Privacy

This data protection information applies to data processing by:

Responsible:
zipmend GmbH
Große Reichenstraße 27
20457 Hamburg
Germany
datenschutz@zipmend.com
Tel: +49 40 228 597 20

(in the following zipmend)

The company data protection officer of zipmend is to be contacted at the address above, to Hd. Data Protection Officer, or datenschutz@zipmend.com Accessible.

a) When visiting the website

When accessing our website zipmend.com (including subdomains such as app.zipmend.com) information is automatically sent to the server of our website by the browser used on your device. This information is temporarily stored in a so-called logfile. The following information is collected without your intervention and stored until automated deletion:

• IP address of the requesting computer,
• date and time of access,
• the name and URL of the retrieved file,
• Website from which access is made (referrer URL),
• browser and, if applicable, the operating system of your computer as well as the name of your access provider.

The aforementioned data will be processed by us for the following purposes:

• Ensuring a smooth connection of the website,
• Ensuring comfortable use of our website,
• Evaluation of system security and stability as well as
• for other administrative purposes.

The legal basis for data processing is Article 6(4) of the 1 p. 1 lit. f GDPR. Our legitimate interest follows from the purposes listed above for data collection. In no case will we use the data collected for the purpose of drawing conclusions about your person.

In addition, when we visit our website, we use cookies and analysis services. For more information, please see no further information. 4 and 5 of this Privacy Policy.

b) When registering for our newsletter

If you are in accordance with Article 6(0). 1 p. 1 lit. a GDPR, we use your e-mail address and your name to send you our newsletter on a regular basis. To receive the newsletter, it is sufficient to provide an e-mail address and your name. You will be asked for your consent at the appropriate point as follows:

"I have taken note of the Privacy Policy, in particular, I agree that the data processing can be carried out by a service provider in the United States."

You can unsubscribe at any time, for example via a link at the end of each newsletter. Alternatively, you can also send your unsubscribe request to datenschutz@zipmend.comby e-mail at any time.

c) When using our contact form

If you have any questions, we offer you the opportunity to contact us via a form provided on the website. A valid e-mail address is required so that we know who the request originated from and in order to be able to answer it. Further information may be provided voluntarily.

The data processing for the purpose of contacting us takes place in accordance with Art. 1 p. 1 lit. a GDPR based on your voluntary consent.

The personal data collected by us for the use of the contact form will be automatically deleted after the request you have made has been completed.

d) When using our online booking

In order to book transports through our website, we offer you the possibility to commission them via a form provided on the website. The provision of pick-up, delivery and billing addresses is required in order to ensure timely collection and delivery. Furthermore, the e-mail of the client is necessary so that we can send you the corresponding confirmations. Further information may be provided voluntarily.

The data processing for the purpose of conclusion of a contract is carried out in accordance with Article 6 paragraph. 1 lit. b GDPR. This also applies to processing operations necessary for the implementation of pre-contractual measures.

The personal data collected by us for the use of the online booking will be automatically deleted after 3 years of inactivity, unless legal requirements here conflict.

e) When using our online tool as a carrier

As a carrier, we offer you the possibility to receive transports from zipmend via our website. Registration with the company address, telephone number, e-mail address, business registration/commercial register statement as well as insurance confirmation is required. Furthermore, we need driver's name, number plate and driver's telephone number when ordering a transport. This data may also be passed on to the pick-up, delivery and our end customers, so that we can ensure a smooth transport. Further information may be provided voluntarily.

The data processing for the purpose of conclusion of a contract is carried out in accordance with Article 6 paragraph. 1 lit. b GDPR. This also applies to processing operations necessary for the implementation of pre-contractual measures.

The personal data collected by us for the use of our online tool as a carrier will be deleted after 3 years of inactivity, unless legal requirements here conflict.

f) In the case of online job applications

As an applicant, we offer you the opportunity to apply online or by e-mail at zipmend. Your data will be processed electronically by us for the purpose of processing the application process. Should an employment contract be concluded, your transmitted data can be stored by us in your personnel file. Further information may be provided voluntarily.

