Last Updated: February, 2022
Körber Supply Chain GmbH and its affiliated companies (“Körber Supply Chain”) and Körber Supply Chain Software Management GmbH and its affiliated companies (“Körber Supply Chain Software”)(Körber Supply Chain and Körber Supply Chain hereinafter jointly referred to “Körber”, “we” or “us”, “Körber Supply Chain Group”) take the protection of your personal information very seriously.
The following companies belong to Körber Supply Chain: Körber Supply Chain GmbH, Körber Supply Chain Consulting GmbH, Körber Supply Chain Automation GmbH, Körber Supply Chain Automation Eisenberg, Körber Supply Chain DK A/S, Körber Supply Chain PT S.A., Körber Supply Chain NL B.V., Körber Supply Chain GB Ltd., Körber Supply Chain NA, LLC., Körber Supply Chain SG Pte. Ltd, Körber Supply Chain Logistics GmbH.
The following companies belong to Körber Supply Chain Software: Körber Supply Chain Software Management GmbH, Körber Supply Chain Software GmbH, Körber Supply Chain Lyon SASU, Körber Supply Chain ES, S.L, Körber Supply Chain UK Ltd., Körber Supply Chain Software Berlin GmbH, Körber Supply Chain Sainte Savine SAS, Körber Supply Chain Basingstoke Ltd., Körber Supply Chain Bristol Ltd., Körber Supply Chain NA, Inc. , Körber Supply Chain US, Inc., Körber Supply Chain CA, Inc., Körber Supply Chain BR Ltda., Körber Supply Chain CL SpA, Körber Supply Chain AU Pty. Ltd., Körber Supply Chain Sydney Pty. Ltd., Körber Supply Chain NZ Limited, COHESIO GROUP, INC., Körber Supply Chain Software SG Pte. Ltd., Körber Supply Chain (Shanghai) Ltd.
1. Collection, Processing, and Use of Personal Information.
The use of the Services is generally possible without providing personal information. You are neither obliged to visit this website nor to provide any personal information. If you do not provide us with personal information, you may not be able to use certain functionalities of the Services. Otherwise, there will be no consequences for you. The personal information we collect about you may include, without limitation:
We also collect data for pseudonymized user profiles to improve the Services. Note that under CCPA personal information does not include (i) publicly available information from government records, (ii) de-identified or aggregated consumer information, and (iii) any information excluded pursuant to applicable law.
2. Cookie Notice.
When you use the Services, we may also collect certain information with cookies. A “cookie” is a text file that websites send to a visitor’s computer or other Internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser.
A. Strictly Necessary Cookies – We collect the necessary information to enable you to use the Services. This includes your IP address and data about the start, end, and subject of your use of the Services as well as any identification data (e.g. your login data when you log into a secure area). This data is used to provide and design the service according to requirements. Legal basis for deploying strictly necessary cookies is our legitimate interest in providing our website under Art. 6.1 (f) GDPR. Strictly necessary cookies always deleted as soon as they are no longer required and there are no storage obligations.
B. Consent to Other Cookies and Web Analytics – When you visit our website, a “cookie banner" appears, with which we ask you for your consent to set cookies to optimize the website and for web analytics. If you agree, we will proceed as described in more detail in the following sections. Legal basis for deploying other cookies is your consent pursuant to Art. 6.1 (a) GDPR. Within the scope of the cookies deployed, data is also transferred to unsafe third countries, in particular to the USA (see also Section 8). According to Art. 49.1 (a) GDPR, your consent also includes the data transfer to the USA. The consent you have given via the cookie button extends to data processing by all companies of the Körber Supply Chain Group and, accordingly, to the disclosure of the data collected via a particular website within all companies of the Körber Supply Chain Group. With regard to the processing of data collected through the cookies described below, the companies of the Körber Supply Chain Group assume “joint and several liability” within the meaning of Art. 26 GDPR as they jointly decide about the means and purpose of the personal data processing activities. You can assert your rights regarding the processing of the personal data collected by cookies with any of the companies of the Körber Supply Chain Group. You may revoke your consent at any time and prevent the setting of cookies or web analytics here:
If you use the Services and give your consent for “other cookies”, it may be that information in the form of a cookie is stored on your computer. You can deactivate the storage of cookies in your browser and have the possibility to delete them from your hard disk at any time. We would like to point out to you that a use of our offers on the website without cookies may only be possible to a limited extent. However, you can also use your browser only to prevent certain cookies from being set (e.g. cookies from third parties), for example if you want to prevent web tracking. Please refer to your browser's help function for more information.
