Privacy

Privacy policy

We are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you at this point which of your personal data we collect when you visit our website and for what purposes it is used. Personal data is individual information about personal or factual circumstances of a specific or identifiable natural person (data subject), e.g. name, address, e-mail addresses, user behavior. This is therefore data with which we can identify you. In addition, you will also find information on data processing processes outside this website (e.g. video conferences or newsletters).

Person responsible for data processing

Responsible
For the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)

Postex Nederland B.V.
Burgemeester Jamessingel 41
2803 WV Gouda
The Netherlands
+31 (0) 88 – 07 07 400
servicedesk@postex.com

Data Protection Office

Postex has appointed a Data Protection Officer (DPO). The DPO is responsible for supervising the processing of personal data by Postex, making an inventory of data processing, advising on technology and security, and more. The DPO is registered with the Personal Data Authority under registration number FG012236. If, despite the above, you suspect that your data are not properly secured, think that your personal data have been misused, or believe that Postex does not sufficiently guarantee the correct processing of personal data, then send an e-mail to servicedesk@postex.com.

General

This privacy policy meets the legal requirements for transparency in the processing of personal data. This is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, e-mail address, IP address or user behavior when visiting a website. Information for which we cannot (or can only with a disproportionate effort) establish a reference to your person, e.g. by anonymization, is not personal data. The processing of personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose.
Stored personal data are deleted as soon as the purpose of the processing has been achieved and there are no legitimate grounds for further storage of the data. We will inform you in the individual processing operations about the specific storage periods or criteria for storage. Irrespective of this, we store your personal in individual cases for the assertion, exercise or defense of legal claims and if there are legal retention obligations.

Information according to Art. 13 GDPR

This information is intended for customers, prospective customers, suppliers and employees. Your personal data will be processed by us for the following purposes:

To fulfill our contractual obligations to you (Art. 6 para. 1 lit. b GDPR).
For the performance of pre-contractual obligations (Art. 6 para. 1 lit. b GDPR).
To respond to inquiries (Art. 6 para. 1 lit. b GDPR).
If you have given us consent to process your personal data for certain purposes (for example, to receive our newsletter), the data processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR).
To fulfill legal obligations to which our company is subject (Art. 6 para. 1 lit. c GDPR).
To the extent necessary, we also process your data to protect our legitimate interests, in particular to assert legal claims and defend ourselves in legal disputes or to ensure IT security, to consult and exchange data with credit agencies to determine creditworthiness and default risks, for direct advertising and market research insofar as you have not objected to the use of your data for this purpose, for measures to manage business and further develop services and products, for measures to optimize products and sales, for measures to manage risk, to prevent or investigate criminal acts (Art. 6 para. 1 lit. f GDPR).

Categories of recipients of the personal data

Within our company, only those employees have access to the data who absolutely need it to perform their tasks (need-to-know principle). Individual processes and services are carried out by carefully selected service providers who are based within the EEA and who comply with data protection regulations. Insofar as service providers commissioned by us receive access to personal data when performing your services, order processing agreements have been concluded with them in accordance with Art. 28 (3) GDPR.

Duration of data storage

The data processed by us is stored for the duration of the existence and processing of the contractual relationship and in compliance with statutory retention periods. These are, in particular, retention obligations under commercial and tax law in accordance with the German Commercial Code (HGB) and the German Fiscal Code (AO). The regular retention and documentation periods are up to ten years. If there is no contractual relationship, we only process the data for as long as the specific purpose requires.
Your data subject rights

As a data subject, you have the following rights with regard to the personal data concerning you vis-à-vis us:

Right to information about the data processed about you by us.
Right to rectification or deletion if they are incorrect, out of date or unlawfully collected by us.
Right to restriction of processing if complete deletion is not possible, e.g. because we have to comply with legal retention obligations.
Right to object to processing, provided that the data processing is based on a balance of interests (the so-called legitimate interest), as described above under “Purpose of processing”. This is the case if the processing is not necessary, in particular, for the performance of a contract with you. When exercising your right to object, we ask you to explain the reasons why we should not process your data as we have done.

