Data Privacy Policy

The controller in the sense of the General Data Protection Regulation and other national data protection laws in the member states as well as other data protection law provisions is:

Rhenus SE & Co. KG
Rhenus-Platz 1
59439 Holzwickede
Germany
Phone: +49 (0)2301 29-0
Email: [email protected]
Website: www.rhenus.group

Data Protection Officer
Rhenus-Platz 1
59439 Holzwickede
Germany
Email: [email protected]
Website: www.rhenus.group

We would like to provide you with the following notes and information regarding the way that we carefully protect your private details and the extensive level of confidentiality when handling your data:

1. Anonymous data collection

In principle, you can use our websites without informing us who you are. We only learn about technical data like the name of your Internet service provider, the website from which you come and the corporate websites that you visit. This information is assessed with the date and time details for internal statistical purposes related to advertising, website analysis and for designing our websites to meet needs. You remain completely anonymous as a user in this process. No pseudonymised user profiles are generated.

2. The purpose and legal basis of data processing

The temporary storage of the IP address by the system is necessary in order to enable the website to be sent to the user’s computer. The user’s IP address must be stored for the duration of the session. The legal basis for temporarily storing the data is found in Article 6 Para. 1 f) of the GDPR.

3. The length of time that data is stored

The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was gathered. When gathering data to make available the website, deletion occurs once the session in question has ended.

4. Opportunity to object and to have the data removed

The logging of data for making available the website and storing data in log files is absolutely necessary to operate the Internet site. There is therefore no opportunity for the user to object to this.

1. Description and scope of the data processing

We make use of cookies to improve the quality of establishing the link with and the content of our website and to provide user-oriented navigation that is as smooth as possible. We make use of so-called session cookies that are restricted to the time of your visit to the website. They are used to determine which content is viewed from your PC while you continue to surf and they also play a role in increasing your security when surfing. Once you leave our website or do not click on it for a certain time, these short-term cookies are deleted again.  

Cookies cannot do any damage to your PC. They do not cause any security risk in the sense of viruses or spying on your PC. You control how cookies are handled yourself. Please use the help function in your browser to allow, reject, view and delete them.

We make use of cookies in order to make our website more user-friendly. Some elements on our website require us to identify the browser making the request after you move from one site to another. The following data is therefore stored and transmitted in the cookies:

• language settings

We also use cookies that enable an analysis of the surfing behaviour of users. The following data can be transmitted in this way:

• search terms that are entered

2. The purpose and legal basis of data processing

The purpose of using absolutely necessary cookies (technically necessary cookies) is to enable the use of websites for the users. The legal basis for the processing of personal data using absolutely necessary cookies is Article 6 Para. 1 f) of the GDPR.

Some functions of our website are not available without using cookies. It is essential for them that the browser is recognised again after a change of site. We need cookies for the following applications:

• to take over language settings

The user data collected through the cookies required for technical purposes is not used to draw up any user profiles.

Analysis cookies are used for the purpose of improving the quality of our website and its content. The analysis cookies enable us to see how the website is being used and we are then able to continually optimise our services. The following analysis cookies are used:

• to note search terms

The legal basis for the processing of personal data using non-technically necessary cookies (performance cookies) is Article 6 Para. 1 a) of the GDPR (consent).

3. The length of time that data is stored and the opportunity to object and to have the data removed

Cookies are stored on the user’s computer and are transmitted to our site by the latter. As a user, you therefore have full control over the use of cookies. By making changes to the settings in your Internet browser, you can deactivate or restrict the sending of cookies. Any cookies already stored can be deleted at any time. This can take place automatically too. If cookies are deactivated for our website, it may not be possible for you to make full use of all the functions available on the website.

1. Description and scope of the data processing

Newsletters are sent on the basis of the user’s registration on the website:

It is possible to subscribe to a free newsletter on our website. The data entered on the input form is sent to us once you register for the newsletter. The following data is processed in this case:

• your first name and surname 
• your email address
• your company (optional)
• your phone number (optional)

The following data is also gathered when you register:

• the IP address of the computer making the request
• the date and time of registration

Your consent is obtained to process the data as part of the registration process and reference is made to this data protection declaration.

The newsletter is sent on the basis of the sale of goods or services:

If you purchase goods or services from our website and leave your email address there, we may use this subsequently to send out a newsletter. In this case, the newsletter is exclusively used to directly advertise our own similar goods or services.

No data is forwarded to third parties in conjunction with processing data to send out newsletters. The data is exclusively used for sending out the newsletter.

The job newsletter mailing is based on the offer of vacant job positions for the Rhenus Group. With your selection of certain job criteria (career level, field of activity, company, country) we will inform you weekly about new job offers in the form of a Job Newsletter.

