Processing of personal data by TGW Logistics Group GmbH.
Personal data includes all information relating to identified or identifiable natural persons. This includes, for example, your name, address, telephone number or date of birth, as well as your IP address or geolocation data that can be traced back to you. Our wish is to give you information that is important to you. If you use certain features of the TGW application, it might be necessary to process your personal data.
The use of this application is generally possible without any indication of personal data. However, if you want to use special services of the MyTGW application, processing of your personal data could become necessary. However, this will be pointed out to you separately below.
CONTROLLER WITHIN THE MEANING OF THE GDPR
TGW Logistics Group GmbH
Ludwig Szinicz Straße 3
4614 Marchtrenk. Austria
DATA SECURITY OFFICER
The data security officer for TGW Logistics Group GmbH is:
VACE Systemtechnik GmbH
Wahringerstrasse 34, BG 11
4030 Linz
Austria
To contact the data security officer, please contact datenschutz@tgw-group.com in writing.
DATA TRANSMISSION
As a basic principle, no transmission of your data to third parties takes place unless we are legally obligated to do so, forwarding the data is necessary to fulfil a contractual relationship existing between us, or you have previously given express consent to the forwarding of your data. External outsourced data processing firms or other cooperation partners receive your data only insofar as this is necessary to fulfil a contract or we have a legitimate interest in doing so, about which we will always notify you specifically when the occasion arises. If the firm we retain for outsourced data processing comes into contact with your personal data, we ensure that this firm complies with data protection laws in the same manner as we do.
We do not sell your personal data to third parties outside the company or otherwise market them. Insofar as our contractual partners or outsourced data processing firms are based in a third country, i.e. a state outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the product or service.
SECURITY
We employ numerous technical and organisational security measures to protect your data from tampering, loss, destruction and access by third parties. Our security measures undergo continuous improvement corresponding to technological developments in the Internet. If you would like more information about the type and scope of the technical and organisational measures, we would be glad to receive written enquiries regarding this at any time.
YOUR RIGHTS
In accordance with the General Data Protection Regulation and the German Data Protection Act, you, as the data subject of our data processing, are entitled to the following rights and legal remedies. Please direct enquiries in this regard to datenschutz@tgw-group.com:
Right of access (Art. 15 EU GDPR): You, as the data subject of the data processing described above and other data processing, have the right to demand disclosure of whether your personal data have been processed and, if so, which of these data. For your own protection – and to ensure that your data is not disclosed to unauthorised parties – we will verify your identity using suitable means before disclosure.
Right to rectification (Art. 16) and erasure (Art. 17 EU GDPR): You have the right to immediately demand rectification of incorrect personal data and/or – taking into account the purposes of the data processing – the completion of incomplete personal data as well as the erasure of your data insofar as the criteria of Art. 17 EU GDPR are fulfilled.
Right to restriction of processing (Art. 18 EU GDPR): Under the statutory prerequisites, you have the right to restrict processing of all personal data collected. Effective from the time you request such restriction, these data will not be processed without your individual consent and/or will be processed only to assert and enforce legal claims.
Right to data portability (Art. 20 EU GDPR): You can demand the unhindered and unlimited transmission of personal data you have provided to us to you or a third party.
Right to object (Art. 21 EU GDPR): For reasons arising from your specific situation, you are entitled to object at any time to the processing of personal data concerning you that is necessary to uphold our legitimate interests or those of a third party. After your objection, your data will no longer be processed unless mandatory legitimate reasons for processing exist that override your interests, rights and freedoms, or the processing must be used for the establishment, exercise or defence of legal claims. You can object to data processing for the purpose of direct advertising at any time with effect for the future.
Revocation of consent: If you have granted separate consent to the processing of your data, you can revoke this at any time. Such a revocation affects the permission to process your personal data that you have granted us previously.
All active and temporary registered users of the TGW Logistics Group and of its owner, the TGW Future Private Foundation, and all registered users of mann&mouse IT Services GmbH working at locations of TGW have access to the MyTGW app.
Registered users can access and use the MyTGW app.
| Purpose of the processing of personal data | Categories of personal data | These categories comprise the following types of personal data in particular | Source |
Login to the app; Finding the person and enabling interactions | Contact data, master data | Mandatory data: City, Country, Company, Department, Mail address, Mobile phone company, Office section, Office phone, SamAccountName, Job title | Active Directory of TGW |
| Communication and interaction in the app (commenting) | Contact data, master data, etc. | Name, Surname | Data subject |
For all other functions of MyTGW (e.g. notification wall, telephone book, communities), the data protection regulation of the respective processing procedure is applicable.
Legal basis for the processing of all personal data:
is Art. 6. paragraph 1, section 1 (f) of the GDPR and the corporate interest is providing the registered users with a communication and interaction facility in addition to the authentication and authorisation in the app. TGW wants to strengthen the communication in the company and the interactions between the registered users. The use of the app and the publication of content and comments is voluntary according to the terms of use.
Location/duration of the storage / criteria for the definition of the storage duration:
The data is stored by Staffbase GmbH in Frankfurt/Main. Automatic deletion of login data after the registered user has left the company and deletion of the user account. Anonymisation of the comments and likes after the user account has been deleted. Group chat conversations can be deleted completely and permanently for all participants. This function is only available for the conversation administrator. Messages in one-on-one conversations can be deleted for all participants, archived completely or muted.
Data collected from surveys are stored anonymously as a result in UKM-MR after the survey's completion and deleted from the Staffbase database.
All persons who have registered for the MyTGW app and use the MyTGW app actively are the recipients of texts, comments and other contents visibly published by the user. Visible data comprises, for example, the name and surname. Data like private e-mail addresses and personnel number are generally not visible. Registered users who use the MyTGW app after receiving a guest invitation may add further data to their profile if they want to.
Note on the processor
The MyTGW app is a Software-as-a-Service (SaaS) solution. In this respect, our processor Staffbase GmbH, Annaberger Straße 73, 09111 Chemnitz (Germany) processes the personal data. The processing activities of Staffbase GmbH comprises the hosting and operation of MyTGW. The data is stored by Staffbase GmbH in Frankfurt/Main.
The use of the app and the publication of contents in the app is voluntary in accordance with the terms of use which are available in a separate document.
Processing for automated decision-making and/or profiling?No. Transmission to a third-party country / to an international organisation?
The service provider Staffbase can save personal data (e.g. name, surname, business/private e-mail addresses and personnel number) in the Microsoft Azure Cloud. Although the data is not transmitted to Microsoft USA, the service provider, and thus TGW, cannot rule out that US authorities will have access to the personal data stored in the Azure Cloud in Germany in certain cases. Sensitive data should not be uploaded or provided via the MyTGW app.
Although it is not advised, it is at the registered users' own discretion whether they submit the following data or not:
If you make use of a measure to assert your aforementioned rights arising from the GDPR, TGW shall immediately, but no more than one month after receipt of your request, make a statement regarding the measure requested and/or fulfil the request.
We will respond to all appropriate requests within the period set forth in the law, at no charge and as quickly as possible.
The data protection authority is responsible for requests regarding infringement of the right to disclosure or infringement of the rights to confidentiality, correction or deletion. Their contact information is as follows:
Österreichische Datenschutzbehörde (Austrian Data Protection Authority)
Barichgasse 40-42
1030 Vienna
dsb@dsb.gv.at