Of course, you can also object to the processing of your personal data for advertising purposes at any time. Please send your objection to our address given in the imprint or write us an e-mail to the address given in the imprint.

Right of revocation if you have given us consent to process your data. You can assert your revocation at any time without giving reasons to our company. To do so, please contact us at the address given in the imprint.
In addition, you have the right to complain to a data protection supervisory authority about the processing of your personal data by our company.

If you have any questions regarding data protection, please contact us by e-mail at the address given in the imprint.

Cookies

Cookies are small text files that are sent by us to the browser of your end device during your visit to our website and stored there. As an alternative to the use of cookies, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, on the other hand, enable us to perform various analyses, so that we are able, for example, to recognize the browser you are using when you visit our website again and to transmit various information to us (non-essential cookies). With the help of cookies, we can, among other things, make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly from your browser. Cookies do not cause any damage to your end device. They cannot execute programs or contain viruses.

We provide information about the respective services for which we use cookies in the individual processing operations. You can find detailed information about the cookies used in the cookie settings or in the Consent Manager of this website.

Consent with Cookiebot

Our website uses the consent technology of Cookiebot to obtain your consent to the storage of certain cookies on your terminal device or to the use of certain technologies and to document this in accordance with data protection law. The provider of this technology is Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter “Cookiebot”).

When you enter our website, a connection is established to the servers of Cookiebot in order to obtain your consent and other declarations regarding cookie use. In order to be able to assign and document your consent or revocation, a cookie is set in your browser. This data is stored until you delete the cookie, request us to delete the data or the purpose for data processing no longer applies. Legal storage obligations remain unaffected.

Cookiebot is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.

Job processing

To ensure that personal data is processed according to our specifications and in compliance with the GDPR, we have concluded a contract on commissioned processing (AVV) with the provider.

Data processing in detail

In the following, we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. An automated decision in individual cases, including profiling, does not take place.

Provision of the website

When you call up and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is stored temporarily in a so-called log file:

IP address of the requesting computer
Date and time of access
Name and URL of the retrieved file
Website from which the access is made (referrer URL)
Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

Our website is not hosted by ourselves, but by a service provider who processes the aforementioned data on our behalf pursuant to Art. 28 GDPR for the purpose of providing the website.

The hoster is used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).

We use the following hoster:

Amazon Web Services, Inc.
410 Terry Avenue North
Seattle, WA 98109-5210
United States

Contact form

Nature and scope of processing
If you send us inquiries (e.g. via contact form, e-mail or telephone), we store all data resulting from this (e.g. name, e-mail address, subject of the inquiry, etc.). We need this data to process your inquiry and to be able to answer follow-up questions. We do not pass on this data without your consent.

Purpose and legal basis
The processing of this data is based on Art. 6 (1) lit. b GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. Otherwise, the processing is based on our legitimate interest in the effective processing of requests addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if you have previously given it.

Storage duration
The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions – in particular retention periods – remain unaffected.

Contact form for applicants

Nature and scope of processing
On our website, you have the option of applying to us (e.g. by e-mail, by post or via the online application form).

Purpose and legal basis
We process the personal data of applicants in accordance with the legal requirements for the purpose of processing the application procedure and carrying out pre-contractual measures within the meaning of Art. 6 (1) lit. b. GDPR and – if you have given your consent – Art. 6 para. 1 lit. a GDPR. The consent can be revoked at any time. Your personal data will only be passed on within our company to persons who are involved in processing your application.

If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of Art. 6 (1) lit. b GDPR for the purpose of implementing the employment relationship.

Storage duration
Your data will be stored for a period of 6 months beyond the end of the application process. This is usually done to fulfill legal obligations or to defend against any claims arising from legal regulations. Subsequently, we are obliged to delete or anonymize your data. In this case, the data is only available to us as so-called metadata without direct personal reference for statistical evaluations (for example, proportion of women or men in applications, number of applications per period, etc.).
If it is apparent that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), the data will not be deleted until the purpose for continued storage no longer applies.

Inclusion in the applicant pool
As part of the application process, we offer applicants the opportunity to be included in our “talent pool” for a period of 12 months on the basis of consent within the meaning of Art. 6 (1) lit. a. GDPR to be included.

