Data privacy
Nexus CCS GmbH & Co KG (hereinafter referred to as "Nexus", "we" or "us") takes its responsibility for data protection and information security very seriously. The careful handling of all personal data is an important aspect of our activities and the basis for our procedures and processes. We have established procedures to ensure the best possible compliance and effective risk management, not only with regard to the applicable data protection regulations, but also out of our obligation to our business partners.
In the countries in which we operate, we are subject to numerous regulations that are only partially complementary and often differ considerably from one another. We therefore take as uniform an approach as possible to protecting your data, which is always in accordance with the applicable law. Nevertheless, the specific requirements, rights and obligations regarding personal data and/or data processing by us may differ according to the applicable law. The following descriptions of data processing, the associated rights and obligations and, in particular, the restrictions on the scope of data processing represent what applies within the scope of the GDPR. Insofar as we operate in countries outside the European Union or in countries where the provisions of the GDPR do not apply or do not apply in full (such as the United States of America), these descriptions, rights and obligations and restrictions on the scope do not necessarily apply. In particular, this Privacy Policy does not create any rights or obligations that go beyond what applies under the applicable local data protection regulations.
All data is collected in accordance with data protection regulations and processed for a specific purpose.
This Privacy Policy does not exempt you from complying with the requirements of the applicable law, nor does it replace it. In the event of a conflict between a provision or regulation of an applicable law and a provision of this Privacy Notice, the former shall prevail.
1. Responsible body
Nexus CCS GmbH & Co. KG
represented by Nexus Verwaltungsgesellschaft mbH
represented by the managing directors: Neset Kabbani and Ferhat Incili
Neuer Wall 18
20354 Hamburg
Germany
Phone: +49 40 334610970
E-Mail: datenschutz@nexuscoldchain.com
Please contact us directly at any time if you have any questions about data protection.
2. Collection, processing and use of data when visiting the website
For technical reasons, the server of our website - https://www.nexuscoldchain.com - collects the data that your Internet service provider and the browser you use automatically transmit via the http header when you access the website. These are regularly
- the IP address assigned to you,
- the address of the Internet page from which you are visiting the website,
- the subpages of the website you have visited and
- Date and duration of your visit to the website.
- Browser and operating system information
As far as technically possible, this information is not linked to other information that could identify you personally.
The legal basis for the processing that takes place in the course of a visit to the website is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in the provision of a functional website with correctly delivered content in the course of communication between your end devices and the web server as well as in providing law enforcement authorities with the information necessary for prosecution in the event of criminal offenses.
As soon as there is no longer a legitimate interest and there is no legal obligation to retain this data, it is routinely deleted.
3. Cookies
When you first visit our website from one of your end devices, we point out that cookies may be loaded onto your computer when you use the website. We ask for your consent to the use of cookies via a cookie consent banner.
Cookies and flash cookies are alphanumeric identifiers that are transferred to your computer's hard disk when you visit our website. They enable your browser to be recognized when you visit the website at a later date and are primarily used to make your online visit more pleasant and individual. Cookies make it possible to recognize you as a specific user and to save your preferences when using the website. The main advantage of this for you is that you do not have to re-enter the information contained in the cookies each time you visit the website.
You can completely disable the use of cookies in the settings of your browser program. The help function in the menu bar of most web browsers explains how to set up your browser so that new cookies are never accepted. You can disable or delete functions similar to Flash cookies, which are used by browser add-ons, by changing the settings of the browser add-on or via the website of the browser add-on manufacturer.
Session cookies also require your prior consent, even if they are deleted after you leave the website. These enable you to use some of the essential functions of our website, so we recommend that you set your browser in such a way that cookies are not automatically rejected, but that you can decide this on a case-by-case basis.
We would like to point out that some areas of the website may not function properly if your browser is set to refuse to accept cookies or similar mechanisms or if you do not agree to the cookie consent.
The legal basis for the processing that takes place in the course of a visit to the website is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in the provision of a functional website with correctly delivered content, in the optimization of our systems and in providing law enforcement authorities with the information necessary for prosecution in the event of criminal acts.
