Privacy Policy

Thank you for your interest in our website. The protection of your privacy is very important to us. Below we inform you in detail about how we handle your data.

1. Data Controller
NEOintralogistics GmbH
represented by the Managing Directors
Volmerswerther Str. 431
40221 Düsseldorf
Germany
Email: privacy@neointralogistics.com
Phone: +49 211 936 724 23

2. Contact person for data protection inquiries
Mathias Voigt
Email: privacy@neointralogistics.com

3. Hosting
Our website is hosted by Wix.com Ltd. This may involve data transfers to servers in Israel and the United States (Google Cloud Platform).
Legal basis: Art. 6(1)(f) GDPR.
The transfer is based on standard contractual clauses (Art. 46 GDPR).
Note: The United States does not have an equivalent level of data protection; access by government authorities cannot be ruled out.

4. Access data (server log files)
When you visit the website, the following are automatically processed:
- IP address
- Date and time
- Browser and operating system
- Referrer URL
Purpose: Ensuring technical operation
Legal basis: Art. 6(1)(f) GDPR

5. Cookies and Consent
We use cookies and similar technologies. We distinguish between:
- Technically necessary cookies
- Analytics cookies
- Marketing cookies

Non-essential cookies are generally only used after you have given your consent (Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR).

6. Google Tag Manager
We use Google Tag Manager (Google Ireland Ltd.) to manage website tags.
The service is used exclusively for the technical management of tags and does not perform any independent analysis itself.
This may involve the processing of the IP address.
Legal basis: Art. 6(1)(f) GDPR

7. Google Analytics
Purpose: Analysis of user behavior to optimize our website
Data: IP address (truncated), usage behavior, device information
Legal basis: § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR
Third country: USA (Standard Contractual Clauses)

8. Google Ads / Conversion Tracking
Purpose: Measuring the success of marketing measures
Data: Cookie ID, usage behavior
Legal basis: Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR
Third country: USA (Standard Contractual Clauses)

9. LinkedIn Insight Tag
Purpose: Marketing and analysis
Data: IP address, usage behavior, device information
Legal basis: Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR
Third country: USA

There is joint responsibility with LinkedIn pursuant to Art. 26 GDPR.
Further information on data processing can be found in LinkedIn’s privacy policy.

10. Wix Consent Management
This website uses the Wix Consent Management tool. It stores users’ cookie consent so that the website does not have to ask for consent again on their next visit and can correctly apply the selected settings.
To do this, a cookie or a comparable storage entry is set locally on the user’s device. This entry contains only the information regarding which categories the user has accepted or rejected, as well as the time of consent. No personal data is transferred to external Wix servers.
The storage of this information is technically necessary to document the user’s consent and implement it in a legally compliant manner. The legal basis for setting the storage is Section 25(2)(2) of the German Telemedia Act (TDDDG). The processing of the stored consent data is based on Article 6(1)(c) of the GDPR, as the documentation of consent pursuant to Article 7(1) of the GDPR is a legal obligation of the controller.
The data remains on the website’s server (neointralogistics.com) and is not transferred to third countries. The consent data is stored for as long as the underlying consent remains valid, but for no longer than twelve months.

11. Other Services
Heyflow:
Purpose: Provision of interactive forms
Data: Form data entered, technical usage data
Legal basis: Section 25(1) TDDDG in conjunction with Art. 6(1)(b) or (a) GDPR
Third country: possibly the USA

Sentry:
Purpose: Error analysis and stability improvement
Data: Technical log data, possibly IP address
Legal basis: Art. 6(1)(f) GDPR

Podigee:
Purpose: Integration of audio content
Data: Usage data, IP address
Legal basis: Section 25(1) TDDDG in conjunction with Article 6(1)(a) GDPR

Google reCAPTCHA:
Provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Purpose: Protection against automated access and misuse (bot detection)
Data: IP address, browser information, usage behavior on the website
Legal basis: Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR
Third country: USA (Standard contractual clauses pursuant to Art. 46 GDPR; access by authorities cannot be ruled out)

Microsoft Services (microsoft.com, office.com):
Provider: Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland
Purpose: Provision of embedded Microsoft functions (e.g., calendar or appointment integration)
Data: IP address, authentication tokens (MSAL, ClientId, OIDC), usage data
Legal basis: Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR
Third country: USA (Standard contractual clauses pursuant to Art. 46 GDPR; access by authorities cannot be ruled out)

12. Transfer to Third Countries
When using external services, personal data may be transferred to third countries, in particular the USA.
The transfer is based on standard contractual clauses pursuant to Art. 46 GDPR.
We would like to point out that there is no equivalent level of data protection in the USA and that access by authorities cannot be ruled out.

