Privacy statement for GLS Germany GmbH & Co. OHG’s social media page on twitter.com

With the following information we would like to inform you on how your personal data is being processed while interacting with GLS Germany GmbH & Co. OHG via our social media page on twitter.com (operated by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 IRELAND). You will also be informed about your rights in regard to data protection.

This privacy statement applies only to websites and IT systems operated under the responsibility of GLS Germany. For explanations on data protection on twitter, please refer to the privacy policy of the provider ( https://twitter.com/en/privacy ).

I. General information

1. Applicable data protection laws and data protection obligation

GLS Germany GmbH & Co. OHG (‘GLS Germany’) takes data protection and privacy seriously. For that reason, personal data will exclusively be processed in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

As GLS Germany provides postal services or takes part in it, we are subject to maintaining postal secrecy under the Postal Act (PostG) and to the obligations of the postal services data protection regulation (PDSV).

2. Security of personal data

By means of technical and organisational security measures, GLS Germany does its best to protect personal data from loss or misuse. We process personal data in IT systems which are protected by appropriate security measures. This includes using SSL/TLS encryption for transfer of data entered by you on this website. If required by technical progress, we reserve the right to modify these security and privacy protection measures.

3. Contact details of the controller and the data protection officer

Controller according to Art. 4 (7) GDPR resp. service provider according to §13 TMG (German Telemedia Act) is:
General Logistics Systems Germany GmbH & Co. OHG
GLS Germany-Str. 1-7
36286 Neuenstein
Phone: +49 (0) 6677 646 907 000

Controller according to Art. 4 (7) GDPR resp. service provider according to §13 TMG (German Telemedia Act) is:
General Logistics Systems Germany GmbH & Co. OHG
GLS Germany-Str. 1-7
36286 Neuenstein
Phone: +49 (0) 6677 646 907 000
(Hereinafter: „GLS Germany“)

You can contact our company data protection officer at:
GLS Germany GmbH & Co. OHG
Company Data Protection Officer
GLS Germany-Str. 1-7
36286 Neuenstein

datenschutz@gls-germany.com

If you want to contact us via e-mail, please note that the confidentiality of the transmitted information cannot be guaranteed. Unencrypted e-mails can possibly be read by unauthorised third parties.

4. Note on social media use

Please note that you use our twitter page and its features on your own responsibility. This applies in particular to the use of interactive features (e.g. commenting, sharing, reviewing).

5. Personal Data

'Personal data’ means any information relating to an identified or identifiable natural person (‘data subject’). This includes for example information such as name, address, telephone number and date of birth.

Information that cannot be linked to a specific or determinable individual - such as the number of users of a website - is not considered to be personal data.

II. Collected data, purposes of processing and legal bases

In using our services, you provide personal data to the controllers in accordance with your individual use:

1. Data that you transmit to us via Twitter

If you click on the “Follow” button on our Twitter page, the controllers and all other Twitter users will be able to see that you are a follower of our page.

If you communicate and interact with us (comment, post, message), we will store your username and the content of the message or comment for purposes of processing your enquiry. Depending on the matter, you may provide or we may request additional personal data in private messages (e.g. package number, email address or telephone number if you wish to be called).

2. Analysis tools

We use the analysis tool ‘Fanpage Karma’ provided by uphill GmbH, Oranienstr. 188, 10999 Berlin, to continuously improve our social media presence. This only involves statistical analyses in aggregated form (with no reference to individual persons).

3. Legal bases of processing

Your personal data will only be processed by us provided with a legal basis. The processing is lawful, if at least one of the following conditions applies:

  • a) Consent (Art. 6 (1) a GDPR):
    The data subject has given consent to the processing of his or her personal data for one or more specific purposes. One purpose might the processing of your request. The consent can be withdrawn by any time. This also applies to consent given even before the EU GDPR. The withdrawal is only effective for the future and does not affect the legality of the data processed until the withdrawal.
  • b) Contractual obligations or pre-contractual measures (Art. 6 (1) b GDPR):
    The processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. Upon your request we process your data. Usually this results out of our products/services or can include consultation or analysis on demand.
  • c) Legitimate interest (Art. 6 (1) f GDPR):
    The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. Besides the fulfillment of a contract we may have further interests. (e.g. ensuring IT security and operations, to analyze and improve the use of our website, etc.)
  • d) Compliance with legal obligation (Art. 6 (1) c GDPR):
    The processing is necessary for compliance with a legal obligation to which the controller is subject. GLS Germany is subject to different legal obligations. Among others, these include retention periods prescribed by German Commercial Code (HGB) or Fiscal Code of Germany (AO).