Google Double-Click Google Ads: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland
Marketo: Marketo, EMEA Ltd., 4-6 Riverwalk Drive, Citywest Business Campus, Cooldown Commons, Dublin 24, D24 DCW0, IRELAND
Prevent processing by deactivating personalized recommendations in the Outbrain interest profile at https://my.outbrain.com/recommendations-settings/home or by making the appropriate selection at www.aboutads.info/choices or www.youradchoices.ca/choices or www.youronlinechoices.euhttps://www.outbrain.com/privacy/
Deletion – The information collected by Google Analytics in the form of pseudonymous user profiles will be deleted no later than 14 months after the last new entry in the respective user profile.
Deletion – Google Ads cookies usually lose their validity after 30 days and are not intended to identify you personally.
– Most browsers will tell you how to stop accepting new cookies, how to be notified when you receive a new cookie, and how to disable existing cookies. Please note, however, that without cookies you may not be able to take full advantage of all of the features of the Services. You can prevent the collection and transmission of data relating to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link. Alternatively, you can prevent Google Analytics from collecting data by visiting tools.google.com/dlpage/gaoptout. Further information on data protection at Google can be found at:https://www.google.de/intl/de/policies/ (DE) and https://policies.google.com/ (US).
G. Your Choices – Although we do not control third parties’ collection or use of your information to serve interest-based advertising or other targeted content, a number of these third parties may provide you with ways to choose not to have your information collected or used in this way. For example, you can opt out of receiving targeted advertisements from members of the Network Advertising Initiative by visiting http://www.networkadvertising.org/choices. In addition, some web analytics providers are members of industry associations whose websites allow to centrally preventing the use of web tracking. Please find below reference to the websites of these associations for expressing your choices in regard to web tracking and processing data in pseudonymous profiles.
Some of your browsing sessions may be translated into information that helps website designers make websites easier to use and simpler to navigate. If you would like to disable this tracking, please click here: www.clicktale.net/disable.html
3. How We Respond to “Do Not Track” Signals.
4. Third Party Content.
A. Marketo – Körber Supply Chain Group uses Marketo as a provider of newsletters and as a provider in connection with inquiries via the contact form. We will only combine pseudonymized data with personal information from your CRM profile if you have sent us an enquiry via our contact form, subscribed to a newsletter, or given us your consent to do so. We will do so only in order to address you in the best possible way and provide you with a service in line with your interests. With Marketo we have concluded a data processing agreement in accordance with Art. 28 GDPR and with Marketo Inc. we have concluded EU standard contractual clauses (for data transfers outside the EEA). The data is stored in Europe in data centers in the Netherlands. For further information on data processing by Marketo, please visit the Marketo website (https://documents.marketo.com/legal/privacy).
C. Wistia – Videos embedded on the Services are provided by Wistia, Inc. 17 Tudor Street, Cambridge, Massachusetts, 02139 USA (Wistia). For the video hosting platform Wistia we use the so-called “Privacy Mode” that only collects fully anonymized viewing data by disabling session tracking and anonymizing IP addresses of our viewers. Only after you have given us your consent will the tracking options be activated. This may include Cookies. Your consent also includes data transfer to the USA. If you are logged into your Wistia account, you enable Wistia to associate your surfing behavior directly with your personal profile. You can prevent this by logging out of your Wistia account.
D. Oktopost – To publish social media contributions and analyze the reach and interaction with them, we use goal tracking technologies from Oktopost Technologies Inc. of 34 Tuval Street, Tel Aviv, Israel (hereinafter "Oktopost"). This may include cookies. Oktopost collects information for us about whether one of our posts in social media has been shared, liked, commented, clicked or mentioned and whether you are a user who has interacted with our posts in social media. The information generated by cookies is transferred to and stored on an Oktopost server in the USA or other third countries. If necessary, data may be transferred to non-EEA countries, especially the USA (for data transfers to countries outside the EEA). Oktopost uses this information on our behalf for evaluation purposes and produces reports on the reach and use of our posts in social media. You can deactivate Oktopost's storage of data in cookies by disabling cookies. For more information on data processing by Oktopost, please visit the Oktopost website (https://www.oktopost.com/privacy).