As soon as there is no longer a legitimate interest and there is no legal obligation to retain this data, it is routinely deleted.
For further information, please refer to our cookie policy.
4. Google Analytics
We use Google Analytics on our website, a web analytics service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
We have concluded an order processing contract with Google for the use of Google Analytics (Art. 28 GDPR). Google processes the data on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide us with other services relating to website activity and internet usage. Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.
Within the scope of order processing, Google is entitled to commission subcontractors. You can find a list of these subcontractors at https://privacy.google.com/businesses/subprocessors/.
Google Analytics uses "cookies", which are text files placed on your device, to help the website analyze how users use the site. Google Analytics can also use so-called web beacons or tracking pixels. These web beacons can be used to analyze information such as visitor traffic on websites. The information generated by cookies and web beacons about the use of our website (including the user's IP address) is transferred to a Google server, possibly in the USA or other third countries, and stored there. This information may be passed on by Google to Google's contractual partners.
Unfortunately, we cannot influence which data Google actually collects and processes, but we only use Google Analytics with activated IP anonymization ("anonymize IP"). This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.
By integrating Google Analytics, we pursue the purpose of analyzing user behavior on our website, being able to react to it, and continuously optimizing our offer.
The purpose of processing the data collected in the course of the declaration of consent is to record your consent.
The legal basis for the processing of personal data described here as part of the measurement procedure is your express consent in accordance with Art. 6 para. 1 lit. a) GDPR.
The legal basis for processing the data that is processed in the context of obtaining consent is our legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. We also have a legitimate interest in being able to prove that you have given your consent to the measurement procedure (Art. 7 para. 1 GDPR).
For more information on the purpose and scope of data collection and its processing, please refer to Google's privacy policy with further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy.
As already mentioned, we expressly point out that it must be assumed that some of the services we use transfer and process personal data to third countries, in particular to the USA. Despite the current adequacy decision on the so-called EU-U.S. Data Privacy Framework, the USA is often regarded as a country with an inadequate level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for monitoring and surveillance purposes, possibly without the possibility of legal recourse. By consenting to the use of these services, you also consent to the processing of your data in the USA in accordance with Art. 49 (1) lit. a GDPR in the event that the aforementioned adequacy decision subsequently proves to be unlawful or ineffective.
The processed information will only be stored for as long as necessary for the intended purpose or as required by law. Failure to provide your data may mean that you cannot use our services or cannot use them to their full extent.
Right of withdrawal
You can revoke your consent at any time with effect for the future. Please use one of the following options to do so:
- You inform us that you wish to withdraw your consent.
- You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
- You can find out how to delete cookies in the most common browsers and change the cookie settings here:
- Google Chrome: Webseite
- Mozilla Firefox: Webseite
- Apple Safari: Webseite
- Microsoft Edge: Webseite
In addition, we would like to point out the following possibilities without any recommendation or liability on our part:
Under the link https://support.google.com/ads/answer/2662922?hl=de you can deactivate the settings for personalized advertising.
If you wish to prevent the processing of your data by Google, you can download and install the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
In addition, you can prevent the collection of data by web beacons by downloading and installing the add-on available under the following link for the respective browser: https://adblockplus.org/
For more information on data handling in connection with Google Analytics, please refer to Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de
You can find information on Google's privacy settings at https://privacy.google.com/take-control.html?categories_activeEl=sign-in
5. HubSpot
On our website we integrate services from HubSpot, Inc. ("HubSpot"), 25 First Street, 2nd floor Cambridge, MA 02141, USA.
For the use of HubSpot, we have concluded a data processing agreement for the use of HubSpot (Article 28 GDPR). HubSpot processes the data on our behalf in order to trigger the stored tags and display the services on our website. HubSpot may pass this information on to third parties if this is required by law or if third parties process this data on behalf of HubSpot. You can find a list of sub-processors at: https://legal.hubspot.com/de/dpa
HubSpot is a provider of hosting services and customer relationship management systems. HubSpot provides the necessary product infrastructure.
