← Cherry’s Logistics

Privacy policy

1. Controller

The controller for data processing on this website is:

Cherry's Logistics Group GmbH
Limited liability company, registered office: Hamburg, HRB 200602
Managing Directors: Tim-Oliver Kirschbaum, Sandra Bufe, Marc-Henrik Schmitz
Zitadellenstraße 14, 21079 Hamburg, Germany
Email: [email protected]
Telephone: +49 170 4815040

2. Your rights at a glance

You have the right at any time to:

An informal email to [email protected] is sufficient. You also have the right to lodge a complaint with a supervisory authority; for us this is the Hamburg Commissioner for Data Protection and Freedom of Information.

We can honour these rights without qualification wherever we know who you are: for enquiries submitted through the form (section 4), for contact by email or telephone (section 5), and for applications (section 6). Merely visiting this website, by contrast, gives us no information that would allow us to attribute anything to you. Under Art. 11 (1) GDPR we are not obliged to collect or retain additional information for the sole purpose of being able to identify you. Where identification is consequently impossible for us, Arts. 15 to 20 GDPR do not apply to that data pursuant to Art. 11 (2) GDPR, unless you provide us with information enabling attribution. In practice this concerns the server log files described in section 3; the access statistics described in section 10 contain no personal reference in the first place.

3. Hosting and server log files

This website is operated at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data centre in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

On every request the server processes technically necessary data:

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the secure and trouble-free operation of the website. This data is not combined with other data sources and is deleted after one day.

4. Enquiries via the "Tell us about your shipment" form

If you contact us using the enquiry form, we process the details entered there:

This data is used solely to handle your enquiry and to provide you with a quote. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures). We send your enquiry to our mailbox and additionally send you a confirmation to the address you provided.
To prevent automated submissions we check a form field that is invisible to you and limit the number of submissions per IP address. Your IP address is held in memory only, solely to detect submissions following closely on one another; it is not written to the database and is gone once the ten-minute window has passed, and at the latest when the server next restarts. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in preventing abusive use. No cookies are set and no data is transmitted to third parties in the process.

We retain your enquiry until the matter is concluded, and beyond that where retention periods under commercial or tax law apply.

5. Contact by email and telephone

If you contact us by email or telephone, we process your details in order to handle your request. The legal basis is Art. 6 (1) (b) GDPR for contract-related enquiries, otherwise Art. 6 (1) (f) GDPR.

6. Applications

Applications sent to [email protected] are processed solely for the purpose of conducting the application procedure (§ 26 BDSG, Art. 6 (1) (b) GDPR). If no employment results, we delete the documents no later than six months after the procedure concludes, unless you have consented to longer storage.

7. Appointment booking via Microsoft Bookings

We currently do not offer online appointment booking on this website; no booking service is linked and no data is transmitted to Microsoft. As soon as we link to Microsoft Bookings again, a service of Microsoft Ireland Operations Limited, the following applies: when you click a booking button you leave this website and Microsoft's privacy terms apply. Data may be transferred to the USA in the process; Microsoft is certified under the EU-US Data Privacy Framework. No data is transmitted to Microsoft unless you click the button.

8. Content from social networks

In the "Follow the journey" section we show posts from our profiles on Instagram (Meta Platforms Ireland Limited) and LinkedIn (LinkedIn Ireland Unlimited Company). Where images are loaded directly from those providers' servers, they receive your IP address. The legal basis is Art. 6 (1) (f) GDPR, or your consent pursuant to Art. 6 (1) (a) GDPR where such consent is obtained. Plain links to our profiles transmit data only when clicked.

9. Cookies and local storage

This website sets no cookies. Only two items are placed in your browser's local storage:

Neither item leaves your device, neither is transmitted to us, and neither contains an identifier that makes you recognisable. They serve solely to provide the service you requested, and are therefore strictly necessary within the meaning of § 25 (2) no. 2 TDDDG. No consent is required for them, and accordingly we do not ask for any. You can delete this information at any time through your browser settings.

The notice shown on the site is therefore deliberately not a consent banner: there is nothing for you to consent to or refuse. We do not offer an "Accept" button that would in fact have no effect.

We do not use analytics or marketing cookies. Should that change, it will happen only after your express, prior consent, and this statement will be amended beforehand.

10. Access statistics

To understand which content is used, we count page views. The only things stored are:

Nothing further is stored. In particular we store no IP address — nor any shortened, encrypted or hashed value derived from one — no browser or operating system identifier, and not the full address of the referring page — the referring address is reduced to one of the origin labels above at the moment it is received and otherwise discarded. No identifier is assigned that could link your visit to an earlier or later one.

This data therefore permits no identification of you, whether directly or indirectly — not by us, and not by combining it with other information available to us. It is accordingly not personal data within the meaning of Art. 4 (1) GDPR, and the General Data Protection Regulation does not apply to this counting pursuant to Recital 26. We nevertheless set it out here so that you can see what happens when you visit this website.

Evaluation takes place exclusively on our own server. No third-party analytics tool is used, no data is transmitted to third parties, no transfer to third countries takes place, no user profiles are created and no cross-device tracking occurs. This counting requires no access to, and no storage of, information on your terminal equipment; § 25 TDDDG is therefore not engaged.

The counted views are deleted automatically after twelve months.

Because we cannot identify you from this data, an objection under Art. 21 GDPR has nothing to attach to here: there is no processing of your personal data to object to. Should you nevertheless prefer not to be counted, we voluntarily respect the "Global Privacy Control" and "Do Not Track" signals. If either is enabled in your browser, your visit is not counted at all and no record is created.

11. Encryption

This website uses TLS encryption to protect data in transit. You can recognise an encrypted connection by the padlock symbol in your browser's address bar.

12. Changes to this statement

We will adapt this privacy policy as soon as data processing on this website changes. The version published here applies in each case.

Language

This English text is a courtesy translation. The German version of this privacy policy is the binding one.