1. General
The Marvya Logistik GmbH places great importance on the protection of the privacy of users of its website. Therefore, we would like to inform you in detail which data we collect from you during your visit to our website and the use of our offers provided there, how we process or use this data and what rights you have in this regard. Your personal data, such as name, address, email address, or phone number, will only be processed by us on the basis of the statutory data protection laws, specifically the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG-new), and the Telemedia Act (TMG). The extent of the data collected and processed by us depends on whether you are merely visiting our website to retrieve information or whether you also take advantage of services offered by us via our website or in writing.

2. Definitions
Our privacy policy uses the terms defined in the EU General Data Protection Regulation (GDPR), which we would like to explain briefly for your better understanding.
‍
These and other definitions can be found in Art. 4 GDPR.
‍
a) Personal data
“Personal data” means all information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more specific characteristics that express the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

b) Data subject
“Data subject” is any identified or identifiable natural person whose personal data is processed by the controller.
‍
c) Processing
“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
‍
d) Restriction of processing
“Restriction of processing” means the marking of stored personal data with the aim of limiting their processing in the future.
‍
e) Pseudonymization
“Pseudonymization” is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures that ensure that the personal data is not attributed to an identified or identifiable natural person.
‍
f) Controller
“Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union law or the law of Member States, the controller or the specific criteria for its designation may be provided for by Union law or the law of the Member States.
‍
g) Processor
“Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
‍
h) Recipient
“Recipient” means a natural or legal person, public authority, agency or another body to whom personal data are disclosed, whether a third party or not. Authorities that may receive personal data in the course of a specific inquiry in accordance with Union law or the law of Member States shall not be regarded as recipients; the processing of such data by those authorities shall be in compliance with the applicable data protection regulations in accordance with the purposes of the processing.
‍
i) Third party
“Third party” means a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor, and the persons who, under the direct authority of the controller or the processor, are authorized to process the personal data.
‍
j) Consent
“Consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she signifies agreement, by a statement or by a clear affirmative action, to the processing of personal data relating to him or her.
‍
III. Type of personal data processed / Purposes of processing
The personal data we process includes salutation, name, first name, a valid email address, address, telephone and fax numbers, and bank details – in other words, all personal information we need to provide our contractual services to you. The collection of this data is necessary to identify you as our customer, to process your customer order appropriately, for correspondence with you, for invoicing, for handling any existing claims, and for asserting any claims against you. Failure to provide personal data (with the exception of telephone and fax numbers) will result in our inability to execute the order. Failure to provide telephone and fax numbers limits our ability to communicate with you.

The processing of data is carried out at your request and is necessary for the proper processing of your inquiry or order according to Art. 6 para. 1 sentence 1 lit. b GDPR for the stated purposes. We do not carry out automated decision-making (especially profiling). We may share the data with our partners if we use their services to fulfill our contractual obligations to you, such as data hosting, IT service providers and similar. The data shared may only be used by third parties for the stated purposes.

The personal data processed by us in the context of the contractual relationship will be stored until the proper execution of the contract, including the statutory periods for warranty claims, and will then be deleted, unless we are obliged to retain it for a longer period under Article 6 para. 1 sentence 1 lit. c GDPR due to tax and commercial law or other legal storage and documentation obligations (e.g., from HGB, StGB or AO) or you have consented to such longer storage under Article 6 para. 1 sentence 1 lit. a GDPR.

