Data protection information of
Hermes Fulfilment GmbH,
Bannwarthstraße 5,
Head Office
22179 Hamburg
for the website www.hermes-fulfilment.de
In the following data protection information, we inform you about the processing of personal data carried out by Hermes Fulfilment GmbH, Bannwarthstraße 5, Headquarters, 22179 Hamburg ("Hermes Fulfilment" and/or "we" and/or "controller") in accordance with the GDPR and the Federal Data Protection Act(BDSG 2018).
Please read our data protection information carefully. If you have any questions or comments about our data protection information, please contact us at Datenschutz-HF(at)hermes-ws.com.
This data protection information applies to data processing by
Hermes Fulfilment GmbH
Bannwarthstraße 5
Head Office
22179 Hamburg
Contact details (general):
Phone: +49 40 537 55 - 0
Fax: +49 40 537 54 - 870
E-mail: Datenschutz-HF(at)hermes-ws.com
represented by the managing directors:
Eva Witte
Kevin Kufs
Roy Smolders
Phone: +49 40 537 55 - 0
Fax: +49 40 537 54 - 870
E-mail: kontakt@hermes-ws.com
for the following website: www.hermes-fulfilment.de
You can contact the data protection officer of the controller at
Hermes Fulfilment GmbH
Bannwarthstrasse 5
22179 Hamburg
E-Mail: Datenschutz-HF(at)hermes-ws.com
.
We collect data on the behavior of users on the aforementioned website (tracking data) at www.hermes-fulfilment.de. This includes, among other things, which individual subpages (article detail pages) have been accessed. For this purpose, we may, among other things, set cookies in the browser used by the respective user. The collection of tracking data is only permitted if you have given your prior consent. You can give such consent by clicking on the "Accept" button in the "cookie banner" displayed on this website. However, consent is not required for the processing of such tracking data, which is necessary for the provision of the website. This includes, for example, the setting of cookies for the purpose of displaying the shopping cart. The information about your usage behavior can be used by us, among other things, to show you offers on our website that are of interest to you or to advertise to you on other websites using personalized content (e.g. retargeting). Insofar as personal data about your usage behavior on www.hermes-fulfilment.de can also be used by other providers, e.g. for the purpose of "enriching your own information", such use will only take place in these cases if you have given your prior consent. In these cases, the further processing of the data collected on this website regularly takes place under the sole responsibility of the providers. The providers may transfer the data to the USA as part of this further processing. The European Court of Justice has ruled that the USA is a country with an inadequate level of data protection. In this context, there is a particular risk that your data will be processed by American institutions/authorities for control and monitoring purposes without there being sufficient legal recourse against this. We only process tracking data that we collect and store ourselves in pseudonymized form. This prevents the data from being assigned to your person. If you would like to delete individual cookies set in your browser or find out which service providers have set cookies in your browser, you can do this via a "preference manager". This is available, for example, at www.youronlinechoices.com. You also have the option of setting your browser so that it prevents cookies from being set or only allows certain types of cookies to be set. Details on the possibility of changing the settings of common browser types (e.g. Google Chrome, Firefox) can be found in section 4.2. of this privacy policy.
Cookies are used on this website. Cookies are small text files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.). Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity. Some of the cookies we use are deleted again at the end of the browser session (so-called session cookies). Other cookies remain on your computer and enable us to recognize your computer on your next visit (so-called persistent or cross-session cookies). These cookies in particular serve, among other things, to make our website more attractive for you. Thanks to these files, it is possible, for example, to display information on this website that is specifically tailored to your interests.
According to the legal requirements, the storage of information on end devices (desktops, cell phones, tablets, etc.) - e.g. by setting cookies - and the retrieval of information from end devices (tracking) is generally only permitted if you have given your prior consent. However, consent does not have to be granted if such storage/retrieval is necessary for the website's services.
You have no right to object to data processing that is necessary for the operation of the website.
You can use the website www.hermes-fulfilment.de without data being retrieved from or stored on your end device for purposes that are not necessary for the provision of this website. For this reason, only "basic tracking" is activated when you use this website - unless you give further consent.
Of course, you can configure your browser so that it does not store our cookies on your device. The help function in the menu bar of most web browsers explains how you can prevent your browser from accepting new cookies, how you can have your browser notify you when you receive a new cookie or how you can delete all cookies you have already received and block them for all others.