2. The purpose and legal basis data processing

Newsletters are sent on the basis of the user’s registration on the website. The user’s email address is gathered for the purpose of delivering the newsletter. The gathering of other personal data as part of the registration process is used to prevent any misuse of the services or the email address that is used. 

The legal basis for processing the data, once the user has registered for the newsletter, is Article 6 Para. 1 a) of the GDPR, provided that the user has given consent for this.

The newsletter is sent out due to the sale of goods or services: Legal basis for the dispatch of the newsletter as a result of the sale of goods or services is § 7 Para. 3 UWG (german law) or Article 6 Para. 1 f) of the GDPR.

3. The length of time that data is stored

The data is deleted as soon as it is no longer required to achieve the purpose for which it was gathered. The user’s email address is therefore stored for as long as the subscription to the newsletter is active.

The personal data collected during the registration process is usually deleted after a period of seven days.

4. Opportunities to object and to have the data removed

The user concerned can terminate the subscription to the newsletter at any time. There is an appropriate link in each newsletter for this purpose. There is also an opportunity to cancel any consent to store the personal data that is gathered during the registration process.

On our website you have several options for jumping to different tools of the Rhenus Group. Some of these require logins / registrations. The respective data protection regulations can be found on the start pages of the tools.

1. Description and scope of managing the data

There is a contact form on our website and it can be used to make contact electronically. If a user makes use of this facility, the data entered on the input form is sent to us and stored. This data involves:

• subject
• first name
• last name
• email address
• name of the company
• address of the company
• country/Region
• phone number
• details of your delivery
• free text
• time of the request
• IP address

Alternatively, it is possible to make contact via the email address that is made available. In this case, the user’s personal data that is sent with the email is stored.  

2. The purpose and legal basis of data processing

Within the scope of your contacting us, we process your personal data on the basis of the following legal principles for the following purposes:

The processing of the personal data from the contact form or your email serves us solely to process the contact and in case of follow-up questions. The legal basis for the processing of the data is our legitimate interest in answering your request in accordance with Article 6 Para. 1 f) of the GDPR and, if applicable, Article 6 Para. 1 b) of the GDPR, if your request is aimed at the conclusion of a contract.

The other personal data processed when the email is sent is used to prevent any misuse of the contact form and guarantee the security of our IT systems.  The legal basis for the processing of personal data is Article 6 Para. 1 f) of the GDPR.

3. The length of time that data is stored

The data is deleted as soon as it is no longer required to achieve the purpose for which it was gathered. This is the case for any personal data from the input form in the contact form and the data that is sent by email when the relevant conversation with the user has been concluded. The conversation has been ended when the circumstances suggest that the facts of the case in question have been finally resolved.

The personal data, which is also gathered during the sending procedure, is deleted after a period of seven days, at the very latest.

4. Recipients of the data

In our contact form you can select the topic on which you would like to make an inquiry. Inquiries on the topic "General" are handled by the central specialist department. If necessary, we will forward your inquiry to the responsible Rhenus company for internal processing. This company will process the data you have provided in order to contact you regarding your inquiry.

Enquiries on all other topics are automatically forwarded for internal processing to the stored contact mail of the relevant Rhenus company and processed there. This company will process the data you have provided in order to contact you regarding your inquiry.

5. Opportunity to object and to have the data removed

In the case of Article 6 Para. 1 f) GDPR, you can object to the processing of your personal data at any time. Please note that in this case your request cannot be processed further. You can declare your objection by sending an email to our email address given above.

Google reCAPTCHA, Google Maps API). If you give your consent through our cookie banner, we will transfer the necessary data to the respective provider (e.g. your IP address).

If you consent to the activation of these services through our cookie banner, it cannot be ruled out that personal data will be transmitted to providers in countries outside the European Economic Area (EEA) which, from the point of view of the European Union ("EU"), do not ensure an "appropriate level of protection" for the processing of personal data in accordance with EU standards. Possible risks that cannot currently be ruled out are in particular:

- Your personal data could possibly be passed on to other third parties beyond the actual purpose (for example: use your data for advertising purposes.)

- You may not be able to sustainably assert or enforce your right to information toward the third-party provider.

- There is possibly a higher probability that incorrect data processing can occur, as the technical and organizational measures taken by third-party providers to protect personal data do not fully meet the requirements of the GDPR in terms of quantity and quality.

- The risk of data transmission to the USA is basically the relatively easy access to data by US authorities, as well as the fact that EU citizens do not have effective legal remedies against the extensive access rights of US authorities to personal data.

Please take this fact into account before you give your consent and thus allow your data to be transmitted.

For more information, please refer to our cookie banner.

The same applies to the social media profiles we operate when you visit our pages at the respective social media provider (Facebook, Instagram, LinkedIn).