To our knowledge, HubSpot uses services of the Google Cloud Platform (GCP) in Germany (Frankfurt a. M.) and the According to the information available to us, HubSpot has concluded a data processing agreement with Google (GCP). The data processed by GPC is processed and stored on servers in Germany. Google may transfer this information to third parties if this is required by law or if these third parties process the information on behalf of Google.
HubSpot enables us to integrate various codes and services into our website in an organized and simplified manner. We link the following services with HubSpot:
- Server protocols
- User accounts
- Newsletter provider
- Contact form
- Blog/comment function
- Google Analytics
- Contact us
We use Hubspot to sort and coordinate your requests that originate from our website and partner sites (LinkedIn, Meta). The following personal data is stored in Hubspot:
- Your IP address
- Name
- First name
- Company name
- Address
- E-mail address
- Phone number
The personal data processed by GCP is backed up on Google's servers within the EU and transmitted to Amazon Web Service ("AWS") and stored there. By hosting these services on AWS and GCP, HubSpot can increase the performance and reliability of the services. The purpose is to ensure the retrievability of the data and to guarantee data security.
However, as already mentionedit cannot be ruled out that data will be transferred to the USA. Despite the current adequacy decision on the so-called EU-U.S. Data Privacy Framework, which you can access under the following link Implementing Decision - 2023/1795 - EN - EUR-Lex , the USA is often regarded as a country with an inadequate level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for monitoring and surveillance purposes, possibly without the possibility of legal recourse. By consenting to the use of our services, you also consent to the processing of your data in the USA in accordance with Art. 49 (1) lit. a GDPR in the event that the aforementioned adequacy decision subsequently proves to be unlawful or ineffective.
The subsidiary legal basis, the standard clauses, are based on the implementing decision, which you can access here: Implementing Decision - 2021/914 - EN - EUR-Lex
With the integration of HubSpot, we are pursuing the purpose of being able to carry out a simplified and clear integration of various services. In addition, the integration of HubSpot optimizes the loading times of the various services.
The legal basis for the processing of personal data described here is Article 6(1)(f) GDPR. Our legitimate interest in this is the considerable benefit that the integration of various services via HubSpot brings. By integrating HubSpot, we reduce our maintenance effort as well as the loading effort of the website and the server and traffic load. In addition, HubSpot has a legitimate interest in the (personal) data collected in order to improve its own services.
The legal basis for the transfer of data to AWS is the legitimate interest of HubSpot pursuant to Article 6 (1) (f) GDPR. HubSpot's legitimate interest lies in IT security. The transfer to AWS ensures additional data security.
The purpose of processing by Hubspot is to respond to your inquiries. The legal basis for the processing of personal data is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is to offer a modern system that allows us to process your contact requests quickly and efficiently. Prompt contact is necessary due to time-bound matters.
The data collected by HubSpot is transmitted to Google for analysis. The legal basis for the transfer is Article 6(1)(f) GDPR. The purpose of the transfer is analysis for marketing purposes. HubSpot has a legitimate interest in the transfer to improve and optimize its services.
The processed information will only be stored for as long as necessary for the intended purpose or as required by law. Failure to provide your data may mean that you cannot use our services or cannot use them to their full extent.
Right of withdrawal
You can revoke your consent at any time with effect for the future. Please use one of the following options to do so:
- You inform us that you wish to withdraw your consent.
- You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
- You can find out how to delete cookies in the most common browsers and change the cookie settings here:
- Google Chrome: Webseite
- Mozilla Firefox: Webseite
- Apple Safari: Webseite
- Microsoft Internet Edge: Webseite
6. Data use in connection with social networks
In addition to this website, we maintain presences in various social media, which you can find both directly on the Internet via your end device and via corresponding buttons on our website. This does not constitute a recommendation on our part.
We would like to point out that we can neither influence nor check the use of your data by the social network providers.