E. Drift Chat Box – We use chat box technologies on our website from Drift.com Inc., 222 Berkeley Street Suite 600 Boston, MA 02116 USA (Drift) at present for US customers only. By providing a chat box, we would like to offer you another effective and uncomplicated communication channel to us. The use is voluntary. You can also contact us by other means. The personal data you provide in the context of your chat box request and your IP address are processed for responding to your request. The legal basis for the processing of the personal data collected is the performance of a contract or the implementation of measures prior to entering into a contract with you. Drift sets Cookies to enable and improve the chat function if you have given your consent to this via the cookie banner. The chat box user is assigned an ID that can be recognized. If necessary, data may be transferred to non-EEA countries, especially the USA (for data transfers to countries outside the EEA).
For online marketing activities, Körber Supply Chain also uses an integrated software solution from HubSpot. With this, Körber Supply Chain cover various aspects, including:
The contact forms allow you, as a visitor to our website, to learn more about Körber Supply Chain, download content, and provide Körber Supply Chain with your contact information and other demographic information. Körber Supply Chain uses this information to contact you. Before Körber Supply Chain processes your data for the purposes set out in this section, Körber Supply Chain will obtain your consent to process your data using HubSpot. You can withdraw this consent at any time for the future in accordance with Art. 7 (3) GDPR.
Körber Supply Chain measures the success of email content that Körber Supply Chain send to you via HubSpot in order to identify your reading habits based on email opening, opening times, and links clicked, so that Körber Supply Chain can create and send you interest-based and useful content. Your consent to data processing includes performance measurement. Unfortunately, a separate withdrawal of the performance measurement is not possible, in which case you must withdraw the consent in its entirety.
Körber Supply Chain uses HubSpot to optimize advertising and customer targeting. Only if you have given Körber Supply Chain consent to do so, Körber Supply Chain can also combine the pseudonymous data with personal data from your CRM profile in order to address you optimally and provide you with interest-based information.
Your data will be passed on to HubSpot Inc., a US company. HubSpot also uses other sub-processors in the USA. The consent you have given also refers to data transfers to the USA. The USA do not offer a level of data protection comparable to the European Union (see Section 8. Transmission to third parties and in countries outside the EU). However, HubSpot Inc. is contractually obligated with the EU standard contractual clauses to ensure data protection-compliant processing and your data is stored by HubSpot in European data centers.
For more information on data processing by HubSpot, please visit HubSpot's website (https://www.hubspot.de/data-privacy/gdpr).
5. Facebook Page
Joint Controllership – Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland ("Facebook"), provides us with statistics and insights to help us understand how our Facebook page (www.facebook.com/KoerberSupplyChainDACH/) is being used ("Page Insights"). In this case, Facebook and we are jointly responsible for the data processing ("Joint Controllers").
Legal basis, purpose, categories of data – The legal basis for the processing of your personal data is Art. 6.1 (f) GDPR. We use the information you provide to us via your Facebook profile or by visiting our Facebook page via your browser to provide the functionalities of our Facebook page. This may include checking the reach of our posts, defining our audience more precisely, tailoring advertisements to our audience, and tailoring our Facebook page to the actual interests of our visitors. Categories of data processed may include age, gender and location.
We process this data in our legitimate interest to maintain the functionality of our Facebook page, to verify our reach, and to design and display our Facebook page according to your interests.
Further Information on the Joint Controllership with Facebook – In order to transparently and explicitly define the responsibilities for compliance with the obligations under the GDPR between us and Facebook, we have entered into an agreement with Facebook stating that Facebook is primarily responsible for the data processing when visiting our Facebook page. In particular, Facebook is responsible when you exercise your rights under Art. 12 and 13 GDPR, Art. 15 to 22 GDPR, and for complying with the obligations in Art. 32 to 34 GDPR.
