Data privacy policy
Protecting your personal data is an important priority for DACHSER & KOLB. We process your personal data—such as your name, address, email address, or phone number—in accordance with the EU General Data Protection Regulation (GDPR) and the data protection rules applicable to DACHSER & KOLB in Austria (in particular the Austrian Data Protection Act (DSG) and, with regard to cookies/terminal equipment access, Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021)).
With this privacy policy, we would like to inform you about the nature, scope, and purpose of the personal data we collect and process. We also inform you about your rights. If we wish to offer special services via our website or otherwise, and if there is no statutory legal basis for the data processing required in that context, we will obtain your consent. To the extent we use analytics and marketing technologies (tracking), this is done exclusively on the basis of your consent.
1. Controller and Data Protection Contact
The controller within the meaning of data protection law is:
DACHSER & KOLB GmbH & Co. KG
Thomas-Dachser-Straße 1
AT-2325 Himberg near Vienna
Austria
Tel.: +43 223544000 3000
www.dachser-kolb.at
info@dachser-kolb.de
The names and contact details of the data protection coordinator and the data protection officer of DACHSER & KOLB GmbH & Co. KG are:
DACHSER & KOLB GmbH & Co. KG
Data Protection Coordinator
Thomas-Dachser-Straße 1
AT-2325 Himberg near Vienna
Austria
Tel.: +43 223544000 3000
data-protection.kempten@dachser-kolb.de
2. Collection of General Data and Information
Each time this website is accessed, it collects a range of general data and information. This general data and information is stored in the server’s log files. The following may be collected: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system arrives at our website (so-called referrer), (4) the subpages accessed on our website via an accessing system, (5) the date and time of access to the website, (6) the Internet Protocol address (IP address), (7) the Internet service provider of the accessing system, and (8) other similar data and information used to avert threats in the event of attacks on our information technology systems.
When using this general data and information (server log files), DACHSER & KOLB does not draw any conclusions about you; no profiling takes place in this context. Rather, we need this information to correctly deliver the content of our website, to optimize the content of our website and the advertising for it, to ensure the ongoing functionality of our information technology systems and the technology of our website, and to provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack.
DACHSER & KOLB analyzes this anonymously collected data and information statistically and with the aim of increasing data protection and data security within our company. We store the anonymous server log file data separately from any personal data you provide. The legal basis for the temporary storage of the data and the log files is Art. 6(1)(f) GDPR.
3. Processing of Data When You Contact Us
You can contact us via the contact form provided on our website, our live chat, our moving cost calculator, or via the email address provided in the legal notice (imprint). If you contact DACHSER & KOLB via one of these channels, we automatically store the personal data you transmit. Such personal data transmitted to DACHSER & KOLB on a voluntary basis will be stored for the purpose of processing your request and/or contacting you. All personal data submitted to DACHSER & KOLB via the moving cost calculator will be automatically deleted from the moving cost calculator system after a period of 90 days, provided no contract/order results from the inquiry. If an order is placed, the data will be used for order processing.
DACHSER & KOLB assigns inquiries and the associated personal data for processing and use to the responsible department within DACHSER & KOLB—generally the respective branch office of the requester’s national company—and exchanges the data with that department.
The legal basis for processing the data is Art. 6(1)(b) GDPR for the initiation or performance of a contract, and Art. 6(1)(f) GDPR in all other cases. The legal basis for transfers of data to a third country is Art. 49(1)(b) GDPR.
4. Cookies, Consent Management, and Controls
Our website uses cookies and similar technologies (e.g., pixels, tags, local storage) to provide the website technically and—after consent—to analyze usage and measure and optimize marketing activities (conversions).
4.1 Technically Necessary Cookies/Technologies
These are required to ensure core functions (e.g., page navigation, form/session functions), IT security, and stability. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). To the extent that technically necessary cookies/technologies store or access information on your device, this is carried out under the exception for strictly necessary processes pursuant to Section 165(3) TKG 2021.
4.2 Analytics and Marketing Technologies (Only with Consent)
Analytics and marketing technologies (e.g., Microsoft Clarity, Google Analytics/Ads including Enhanced Conversions, Meta Pixel/conversion tracking, TikTok Pixel/conversion tracking) are used only if you have actively consented via our cookie/consent banner. The legal basis is Art. 6(1)(a) GDPR; to the extent this involves storing/accessing information on your device, additionally Section 165(3) TKG 2021.
4.3 Consent Management (Withdrawal/Changes)
You can change or withdraw your consent at any time with effect for the future via “Cookie Settings.”
For documentation purposes, we store your selection (e.g., consent status, time stamp, and, where applicable, a pseudonymous identifier). The legal basis is Art. 6(1)(c) GDPR (documentation/verification obligations) and/or Art. 6(1)(f) GDPR (compliance/defense interest).
