Privacy Policy Hermes Fulfilment

Privacy policy of
Hermes Fulfilment GmbH,
Bannwarthstraße 5,
Headquarters
22179 Hamburg

for the website www.hermes-fulfilment.de

In the following data protection information, we inform you about the processing of personal data carried out by Hermes Fulfilment GmbH, Bannwarthstraße 5, Head Office, 22179 Hamburg ("Hermes Fulfilment" and/or "we" and/or "controller") in accordance with the GDPR and the Federal Data Protection Act (BDSG 2018).

Please read our data protection information carefully. If you have any questions or comments about our data protection information, please contact us at Datenschutz-HF(at)hermes-ws.com.

This privacy policy applies to data processing by Hermes
Fulfilment GmbH
Bannwarthstraße 5
Headquarters
22179 Hamburg

Contact details (general):
Telephone: +49 40 537 55 - 0
Fax: +49 40 537 54 - 870
Email: Datenschutz-HF(at)hermes-ws.com

represented by the managing directors:

Eva Witte,
Kevin Kufs,
Roy Smolders

Phone: +49 40 537 55 - 0
Fax: +49 40 537 54 - 870
Email: kontakt(at)hermes-ws.com

for the following website: www.hermes-fulfilment.de

You can contact the controller's data protection officer at

Hermes Fulfilment GmbH
Bannwarthstrasse 5
22179 Hamburg

Email: Datenschutz-HF(at)hermes-ws.com.

We collect data on user behavior on the website www.hermes-fulfilment.de (tracking data). This includes, among other things, which individual subpages (product detail pages) were accessed. For this purpose, we may set cookies in the browser used by the respective user. The collection of tracking data is generally only permitted if you have given your prior consent. You can give your consent by clicking the “Accept” button in the “cookie banner” displayed on this website. However, consent is not required for the processing of tracking data that is necessary for the website to function. This includes, for example, the setting of cookies for the purpose of displaying the shopping cart. We may use the information about your usage behavior to display offers that may be of interest to you on our website or to advertise to you on other websites using personalized content (e.g., retargeting). Insofar as personal data about your usage behavior on www.hermes-fulfilment.de can also be used by other providers, e.g., for the purpose of “enriching their own information,” such use will only take place in these cases if you have given your prior consent. In these cases, the further processing of the data collected on this website is regularly carried out under the sole responsibility of the providers. The providers may transfer the data to the USA as part of this further processing. The European Court of Justice has determined that the USA is a country with an insufficient level of data protection. In this context, there is a particular risk that your data may be processed by American institutions/authorities for control and surveillance purposes without sufficient legal recourse. We process tracking data that we collect and store ourselves exclusively in pseudonymized form. This prevents the data from being assigned to your person. If you want to delete individual cookies set in your browser or find out which service providers/providers have set cookies in your browser, you can do so via a “preference manager.” One such manager is available at www.youronlinechoices.com, for example. You also have the option of setting your browser to prevent cookies from being set or to only allow certain types of cookies to be set. Details on how to change the settings of common browser types (including Google Chrome and Firefox) can be found in section 4.2 of this privacy policy. 

This website uses cookies. Cookies are small text files that your browser automatically creates and stores on your device (laptop, tablet, smartphone, etc.). The cookie stores information that is related to the specific device used. However, this does not mean that we immediately obtain knowledge of your identity. Some of the cookies we use are deleted again after the end of the browser session (so-called session cookies). Other cookies remain on your computer and enable us to recognize your computer on your next visit (so-called permanent or cross-session cookies). These cookies in particular serve, among other things, to make our offer more attractive to you. Thanks to these files, it is possible, for example, to display information on this website that is specifically tailored to your interests.

According to legal requirements, storing information on end devices (desktops, cell phones, tablets, etc.)—e.g., by setting cookies—and retrieving information from end devices (tracking) is generally only permitted if you have given your prior consent. However, consent does not have to be given if such storage/retrieval is necessary for the website to function.