This website uses Google Analytics 4, a web analytics service provided by Google LLC. The controller is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Google Analytics 4 uses cookies that enable an analysis of your use of our websites. The information collected by means of the cookies about your use of this website is generally transferred to a Google server in the USA and stored there.

Google Analytics 4 has IP anonymisation enabled by default. Due to IP anonymisation, your IP address will be shortened by Google within Member States of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. According to Google, the IP address transferred by your browser as part of Google Analytics will not be merged with other Google data.

The following visitor data, which is not assigned to a person, can be collected:

• Acquisition (= source of visitors, e.g. Google search, direct entry);
• User behaviour (pages visited, bounce rate, links clicked);
• Geographical data (country, region, city, language);
• Technology (browser, device category mobile / desktop, screen resolution, device model, operating system).

We use Google Analytics 4 for the following purposes: tracking user behaviour in order to derive optimisation potential (ROI maximisation), reporting website performance, monitoring the success of campaigns. The legal basis is your consent pursuant to Art.6 para.1 p.1 lit.a GDPR and § 25 para. 1 p.1 TDDDG.

In addition, Google Analytics 4 is integrated via server-side tag management, i.e. the visitor data is not transferred directly to Google Analytics 4. The data is first transmitted to a so-called tagging server (via Google Cloud) in Germany and from there transferred to Google Analytics 4 in a controlled manner (i.e. no personal/demographic data).

Recipients of the data may be

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor under Art. 28 GDPR).;
• Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA;
• Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA:

For the USA, the European Commission adopted a news adequacy decision on 10 July 2023. Google LLC is certified under the EU-US Privacy Framework. Since Google servers are distributed worldwide and a transfer to third countries (for example to Singapore) cannot be completely ruled out, we have also concluded the EU standard contractual clauses with the provider to establish an appropriate level of data protection in those countries.

The data sent by us and linked to cookies are automatically deleted after 14 months. The maximum lifespan of Google Analytics cookies is 2 years. The deletion of data whose retention period has been reached occurs automatically once a month.

You can withdraw your consent at any time with effect for the future by accessing the cookie settings and changing your selection there. The lawfulness of the processing carried out on the basis of the consent until revocation remains unaffected.

You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may result in a restriction of functionalities on this and other websites. You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) by Google, and the processing of this data by Google, by not giving your consent to the setting of the cookie or downloading and installing the browser add-on to deactivate Google Analytics HERE.

For more information on Google Analytics' terms of use and Google's privacy policy, please visit https://marketingplatform.google.com/about/analytics/terms/us/ and at https://policies.google.com/?hl=en.

We use Hotjar on our website. This is a web analytics service provided by Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 3155, Malta, Europe, Tel: +1(855)464-6788 We use Hotjar to better understand the needs of our users and to improve our services and user experience on this website. Hotjar is technology services that help us better understand our users' experiences. For example, it is possible to see how much time users spend on which of our pages, which links users click on, what they like and what they don't like. This allows us to tailor our offerings to the feedback we receive from our users. The data processing is carried out on the basis of your consent (Article 6 Para. 1 a) GDPR). You can withdraw this consent at any time.

Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices. This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. We have concluded a data processing agreement with Hotjar. Hotjar is contractually forbidden to sell any of the data collected on our behalf.

You can prevent Hotjar from collecting the data. Please note that this setting will be deleted if you delete your cookies.

On our website we use a link to our Facebook fan page. The joint data controller for the operation of our Facebook fan pages is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter "Meta"). The data protection officer can be contacted via the contact form or by post at the above address. Meta Platforms, Inc. is the American parent company of Meta Platforms Ireland Limited.

1. purpose and legal basis for data processing
You can regularly access our social media fan pages on the internet at any time, regardless of whether you have created a user account on the corresponding platform yourself or not. If you are logged into your Facebook account, Meta can assign this to your Facebook account. In both cases, however, your data will be processed by the internet platforms of the social network. Every time you call up the social media platform, your IP address is recorded and stored. Furthermore, a cookie is usually set on your page, which stores your visit and other data about your visit to the social media platform. Please note that Rhenus has no influence on the collection of data and its further use by the social networks. Thus, there is no knowledge about the extent to which, where and for how long the data is stored, to what extent the networks comply with existing deletion obligations, what evaluations and links are made with the data and to whom the data is passed on. When calling up our Facebook fan pages, your data will be forwarded to the USA.

