Privacy notice

Saloodo! GmbH (hereinafter also referred to as “Saloodo!”, “we”) a company of the Deutsche Post DHL Group, attaches great importance to your privacy when processing personal data in our daily business processes.

We process personal data that is collected when you visit our website in accordance with the legal provisions. Our data protection policy is also based on the data protection guidelines applicable to the Deutsche Post DHL Group. Below we inform you about the processing of your personal data in the context of the use of our website www.saloodo.com (“website”).

I. General

1. Contact details of controller and data protection officer

Responsible for the operation of this website

Saloodo! GmbH
Siegburger Straße 191-193
50679 Cologne
Germany
Support@saloodo.com

Should you have any further questions regarding data protection in connection with our website or the services offered, please contact our data protection officer:

Deutsche Post AG
Gabriela Krader LL.M.
Corporate Data Protection
53250 Bonn
Germany
E-Mail: datenschutz@dpdhl.com

2. Personal Data

Personal data are any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

3. Right of data subjects

You enjoy the following data protection rights:

a) In accordance with Art. 15 GDPR, you can request information about your personal data processed by the particular controller.

b) You can request rectification in accordance with Art. 16 GDPR if your data are not (or are no longer) correct.

c) You can request the erasure of your personal data in accordance with Art. 17 GDPR.

d) In accordance with Art. 18 GDPR, you have the right to request a restriction on the processing of your personal data.

e) If the requirements of Art. 20 (1) GDPR are met, you have the right to receive your data in a structured, commonly used and machine-readable format.

f) You have the right to object in accordance with Art. 21 GDPR if the processing of your data is based on a legitimate interest.

g) If you have given your consent to a certain type of processing, you can withdraw this consent at any time with effect for the future by informing the relevant contact addresses in accordance with Art. 7 (3) GDPR.

h) If you believe that the processing of your personal data violates data protection legislation, you have the right to lodge a complaint with the competent data protection supervisory authority in accordance with Art. 77 (1) GDPR.

The competent Supervisory Authority for “Saloodo!” is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen

Kavalleriestr. 2-4
40213 Düsseldorf
Telefon: 0211/38424-0
Fax: 0211/38424-999
E-Mail: poststelle@ldi.nrw.de

Please contact the address above if you wish to assert your data subject rights.

Data processing when exercising your rights:

In order to be able to process your request, as well as for identification purposes, we would like to point out that we will process your personal data on the basis of Article 6 para. 1 sentence 1 letter c) GDPR.

4. Duration of storage

Your personal data will be deleted or blocked as soon as the purpose of the storage ceases to apply. In addition, data may be stored on account of statutory or contractual retention periods. The data will also be blocked or deleted if a legally prescribed storage period expires unless there is a need for further storage of the data for contractual reasons. Please refer to the sections below for more information about retention periods associated with specific products and services.

5. Categories of recipients

We do not sell, transfer or pass on your data to third parties in any other way and will not do so in the future unless this is required by law, necessary for the purposes of the contract or you have consented to such transfer. External service providers who process data on behalf of us (e.g. customer service activities, IT services) offer adequate guarantees that suitable technical and organisational measures have been implemented in such a way that processing is carried out in compliance with the requirements of the EU General Data Protection Regulation. They are contractually obliged to maintain strict secrecy in accordance with Art. 28 GDPR. In these cases, we continue to be responsible for the protection of your personal data. External service providers only process personal data on documented instructions of the relevant controllers.

6. Transfer to third countries

The processing of your data also takes place in countries outside the EU. Beyond the regulations of the EU GDPR, the processing of personal data is also carried out on the basis of the Binding Corporate Rules and the EU Standard Contractual Clauses.

7. Group Data Privacy Policy

The DPDHL Group Data Privacy Policy governs the data processing standards applicable throughout the Group with a special focus on third-country transfers, i.e. transfers of personal data to countries outside the EU that do not have a recognised adequate level of data protection. If you would like to learn more about the Group Data Privacy Policy please click here.

8. Data security

We undertake all necessary technical and organisational security measures to protect your personal data from misuse or loss. For example, your data are stored in a secure operating environment that is not accessible to the public. In certain cases, your personal data are encrypted during transmission using Secure Socket Layer (SSL) technology. This means that an approved encryption method is used for communication between your computer and our servers, provided your browser supports SSL.

Should you wish to communicate by e-mail with us, please bear in mind that the confidentiality of the information transmitted cannot be guaranteed. The contents of the e-mail messages can be read by third parties. We therefore recommend that confidential information addressed to them be sent by post.

9. Changes to the privacy policy

The content of this privacy policy is reviewed on a regular basis. The controllers reserve the right to modify the privacy policy at any time with or without prior notice. Please make sure to check for any changes on a regular basis.

