in order to handle your inquiry. We use Contact Form 7 to provide our contact and service request forms. The data entered into the form is processed for the purpose of transmitting your inquiry.
This may include, in particular, the following data:
Name, company, telephone number, email address, subject, message, requested service, communication content, date and time of the inquiry, technical metadata, and any other information you voluntarily provide to us.
Mandatory information is limited to the data required to process your inquiry. All other information is voluntary.
Depending on the content of your inquiry, the processing is based on Art. 6 para. 1 lit. b GDPR where your inquiry is related to a contract or pre-contractual measures. This is particularly the case if you request information about our services, ask for a quotation, or submit a specific transport, logistics, customs, warehousing, or insurance inquiry.
For general inquiries, the processing is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the proper processing and response to incoming inquiries and in communication with prospective customers, customers, and business partners.
The data processed as part of contacting us will be deleted once the inquiry has been conclusively dealt with and provided that there are no statutory retention obligations or legitimate interests requiring further storage.
Note regarding the design of the contact form: Instead of requiring consent to the privacy policy, the form should merely provide for confirmation that the privacy information has been acknowledged, for example: “I have read and acknowledged the privacy notice.” Consent to the privacy policy is generally not required to process a contact inquiry.
When you contact us regarding our services or submit a concrete inquiry, we process personal data to handle your inquiry, prepare quotations, communicate with you, and, where applicable, prepare a contract.
This concerns, in particular, inquiries in connection with national and international transport, road transport, air freight, sea freight, rail transport, intermodal and multimodal transport, national distribution, part-load and container transport, e-commerce logistics, warehousing, contract logistics, spare parts logistics, temperature-controlled transport, hazardous goods transport, customs clearance, international freight, insurance services, and other transport or logistics-related services.
Data processed may include, in particular:
Name and contact details of contact persons, company data, communication data, inquiry content, desired service, pickup and delivery locations, information regarding goods, shipments, freight, quantity, weight, volume, packaging, hazardous goods, temperature requirements, delivery deadlines, customs status, transport relations, insurance requirements, as well as other information required for the review and processing of the inquiry.
Processing is carried out to handle the inquiry, check feasibility, prepare quotations, calculate costs, coordinate with internal departments, and, where applicable, prepare a contract.
The legal basis is Art. 6 (1) (b) GDPR, provided the inquiry is aimed at concluding a contract or pre-contractual measures. Where processing is additionally necessary for internal organization, documentation, or tracking, it may also be based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in the proper handling and documentation of inquiries from customers, prospects, and business partners.
When we provide transport, freight forwarding, logistics, warehousing, customs, or other related services, we process personal data to the extent necessary for the execution, management, documentation, and invoicing of the respective service.
This may include data from customers, clients, senders, recipients, suppliers, drivers, contact persons at business partners, service providers, subcontractors, authorities, and other persons involved in the provision of the service.
This may include, in particular, the following data:
Name, business contact details, company affiliation, function, communication data, order data, transport data, shipment data, pickup and delivery addresses, recipient and sender data, goods and freight data, customs and export data, freight documents, proof of delivery, vehicle data, license plate information, driver information, route and scheduling data, status information, complaint data, billing and payment data, contract data, as well as other data necessary for the execution and documentation of the respective service.
Processing is carried out in particular for the following purposes:
Processing and execution of transport and logistics orders, scheduling and operational control, coordination with customers, recipients, carriers, subcontractors, and other involved parties, preparation and processing of transport and freight documents, customs and export processing, shipment tracking, proof of service provision, handling of inquiries, complaints, damages, or service disruptions, billing, accounting, fulfillment of legal obligations, as well as the establishment, exercise, or defense of legal claims.
The legal basis is Art. 6 (1) (b) GDPR, provided processing is necessary for the performance of a contract. Where legal obligations exist, particularly under commercial, tax, customs, transport, or foreign trade law, Art. 6 (1) (c) GDPR is the legal basis. Furthermore, processing may be based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in the proper, secure, and traceable execution of our transport, freight forwarding, and logistics services as well as in the documentation and enforcement of our legal interests.