a) Analysis
There is a joint responsibility between Rhenus and Meta to process this personal data into events for page insights ("Insights Data"), as well as data such as comments, likes and the like. The joint responsibility includes the creation of these events and their aggregation into Page Insights, which are then made available to us.
We use "Facebook Insights" to obtain a presentation of statistically processed data without personal reference. The statistical processing is generated and provided by Meta. As the fan page operator, Rhenus has no influence on the generation and provision of this data. The data processing carried out by us is limited in scope. This enables us to determine the behaviour of our users and use it to optimise our posts. Through the "Insights" we can learn, for example, about the following static data: the views of the fan page, activity of its visitors, the reach of posts, views, as well as average duration of video playbacks, data on which country and which city our visitors come from, as well as statistics on the gender ratios of our visitors. The personal data processing associated with this takes place exclusively at Meta. In addition, personal data may be processed when visiting our fan pages.
The legal basis for the storage of insights data on our part is the balancing of interests pursuant to Art. 6 Para. 1 lit. f DSGVO, so that the fan page is optimised and designed attractively for visitors.

b) Contact requests and visitor activity
If you contact us through Facebook Messenger to find out about our services or to share your feedback, we process your personal data based on our legitimate interest in responding to your request pursuant to Art. 6 (1) lit. f DSGVO and, where applicable, Art. 6 (1) lit. b DSGVO if your request is aimed at concluding a contract.
As a rule, we receive the following data from you:

• Name, first name,
• gender;
• age, place of residence (if they are public);
• Information you provide to us in your message or comment;
• If you have responded to our post and type of response, or you have shared or commented on it.
• Followers: Number of people who follow Rhenus - including growth and development over a defined time frame.
• Reach: Number of people who see a specific post. Number of interactions on a post.
• Ad performance: How many people were reached and interacted with a post or paid ad.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected and there are no legal obligations to retain it. For personal data from messages, this is the case when the respective conversation with the user has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified.

2. data subject rights
Within the scope of joint responsibility with Meta, you can exercise your data subject rights pursuant to Art. 15, 16, 17, 18, 20, 21 DSGVO both with Meta and with us. Meta assumes the fulfilment of the obligations under the GDPR for the processing of Insights data, in particular the safeguarding of data subject rights. If you wish to make use of your data subject rights, please contact Meta directly. If you do not want Meta to be able to assign your visit to our pages to your Facebook user account, please log out of your user account.
For further information on the scope and processing of your personal data, please refer to Facebook's privacy policy and terms of use.

Our website uses functions of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company (hereinafter "LinkedIn"), Wilton Plaza, Wilton Place, Dublin 2, Ireland. We are jointly responsible for the processing of data with LinkedIn. The agreement pursuant to Art. 26 DSGVO can be found here: https://legal.linkedin.com/pages-joint-controller-addendum. The data protection officer of LinkedIn can be contacted via the following link: https://www.linkedin.com/help/linkedin/ask/ppq. The contact details of our data protection officer can be found in point II of this privacy policy.
Personal data is processed and stored on LinkedIn platform if you do not have a LinkedIn account yourself. Even if you are only a temporary visitor, personal data such as the IP address, the browser type, the operating system, information on previously accessed websites, the location, the mobile phone provider, the end device used, the search terms used and cookie information are processed. In addition, LinkedIn transmits data to third countries, in particular the USA. This data transfer is secured by standard contractual clauses of the EU Commission.

1. company profile on LinkedIn
We have a LinkedIn company profile. You can regularly access our company profile on the internet at any time, regardless of whether or not you have created a user account on the corresponding platform yourself. If you are logged into your LinkedIn account, LinkedIn can assign this to your user account. In both cases, however, your data will be processed by LinkedIn. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by LinkedIn. If you post your data publicly on our LinkedIn profile or comment on it, it can be viewed worldwide by other registered and non-registered visitors to our LinkedIn profile.
On our LinkedIn company profile, you also have the possibility to react to our posts, write comments, create a post on our page yourself or send us private messages. Any data you provide in this context will be processed by us. We process your personal data based on our legitimate interest in responding to your request pursuant to Art. 6 (1) lit. f DSGVO and, if applicable, Art. 6 (1) lit. b DSGVO if your request is aimed at concluding a contract.

As a rule, we receive the following data from you:

• Information about the user's profile;
• Information you provide to us in your message or comment;
• If you have responded to our post and type of response, or you have shared or commented on it;
• Type and manner of interaction.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected and there are no legal retention obligations to the contrary. For personal data from messages, this is the case when the respective conversation with the user has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified.

2. LinkedIn Insight Tag
The LinkedIn Insight Tag is a small JavaScript code snippet that we deploy on our website. The LinkedIn Insight Tag allows us to collect data about visits to our website, including URL, referrer URL, IP address, device and browser properties, timestamps and page views. LinkedIn does not share any personal data with us.  We are only provided with aggregated data as page insights, which does not allow us to draw conclusions about individuals or members. We may receive the following information such as industry, job title, company size, career level and location of the website visitors.

The processing of the data via the page insights is carried out by LinkedIn and us as joint controllers within the meaning of the DSGVO. The purpose of this data processing is solely to evaluate and analyse the actions and activities on our LinkedIn company profile and to make improvements based on this data. The legal basis for the processing of personal data is Art. 6 (1) lit. a DSGVO.

