Processing of personal data

1. General information

1.1 Applicable data protection laws

Winney GmbH is responsible for the privacy and protection of your data. We process personal data exclusively in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

Since Winney GmbH provides postal services under the TELEGA or brand name, we are also obliged to maintain postal secrecy in accordance with the Postal Act (PostG).


1.2 Information security

Winney GmbH protects your personal data from loss and misuse by using appropriate technical and organizational security measures. This also includes the transmission of your data entered on the TELEGA website using SSL encryption. We reserve the right to adapt security and data protection measures if this becomes necessary for technical reasons.


1.3 Contact details of the person responsible and the data protection officer

The person responsible for data processing in accordance with Article 4, paragraph 7 of the GDPR, or the telecommunications service provider in accordance with section 2 of the TTDSG (Telecommunications and Data Protection Act) is:

Winney GmbH

Spaldingstrasse, 68

DE-20097 Hamburg

info@winney.pro

Tel. 040 67555165

If you contact Winney GmbH by email, we would like to point out that the confidentiality of the information transmitted cannot be guaranteed, since the content of the emails may be viewed by third parties.


1.4 Personal data

Personal data is information about the personal or factual circumstances of a specific or identifiable natural person (data subject). This includes information such as name, address, telephone number and email address.

Information that cannot be associated with a specific or identifiable individual, such as statistical data, is not personal data.


1.5 Legal basis for data processing

We process your personal data in accordance with applicable data protection laws. Processing is lawful if at least one of the following conditions is met:


Consent (Art. 6 Abs. 1 lit. a) DSGVO)

The processing of personal data is lawful if you consent to the processing for specific purposes (for example, processing your request). This consent may be revoked at any time in the future.


To fulfill contractual obligations or pre-contractual measures (Art. 6 Abs. 1 lit. b) DSGVO):

In order to be able to fulfill our contractual obligations to provide you with services or carry out pre-contractual measures upon request, we process the data. The purposes of data processing are primarily product-specific and may include, among other things, needs analysis and consultation.


Within the framework of control of interests (Art. 6 Abs. 1 lit. f) DSGVO):

Where necessary, we process your data beyond the purposes of the actual performance of the contract - to protect our legitimate interests or the interests of third parties (for example, to ensure IT security and IT operations, to analyze and improve the use of our website).


In accordance with legal requirements (Art. 6 Abs. 1 lit. c) DSGVO):

Winney GmbH is subject to various legal obligations. This includes, but is not limited to, provisions for compliance with business and tax laws in accordance with the Commercial Code and the Internal Revenue Code.


1.6 Data transmission and recipients

Within Winney GmbH, access to your data is granted to those departments that need it to fulfill their contractual and legal obligations. Service providers and proxies hired by Winney GmbH may also receive data for these purposes, provided that they comply with the applicable legal provisions.

Parties that may receive your personal data include affiliates and carefully selected unrelated service providers who are contractually obligated to provide services for or on behalf of Winney GmbH. Winney GmbH has entered into corresponding data protection agreements with these parties.

Regarding the transfer of data to other recipients, we only transfer your personal data if required by law, if you have given your consent to this, or if we are authorized to transfer it. If these conditions are met, the recipients of the personal data may be public authorities and institutions (for example, law enforcement agencies) if there is a legal or formal obligation.

The active transfer of personal data to a third country only occurs if this has been expressly stated within the scope of the mentioned services.


1.7 Storage period and disposal

Winney GmbH stores personal data in accordance with statutory data processing rules and in compliance with statutory retention periods for as long as this is necessary for the respective purpose. We determine the duration of data storage in accordance with the following requirements:

  • Operational requirements: the retention period required to manage operational processes.

  • Legal requirements: Data storage periods according to commercial and tax laws, which arise, for example, from the Commercial Code (HGB) and the Tax Code (AO). The terms specified there are usually between six and ten years.

Limitation periods according to Articles 195 et seq. Civil Code (BGB) cases can be up to 30 years, with the usual limitation period being three years. This applies, for example, to complaints submitted via the contact form.

Once the specified retention period has expired, the data will be deleted or destroyed.


2. Data collected and purposes of processing

When using our services, you must provide personal data that is necessary to achieve the purpose or that we are required to collect by law. Without this data, we will generally not be able to enter into or perform a contract.


2.1 Information you provide to us


Parcel sending

The personal data that you enter in the “Make an order” section, such as the sender and recipient addresses (first name, last name, company, if applicable, street, house number, postal code, city and country) and used to fulfill the contract, is collected and stored based on Art. 6 Abs. 1 lit. b) GDPR.

The recipient data provided by the user will be used by Winney GmbH exclusively for the execution of the ordered service (delivery of the parcel). Any use for other purposes, in particular transfer to third parties, is carried out exclusively within the framework of legal provisions.

As a sender, please note that you can only share the recipient`s email address or mobile phone number with Winney GmbH with their consent!

We process your personal data as necessary to protect the legitimate interests of Winney GmbH or third parties.