The data processing for the purpose of conclusion of a contract is carried out in accordance with Article 6 paragraph. 1 lit. b GDPR. This also applies to processing operations necessary for the implementation of pre-contractual measures.

The personal data collected by us for the use of the online job application will be automatically deleted 3 months after the application has been rejected. This does not apply if legal requirements preclude this or if you have expressly consented to a longer storage period.

Your personal data will not be transferred to third parties for purposes other than the ones listed below.

We will only share your personal data with third parties if:

• yours in accordance with Article 6(6) of the 1 p. 1 lit. a GDPR have given explicit consent to do so,
• the transfer in accordance with Article 6(6) 1 p. 1 lit. f GDPR is necessary to assert, exercise or defend legal claims (e.g. business information agencies, debt collection service providers, lawyers or payment service providers such as Paypal or AmazonPay) and there is no reason to believe that you have an overriding interest in not disclosing your data,
• in the event that, in the event that the transfer is made in accordance with Article 6(6) of the 1 p. 1 lit. c GDPR is a legal obligation, as well as
• permitted by law and in accordance with Article 6(6) of the 1 p. 1 lit. b GDPR is required for the settlement of contractual relationships with you.

We use cookies on our site. These are small files that your browser automatically creates and are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause any damage to your device, do not contain viruses, Trojan horses or other malware.

The cookie stores information that arises in connection with the specific device used. However, this does not mean that we will be immediately informed of your identity.

The use of cookies serves on the one hand to make the use of our offer more pleasant for you. For example, we use so-called session cookies to detect that you have already visited individual pages of our website. These will be deleted automatically after leaving our site.

In addition, we also use temporary cookies to optimize the user experience, which are stored on your device for a specified period of time. If you revisit our site to use our services, you will automatically recognize that you have already been with us and what entries and settings you have made so that you do not have to re-enter them.

On the other hand, we used cookies to record the use of our website statistically and to evaluate them for the purpose of optimising our offer (see point 5). These cookies allow us to automatically recognize that you have been with us when you visit our site again. These cookies are automatically deleted after a defined time.

The data processed by cookies are for the stated purposes in order to protect our legitimate interests as well as those of third parties in accordance with Art. 1 p. 1 lit. f GDPR required.

Most browsers automatically accept cookies. However, you can configure your browser to not store cookies on your computer or to always see a notice before a new cookie is created. However, the complete disabling of cookies may result in you not being able to use all the functions of our website.

a) Tracking tools

The tracking measures listed below and used by us are set out in article 6(3). 1 p. 1 lit. f GDPR. With the tracking measures to be used, we want to ensure a needs-based design and the continuous optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for you for the purpose of optimising our offer. Those interests must be regarded as justified within the meaning of the abovementioned provision.

The respective data processing purposes and data categories can be found in the corresponding tracking tools.

i) Google Analytics

For the purpose of customizing and continuously optimizing our pages, we use Google Analytics, a web analytics service of Google Inc. (https://about.google/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). In this context, pseudonymized user profiles are created and cookies are used (see point 4). The information generated by the cookie about your use of this website, such as

• Browser type/version,
• operating system used,
• Referrer URL (the previously visited page),
• Host name of the accessing computer (IP address),
• Time of server request,

are transferred to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website and internet usage for the purposes of market research and the design of these websites according to their needs. This information may also be transferred to third parties if required to do so by law or if third parties process this data on behalf of third parties. Under no circumstances will your IP address be merged with other data from Google. The IP addresses are anonymized, so that mapping is not possible (IP masking).

You can prevent the installation of cookies by setting the browser software accordingly; However, we would like to point out that in this case not all functions of this website can be used to the full extent.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking this link. An opt-out cookie is set, which prevents the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again.

For more information about privacy related to Google Analytics, see Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de).

ii) Google Adwords Conversion Tracking

In order to record the use of our website statistically and to evaluate it for you for the purpose of optimizing our website, we also use Google Conversion Tracking. Google Adwords sets a cookie (see paragraph 4) on your computer if you have reached our website via a Google ad.

These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of the Adwords customer's website and the cookie has not yet expired, Google and the customer can recognize that the user has clicked on the ad and has been redirected to this page.

