We, HERMES Einrichtungs Service GmbH & Co. KG (“HES”), take the protection of your privacy and your personal data very seriously. We therefore attach great importance to ensuring that your data is secure and that the applicable data protection provisions, in particular the EU General Data Protection Regulation (GDPR), are complied with when your data is processed. Furthermore, we ensure through technical and organisational measures that your data is optimally protected against unauthorised access by third parties.
1. Personal Data
Personal data – the law also refers to data relating to an identified or identifiable person – is personal information that allows conclusions to be drawn about your identity as a natural person. This includes, for example, information such as your name, address, telephone number or e-mail address, but also information about your browsing behaviour, provided that this information can be attributed to you directly or indirectly. Data relating to legal entities is not personal data and does not fall within the scope of this privacy notice.
When you access the Hermes website, certain data is automatically collected and temporarily stored. This is primarily technical data (e.g. web browser, operating system or time of access). (For details, see Section 2)
You can generally use the Hermes website without disclosing your personal data. However, if you log in with your Hermes user account, we are able to identify you on the basis of the data provided therein. Furthermore, if you contact us via the Hermes website, we collect and process your personal data for the purpose of handling your enquiry.
2. Collection of Log Data
2.1 Categories of Data and Purposes of Processing
Each time the Hermes website is accessed, certain data of the accessing device is automatically recorded by our web servers and temporarily stored. The following data is collected:
- IP address of the accessing device
- Browser and operating system type
- Device type
- Date and time of the visit (timestamp)
- The user’s internet service provider
- Technical request
- Session ID
- The subpages of our website accessed by the user
- The website from which the user accesses our website (referrer URL)
- Websites accessed by the user’s system via our website
This data is collected in order to ensure the functionality of the website. In addition, the data serves to ensure the security of our information technology systems. The data is not analysed for marketing or profiling purposes in this context.
2.2 Legal Basis
The legal basis for the collection and temporary storage of the data is Art. 6(1)(f) GDPR. Our legitimate interest in the processing lies in ensuring the functionality of the website and the security of our information technology systems.
2.3 Storage Period
The data is anonymised as soon as it is no longer required for the purpose for which it was collected.
3. Your HES User Account
Clients have the option of logging in to our website with their Hermes user account or registering for one.
3.1 Categories of Data and Purposes of Processing
In the course of registration, we process the following data, which we require from you in order to handle and provide the Hermes transport services: company, form of address, name, department, address, telephone number, e-mail address. For certain payment methods, we also process the name of the account holder, including the bank details.
To log in, we require the following data: user name and password.
We process this data exclusively for the purpose of providing and performing the services of the Hermes user account and the Hermes service for you. Data is only transferred to third parties where this is necessary for the provision of the Hermes services or for maintenance work.
User accounts for employees can be created by the HES client’s ADMIN.
A transfer of data to countries outside the European Union is not intended.
The data will only be used for advertising purposes – in particular for sending the Hermes newsletter – if you have expressly consented to this.
3.2 Legal Basis
The legal basis for the processing of data in connection with the Hermes user account and the Hermes service is Art. 6(1)(b) GDPR and, where you have given us your consent to the processing of your data, Art. 6(1)(a) GDPR.
3.3 Storage Period
Your Hermes user account remains available to you until you delete it using the function provided in the user account or otherwise terminate it vis-à-vis us. After the account has been deleted or the contract has otherwise been terminated, we will delete or anonymise the personal data as soon as we no longer require it for the performance of the contract. Where we are legally obliged to retain the data, we will initially block it and will only delete or anonymise it after the statutory retention periods have expired.
3.4 Right to Rectification
You can rectify your data in the Hermes user account at any time.
4. Use of Cookies and Other Technologies
4.1 Cookies
Our website uses cookies. Cookies are small text files that can be stored in or by the web browser on the user’s device. Cookies usually contain a characteristic string of characters that enables the browser or device to be uniquely identified when the website is accessed again. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our services more user-friendly, effective and secure.
Cookies that are required to carry out the electronic communication process or to provide certain functions requested by you (e.g. shopping cart function) are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services.