II. Data processing when you visit our website

1) Visiting our website

“Saloodo!” ensures that the data of visitors to this website are protected. When you visit this website, the web servers temporarily store data for security reasons that may permit identification. The following data are collected:

• hostname of the accessing computer
• IP address
• website from which you accessed this website
• a list of the sites you visited within the scope of our overall Internet presence
• the date and duration of your visit, notification of whether the visit was successful
• volume of data transferred
• information about the identification data of the browser type and operating system used by you

Other personal data such as your name, address, telephone number or e-mail address are not collected unless you provide these data of your own accord, e.g. when completing an online contact form, in the course of registration, a customer survey, a competition, contract processing or relating to an enquiry.

Temporary storage of this data is necessary during your visit to the website in order to allow the website to be delivered to you. Further storage in log files is performed to ensure the functionality of the website and the security of our IT systems. These purposes are also covered by a legitimate interest in data processing. This measure is undertaken on the basis of Article 6 para. 1 sentence 1 letter f) GDPR.

The data are deleted as soon as they are no longer needed to achieve the purpose for which they were collected. For the provision of the website, this is the case when the session terminates. The log files (access logs) are kept for administrators to access directly and exclusively for a period of 24 hours. After that, they are only available indirectly through a restore from backup tapes and are permanently deleted after 30 days.

2) Registration on our platform

a) Registration

In order to be able to use our services, you have to log in to our website as a carrier or shipper. This requires a registration. If you want to register as a shipper or carrier, you have to provide the below-mentioned personal data:

• E-Mail address
• Password
• Phone number
• Name
• Company name
• Country
• VAT-ID
• Additionally for carrier to upload (see also: https://www.saloodo.com/faq/what-documents-do-i-need-to-upload-to-finalize-the-registration-process/)
  • EU License
  • Insurance policy
  • Letterhead with bank details
  • Business registration

After submitting your data you will receive an e-mail from us. To complete your registration, you have to confirm the confirmation link. Within the scope of the registration and confirmation your IP address and the time of registration or confirmation will also be saved in order to verify your registration.

Carrier Account
A registration for a carrier account is required in order to provide you with the functions and tools of your platform and to enable you to submit a transport offer. Furthermore, registration is required for concluding transport contract and for communication in connection with the services offered on the platform (e.g. notification of arrival times).

Shipper Account
A registration for a shipper account is required in order to provide you with the functions and tools of your platform and to enable you to obtain transport offers from us and our subcontractors. In addition, you can commission transport services or obtain information about other services offered on our platform. You can also communicate with us and our subcontractors via the platform.

Furthermore, you have the possibility to manage your account after registration.

The legal basis for the processing of personal data is Article 6 para. 1 sentence 1 letter b) GDPR. Your registration data will be kept until you decide to delete your account, unless a longer storage period is required by law.

b) Data processing for contract performance

As part of the services provided, in particular transport and logistics services, personal data are processed on the basis of contracts concluded with you. These data are used, for example, to execute a (deceleration) contract, to administer customer data, to process payments and, where necessary, to perform credit checks. Certain shipping data are provided to the authorities of the country of transit or destination – depending on relevant legal requirements – for the purpose of customs clearance and taxation or for security checks. Such data generally include the name and address of the sender, the name and address of the recipient, a description of the goods, the quantity, weight and value of the consignment.

In order to fulfil a (declaration) contract, personal data of the customer and (alternative) recipient (e.g. name, address of the sender and (alternative) recipient, e-mail address, telephone number, shipment information, delivery documentation, such as signature, GPS data and time of the delivery event, bank data, identification data) are processed.

As a general rule, the legal basis is Article 6 para. 1 sentence 1 letter b) GDPR, since processing is carried out for the performance of a contract in which you are (indirectly) involved and for proof of the correct delivery of the service. Furthermore, data processing is carried out in order to meet legal obligations in accordance with Article 6 para. 1 sentence 1 letter c) GDPR in connection with contract performance.

c) Data processing for security, quality assurance and process optimisation

We process the data collected in the course of implementing the contract for (data) security purposes (e.g. to detect criminal offences or misuse), to produce statistics and for quality assurance, process optimisation and planning reliability to the extent permitted by law. We have a legitimate interest for this processing in ensuring the smooth operation and continuous improvement of the particular products and services. In our opinion, there is no overriding interest worthy of protection, since the intensity of the processing operations is extremely low, e.g. through the use pseudonyms. The legal basis for this data processing is Article 6 para. 1 sentence 1 letter f) GDPR.

d) Data Processing for sales purposes

If you register as a customer, your address data (e.g. name, address) will be processed to inform you about offers, news, products and services of “Saloodo!”. The legal basis for the aforementioned processing is Article 6 para. 1 sentence 1 letter f) GDPR. The legitimate interest of us lies in particular in providing optimum and customer-specific service. You have the right to object to this processing at any time. To exercise your right, simply contact us by sending an e-mail to support@saloodo.com

If you register for our newsletter, we will use your e-mail address for the above mentioned purposes. The legal basis for this data processing is your consent in accordance with Article 6 para. 1 sentence 1 letter a) GDPR.

You may stop receiving information and news by e-mail at any time by clicking on the relevant link at the bottom of the e-mail. You can also withdraw consent at any time with effect for the future using the contact address above.