This data is encrypted, anonymised within 7 days and the anonymised data is deleted within 90 days.

3. LinkedIn Ads
We have integrated LinkedIn Ads on our website. LinkedIn Ads uses cookies and other browser technologies to analyse user behaviour and thus display targeted advertisements on LinkedIn. LinkedIn Ads collects information about visitor behaviour on various websites. This information is used to optimise the relevance of the advertising. Furthermore, LinkedIn Ads delivers targeted advertising based on behavioural profiling and geographic location. Your IP address and other identifiers such as your user agent are transmitted to the provider. In this case, your data is transferred to LinkedIn, possibly also to the USA. The use of LinkedIn Ads is based on your consent in accordance with Art. 6 para. 1 lit. a DSGVO.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected and there are no statutory retention obligations to the contrary. The specific storage period of the processed data cannot be influenced by us, but is determined by LinkedIn.

4. objection options and data subject rights
LinkedIn members can also control the use of their personal data for advertising purposes in their account settings. If you are a LinkedIn member and do not want LinkedIn to collect data about you via our website and link it to your membership data stored on LinkedIn, you can log out of LinkedIn before visiting our website.
In addition, you can deactivate the cookies independently of a LinkedIn membership here: Opt-Out.
In the context of joint responsibility with LinkedIn, you can exercise your data subject rights pursuant to Art. 15, 16, 17, 18, 20, 21 DSGVO with both LinkedIn and us. LinkedIn assumes the fulfilment of the obligations under the GDPR for the processing of Insights data, in particular the safeguarding of data subject rights. If you wish to make use of your data protection rights, please contact LinkedIn directly.
You can find more information on this in LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy

We embed YouTube videos on some of our websites. The operator is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google").

We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about website visitors before they watch the video. However, the disclosure of data to YouTube partners is not necessarily excluded by the extended data protection mode. Thus, YouTube establishes a connection to the Google DoubleClick network - regardless of whether you watch a video.

As soon as you start a YouTube video on our website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. Furthermore, YouTube can save various cookies on your end device after starting a video. With the help of these cookies, YouTube can obtain information about visitors to our website. This information is used, among other things, to collect video statistics, improve the user experience and prevent fraud attempts. Cookies remain on your device until you delete them. If necessary, further data processing processes may be triggered after the start of a YouTube video, over which we have no influence.

YouTube uses Google Fonts, which are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for the uniform display of fonts. When you call up a page, your browser loads the required Google Fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you are using must connect to Google's servers. This informs Google that our website has been accessed via your IP address. Google Fonts are used in the interest of a uniform and appealing presentation of YouTube. These processing operations are only carried out after you have given your express consent in accordance with Art. 6 (1) lit. a DSGVO when you activate the YouTube video on our website. You can revoke your consent in the cookie settings at any time.

Further information on Google Fonts can be found at https://developers.google.com/fonts/faq.

For more information on the handling of user data, please visit https://www.google.de/intl/de/policies/privacy. Information on how to change your privacy settings at Google can be found at https://privacy.google.com/take-control.html?categories_activeEl=sign-in.

We are present in the social network Twitter. These functions are offered by the Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland.

When you interact with our Twitter profile, we receive the following categories of personal information:

• your username and other information you have posted on your profile;
• when you follow or stop following our channel;
• mark a post with "I like" or "I no longer like";
• comment, retweet or respond to a post or comment.

You can prevent this by logging out of your Twitter account. The purpose for processing your personal data is our legitimate interest in exchanging information with our fans (Article 6 Para. 1 f) GDPR).

By using Twitter and the "Re-Tweet" function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transferred to Twitter in the process. We would like to point out that we, as the provider of the sites, have no knowledge of the content of the transmitted data or its use by Twitter. For further information, please refer to the Twitter privacy policy at: https://twitter.com/privacy.

On our website, we use a link to our Instagram fan page. The joint data controller for the operation of our Instagram fanpages is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter "Meta"). The data protection officer can be contacted via the contact form or by post at the above address. Meta Platforms, Inc. is the American parent company of Meta Platforms Ireland Limited.