Various types of cookies are used on this website. A distinction is made between:
- Temporary session cookies, which are generally deleted when you close your web browser;
- Functional cookies, which are stored on your device by the Hermes website;
The functional cookies used by this Hermes website (first-party cookies) include temporary session cookies and persistent cookies. In the persistent cookies, the website stores information in order to save any personal user settings you may have made and to improve your user experience on your next visit (e.g. the language settings you have selected). In the temporary session cookies, the website stores technical information that is required for the website to function. The storage period of these cookies is governed by the periods specified in this section.
In general, you can use the cookie banner and your web browser to configure settings that prevent cookies from being stored or analytics technologies from being executed. In addition, all cookies can be deleted manually at any time. You can also open the settings menu at a later time via the cookie icon and change your settings.
Change cookie settings
4.2 User-Friendliness of the Website
We use cookies to make the Hermes website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change. Settings relating to the account may be stored in the cookies for this purpose.
The legal basis for the collection and processing of the data is Art. 6(1)(a) GDPR, provided that you have consented to the use of cookies on the Hermes website.
The collection and processing of data for the purposes stated in this section is strictly necessary for the operation of the Hermes website. Consequently, you have no option to object.
4.3 Statistics Cookies and Google Analytics 4 (GA4)
Statistics cookies help website owners understand how visitors interact with websites by collecting and reporting information anonymously.
4.3.1 Google Analytics 4 (GA4)
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). This website uses Google Analytics 4 (GA4), the successor to Universal Analytics. In GA4, IP addresses are truncated by default and are not stored permanently. Google Analytics uses the aforementioned “cookies”, text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server. In Google Analytics 4, however, your IP address is first truncated by Google within Member States of the European Union or in other Contracting States to the Agreement on the European Economic Area. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services related to website and internet use.
Insofar as personal data is transferred to the USA in this context, the transfer is based on the certification of Google LLC under the EU-U.S. Data Privacy Framework (adequacy decision of the EU Commission) and, additionally, on standard contractual clauses pursuant to Art. 46 GDPR. Sessions and campaigns are terminated after a certain period of time has elapsed. By default, sessions are terminated after 30 minutes of inactivity and campaigns after six months. The time limit for campaigns can be a maximum of two years. The legal basis for the use of Google Analytics is your consent (Art. 6(1) sentence 1(a) GDPR). This means that you can freely decide whether or not to allow this cookie. You can also prevent the collection of the data generated by the cookie and relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser add-on. Opt-out cookies prevent the future collection of your data when you visit this website.
Further information on the terms of use and data protection can be found at
https://policies.google.com/privacy.
4.3.2 Google Tag Manager
To manage the tags and scripts used on this website, we use Google Tag Manager (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google Tag Manager itself does not collect any personal data, but serves exclusively to technically trigger and manage other services. Tags that process personal data (e.g. Google Analytics 4, Google Ads) are only triggered via the consent management platform after you have given your consent. The legal basis is Art. 6(1)(a) GDPR.
4.3.3 Google Ads – Conversion Tracking and Remarketing
We use Google Ads (provider: Google Ireland Limited) to draw attention to our services. In this context, we use conversion tracking and, where applicable, remarketing. For this purpose – subject to your consent – a cookie is set as soon as you reach our website via a Google ad. These cookies expire after a certain period of time and are not used to identify you personally. They enable us to evaluate which ads lead to interactions and to show users relevant ads on third-party websites. The legal basis is Art. 6(1)(a) GDPR. Further information:
https://policies.google.com/privacy.
4.3.4 LinkedIn Insight Tag
We use the LinkedIn Insight Tag to evaluate and optimise our LinkedIn campaigns (provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland). Subject to your consent, information about visits to our website (including IP address, device and browser data, pages accessed and the time of the visit) is processed in order to measure the conversions of our campaigns and to show you relevant ads (retargeting). The legal basis is Art. 6(1)(a) GDPR. Further information:
https://www.linkedin.com/legal/privacy-policy.
4.3.5 Consent Management Platform (CookieYes)
To obtain and manage your consent to non-essential cookies and services, we use the consent management platform CookieYes (provider: CookieYes Limited, 3rd Floor, 86-90 Paul Street, London EC2A 4NE, United Kingdom). CookieYes stores your consent decisions and sets a technically necessary cookie for this purpose; in doing so, consent data and a truncated IP address, among other things, are processed in order to be able to demonstrate your consent. The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7 GDPR (obligation to demonstrate consent) and our legitimate interest in legally compliant consent management (Art. 6(1)(f) GDPR). You can adjust or withdraw your settings at any time via the “Change cookie settings” link.
4.3.6 Website Technology: Elementor and WPML
Our website is operated with WordPress and uses the page editor Elementor and the multilingual plugin WPML. These technologies may set technically necessary cookies (e.g. to store the selected language via WPML or to ensure error-free display via Elementor). These cookies are necessary for the operation of the website; the legal basis is Art. 6(1)(f) GDPR. Where Elementor uses fonts (e.g. Google Fonts), these are embedded locally wherever possible, so that no connection to Google servers is established. Note (brandsatz): Section 4 has been supplemented with GA4, Google Tag Manager, Google Ads, the LinkedIn Insight Tag and the consent platform CookieYes; furthermore, the form tools (Contact Form 7, Elementor forms) have been added to Section 7, and a new section “Newsletter and E-Mail Marketing (Brevo)” has been included. Please adjust the sub-numbering consecutively afterwards. Not included, as they are not used according to the current status: Google reCAPTCHA, Akismet, Meta Pixel and externally loaded Google Fonts – we will add these if they are used at a later date. This update does not constitute legal advice.
4.4 SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the padlock symbol in your browser bar.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Please note that data transmission over the internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.
5. Chatbot and Voicebot
5.1 Chatbot
The chatbot Hermine, a live chat software on the HES website, is provided by Userlike UG (haftungsbeschränkt).
Your entries are transmitted to the Userlike interface:
Userlike UG (haftungsbeschränkt)
Probsteigasse 44-46
50670 Köln
Privacy policy of the website:
https://www.userlike.com/de/privacy_policy
The chat function serves as a means of contacting us. You can use the chatbot like a contact form to chat with our service bot or our employees almost in real time.
5.1.1 Categories of Data – Chatbot
When the chat is started, the following personal data is processed:
- Date and time of access
- Browser type/version
- IP address
- Operating system used
- URL of the previously visited website
- Amount of data sent
- Content of the communication
- Tracking number
5.2 Voicebot
You can also contact the voicebot by telephone, describe your concern and have it resolved. On request, the voicebot will forward you to employees of the responsible depot.
5.2.1 Categories of Data – Voicebot
When the voicebot is started, the following personal data is processed:
- Content of the communication (transcript)
- Tracking number
- Postcode (voluntary)
- Shipment status
- Surname, first name
- Address
Depending on the course of the conversation with our service bot or our employees, further personal data entered or provided by you may be processed in the chat or conversation. The nature of this data depends largely on your enquiry or the problem you describe to us. Please only provide us with the data that is necessary for your enquiry. The processing of all this data serves to provide you with a fast and efficient means of contacting us and thus to improve our customer service.
5.2.2 Purpose of Data Processing
The chat function serves as a means of contacting us. You can use the chatbot like a contact form to chat with our service bot or our employees almost in real time.
You can use the voicebot to talk to our service bot by telephone almost in real time; in the process, your speech is converted into text. This text is transmitted to our service bot, where it is recognised and answered in the form of an output text, which is converted back into speech.
5.3 Legal Basis
The legal basis for the data processing is Art. 6(1)(b) GDPR on the basis of your contract with Hermes. If there is no contractual relationship between you and Hermes, the legal basis is Art. 6(1)(f) GDPR. In that case, the legitimate interest of Hermes outweighs your legitimate interest. The reason for this is that your enquiry cannot be processed without processing your personal data. Furthermore, the use of the chatbot “Hermine” is voluntary.