Payment Process

To process the payment as part of this process, your data is processed by payment service providers authorized by us: Robokassa, Stripe.


Registration in the service

When you register with the TELEGA online service, your email address and password (user data) are collected and stored. The email address is used as the username for the TELEGA online service and to send you a new password if necessary.

In the “My orders” menu item you will find all the parcels you have sent with relevant data such as date, parcel number, recipient, price and status.

If you delete your account, your saved recipient addresses will be automatically deleted. Your data will be deleted once all outstanding amounts have been paid, subject to statutory archiving periods.


Package tracking

The package number you enter is required to provide you with information about its status.


Permission to place an order

As a registered user of the TELEGA online service, you have the opportunity to give us permission to place an order. This allows us to ensure delivery even if we are unable to meet you in person. When authorizing the placement of an order, we collect the following personal data:

Recipient`s first and last name or company name, street/house number, zip code/city, and a description of the desired storage location (such as a garage).

The data will be stored for a further 3 years after the order is withdrawn in the event of claims for damages.


2.2 Data collected automatically or with your consent

IP Address Registration

Every time a user visits the TELEGA website, data is saved in a log. In particular, the following set of data is temporarily stored:

  • Date and time of access

  • IP address or DNS name of the requesting computer.

  • Page viewed (URL)

  • HTTP response code

  • Operating system and its version

  • Browser and its version

Temporary storage of this data is necessary for the website to display on your device and to ensure its functionality. Using this anonymized data, we also obtain statistical information about the use of the TELEGA website. In addition, we collect data to be able to monitor and prevent unauthorized access to the web server and misuse of the website, and to maintain the security of our information technology systems.

Cookie

Cookies include:

Small text files that are stored on your computer and enable analysis of your use of the website. The information stored in cookies can be read by the website the next time you visit the website. On the one hand, cookies are necessary for the smooth operation of all processes on the website, and on the other hand, they can make it easier for the user to use the website again: the information stored by cookies on the first visit, for example: language settings or usernames, is not necessary re-enter. The website adapts to a certain extent to your individual needs. A prerequisite is that you are using the same device.

This is why TELEGA uses cookies:

We would like to offer you the optimal service to suit your needs. For example, some information you already received on your first visit will no longer be displayed. Activities such as the login or logout process can be simplified for you, and information you`re already looking for can be displayed faster. Overall, site performance improves.

The following cookies are used:

We use cookies to personalize content and ads, provide social media features and analyze access to our website. We also share information about your use of our site with our social media, advertising and analytics partners. Our partners may combine this information with other information that you have provided to them or that they have collected from your use of their services.

Cookies are small text files used by websites to improve user experience.

By law, we may store cookies on your device if they are strictly necessary for the functioning of this website. For all other types of cookies we require your permission.

This site uses different types of cookies. Some cookies are placed by third parties and appear on our sites.

You can change or withdraw your consent at any time in the cookie statement on our website.

Find out more about who we are, how to contact us and how we process personal data in our privacy policy.

When contacting us regarding your consent, please include your consent ID and date. Your consent applies to the following domains: www.telega.pro


3. Rights of third parties, withdrawal of consent, exercise of your rights

3.1 Rights of affected persons

As an injured person, you have the right

  • obtain information about whether your personal data is being processed and about the right of access to this data (right of access of the data subject in accordance with Art. 15 GDPR)

  • request correction of incorrect personal data concerning you (right to rectification in accordance with Art. 16 GDPR)

  • request erasure of your personal data (right to erasure in accordance with Art. 17 GDPR)

  • request a restriction of processing (right to restrict processing in accordance with Art. 18 GDPR)

  • receive personal data that you have provided to us (right to data portability in accordance with Art. 20 GDPR)

  • object to the processing of personal data relating to you on grounds arising from your particular situation, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing serves the purpose of asserting, exercising or protection against legal claims (Right to object according to Art. 21 GDPR)

The restrictions in accordance with Art. 34 and 35 BDSG apply to the right to information and the right to erasure.


3.2 Withdrawal of consent

You can withdraw your consent to the processing of personal data at any time. The withdrawal of consent only takes effect in the future and does not affect the legality of the data processed prior to the withdrawal.


3.3 Exercise of rights

If you wish to exercise your rights as a data subject or withdraw consent, please send a message to order@telega.pro explaining which right you wish to exercise so that we can take the further steps necessary to exercise your rights.

However, please note that we may require proof of identity to protect your personal information from unauthorized access or modification.


3.4 Right to lodge a complaint with a supervisory authority

If you believe that the processing of your personal data violates data protection rules, please let us know your concerns. In such cases, you also have the right to lodge a complaint with a supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG).

The competent supervisory authority for the processing of data related to postal services is:

Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit
Graurheindorfer Str. 153
53117 Bonn
www.bfdi.bund.de


4. Changes to this privacy policy

Winney GmbH has the right to update this information by publishing the changed information on this website. We are constantly developing and optimizing our services. Therefore, we can add new functionality. If this affects the processing of your personal data, we will inform you promptly in our data protection declaration.

This information was updated on January 31, 2024.