Privacy Policy of P8S and Pick8ship Technology AG

What data do we process?

We process various categories of data about you. The most impor­tant categories are as follows:

Techni­cal data: When you use our website or other electronic services, we collect the IP address of your end device and other techni­cal data to ensure the function-ality and security of these services. This data also includes logs in which the use of our systems is recorded. To ensure the function­al­ity of these offers, we can also as-sign you or your end device an individ­ual code (e.g. in the form of a cookie, cf. 12). The techni­cal data itself does not allow any conclu­sions to be drawn about your identity. However, in the context of user accounts, regis­tra­tions, access controls or the process­ing of contracts, they can be linked to other data categories (and thus possi­bly to your person).

The techni­cal data includes, among other things, the IP address and infor­ma­tion about the operat­ing system of your end device, the date, region and time of use as well as the type of browser you use to access our electronic offers. This can help us to trans­mit the correct format­ting of the website. Although we know from the IP address which provider you are using to access our offers (and there­fore also the region), we cannot usually deduce who you are from this. This changes if you cre-ate a user account, for example, because personal data can then be linked to tech-nical data (e.g. we can see which browser you are using to access an account via our website). Examples of techni­cal data include logs that accumu­late in our sys-tems (e.g. the log of user logins on our website).

Regis­tra­tion data: Certain offers and services can only be used with a user account or regis­tra­tion, which can be done directly with us or via our exter­nal login service providers. In doing so, you must provide us with certain data and we collect data on the use of the offer or service. Regis­tra­tion data may be collected during access controls to certain systems; depend­ing on the control system, biomet­ric data may also be collected. Regis­tra­tion data includes the infor­ma­tion you provide when you create an account on our website (e.g. user name, password, name, e‑mail ad-dress).

Commu­ni­ca­tion data: If you are in contact with us via the contact form, by e‑mail, telephone or chat, by letter or other means of commu­ni­ca­tion, we collect the data exchanged between you and us, includ­ing your contact details and the marginal data of the commu­ni­ca­tion. If we want or need to estab­lish your identity, e.g. if you request infor­ma­tion, apply for media access, etc., we collect data to identify you (e.g. a copy of an identity document).

Commu­ni­ca­tion data includes your name and contact details, the manner, place and time of commu­ni­ca­tion and, as a rule, its content (i.e. the content of emails, letters, chats, etc.). This data may also contain infor­ma­tion about third parties. For the purpose of identi­fi­ca­tion, we may also process your ID number or a password set by you.

Master data: We define master data as the basic data that we require in addition to the contract data (see below) for the process­ing of our contrac­tual and other business relation­ships or for market­ing and adver­tis­ing purposes, such as name, contact details and infor­ma­tion, e.g. about your role and function, your bank ac-count(s), your date of birth, customer history, powers of attor­ney, signa­ture au-thorisations and decla­ra­tions of consent. We process your master data if you are a customer or other business contact or work for one (e.g. as a contact person of the business partner), or because we want to contact you for our own purposes or the purposes of a contrac­tual partner (e.g. in the context of market­ing and adver­tis­ing). We receive master data from you yourself (e.g. when a contract is concluded or as part of a regis­tra­tion), from organi­za­tions for which you work or from third parties such as our contrac­tual partners, associ­a­tions and address dealers and from public-ly acces­si­ble sources such as public regis­ters or the Inter­net (websites, social me-dia, etc.). We gener­ally store this data for 10 years from the last exchange with you, but at least from the end of the contract. This period may be longer if this is neces-sary for reasons of proof or to comply with legal or contrac­tual require­ments or for techni­cal reasons .

Master data includes, for example, data such as name, address, e‑mail address, tel-ephone number and other contact details, gender, date of birth, nation­al­ity, de-tails of associ­ated persons, websites, social media profiles, photos and videos, cop-ies of ID cards; further­more, details of your relation­ship with us (customer, suppli-er, visitor, service recip­i­ent, etc.). We also collect infor­ma­tion about your relation-ship with us (customer, supplier, visitor, service recip­i­ent, etc.), infor­ma­tion about your status with us, alloca­tions, classi­fi­ca­tions and distri­b­u­tion lists, infor­ma­tion about our inter­ac­tions with you (possi­bly a history of these with corre­spond­ing en-tries), reports (e.g. from the media) or official documents (e.g. extracts from the commer­cial regis­ter, autho­riza­tions, etc.) that relate to you. We collect payment details such as your bank details, account number and credit card details. Consent or block­ing notices are also part of the master data, as is infor­ma­tion about third parties.

For contact persons and repre­sen­ta­tives of our customers, suppli­ers and partners, we process master data such as name and address, infor­ma­tion on role, function in the company, quali­fi­ca­tions and, if applic­a­ble, infor­ma­tion on superi­ors, employ-ees and subor­di­nates and infor­ma­tion on inter­ac­tions with these persons.

Master data is not collected compre­hen­sively for all contacts. Which data we col-lect in detail depends in partic­u­lar on the purpose of the process­ing.