1. Purpose and legal basis for data processing
You can regularly access our social media fanpages on the internet at any time, regardless of whether you have created a user account on the corresponding platform yourself or not. If you are logged into your Instagram account, then Meta can assign this to your Instagram account. In both cases, however, your data will be processed by the internet platforms of the social network.
Every time you call up the social media platform, your IP address is recorded and stored. Furthermore, a cookie is usually set on your page that stores your visit and other data about your visit to the social media platform. Please note that Rhenus has no influence on the collection of data and its further use by the social networks. Thus, there is no knowledge of the extent to which, where and for how long the data is stored, to what extent the networks comply with existing deletion obligations, what evaluations and links are made with the data and to whom the data is passed on. When calling up our Instagram fan pages, your data will be forwarded to the USA.

a) Analysis

There is a joint responsibility under Article 26 of the GDPR between us and Meta to be responsible for the processing of personal data in events for page insights ("Insights Data"), as well as for data such as comments, likes and the like. The joint responsibility includes the creation of these events and their aggregation into page insights, which are then made available to us. According to the requirement of Art. 26 DSGVO, an agreement for joint responsibility has been concluded. The agreement can be found here: m.facebook.com/legal/terms/Privacy.

• Name, first name,
• gender;
• age, place of residence (if they are public);
• Information you provide to us in your message or comment;
• If you have responded to our post and type of response, or you have shared or commented on it.
• Followers: Number of people who follow Rhenus - including growth and development over a defined time frame.
• Reach: Number of people who see a specific post. Number of interactions on a post.
• Ad performance: How many people were reached and interacted with a post or paid ad.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected and there are no legal obligations to retain it. For personal data from messages, this is the case when the respective conversation with the user has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified.

2. data subject rights
Within the scope of joint responsibility with Meta, you can exercise your data subject rights pursuant to Art. 15, 16, 17, 18, 20, 21 DSGVO both with Meta and with us. Meta assumes the fulfilment of the obligations under the GDPR for the processing of Insights data, in particular the safeguarding of data subject rights. If you wish to make use of your data subject rights, please contact Meta directly. If you do not want Meta to be able to assign your visit to our pages to your Instagram user account, please log out of your user account.
For more information on the scope and processing of your personal data, please refer to Instagram's data policy and terms of use.

a) Xing

Rhenus maintains a profile on the social network XING, which is operated by XING SE, Dammtorstraße 30, 20354 Hamburg, Germany. We have no knowledge of the content of the transmitted data or its use by XING.

We may learn the following categories of data when you interact with our site:

• first and last name
• gender
• email addresses
• phone numbers
• job title and company
• place: City and country
• information that you send us in your message
• if you like our contributions or if you have commented or shared them.

To prevent XING from collecting the above-mentioned data, please log out of XING. We process your personal data on the basis of our legitimate interest in responding to your request in accordance with Article 6 Para. 1 f) GDPR and, if applicable, Article 6 Para. 1 b) GDPR, provided that your request is aimed at concluding a contract.

For the purpose and scope of data collection and the further processing and use of data by XING, as well as your rights in this regard and setting options for protecting your privacy, please refer to the XING data protection information https://www.xing.com/privacy.

b) Kununu

We run a profile at kununu. kununu is an application of the XING service. This site is managed by Kununu (kununu GmbH represented by XING SE, Dammtorstraße 30, 20354 Hamburg, Germany). The current data protection information for XING and its application kununu can be found at https://www.kununu.com/de/info/datenschutz.

Our website uses Google Maps to visually display geographical information. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”). By integrating Google Maps, a direct connection is established between Google’s servers and your browser. This enables Google Maps to be displayed. By integrating and using Google Maps, your IP address as well as information on the use of the maps is transmitted to Google. In addition, Google processes the search terms you enter on the Google Maps map as well as your current location, provided you have granted your express consent via the Google Maps application. Moreover, Google Maps embeds Google Fonts. These are fonts from Google. To display Google Fonts on the Google Maps map, a connection is also established from your browser to the Google server. Your IP address is transmitted to Google in this process.

The legal basis for processing of the personal data is your consent according to Article 6 para. 1 lit. a) GDPR. You can revoke your consent for the future at any time by deselecting the corresponding category in the cookie banner. You can find the “Cookie settings” at the bottom of the footer on this website.

For detailed information on data processing by Google refer to Google’s privacy policy: http://www.google.com/privacypolicy.html. The additional Terms of Use for Google Maps/Google Earth also apply.

1. Description and scope of managing the data

Our pages use features of Cloudflare. Provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. CloudFlare offers a worldwide distributed content delivery network with DNS. We have concluded a corresponding agreement with Cloudflare based on the GDPR for order processing as well as EU standard contract clauses.

A Content Delivery Network (CDN), as provided by Cloudflare, is nothing more than a network of servers connected via the Internet. Cloudflare has distributed such servers around the world to bring web pages to your screen faster. Cloudflare makes copies of our website and places them on their own servers. When you visit our website, you will automatically be connected to Cloudflare's nearby servers which deliver the data. This way the loading time is significantly reduced.

We process your data when you access or use our domains, networks, websites, application programming interfaces and applications, or if you are authorized Cloudflare users for teams, such as our employees, agents or contractors. The information processed may include, but is not limited to, IP addresses, system configuration information and other information about traffic to and from our websites, devices, applications and/or networks (collectively, "Log Information").

