Privacy policy

Version 1.0.0

1. Controller

KühlKurier (full company name still pending)
Mohammad Qalaweh
Further Str. 171, 41462 Neuss
Phone: +49 155 60377775

2. Data from the request form

When you send a transport request, we process the details you enter:

• First name, last name and, if given, company
• Phone number and, if given, email address
• Pickup and delivery location with postal code, preferred pickup date
• Transport type, temperature range, description of goods, weight, number of packages and your additional message
• Time and version of your privacy consent

In addition we store technical details for abuse prevention: the page visited, any campaign parameters from the address bar, the browser identification and a pseudonymised value of your IP address. The IP address itself is not stored; only a hash calculated with a server-side secret is kept.

Mandatory details are first name, last name, phone number, pickup and delivery location, transport type and description of goods. Without them we cannot process the request. All other fields are voluntary.

3. Purpose and legal basis

The data is used solely to check your request, call you back and, if applicable, prepare a quote. The legal basis is your consent under Art. 6(1)(a) GDPR and the performance of pre-contractual measures under Art. 6(1)(b) GDPR. The final assignment of the legal basis still has to be agreed with the data protection adviser.

4. Storage

The request is stored in a PostgreSQL database. Only authorised persons have access, through a password-protected internal area. Access and status changes are logged.

Hosting provider, server location and data processing agreement still have to be added.

5. Forwarding via WhatsApp

So that new requests are handled quickly, we send a notification via the WhatsApp Business Cloud API to an internal number. The provider is Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. Transmitted are the reference number, name, company, phone number, email address, route, preferred date, transport type, temperature range, description of goods, weight, number of packages and your message.

Not transmitted are your IP data, the browser identification and internal technical details. Processing by Meta outside the EU cannot be ruled out. The details on third-country transfer and on the safeguards under Art. 44 et seq. GDPR are subject to legal review.

6. Retention period

After the defined period has passed, requests are anonymised automatically: name, company, phone number, email address, locations, description of goods and message are overwritten. Only the reference number, time, transport type and processing status remain. Statutory retention obligations remain unaffected. The concrete period still has to be defined bindingly.

7. Typeface

The typeface used is delivered from our own server. Your browser does not connect to third-party servers for it.

8. Cookies

The public website sets no cookies for analytics or advertising. The internal area uses one technically necessary session cookie.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw consent at any time with effect for the future. Please use the contact details above.

You also have the right to lodge a complaint with a data protection supervisory authority.