This is a translation for convenience. The German version (Datenschutzerklärung) is legally binding.
1. General information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. Detailed information on data protection can be found in the privacy policy set out below.
Who is responsible for collecting data on this website?
Data processing on this website is carried out by the website operator, whose contact details you will find in the section “Controller” below.
This website is an information and enquiry service for business customers. We use no analytics, tracking or marketing services, embed no third-party fonts, maps or videos, and pass no data on for advertising purposes.
2. Controller
The controller for data processing on this website is:
BKL Spedition GmbH
Seelandstrasse 15
23569 Lübeck
Germany
Phone: +4945145054680
Email: [email protected]
Managing Director: Olga Vasilyeva
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (such as names or email addresses).
3. Data protection officer
Under German law (§ 38 BDSG), appointing a data protection officer is mandatory only where at least 20 people are constantly engaged in the automated processing of personal data.
A data protection officer is not legally required for our company. For all data protection matters, please contact the controller named above.
4. Your rights as a data subject
Within the applicable statutory provisions (GDPR, BDSG) you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the processing, and where applicable a right to rectification or erasure of that data. For this and any further questions on the subject of personal data you can contact us at any time at the address given in the legal notice.
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing based on legitimate interests (Art. 21 GDPR)
Withdrawal of your consent: many processing operations are only possible with your express consent. You may withdraw consent already given at any time; an informal message by email is sufficient. The lawfulness of processing carried out before the withdrawal remains unaffected.
Right to data portability: you have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format.
Right to lodge a complaint with the competent supervisory authority: in the event of infringements of the GDPR, data subjects have a right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or the place of the alleged infringement. The authority competent for us is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, www.datenschutzzentrum.de.
5. Data collection on our website
Hosting
The website runs on a server inside the European Union (located in Finland). No personal data is transferred to a third country in the course of hosting.
Server log files
The provider of these pages automatically collects and stores information in server log files, which your browser transmits to us automatically. These are:
- browser type and browser version,
- operating system used,
- referrer URL,
- host name of the accessing computer,
- time of the server request,
- IP address.
This data is not merged with other data sources. The basis for processing is Art. 6 (1) (f) GDPR, covering the performance of a contract or pre-contractual measures as well as our legitimate interest in the error-free provision and the security of our services. Retention: log files are deleted or rotated after 14 days at the latest, unless they are needed to investigate a specific security incident.
Content delivery network (Cloudflare)
To deliver the website and defend against overload and attack attempts we use the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. All traffic between your browser and our server passes through Cloudflare’s servers, which process your IP address, technical connection data and the URL requested.
Legal basis: Art. 6 (1) (f) GDPR — our legitimate interest in a secure, available and fast website.
Transfer to a third country: processing in the USA is possible. A data processing agreement including the EU Standard Contractual Clauses is in place, and Cloudflare is certified under the EU-US Data Privacy Framework. See cloudflare.com/privacypolicy.
Freight enquiry and contact form
If you send us enquiries via the enquiry form or by email, the details you provide, including the contact data you give there, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass this data on without your consent (Art. 6 (1) (b) GDPR). We process:
- contact data: company, contact person, email address, phone number;
- shipment data: pickup and delivery location, transport mode, cargo type, weight, pallet count, volume, dimensions, temperature requirements, ADR details, ready date and your comments;
- optionally uploaded files (for example a packing list or invoice);
- technical data: IP address, time of submission and the page used — solely to document consent and to block form spam.
Recipients: the enquiry is emailed to our dispatch team and stored in this website’s database. It is passed on to third parties only where necessary to carry out the requested transport (for example to performing carriers or ferry lines).
Retention: enquiries that do not lead to an order are deleted no later than 12 months after the last contact. Where an enquiry leads to a contract, statutory commercial and tax retention periods apply.
Provision: the fields marked as mandatory are required to process your enquiry; without them we cannot prepare an offer.
Contact by email, phone or messenger
If you contact us by email, phone, fax or WhatsApp, we process your details to handle the request on the basis of Art. 6 (1) (b) or (f) GDPR. Please note that using WhatsApp involves processing by WhatsApp Ireland Ltd.; if you wish to avoid this, please use email or phone.
6. Cookies and local storage
This website uses strictly necessary cookies only. There is no tracking and no audience measurement.
| Name | Purpose | Duration |
|---|---|---|
| pll_language | Stores the selected language version | 1 year |
| bkl_cookie_ack (localStorage) | Remembers that the cookie notice was acknowledged | until you clear it |
| wordpress_* / wp-settings-* | Login and preferences — editorial users only | session / 1 year |
Legal basis: § 25 (2) no. 2 TDDDG (strictly necessary storage) and Art. 6 (1) (f) GDPR. No consent is required for these.
7. SSL / TLS encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL / TLS encryption (HTTPS) throughout. You can recognise it by the address bar of your browser. When encryption is active, the data you transmit to us cannot be read by third parties.
8. Changes to this privacy policy
We update this policy whenever changes to the processes we use make it necessary. The version published on this page applies.