We will send you business-relevant emails, for example, if you have forgotten your password or if there is a new offer according to your filter settings.

If you unsubscribe from e-mail communications or withdraw your consent, the corresponding data will be removed or blocked from the mailing list and will no longer be processed for these purposes.

We perform a measurement of success as part of the e-mail distribution process. For example, a record is made of whether an e-mail has been opened and whether links in the e-mail have been clicked on. The analyses serve to identify the reading habits of users and to adapt content to them or to send different content according to users’ interests. The legal basis for this data processing is Article 6 para. 1 sentence 1 letter f) GDPR. This data processing for our own direct marketing purposes is carried out within the scope of the legitimate interest of us.

e) Payment Services

We use third-party payment services, depending on the payment method you choose. Since the payment is related to the contractual relationship with you, the legal basis for all payment methods is Article 6 para. 1 sentence 1 letter b) GDPR. Please take note of the privacy notes of the payment services. Additional information can be found in the terms & conditions (https://www.saloodo.com/terms-conditions/)

3. Jobs and Career at “Saloodo!”

This describes the processing of personal data when using the Deutsche Post DHL Group career site websites including the mobile applications (our “Apps”)

a) Who is responsible for this career site?

The responsible party within the meaning of the GDPR is:

Deutsche Post AG
Charles-de-Gaulle Str. 20
53113 Bonn

If you have any questions regarding the processing of your personal data on this careers site, you can contact the data protection officer of Deutsche Post AG either by post at the address given or by e-mail at career@saloodo.com or  datenschutz@dpdhl.com.

b) Processing of personal data by Deutsche Post AG

In the following, we would like to give you an overview of how we ensure the protection of your personal data when you access our website and what types of personal data we process, for what purposes and to what extent.

1. Processing of data when accessing our website – log files

When accessing our website, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider and the like. In addition, the IP address is transmitted and used to provide the service you requested. This information is technically necessary in order to correctly deliver website content requested by you and is mandatory when using the Internet

According to our IT security concept, the accruing log file data is stored for a period of 120 days in order to detect and analyze any attacks against our website. The legal basis for data processing is Art. 6 para. 1 lit f) DSGVO.

2. Individually tailored job recommendations

On our website, you have the option of receiving job recommendations individually tailored to you. For this purpose, we use the information you provide on the website or via the chatbot (preferred place of work, work experience, skills and job description) to show you suitable jobs. If you upload a resume, we automatically read the above information from it and use it to display suitable job offers. We store your details in pseudonymous form with the aid of a cookie for a period of 12 months in order to be able to display suitable job offers to you on the basis of your details when you access the website at a later date. It is therefore not possible for us to identify a specific person. The legal basis for setting the cookie is the consent given in accordance with Art. 6 (1) p. 1 lit. a DSGVO. The legal basis for the further processing of the data to display suitable jobs is Art. 6 para. 1 p. 1 lit. f DSGVO.

3. Creation of a profile

When requesting information for the individually tailored job recommendations, you have the option of providing personal information (name, e-mail address) on a voluntary basis. If you provide us with these, we will store your data in personalized form for 12 months in order to display our individually tailored job recommendations to you in personalized form and, in particular, to be able to address you personally for this purpose. The legal basis is your consent in accordance with Art. 6 (1) p. 1 lit. a DSGVO.

4. Registration for the Job Alert

To register for our Job Alert, we use the so-called double-opt-in procedure. This means that after you have entered your e-mail address, we will send you a confirmation e-mail to the e-mail address you have entered, in which we ask you to confirm that you wish to receive the Job Alert. If you do not confirm this within 4 hours, your registration will be automatically deleted. If you confirm your wish to receive the Job Alert, we will store your e-mail address for 12 months or until you unsubscribe from the Job Alert. The storage serves the purpose of being able to send you suitable job offers based on your search information. Furthermore, we store your IP addresses and the times of your registration each time you register and confirm, in order to prevent misuse of your personal data and to be able to provide proof of correct sending. The legal basis for the processing of your personal data is Art. 6 para. 1 sentence 1 letter a DSGVO.

Mandatory information for sending the Job Alert is the e-mail address, as well as the desired area and your career level, in order to be able to send appropriate job recommendations based on this. You can revoke your consent by clicking on the link provided in every Job Alert email.

5. Information to ensure data security

We take technical and organizational security precautions on our pages to protect the personal data stored with us from access by third parties, loss or misuse and to enable secure data transfer. We must point out that, due to the structure of the Internet, unauthorized access to data by third parties may occur. It is therefore also your responsibility to protect your data against misuse by encrypting it or in any other way. Without appropriate protective measures, unencrypted data in particular, even if transmitted by e-mail, can be read by third parties.

4. Use of web tracking

“Saloodo!” uses tracking software to determine how many users visit our website and how often. This software is not used to collect individual personal data or individual IP addresses. The data are used exclusively in anonymous and summary form for statistical purposes and in order to develop the website further.