Data protection note for the INFr8 app
General Information
The eDGD portal digitizes the traditional paper-based process for dangerous goods and normal cargo in air freight. The dangerous goods declaration, DGD or shippers is transmitted completely electronically from the shipper via the forwarding agent and/or dangerous goods declarant to the airline or its handling agent. With the INFr8 app, we provide you with a mobile app that allows you to receive notifications about status updates on your transactions in INFr8.
In the following, we inform you about the collection of personal data when using our mobile app. Personal data is all information that can be related to you personally, e.g. name, address, e-mail addresses or user behavior.
Who is responsible for data processing and who is the contact person?
DAKOSY as the provider of the INFr8 service is responsible according to Article 4 Paragraph 1 of the Data Protection Act (GDPR):
DAKOSY Datenkommunikationssystem AG
Mattentwiete 2, 20457 Hamburg,
Phone: +49 40 37003-0, Telefax: +49 40 37003-370,
E-Mail: info@dakosy.de
The contact details of our Data Protection Representative can be found at DAKOSY Data Protection. You may contact him at the e-mail address datenschutz@dakosy.de.
For what purpose and on what legal basis is the data used?
The personal data collected is used in INFr8 exclusively for contract and transport processing as well as system administration. The legal basis for the processing of personal data is Article 6 Paragraph 1 Subsection f) and Article 28 Paragraph 3 of the Data Protection Act (GDPR).
Which personal data is processed?
When using INFr8, we collect the personal data described below, which is required for the use of the functions and the security of your data:
a. User data: system user name, personal password, IP address, contact data
b. Contact data: first and last name, address, e-mail address
c. Business data: name, address, phone number, fax number, e-mail address, tour information, status information regarding tours, GPS location information for the INFr8 app users (after approval by the app user), photos/media (after approval and selection by the app user)
d. Billing data: name, address, phone number, fax number, e-mail address
e. System protocol data: system user name, activity, date of usage, time, e-mail address
Which user data does the app need access rights to?
The mobile app requires permission to send notifications to the user. When using the app for the first time, the user will be asked to grant this permission.
If you grant access to this data, the mobile app will only access and transfer this data to our server to the extent necessary to provide the functionality. Your data will be treated confidentially by us and will be deleted if you revoke the rights to use it or if it is no longer required to provide the services and there are no legal retention obligations.
Who are the recipients of the personal data?
Only personal data directly related to the current order, such as status and/or location information, is sent to the customer (e.g., forwarding agents, shipping companies, trucking companies).
Where does the data processing take place and when is the data transferred to a third country?
The processing of personal data takes place in Germany (Hamburg). Personal data will not be forwarded to third parties or to a third country. However, it cannot be ruled out that process participants of the client have their registered office in a third country and that they receive or send their data in the course of order processing.
How long will your data be stored?
The personal data of the concerned parties will be deleted or blocked as soon as the purpose of storage is no longer applicable. Data whose storage purpose has been fulfilled but which is subject to a retention period under tax and commercial law will be blocked and deleted after this retention period has expired. The following deletion periods apply to INFr8:
a. User data: contact data: three months after the date of termination by the app user becomes effective
b. Business data: billing data: 13 months after completion of the business transaction
c. System protocol data: one months after the date of creation date
What data protection rights do you have with regard to your data?
You have the following rights respecting your personal data with regards to the responsible person pursuant to Article 4 Paragraph 7:
- Right to information,
- Right of rectification or erasure,
- Right to restriction of processing,
- Right to refuse the processing,
- Right to data portability.
You also have the right to file a complaint with a data protection supervisory authority about the responsible party’s processing of your personal data.
Revocation of your consent to data processing
You may revoke your consent at any time. All you need to do is send us an e-mail at: widerspruch@dakosy.de
The legality of the data processing which occurred prior to the revocation of consent remains unaffected by the revocation.
How is your data protected?
DAKOSY uses technical and organizational security measures to protect the data which we manage from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously being improved in accordance with the latest technological standards.
INFr8 uses encryption procedures for the storage of personal passwords and data transmission.
Are cookies and web analysis tools used?
INFr8 is an application designed specifically for smartphones. The mobile app does not use cookies or analysis tools.
Hamburg, 22.12.2020