Please proceed as follows:
In Internet Explorer:
1. select "Internet Options" in the "Tools" menu
2. click on the "Privacy" tab
3. now you can make the security settings for the Internet zone. Here you can set whether and which cookies should be accepted or rejected.
4. confirm your settings with "OK".
In Firefox:
1. Select "Settings" in the "Tools" menu.
2. click on "Privacy".
3. select the entry "Create according to user-defined settings" in the drop-down menu
4. now you can set whether cookies should be accepted, how long you want to keep these cookies and add exceptions to which websites you always or never want to allow cookies to be used.
5. confirm your settings with "OK".
In Google Chrome:
1. Click on the Chrome menu in the browser toolbar.
2. now select "Settings".
3. click on "Show advanced settings"
4. click on "Content settings" under "Privacy"
5. under "Cookies" you can make the following settings for cookies - Delete cookies - Block cookies by default - Delete cookies and website data by default after closing the browser - Allow exceptions for cookies from certain websites or domains
If you want to delete individual cookies set in your browser or find out which service providers have set cookies in your browser, you can also do this via a "preference manager". This is available, for example, at www.youronlinechoices.com .
We use a consent tool from the provider Usercentrics (Usercentrics GmbH, Rosental 4, 80331 Munich, Germany) to manage your settings and document the consent of users of our services. Usercentrics is used, among other things, to save the cookie settings for the entire website. Usercentrics stores information about the categories of cookies used by the website and whether users have given or withdrawn their consent to the use of the individual categories. This allows us to prevent cookies from being set in each category in the user's browser if consent is not given for individual categories. Usercentrics uses cookies for information storage, which have a normal lifespan of one year, so that the settings of returning visitors are saved. The legal basis for this is Article 6(1)(c), (f) GDPR.
As already explained in section 4.1. of this privacy policy, we collect and process tracking data partly on the basis of consent. You give this consent by clicking on the "Accept" button in a banner on the website that links to these consent texts. By clicking on the "Accept" button, you give your consent for us to store data on your end device (e.g. by setting cookies) or to retrieve data from your end device. Furthermore, by clicking on the "Accept" button, you consent to the use of certain advertising functionalities from third-party providers, the use of which requires consent in itself. You also have the option of clicking on "Settings" in the banner and managing your consent preferences there. You can change your consent and preferences in our consent management at any time. You can access this on every page by clicking on the fingerprint in the bottom left-hand window. A distinction is made there between "marketing cookies", "functional cookies" and "essential cookies". The data processing that takes place in connection with these advertising functionalities is described below (section 4.4.1. of this privacy policy).
All data processing that is covered by your consent given by clicking on the "OK" button serves the same purpose, namely "advertising".
Revocation of all consents
You can revoke all consents that you have given by clicking on the "Save settings" button shown in the banner by clicking on the fingerprint in the bottom left-hand window.
We use the basic version of Google Analytics on the legal basis of Article 6(1)(f) GDPR (legitimate interest) for the purpose of the needs-based design and continuous optimization of this website. The basic version of Google Analytics is a web analysis service of Google Inc ("Google"). Google Analytics uses so-called "cookies" (text files), which are stored on your computer and enable your use of the website to be analyzed. Google will use this information on our behalf to evaluate your use of the website and to compile reports on website activity. Google processes the data collected through the use of the "basic version" of Google Analytics exclusively on our instructions and for our purposes.
You can object to data processing by Google Analytics at any time by clicking on the fingerprint in the bottom left-hand window. As a result of your objection, Google Analytics will no longer collect data on the device used by you on website.de at the time of your objection.
This website uses botsify, a live chat software from the company Botsify Inc. Botsify uses "cookies", text files that are stored on your computer and that enable a personal conversation with you in the form of a real-time chat on the website. The data collected is not used to personally identify the visitor to this website and is not merged with personal data about the bearer of the pseudonym. The legal basis for this data processing is Article 6(1)(f) GDPR (legitimate interest).
We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of reCAPTCHA is to check whether data is entered on this website (e.g. in a contact form) by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website by the website visitor or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.
The data is stored and analyzed on the basis of Article 6(1)(f) GDPR (legitimate interest).
The website operator uses Google Ads. Google Ads is an online advertising program of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms into Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on the user data available at Google (e.g. location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively, for example by analyzing which search terms have led to the display of our advertisements and how many advertisements have led to corresponding clicks. The legal basis for this is Article 6(1)(a) GDPR (consent).
