← Cherry’s Logistics

Privacy policy

1. Controller

The controller for data processing on this website is:

Cherry's Logistics Group GmbH
Limited liability company, registered office: Hamburg, HRB 200602
Managing Directors: Tim-Oliver Kirschbaum, Sandra Bufe, Marc-Henrik Schmitz
Zitadellenstraße 14, 21079 Hamburg, Germany
Email: connect@cherrys-logistics.com
Telephone: +49 170 4815040

We have [benannt: Name und Kontaktdaten eintragen / nicht benannt, da die gesetzlichen Voraussetzungen nicht vorliegen] a data protection officer.

2. Your rights at a glance

You have the right at any time to:

An informal email to connect@cherrys-logistics.com is sufficient. You also have the right to lodge a complaint with a supervisory authority; for us this is the Hamburg Commissioner for Data Protection and Freedom of Information.

We can honour these rights without qualification wherever we know who you are: for enquiries submitted through the form (section 4), for contact by email or telephone (section 5), and for applications (section 6). Merely visiting this website, by contrast, gives us no information that would allow us to attribute anything to you. Under Art. 11 (1) GDPR we are not obliged to collect or retain additional information for the sole purpose of being able to identify you. Where identification is consequently impossible for us, Arts. 15 to 20 GDPR do not apply to that data pursuant to Art. 11 (2) GDPR, unless you provide us with information enabling attribution. In practice this concerns the server log files described in section 3; the access statistics described in section 10 contain no personal reference in the first place.

3. Hosting and server log files

This website is operated at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data centre in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

On every request the server processes technically necessary data:

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the secure and trouble-free operation of the website. This data is not combined with other data sources and is deleted after [Anzahl] days.

4. Enquiries via the "Tell us about your shipment" form

If you contact us using the enquiry form, we process the details entered there:

This data is used solely to handle your enquiry and to provide you with a quote. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures). We send your enquiry to our mailbox and additionally send you a confirmation to the address you provided. We use [E-Mail-Dienstleister eintragen] for delivery; a data processing agreement is in place with them.

To prevent automated submissions we check a form field that is invisible to you and limit the number of submissions per IP address. Your IP address is held in memory only, solely to detect submissions following closely on one another; it is not written to the database and is gone once the ten-minute window has passed, and at the latest when the server next restarts. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in preventing abusive use. No cookies are set and no data is transmitted to third parties in the process.

We retain your enquiry until the matter is concluded, and beyond that where retention periods under commercial or tax law apply.

5. Contact by email and telephone

If you contact us by email or telephone, we process your details in order to handle your request. The legal basis is Art. 6 (1) (b) GDPR for contract-related enquiries, otherwise Art. 6 (1) (f) GDPR.

6. Applications

Applications sent to connect@cherrys-logistics.com are processed solely for the purpose of conducting the application procedure (§ 26 BDSG, Art. 6 (1) (b) GDPR). If no employment results, we delete the documents no later than six months after the procedure concludes, unless you have consented to longer storage.

7. Appointment booking via Microsoft Bookings

We currently do not offer online appointment booking on this website; no booking service is linked and no data is transmitted to Microsoft. As soon as we link to Microsoft Bookings again, a service of Microsoft Ireland Operations Limited, the following applies: when you click a booking button you leave this website and Microsoft's privacy terms apply. Data may be transferred to the USA in the process; Microsoft is certified under the EU-US Data Privacy Framework. No data is transmitted to Microsoft unless you click the button.

8. Content from social networks

In the "Follow the journey" section we show posts from our profiles on Instagram (Meta Platforms Ireland Limited) and LinkedIn (LinkedIn Ireland Unlimited Company). Where images are loaded directly from those providers' servers, they receive your IP address. The legal basis is Art. 6 (1) (f) GDPR, or your consent pursuant to Art. 6 (1) (a) GDPR where such consent is obtained. Plain links to our profiles transmit data only when clicked.

9. Cookies and local storage

This website sets no cookies. Only two items are placed in your browser's local storage:

Neither item leaves your device, neither is transmitted to us, and neither contains an identifier that makes you recognisable. They serve solely to provide the service you requested, and are therefore strictly necessary within the meaning of § 25 (2) no. 2 TDDDG. No consent is required for them, and accordingly we do not ask for any. You can delete this information at any time through your browser settings.

The notice shown on the site is therefore deliberately not a consent banner: there is nothing for you to consent to or refuse. We do not offer an "Accept" button that would in fact have no effect.

We do not use analytics or marketing cookies. Should that change, it will happen only after your express, prior consent, and this statement will be amended beforehand.

10. Access statistics

To understand which content is used, we count page views. The only things stored are:

Nothing further is stored. In particular we store no IP address — nor any shortened, encrypted or hashed value derived from one — no browser or operating system identifier, and not the full address of the referring page — the referring address is reduced to one of the origin labels above at the moment it is received and otherwise discarded. No identifier is assigned that could link your visit to an earlier or later one.

This data therefore permits no identification of you, whether directly or indirectly — not by us, and not by combining it with other information available to us. It is accordingly not personal data within the meaning of Art. 4 (1) GDPR, and the General Data Protection Regulation does not apply to this counting pursuant to Recital 26. We nevertheless set it out here so that you can see what happens when you visit this website.

Evaluation takes place exclusively on our own server. No third-party analytics tool is used, no data is transmitted to third parties, no transfer to third countries takes place, no user profiles are created and no cross-device tracking occurs. This counting requires no access to, and no storage of, information on your terminal equipment; § 25 TDDDG is therefore not engaged.

The counted views are deleted automatically after twelve months.

Because we cannot identify you from this data, an objection under Art. 21 GDPR has nothing to attach to here: there is no processing of your personal data to object to. Should you nevertheless prefer not to be counted, we voluntarily respect the "Global Privacy Control" and "Do Not Track" signals. If either is enabled in your browser, your visit is not counted at all and no record is created.

11. Encryption

This website uses TLS encryption to protect data in transit. You can recognise an encrypted connection by the padlock symbol in your browser's address bar.

12. Changes to this statement

We will adapt this privacy policy as soon as data processing on this website changes. The version published here applies in each case.

Language

This English text is a courtesy translation. The German version of this privacy policy is the binding one.

Note on this text

The text must be reviewed by a lawyer before publication. Four entries remain open, none of which can be derived from the website itself:

1. the telephone number in section 1
2. in section 1, whether a data protection officer has been appointed (generally required from 20 persons permanently engaged in processing, § 38 BDSG)
3. in section 3, the retention period for server log files in days — it must match the actual configuration of the upstream web server (7 days is customary)
4. in section 4, the email provider used for delivery; if a provider outside the EU is used, the basis for the transfer must also be stated

The statements in sections 4, 9 and 10 describe the actual behaviour of this website and can be verified in the source code. If that behaviour changes, this statement must be amended with it.