Privacy Policy

Privacy Statement for the GLS Demo Application

With this Privacy Policy, we inform you about the processing of your personal data (hereinafter referred to as "data"). Depending on the services you use, the details of the data processing differ.

I. General Information

1. Applicable data protection laws and data protection obligation

GLS IT Services GmbH (GLS) takes data protection and privacy seriously. For that reason, personal data will exclusively be processed in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

2. Security of personal data

By means of technical and organisational security measures, GLS does its best to protect personal data from loss or misuse. We process personal data in IT systems which are protected by appropriate security measures. This includes using SSL/TLS encryption for transfer of data entered by you on this website. If required by technical progress, we reserve the right to modify these security and privacy protection measures.

3. Contact details of the controller and the data protection officer

Controller according to Art. 4 (7) GDPR resp. service provider according to sect. 13 TMG (German Telemedia Act) is: GLS IT Services GmbH GLS Germany-Str. 1-7 36286 Neuenstein Telefon +49 (0) 6677 646 907 000 (Hereinafter: „GLS“) You can contact our data protection officer at: GLS IT Services GmbH Data Protection Officer GLS Germany-Str. 1-7 36286 Neuenstein dataprotection@gls-itservices.com If you want to contact via e-mail, please note that the confidentiality of the transmitted information cannot be guaranteed. Unencrypted e-mails can possibly be read by unauthorised third parties.

4. Personal Data

'Personal data’ means any information relating to an identified or identifiable natural person (‘data subject’). This includes for example information such as name, address, telephone number and date of birth. Information that cannot be linked to a specific or determinable individual - such as the number of users of a website - is not considered to be personal data.

II. Collection of data, Purpose of processing and legal basis

When using our offers, you provide GLS with personal data depending on your individual use:

1. Data you submit to us

Registration and login

Within our Developer-Portal you have the opportunity to create an account. As part of the registration process, we collect and save your first and last name, email address, the postcode of your GLS location and your password.

2. Data, that is collected automatically

a) Logging of IP addresses

Every time a user accesses the GLS website, data is recorded in a log file. The following data is temporarily recorded: • Date and time of request • IP address or DNS name of the requesting computer • requested webpage (URL) • HTTP answer code • Client operating system and version • Browser name and version The log file data is anonymously analysed for statistical purposes. Statistical reports are used to evaluate the usage of this website. In particular, the order in which the pages are visited and the path taken between pages is shown. This is intended to give GLS an indication how the usability of the website can be improved further.

b) Cookies

For the usage of the website of GLS it may be necessary for the servers of GLS to set cookies. Cookies are small text files stored on your hard drive, that are associated with your browser and that provide certain information to the website or body that sets the cookie. Cookies cannot run computer programs or transmit viruses. They just help us to make our online offer more user-friendly an effective. These cookies are used for the technical administration of the website. Every visitor can configure his/her browser to refuse cookies. In this case no data will be saved on the visitor's computer. It may be that you cannot use all functions of the website to the full extend when cookies are disabled. Please find more information about cookies in the following chart:

Name of the cookie	Provider	Storage Period		Purpose
.AspNet.Consent		GLS		This cookie is used to record the user's consent to the use of cookies on the website.
.AspNetCore.Cookies	GLS		This cookie is used for maintaining the user's session state across multiple requests.

3. Legal bases of the processing

We process your personal data in compliance with the applicable statutory data protection regulations. The data processing is based on the balance of interests according to Art. 6 (1) f GDPR.

III. Data transfer and recipients

Within GLS, those entities, who need your data to fulfil their contractual or legal obligations, have access to your data. Also providers, commissioned by GLS, may receive data for these purposes, provided they meet the legal requirements. Those parties include Group and carefully selected non-Group third parties contractually required to provide services for or on behalf of GLS. GLS has concluded corresponding contractual agreements with these parties. In regard to a data transfer to further recipients, we will only pass on your personal data if required by law, with your consent or if we are authorized for disclosure. Under these conditions, public bodies and institutions (such as prosecuting authorities) can receive your personal data if it is required by law.

IV. Duration of data storage and erasure

GLS stores your personal data only in accordance to legal retention periods and legal obligations, as long as it is necessary for the purpose. After expiry of the defined retention period, the data will be deleted or destroyed.

The registration data is stored as long as your user account is active. To delete your user account log in With your account and use the corresponding option 'Delete account' in the account management section.

V. Rights of the data subject, withdrawal of consent, exercise of rights, right to complain

1. Rights of the data subject

As data subject you have the right to, • obtain the controller confirmation as to whether or not and which personal data concerning him or her are being processed (Right of access by the data subject acc. to Art. 15 GDPR) • obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her (Right to rectification acc. to Art. 16 GDPR) • obtain from the controller the erasure of personal data concerning him or her without undue delay (Right to erasure acc. to Art. 17 GDPR) • obtain from the controller restriction of processing (Right to restriction of processing acc. to Art. 18 GDPR) • receive the personal data concerning him or her, which he or she has provided to a controller (Right to data portability acc. to Art. 20 GDPR) • object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims. (Right to object acc. to Art. 21 GDPR) The right of access and the right to erasure are limited by §§34 and 35 BDSG.

2. Withdrawal of consent

At any time you have the right to withdraw your consent in data processing towards us. This also applies to consent given even before the EU GDPR. The withdrawal is only effective for the future and does not affect the lawfulness of the data processed until the withdrawal.

3. Exercise your rights

To exercise your rights or for withdrawal of your consent, please contact dataprotection@gls-itservices.com and declare which right you wish to exercise so that GLS may take further steps required to work on your request. Please note, that we may ask you for a proof of identity in order to protect your personal information from unauthorized access or alteration.

4. Right to lodge a complaint with a supervisory authority

If you note any violation against our data protection regulations, do not hesitate to contact us. Furthermore, in such cases, you also have the right to lodge a complaint with a supervisory authority. (Art. 77 GDPR in conjunction with §19 BDSG) Supervisory authority: Federal Commissioner for Data Protection and Freedom of Information Husarenstr. 30 53117 Bonn https://www.bfdi.bund.de

VI. Updating this privacy statement

This information was last updated 1st of December, 2020.