This website uses the Google Remarketing service. Google Remarketing is an online advertising program of Google Ireland Limited, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). We use the remarketing function within the Google AdWords service. With the remarketing function, we can present your advertisements based on your interests on other websites within the Google advertising network. For this purpose, your surfing behavior on our website is analyzed, e.g. which offers you have viewed. This allows us to show you personalized advertising on the online search engine Google itself, so-called "Google ads", and on other websites even after you have visited our website. For this purpose, Google stores a cookie in your browser when you visit Google services or websites in the Google advertising network. This cookie is used to record your visits. The cookie is used to uniquely identify your web browser and not to identify you personally. It is possible that Google may also use the data collected about your usage behaviour via this website for its own purposes or for the purposes of other Google customers (e.g. to display individualized third-party advertisements). Such further processing of the data and the processing of the data after it has been transmitted by us to Google is carried out by Google as the sole controller under data protection law. In this context, Google, as the sole controller under data protection law, may store data about you in the USA. The European Court of Justice has ruled that the USA is a country with an inadequate level of data protection. In this context, there is a particular risk that your data will be processed by American institutions/authorities for control and monitoring purposes without you having sufficient legal recourse against this. The legal basis for this data processing is Article 6(1)(a) GDPR (consent).
We also use the Customer Match service. A pixel is integrated into your browser. As a result, Google assigns you an identification number as a visitor to this website and can thus recognize you when you visit other websites in order to enable the operator of this website to display personalized advertising to you or to decide that such advertising control does not take place.
You can find more information about Google remarketing and Google's privacy policy at: www.google.com/privacy/ads/. Here you can also assert your rights as a data subject (e.g. right to erasure) with regard to the data that Google processes as the controller under data protection law. You can withdraw your consent to the use of Google remarketing at any time by clicking on the fingerprint in the bottom left-hand window. By deselecting the "Marketing" category, you can revoke or refuse to give your consent to the use of Google remarketing.
A pixel from Facebook Ireland Limited is integrated into this website (website customer audience pixel). Through this pixel, information about the use of this website (e.g. information about viewed articles) is collected by Hermes Fulfilemnt (GmbH) and Facebook Ireland Limited in joint responsibility and transmitted to Facebook Ireland Limited. This information can be assigned to your person with the help of further information that Facebook Ireland Limited has stored about you, e.g. due to your ownership of an account on the social network "Facebook". The information collected via the pixel can be used to show you interest-based advertisements about our offers in your Facebook account (retargeting). The information collected via the pixel can also be aggregated by Facebook Ireland Limited and the aggregated information can be used by Facebook Ireland Limited for its own advertising purposes and for the advertising purposes of third parties. For example, Facebook Ireland Limited can infer certain interests from your surfing behavior on this website and also use this information to advertise third-party offers. Facebook Ireland Limited may also combine the information collected via the pixel with other information that Facebook Ireland Limited has collected about you via other websites and/or in connection with the use of the social network "Facebook", so that a profile about you can be stored at Facebook Ireland Limited. This profile can be used for advertising purposes. Facebook Ireland Limited is solely responsible for the permanent storage and further processing of the tracking data collected via the website custom audience pixel used on this website. In this context, Facebook Ireland Limited, as the sole controller under data protection law, may store data about you in the USA. The European Court of Justice has ruled that the USA is a country with an inadequate level of data protection. In this context, there is a particular risk that your data will be processed by American institutions/authorities for control and monitoring purposes without you having sufficient legal recourse against this. The legal basis for this data processing is Article 6(1)(a) GDPR (consent).
You can find more information on data protection at Facebook Ireland Limited here. Here you will also find the possibility of asserting your rights as a data subject (e.g. right to erasure) against Facebook Ireland Limited. You can revoke your consent to the transfer of data to Facebook Ireland Limited through the use of the pixel on this website at any time by deselecting the "Marketing" category here or you can deselect the granting of consent at any time by clicking on the fingerprint in the lower left window.
We use processors in the context of processing your data. A processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller. Processors do not use the data for their own purposes, but carry out the data processing exclusively for the controller.
We also use other third-party partners who are required to provide services and achieve various purposes. We transfer personal data to these third-party partners if this is necessary for the provision of the service.
The legal basis for this data transfer is Article 6(1)(b), (f) GDPR.
