PRIVACY POLICY

PERSONAL DATA PROTECTION STATEMENT

in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, GDPR)

Dear Visitors,

We wish to inform you about how we handle your personal data when you use this website and your rights in this regard. Personal data is any information based on which you can be identified.

We're committed to providing a clear and simple personal data protection statement, but in case of any questions, don't hesitate to contact us. Our contact details are provided below in the section 'Personal Data Controller'. If a definition we provided is unclear, please refer to the official definitions. These are set out in Art. 4 GDPR.

In general, you are under no contractual or statutory obligation to provide any of your personal data for our disposal. Your decision not to provide them has no negative consequences. However, this applies only insofar as no other statement is made in the subsequent processing operations.

PERSONAL DATA CONTROLLER

Feel free to contact us with any questions or requests regarding personal data protection and personal data with reference to yourselves and our enterprise as well as any matters related to the processing of personal data by our company. Similarly, don't hesitate to contact us whenever you wish to exercise any of your rights under GDPR (e.g. your right to withdraw consent). Please use the contact details below of the data controller, or if applicable, our data protection officer. You can naturally also use the contact details provided in the Imprint (Impressum) section. Please note that we can only answer telephone calls within our business hours.

Feel free to contact us by e-mail twenty-four hours a day, seven days a week.

PERSONAL DATA CONTROLLER

The controller of data, within the meaning of GDPR, processed through this website is:

one solution logistics GmbH

Enzstr. 28

D-70806 Kornwestheim

E-Mail: office@one-solution-logistics.de

Tel: +49-(0) 7054 806 26-0

Fax: +49-(0) 7054 806 26-21

Definition of data controller: data controller means a natural or legal person we nominate who, alone or jointly with others, determines the purposes and means of the processing of personal data;

DATA TRANSMISSION ENCRYPTION

In order to safeguard personal data and other confidential contents (e.g., where applicable, purchase orders, enquiries, etc.), the entire traffic on our website is automatically encrypted using the SSL or TLS protocols to ensure interception-proof data transmission. You can tell this is the case by checking if your browser's address bar features a green padlock icon and the address starts with the string 'https://'.

DATA COLLECTED WHEN VISITING OUR WEBSITE

Because of how the Internet works, your browser sends to us some personal data. This also happens whenever you visit a website for reference purposes only (i.e. without even providing any data).

In particular, your IP address is transmitted with each call. Without it, data transmission would be impossible.

To put it in more simple terms, failing to provide an IP address would be like sending a letter without the recipient's address. We simply wouldn't know where to send a data package. A data package contains our website's contents, which you want transferred to you.

Some data may be transmitted to us in an automated manner.

Along with the IP address, these data include the following:

- the precise address of the visited website (deep link);

- the date and time of access;

- the quantity of transmitted data in bytes;

- the source/reference which led you to the website;

- access status (http status);

- the browser you are using;

- your operating system;

- your IP address;

These data are transmitted to us by your browser or your Internet Service Provider. We can't prevent those data from being transmitted to us from our website. Also, the data are technically necessary for the website to be displayed for you.

We record the data for up to six 6 weeks in the so-called server log files. Such data are processed in accordance with Art. 6(1)(f) GDPR, which provides that processing is lawful if it is necessary for the purposes of pursuing legitimate interests.

Our legitimate interests include security as well as early identification of cyber attacks and protection against them, which we're obligated by law to ensure in order to safeguard your personal data. IP addresses and host names are stored in our logs in an anonymised form only, unless there is a specific suspicion of harmful activity by the visitor.

Where harmful activity is suspected (including, without limitation, attempts to interfere with source code, circumvent security systems, perform mass queries, modify the site, gain access to protected areas, attempts at SQL injections, cross-site scripting, session hijacking etc.), the logged data are subsequently checked and, where necessary, used as evidence in the prosecution of any offences and provided to competent German authorities or a law firm seated in Germany. We also reserve a right to technically prevent access to our server where there is a strong suspicion of a cyber attack (such as a brute force attack). This is done by blocking data traffic from our server to you.

CONTACT FORMS/CONTACTING US

When contacting us (e.g. through our contact form or via e-mail), your personal data will be collected. Which data specifically are collected is evident from the respective form. Such data will be stored and used solely for the purposes of replying to your enquiry or contacting you and any related technical handling operations. In this case, data are processed on the basis of our legitimate interest in replying to your enquiry in accordance with Art. 6(1)(f) GDPR. If you are contacting us with a view to concluding a contract, data are processed also in accordance with Art. 6(1)(b) GDPR. Your data will be erased after your enquiry is answered in full, i.e. when it can be assumed under the circumstances that the matter has been finally resolved, unless this is contrary to any legal obligations concerning data storage.