Where we provide information on transport-related insurance in connection with transport and logistics services, handle insurance inquiries, or coordinate insurance services within the scope of a concrete order, personal data may be processed.
This may concern, in particular, information on clients, contact persons, transported goods, value of goods, transport routes, insurance claims, complaints, insurance requirements, contract and communication data, as well as other information required for processing.
Processing is carried out to handle corresponding inquiries, coordinate with insurers or insurance partners, document the desired coverage, handle insurance claims, as well as safeguard legal interests.
The legal basis is Art. 6 (1) (b) GDPR, provided processing is necessary for the performance of a contract or pre-contractual measures. Where legal obligations exist, processing is based on Art. 6 (1) (c) GDPR. Furthermore, Art. 6 (1) (f) GDPR may be the legal basis. Our legitimate interest lies in the proper handling of transport-related insurance matters, documentation, and the settlement of claims or liability cases.
(Note: If insurance products are actively brokered, rather than just coordinated or offered in the context of transport, it should additionally be checked whether disclosures required by insurance intermediary law in the legal notice or further information obligations are required.)
In the course of international transport and logistics services, it may be necessary to process personal data for customs, export, import, foreign trade, or other official purposes and to transmit such data to competent bodies or participating service providers.
Data processed may include information on clients, contact persons, senders, recipients, suppliers, parties involved in customs, goods, shipments, invoices, delivery documents, proofs of origin, export and import information, as well as other information required for processing.
Processing is carried out to execute international transport and logistics services, customs processing, preparation and review of required documents, fulfillment of legal obligations, communication with authorities, as well as documentation and proof.
The legal basis is Art. 6 (1) (b) GDPR, provided processing is necessary for the performance of a contract. Where legal obligations exist, processing is based on Art. 6 (1) (c) GDPR. Additionally, Art. 6 (1) (f) GDPR may be the legal basis, provided processing is necessary for the proper organization and traceability of international transport processes.
We process personal data of contact persons at business partners, suppliers, service providers, subcontractors, authorities, and other external entities, provided this is necessary for the initiation, execution, and management of the respective business relationship.
This may include, in particular, name, business contact details, company, function, communication data, contract data, performance data, billing data, as well as other information processed in the course of the collaboration.
Processing is carried out for communication, contract performance, coordination of services, invoice processing, quality assurance, documentation, and management of the business relationship.
The legal basis is Art. 6 (1) (b) GDPR, provided processing is necessary for the performance of a contract or pre-contractual measures. In the case of legal obligations, Art. 6 (1) (c) GDPR is the legal basis. Otherwise, processing is based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in the proper execution and management of our business relationships.
When you apply for a job with us, we process your personal data to carry out the application process. This applies regardless of whether you apply via a career page, by email, mail, application form, an external platform, or any other means.
Data processed may include, in particular:
Name, address, phone number, email address, application documents, CV, cover letter, references, proof of qualifications, information on professional background, education, skills, language proficiency, salary expectations, earliest possible start date, communication data, interview notes, evaluation results, information from job interviews, as well as other information you share with us during the application process.
Processing is carried out to review your application, communicate with you, conduct job interviews, decide on the establishment of an employment relationship, as well as document the application process.
The legal basis is Art. 6 (1) (b) GDPR in conjunction with Section 26 of the BDSG (German Federal Data Protection Act), provided processing is necessary for the decision on the establishment of an employment relationship. Where consent is provided, for example for inclusion in a talent pool, Art. 6 (1) (a) GDPR is the legal basis. Where processing is necessary to fulfill legal obligations, it is based on Art. 6 (1) (c) GDPR. Where application data is stored after the conclusion of the application process for the establishment, exercise, or defense of legal claims, this is based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in the prevention and defense of potential claims, particularly under the General Equal Treatment Act (AGG).
We process special categories of personal data, such as health data, information regarding a severe disability, religious affiliation, or comparable highly sensitive information, only if this is necessary for the application process, if you share this data with us voluntarily, or if a legal basis exists. Where special categories of personal data are processed, this is done in accordance with Art. 9 GDPR and the respectively applicable statutory provisions.
Storage of Application Data and Interest in AGG Proof
Application data is stored during the ongoing application process. If an employment relationship is established, the application data required for the employment relationship may be transferred to the personnel file and further processed there according to the rules applicable to employee data.
If no employment relationship is established, we generally store your application data for a period of six months after the application process is concluded. Storage is for the purpose of documenting the application process and for the establishment, exercise, or defense of potential legal claims, particularly in connection with claims under the General Equal Treatment Act (AGG).
The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in being able to reconstruct the application process and defend ourselves against potential claims.
After this period, the application data will be erased, unless longer storage is required or permissible. Longer storage may occur in particular if you have consented to longer storage, if statutory retention obligations exist, or if concrete legal claims are asserted.
Talent Pool
If we cannot consider your application for the specifically advertised position, but your profile is interesting for future positions, we may ask you if we may include your application data in a talent pool.
Inclusion in the talent pool takes place exclusively on the basis of your voluntary consent pursuant to Art. 6 (1) (a) GDPR. Consent is voluntary and has no influence on the ongoing application process. You may revoke consent at any time with effect for the future.
In the talent pool, we process, in particular, your contact details, application documents, qualifications, professional experience, areas of interest, availability, as well as, where applicable, internal notes for assessing suitable future positions.
Processing is carried out for the purpose of being able to contact you again for suitable future positions, deployment opportunities, or career options.
Data in the talent pool is stored for a period of a maximum of [e.g., 12 months] and subsequently erased, unless you consent again to further storage or another legal basis exists.
Applications via External Platforms or Service Providers
Where applications occur via external platforms, job boards, application management systems, or other service providers, personal data may also be processed by these providers. This may include, in particular, technical usage data, application data, communication data, and platform data.
The concrete processing depends on the technical integration and the service providers employed. Where service providers process personal data on our behalf, we enter into data processing agreements pursuant to Art. 28 GDPR. Where external platforms pursue their own purposes, they are independently responsible for these.
We may maintain online presences on social networks and platforms to provide information about our company, services, news, and career opportunities, and to communicate with prospects, customers, applicants, and business partners.
When you visit our social media profiles or interact with us via these platforms, we process personal data to the extent that you share it with us or interact with our content. This may include, in particular, profile name, public profile data, message content, comments, interactions, time of interaction, and communication data.
Processing by us is carried out for public relations, communication, handling of inquiries, and representing our company. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in modern corporate communication, public relations, and candidate outreach. Where you provide us with consent, Art. 6 (1) (a) GDPR is the legal basis.
In addition, the respective platform providers process personal data under their own responsibility. In doing so, they may create usage profiles, provide statistical evaluations, or process data for their own purposes. We have only limited influence on the nature and scope of this processing.
Within our company, access to personal data is granted only to those departments that require it to fulfill the respective purposes.
Furthermore, personal data may be transmitted to external recipients where this is necessary for the aforementioned purposes, a legal obligation exists, or another legal basis applies.
Recipients may include, in particular:
Hosting and IT service providers, website and maintenance service providers, communication service providers, transport and logistics service providers, carriers, freight forwarding partners, subcontractors, warehousing service providers, customs agents, insurers, claims adjusters, payment service providers, banks, tax advisors, auditors, legal advisors, authorities, customs authorities, security and inspection authorities, application management service providers, job platforms, as well as other service providers used to provide our services or manage our business processes.
Where service providers process personal data on our behalf, we enter into data processing agreements pursuant to Art. 28 GDPR. Where joint controllership exists, agreements pursuant to Art. 26 GDPR are concluded.
In the course of our international transport, freight forwarding, logistics, customs, and other services, it may be necessary to transmit personal data to recipients outside the European Union or the European Economic Area. This may particularly be the case when transports, deliveries, customs clearances, warehousing services, insurance, or other services have a connection to third countries, in particular to Turkey.
Recipients in third countries may, in particular, be foreign business partners, carriers, freight forwarding partners, subcontractors, customs agents, authorities, insurers, recipients, senders, or other entities involved in the provision of the service.
