DE
Legal

Privacy Policy

1. Controller

CROW | Berwanger & Lühr GbR
Markgrafenstraße 67–68, 10969 Berlin, Germany
Email: info@crowberlin.de
Phone: +49 (0)30 403 668 966

2. General Information on Data Processing

We process personal data of our users only to the extent necessary to provide a functioning website along with our content and services. Processing takes place based on consent (Art. 6(1)(a) GDPR), for the performance of a contract (Art. 6(1)(b) GDPR), or on the basis of legitimate interests (Art. 6(1)(f) GDPR).

As a courier service, data protection and data security matter a great deal to us: we only collect the information genuinely necessary to process your order, store it only for a limited period, and never pass it on to third parties unless required for order processing or you have explicitly consented.

3. Website Hosting & Server Log Files

Each time our website is accessed, our hosting provider automatically collects data in server log files: IP address, date and time of the request, content of the request, access status, amount of data transferred, browser type and version, operating system, referrer URL. This data is not linked to specific individuals and is used exclusively to ensure trouble-free operation and to improve our offering (Art. 6(1)(f) GDPR). It is deleted automatically after a maximum of 7 days.

4. Cookies

Our website does not currently set its own cookies for tracking or marketing purposes. Should this change, we will obtain your consent in advance via a cookie consent tool where legally required.

5. Contact via Email or Phone

If you contact us by email or phone, your inquiry and all resulting personal data will be stored and processed by us to handle your request (Art. 6(1)(b) GDPR). We do not share this data without your consent. Some of our "Request a Delivery" buttons simply open your own email application with a pre-filled draft; no data is transmitted to us or any third party through the website itself in that case.

Registration Form (Tally)

For our registration form we use Tally, provided by Tally BV, based in Ghent, Belgium (EU). The data you enter (company, contact person, email, phone, address, etc.) is transmitted to Tally to process your registration and stored on servers within the EU (Art. 6(1)(b) GDPR). We have a data processing agreement with Tally pursuant to Art. 28 GDPR. Since Tally is based and hosts its servers within the EU, no third-country data transfer takes place. See Tally's privacy policy for details. Alternatively, you can fill out the registration form by email to dispatch@crowberlin.de instead, without Tally being involved.

5a. Job Applications

If you apply to us, usually by email to apply@crowberlin.de using the template on our jobs page, we process the details you send us: name or nickname, contact details, availability, experience, details on equipment and work permit, and anything you add voluntarily. We use this data solely to decide on your application and to carry out the application process. The legal basis is Art. 6(1)(b) GDPR in conjunction with Section 26 BDSG (steps prior to an employment or service relationship).

Your application is only seen by the people at CROW who handle the application process. We do not pass it on to third parties. The jobs page itself does not transmit any data: the apply button only opens your own email application with a pre-filled draft.

If we do not end up working together, we delete your application no later than six months after the process has ended. We need this period to be able to defend ourselves against possible claims under the German General Equal Treatment Act (AGG) (Art. 6(1)(f) GDPR). If we would like to keep your application for later openings, we ask for your explicit consent first (Art. 6(1)(a) GDPR). You can withdraw this consent at any time. If you join us, your application becomes part of your personnel records.

We usually do not handle applications sent through other channels (other email addresses, social networks, dispatch). If they reach us anyway, the same applies to them as above.

6. Order Processing & Dispatch Software

To process your courier orders (addresses, contact details, shipment details) we use the dispatch software provided by lobo.at. We have a data processing agreement with this provider pursuant to Art. 28 GDPR. Servers are located exclusively in Germany and the EU. Your order data is retained only as long as necessary for processing and as required by statutory retention periods.

7. Web Analytics (Ahrefs Analytics)

We use Ahrefs Analytics, a cookie-less web analytics service by Ahrefs Pte. Ltd., Singapore. The service does not use cookies and does not build individual visitor profiles; it collects aggregated, anonymized usage statistics only (e.g. page views, country of origin, browser type). Legal basis is our legitimate interest in designing our website to meet demand (Art. 6(1)(f) GDPR). See Ahrefs' privacy policy for details.

8. Fonts

The fonts used on this website are self-hosted on our own server. No connection is made to Google's or any other third party's servers, and no data such as your IP address is transmitted to third parties for this purpose.

9. Retention Period

Unless a more specific retention period is stated above, your personal data remains with us until the purpose for processing no longer applies. Upon a valid deletion request or withdrawal of consent, your data will be deleted unless statutory retention obligations (e.g. tax and commercial law periods) apply.

10. Your Rights

You have the right at any time to:

To exercise these rights, contact us by email at info@crowberlin.de.

11. Right to Lodge a Complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence. For Berlin, this is:

Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstr. 219, 10969 Berlin, Germany
datenschutz-berlin.de

12. Data Security

We protect your data through comprehensive technical and organizational security measures. These include, in particular:

13. No Automated Decision-Making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.