5. Web Analytics and Conversion Tracking
If you have consented, we use analytics and tracking technologies to (i) understand and optimize the use of our website and (ii) measure the effectiveness of our advertising (conversion tracking) and manage campaigns. Depending on the tool and your consent, the following data may be processed in particular: online identifiers (cookie/pixel IDs, and, where applicable, click/campaign identifiers such as “gclid”), device/browser data, IP address (technical), referrer URL, page views, events/interactions (e.g., clicks/scrolling), time stamps, and conversion/event data (e.g., “request submitted”). This may involve the creation of pseudonymous usage profiles (profiling)—exclusively within the scope of your consent.
5.1 Microsoft Clarity (Heatmaps/Session Analytics)
We use Microsoft Clarity to analyze interactions (e.g., clicks, scrolling behavior, mouse movements) and optimize the user experience.
Provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
Data processed: online identifiers, device/browser data, usage/event data, technical metadata.
5.2 Google Tag Manager (Technical Tag Management/Control)
We use Google Tag Manager to technically manage and deploy website tags. Which tags are loaded depends on your consent.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
5.3 Google Analytics (GA4) – Web Analytics
We use Google Analytics (GA4) to analyze use of our website (e.g., navigation, interactions) and optimize content/processes. GA4 generally processes data on an event-based and pseudonymous basis.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Data processed: online identifiers, device/browser data, usage/event data, technical metadata; where applicable, approximate location derived (e.g., region).
Retention: according to the retention settings configured in GA4 (depending on account/settings).
5.4 Google Ads Conversion Tracking incl. Enhanced Conversions
We use Google Ads Conversion Tracking to measure whether users perform a desired action after interacting with an ad (e.g., clicking a Google ad), such as submitting an inquiry. Click/campaign identifiers (e.g., “gclid”) and conversion events may be processed to evaluate and optimize campaigns.
Enhanced Conversions: If enabled, data you provide as part of a conversion (e.g., email/phone—depending on the conversion) may be hashed locally (one-way encryption) before transmission. Google may use these hash values for matching/attribution/measurement.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Data processed: click/campaign identifiers, online identifiers, conversion events; where applicable, hashed contact data (Enhanced Conversions).
5.5 Meta Conversion Tracking (Meta Pixel / where applicable Conversions API)
We use Meta conversion tracking to measure campaigns on Facebook/Instagram, build audiences, and optimize ads. Event data (e.g., page view, lead/inquiry event) may be transmitted to Meta. Depending on our implementation, transmission may occur client-side via the Meta Pixel and/or server-side via the Meta Conversions API (CAPI). Conversion/event data (e.g., event type, time stamp, page URL), technical data (e.g., IP address, user agent), online identifiers (e.g., cookie/pixel IDs), and—if enabled and provided by you—hashed contact data (e.g., email/phone) may be processed. Server-side transmission also occurs only with your consent.
Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Joint controllership: For the collection and transmission of certain event data within the “Meta Business Tools,” joint controllership under Art. 26 GDPR may apply (in particular for the data collection/transmission phase). Meta provides key information on joint controllership.
Data processed: online identifiers, device/browser data, event/usage data, referrer/URL information; where applicable, hashed contact data if advanced matching is enabled and you provide such data.
5.6 TikTok Conversion Tracking (TikTok Pixel / where applicable Events API)
We use TikTok conversion tracking to measure and optimize TikTok campaigns. Website events (e.g., page views, leads/inquiries) may be transmitted to TikTok and used for attribution/optimization. Depending on our implementation, transmission may occur client-side via the TikTok Pixel and/or server-side via the TikTok Events API. Conversion/event data (e.g., event type, time stamp, page URL), technical data (e.g., IP address, user agent), online identifiers (e.g., cookie/pixel IDs), and—if enabled and provided by you—hashed contact data may be processed. Server-side transmission also occurs only with your consent.
Provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (and affiliated companies, depending on processing).
Data processed: online identifiers, device/browser data, event/usage data, referrer/URL information; where applicable, hashed contact data if advanced matching/comparable features are enabled.
5.7 Third-Country Transfers / Safeguards (for 5.1–5.6)
Processing outside the EU/EEA (in particular the United States) cannot be ruled out, depending on the provider and technical setup. Where data is transferred to third countries, this occurs only in compliance with the requirements of Art. 44 et seq. GDPR (e.g., adequacy decision—where applicable—and/or EU Standard Contractual Clauses and, where necessary, additional measures).
5.8 Withdrawal / Opt-Out
You can withdraw your consent at any time via “Cookie Settings.” Once withdrawn, the tools will no longer be loaded; the lawfulness of processing carried out up to the point of withdrawal remains unaffected.
6. Google Maps
We use Google Maps on this website. This allows us to display interactive maps directly on the website and enables convenient use of the map function.
By visiting the website, Google receives the information that you have accessed the relevant subpage of our website. In addition, the data listed in Section 2 is transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged into Google, your data is directly associated with your account. If you do not want this association with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses it for purposes of advertising, market research, and/or the needs-based design of its website. Such analysis is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google. Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s privacy policies.
The legal basis for processing your personal data using Google Maps is Art. 6(1)(f) GDPR. To the extent that, in connection with Google Maps, information is stored on or accessed from your device, this is carried out—where required—only in accordance with Section 165(3) TKG 2021 (consent or technical necessity).