The application documents in the talent pool will be processed solely in the context of future job postings and employee searches and will be destroyed at the latest after the deadline. Applicants are informed that their consent to inclusion in the talent pool is voluntary, has no influence on the current application process and that they can revoke this consent at any time for the future.

If you receive an offer of employment with us as part of the application process and accept it, we will store the personal data collected as part of the application process for at least the duration of the employment relationship.

Presence on social media platforms

Data processing through social networks
We operate publicly accessible profiles on social networks. The social networks used by us in detail can be found below.

Social networks such as Facebook, Twitter, etc. can generally analyze your user behavior extensively. By visiting our social media presences, the following data protection-relevant processing operations are triggered:

If you are logged into your social media account and visit our profile, the operator of this social medium can track this visit. Independently of this, the operator may also process your data (e.g. IP address) under certain circumstances if you are not logged into your account or you do not have an account at all.

The operator summarizes this data in user profiles in which your preferences and interests are stored. These profiles are used to display personalized advertising inside and outside the respective social media presence. If you have an account with the respective social network, the personalized advertising can be displayed on all devices on which you are or were logged in.

Depending on the platform, further processing operations may be carried out by the operators of the social media portals; we have no influence on this. For details, please refer to the terms of use and data protection provisions of the respective social media portals.

Legal basis
Our social media presences are intended to ensure the most comprehensive presence possible on the Internet within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes carried out by the operators of the social networks may be based on different legal bases, which are to be specified by the respective providers.

Responsible person and assertion of rights
If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal (e.g. Facebook).

Despite the joint responsibility with the social media portal operators, we have no full influence on the data processing operations of the portals. Our options are largely determined by the corporate policy of the respective provider.

Storage duration
The data collected directly by us via the social media presence will be deleted from our systems as soon as you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Mandatory legal provisions – in particular retention periods – remain unaffected.

We have no influence on the storage period of the data collected by the social networks. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Twitter page

We use the short message service Twitter. The provider is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.

You can adjust your Twitter privacy settings independently in your user account. To do so, click on the following link and log in: https://twitter.com/personalization.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://gdpr.twitter.com/en/controller-to-controller-transfers.html.

For details, see Twitter’s privacy policy: https://twitter.com/de/privacy.

LinkedIn page

We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.

If you wish to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

For details on how they handle your personal data, please see LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.

Video conferencing

Data processing
We use online conferencing tools to communicate with our customers. The tools we use in detail are listed below. When you communicate with us via video or audio conferencing, your personal data is collected and processed by us and the provider of the respective tool.

The tools collect the data you provide, including your email address and phone number. They also process, the duration of the conference, when you attended the conference, number of participants and other metadata.

In addition, the tool provider processes all technical data required for handling the conference. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speakers, and the type of connection.

When you share content in this service, it is stored on the providers’ servers. This includes cloud recordings, chat messages, voice messages, and photos and videos that you have shared while using this service.

Please note that we do not have full influence on the data processing operations of the tools used. For more information on data processing by the conference tools, please refer to the privacy statements of the respective tools used.

Purpose and legal basis
The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 para. 1 lit. b GDPR). Furthermore, the use of the tools serves the general simplification and acceleration of communication with us or our company (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). If you have previously given your consent to data processing, the processing of your data will take place solely on the basis of Art. 6 (1) a GDPR; the consent can be revoked at any time.

Storage duration
The data collected directly by us via the video and conference tools is deleted from our systems as soon as you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory legal retention periods remain unaffected.
We have no influence on the storage period of your data, which is stored by the operators of the conference tools for their own purposes. For details, please contact the operators of the conference tools directly.

Communication via WhatsApp

For communication with our customers and other third parties, we use, among other things, the instant messaging service WhatsApp Business, of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

When you communicate with us via WhatsApp, the chats are end-to-end encrypted. This is to prevent WhatsApp or third parties from gaining access to the contents of the chat. However, WhatsApp does gain access to metadata that is created in the course of the communication process (e.g. sender, recipient and time). WhatsApp shares personal data collected with Meta, the parent company based in the USA. Further details on data processing can be found in WhatsApp’s privacy policy at: https://www.whatsapp.com/legal/#privacy-policy.

