Privacy Policy

Orbit Logistics recognizes the importance of protecting your privacy when using our websites and services and we therefore take the protection of your personal information very seriously. We would like to inform you about the collection and use of personal data on our website.

If you have any questions or comments about our privacy policy, please contact datenschutz@orbitlog.com.

Responsible Party:

Orbit Logistics Europe GmbH
Maybachstraße 27
51381 Leverkusen
Email: datenschutz@orbitlog.com

1. Collection of Data

You can generally use our website without disclosing your personal data. When visiting the website, data such as your internet service provider, pages accessed, and your IP address may be stored for security purposes. This data may theoretically allow identification, but no personal use is made. Data may be analyzed for statistical purposes, maintaining user anonymity.

2. Collection and Processing of Personal Data

Personal data is only collected when you provide it voluntarily, for example, by filling out a contact form or sending an email. Data is not shared with third parties without your explicit consent or a legal obligation.

Legal Basis:

• Art. 6(1)(f) GDPR – our legitimate interest in communicating with users and responding to inquiries
• Art. 6(1)(b) GDPR – if the processing is necessary for pre-contractual steps
• Art. 6(1)(a) GDPR – where explicit consent is required (e.g., download of whitepapers)

3. Data Processing When Visiting the Website

Each time our website is accessed, technical data is automatically collected by our IT system. This includes:

• IP address of the accessing device
• Date and time of access
• Name and URL of the accessed file
• Website from which the access occurred (referrer URL)
• Browser type and version, and possibly the operating system used
• Name of your internet service provider

Hetzner stores log data in accordance with standard hosting practices. [PLACEHOLDER: Please confirm specific retention period and any additional metadata collected.]

This data is processed exclusively to ensure the proper functioning, stability, and security of the website. No personal usage or correlation with other data sets takes place.

Processing is based on Art. 6(1)(f) GDPR. Our legitimate interests include:

• Ensuring website availability and performance
• Preventing misuse and detecting security incidents
• Diagnosing and resolving technical issues

Access to log files is restricted to Orbit Logistics’ internal IT team. Evaluations occur only when necessary, such as in response to security concerns or technical errors.

IP addresses are logged in full only within the server log files. In the context of Google Analytics, IP addresses are anonymized (see “Google Analytics”).

The data is processed exclusively on servers hosted by Hetzner Online GmbH within the European Union. There is no transmission of this data to third countries or external service providers.

A legitimate interest assessment document under Art. 6(1)(f) GDPR is available or will be prepared within our data protection management framework.

4. Use of Data

We use your personal data solely to respond to your inquiries and contact requests submitted through the website, particularly via:

• Contact form
• Callback request
• Potential gated content such as blog access or whitepapers (if implemented in the future)

The legal basis for this processing is Art. 6(1)(f) GDPR – our legitimate interest in communicating with users and responding to inquiries. Data is not processed beyond the scope necessary to handle your request.

The data is transmitted directly via email to designated Orbit Logistics GmbH contacts. It is not stored in a website database or accessed by third-party developers or service providers. Only authorized Orbit employees process this data.

Data is stored only for as long as necessary to fulfill your inquiry, unless legal retention periods apply. Our internal deletion procedures are documented under our ISO 27001-certified information security management system (ISMS).

5. Your Rights

You have the right to:

• Access and review your personal data (Art. 15 GDPR)
• Correct any inaccurate data (Art. 16 GDPR)
• Erase your data (Art. 17 GDPR)
• Restrict processing (Art. 18 GDPR)
• Object to processing (Art. 21 GDPR)
• Data portability under certain circumstances (Art. 20 GDPR)
• Withdraw consent at any time with future effect (Art. 7(3) GDPR)
• Lodge a complaint with the competent supervisory authority (Art. 77 GDPR)

Please contact us via datenschutz@orbitlog.com.

6. Retention of Data

Personal data is only stored as long as necessary to fulfill the requested service, unless legal retention obligations apply. Internal documentation of retention periods exists as part of our ISO 27001-certified ISMS.

7. Cookies and Consent Tool

Cookies are used in some areas to customize services. You can configure your browser to reject cookies or notify you before storing them. Persistent cookies will be explicitly indicated.

A cookie consent tool will be implemented to ensure compliance with applicable legal requirements. [PLACEHOLDER: Insert tool name and configuration details once finalized.]

8. Legal Bases for Processing

The processing of personal data on this website is based on the following legal grounds under GDPR:

• Art. 6(1)(a) – Consent (e.g., cookie-based analytics)
• Art. 6(1)(b) – Performance of a contract or pre-contractual steps (e.g., contact form requests)
• Art. 6(1)(f) – Legitimate interests (e.g., ensuring website security and functionality)

9. Security

We implement technical and organizational security measures aligned with current technological standards, including modern storage technologies, antivirus software, and firewalls. We continuously adapt these measures.

10. Social Media Plugins and Embeds

No social media plugins or third-party media embeds (e.g., YouTube, LinkedIn, Facebook) are used on the current version of the website.

11. Google Analytics and Remarketing

We use Google Analytics 4. Your IP address is anonymized. Google Analytics uses cookies for traffic analysis. Data may be transferred to servers in the USA with appropriate safeguards.

You can prevent tracking by installing the browser plugin: http://tools.google.com/dlpage/gaoptout?hl=de

A cookie consent tool will manage your preferences. [PLACEHOLDER: Insert tool name and link once implemented]

12. Hosting and Service Providers

Our website is hosted by Hetzner Online GmbH.
Website development is managed by Lamattina Digital. The service provider does not have access to personal data submitted through the contact form.

13. Email and CRM

Form submissions are handled via Orbit’s own email server. We do not perform automated transfers of personal data to CRM systems. There is no integration with Zoho.

14. Fonts

Google Fonts are currently hosted locally to prevent unnecessary data transfer to third-party providers.

15. Data Processors and Transfers

We do not transfer your data to countries outside the EU/EEA. Where technically unavoidable, appropriate safeguards under Art. 44 ff. GDPR are implemented, though no such cases are presently in use.

16. Automated Decision-Making

We do not use your data for automated decision-making or profiling pursuant to Art. 22 GDPR.

17. Data Deletion

We follow a structured deletion concept aligned with our ISO 27001 certified ISMS.

18. Certification and Internal Governance

Orbit Logistics GmbH is ISO 27001 certified. Roles and responsibilities for data access are clearly defined and documented.

19. External Links

Our website may include links to external websites not covered by this privacy policy.

20. Newsletter

We do not offer newsletter or direct marketing services via this website.

21. Chatbot

No chatbot solution is currently active on this website. Future implementations will be evaluated for data protection compliance and reflected in this policy.