You have no right to object to the data processing required for the operation of the website.

You can use the website www.hermes-fulfilment.de without data from your device being retrieved or stored on it for purposes that are not necessary for the provision of this website. For this reason, only "basic tracking" is activated when you use this website, unless you have given your further consent.

Of course, you can set your browser so that it does not store our cookies on your device. The help function in the menu bar of most web browsers explains how you can prevent your browser from accepting new cookies, how you can have your browser notify you when you receive a new cookie, or how you can delete all cookies you have already received and block all future cookies.

To do this, please proceed as follows:
In Internet Explorer:
1. Select "Internet Options" from the "Tools" menu.
2. Click on the "Privacy" tab.
3. You can now configure the security settings for the Internet zone. Here you can specify whether cookies should be accepted or rejected, and if so, which ones.
4. Confirm your settings by clicking "OK."

In Firefox:
1. Select "Settings" from the "Tools" menu.
2. Click on "Privacy."
3. Select "Use custom settings for history" from the drop-down menu.
4. You can now set whether cookies should be accepted, how long you want to keep these cookies, and add exceptions for which websites you always or never want to allow to use cookies.
5. Confirm your settings by clicking "OK."

In Google Chrome:
1. Click on the Chrome menu in the browser toolbar.
2. Now select "Settings."
3. Click on "Show advanced settings."
4. Under "Privacy," click on "Content settings."
5. Under "Cookies," you can configure the following settings for cookies: • Delete cookies • Block cookies by default • Delete cookies and website data by default when you close your browser • Allow exceptions for cookies from specific websites or domains

If you want to delete individual cookies set in your browser or find out which service providers/providers have set cookies in your browser, you can also do this/find this out via a "preference manager." One such service is the YourOnlineChoices tool.

We use a consent tool from Usercentrics (Usercentrics GmbH, Rosental 4, 80331 Munich) to manage your settings and document the consent of users of our services. Usercentrics is used, among other things, to store cookie settings for the entire website. Usercentrics stores information about the categories of cookies used by the website and whether users have given or revoked their consent to the use of each category. This enables us to prevent cookies in each category from being set in the user's browser if consent has not been given for individual categories. Usercentrics uses cookies to store information, which have a normal lifetime of one year, so that the settings of returning visitors are saved. The legal basis for this is Article 6(1)(c) and (f) of the GDPR.

As already explained in section 4.1 of this privacy policy, we collect and process tracking data in part on the basis of consent. You give this consent by clicking on the "Accept" button displayed on the website in a banner that links to this consent text. By clicking on the "Accept" button, you give your consent for us to store data on your device (e.g., by setting cookies) or to retrieve data from your device. Furthermore, by clicking on the "Accept" button, you consent to the use of certain advertising functionalities from third-party providers, the use of which requires consent. You also have the option of clicking on "Settings" in the banner and managing your consent preferences there. You can change your consent and preferences at any time in our consent management system. You can access this on any page by clicking on the fingerprint in the lower left window. A distinction is made between "marketing cookies," "functional cookies," and "essential cookies." The data processing that takes place in connection with these advertising functions is described below (section 4.4.1. of this privacy policy).
All data processing covered by your consent, which you give by clicking on the "OK" button, serves the same purpose, namely "advertising."

Revocation of
all consents You can revoke all consents that you have given by clicking on the "Save settings" button displayed in the banner by clicking on the fingerprint in the lower left window.

For the purpose of designing this website in line with user needs and continuously optimizing it, we use the basic version of Google Analytics on the legal basis of Article 6(1)(f) GDPR (legitimate interest). The basic version of Google Analytics is a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies" (text files) that are stored on your computer and enable an analysis of your use of the website. On our behalf, Google will use this information to evaluate your use of the website and to compile reports on website activity. Google processes the data collected through the use of the "basic version" of Google Analytics exclusively on our instructions and for our purposes.