Each Adwords customer receives a different cookie. Cookies cannot therefore be tracked through adwords customers' websites. The information collected using the conversion cookie is used to generate conversion statistics for Adwords customers who have opted for conversion tracking. Adwords customers will learn the total number of users who clicked on their ad and have been redirected to a page with a conversion tracking tag. However, you will not receive any information that can be used to personally identify users.

If you do not wish to participate in the tracking procedure, you can also refuse the necessary setting of a cookie – for example, by means of a browser setting, which generally disables the automatic setting of cookies. You can also disable cookies for conversion tracking by setting your browser to block cookies from the "www.googleadservices.com" domain. Google's privacy policy for conversion tracking can be found here (https://services.google.com/sitestats/de.html).

b) AB testing tools

The AB-Testing measures listed below and used by us are set out on the basis of Article 6(3). 1 p. 1 lit. f GDPR. With the AB-Testing measures to be used, we want to ensure a needs-based design and the continuous optimization of our website. On the other hand, we use the AB-Testing measures to statistically record the use of our website and to evaluate it for you for the purpose of optimising our offer. Those interests must be regarded as justified within the meaning of the abovementioned provision.

The respective data processing purposes and data categories can be found in the corresponding AB testing tools.

(i) vwo

For the purpose of customizing and continuously optimizing our sites, we use vwo, an AB testing service of Wingify Inc. 14th Floor, KLJ Tower North, Netaji Subhash Place, Pitam Pura, Delhi 110034, India. (https://vwo.com/about-us/); "vwo" below. In this context, pseudonymized user profiles are created and cookies are used (see point 4). The information generated by the cookie about your use of this website, such as

• Browser type/version,
• operating system used,
• Referrer URL (the previously visited page),
• Host name of the accessing computer (IP address),
• Time of server request,

transferred to a vwo server and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website and internet usage for the purposes of market research and the design of these websites according to their needs. This information may also be transferred to third parties if required to do so by law or if third parties process this data on behalf of third parties. Under no circumstances will your IP address be merged with other data from vwo. The IP addresses are anonymized, so that mapping is not possible (IP masking).

You can prevent the installation of cookies by setting the browser software accordingly; However, we would like to point out that in this case not all functions of this website can be used to the full extent.

Further information on data protection in connection with vwo can be found here: https://vwo.com/compliance/gdpr/

c) Mail tools

The mail tools listed below and used by us are set out in Article 6(3). 1 p. 1 lit. f GDPR. With the mail tools used, we want to ensure a needs-based design and the continuous optimization of our website and e-mails. On the other hand, we use the mail tools to statistically record the use of our website and our e-mails and to evaluate them for the purpose of optimizing our offer. Those interests must be regarded as justified within the meaning of the abovementioned provision.

The respective data processing purposes and data categories can be found in the corresponding mail tools.

(i) MailChimp

For the purpose of customizing and continuously optimizing our emails, we use MailChimp, an email service of The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA. (https://mailchimp.com); "MailChimp" below.

The data stored at the time of your registration (also newsletter registration) (e-mail address, title, name, IP address, date and time of registration) will be transmitted to a Mailchimp server in the USA, subject to the "EU-US Privacy Shield". The information is used to evaluate the use of the website and e-mails, to compile reports on website activity and to provide other services related to website and internet usage for the purposes of market research and the needs of these websites and e-mails. This information may also be transferred to third parties if required to do so by law or if third parties process this data on behalf of third parties.

For more information on data protection related to MailChimp, please visit: https://www.intuit.com/privacy/statement/

We place on our website on the basis of Art. 1 p. 1 lit. f GDPR social plug-ins of the social networks Facebook, Twitter and Instagram to make our law firm better known about this. The commercial purpose behind it is to be regarded as a legitimate interest within the meaning of the GDPR. Responsibility for data protection-compliant operation must be guaranteed by their respective providers. The integration of these plug-ins by us is carried out by means of the so-called two-click method in order to protect visitors to our website in the best possible way.

a) Facebook

On our website, social media plugins from Facebook are used to make their use more personal. For this we use the "LIKE" or "PART" button. This is an offer from Facebook.