In addition, Cloudflare stores server and network activity data, as well as observations and analysis collected by Cloudflare in the course of providing the Services (collectively, "Operational Metrics"). Examples of Operational Metrics include service availability and service availability metrics, request volumes, failure rates, cache rates, and IP threat assessments. Cloudflare uses and processes end-user log data to fulfill its obligations under our agreement.

2. The purpose and legal basis of data processing

We use Cloudflare to increase the speed of our website while reducing latency and thus improving/optimizing the user experience. The data processing is based on our legitimate interest (Article 6 Para. 1 f) of the GDPR).

3. The length of time that data is stored

In general, Cloudflare stores user-level data for domains in the Free, Pro and Business versions for less than 24 hours. For Enterprise domains that have Cloudflare Logs (formerly Enterprise LogShare or ELS) enabled, data can be stored for up to 7 days. However, if IP addresses trigger security alerts during Cloudflare, exceptions to the above retention period may occur.

For more details on Cloudflare's privacy policy, please see the following link: https://www.cloudflare.com/de-de/privacypolicy/

Functions of the Sprout Social service are integrated within our website. These functions are offered by Sprout Social, Inc, 131 S. Dearborn St., Ste. 700, Chicago, IL 60603, USA. This is a tool for evaluating social media activities, which displays messages and posts from our social media pages for the benefit of clarity, effectiveness and response. Accordingly, the legal basis is Art. 6 para. 1 lit. f) DSGVO. Only data is collected that you send to our social media site through your messages or posts and are also directly visible to us on our social media site, as well as data that is collected by the operator of the social media platform. You can find out what these are from the respective operator's data protection information.

The Rhenus Group takes the protection of your personal data very seriously. We would, therefore, like to let you know about the details of our Privacy Policy which we always adhere to during an application process.

What information is stored?

When you send us your online application, it is automatically read and filed in our application management system. All documents sent with your application (cover letter, CV, diplomas and other certificates) and all the information contained in these documents are also stored in this system.

If you hand in your application in person or send it to us by post, it is first digitised and then also filed in our application management system. The original documents get destroyed in accordance with data protection regulations or are returned to you.

You can update and amend your documents whenever you wish. To do this, simply send an email to [email protected] and attach your new documents or let us know what changes you wish to be made.

What is this stored personal data used for?

We process the data that was sent by you during the application process to perform the application process. The processing of your personal data is carried out lawfully, in accordance with Art. 6 Paragraph 1 Letter b GDPR and § 26 Paragraph 1 Sentence 1 BDSG (german law). Furthermore we might subject to legal obligations in accordance with Art. 6 Paragraph 1 Sentence 1 Letter c GDPR, and carry out processing to protect our legitimate interests via Art. 6 Paragraph 1 Letter f GDPR, for example regards to the assertion and defense of claims and optimization of the applicant tracking system.

In case you have given us permission, for example to add your application to the talent pool or forward it to a different Rhenus-company, we process this data in regards to Art. 6 Paragraph 1 Letter a GDPR. You can withdraw this permission for future purpose anytime at the contact details mentioned above.

In the case of a severely disabled person we are obligated according to § 164 Social Code (SGB) IX (german law) to inform the committee that is representing the severely disabled people. The committee is allowed to get access to all necessary data.

How do we ensure your data is secure?

Our application management system is operated by a processor  as part of a data processing agreement in accordance with Art. 28 GDPR. We use the "Concludis" tool, a service provided by concludis GmbH, Auenweg 3, 50679 Cologne, Germany. The data is stored on a server in Germany. Your data is automatically sent to the Rhenus Group in encrypted form (SSL encryption). The latest technology is always used to keep your data secure.

How long is your data stored in our system?

After completion of the application process, your documents will be archived for  90 days and then automatically and completely deleted. You will receive a corresponding confirmation of this by e-mail.

If you wish to have your data deleted earlier, please send us a short note by e-mail to: [email protected].

What exactly does it mean, if your documents are added to our applicant pool?

Inclusion in the Rhenus Group applicant pool is voluntary and, if applicable, is by separate invitation. If you decide to join our applicant pool, your personal data may be viewed by decision-makers at the Rhenus Group for the purpose of possible job placements. Your data will not be passed on to third parties outside the Rhenus Group.

The retention period in the applicant pool is initially 180 days. After that, you will receive an e-mail from us with an extension option. If you do not confirm this within 14 days, your data will be duly deleted.

If you wish to be deleted from the applicant pool prematurely, please send us a short note by e-mail to: [email protected]. We will then delete your data immediately. 

What happens if you are applying for two or more jobs within the Rhenus Group at the same time?