You can object to data processing by Google Analytics at any time by clicking on the fingerprint in the lower left window. The objection means that Google Analytics will no longer collect data on website.de from the device you used when you lodged the objection.

This website uses botsify, a live chat software from Botsify Inc. Botsify uses "cookies," text files that are stored on your computer and enable a personal conversation with you in the form of a real-time chat on the website. The data collected is not used to personally identify visitors to this website and is not merged with personal data about the bearer of the pseudonym. The legal basis for this data processing is Article 6(1)(f) GDPR (legitimate interest).

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA is used to check whether the data entered on this website (e.g., in a contact form) is entered by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. reCAPTCHA evaluates various information for the analysis (e.g., IP address, length of time spent on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are not notified that an analysis is taking place.

The storage and analysis of the data is based on Article 6(1)(f) GDPR (legitimate interest).

The website operator uses Google Ads. Google Ads is an online advertising program from Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms in Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on the user data available to Google (e.g., location data and interests) (target group targeting). As website operators, we can evaluate this data quantitatively, for example by analyzing which search terms led to the display of our advertisements and how many advertisements led to corresponding clicks. The legal basis for this is Article 6(1)(a) GDPR (consent).

This website uses the Google Remarketing service. Google Remarketing is an online advertising program provided by Google Ireland Limited, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). We use the remarketing function within the Google AdWords service. The remarketing function allows us to present you with advertisements based on your interests on other websites within the Google advertising network. To do this, your surfing behavior on our website is analyzed, e.g., which offers you have viewed. This allows us to show you personalized ads on the Google online search engine itself, so-called “Google Ads,” and on other websites even after you have visited our website. To do this, Google stores a cookie in your browser when you visit Google services or websites in the Google advertising network. This cookie is used to track your visits. The cookie is used to uniquely identify your web browser and not to identify you personally. It is possible that Google may use the data collected via this website about your usage behavior for its own purposes or for the purposes of other Google customers (e.g., to display personalized advertisements from third parties). Such further processing of the data and the processing of the data after its transmission by us to Google is carried out by Google as the sole data controller. In this context, Google, as the sole data controller, may store data about you in the USA. The European Court of Justice has determined that the USA is a country with an insufficient level of data protection. In this context, there is a particular risk that your data may be processed by American institutions/authorities for control and surveillance purposes without you having sufficient legal recourse against this. The legal basis for this data processing is Article 6(1)(a) GDPR (consent).

We also use the Customer Match service. This involves integrating a pixel into your browser. As a result, Google assigns you an identification number as a visitor to this website and can thus recognize you when you visit other websites, enabling the operator of this website to display personalized advertising to you or to decide not to display such advertising.

You can find more information about Google remarketing and Google's privacy policy at: www.google.com/privacy/ads/. Here you can also assert your rights as a data subject (e.g., right to erasure) with regard to the data that Google processes as the data controller. You can revoke your consent to the use of Google remarketing at any time by clicking on the fingerprint in the lower left window. By deselecting the “Marketing” category, you can revoke your consent to the use of Google remarketing.