WhatsApp is used on the basis of our legitimate interest in communicating as quickly and effectively as possible with customers, interested parties and other business and contractual partners (Art. 6 para. 1 lit. f GDPR). If you have previously given your consent to data processing, the processing of your data will take place solely on the basis of Art. 6 (1) a GDPR; consent can be revoked at any time.

The communication content exchanged between and on WhatsApp remains with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g., after processing your request has been completed). Mandatory legal provisions – in particular retention periods – remain unaffected.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.whatsapp.com/legal/business-data-transfer-addendum.

The company is certified under the “EU-US Data Privacy Framework” (DPF), an agreement between the European Union and the USA, which aims to ensure compliance with European data protection standards for data processing in the USA. Certification under the DPF obligates companies to comply with these data protection standards. For more information, please visit: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt00000011sfnAAA&status=Active

We have set our WhatsApp accounts so that it does not automatically match data with the address book on the smartphones in use.

To ensure that personal data is processed according to our specifications and in compliance with the GDPR, we have concluded a contract on commissioned processing (AVV) with the provider.

Google Ads

Nature and scope of processing
We have integrated Google Ads on our website. Google Ads is a service provided by Google Ireland Limited to display targeted advertising to users. Google Ads uses cookies and other browser technologies to evaluate user behavior and recognize users.

Google Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Google Ads delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identifiers such as your user agent are transmitted to the provider.

If you are registered with a Google Ireland Limited service, Google Ads can associate the visit with your account. Even if you are not registered with Google Ireland Limited or have not logged in, it is possible that the provider will find out and store your IP address and other identification features.

In this case, your data will be passed on to the operator of Google Ads, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose and legal basis
When using Google Ads, we rely on Art. 6 (1) lit. f GDPR as the legal basis, as we have a legitimate interest in analyzing the use of our website in order to successfully market our services and products.
The transfer of your personal data to the USA is based on the standard contractual clauses of the EU Commission. You can find more information about this at https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

Google Analytics

Nature and scope of processing
We use Google Analytics services and functions on this website, which are offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google Analytics, we as website operators can determine how our website is used. As part of the analysis, we learn how often our website is accessed, how long visitors stay on the page and with which devices or systems they access the website. In addition, we may use Google Analytics to track your mouse movements and clicks. This information may be stored and used by Google to create a profile about you. In doing so, Google Analytics uses machine learning technologies to analyze and supplement your data. Furthermore, Google Analytics uses website visitor recognition technologies to analyze user behavior. The processing of the collected data usually takes place on Google servers in the USA.

Purpose and legal basis
When using Google Analytics, we rely on Art. 6 (1) lit. f GDPR as the legal basis for the storage and analysis of personal data, as we have a legitimate interest in analyzing the use of our website. This allows us to optimize our online presence and offers for you. If you have previously given your consent to the processing of data on this website by Google Analytics, the processing of your data takes place solely on the legal basis of Art. 6 (1) lit. a GDPR. You can revoke your consent at any time.

The transfer of your personal data to the USA is based on the standard contractual clauses of the EU Commission. You can find more information about this at https://privacy.google.com/businesses/controllerterms/mccs/.

IP anonymization
When using Google Analytics on this website, we use a function where Google truncates your IP address before it is transmitted to Google servers in the USA. This only happens if you are located in the European Union or in a country of the European Economic Area. Your full IP address will only be transmitted to the USA in exceptional cases and subsequently shortened there. Google Analytics uses this information to track how you use our website. Your IP address will not be merged with any other data held by Google.

Browser plugin
You can prevent Google from collecting and processing data about you. To do this, you must download the browser plugin at https://tools.google.com/dlpage/gaoptout?hl=de and install it in your browser.
For more information on the processing of user data, please refer to the Google Analytics privacy policy at https://support.google.com/analytics/answer/6004245?hl=de.

Job processing
When using Google Analytics, we comply with the strict regulations of the German data protection authorities, as we have concluded an order processing contract with Google.

Storage duration
Google stores data linked to cookies, user IDs or advertising IDs. This data is stored for two months and then anonymized or deleted. For more information about the storage period or the deletion of your data, please visit https://support.google.com/analytics/answer/7667196?hl=de.