When interacting with your end devices, you must expect providers to process a considerable amount of (personal) data. In addition to log data and technical information about your device, numerous other personal data are regularly collected that cannot be listed individually here. If you are logged in with your personal user account of the respective network during your visit to a social network, you must expect that this network can assign the visit to your account.
We would also like to point out that data may also be transferred to servers in a third country, in particular the USA, and may therefore be processed outside the European Union.
Despite the current adequacy decision on the so-called EU-U.S. Data Privacy Framework, which you can access under the following link Implementing Decision - 2023/1795 - EN - EUR-Lex, the USA is often regarded as a country with an inadequate level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for monitoring and surveillance purposes, possibly without the possibility of legal recourse. By consenting to the use of our services, you also consent to the processing of your data in the USA in accordance with Art. 49 (1) lit. a GDPR in the event that the aforementioned adequacy decision subsequently proves to be unlawful or ineffective.
For the purpose and scope of data collection by the respective social network and the further processing of your data there, as well as your rights in this regard, please refer to the respective provisions of the respective controller. We have no influence on this.
If we collect personal data in the course of your visit to one of our social media sites, the legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in the provision of a functional website that links correctly to the social media sites, the public presentation of our work on social media platforms and in providing law enforcement authorities with the information necessary for prosecution in the event of criminal offenses. If you contact us via social media sites, the following regulations and information in the section "Collection, processing and use of data when contacting us" apply.
7. Collection, processing and use of data when contacting us
Our website, door signs, letterheads, signatures, business cards and social media presence contain information that enables you to contact us. If you contact us in person, by post, by telephone, by text message, by contact form or by email, your voluntarily submitted personal data will be processed and stored for the purpose of processing your inquiry.
When you contact us by e-mail, your first name, surname, e-mail address, the time the e-mail was received and the data resulting from the text of the e-mail and any attachments will be processed.
If you contact us by telephone, your telephone number and the time of the call as well as data provided during the conversation such as your first name, surname, e-mail address and information about your request will generally be processed.
If you contact us via a form provided by us, at least your first name, surname and email address and other information that you provide voluntarily, as well as the time of submission, will be stored and processed in a CRM tool.
If you contact us by post, we will process your address data (e.g. first name, surname, street, place of residence, zip code) as well as the time of receipt of the mail and any data resulting from your letter.
Please note that, for technical reasons, it can never be completely ruled out that providers or other third parties may gain knowledge of your personal data and the information that you transmit when using remote means of communication. If your contact inquiry results in a request for further information about our services or an offer, we will initially store this as an inquiry for the purpose of processing your inquiry.
When contacting us electronically for the first time, please indicate if you do not wish to receive any further electronic communication from us and how else we can reach you.
If no contractual relationship is established, we only store the data that we are required to retain by law.
The legal basis for the processing of data transmitted in the course of contacting us is initially Art. 6 para. 1 sentence 1 lit. c or f GDPR. The legitimate interest within the meaning of the GDPR is, for example, the fulfillment of legal obligations, the proper processing and answering of your contact request, the enforcement or defense of claims or the defense in your own case. If the contact request results in a contractual or contract initiation relationship, the legal basis for further data processing is Art. 6 para. 1 sentence 1 lit. b GDPR.
8. Collection, processing and use of data in the course of an order
As part of a contractual relationship between us, we collect, store and process both your personal data and, if applicable, your company-related data that you provide to us or that we become aware of from other sources during order processing. This includes, for example, first name, surname, street, place of residence, zip code, date of birth, contact details by e-mail and telephone, bank details, data that is mandatory due to the nature of the matter to be processed and the facts of the case or that must be processed and stored to check compliance with legal regulations. In the case of companies, at least the company name, legal form, registered office, legal representatives and other tax-relevant information are also processed.
This is done for the following purposes, among others:
- the processing of the order;
- compliance with our obligations under applicable legislation and regulatory requirements in the business areas in which we operate. This includes, for example, know-your-customer (KYC) checks and import/export compliance.