A pixel from Facebook Ireland Limited (website custom audience pixel) is integrated into this website. This pixel collects information about the use of this website (e.g., information about articles viewed) by Hermes Fulfilemnt (GmbH) and Facebook Ireland Limited in joint responsibility and transmits it to Facebook Ireland Limited. This information can be assigned to you with the help of additional information that Facebook Ireland Limited has stored about you, e.g. based on your ownership of an account on the social network “Facebook.” Based on the information collected via the pixel, interest-based advertisements for our offers may be displayed in your Facebook account (retargeting). The information collected via the pixel may also be aggregated by Facebook Ireland Limited, and the aggregated information may be used by Facebook Ireland Limited for its own advertising purposes and for the advertising purposes of third parties. For example, Facebook Ireland Limited may infer certain interests from your surfing behavior on this website and also use this information to advertise third-party offers. Facebook Ireland Limited may also combine the information collected via the pixel with other information that Facebook Ireland Limited has collected about you via other websites and/or in connection with your use of the social network “Facebook,” so that Facebook Ireland Limited can store a profile about you. This profile may be used for advertising purposes. Facebook Ireland Limited is solely responsible for the permanent storage and further processing of the tracking data collected via the website custom audience pixel used on this website. In this context, Facebook Ireland Limited, as the sole data controller, may store data about you in the USA. The European Court of Justice has determined that the USA is a country with an insufficient level of data protection. In this context, there is a particular risk that your data may be processed by American institutions/authorities for control and surveillance purposes without you having sufficient legal recourse against this. The legal basis for this data processing is Article 6(1)(a) GDPR (consent).

You can find more information about data protection at Facebook Ireland Limited here. Here you will also find the option of asserting your rights as a data subject (e.g., right to erasure) against Facebook Ireland Limited. You can revoke your consent to the transfer of data to Facebook Ireland Limited through the use of the pixel on this website at any time by deselecting the “Marketing” category here, or you can revoke your consent at any time by clicking on the fingerprint in the lower left window.

We use processors to process your data. A processor is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller. Processors do not use the data for their own purposes, but carry out data processing exclusively for the controller.

In addition, we use other third-party partners who are necessary for the provision of services and the achievement of various purposes. We transfer personal data to these third-party partners if this is necessary for the provision of services.
The legal basis for this data transfer is Article 6(1)(b) and (f) of the GDPR.

If you are interested in Hermes as a potential employer, you can find out about vacancies and application opportunities on our website. Here you can also apply directly online using our application form. We use all personal data provided to us in your application exclusively for the purpose of conducting the application process. The legal basis for this is Article 6(1)(a) and (f) GDPR in conjunction with Section 26 BDSG. For further information, please refer to our special data protection notice for applicants.

Otto Group Talent Pool System

In some cases, we offer you the opportunity to be included in the Otto Group's internal Talent Pool System. The Otto Group Talent Pool System serves to identify, retain, and promote talent, as well as to secure succession by actively promoting internal mobility within the Otto Group. If you have consented to the transfer of your data to other Otto Group companies and have thus decided to have your data stored in the Otto Group Talent Pool System, we will transfer the data you have provided during the profile creation process to Otto (GmbH & Co KG) (hereinafter OTTO), which will store it in the Otto Group Talent Pool System. With regard to the inclusion of your person in the Otto Group's internal Talent Pool System and the provision of the Otto Group Talent Pool System, we are jointly responsible with Otto (GmbH & Co KG) and the other Otto Group companies that participate in the Otto Group's internal Talent Pool System. We are primarily responsible for the collection, transmission, and registration of your data, while OTTO is responsible for the storage of your data and the provision of the Otto Group Talent Pool System. After your data has been transferred to the companies participating in the Otto Group Talent Pool System by Otto (GmbH & Co KG), the group companies process this data as data controllers for purposes such as establishing contact. A potential application process then normally takes place directly via the company's processes.

Data processing is based on your consent (Article 6(1)(a) GDPR). You can revoke your consent at any time by sending an email to yournextmove(at)ottogroup.com.

We and OTTO are jointly responsible for the processing and are available to you as central points of contact in our respective areas of responsibility. Please contact yournextmove(at)ottogroup.com with any questions regarding data protection and to assert your rights as a data subject. You can also assert your rights against us. If you contact us, we will coordinate with each other in accordance with the joint responsibility agreement in order to respond to your request and ensure that your rights as a data subject are implemented.

On our website, we use social plugins from the social networks Facebook, WhatsApp, LinkedIn, and XING on the basis of Article 6(1)(f) GDPR in order to raise awareness of our company. The underlying advertising purpose is to be regarded as a legitimate interest within the meaning of the GDPR. Responsibility for data protection-compliant operation must be ensured by the respective providers.