13. Social Media

This Privacy Policy applies to the following social media profiles:

LinkedIn: http://linkedin.com/company/neointralogistics

YouTube: https://www.youtube.com/@NEOintralogistics

Data Processing by Social Networks

We maintain publicly accessible profiles on social networks. The specific social networks we use are listed below.

Social networks such as Facebook, X, etc., can generally analyze your user behavior comprehensively when you visit their website or a website with integrated social media content, such as “Like” buttons or advertising banners. Visiting our social media profiles triggers numerous data processing operations relevant to data protection. Specifically:

If you are logged into your social media account and visit our social media presence, the operator of the social media portal can associate this visit with your user account. However, your personal data may also be collected even if you are not logged in or do not have an account with the respective social media portal. In this case, data collection takes place, for example, via cookies stored on your device or by recording your IP address.

Using the data collected in this way, the operators of the social media platforms can create user profiles that store your preferences and interests. In this way, interest-based advertising can be displayed to you both within and outside the respective social media platform. If you have an account with the respective social network, interest-based advertising may be displayed on all devices on which you are logged in or have been logged in.

Please also note that we cannot track all processing activities on the social media platforms. Depending on the provider, additional processing operations may therefore be carried out by the operators of the social media platforms. For details, please refer to the terms of use and privacy policies of the respective social media platforms.

Legal Basis

Our social media presence is intended to ensure the most comprehensive online presence possible. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. The analysis processes initiated by the social networks may be based on different legal grounds, which must be specified by the operators of the social networks, e.g., consent within the meaning of Art. 6(1)(a) GDPR.

Data Controller and Exercising Rights

When you visit one of our social media profiles, e.g., Facebook, we are jointly responsible with the operator of the social media platform for the data processing operations triggered by this visit. You may generally exercise your rights—including the right to access, rectification, erasure, restriction of processing, data portability, and the right to lodge a complaint—both with us and with the operator of the respective social media portal, e.g., Facebook.

Please note that despite our joint responsibility with the social media platform operators, we do not have full control over the data processing operations of the social media platforms. Our options depend largely on the corporate policies of the respective provider.

Retention Period

The data collected directly by us via our social media presence is deleted from our systems as soon as you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal provisions, in particular retention periods, remain unaffected.

We have no influence over the retention period of your data stored by social media operators for their own purposes. For details, please contact the social media operators directly, e.g., by reviewing their privacy policies (see below).

Your Rights

You have the right at any time to receive information free of charge regarding the origin, recipients, and purpose of your stored personal data. You also have the right to object, the right to data portability, and the right to lodge a complaint with the competent supervisory authority. Furthermore, you may request the correction, blocking, deletion, and, under certain circumstances, the restriction of the processing of your personal data.

Social Networks in Detail

We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.

If you wish to disable LinkedIn advertising cookies, please use the following link:

https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Data transfers to the U.S. are based on the EU Commission’s Standard Contractual Clauses. Details can be found here:

https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs

For details on how LinkedIn handles your personal data, please refer to LinkedIn’s Privacy Policy:

https://www.linkedin.com/legal/privacy-policy

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards for data processing in the United States. Every company certified under the DPF commits to adhering to these data protection standards. Further information on this is available from the provider at the following link:

https://www.dataprivacyframework.gov/participant/5448

YouTube

We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

For details on how they handle your personal data, please refer to YouTube’s Privacy Policy:

https://policies.google.com/privacy?hl=de

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards for data processing in the United States. Every company certified under the DPF commits to adhering to these data protection standards. You can obtain further information on this from the provider at the following link:

https://www.dataprivacyframework.gov/participant/5780

14. Application Process
Purpose: Conducting the application process and deciding on the establishment of an employment relationship

Processed data:
- Master data
- Contact information
- Application documents

Data sources: Directly from you and, where applicable, publicly available information (e.g., LinkedIn)

Legal basis: Art. 6(1)(b) GDPR in conjunction with § 26 BDSG

Recipients: Internal departments and IT service providers (processors)

Retention period: Maximum of 6 months after completion of the application process

Applicant pool: With consent, storage for a maximum of 2 years

No automated decision-making takes place.

15. Data Subject Rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and objection.

16. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority.