Privacy Policy

Privacy Policy

We take your data privacy serious. It is our highest priority to offer a solution, both self-hosted and in our managed cloud. We take on considerable additional effort to collect as little data as neccessary and handle it safely and securely.
Responsible person in terms of data protection laws, in particular the EU General Data Protection Regulation (DSGVO), is: Christopher Ernst.

Table of contents:

1. Your data protection rights
2. Collection of general information when visiting our website
2.1. type and purpose of processing
2.2. legal basis
2.3. recipient
2.4. storage period
2.5. provision mandatory or required
3. Cookies
3.1. type and purpose of processing
3.2. storage period and cookies used
4. Registration on the website
4.1 What data do we collect
5. Storage of contributions and survey responses. 5.1. responsible person
5.2. storage period
5.3. legal basis
6. Analysis Tools
7. SSL or TLS encryption
8. Data Transfers
9. Security of minors
10. Changes to our privacy policy
11. Questions about privacy

1. Your data protection rights

You can exercise the following rights at any time using the contact details provided by our data protection officer:

  • Information about your data stored by us and its processing (Art. 15 DSGVO),
  • Correction of incorrect personal data (Art. 16 DSGVO),
  • Deletion of your data stored by us (Art. 17 DSGVO),
  • Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 DSGVO),
  • objection to the processing of your data by us (Art. 21 DSGVO),
  • Data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 DSGVO).

If you have given us consent, you can revoke it at any time with effect for the future. You may at any time lodge a complaint with a supervisory authority, e.g. the competent supervisory authority in the federal state of your residence or the authority responsible for us as the controller. A list of supervisory authorities (for the non-public sector) with address can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

2. Collection of general information when visiting our website

2.1 Nature and purpose of processing:

When you access our website, i.e., when you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider and the like. In particular, they are processed for the following purposes:

  • Deliver our service to you
  • Ensuring a smooth connection setup of the website,
  • Ensuring a smooth use of our website,
  • Evaluating system security and stability,
  • To email you with essential product updates (registrated users)
  • To troubleshoot product functionality and fix bugs (registrated users)
  • To respond to legal requests or prevent fraud
  • for other administrative purposes.

We do not use your data to draw conclusions about your person and do not sell personal data to third parties. Information of this kind may be statistically evaluated by us in order to optimize our website and the technology behind it.

2.2 Legal basis:

The processing is carried out in accordance with Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website.

2.3. Recipients:

Recipients of the data may be technical service providers who act as order processors for the operation and maintenance of our website.

2.4. Storage period:

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For data used to provide the website, this is generally the case when the respective session has ended.

2.5 Provision prescribed or required:

The provision of the aforementioned personal data is not required by law or contract. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services and services may not be available or may be limited. For this reason, an objection is excluded.

3. Cookies

3.1 Nature and purpose of processing:

Like many other websites, we also use so-called "cookies". Cookies are small text files that are stored on your terminal device (laptop, tablet, smartphone or similar) when you visit our website. Through this, we obtain certain data such as IP address, browser used and operating system. Cookies cannot be used to launch programs or transfer viruses to a computer. Based on the information contained in cookies, we can facilitate your navigation and enable the correct display of our web pages. Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent. Of course, you can also view our website without cookies. Internet browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings. Please use the help functions of your Internet browser to find out how to change these settings. Please note that individual functions of our website may not work if you have disabled the use of cookies.

3.2 Storage duration and cookies used:

Insofar as you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:

Insofar as these cookies may (also) affect personal data, we will inform you about this in the following sections. You can delete individual cookies or the entire cookie inventory via your browser settings. In addition, you will receive information and instructions on how to delete these cookies or block their storage in advance. Depending on the provider of your browser, you will find the necessary information under the following links:

4. Registration on the website

To use certain functions, you can register on our website. The transmitted data is used exclusively for the purpose of using the respective offer or service. Mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration. In the event of important changes, for example for technical reasons, we will inform you by e-mail. The e-mail will be sent to the address given during registration. The processing of the data entered during registration is based on your consent (Art. 6 para. 1 lit. a DSGVO). A revocation of your already given consent is possible at any time. An informal communication by e-mail is sufficient for the revocation. The legality of the data processing already carried out remains unaffected by the revocation. We store the data collected during registration for the period that you are registered on our website. Your data will be deleted if you cancel your registration. Legal retention periods remain unaffected.

4.1 What data do we collect

  • Electronical identification data: including anonymized IP address, device & browser data;
  • Anonymized information about your use of our website: including how you end up on our website, what actions you perform and the pages you visited.
  • Registration information: When you register for an account, we collect your name, username, hashed password and email address.
  • Billing information: If you pay for cargoship, we will ask for your billing details including name, address and financial information depending on your payment method (stored by our payment service provider Stripe)

5. Storage of contributions and survey responses

5.1 Responsible party:

This website uses the open source survey tool formbricks. For more detailed information, visit privacy policy from formbricks: https://formbricks.com/privacy-policy

5.2 Storage period:

Contributions and survey responses, as well as related data, will be stored until it has been completely deleted or had to be deleted for legal reasons. The storage of the content is based on your consent (Art. 6 para. 1 lit. a DSGVO). A revocation of your already given consent is possible at any time. An informal communication by e-mail is sufficient for the revocation. The legality of data processing operations that have already taken place remains unaffected by the revocation.

5.3 Legal basis:

When personal data is collected, the content is stored on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). A revocation of your already given consent is possible at any time. An informal communication by e-mail is sufficient for the revocation. The author of a survey on our platform must ensure that he obtains the consent of the participants when collecting personal data.

6. Analysis Tools

This website uses the open source web analytics services Plausibke and Posthog. Plausible and Posthog use technologies that enable cross-page recognition of the user to analyze user behavior (e.g. cookies or device fingerprinting). The information collected by Plausible about the use of this website is stored on our servers. The IP address is anonymized before storage. The use of this analysis tool is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the anonymized analysis of user behavior in order to optimize both its web offering and its advertising. Insofar as a corresponding consent has been requested (e.g. consent to store cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time. The information collected by Matomo and Posthog about the use of this website will not be disclosed to third parties.

7. SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

8. Data Transfers

Cargoship is based in the EU and all form and user data is stored in Germany, EU. Only billing information processed by Stripe Inc. and anonymized personal data neccessary to provide this service may be transfered overseas.

9. Security of minors

Our Services are not intended for use by minors. Minors is defined here as persons who have not yet reached the age of 18, unless the laws applicable to you in your country define a different age for this purpose. We do not knowingly collect personal information from minors or allow them to register for our Services. If we become aware that we have collected the personal information of a minor, we may delete that information without further notice. If you believe that this is the case, please notify us.

10. Changes to our privacy policy

We reserve the right to adapt this data protection declaration so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

11. Questions about data protection

If you have any questions about data protection, please send us an e-mail at: hello@cargoship.sh.