If you are interested in Hermes as a potential employer, you can use our website to find out about vacancies and application opportunities with us. We also offer you the opportunity to apply to us directly online via our application form. We use all personal data provided to us as part of your application exclusively to carry out the application process. The legal basis for this is Article 6(1)(a), (f) GDPR in conjunction with Section 26 BDSG. Further information can be found in our special data protection notice for applicants here.
Otto Group Talent Pool System
In some cases, we offer you the opportunity to be included in the internal Otto Group Talent Pool System. The Otto Group Talent Pool System serves to identify, retain and promote talent as well as to secure succession by actively promoting internal mobility within the Otto Group. If you have consented to the transfer of your data to other Otto Group companies and have therefore decided to store your data in the Otto Group Talent Pool System, we will transfer the data you provided when creating your profile to Otto (GmbH & Co KG) (hereinafter OTTO), which will store it in the Otto Group Talent Pool System. With regard to the inclusion of your person in the internal Otto Group Talent Pool System and the provision of the Otto Group Talent Pool System, we are jointly responsible with Otto (GmbH & Co KG) and the other Otto Group companies that participate in the internal Otto Group Talent Pool System. We are primarily responsible for the collection, transmission and registration of your data and OTTO for the storage of your data and provision of the Otto Group Talent Pool System. After Otto (GmbH & Co KG) has transmitted your data to the companies participating in the Otto Group Talent Pool System, the Group companies process this data as data controllers under data protection law, e.g. for the purpose of establishing contact. A potential application process then normally takes place directly via the company's processes.
Data processing is based on your consent (Article 6(1)(a) GDPR). You can revoke your consent at any time by sending an email to yournextmove(at)ottogroup.com.
We and OTTO are available to you with regard to the processing under joint responsibility as central contact persons in their own area of activity. If you have any questions regarding data protection and to assert your rights as a data subject, please contact yournextmove(at)ottogroup.com. You can also assert your rights against us. If you contact us, we will coordinate with you in accordance with the agreement on joint responsibility in order to answer your request and ensure the implementation of your data subject rights.
We use social plugins from the social networks Facebook, WhatsApp, LinkedIn and XING on our website on the basis of Article 6(1)(f) GDPR in order to make our company better known. The underlying advertising purpose is to be regarded as a legitimate interest within the meaning of the GDPR. Responsibility for data protection-compliant operation must be guaranteed by the respective provider.
The purpose and scope of the data collection and the further processing and use of the data by the respective provider as well as your rights in this regard and setting options to protect your privacy can be found in the respective data protection information of the provider, which we link to below.
You can prevent social networks from assigning the information collected about you to your user account with the respective social network during your visit to this website by logging out of the social network pages beforehand and deleting cookies that have been set. If you do not want social networks to assign the data collected via our website directly to your profile, you must log out of the relevant social networks before visiting our website.
Social plugins from Facebook and YouTube (Google) are used on this website. These are offers from the US companies Facebook and Google Inc (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google")).
When you visit a page that contains such a plugin, your browser establishes a connection to Facebook or YouTube and the content is loaded from these pages. Your visit to this website may therefore be tracked by Facebook and YouTube, even if you do not actively use the social plugin function. If you have a Facebook or YouTube account, you can use such a social plugin and share information with your friends. We have no influence on the content of the plugins and the transmission of information.
Facebook and Google provide detailed information on the scope, type, purpose and further processing of your data on their websites. Here you will also find further information on your rights and setting options to protect your privacy.
Data protection information from Facebook: https://www.facebook.com/about/privacy
Data protection information from Google: https://www.google.com/intl/de/policies/privacy
A WhatsApp button (WhatsApp share button) is also used on this website. You can use this button to share content from this page via the WhatsApp application on your cell phone. The button is a hyperlink. When the button appears on this website, no personal data is transmitted to the operator of WhatsApp or other third parties. As soon as you use the WhatsApp button, the WhatsApp operator learns what content is being shared and that the button has been used on this website. You can find more information on the handling of personal data by the operator of WhatsApp in the operator's privacy policy: https://www.whatsapp.com/legal/#Privacy
This website uses functions of the XING network. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany.
Each time one of our pages containing XING functions is accessed, a connection to XING servers is established. To the best of our knowledge, no personal data is stored in the process. In particular, no IP addresses are stored or usage behavior evaluated.
The data is stored and analyzed on the basis of Article 6(1)(f) GDPR (legitimate interest).