5.4 Storage Period/Retention Periods
The data is stored for as long as it is required to achieve the purpose. Where statutory retention periods apply, the data is stored for the duration of these periods. If the data is required for the assertion or defence of legal claims, the data is retained for this period.
We store the course of the conversation in text form, the data and the contact details you have provided for a maximum period of 4 months. This serves the purpose of continuous quality control of our voice service.
5.5 Possibility of Withdrawal, Objection and Erasure
If you do not wish your data to be stored, you are welcome to contact us at the e-mail address
datenschutz-2mh@hermes-2mh.de. Stored conversations will then be deleted by us without undue delay.
When making your request, please ensure that you provide us with your complete contact details (first name, surname and tracking number, if available); this is the only way we can clearly identify you and respond to your request.
5.6 Further Information
When you call, you will be connected directly to our service bot.
We use the transcription software of the following company:
VIER GmbH
Hamburger Allee 23
30161 Hannover
Further information about the data processed can be found at:
https://www.vier.ai/datenschutz/
In addition, the technology for the automated processing of your enquiry and the associated data processing for the purposes of responding and quality assurance is provided or carried out by the following company:
Otto GmbH & Co KG Aa
Werner-Otto-Straße 1-7
22179 Hamburg
5.7 Obligation to Provide Your Personal Data
You are not obliged to provide personal data. If you do not wish to provide your data, it is not possible to use the voicebot. If you do not wish to provide your data verbally, you can also use the keypad to enter it.
6. Integration of Third-Party Services and Content
Within our online services, we use content or service offerings of third-party providers on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online services within the meaning of Art. 6(1)(f) GDPR) in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as “content”).
The following content is integrated:
Vimeo
Video platform of the provider: Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA
Privacy policy:
https://vimeo.com/privacy
Youtube
Video platform of the provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Privacy policy:
https://www.google.com/policies/privacy/
OpenStreetMap
Maps are integrated via the “OpenStreetMap” service, which is provided by the OpenStreetMap Foundation (OSMF) under the Open Data Commons Open Database License (ODbL).
Privacy policy:
https://wiki.openstreetmap.org/wiki/Privacy_Policy .
Xing
Social network of the provider XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Privacy policy:
https://privacy.xing.com/de/datenschutzerklaerung .
LinkedIn
Social network of the provider LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Privacy policy:
https://www.linkedin.com/legal/privacy-policy.
Instagram
Social network of the provider Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Privacy policy:
https://privacycenter.instagram.com/policy
7. Contact Form
On our website, you also have the option of contacting us via one of the contact forms. The data you enter in the contact form (name, e-mail address, message) is used exclusively to process your enquiry. Your data will not be passed on to third parties and will be deleted after 30 days, unless statutory retention obligations apply. No cookies are set in this context, and we do not collect any IP addresses or browser data of users.
By submitting the form, you agree that we may use your data to process your enquiry. You have the right to request information about the data we have stored about you at any time and to have it rectified or erased. For further information on how we handle your data and on your rights, please refer to Section 8 “Your Rights”.
8. Screening Against Sanctions Lists
Customers:
Furthermore, we are obliged to screen your data against personal sanctions lists/embargoes (in particular financial sanctions against listed persons) in order not to make economic resources or funds available to listed persons and to ensure compliance with foreign trade law (Article 6(1)(c) GDPR).
9. Your Rights
With regard to your personal data, you are generally entitled to the following rights vis-à-vis Hermes:
Right of Access (pursuant to Article 15 GDPR)
You have the right to request confirmation as to whether or not we process personal data concerning you. If we process your personal data, you are entitled to be informed
- why we process your data;
- which categories of your data we process;
- which categories of recipients receive or will receive your data;
- how long we will store your data; if it is not possible to specify the storage period, we must inform you of the criteria used to determine the storage period (e.g. expiry of statutory retention periods);
- that you have the right to rectification and erasure of the data concerning you, including the right to restriction of processing and/or the right to object;
- that you have the right to lodge a complaint with a supervisory authority;
- where your data originates from, if we have not collected it directly from you;
- whether your data is used for automated decision-making and, if so, of the logic involved and the significance and envisaged consequences of the automated decision for you;
- that, where data concerning you is transferred to a country outside the European Union, you are entitled to be informed whether and, if so, on the basis of which safeguards an adequate level of protection is ensured at the data recipient;
- that you have the right to request a copy of your personal data. Copies of data are generally provided in electronic form. The first copy is free of charge; a reasonable fee may be charged for further copies. A copy can only be provided insofar as this does not adversely affect the rights of other persons.
Right to Rectification or Erasure (pursuant to Articles 16 and 17 GDPR)
You have the right to request that we rectify your data if it is inaccurate and/or incomplete. This right also includes the right to have incomplete data completed by means of supplementary statements or notifications. Any rectification and/or completion must be carried out without undue delay.
You also have the right to request that we erase your personal data if
- the personal data is no longer necessary for the purposes for which it was collected and processed;
- the data processing is based on consent given by you and you have withdrawn your consent.
(However, this does not apply if
- there is another legal basis for the data processing;
- you have objected to data processing whose legal basis lies in so-called “legitimate interest” (pursuant to Article 6(1)(e) or (f));
- there are overriding legitimate grounds for further processing.)
- you have objected to data processing for direct marketing purposes;
- your personal data has been processed unlawfully;
- the data concerns a child and was collected in relation to information society services (= electronic services) on the basis of consent (pursuant to Art. 8(1) GDPR).
There is no right to erasure of personal data if
- the right to freedom of expression and information conflicts with the request for erasure;
- the processing of personal data is necessary for compliance with a legal obligation (e.g. statutory retention obligations), for the performance of public tasks and interests under applicable law (including “public health”) or for archiving and/or research purposes;
- the personal data is necessary for the establishment, exercise or defence of legal claims.
Erasure must be carried out without undue delay. If we have made personal data public (e.g. on the internet), we must, insofar as technically possible and reasonable, ensure that other data processors are also informed of the request for erasure, including the erasure of links, copies and/or replications.
Right to Restriction of Processing (pursuant to Article 18 GDPR)
You have the right to have the processing of your personal data restricted in the following cases:
- If you have contested the accuracy of your personal data, you may request that we do not use your data for any other purpose for the duration of the verification of its accuracy, thus restricting its processing.
- In the event of unlawful data processing, you may request the restriction of the use of your data instead of its erasure.
If you require your personal data for the establishment, exercise or defence of legal claims, but we no longer require your personal data, you may request that we restrict the processing to the purposes of such legal action.
If you have objected to data processing (Art. 21(1) GDPR) and it has not yet been determined whether our interests in the processing override your interests, you may request that your data not be used for other purposes for the duration of the review, thus restricting its processing.
Personal data whose processing has been restricted at your request may, with the exception of storage, only be processed
- with your consent,
- for the establishment, exercise or defence of legal claims,
- for the protection of the rights of another natural or legal person, or
- for reasons of important public interest.
If a restriction of processing is lifted, you will be informed of this in advance.
Right to Data Portability (pursuant to Art. 20 GDPR)
You have the right to request from us the data that you have provided to us in a commonly used electronic format (e.g. as a PDF or Excel document).
You may also request that we transmit this data directly to another company (designated by you), provided that this is technically feasible for us.
The prerequisite for this right is that the processing is based on consent or is carried out for the performance of a contract and is carried out by automated means. The exercise of the right to data portability must not adversely affect the rights and freedoms of other persons. If you exercise the right to data portability, you also continue to have the right to erasure of data pursuant to Article 17 GDPR.
Right to Object to Certain Data Processing (pursuant to Art. 21 GDPR)
If your data is processed for the performance of tasks carried out in the public interest or for the purposes of legitimate interests, you may object to this processing. To do so, you must set out the grounds relating to your particular situation on which your objection is based. These may include, for example, special family circumstances or interests in confidentiality that merit protection.
In the event of an objection, we must refrain from any further processing of your data for the aforementioned purposes, unless
- there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, or
- the processing is necessary for the establishment, exercise or defence of legal claims.
You may object to the use of your data for direct marketing purposes at any time; this also applies to profiling to the extent that it is related to such direct marketing. In the event of an objection, we may no longer use your data for direct marketing purposes.
