Privacy Statement

Privacy Policy – Website and Shipping of Valuables and Goods

This privacy policy provides an overview of how we process personal data on our website https://www.gorocket.com and in the context of our shipping platform for valuables and goods, under what circumstances we disclose data, and what rights you have regarding your personal data.

1. Controller

The controller responsible for the processing of your personal data is:

GoRocket GmbH & Co KG,
Neubaugasse 13, A-1070 Vienna
datenschutz@gorocket.com
(hereinafter referred to as “GoRocket” or “we”)

In accordance with applicable law, no data protection officer has been appointed.

2. Affected persons

This privacy statement is addressed to:

  • visitors to our website,
  • customers of our logistics brokerage and insurance services or their representatives,
  • recipients of parcels from our customers, and
  • Contact person with business partners.

3. Processing purposes, data and legal bases

3.1 Site Delivery and Site Security

When you access the website, your browser automatically transmits personal data such as your current IP address and other information from your system to our server (e.g. current browser version, screen resolution). This data is required to provide you with the content of our website and to ensure its correct presentation. Our server automatically creates logs from this connection data to prevent attacks caused by server overloading or unauthorized access.

This processing is carried out on the basis of our legitimate interests in providing a modern website and to ensure website security (Art 6 (1) lit f GDPR).

3.2 Contact forms and communication

You can send us inquiries about our company or our services using the contact details or forms provided. In these cases, we process the data you provide (e.g. name, address, message) to process your request. Some of the data may be marked as mandatory fields. You are not required to provide this data. However, without providing this information, we may not be able to process your request or provide our services.

This processing takes place in the case of requests from individuals to process your request as part of the implementation of pre-contractual measures or the fulfilment of contractual obligations (Art 6 (1) lit b GDPR). In addition, we process the requestors' personal data on the basis of our legitimate interests in documenting and processing business cases (Art 6 (1) lit f GDPR).

3.3 Shipping of securities (transport, insurance) — shipper/ representative

In accordance with our framework agreement, our services are addressed to senders in the watch and jewelry industry. In doing so, we process data from entrepreneurs and/or their representatives. The processed data includes:

  • personal details (name, contact details)
  • correspondence
  • Copy of identity document of person authorised to sign
  • Associated company data (company, commercial register number, business address, company register extract, VAT number,...)
  • Contract data (including order confirmation and insurance certificate)
  • Package and shipping data (security or goods value, sealed bag number, QR code for synQRE® recording for collector and recipient, delivery note, collection date and location, delivery date and location, customer signature and recipient signature)
  • Data for customs clearance in case of shipment to third countries

The processing is carried out to carry out pre-contractual measures or to fulfill a contract with the person concerned (sole trader) (Art 6 (1) lit b GDPR) or our legitimate interests in verifying the legitimacy of authorised signatories of our corporate customers and the documentation of business cases (Art 6 (1) lit f GDPR).

3.4 Dispatch of securities and goods (transport, insurance) — recipient

When providing our services, we also process the personal data of the recipients (name, address, signature). We receive this data from our customers (senders).

This processing is carried out on the basis of the contract concluded by the recipient with the sender (Art 6 (1) lit b GDPR. In addition, we process your data on the basis of our legitimate interests in documenting business cases and proving acceptance of the delivered packages (Art 6 (1) lit f DSGVO).

3.5 Settlement of claims and insurance claims

When processing claims and insurance claims, we also process other data that you provide to us or that we collect (photos, comments on the damage and possible causes, correspondence, police report, etc.).

This processing is carried out to fulfill contractual obligations vis-à-vis data subjects (sole trader, recipient) (Art 6 (1) lit b DSGVO), in addition on the basis of our legitimate interests in documenting and handling claims and in asserting, exercising or defending legal claims (Art 6 (1) lit f GDPR).

3.6 Correspondence with business partners — contacts

When providing our services and handling claims and insurance claims, we process personal data from our business partners' contacts (name, contact details, correspondence). This processing is carried out on the basis of our legitimate interests in the proper processing and documentation of business cases (Art 6 (1) lit f GDPR).

3.7 Cookies

3.7.1 What are cookies

We also use cookies on this website. These are small text files that can be stored on your device while you visit our website and store certain information about you. Cookies cannot access, read, or change other data stored on your device. When we talk about “cookies,” we include other technologies with similar purposes, such as pixel tags.

3.7.2 Types of cookies

We use two types of cookies on our website:

(i) Necessary cookies: Without necessary cookies, the proper functionality of our website would not be guaranteed or would only be guaranteed to a limited extent. The use of necessary cookies on our website is possible without your consent. However, you can disable cookies at any time by changing your browser settings. A detailed description of the necessary cookies used and the respective processing purposes can be found below.

Legal basis: Section 165 (3) Telecommunications Act 2021

(ii) Optional cookies: These types of cookies can be used to improve our website, optimize your user experience, analyze user behavior, or personalize marketing activities. Optional cookies can also be used by external advertising companies (“third party cookies”). Optional cookies are only used with your consent, which you can give by clicking on the “Accept all” button on our website's cookie banner. This consent can be withdrawn at any time with effect for the future. A detailed description of the optional cookies used and the respective processing purposes can be found below.

Legal basis: Article 6 (1) (a) GDPR — consent

3.7.3 Necessary cookies used

Namn: CookieScriptConsent
Purpose: Collection of accepted/rejected cookies
Expires after 1000 days

3.7.4 Optional cookies used

Nom: _ga
Purpose: This cookie name is linked to Google Universal Analytics. This is a major update to Google's most-used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client ID. It is included in every page request on a site and is used to calculate visitor, session, and campaign data for site analytics reports.
Expires after: 2 years

Namn: _gid
Purpose: This cookie is set by Google Analytics. It stores and updates a unique value for each page visited and is used to count and track page views.
Expires after: 1 day

Namn: _gat_gtag
Purpose: This cookie is part of Google Analytics and is used to limit requests (throttling request rate).
Expires after: Session

Namn: _dc_gtm
Purpose: This cookie name is linked to Google Tag Manager and is used to control the loading of a Google Analytics script tag.
Expires after: Session

4. Analysis tools and advertising

4.1 Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to integrate tracking or statistics tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies and does not carry out any independent analyses. It is only used to manage and run the tools integrated through it. However, Google Tag Manager collects your IP address, which can also be transferred to Google's parent company in the United States.

Google TagManager is used on the basis of Art. 6 para. 1 lit. a DSGVO and, if we ask you for your express consent to transfer data to a third country, Art. 49 para. 1 lit. a GDPR; consent can be withdrawn at any time with effect for the future.

4.2 Google Analytics

This website uses features of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics allows us to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, length of stay, operating systems used and origin of users. This data can be combined by Google to form a profile that is assigned to the respective user or their device.

In addition, Google Analytics allows us to record your mouse and scroll movements and clicks, among other things. In addition, Google Analytics uses various modelling approaches to supplement the collected data sets and uses machine learning technologies for data analysis.

Google Analytics uses technologies that enable the user to be recognized for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website can be transferred to a Google server in the USA and stored there.

The use of this analysis tool is based on Art. 6 para. 1 lit. a DSGVO and, if we ask you for your express consent to transfer data to a third country, Art. 49 para. 1 lit. a GDPR; consent can be withdrawn at any time with effect for the future.

4.3 Google Ads Retargetting

We use the Google Ads Retargeting service on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

This is a Google feature that makes it possible to identify former visitors to our website and then address them again. For this purpose, visitors are “marked” via cookies and then added to a remarketing list (RLSA).

The use of this analysis tool is based on Art. 6 para. 1 lit. a DSGVO and, if we ask you for your express consent to transfer data to a third country, Art. 49 para. 1 lit. a GDPR; consent can be withdrawn at any time with effect for the future.

5. Storage period

Personal data is stored until the end of the contractual relationship with our customers and within the framework of legal retention periods (e.g. 7 years for invoices). In addition, insofar as there are legitimate interests in further processing (e.g. to secure evidence and to assert, exercise or defend legal claims).

The storage period of our cookies can be found above under point 3.7.

6. Recipients and transfer of data

In order to provide our services and to protect our business interests, data may be passed on to third parties who act on our behalf (in particular IT service providers, contract processors, marketing agencies).

In particular, when using the “Webflow” tool, we transfer your data (name, email, IP address) to Webflow Inc., 398 11th St HQ, San Francisco, USA, which acts as our contract processor. “Webflow” is an online toolkit that helps us with the technical preparation of our website.

As part of our services and the settlement of claims and insurance claims, personal data may also be passed on to independent third parties who process this data on their own behalf (e.g. parcel services such as DHL or FEDEX, insurance companies or lawyers). The specific parcel service will be notified to the customer in accordance with the provisions of the framework agreement.

We also transfer your data to advertising and web analysis partners (e.g. Google) who provide certain services in connection with our website.

Some of these recipients may be located in countries outside the EU or the EEA which the EU Commission has not (yet) certified an adequate level of data protection (e.g. the USA). We would like to point out that the level of data protection in these countries is not the same as within the EU or the EEA. In addition, it is possible that this data is subject to access by local authorities or courts in accordance with the local regulations of the third country and that you, as a data subject, are not entitled to legal protection options comparable to the GDPR.

However, when we transfer personal data to such third countries, we implement appropriate security guarantees to ensure that your rights are protected in accordance with the provisions of the GDPR. Further details about the security guarantees used and copies of the respective agreements are available upon request at info@gorocket.com.

7. Your rights with regard to your data

Within the framework of legal provisions, you have the rights in accordance with Articles 12 to 23 GDPR with regard to the processing of your personal data:

  • right to information,
  • right to correction and deletion,
  • right to restrict processing,
  • right to object to processing based on legitimate interests,
  • right to withdraw consent under data protection law,
  • the right to data portability of information provided by you, and
  • Right to lodge a complaint with the competent supervisory authority (in Austria: data protection authority, www.dsb.gv.at)

We do not process your data for the purpose of automated decision-making in individual cases (Art 22 GDPR).

For questions about data protection or inquiries about your rights, please contact datenschutz@gorocket.com

8. Updates

If there are changes in our process flow or new developments in legal regulations, we will update this privacy policy. You should therefore check this data protection information regularly to find out what is up to date.

Status: January 2023