The rights of users (in particular to access, deletion, objection and complaint to the competent supervisory authority), are not restricted by the agreement with Facebook. You can assert your rights (access, correction, deletion, restriction of processing, data portability, objection and complaint) against us (for further information on your rights as a data subject see Section 11). To the extent necessary to carry out your request or exercise your rights, we will share your matter with Facebook.
For more information about Page Insight data and how to exercise your rights, see Facebook's information: https://www.facebook.com/legal/terms/information_about_page_insights_data.
You can find further information on the determination of responsibility under joint controllership pursuant to Art. 26 GDPR in the agreement with Facebook: https://www.facebook.com/legal/terms/page_controller_addendum
6. Processing of Business Contact Information.
A. Legal Basis. Our legal basis for collecting and using the personal business contact information will depend on the personal information concerned and the specific context in which we collect it. However, we will normally collect personal information from you only where we have your consent to do so, where we need the personal information to perform a contract with you (for example, when providing the Services), or where the processing is in our legitimate interests and not overridden by your data protectioninterests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to process personal information about you or may need to process personal information in order to exercise, establish, or defend legal claims. Specifically, we process your personal information, such as contact data or correspondence, to the extent that this is necessary to:
The same applies if you are an employee of an interested party, supplier, service provider or other business partner and we receive your personal data in this context; the legal basis in this case is our legitimate interest in establishing or carrying out the business relationship with your employer (Article 6.1(f) GDPR).
B. Contact Form. If you contact us via the contact form, we will save your details (in particular name and title, your contact details, your company, the country and your message) and process them in order to process your enquiry. For this purpose, we use the provider Marketo as a processor, as further discussed below and Körber Supply Chain uses HubSpot as a processor for subpages of this Website with competences of Körber Supply Chain. Depending on your region and your requirements, we will forward your enquiry to the appropriate company of the Körber Supply Chain Group. The legal basis for this data processing is - depending on the subject of your enquiry - the processing for the performance of a contract or for the implementation of pre-contractual measures (Article 6.1 (b) GDPR) or our legitimate interest in providing a contact form for general enquiries or in providing information material (Article 6.1 (f) GDPR) or your consent (Article 6.1 (a) GDPR).
C. CRM System. Your details are also stored in a Customer Relation Management System ("CRM System"). The same applies if you request information or material from us. If you give us your telephone number, we may contact you by phone to discuss your project and put you in touch with the appropriate contact person. In connection with enquiries and the data collected in CRM, the companies of the Körber Supply Chain Group act as "joint controllers" within the meaning of Art. 26 GDPR, as they jointly decide on the means and purposes of processing personal data. Entry and access to your personal data depends on your region and your enquiry and is regulated by contract between the companies of the Körber Supply Chain Group. For further information on these contractual terms, please contact our data protection officer, as noted below. You can assert your rights with regard to the processing of the personal data collected at any company of the Körber Supply Chain Group.
D. Newsletter. If you register for our newsletter, we will process your e-mail address and send you a confirmation e-mail with a confirmation link that you must click on to subscribe to our newsletter. We will also add you to our mailing list in order to send you e-mail advertising for our own similar goods or services if you purchase a good or service from us and you have not previously objected to this processing of your e-mail address. You can cancel the newsletter at any time and object to the e-mail advertising at any time. You will find a possibility to unsubscribe in every newsletter and every other advertising e-mail that we send you. Körber Supply Chain Group also uses Marketo as a processor for newsletter sending in accordance with Art. 28 GDPR. Körber Supply Chain additionally uses HubSpot as a processor for newsletter sending in accordance with Art. 28 GDPR. Your personal data is stored in Europe. However, we cannot fully exclude data transfers to Marketo Inc. or HubSpot Inc. both based in the USA, as further noted below. The USA (and other non-EEA countries) do not offer a level of data protection comparable to that of the European Union and, in particular, access by state authorities cannot be excluded in individual cases. Marketo Inc. and HubSpot Inc., however, are contractually bound by the EU standard contractual clauses to process data in conformity with data protection regulations. By registering for the newsletter, you also agree to possible data transfers to the USA to Marketo Inc. and HubSpot Inc. If you have given us your consent to do so, we will forward your e-mail address and any other contact data to the companies of the Körber Supply Chain Group so that they can send you newsletters and information.