Transmission occurs only if necessary for the execution of the respective order, if a legal obligation exists, or if another legal basis applies.
Where no adequacy decision by the European Commission exists for the respective third country, we verify appropriate safeguards pursuant to Art. 44 et seq. GDPR. This may include, in particular, Standard Contractual Clauses of the European Commission and, where applicable, supplementary protective measures. In individual cases, transmission may also occur on the basis of statutory derogations, provided their requirements are met, particularly if transmission is necessary for the fulfillment of a contract with you or for the implementation of pre-contractual measures at your request.
The provision of personal data is generally voluntary. However, for certain inquiries, quotations, contracts, applications, or logistics services, the provision of specific data may be necessary.
Without the required data, we may not be able to process your inquiry, prepare a quotation, perform a contract, provide a transport or logistics service, or consider your application.
Exclusively automated decision-making within the meaning of Art. 22 GDPR does not take place.
Where analysis, marketing, or tracking services are used on the website, usage profiles or target groups may be formed. This occurs only on the basis of your consent and serves the purpose of analysis, optimization, or advertising outreach. No legal effect or similarly significant impairment is associated with this.
Under the GDPR, you have various rights regarding the processing of your personal data.
You have the right to request confirmation as to whether we are processing personal data concerning you. If this is the case, you have the right to request access to this data and further information, in particular regarding the purposes of processing, categories of personal data, recipients, storage duration, origin of the data, and your further rights.
You have the right to request the rectification of inaccurate personal data. Furthermore, you may request the completion of incomplete personal data.
You have the right to request the erasure of your personal data if statutory requirements are met. This is particularly the case if the data is no longer necessary for the purposes for which it was collected, if you have withdrawn your consent and no other legal basis exists, if you have legitimately objected, or if the data has been processed unlawfully.
The right to erasure does not apply where processing is necessary for compliance with a legal obligation, for the establishment, exercise, or defense of legal claims, or for other legally provided reasons.
You have the right to request the restriction of processing if statutory requirements are met. This can particularly be the case if you contest the accuracy of the data, if processing is unlawful and you request restriction instead of erasure, if we no longer need the data but you require it for the establishment, exercise, or defense of legal claims, or if you have objected and it is still being determined whether our legitimate grounds prevail.
You have the right to receive personal data you have provided to us in a structured, commonly used, and machine-readable format, provided processing is based on consent or a contract and is carried out by automated means. Where technically feasible, you may also request that the data be transmitted directly to another controller.
Where processing is based on your consent, you may withdraw this consent at any time with effect for the future. The lawfulness of processing prior to withdrawal remains unaffected.
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 (1) (e) or Art. 6 (1) (f) GDPR.
We will then no longer process the data, unless we can demonstrate compelling legitimate grounds which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
Where personal data is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing. This also applies to profiling insofar as it is related to such direct marketing. Following your objection, your data will no longer be used for direct marketing purposes.
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.
You may, in particular, contact the data protection supervisory authority of your habitual residence, your place of work, or the place of the alleged infringement.
The competent authority for Baden-Württemberg is:
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Heilbronner Straße 35
70173 Stuttgart
Germany
We implement technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration, or disclosure. The measures are adapted in accordance with the state of the art, existing risks, and legal requirements.
This may include, in particular, access restrictions, authorization concepts, encryption, backup measures, logging, confidentiality obligations, training, as well as technical security measures in the area of IT and website operation.
Where our services have a connection to Turkey, information obligations under Turkish data protection law, in particular Law No. 6698 on the Protection of Personal Data, may apply in addition.
Corresponding notices under Turkish data protection law may be provided additionally. These privacy notices under the GDPR remain unaffected by this. Where you are located in Germany or the European Union or personal data is processed within the scope of the GDPR, the aforementioned notices under the GDPR apply.
We reserve the right to adapt this privacy policy when our website, services employed, technical processes, our services, or legal requirements change. The version published on the website at any given time applies.
Date: September 2026
Deutsch 