Name and Address of the Controller 

The controller within the meaning of the General Data Protection Regulation (GDPR), other national data protection laws of the Member States, and other data protection regulations is: 

Rhenus SE & Co. KG 
Rhenus Platz 1 
59439 Holzwickede 
Germany 
Tel.: +49 (0)2301 29-0 
Email: info[at]rhenus.com 
Website: www.rhenus.group 

Name and Address of the Data Protection Officer 

The Data Protection Officer of the controller is: 

Data Protection Officer 
Rhenus Platz 1 
59439 Holzwickede 
Germany 
Email: datenschutz[at]rhenus.com 
Website: www.rhenus.group 

We are committed to protecting your privacy and ensuring the confidentiality of your personal data. Below, you will find important information about how we process your data: 

Provision of the Website and Creation of Log Files 

1. Data Collection 

You can generally use our websites without revealing your identity. We only collect technical data, such as the name of your internet service provider, the website from which you accessed ours, and which pages you visit on our site. These details, including timestamps, are analyzed for internal statistical purposes, advertising, website analytics, and the needs-based design of our website. You remain completely anonymous as a user. No pseudonymous usage profiles are created. 

2. Purpose and Legal Basis for Processing 

The temporary storage of the IP address by the system is necessary to deliver the website to the user’s computer. For this purpose, the IP address must remain stored for the duration of the session. This also constitutes our legitimate interest in data processing pursuant to Art. 6(1)(f) GDPR. 

3. Duration of Storage 

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of website provision, this is the case when the respective session ends. 

4. Right to Object and Removal Option 

The collection and storage of data for website operation are essential for running the website. Therefore, users do not have the option to object. 

Customer Portal 

Our customer portal supports the marketing of Rhenus Air & Ocean’s specific customer service portfolio through a website with a secure login area accessed via email and password. Within the protected area, customers can track shipments. The website also provides an overview of our available services. 

As part of using the customer portal, we process customer-specific shipment data originating from our internal Transport Management System. This primarily involves business-related data. Additionally, we provide personalized dashboards with KPIs for the respective shipments. 

The processing of this data serves to provide and operate the customer portal, especially for transparent shipment tracking, individualized presentation of performance indicators, and communication with our customers. Data collected via the contact form is processed to handle inquiries and improve our customer service. Technical log data is processed for statistical analysis, service optimization, and to ensure website stability, security, and error resolution. 

After termination of a contract, data such as booking documents, waybills, and delivery notes displayed in Track & Trace will be deleted within six years in accordance with statutory retention obligations. Tracking histories and system logs are deleted within three years. Support requests and contact data of individuals are deleted within one year after contract termination. 

Contact Form and Email Contact 

Our website includes a contact form for electronic inquiries. If a user submits the form, the data entered will be transmitted to and stored by us. The form offers options for both business and private inquiries. 

For business inquiries, the following data is processed: 

• Subject 

• Salutation 

• First and last name 

• Email address 

• Company name and address 

• Telephone number (optional) 

• Message text 

• Time of inquiry 

• IP address 

For private inquiries, the following data is processed: 

• Subject 

• Salutation 

• First and last name 

• Email address 

• Telephone number (optional) 

• Message text 

• Time of inquiry 

• IP address 

Alternatively, contact can be made via the provided email address. In this case, the personal data transmitted with the email will be stored. 

Processing this data is solely for handling your inquiry and any follow-up questions. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR and, where applicable, Art. 6(1)(b) GDPR, if your inquiry relates to entering into a contract. Additional data collected during submission is used to prevent misuse and to secure our IT systems. This is also based on Art. 6(1)(f) GDPR. 

Data will be deleted when it is no longer needed for the purpose for which it was collected and no legal retention obligations apply. For data submitted via the contact form or by email, this typically occurs once the conversation with the user has concluded. A conversation is considered concluded when it is clear from the context that the issue has been resolved. Additional personal data collected during submission will be deleted no later than seven days afterward. 

Inquiries submitted via the contact form are forwarded to the relevant Rhenus company, Rhenus Air & Ocean Management GmbH & Co. KG, which is responsible for handling service-related questions. Inquiries sent to the email address listed in the site’s imprint are processed by Rhenus Assets & Services GmbH & Co. KG, Rhenus Platz 1, 59439 Holzwickede. Where necessary, your inquiry will be forwarded to the appropriate Rhenus company. Your data is processed solely for the purpose of responding to your inquiry. 

If data processing is based on Art. 6(1)(f) GDPR, you may object at any time. Please note that in such cases we may be unable to continue processing your request. You can submit your objection by sending an email to the address listed in this privacy policy. 

Data Subject Rights 

1. Right of Access 

You have the right to request confirmation as to whether we are processing personal data concerning you. If so, you may request information about: 

1. The purposes of processing 

2. The categories of data processed 

3. The recipients or categories of recipients to whom the data has been or will be disclosed 

4. The planned retention period or criteria used to determine that period 

5. The existence of rights to rectification, erasure, restriction, or objection 

6. The right to lodge a complaint with a supervisory authority 

7. The origin of the data, if not collected directly from you 

You may request a free copy of your data. We reserve the right to charge a reasonable fee for additional copies. 

2. Right to Rectification 

You have the right to request that inaccurate or incomplete personal data concerning you be corrected or completed. 

3. Right to Restriction of Processing 

You may request restriction of processing under the following conditions: 

1. You contest the accuracy of the data and verification is pending 

2. Processing is unlawful, and you oppose deletion 

3. We no longer need the data, but you require it for legal claims 

4. You have objected under Art. 21(1) GDPR, and a balance of interests is pending 

4. Right to Erasure („Right to Be Forgotten“) 

You may request deletion of your personal data where one of the following applies: 

1. The data is no longer needed for its original purpose 

2. You withdraw consent and no other legal basis exists 

3. You object under Art. 21(1) or (2) GDPR, and no overriding grounds exist 

4. The data was processed unlawfully 

5. Deletion is required under EU or Member State law 

6. The data was collected in connection with information society services under Art. 8(1) GDPR 

Exceptions: This right does not apply if processing is necessary: 

• To exercise freedom of expression and information 

• To comply with a legal obligation 

• For reasons of public interest in public health under Art. 9(2)(h), (i) and Art. 9(3) GDPR 

• For archival, research, or statistical purposes under Art. 89(1) GDPR 

• For the establishment, exercise, or defense of legal claims 

5. Right to Data Portability 

You have the right to receive your personal data in a structured, commonly used, machine-readable format. You may also request direct transmission to another controller, where technically feasible. 

This right applies only if: 

• Processing is based on consent (Art. 6(1)(a) or Art. 9(2)(a)) or contract (Art. 6(1)(b)), and 

• Processing is carried out by automated means 

This right does not apply to processing required for tasks in the public interest or exercise of official authority. 

6. Right to Object 

You may object to the processing of your personal data at any time if it is based on Art. 6(1)(e) or (f) GDPR, including profiling. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests or the data is needed for legal claims. 

If your data is used for direct marketing, you have the right to object at any time. If you object, your data will no longer be used for this purpose. 

7. Right to Withdraw Consent 

You have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. 

8. Right to Lodge a Complaint 

You have the right to lodge a complaint with a supervisory authority, especially in your place of residence, workplace, or the location of the alleged infringement, if you believe that processing your personal data violates the GDPR.