4. Name and address of the controller responsible for processing personal data
The controller in the sense of the General Data Protection Regulation is:
Marvya Logistik GmbH
Marvin Wu
Address: Industriegebiet 6
66453 Gersheim
Tel: 0681 96989019
‍Email: info@marvya.de
‍
5. Components used on our website www.marvyalogistik.de
‍
Server data
If you use our website for purely informational purposes, no personal data is generally collected. Only the data that your internet browser transmits automatically will be collected and processed, such as: • Browser type • Date and time of access • Browser settings • The operating system used • Website from which you visit us and the website you visit • Your IP address These anonymous data will be stored and processed separately from your personal data. The collection of the data is necessary to enable the use of our website at all. The processing of the data is carried out solely for statistical purposes and to improve our online offering.
‍
Use of a contact option
On our website, we offer you the opportunity to contact us via a contact form or via email. If you use the above-mentioned contact options, the information you provide will be stored for the purpose of processing your request. There is no disclosure to third parties.
‍
Use of Google Maps
On our website, we use the “Google Maps” component from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter referred to as Google). When using the “Google Maps” component embedded on our website, Google uses a cookie to process user settings and data while displaying the web page on which the “Google Maps” component is integrated. This cookie generally remains after closing the browser unless it is manually deleted or expires.
If you do not agree with this data processing by the “Google Maps” component, you have the option to disable “Google Maps”, so that no data transmission to “Google” will take place. In this case, the service from “Google Maps” may not or only to a limited extent be usable. The use of the “Google Maps” service is subject to Google’s Terms of Service, which can be found at: https://policies.google.com/terms?hl=en&gl=en and the additional terms of use: https://www.google.com/intl/en/help/terms_maps.html
‍
Use of a registration function
Our website offers you the opportunity to register. The data you enter for this purpose will only be collected and stored for the use of our offer. There is no disclosure to third parties.
‍
Use of cookies
We use cookies for our website. Cookies are small text files that are sent from our web server to your browser during your visit to our website and then stored on your computer. These are primarily so-called session cookies, which are stored only for the duration of your visit to our website and then deleted.
You can determine in your browser whether cookies can be set and retrieved. However, for the full functionality of our website, the acceptance of session cookies is technically required.
In connection with the use of cookies, we do not collect or store personal data. We also do not use techniques to combine information generated by cookies with user data.
‍
Google Analytics with anonymization function
We use the analysis service “Google Analytics” for our website. This enables us to analyze your use of the website. Cookies are also used for this purpose. The information generated by the cookies is sent to a Google server in the USA and stored there. By activating IP anonymization on this website, your IP address is shortened and thus anonymized within the EU member states or other contracting states of the Agreement on the European Economic Area by Google.
On our behalf, Google then uses this information to evaluate your use of our website, to compile reports on website activity, and to provide other services related to website usage and internet usage to us as the website operator.
The IP address transmitted as part of Google Analytics will not be merged with other Google data.
You can prevent the installation of cookies by adjusting your browser settings; however, it cannot be ruled out that not all functions of our website will be fully usable.
Furthermore, you have the option to prevent the collection of the data generated by the cookie and related to your use of the website being sent to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: [currently http://tools.google.com/dlpage/gaoptout?hl=en].
‍
Social Media
We use the social media plugins shown below on our website.
‍
Facebook
Our website uses plugins from the social network Facebook, provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA.
By using our website, a direct connection is established between your browser and the Facebook server through this plugin, and Facebook receives the information that you have visited our site with your IP address. By clicking the Facebook “Like button” while logged into your Facebook account, you can link the contents of our pages with your Facebook profile. Facebook can thereby associate your visit to our site with your user account. We point out that we, as the provider of our website, have no knowledge of the data transmitted to Facebook and used by them. For more information on data usage, please visit http://en-gb.facebook.com/about/privacy/. Please log out of your Facebook user account before visiting our site if you do not want Facebook to associate your visit to our website with your user account.
‍
YouTube
Our website uses plugins from YouTube, offered by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. By using our website, a direct connection is established between your browser and the YouTube server through this plugin, and YouTube receives information that you have visited our site with your IP address. If you are logged into your YouTube account, YouTube can associate the contents of our pages with your account. This can be prevented by logging out of your YouTube account.
We would like to point out that we, as the provider of our website, have no knowledge of the data transmitted to YouTube and used by them. For more information on data usage, please visit https://www.google.com/intl/en/policies/privacy. InstagramOn our website, components of the Instagram service are integrated. These features are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the contents of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our website with your user account. We would like to point out that we have no knowledge of the content of the transmitted data and how Instagram uses it.
For more information, please refer to Instagram's privacy policy: http://instagram.com/about/legal/privacy/.
‍
Comment function for blog entries
With the embedded comment function, you can comment on posts on our blog. The use of this comment function requires the input of a name, although a pseudonym can also be chosen. A valid email address must also be provided. The provision of an email address is necessary so that we can forward any complaints regarding your blog comments and request your comments on this. Please note that the use of the comment function is not possible without these aforementioned details. When your comment is published, the email address you provided will be stored but not published. Your name will be published unless you have written under a pseudonym.
Publication of job advertisements
If you apply through our website or via a contact option provided there for one of our positions, your data will be collected and processed for the purpose of handling the application process.
‍
If the application is followed by the conclusion of an employment contract, the data transmitted to us will serve the usual organization and administration. The data will then be stored in your personnel file in compliance with the relevant legal regulations.
In the event of a rejection of your application, your data will be automatically deleted two months after rejection. This does not occur if longer storage is necessary due to legal requirements or if you have expressly consented to longer storage in our applicant database. 6. Rights of the data subject (reference to the respective article of the GDPR is made!)
‍
a) Right of access, Art. 15 GDPR
Every data subject affected by the processing of personal data has the right granted by the General Data Protection Regulation to request at any time free information from the controller about the personal data concerning them that is stored and to obtain a copy of this information. Furthermore, the data subject has the right to obtain information about the following:
• the purposes of processing
• the categories of personal data being processed
• the recipients or categories of recipients to whom the personal data have been disclosed or will be disclosed, in particular recipients in third countries or international organizations
• if possible, the planned duration for which the personal data will be stored, or, if that is not possible, the criteria used to determine that duration
• the existence of a right to rectification or erasure of personal data concerning them or to restriction of processing by the controller or a right to object to such processing
• the existence of a right to lodge a complaint with a supervisory authority
• if the personal data have not been collected from the data subject: all available information about the source of the data
• the existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) GDPR and — at least in those cases — meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for the data subject
Furthermore, the data subject has the right to know whether personal data have been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to be informed of the appropriate safeguards in connection with the transfer. If a data subject wishes to exercise this right of access, they can contact us at any time using the contact details provided in paragraph I.2 of the controller responsible for processing.
‍
b) Right to rectification, Art. 16 GDPR
Every data subject affected by the processing of personal data has the right granted by the General Data Protection Regulation to request the immediate rectification of inaccurate personal data concerning them. Furthermore, the data subject has the right, taking into account the purposes of processing, to request the completion of incomplete personal data — including by means of a supplementary statement. If a data subject wishes to exercise this right to rectification, they can contact us at any time using the contact details provided in paragraph I.2 of the controller responsible for processing.
‍
c) Right to erasure (right to be forgotten), Art. 17 GDPR
Every data subject affected by the processing of personal data has the right granted by the General Data Protection Regulation to request the controller to erase personal data concerning them without delay, if one of the following reasons applies and as long as the processing is not necessary:
• The personal data have been collected or otherwise processed for purposes that are no longer necessary.
• The data subject withdraws their consent on which the processing is based according to Art. 6 para. 1 letter a GDPR or Art. 9 para. 2 letter a GDPR, and there is no other legal basis for the processing.
• The data subject objects to the processing under Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing under Art. 21 para. 2 GDPR.
• The personal data have been processed unlawfully.
• The erasure of personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.
• The personal data were collected in relation to services of the information society in accordance with Art. 8 para. 1 GDPR.
If one of the above reasons applies and a data subject wishes to request the erasure of personal data stored by us, they can contact us at any time using the contact details provided in paragraph I.2 of the controller responsible for processing. We will promptly comply with the legitimate request for erasure.
If the personal data have been made public by us and our company is obliged under Art. 17 para. 1 GDPR to erase the personal data, our company will take reasonable steps, including technical measures, taking into account the available technology and the implementation costs, to inform other controllers that process the published personal data that the data subject has requested the deletion of all links to such personal data or of copies or replications of such personal data, as far as the processing is not permitted.
‍
d) Right to restriction of processing, Art. 18 GDPR
Every data subject affected by the processing of personal data has the right granted by the General Data Protection Regulation to request the restriction of processing from the controller when one of the following conditions applies:
• the accuracy of the personal data is contested by the data subject for a duration that enables the controller to verify the accuracy of the personal data.
• the processing is unlawful, the data subject opposes the erasure of personal data and requests instead the restriction of the use of personal data.
• the controller no longer needs the personal data for the purposes of processing, but the data subject needs them for the establishment, exercise or defense of legal claims.
• the data subject has lodged an objection to the processing in accordance with Art. 21 para. 1 GDPR and it is not yet clear whether the legitimate grounds of the controller override those of the data subject.
If one of the above conditions applies and a data subject wishes to request the restriction of personal data we have, they can contact us at any time using the contact details provided in paragraph I.2 of the controller responsible for processing.
‍
e) Right to data portability, Art. 20 GDPR
Every data subject affected by the processing of personal data has the right granted by the General Data Protection Regulation to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format, and has the right to transmit those data to another controller without hindrance from the controller to whom the personal data have been provided, provided that
• the processing is based on consent in accordance with Article 6 paragraph 1 letter a GDPR or Article 9 paragraph 2 letter a GDPR or on a contract in accordance with Article 6 paragraph 1 letter b GDPR and
• the processing is carried out by automated means.
Furthermore, the data subject has the right, in exercising their right to data portability under Art. 20 para. 1 GDPR, to obtain that the personal data is transmitted directly from one controller to another, where technically feasible and provided that the rights and freedoms of others are not affected.
To exercise the right to data portability, the data subject can contact us at any time using the contact details provided in paragraph I.2 of the controller responsible for processing.
‍
f) Right to object, Art. 21 GDPR
Every data subject affected by the processing of personal data has the right granted by the General Data Protection Regulation to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them which is based on Art. 6 para. 1 letters e or f GDPR. This also applies to profiling based on these provisions.
We, as the controller, will no longer process the personal data in the event of an objection unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing is necessary for the establishment, exercise or defense of legal claims.
If we process personal data for the purpose of direct marketing, the data subject has the right to object at any time to the processing of personal data for the purpose of such marketing. This also applies to profiling to the extent that it is related to such direct marketing. If the data subject objects to the processing for direct marketing purposes, we will no longer process the personal data for these purposes.
Additionally, the data subject has the right, on grounds relating to their particular situation, to object to the processing of personal data concerning them which is carried out for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 para. 1 GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.
To exercise the right to object, the data subject can contact us at any time using the contact details provided in paragraph I.2 of the controller responsible for processing.
‍
g) Right to withdraw a data protection consent
Every data subject affected by the processing of personal data has the right granted by the General Data Protection Regulation to withdraw consent to the processing of personal data at any time. If the data subject wishes to exercise the right to withdraw consent, they can contact us at any time using the contact details provided in paragraph I.2 of the controller responsible for processing.
‍
h) Right to lodge a complaint; Art. 77 GDPR
Every data subject affected by the processing of personal data has the right granted by the General Data Protection Regulation to lodge a complaint with a supervisory authority. In general, you can contact the supervisory authority of your usual residence or place of work or the headquarters of our company for this purpose.