If you have applied for several positions within the Rhenus Group, then the departments looking to fill the vacancies you have applied for will be informed of this. 
The same applies, if you are turned down for a job and then apply for another position within the Rhenus Group during the standard 90-day period we retain your documents.

The rights of data subject

Right of access (Art. 15 GDPR)

You have the right to request confirmation as to whether personal data concerning you is being processed; If this is the case, you have the right to receive an information about this personal data and to the information listed in detail.

Right to rectification (Art. 16 GDPR)

You have the right to immediately request the correction of incorrect personal data concerning you and, if necessary, the completion of incomplete data.

Right to erasure (Art. 17 GDPR)

You have the right to request that personal data concerning you be deleted immediately if one of the reasons listed in detail in Article 17 GDPR applies.

Right to restriction of processing (Art. 18 GDPR)

You have the right to request that processing be restricted if one of the conditions listed in Article 18 GDPR is met, e.g. if you have objected to the processing, for the duration of the review by the person responsible.

Right to data portability (Art. 20 GDPR)

In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request that this data be transmitted to a third party.

Right to object (Art. 21 GDPR)

If data is based on Art. 6 Para. 1 S. 1 lit. f GDPR (data processing to protect legitimate interests) or on the basis of Art. 6 Para. 1 S. 1 lit. e GDPR (data processing to protect public interest or exercise of official authority), you have the right to object to the processing at any time for reasons relating to your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Right of withdrawal (Article 7 GDPR)

If the processing of data is based on your consent, you are entitled to revoke your consent to the use of your personal data at any time in accordance with Art. 7 Para. 3 GDPR. Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected by this.

Right to complain to a supervisory authority (Article 77 GDPR)

According to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your data violates data protection regulations. The right to lodge a complaint can be asserted in particular with a supervisory authority in the Member State of your habitual residence, your place of work or the place of the alleged violation.

As of: October 10th, 2024

1. Name and address of the responsible person:

The responsible entity with regards to compliance to the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

Rhenus Assets & Services GmbH & Co. KG
Service Center Human Resources
Rhenus-Platz 1
59439 Holzwickede
Phone: +49 (0)2301 29-0
E-mail: [email protected]

2. Purpose and legal basis of data processing:

This job advertisement offers the option of using the messenger WhatsApp for application purposes, in order to facilitate the establishment of contact. When using the WhatsApp application functionality ("service"), communication takes place via online chat. We process all data that you provide to us within this chat. The use of the service is voluntary. Alternatively, you can also submit your application in the traditional way (by post or e-mail) or via our online job board https://www.rhenus.group/career/.

How is the communication carried out in detail:

Only when you agree to the applicable terms of use for the service as well as to our privacy policy by responding with "Yes", you can start the online chat and submit data to us. You then start entering personal data. Up to this point, no data will be exchanged via WhatsApp, apart from technical data. If you do not agree or do not continue the communication, the contact details or your mobile number will be deleted within 24 hours after the last message. You can also end the communication independently at any time; even then, the data will be deleted within the before mentioned period.

Insofar as you use the service, the legal basis for the communication and the associated processing of your data is your consent, which can be revoked at any time with effect for the future (Art. 6 Para. 1 a GDPR in conjunction with Section 26 BDSG for the application process). By this the lawfulness of the data processing is not affected until the revocation. Please address the revocation to the contact specified in our privacy policy.

Recipients of the data:

The service called PitchYou is provided to us by an IT service provider (SBB Software und Beratung GmbH), which processes your data for us as a data processor. You can find more information here: https://www.pitchyou.de/datenschutz. WhatsApp's data protection information, for example on their processing or on exercising your data protection rights against WhatsApp, can be found here: https://www.whatsapp.com/legal/privacy-policy-eea?lang=en.

We would also like to point out that data processing by WhatsApp is associated with security risks; WhatsApp may access your private contacts. The USA is currently assessed as a country with an insufficient level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you being informed about this data processing and without you having the possibility to appeal against this data processing by the US authorities.

3. Storage period:

After completion of the WhatsApp application process, applicant data is transferred via an interface to the third-party system concludis and deleted from PitchYou immediately after the transfer. Further processing and deletion takes place exclusively in the third-party system and the following deletion periods apply: All application documents will be archived for additional 90 days and then automatically deleted completely. Once the data has been deleted, the applicant will receive confirmation of this via e-mail. Exception: Applications which are being included in the applicant pool. After 180 days, they will receive an e-mail asking whether their documents may be kept for a further 180 days. If the applicants do not actively agree, their documents will also be automatically and completely deleted.

4. The rights of data subject:

For your rights as data subject, please refer to our privacy policy under point "The rights of data subject".

5. Right to complain to the supervisory authority:

Regardless of any other administrative or judicial remedy, you have the right to file a complaint with a supervisory authority, in particular in the EU member state of your residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing of personal data related to yourself infringes the GDPR.