III. Data transmission and recipients

Within GLS Germany, access to your data shall be granted to those bodies that require it to process your enquiry on Twitter. Service providers and vicarious agents engaged by GLS Germany may also receive data for such purposes, provided that they comply with the applicable statutory provisions.

The parties that may receive your personal data include group companies and carefully selected service providers external to the group that are contractually obliged to provide services for or on behalf of GLS Germany. GLS Germany has concluded corresponding contractual agreements on data protection with these parties.

With regard to data transfer to other recipients, we only pass on your personal data if statutory provisions require this, you have consented to it or we are authorised to do so. If these preconditions are met, recipients of personal data may include public bodies and institutions (e.g. law enforcement agencies) in the event of statutory or official obligations.

Personal data shall only be actively transmitted to a third country if express reference has been made to this in the context of the aforementioned services.

IV. Storage period and deletion

GLS Germany stores personal data in accordance with statutory provisions on data processing and in observance of statutory retention periods for as long as is required for the relevant purpose. We determine the storage period for the data in accordance with the following requirements:

Personal data arising from your enquiries is automatically deleted six months after your enquiry. You have the right to request at any time that this data be deleted manually, should you so wish. If statutory retention periods preclude the deletion (for example in the event of complaints), the data will only be deleted or destroyed on expiry of the prescribed retention period.

V. Data subjects’ rights, revocation of consent, exercise of rights, right to lodge a complaint

1. Data subjects‘ rights

As data subject you have the right to,

  • obtain the controller confirmation as to whether or not and which personal data concerning him or her are being processed (Right of access by the data subject acc. to Art. 15 GDPR)
  • obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her (Right to rectification acc. to Art. 16 GDPR)
  • obtain from the controller the erasure of personal data concerning him or her without undue delay (Right to erasure acc. to Art. 17 GDPR)
  • obtain from the controller restriction of processing (Right to restriction of processing acc. to Art. 18 GDPR)
  • receive the personal data concerning him or her, which he or she has provided to a controller (Right to data portability acc. to Art. 20 GDPR)
  • object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims. (Right to object acc. to Art. 21 GDPR).

The right of access and the right to erasure are limited by §§34 and 35 BDSG.

2. Withdrawal of consent

At any time you have the right to withdraw your consent in data processing towards us. This also applies to consent given even before the EU GDPR. The withdrawal is only effective for the future and does not affect the lawfulness of the data processed until the withdrawal.

3. Exercise your rights

To exercise your rights or for withdrawal of your consent, please contact datenschutz@gls-germany.com and declare which right you wish to exercise so that GLS Germany may take further steps required to work on your request.

Please note, that we may ask you for a proof of identity in order to protect your personal information from unauthorized access or alteration.

4. Right to lodge a complaint with the supervisory authority

If you believe that your personal data has been processed in violation of data protection provisions, please inform the controllers of your concerns. In such cases you are, however, also entitled to lodge a complaint with the competent supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG).

Competent supervisory authority for GLS Germany:

Federal Commissioner for Data Protection and Freedom of Information
Husarenstr. 30
53117 Bonn
https://www.bfdi.bund.de

Competent supervisory authority for Twitter:

Irish Data Protection Commission
21 Fitzwilliam Square South
Dublin 2
D02 RD28
Ireland
https://www.dataprotection.ie

VI. Updates to this data protection information

GLS Germany is entitled to update this information by publishing amended information on this website.

This information was most recently updated on January 04, 2019