Privacy Policy

Definitions

For a better understanding of this privacy policy, you will find below a brief explanation of the terms used.

Personal data (“data”) is any data containing information relating to the personal or material circumstances of a natural person, such as name, address, e-mail address, telephone number, date of birth, age, gender, social security number, video recordings, photographs, etc. Data relating to legal entities is not subject to the provisions of the GDPR.

Processing is any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Recipient means a natural or legal person, public authority, agency or another body to which the personal data are disclosed, whether a third party or not.

Our Contact Details

Should you have any further questions, we, as the controller responsible for the data processing described herein, are happy to assist you using the following contact details:

Trapp Spedition GmbH
Schwöllstraße 3, 5211 Lengau, Austria
Phone: +43 7746 20582, E-mail: office@trappsped.at

Purposes and Legal Basis for Processing

Data may only be processed for a specific purpose and only if the processing can be based on a corresponding legal basis. Processing may be justified for the following reasons:

We process your data for the following purposes on the basis of the following legal bases:

Recipients

Recipients assist us in complying with statutory or legal obligations, in the initiation and performance of contracts, in services that require your consent, or in carrying out processing activities that are in our legitimate interest. We transfer or disclose data, in part, in particular to the following recipients (processors or controllers):

We transfer your data to other recipients only if you have given your express consent to do so pursuant to Art. 6(1)(a) GDPR, if this is legally permissible and necessary for the performance of a contractual relationship with you pursuant to Art. 6(1)(b) GDPR, if we are subject to a legal obligation to do so pursuant to Art. 6(1)(c) GDPR, or if the disclosure is necessary pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests and to assert, exercise or defend legal claims, and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data.

We intend to transfer data to the following third countries: United States of America.

For the United States of America, an adequacy decision by the European Commission is in place. By decision of 10 July 2023 on C(2023) 4745 final (available here), the European Commission decided that the United States of America provides an adequate level of data protection within the meaning of Art. 45 GDPR, provided that our contractual partner is listed on the EU-U.S. Data Privacy Framework list. Where no adequacy decision exists, we may only transfer data on the basis of appropriate safeguards, such as standard contractual clauses. A copy of these safeguards for your particular case is available from us upon request.

There is no intention to transfer the data to an international organisation.

Retention Period

As a general rule, data is stored only for as long as required by statutory retention obligations. Data may also be stored beyond this period if necessary for the assertion or defence of claims by third parties. Important retention periods can be found below:

Web Hosting

Vercel
For the hosting and provision of our website, we use the cloud platform Vercel. The provider is Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA (hereinafter: Vercel).

• Type of data: IP address, request headers and log data.
• Purpose: Fast delivery of the website via a global network (CDN) and protection against DDoS attacks.
• Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a high-performing and secure web infrastructure).
• Data transfer: Vercel is certified under the EU-U.S. Data Privacy Framework. The transfer to the USA is therefore based on an adequacy decision of the EU Commission.
• Further information: Further details can be found in the privacy policy available here.

Fonts (locally hosted)
For a consistent display of fonts, we use fonts that are provided locally on our server and loaded from there when the website is accessed. No connection to third-party servers (e.g. Google) is established, and no personal data is transferred to third parties.

Google Services

General
The provider of the following services is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland. You can find Google's privacy policy at this link. Some services are provided by, or data is transferred to, Google LLC, 1600 Amphitheatre Pkwy, Mountain View, California 94043-1351, USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, meaning the data transfer to the USA is compliant with data protection law within the meaning of Art. 45 GDPR.

Some Google services use cookies. Before processing, your consent within the meaning of Art. 6(1)(a) GDPR and Section 165(3) of the Austrian Telecommunications Act (TKG) is obtained for the use of Google services and the setting of the cookies required for this purpose. You may withdraw your consent at any time, free of charge.

Google Analytics
We use the web analytics service Google Analytics 4 (measurement ID G-X7FHP48S4J) on our website. Google Analytics allows us to analyse visitor behaviour and improve what we offer. It is used solely on the basis of your consent (Art. 6(1)(a) GDPR and section 165(3) of the Austrian Telecommunications Act). As long as you have not consented to the category Statistics, the Google script is technically blocked and is not loaded at all – no cookies are set and no data is transmitted to Google. Only after your consent are the following cookies set:

Google reCAPTCHA
We use Google reCAPTCHA to protect our contact form against automated requests and abuse (spam). The script is only loaded once you actually start using the form – merely opening the contact page does not transmit any data to Google. When it is used, personal data (including IP address, time spent on the page and mouse movements) is transmitted to Google and evaluated there. The legal basis is our legitimate interest in the security of our website and protection against abuse (Art. 6(1)(f) GDPR). Further information can be found in the Google privacy policy.

Cookies

Cookies are text files that are stored on your device in order to recognise it. Cookies may contain information about the use of our offers and services. Some of the cookies used are stored only until you close our offering again (session cookies), while certain cookies are stored for a longer period (persistent cookies). Some cookies are strictly necessary for the functioning of the website (essential cookies), others record visits and the visitor's origin (performance cookies) or are used for marketing purposes (marketing cookies).

Insofar as personal data is also processed through individual cookies used by us, the processing is carried out pursuant to Art. 6(1)(b) GDPR for the performance of the contract, pursuant to Art. 6(1)(a) GDPR in the case of consent given, or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website.

Cookie banner and your choice
On your first visit, a notice appears in which you can choose between Accept all, Reject all and your own selection under Adjust settings. Scripts that require consent are technically blocked until you decide and are only loaded afterwards. You can change or fully withdraw your choice at any time via the Cookie Settings link in the footer; on withdrawal, the affected cookies are deleted automatically. Your decision is stored only in your browser and is not transmitted to us.

We set the following essential cookies regardless of your consent, because the website does not work without them (Art. 6(1)(f) GDPR, section 165(3) last sentence of the Austrian Telecommunications Act):

Your Rights

Right of Access

You have the right to obtain confirmation as to whether personal data concerning you is being processed; if so, you have the right to obtain access to that personal data and to the information specified in Art. 15 GDPR.

Right to Rectification

You have the right to obtain from the controller the rectification of inaccurate personal data and the completion of incomplete personal data.

Right to Erasure

You have the right to obtain from the controller the erasure of personal data concerning you without undue delay, provided that one of the grounds set out in Art. 17 GDPR applies and the processing is not necessary.

Right to Restriction of Processing

You have the right to request the restriction of processing where one of the conditions set out in Art. 18 GDPR applies.

Right to Data Portability

You have the right to receive the personal data you have provided to a controller in a structured, commonly used and machine-readable format, and you have the right to transmit that data to another controller, provided that the processing is based on consent or on a contract and is carried out by automated means.

Right to Object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data carried out on the basis of Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions. Where personal data is processed for direct marketing purposes, you have the right to object at any time to such processing.

Right to Withdraw Consent

You have the right to withdraw, at any time, any consent given pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR, without affecting the lawfulness of processing based on consent before its withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, Phone: +43 1 52 152-0, E-mail: dsb@dsb.gv.at, if you consider that the processing infringes applicable data protection law.

Other Information

The provision of personal data is, in part, required by law or necessary for the conclusion of a contract. You are generally not obliged to provide the data. If you do not provide the data, it may not be possible to conclude a contract. There is no automated decision-making, including profiling, within the meaning of Art. 22(1) and (4) GDPR.