- operational purposes (e.g. accounting, invoicing and compliance with tax regulations)
- the fulfillment of certain legal obligations (e.g. disclosure obligations, compliance with court orders, compliance with tax regulations).
If the data processing is necessary for the purpose of fulfilling the contract, the legal basis for this processing is Art. 6 para. 1 sentence 1 lit. b GDPR. In addition, the processing of certain personal data is also necessary for the fulfillment of legal obligations. In this case, the legal basis for the processing is Art. 6 para. 1 sentence 1 lit. c GDPR. Furthermore, the processing of personal data is necessary to exercise our own rights and to ensure the quality of service provision. The legal basis for the processing is then Art. 6 para. 1 sentence 1 lit. c or f GDPR. Our legitimate interest lies in the fulfillment of our legal obligations, the enforcement or defense of claims or the defense of our own interests.
9. Disclosure of personal data to third parties
We pass on your personal data to third parties for the purposes of the respective pre-contractual or contractual relationship.
Otherwise, data will only be passed on to third parties if you have previously given your express consent separately or if we are subject to a legal obligation to pass on data.
In this context, we expressly point out that entrepreneurs are subject to numerous statutory identification, recording, disclosure and notification obligations and that these obligations may also change during or after order processing.
If your data is transferred to third countries in individual cases, we check whether or not a so-called adequacy decision exists. Otherwise, appropriate guarantees for the transfer of personal data are ensured by so-called standard contractual clauses, on the basis of your consent or on the basis that the transfer is otherwise compatible with data protection laws.
If you have given your consent, you can revoke it at any time with effect for the future by simply notifying us in text form.
Your data will be processed by third parties as part of the processing on our behalf. Providers of such services are involved as service providers for the technical processing of electronic communication and the provision of this website. We will inform you in good time about the possible involvement of third parties in the context of order processing and - if necessary - request your consent.
If the transfer of personal data to third parties is necessary for the purpose of fulfilling or rejecting the order, the legal basis for this processing is Art. 6 para. 1 sentence 1 lit. b GDPR. In addition, the transfer of personal data to third parties is also necessary to fulfill numerous legal obligations and to exercise our own rights. In this case, the legal basis for the processing is Art. 6 para. 1 sentence 1 lit. c or f GDPR. Our legitimate interest lies, for example, in the fulfillment of legal obligations, the enforcement or defense of claims or the defense of our own interests.
10. Duration of storage and rights of data subjects
We will not store your data for longer than is necessary for the purposes stated in this Privacy Policy, unless you have consented to storage beyond the end of archiving obligations and other legitimate interests in processing.
As the natural person concerned, you have the following rights:
- In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us to the extent specified therein.
- In accordance with Art. 16 GDPR, the right to demand the immediate correction of incorrect or the completion of your personal data stored by us.
- In accordance with Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless further processing is necessary.
- In accordance with Art. 18 GDPR, the right to demand the restriction of the processing of your personal data, insofar as
- the accuracy of the data is disputed by you;
- the processing is unlawful, but you object to its erasure;
- we no longer need the data, but you need it to assert, exercise or defend legal claims, or
- you have objected to the processing pursuant to Art. 21 GDPR. - In accordance with Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller.
- Pursuant to Art. 21 GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR. After exercising your right to object, we will no longer process your personal data for the aforementioned purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.
- In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. You can contact the supervisory authority of your usual place of residence or workplace or our company headquarters. The supervisory authority responsible for us is Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Str. 22, 20459 Hamburg, phone: 040 428 54 4040, email: mailbox@datenschutz.hamburg.de.
Insofar as we process personal data as explained above in order to safeguard our legitimate interests, which outweigh your interests, you can object to this processing with effect for the future. After exercising your right to object, your personal data will no longer be processed for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.
Please contact us directly if you have any questions regarding the collection, processing, archiving or transfer of your personal data, if you wish to obtain information, correct, restrict or delete data, or if you wish to withdraw your consent or object to a specific use of data.
Hamburg, 02.02.2025