Google DoubleClick

Nature and scope of processing
We use Google DoubleClick services and functions on this website, which are offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google DoubleClick enables us to show our users targeted advertisements in Google applications connected to DoubleClick that are based on the users’ interests. In order to show users ads that are relevant to them, Google DoubleClick must be able to identify users and associate them with the websites they visit, their clicks and other information about their behavior. For this purpose, Google DoubleClick uses cookies and technologies to recognize users and creates pseudonymous profiles of users based on the data collected.

You can deactivate this personalized advertising in your personal Google account at. You can find more information about this at https://policies.google.com/technologies/ads and https://adssettings.google.com/authenticated.

Purpose and legal basis
When using Google DoubleClick, we rely on Art. 6 (1) lit. f GDPR as the legal basis, as we have a legitimate interest in analyzing the use of our website. This allows us to optimize our online presence and offers for you. If you have previously given your consent to data processing by Google DoubleClick on this website, the processing of your data takes place solely on the legal basis of Art. 6 (1) lit. a GDPR. You can revoke your consent at any time.

Google Fonts

Nature and scope of processing
This website uses web fonts for the uniform display of fonts. These are provided by Google. Your browser loads the required web fonts into your browser cache when you call up the page so that texts and fonts are displayed correctly. For this purpose, the browser you are using establishes a connection to Google’s servers. Google thereby gains knowledge of your IP address.

If your browser does not support web fonts, a default font from your computer will be used.

More information about Google Web Fonts can be found here: https://developers.google.com/fonts/faq.
Google’s privacy policy can be found here: https://policies.google.com/privacy?hl=de.

Purpose and legal basis
The use of Google Web Fonts is based on our legitimate interest in a uniform presentation of the typeface of our website (Art. 6 para. 1 lit. f GDPR). If a corresponding consent has been requested (e.g. consent to the storage of cookies), the data is processed exclusively on the basis of your consent in accordance with Art. 6 (1) a GDPR. This can be revoked at any time.

Google Tag Manager

Nature and scope of processing
We use services and functions from Google Tag Manager on this website, which are offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to use other tools on our website. It does not create user profiles, it does not store cookies and it does not perform independent analysis. However, your IP address is collected and may be transmitted to the USA. Google Tag Manager itself is only used to manage these tools that are integrated through it.

Purpose and legal basis
When using Google Tag Manager on this website, we rely on Art. 6 (1) lit. f GDPR as the legal basis, as we have a legitimate interest in implementing and directing tracking tools on this website easily and quickly. If you have previously given your consent to data processing on this website by Google Tag Manager, the processing of your data will take place solely on the legal basis of Art. 6 (1) lit. a GDPR. You can revoke your consent at any time.

The Postex Platform

Functional areas

Postex Automation

Postex Messaging

Postex Contact Center

Postex API Platform

Postex for developers

Postex Add-ons

Postex API

Terms

Privacy policy

Person responsible for data processing

Data Protection Office

General

Information according to Art. 13 GDPR

Categories of recipients of the personal data

Duration of data storage

Cookies

Consent with Cookiebot

Job processing

Data processing in detail

Provision of the website

Contact form

Contact form for applicants

Presence on social media platforms

Twitter page

LinkedIn page

Video conferencing

Communication via WhatsApp

Google Ads

Google Analytics

Google DoubleClick

Google Fonts

Google Tag Manager

The Postex Platform

Functional areas

Postex Automation

Postex Messaging

Postex Contact Center

Postex API Platform

Postex for developers

Postex Add-ons

Postex API

Receive

Send

Terms

Privacy

Privacy policy

Person responsible for data processing

Data Protection Office

General

Information according to Art. 13 GDPR

Categories of recipients of the personal data

Duration of data storage

Cookies

Consent with Cookiebot

Job processing

Data processing in detail

Provision of the website

Contact form

Contact form for applicants

Presence on social media platforms

Twitter page

LinkedIn page

Video conferencing

Communication via WhatsApp

Google Ads

Google Analytics

Google DoubleClick

Google Fonts

Google Tag Manager