Privacy policy

1. Controller

E. Rossik Transport & Logistics GmbH, Rudolf Diesel-Straße 2, 2000 Stockerau, Österreich

Contact: rossik@rossik.eu, +43 2266 61577-0

2. The essentials

On this website:

• no cookies and nothing is stored on your device
• no tracking, no advertising, no social media plugins
• fonts and all files come from our own server, not from Google or other providers
• form data is not stored on the website but forwarded to us by email

3. Hosting (Cloudflare)

The website is delivered via Cloudflare Pages, provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit, Cloudflare processes technically necessary data: IP address, date and time, requested address, referrer, browser and operating system.

The purpose is to deliver the website and protect it against attacks. The legal basis is our legitimate interest in a secure and working website (Art. 6(1)(f) GDPR).

Cloudflare is certified under the EU-US Data Privacy Framework, so the European Commission's adequacy decision of 10 July 2023 applies to transfers to the USA. In addition, we have concluded a data processing agreement with standard contractual clauses with Cloudflare.

4. Visitor statistics (Cloudflare Web Analytics)

To see which pages are used, we use Cloudflare Web Analytics. It works without cookies and without storing anything on your device and does not build profiles. It records the page visited, the referring page, browser, device type, country and loading times. We only see aggregated figures.

The legal basis is our legitimate interest in improving the website (Art. 6(1)(f) GDPR). Section 3 applies to the transfer to the USA.

5. Request form, email and phone

When you contact us via the form, by email or by phone, we process your details: request type, name, company, email address, phone number, transport details and your message. We use them only to answer your request and, where applicable, to prepare a quote.

For transport requests the legal basis is taking steps prior to entering into a contract (Art. 6(1)(b) GDPR); for other requests it is our legitimate interest in answering them (Art. 6(1)(f) GDPR).

The form forwards your details by email to our mailbox. Our email system is Microsoft 365 (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). The website itself does not store form data.

We delete your details once they are no longer needed. If an order results, we keep the records as long as the law requires, usually seven years (§ 132 Austrian Federal Fiscal Code, § 212 Austrian Commercial Code).

6. Spam protection (Cloudflare Turnstile)

On the contact page, Cloudflare Turnstile checks whether a human is submitting the form. For this, Cloudflare processes technical data such as IP address, browser information and characteristics of the interaction. Turnstile is not used for advertising.

The legal basis is our legitimate interest in protecting the form against abuse (Art. 6(1)(f) GDPR). Provider and transfer as in section 3.

7. Applications

If you apply to us, we process your documents for the application process (Art. 6(1)(b) GDPR). If no employment results, we delete them seven months after the process ends, in line with the deadlines for claims under the Austrian Equal Treatment Act. We keep them longer only with your consent.

8. Links to other services

We link to our Facebook and Instagram profiles and to our customer portal at login.rossik.eu. These are plain links. No data is transferred until you click a link. The linked services have their own privacy notices.

9. Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability (Art. 15 to 20 GDPR). Where we process data on the basis of legitimate interests, you may object (Art. 21 GDPR). You can withdraw any consent at any time.

To do so, write to rossik@rossik.eu.

You can also lodge a complaint with the supervisory authority: Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, Austria, www.dsb.gv.at.

We do not make automated decisions within the meaning of Art. 22 GDPR.