Privacy Policy

KUNBUS GmbH operates the website www.kunbus.com (hereinafter referred to as "website") and provides the services offered therein and is therefore responsible for collecting, processing and using personal data within the meaning of the General Data Protection Regulation (GDPR), new Federal Data Protection Act (Bundesdatenschutzgesetz - BDSG-neu) and German Teleservices Act (Telemediengesetz - TMG).

Please read below for information on the processing of personal data when using our website. We always apply the principle of data economy, meaning that we collect and process personal data only if you have given your consent for us to do so, the law explicitly permits and/or prescribes it or it is necessary for operating the website.

1. Security

The data entered on the website is transferred to our server via the internet in encrypted form (state-of-the-art encryption). Our IT systems are continuously secured through technical and organisational measures.

2. Collection, storage and use of personal data

2.1 Personal data

The term "personal data" defines individual details on personal or factual circumstances of a certain or determinable natural person (data subject).

2.2 Collection, processing and use of personal data

The scope and type of collection and use of your personal data depends on whether you visit our website solely for informational purposes or if you also use functions such as the contact form or the transfer of documents in the "Career" section. We collect, store and process your data for providing and improving our services, technical administration, improving our products and services and our own marketing purposes. When using our website solely for informational purposes, we automatically collect, store and use only data which your browser transfers to our server as it is technically required for displaying a stable website. This information contains details about the browser (type, language, version), your operating system, internet service provider, your IP address, date and time of access, websites through which you have accessed our website, time zone differences (to GMT), content of the query, access status / http status code and data volume (transfer rate). The legal basis for this is stated in Art. 6 (1) p. 1 lit. f GDPR. Access is logged at every visit to our website (access log). The data is recorded automatically in the log file of our system and differs depending on the use of our website. This is data and information of computer systems of the accessing computer, such as information on the browser type and version, operating systems, IP address, date and time of access, websites through which the user's system accesses our website and websites that are accessed by the user through our website. We do not store this data together with other personal data. However, it is necessary to store the log files as the website cannot be displayed otherwise. The legal basis for this is stated in Art. 6 (1) lit. f GDPR. We use this data for optimising the website and securing our IT systems. We do not analyse this data for marketing purposes nor do we transfer it. The stored log files serve to further improve our website and services offered as well as the management of server capacities.

If you contact us via e-mail or contact form, the data stated in the e-mail or contact form are transferred in addition to the data stated above. This data is stored for the purpose of responding to your query and/or contacting you again in the future, if required. The legal basis for this is stated in Art. 6 (1) lit. a and b GDPR.

As soon as you have applied for one of our job vacancies via e-mail, our Data protection information for applicants apply. Your documents will be accessible to employees involved in the recruiting process only.

2.3 Storage period

Personal data provided to us through the website is only stored until it has served the purpose for which it was entrusted to us. The storage period for certain data can be up to 10 years or longer if retention periods under commercial and tax law must be complied with.

2.4 Disclosure of data / transfer to third parties

We use external service providers for processing your data in some cases. They have been carefully selected and engaged by us, are bound to follow our instructions and are regularly checked.

Your personal data is only transferred to third parties or otherwise transferred if this is necessary for the performance of a contract or invoicing or you have previously given your consent for us to do so. Within the scope of a complaint, for example, the service providers engaged by us (such as logistics companies) are provided with the data required for processing an order. Our service providers may only use the data thus transferred for the completion of their task. Any other use of the information is prohibited and none of the service providers entrusted by us engage in such activities.

Besides, we shall never sell your data to third parties or otherwise transfer it without your consent. This rule applies in all cases, except a legal obligation states otherwise (e.g. information to certain authorities within the scope of their legal tasks) or if it is necessary for enforcing our rights or services, particularly for the assertion of claims arising from the contractual relationship.

2.5. Use of cookies

We use cookies to improve the usability and security of the website and for pseudonymised reach measurement. These cookies are transferred from our server or a third-party server to the user's browser. Cookies are small files that are stored on your device which the browser accesses when in use. You can opt out of cookies:

You can also adjust your browser settings to block cookies. However, with both types of deactivation, we cannot guarantee the full functionality of our website.

3. Inclusion of third-party services

We use the services of YouTube for playing videos. Our videos have been embedded in expanded data protection mode. This may not be the case with third-party provider videos to which we refer. YouTube generally uses cookies for collecting information for purposes such as the collection of video statistics on the visitors to its website. This also results in a link being established to the Google DoubleClick network. Starting the video may trigger further data processing activities. We have no control over this. For further information on data protection at YouTube, please read the YouTube privacy policy at: https://www.youtube.com/t/privacy_at_youtube.

Our website uses Matomo (formerly Piwik), a web analysis service of InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand (hereinafter referred to as: InnoCraft). Matomo uses cookies, which are stored on your end device and which enable an analysis of your use of our website. For this analysis the cookies are stored on your computer. The information collected in this way is stored exclusively on our server. Our website uses Matomo with the setting "Anonymous Visitors' IP addresses". This means that IP addresses are processed in a shortened form, so that a direct personal reference can be excluded. The IP address transmitted by your browser via Matomo is not merged with any other data collected by us. We use Matomo for the purpose of analysing the use of our website and to continuously improve individual functions and offers as well as the user experience. Through the statistical evaluation of user behaviour we can improve our offer and make it more interesting for you as a user. This is also our legitimate interest in the processing of the above data by the third party provider. The legal basis is Art. 6 (1) lit. f GDPR. You can prevent the evaluation by deleting existing cookies and deactivating the storage of cookies in the settings of your web browser. Please note that in this case you may not be able to use all the functions of this website to their full extent. Matomo is an open source project. Contact details of the third party supplier: InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. Further information of the third party provider on data protection can be found on the following InnoCraft websites: Privacy Policy: https://matomo.org/privacy-policy/ Information on data protection: https://matomo.org/privacy/ The data will be deleted as soon as they are no longer necessary for the purpose of their collection.