Data transfers to the United States are based on the EU Commission’s Standard Contractual Clauses. Details can be found here and here. More information on how Google handles user data can be found in Google’s privacy policy.
7. Chat Feature
Our website offers the option to contact us via an electronic chat. For this purpose, we use the services of Userlike UG (limited liability), Probsteigasse 44–46, 50670 Cologne, Germany, which is integrated into our website.
If you use this option, the data entered in the input form will be transmitted to DACHSER & KOLB. If you do not enter any personal data in the input form itself (such as name, address, contact details, etc.), the date and time of transmission are stored at the time the message is sent. No tracking/location data is collected. To ensure a prompt response to your questions, we use the Live Preview setting. The processing of the data entered in the input form serves solely to answer the question(s) asked and to optimize the service offered. The legal basis for processing is Art. 6(1)(b) GDPR. Any other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems. This constitutes our legitimate interest in processing under Art. 6(1)(f) GDPR. Personal data is forwarded to the contact person responsible for processing your inquiry. In the course of providing the website, data is processed by our contractors, such as the service provider of our website. The data stored from the chat input form is automatically deleted after four weeks.
8. Social Plug-Ins
We use social plug-ins (“plug-ins”) from Facebook, Instagram, LinkedIn, and XING on our website. We use plug-ins in particular to enable you to share content from our website with other users of social networks or to draw their attention to such content. You can identify the provider of the respective plug-in by its logo or initial letter.
When you visit our site, we initially do not transmit any personal data to the providers of the plug-ins. However, if you click on the marked field, your personal data will be transmitted directly to the provider of the respective plug-in and processed by them—potentially in third countries such as the United States. After clicking on the plug-in field, a new window of your browser opens and calls up the page of the provider of the respective social network. Data is transmitted to the plug-in provider regardless of whether you have an account with that provider’s social network. If you are logged in to the plug-in provider, the data we collect is directly associated with your account with the plug-in provider.
We have no influence on the type and scope of the data collected and processed through the use of the plug-ins, nor are we aware of the full scope of data collection, the purposes of processing, or the retention periods. According to the providers’ own statements, the transmitted data includes, among other things, information about your browser, the websites visited, and the date and time of the visit. The plug-in providers process this information, for example, to create user profiles and to display targeted advertising. You have the right to object to the creation of these user profiles; to exercise this right, you must contact the respective plug-in provider. Further information can be found on the providers’ websites and in their privacy notices.
The legal basis is your consent by activating the respective plug-in (Art. 6(1)(a) GDPR; and, where applicable, additionally Section 165(3) TKG 2021 if information is stored on or accessed from the device).
When using Facebook/Instagram (Meta), data may be transferred to third countries (in particular the United States). Where personal data is transferred to third countries, we ensure an adequate level of data protection through appropriate safeguards (e.g., adequacy decision—where applicable—and/or EU Standard Contractual Clauses and, where necessary, additional measures).
9. Disclosure of Data to Third Parties
It is technically possible for service providers and contractual partners we use to operate our websites to access personal data. These external providers are obligated to use your personal data only to provide the services we request or otherwise in accordance with our instructions.
In particular, we use service providers in the areas of hosting/IT operations, website operations/maintenance, communication/support (e.g., chat), and analytics/marketing (Microsoft, Google, Meta, TikTok). Where service providers process personal data on our behalf, this is done on the basis of Art. 28 GDPR (processing on behalf) and corresponding agreements (data processing agreements).
If recipients process data outside the EU/EEA, transfers occur only in compliance with the requirements of Art. 44 et seq. GDPR (see Section 5.7).
Apart from the above disclosures, we do not transfer, sell, or market your personal data to third parties such as other companies or organizations unless you have given your express consent or the transfer is required to fulfill our contractual obligations to you as the user of the website.
10. Data Retention Period
We store personal data only for as long as necessary for the respective purposes or as long as statutory retention obligations apply. If the purpose no longer applies or a statutory period expires, the data is routinely deleted, blocked, or anonymized.
Inquiry data from the moving cost calculator is deleted after 90 days if no order has been placed (see Section 3). If an order is placed, storage and processing takes place in the course of order fulfillment and statutory obligations.
Consent and verification data (consent status, time stamp, and, where applicable, a pseudonymous identifier) is stored to the extent necessary to be able to prove consent and meet compliance requirements; it is then deleted.
Data from analytics and marketing technologies is processed in accordance with the retention and deletion logic stored in the respective tools and deleted or anonymized after the retention periods expire.
11. Your Rights
As a data subject, you have the rights set out in Articles 15–21 GDPR against DACHSER & KOLB, provided the respective requirements are met. These include the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and the right to object (Art. 21 and 22 GDPR). In addition, you have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR.
Competent supervisory authority in Austria:
Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, Austria, Tel.: +43 1 52 152-0, Email: dsb@dsb.gv.at
11.1 Withdrawal of Consent
If processing is based on your consent (e.g., analytics/marketing tracking), you may withdraw it at any time with effect for the future (via “Cookie Settings”). The lawfulness of processing carried out up to the point of withdrawal remains unaffected.
Information on data protection pursuant to Articles 13 and 14 GDPR