The purpose and scope of data collection and the further processing and use of the data by the respective provider, as well as your rights in this regard and setting options for protecting your privacy, can be found in the respective data protection information of the provider, which we link to below.

By logging out of social network sites beforehand and deleting any cookies that have been set, you can prevent social networks from assigning the information collected about you during your visit to this website to your user account with the respective social network. If you do not want social networks to directly assign the data collected via our website to your profile, you must log out of the relevant social networks before visiting our website.

This website uses social plugins from Facebook and YouTube (Google). These are services provided by the US companies Facebook and Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google")).

When you visit a page that contains such a plugin, your browser establishes a connection to Facebook or YouTube and the content is loaded from these sites. Your visit to this website may therefore be tracked by Facebook and YouTube, even if you do not actively use the social plugin function. If you have an account with Facebook or YouTube, you can use such a social plugin and share information with your friends. We have no influence on the content of the plugins and the transmission of information.

Facebook and Google provide detailed information on the scope, type, purpose, and further processing of your data on their websites. Here you will also find further information on your rights and settings options for protecting your privacy.

Facebook privacy policy
Google's privacy policy

This website also uses a WhatsApp button (WhatsApp share button). This button allows you to share content from this page via the WhatsApp application on your mobile phone. The button is a hyperlink. When the button appears on this website, no personal data is transmitted to the operator of WhatsApp or other third parties. As soon as you use the WhatsApp button, the operator of WhatsApp learns what content is being shared and that the button on this website has been used. For more information on how the operator of WhatsApp handles personal data, please refer to WhatsApp's privacypolicy.

This website uses functions of the XING network. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany.
Each time one of our pages containing XING functions is accessed, a connection to XING servers is established. To our knowledge, no personal data is stored in the process. In particular, no IP addresses are stored and no usage behavior is evaluated.

The storage and analysis of data is based on Article 6(1)(f) GDPR (legitimate interest).

Further information on data protection and the XING Share button can be found in XING's privacy policy.

This website uses features of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Each time you access a page on this website that contains LinkedIn functions, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited this website with your IP address. If you click on the LinkedIn "Recommend" button and are logged into your LinkedIn account, LinkedIn can associate your visit to this website with you and your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the data transmitted or its use by LinkedIn.

The use of the LinkedIn plugin is based on Article 6(1)(f) GDPR (legitimate interest).

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

Further information can be found in LinkedIn's privacy policy.

This site uses the Google Maps map service. Google Maps is a map service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

In order to use the functions of Google Maps, information, including the IP address and the address entered in the route function, may be transmitted to the provider's servers. This information is usually transmitted to a Google server in the USA and stored there. When you visit a website that contains Google Maps, your browser establishes a direct connection to Google's servers, whereby the map content is sent to your browser and integrated by it. The provider of this site has no influence on this data transfer. According to current knowledge, this includes the following data:

• Date and time of the visit to the website in question,
• Internet address or URL of the website accessed,
• IP address, (start) address entered as part of route planning

Google Maps is used in the interest of an appealing presentation of our online offers and to make it easy to find the locations we have indicated on the website. The legal basis for this processing is Article 6(1)(f) GDPR. If you do not want Google to process data via this service, you can deactivate the use of JavaScript in your browser settings. Please note that in this case, the interactive map function of Google Maps cannot be used.
For more information on the handling of user data, please refer to Google's privacy policy.

Unfortunately, we are also being misused as the supposed sender in this scam. Specifically, this means that consumers are receiving fake emails in our name. These emails often even use the Hermes Fulfilment brand layout and can be difficult to distinguish from genuine emails from us.

The fraudsters want to exploit the trust between us and our customers in order to steal sensitive data (e.g., login details, customer data, payment information) or install malicious software (such as viruses or Trojans) on your computer or smartphone.
We do not create or send these emails, even if our name is used as the sender. Unfortunately, we therefore have no control over the sending of these unauthorized emails.