We may also use the Facebook social media plug-in for analysing, optimising and operating our website (within the meaning of Art. 6 (1) lit. f GDPR). This plug-in is operated by Facebook Inc. (1 Hacker Way, Menlo Park, California 94025, USA). You can identify if this plug-in has been installed by the Facebook logo and/or the terms "Like" and "Share" in the respective colours. For information on all Facebook plug-ins go to: https://developers.facebook.com/docs/plugins/ Facebook states that it conforms with European data protection law and is certified under the Privacy Shield agreement: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active. The plug-in creates a direct link between your browser and the Facebook servers if you use our Facebook link to go to our Facebook page. We do not have any influence whatsoever over the nature and scope of data that is transferred to the Facebook servers by the plug-in, but at a minimum, the IP address and any Facebook account you may already have may be transferred. You can find detailed information in this respect at: https://www.facebook.com/help/186325668085084. If you use the functions of the plug-in, by sharing or "liking" a post, for instance, the respective information is also transferred to Facebook Inc. If you wish to prevent Facebook Inc. from linking this data with your Facebook account, please log out from Facebook before visiting this website and delete the stored cookies. You can adjust further settings for the processing of data for advertising purposes, or object to the use of your data for advertising purposes, in your Facebook profile. This is the link to the settings: Facebook profile settings: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen Cookie opt-out page of the US website: https://optout.aboutads.info/?c=2#!/ Cookies opt-out page of the European website: https://optout.networkadvertising.org/?c=1#!/ You can read which data is collected, used and processed by Facebook for which purpose and to which extent as well as your rights and settings options to protect your privacy in the Facebook privacy policy. Link to the Facebook privacy policy: https://www.facebook.com/about/privacy/.

If your subscribe to our newsletter, we transfer the data entered when you subscribe to the newsletter to our service provider, Campaign Monitor. Compliance with the GDPR is ensured in this case https://www.campaignmonitor.com/trust/gdpr-compliance/ as well as the data security measures stated when you follow this link: https://www.campaignmonitor.com/trust/security/. When recording and managing your data, we may use the platform provided by Salesforce.com Germany GmbH, Erika-Mann-Str. 63 in 80636 Munich, Germany. The data may be stored at the parent company, The Landmark@One Market Street, Suite 300, San Francisco, CA 94105, USA. You can read the Salesforce privacy policy here: https://www.salesforce.com/de/company/privacy/.

KUNBUS uses a live chat of the company Userlike UG, Probsteigasse 44-46, 50670 Cologne, Germany. You can use the live chat like a contact form to chat with our employees in almost real time. At the start you can enter your name and e-mail address. Depending on the course of the conversation with our employees, further personal data may be entered by you in the chat. The type of this data depends strongly on your request or the problem you describe to us. The processing of all these data serves the purpose of providing you with a fast and efficient way of contacting us and thus improving our customer service. All our employees have been and will be trained on the subject of data protection and instructed on the secure and trustworthy handling of customer data. All our employees are obliged to maintain confidentiality and have signed an addendum to their employee contracts accordingly to the obligation to maintain confidentiality and to observe data protection. When you visit our website, the chat widget is loaded in the form of a JavaScript file from AWS Cloudfront. The chat widget technically represents the source code that runs on your computer and enables the chat. Furthermore, KUNBUS saves the history of the live chats for a period of 6 months. This serves the purpose of saving you from possibly extensive explanations about the history of your request as well as the constant quality control of our live chat offer. The processing is therefore permitted in accordance with Art. 6 para. 1 letter f of the German Data Protection Act (DSGVO). If you do not wish this, you are welcome to let us know by using the contact details listed below. Saved live chats will then be deleted by us immediately. The storage of chat data also serves the purpose of ensuring the security of our information technology systems. This is also in our legitimate interest, which is why processing is permitted under Art. 6 Par. 1 Letter f of the German Data Protection Act. Further information can be found in the data protection regulations of Userlike UG.

4. Right to object and to information on, amendment, correction and deletion of data

As the data subject, you have the right to information on the use and storage and/or processing of your personal data. You also have the right to the correction of incorrect data as well as the blocking, completion and deletion thereof.

You may object to the use of your data for the above purposes at any time and with future effect without you incurring any other costs but those for the transfer according to the basic tariffs. On request, we will provide you with a copy of your personal data in a structured, standard and machine-readable format.

For information on your personal data, to request the correction of incorrect data, to block and/or delete such data and to exercise your right to object as well as for any other questions on the use of your personal data, please do not hesitate to contact us at: KUNBUS GmbH, Heerweg 15c, 73770 Denkendorf, Germany; datenschutz@kunbus.com.

5. Complaints to supervisory authorities

In accordance with Art. 77 GDPR, data subjects have the right to complain to the competent supervisory authority if they believe that their personal data is being illegally processed. The competent supervisory authority is the State Data Protection and Freedom-of-Information Officer (Landesbeauftragter für Datenschutz und Informationsfreiheit) of the State of Baden-Württemberg.

6. Exclusion of liability

All of the information contained on this website has been diligently checked. However, we do not assume any liability that the contents of our own website are accurate, complete and up-to-date at all times. We exclude liability for external links that refer to third-party websites and their contents.

7. Mobile devices

The provisions of this Privacy Policy also apply to mobile access and the use of mobile devices.

8. Amendments to the Privacy Policy

We reserve the right to amend our Privacy Policy if this is necessary due to changed security and data protection measures.