MINORS AND CONTACT FORMS

We have no intention to require any personal data from persons under the age of eighteen years or to collect, process, transfer or store. If you are under the age of eighteen years, please don't provide any personal data to this server. If your child has provided any personal data, please contact office@one-solution-logistics.de to have such data erased, if we haven't erased them yet.

RATING SYSTEM

On our websites we offer a rating tool which you are free to use. Your rating will be displayed on our websites. Your rating on a scale between one and five stars will be published, along with the text of your review and your name or nickname. You can choose whether you sign your review with your proper name, company name, stage name, pseudonym or nickname, or nothing at all. You are therefore free to decide which data you wish to disclose. The relevant box is pre-completed as 'Anonymous' and you can leave it this way. Providing any personal data in the form isn't mandatory.

Before your rating or review is published, we will first verify it manually. Once you submit your rating, your IP addressed will be recorded until such verification. In this case, data are processed based on Art. 6(1)(f) GDPR, which provides that processing is lawful if it's necessary for the purposes of pursuing legitimate interests.

Here, such legitimate interest is defence against cyber attacks and their prosecution. This is also allows us to report any illegal contents. Our legitimate interest is based in particular on our legal obligation under §138 of the German Criminal Code to report any credible information about the planning of an offence such as high treason, murder, homicide, robbery or abduction or offences creating a danger to the public at a time when the commission or result of such an offence can still be averted. As soon as verification has been completed (usually within several days, no more than 14 days) and there are no grounds for prosecution, an IP address is erased. Where there are grounds for prosecution, an IP address will be stored for as long as necessary for the purposes of prosecuting an offence, but not longer.

You can enter your contact details into our rating system. Which data to enter is up to you. Entering your contact details is voluntary, and a relevant box will be displayed only if you clearly consent to our contacting you for your review. Your contact details won't be published on our website. The contact details you enter will only be stored to an extent necessary for any feedback regarding your review. When there is no more need for it, your details will be erased.

COOKIES

Some functions of this website are only possible thanks to cookie files. Cookies are small text files which we save on your computer and whose contents we determine. We're able to read these contents whenever you visit, including in the future, if you use the same device and the same browser as previously. Cookies may be created for an indefinite time or they may expire after a defined period. Furthermore, cookies can also be stored only for the duration of a user session. (A user session ends when you close your browser window or all tabs with our website).

We use cookies to unambiguously identify your user session. This is done by assigning a unique session ID to each session. This allows us to identify you and display only relevant content even if you switch between sub-pages. This is also necessary, for example, for an online shop to remember the contents of your shopping cart, for a real estate portal to store your notes or for a regular website to remember that a certain action has been taken to prevent multiple queries. Even when you object to Google Analytics collecting your data using the so-called 'opt-out plug-in', your choice is recorded in a cookie, which will be used again when you visit in the future to show that you have objected to data collection by Google Analytics. Please note that the use of our website may be impossible or limited if you disable cookies.

If personal data are processed with the use of individual cookies we created, this is done exclusively in accordance with either Art. 6(1)(b) GDPR for the purposes of performing a contract or in accordance with Art. 6(1)(f) GDPR for the purposes of pursuing our legitimate interests, i.e. ensuring the best possible functionality of the website, a user-friendly and effective design, as well as improvement in website security and fraud prevention.

Cookies can also be saved by third parties whose services and content are integrated with our website. Where this is the case, see the following paragraphs for the contents and scope of collected information.

DISABLING COOKIES

You can adjust your browser settings to decide whether you want to decide whether or not to accept cookies individually, or disable them partially or even completely. Depending on the type and version of your browser, the configuration of your settings may look differently. For instructions, go to your browser's help section or follow one of the links below. The list includes instructions for some of the most popular browsers.

Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies Firefox: https://support.mozilla:org/de/kb/cookies-erlauben-und-ablehnen

Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&httm=en&answer=95647

Safari: https://support.apple.com/kb/ph21411?locale=de_DE

Opera: http://help.opera.com/Windows/10.20/de/cookies.html [TB1]

DO NOT TRACK BROWSER SETTINGS

Most of today's common browsers offer a do-not-track feature, which allows you to decide not to be tracked by a website. With this feature enabled, your browser tells ad networks, websites, and applications that you don't wish your browsing behaviour to be tracked for the purposes of advertising etc. Editing this feature may vary from browser to browser. As an example, Mozilla Firefox instructions can be found here:

https://addons.mozilla.org/de/firefox/addon/noscript/ [TB2]

Please note, however, that this feature only informs businesses and websites of your wish not to be tracked. Each website and company is responsible for the implementation of such functions or corresponding ones. They may not be under an obligation to do so and/or may not have fully implemented the necessary measures.

Our website doesn't generally include a tracking mechanism, including for third parties.

SOCIAL MEDIA AND VIDEO PLATFORMS

'WISTIA' EMBEDDED VIDEOS

Our website features embedded videos using the Wistia

(https://wistia.com) platform. The platform is property of Wistia Inc. seated at 7 Tudor Street, Cambridge, Massachusetts, United States.

To ensure secure integration, we only use the player privacy mode provided by the platform, which, according to the provider, enables privacy-compliant integration by simply storing the IP address in an anonymous form and completely disabling tracking functions such as session tracking or cookie tracking. For more, read the following information provided by Wistia:

https://wistia.com/support/account/gdpr

https://wistia.com/support/developers/player-privacy-mode

Wistia Inc. based in the USA is Privacy Shield-certified under the EU-U.S. Privacy Shield Framework ( https://www.privacyshield.gov/participant?id=a2zt0000000TSBFAA4&status=Active ), which guarantees compliance with EU data protection requirements. For more information concerning data protection on the platform, see the provider's statement at: https://wistia.com/privacy.

PARTNER ACCOUNTS

Lorry drivers or freight forwarders who cooperate with us can set up a partner account which will enable you in the future to fill in an 'Empty Lorry Report' form. You can set up a partner account when first submitting an Empty Lorry Report form, an it's absolutely voluntary. Data is processed for the purpose of substantially improving and simplifying your user experience on this website, especially as regards the Empty Lorry Report form. Data processing is carried out based on Art. 6(1)(a) GDPR with your consent. You may withdraw your consent by informing us. The withdrawal of your consent doesn't affect the lawfulness of processing based on your consent before its withdrawal. When you withdraw your consent, your partner account will be deleted.

Collection, processing and use of personal data for the purposes of an 'Empty Lorry Report'

As part of the registration process, we only collect and use your personal data only to the extent necessary to fulfil, handle and process your enquiries and reports. We will not transfer your data to any third parties, with the exception of our service partners, who we need to perform our contractual obligations, or service providers with whom we have concluded a contract for order data processing in accordance with GDPR. In any case, we strictly comply with all legal requirements. The scope of transferred data is always limited to the minimum required for us to perform the intended action.

RIGHTS OF DATA SUBJECTS

As long as the legal requirements are met, you enjoy the following rights under Art. 15 to Art. 20 GDPR:

- right to information under Art. 15 GDPR;

- right to rectification under Art. 16 GDPR; .

- right to data erasure under Art. 17 GDPR;

- right to restriction of processing under Art. 18 GDPR;

- right to data portability under Art. 20 GDPR;

In accordance with Art. 77 GDPR you have a right to lodge a complaint with a supervisory authority. In principle, you may contact the supervisory authority of the federal state of our registered office or, if applicable, your permanent or habitual place of residence.

Also, in accordance with Art. 21(1) GRPR, you have a right to object [TB3] to processing of personal data concerning yourself which is based on Art. 6(1)(f) GDPR and to processing for the purposes of direct advertising.

PERSONAL DATA STORAGE PERIOD

Unless no specific data storage periods are mentioned in this Data Protection Statement, these will be determined based on legal storage periods (such as commercial or tax-law storage periods). Data are routinely erased at the latest upon the expiry of the requisite storage period, as far as they are no longer necessary for the performance or conclusion of a contract or there is no legitimate interest on our part. If you exercise your right to data erasure, your data will be erased promptly unless there are any provisions of law to the contrary (such as the retention period for invoices).

UPDATES OF THIS PERSONAL DATA PROTECTION STATEMENT

This data protection statement may be from time to time amended or updated. This is how we can adjust it to the latest legal requirements and reflect changes in our services. We recommend that the visitors to and users of our website regularly check for our latest data protection terms and conditions. Whenever you visit, the latest version of this document is available. This document was last updated on