Further information on data protection and the XING Share button can be found in XING's privacy policy at: https://www.xing.com/app/share?op=data_protection.
This website uses functions of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
Each time you access a page on this website that contains LinkedIn functions, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited this website with your IP address. If you click on the LinkedIn "Recommend" button and are logged into your LinkedIn account, LinkedIn will be able to associate your visit to this website with you and your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by LinkedIn.
The LinkedIn plugin is used on the basis of Article 6(1)(f) GDPR (legitimate interest).
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.
You can find more information on this in LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy
This site uses the map service Google Maps. Google Maps is a map service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
In order to use the functions of Google Maps, information, including the IP address and the address entered as part of the route function, may be transmitted to the provider's servers. This information is usually transferred to a Google server in the USA and stored there. When you visit a website that contains Google Maps, your browser establishes a direct connection with Google's servers, whereby the map content is sent to your browser and integrated by it. The provider of this site has no influence on this data transfer. According to current knowledge, this includes the following data
The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. The legal basis for this processing is Article 6(1)(f) GDPR. If you do not want Google to process data via this service, you can deactivate the use of JavaScript in your browser settings. Please note that in this case you will not be able to use the interactive map function of Google Maps.
You can find more information on the handling of user data in Google's privacy policy: www.google.de/intl/de/policies/privacy/.
Unfortunately, we are also being misused as the supposed sender in this scam, which means that consumers receive fake emails in our name. These emails are often even based on the Hermes Fulfilment brand layout and may be difficult to distinguish from genuine emails from us.
The fraudsters want to exploit the position of trust between us and our customers to steal sensitive data (e.g. login, customer data, payment information) or install malicious software (such as viruses or Trojans) on your computer or smartphone.
These emails are not created or sent by us, even if our name is used as the sender. Unfortunately, we therefore have no influence on the sending of these unauthorized emails.
Below are some features that you can use to recognize emails from us:
- We do not ask you for personal information by e-mail, nor do we ask you to confirm personal data via a link in an e-mail.
- You will only receive order confirmations and invoices from us for orders that you have actually placed.
- We only send e-mails with file attachments if you have explicitly requested these from us (e.g. operating instructions).
- E-mails from us should not contain any spelling or grammatical errors, as they are always proofread before being sent.
How to deal correctly with spam, phishing and spoofing e-mails:
- We recommend that you delete suspicious emails immediately.
- Never open links or attachments in suspicious emails and do not disclose any personal data.
Our tip and service for you: If you are ever unsure, simply use our free call-back service or send us an e-mail to: kontakt(at)hermes-ws.com.
You have the option of contacting us in several ways. By e-mail, by telephone, by chat, by application form or by post. When you contact us, we use the personal data that you voluntarily provide to us in this context solely for the purpose of contacting you and processing your request.
The legal basis for this data processing is Article 6(1)(a), Article 6(1)(b), Article 6(1)(c) GDPR and Article 6(1)(f) GDPR.
With the exception of the processing operations for which we provide information about the possibility of transferring data to recipients based outside the EU in this privacy policy, we do not transfer your data to recipients based outside the European Union or the European Economic Area. The data transfers take place on the basis of so-called standard contractual clauses of the EU Commission.
The duration of storage of the data collected about you depends on the purpose for which we process the data. The data is stored for as long as is necessary to achieve the purpose pursued. Insofar as we have to store certain categories of data for a certain period of time due to legal obligations (e.g. tax obligations), the data will continue to be stored exclusively for the purpose of fulfilling the legal obligation after its storage is no longer necessary to achieve the respective purpose. In such cases, the data will be blocked from access.
In connection with the processing of personal data by us, you have rights as a data subject. For example, you have the right to request information about the data we have stored about you. You can also revoke any consent you have given us and object to individual data processing operations. You also have the right to have inaccurate data corrected and can request that we send you certain data in a commonly used electronic format. You also have the right to have the data we have stored about you deleted. Please note in this regard that we may be obliged for legal reasons to continue to store the data despite the assertion of your right to erasure. In addition, in certain constellations we have an interest in continuing to store your data that outweighs your interest in its erasure (e.g. if we still have outstanding claims against you).
In addition to the right to revoke your consent given to us, you have the following additional rights if the respective legal requirements are met:
You can assert the aforementioned rights to which you are entitled vis-à-vis us at kontakt@hermes-ws.com.
You can access the data protection information for applicants here
Status: January 2023