Contract data: This is data that arises in connec­tion with the conclu­sion or pro-cessing of a contract, e.g. infor­ma­tion about contracts and the services to be pro-vided or provided, as well as data from the run-up to the conclu­sion of a contract, the infor­ma­tion required or used for process­ing and infor­ma­tion about reactions. We gener­ally collect this data from you, from contrac­tual partners and from third parties involved in the fulfil­ment of the contract, but also from third-party sources (e.g. providers of credit­wor­thi­ness data) and from publicly acces­si­ble sources. We gener­ally store this data for 10 years from the last contrac­tual activ­ity, but at least from the end of the contract. This period may be longer if this is neces­sary for rea-sons of proof or to comply with legal or contrac­tual require­ments or for techni­cal reasons.

Contract data includes infor­ma­tion about the conclu­sion of the contract, about your contracts, e.g. type and date of conclu­sion of the contract, infor­ma­tion from the appli­ca­tion process (such as an appli­ca­tion for our products or services) and in-formation about the contract in question (e.g. its duration) and the process­ing and admin­is­tra­tion of the contracts (e.g. infor­ma­tion in connec­tion with invoic­ing, cus-tomer service, support with techni­cal matters and the enforce­ment of contrac­tual claims). Contract data also includes infor­ma­tion on defects, complaints and ad-justments to a contract, as well as infor­ma­tion on customer satis­fac­tion, which we can collect e.g. by means of surveys. Contract data also includes finan­cial data such as infor­ma­tion on credit­wor­thi­ness (i.e. infor­ma­tion that allows conclu­sions to be drawn about the likeli­hood of claims being settled), reminders and debt collec-tion. We receive some of this data from you (e.g. when you make payments), but also from credit agencies and debt collec­tion agencies and from publicly acces­si­ble sources (e.g. a commer­cial regis­ter).

Behav­ioural and prefer­ence data: Depend­ing on the relation­ship we have with you, we try to get to know you and better tailor our products, services and offers to you. To do this, we collect and use data about your behav­ior and prefer­ences. We do this by evalu­at­ing infor­ma­tion about your behav­ior in our area, and we can also supple­ment this infor­ma­tion with data from third parties, includ­ing from pub-licly acces­si­ble sources. Based on this, we can, for example, calcu­late the probabil-ity that you will use certain services or behave in a certain way. Some of the data processed for this purpose is already known to us (e.g. when you use our services), or we obtain this data by record­ing your behav­ior (e.g. how you navigate our web-site). We anonymize or delete this data when it is no longer relevant for the pur-poses pursued. This period may be longer if this is neces­sary for reasons of proof or to comply with legal or contrac­tual require­ments or for techni­cal reasons. We describe how track­ing works on our website in section 12.

Other data: We also collect data from you in other situa­tions. In connec­tion with official or court proceed­ings, for example, data is collected (such as files, evidence, etc.) that may also relate to you. We may also collect data for health protec­tion reasons (e.g. as part of protec­tion concepts). We may receive or produce photos, videos and audio record­ings in which you may be recog­nis­able (e.g. at events, through security cameras, etc.). We may also collect data about who enters certain build­ings and when, or who has the corre­spond­ing access rights (includ­ing during access controls, based on regis­tra­tion data or visitor lists, etc.), who takes part in events or campaigns and when, or who uses our infra­struc­ture and systems and when. Finally, we collect and process data about our share­hold­ers and other inves-tors; in addition to master data, this includes infor­ma­tion for the relevant regis-trars, regard­ing the exercise of their rights and the organ­i­sa­tion of events (e.g. gen-eral meetings). The reten­tion period for this data depends on the purpose and is limited to what is neces­sary. Data about you as a share­holder or other investor will be retained in accor­dance with the require­ments of company law, but in any case for as long as you are invested.

Many of the items listed in this para. 3 you disclose to us yourself (e.g. via forms, as part of commu­ni­ca­tion with us, in connec­tion with contracts, when using the website, etc.). You are not obliged to do so, subject to individ­ual cases, e.g. as part of binding protec­tion concepts (legal oblig­a­tions). If you wish to conclude contracts with us or make use of ser-vices, you must also provide us with data as part of your contrac­tual oblig­a­tion in accord-ance with the relevant contract, in partic­u­lar master data, contract data and regis­tra­tion data. When using our website, the process­ing of techni­cal data is unavoid­able. If you wish to gain access to certain systems or build­ings, you must provide us with regis­tra­tion data. In the case of behav­ioral and prefer­ence data, however, you always have the option of object­ing or not giving your consent.

Insofar as this is not unautho­rized, we also obtain data from publicly acces­si­ble sources (e.g. debt collec­tion regis­ters, land regis­ters, commer­cial regis­ters, media or the inter­net, includ­ing social media) or receive data from other compa­nies within our group, from au-thorities and from other third parties (such as credit agencies, address dealers, associa-tions, contrac­tual partners, inter­net analy­sis services, etc.).