Here are some features that will help you recognize emails from us:
• We will never ask you for personal information via email, nor will we ask you to confirm personal data via a link in an email.
• You will only receive order confirmations and invoices from us for orders that you have actually placed.
• We only send emails with file attachments if you have explicitly requested them from us (e.g., operating instructions).
• Emails from us should not contain any spelling or grammatical errors, as they are always proofread before being sent.

How to deal with spam, phishing, and spoofing emails:
• We recommend that you delete suspicious emails immediately.
• Never open links or attachments in suspicious emails and do not disclose any personal information.
Our tip and service for you: If you are ever unsure, simply use our free callback service or send us an email at: kontakt(at)hermes-ws.com.

You have several ways to contact us: by email, phone, chat, application form, or post. When you contact us, we use the personal data you voluntarily provide us with for the sole purpose of contacting you and processing your request.

The legal basis for this data processing is Article 6(1)(a), Article 6(1)(b), Article 6(1)(c) GDPR, and Article 6(1)(f) GDPR.

With the exception of processing operations where we inform you in this privacy policy about the possibility of data being transferred to recipients based outside the EU, we do not transfer your data to recipients based outside the European Union or the European Economic Area. Data transfers are carried out on the basis of the EU Commission's standard contractual clauses.

The duration of storage of the data collected about you depends on the purpose for which we process the data. The data is stored for as long as it is necessary to achieve the intended purpose. If we are required by law (e.g., tax obligations) to store certain categories of data for a specific period of time, the data will continue to be stored after it is no longer necessary for the purpose for which it was collected, solely for the purpose of fulfilling the legal obligation. In such cases, the data will be blocked from access.

• Data in the internal credit agency: Generally 3 years. Information about outstanding payment claims is deleted once these have been settled. If these have not been settled, continued storage is reviewed after 4 years.
• Use of data for marketing purposes (without tracking): 3 years.
• Consent: Permanent storage for as long as the consent is continuously used (e.g., permanent sending of email newsletters).
• Information about the use of data for third-party advertising purposes for the purpose of providing information: 2 years.
• Tracking data: 2 years.
• Data for the purpose of implementing (advertising) objections: Unlimited storage.

You have certain rights in connection with our processing of your personal data. For example, you have the right to request information about the data we have stored about you. You can also revoke any consent you have given us and object to individual data processing operations. You also have the right to have incorrect data corrected and can request that we transfer your specific data in a common electronic format. In addition, you have the right to have the data we store about you deleted. Please note that we may be required by law to continue storing the data despite your assertion of your right to deletion. In addition, in certain circumstances, we have an interest in continuing to store your data that outweighs your interest in its deletion (e.g., if we still have outstanding claims against you).

In addition to the right to revoke your consent given to us, you also have the following rights if the respective legal requirements are met:

• the right to obtain information about your personal data stored by us (Article 15 GDPR); in particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, and the origin of your data if it was not collected directly from you;
• the right to have inaccurate data corrected or complete data completed (Article 16 GDPR);
• the right to erasure of your data stored by us (Article 17 GDPR), unless we are required to comply with any statutory or contractual retention periods or other legal obligations or rights to further storage (e.g., if we still have outstanding claims against you);
• the right to restrict the processing of your data (Article 18 GDPR), insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to have it deleted; the controller no longer needs the data, but you need it to assert, exercise, or defend legal claims, or you have objected to the processing pursuant to Article 21 GDPR;
• the right to data portability (Article 20 GDPR), i.e. the right to receive selected data stored by us about you in a commonly used, machine-readable format or to request its transfer to another controller;
• the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.

You can assert the aforementioned rights you have against us at kontakt(at)hermes-ws.com.

Click here for the data protection information for applicants

As of January 2023