When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated by it into the website.

By integrating the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there.

If you are logged in to Facebook, Facebook can assign your visit to our website directly to your Facebook account. If you interact with the plugins, for example by pressing the "LIKE" or "SHARE" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also posted on Facebook and displayed to your Facebook friends.

Facebook may use this information for the purpose of advertising, market research and the design of Facebook pages according to requirements. For this purpose, Facebook creates usage, interest and relationship profiles, e.g. to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide other services related to the use of Facebook.

If you do not want Facebook to assign the data collected through our website to your Facebook account, you must log out of Facebook before visiting our website.

The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights in this regard and setting options for the protection of your privacy can be found in Facebook's privacy policy (https://www.facebook.com/privacy/policy/).

b) Twitter

Plugins of the short message network of Twitter Inc. are on our website. (Twitter). You can recognize the Twitter plugins (tweet button) by the Twitter logo on our site. An overview of tweet buttons can be found here (https://about.twitter.com/resources/buttons).

When you visit a page of our website that contains such a plugin, a direct connection is established between your browser and the Twitter server. Twitter receives the information that you have visited our site with your IP address. If you click on the Twitter "tweet" button while you are logged into your Twitter account, you can link the contents of our pages to your Twitter profile. This allows Twitter to assign the visit to our pages to your user account. We would like to point out that we, as the provider of the pages, do not receive any knowledge of the content of the transmitted data as well as their use by Twitter.

If you do not want Twitter to be able to associate the visit to our pages, please log out of your Twitter account.

For more information, see Twitter's (https://twitter.com/privacy) Privacy Policy.

c) Instagram

Our website also uses so-called social plugins ("plugins") of Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram").

The plugins are marked with an Instagram logo, for example, in the form of an "Instagram camera".

When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the Instagram servers. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram.

This information (including your IP address) is transmitted by your browser directly to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can assign your visit to our website directly to your Instagram account. If you interact with the plugins, for example by pressing the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there.

The information will also be posted to your Instagram account and displayed to your contacts.

If you do not want Instagram to assign the data collected via our website directly to your Instagram account, you must log out of Instagram before visiting our website.

For more information, see Instagram's Privacy Policy (https://help.instagram.com/155833707900388).

You have the right to:

• in accordance with Art. 15 GDPR, request information about your personal data processed by us. In particular, you may provide information on the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, Deletion, restriction of processing or opposition, the existence of a right of appeal, the origin of their data, if these have not been collected by us, as well as the existence of automated decision-making, including profiling and, if applicable, require meaningful information on the details of them;
• require the correction of inaccurate or complete your personal data stored by us without delay in accordance with Art. 16 GDPR;
• in accordance with Article 17 GDPR, to require the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
• in accordance with Article 18 GDPR, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you do not need it, but you require them to assert, exercise or defend legal claims or you have objected to the processing in accordance with Article 21 GDPR;
• in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
• in accordance with Art. 3 GDPR to revoke your consent to us at any time. As a result, we are no longer allowed to continue the data processing that was based on this consent for the future, and
• complain to a supervisory authority in accordance with Article 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office.

If your personal data is based on legitimate interests in accordance with Article 6 sec. 1 p. 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, insofar as there are reasons for doing so, which arise from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right of objection, which we implement without specifying a specific situation.

If you wish to exercise your right of withdrawal or objection, an e-mail to datenschutz@zipmend.com

Within the website visit, we use the common Secure Socket Layer (SSL) method in conjunction with the highest encryption level supported by your browser. Typically, this is 256-bit encryption. If your browser doesn't support 256-bit encryption, we'll use 128-bit v3 technology instead. You can see whether a single page of our website is transmitted encrypted by the closed display of the bowl or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

This privacy policy is currently valid and has the status of May 22, 2018.

Due to the further development of our website and offers above or due to changes in legal or regulatory requirements, it may become necessary to change this data protection declaration. The current data protection declaration can be accessed and printed by you at any time on the website under https://zipmend.com/en/privacy/.