Prohibition of Automated Decisions/Profiling (Art. 22 GDPR)
Decisions made by us which produce legal effects concerning you or similarly significantly affect you may not be based solely on automated processing of personal data. This also includes profiling.
This prohibition does not apply insofar as the automated decision
- is necessary for entering into or performing a contract with you,
- is authorised by law, provided that such law lays down suitable measures to safeguard your rights and freedoms as well as your legitimate interests, or
- is based on your explicit consent.
Decisions based solely on the automated processing of special categories of personal data (= sensitive data) are only permissible if they are based on your explicit consent or if there is a substantial public interest in the processing and suitable measures have been taken to safeguard your rights and freedoms as well as your legitimate interests.
9.1 Exercising Your Rights as a Data Subject
To exercise your rights as a data subject, please contact the bodies named under 6.2. Requests submitted electronically will generally be answered electronically. The information, communications and actions to be provided under the GDPR, including those relating to the exercise of data subject rights, are generally provided free of charge. Only in the case of manifestly unfounded or excessive requests are we entitled to charge a reasonable fee for processing or to refuse to act on the request (Art. 12(5) GDPR).
If there are reasonable doubts about your identity, we may request additional information from you for the purpose of identification. If we are unable to identify you, we are entitled to refuse to process your request. We will – where possible – notify you separately if we are unable to identify you (see Art. 12(6) and Art. 11 GDPR).
Requests for access and information are generally processed without undue delay (within one month of receipt of the request). This period may be extended by a further two months where necessary, taking into account the complexity and/or number of requests; in the event of an extension, we will inform you of the reasons for the delay within one month of receipt of your request. If we do not take action on a request, we will inform you without undue delay, and at the latest within one month of receipt of the request, of the reasons for this and of the possibility of lodging a complaint with a supervisory authority or seeking a judicial remedy (Art. 12(3) and (4) GDPR).
Please note that you can only exercise your data subject rights within the scope of the restrictions and limitations provided for by the Union or the Member States (Art. 23 GDPR).
9.2 Contact Person
If you have any questions regarding the collection, processing or use of your personal data, or regarding access, rectification, erasure, restriction of processing, objections or the transfer of your data, please contact:
HERMES Einrichtungs Service GmbH & Co. KG
Data Protection Coordination
Albert-Schweitzer-Straße 33
D-32584 Löhne
E-mail:
datenschutz-2mh@hermes-2mh.de
When making your request, please ensure that you provide us with your complete contact details (first name, surname and address); this is the only way we can clearly identify you and respond to your request promptly.
Our company’s Data Protection Officer is Mr Georg Möller. The Data Protection Officer can be contacted as follows:
SK-Consulting Group GmbH
Osterweg 2; 32549 Bad Oeynhausen
E-mail:
datenschutz@sk-consulting.com
9.3 Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data by Hermes.
A list of the supervisory authorities and their contact details can be found at the following link:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
In the event of complaints, you may contact the competent supervisory authority at any time. You have the right to an effective judicial remedy against a supervisory authority (Art. 78 GDPR) and against our company (Art. 79 GDPR).
10. Controller
The controller within the meaning of Art. 4(7) GDPR is
HERMES Einrichtungs Service GmbH & Co. KG
Albert-Schweitzer-Straße 33
32584 Löhne
Registered office: Löhne
Register court: Local Court (Amtsgericht) Bad Oeynhausen
Registration number: HRA 10039
Managing Directors: Carsten Meinders, Michael Dildey, Viviane Reichert-Brown
VAT identification number pursuant to Section 27a of the German VAT Act (UStG): DE 813 973 991
Personally liable partner: Verwaltungsgesellschaft HERMES Einrichtungs Service mbH, Local Court (Amtsgericht) Hamburg HRB 79507
Contact details:
HERMES Einrichtungs Service GmbH & Co. KG
Albert-Schweizer-Straße 33
D-32584 Löhne
Phone +49 (0)5732 103-0 (no shipment information available)
E-mail
info-2mh@hermes-2mh.de (no shipment information available)