E. Newsletter Performance Measurement. The newsletters contain a so-called. "web-beacon", which means a pixel-sized file that is retrieved when the newsletter is opened, either from the server of the Körber Supply Chain Group Company or from the server of the service provider Marketo or HubSpot. In the course of this retrieval, technical information such as information on the browser and your system, as well as your IP address and the time of retrieval may be collected. We receive a statistical report from Marketo or HubSpot about whether recipients open the newsletters, when they open it and which links they click. This processing serves us to recognize the reading habits of the newsletter recipients and to adapt the content to them or to send different content according to their interests. Your consent to receive the newsletter also covers the consent to performance measurement. The legal basis for data processing is Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future. For this purpose you can use the unsubscribe link in each newsletter or contact us. A separate revocation of the performance measurement is unfortunately not possible; in this case, you must revoke the consent to the newsletter in its entirety.
F. Declare Objection. You can declare your objection directly to these companies. You will find a possibility to declare your objection or revocation in every e-mail. You can also declare your revocation to Körber. We will then forward it to the responsible company.
G. Email. If you agree to be informed by e-mail about the latest products and services of the Körber Supply Chain Group, the companies will send you this information by e-mail. Your details will be stored in a shared distribution list for this purpose. You can revoke your consent at any time with effect for the future. To do so, you can use the unsubscribe link in each newsletter or contact us.
7. Electronic Communication.
You are welcome to communicate with us by e-mail at any time. Please be advised that we use an E-mail Gateway of an external provider of security technologies to defend against SPAM e-mail, other threatening e-mail, threatening e-mail attachments and URLs. In doing so, this external provider may process your first and last name, e-mail address and IP address. The legal basis is our legitimate interest in preventing unauthorized access to communications networks, the spread of malicious code and damage to computers and electronic communications systems (Article 6.1(f) GDPR in conjunction with Recital 49).
8. Transmission to Third Parties and to Countries Outside the EEA.
We delete your personal information as soon as it is no longer needed for the purposes for which the personal information was collected, as far as no legal storage obligations stand in the way.
10. Data Security.
Körber has taken the necessary technical and organizational measures to protect the personal data you provide from loss, destruction, manipulation and unauthorized access. Our employees and all persons involved in data processing are obliged to comply with data protection laws and to treat personal data confidentially. Our employees are trained accordingly. Both internal and external tests ensure compliance with all data protection relevant processes at Körber. To protect the personal data of our users, we use a secure online transmission procedure, the so-called "Secure Socket Layer" (SSL) transmission. You can recognize this by the fact that an "s" ("https://") or a green, closed lock symbol is added to the address component. By clicking on the icon, you will receive information about the SSL certificate used. The display of the symbol depends on the browser version you are using. SSL encryption guarantees the encrypted and complete transmission of your data. We would like to point out that data transmission over the Internet (e.g. communication by e-mail) can have security risks. A complete protection of data against access by third parties is not possible.
11. Your Rights Regarding Personal Data.
The data protection laws grant EEA and UK residents a number of rights with regard to data concerning your person (rights of data subjects). These include the:
The EU General Data Protection Regulation also grants you the right of appeal to the competent data protection supervisory authority. However, if you have any questions or complaints regarding data protection at Körber, we recommend that you first contact our data protection officer (see Section 14).
12. Notice for California Residents.
Our California Consumer Privacy Act (“CCPA”) Notice applies to California residents from whom we collect personal information. Please visit Privacy Notice for California Residents to learn more about how we adhere to the CCPA and how to exercise the rights afforded to you under the CCPA.
California Civil Code Section § 1798.83 may permit users of our Services who are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us.
13. No Automated Single Decision.
Automated decision making and profiling includes any decision-making processes that occur solely through automated means. As far as this is not exceptionally necessary for the conclusion of a contract or permitted by law (as in the case of age verification), we do not use your personal data for automated individual decisions.
14. How Can You Contact Us?
You will find our contact details as the responsible body in the imprint. You may also email us at firstname.lastname@example.org. If you wish to exercise the rights mentioned under Section 11 or if you have any questions about data protection with us or this data protection declaration, you can also contact our data protection officer: email@example.com.