Data Processing

Information on the Processing of Personal Data

In accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of your personal data.
Further details can be found in our complete Privacy Policy, available on our website listed below.

These provisions apply to the entire ROOS Group. The contact details of the responsible controller are listed below.

Contact Details of the Controller

Controllers within the ROOS Group

Roos Vehicle Logistics GmbH
Südliche Ringstr. 66
85053 Ingolstadt
Germany

Phone: +49 89 998 298-67
Email: info@ro-os.de
Website: www.ro-os.de

Data Protection Officer

DCC DataCapConsult
Attn: David Capriati
Hans-Lang-Weg 3
85072 Eichstätt
Germany

Phone: +49 8421 986 10 97
Email: d.capriati@dcc-datenschutz.de

Collection and Storage of Personal Data and the Purpose of Processing

Depending on your relationship with us (prospective customer, customer, supplier, business partner, applicant, or site visitor), we may process the following categories of personal data:

1. Prospective Customers, Customers, Suppliers, and Business Partners

Data We May Collect

  • First name, last name, company name (if applicable)

  • Date of birth (only where necessary)

  • Address

  • Contact details such as telephone number and email address

  • Bank details and preferred payment methods

  • Order history (if applicable)

  • VAT ID / tax number (if applicable)

  • Commercial register or trade register entries (if applicable)

  • Information about your industry (where relevant)

Purpose of Processing

We process this data in order to:

  • identify you as a prospective customer, customer, supplier, or business partner

  • process and fulfill orders correctly

  • provide fast and reliable service for future transactions

  • maintain correspondence with you

  • issue invoices

  • process liability claims and enforce legal rights

Legal Basis

Processing is based on Article 6(1)(b) GDPR, as it is necessary for fulfilling contractual obligations or taking pre-contractual steps.

2. Applicants

Data We May Collect

  • First name, last name

  • Date of birth

  • Address

  • Contact information (telephone, email)

  • Any other personal data provided in your application

Applications received by email are processed electronically.

Purpose and Legal Basis

Personal data is processed for the purpose of managing the application process.
Legal basis: Article 6(1)(b) GDPR (pre-contractual measures).

3. Visitors to Our Locations

Data Collected

  • First name, last name

  • Company name (if applicable)

Purpose

When you enter our premises, your data is recorded for registration and access control purposes. Processing is electronic and serves organizational and security-related functions.

Legal Basis

  • Article 6(1)(b) GDPR – pre-contractual measures

  • Article 6(1)(f) GDPR – legitimate interest in security and traceability of site access

Storage Period

3.1 Prospective Customers, Customers, Suppliers, Business Partners

Personal data collected for contractual purposes is deleted once the purpose has been fulfilled, unless:

  • a legal retention period applies under HGB, StGB, AO, etc. (Article 6(1)(c) GDPR), or

  • you have consented to extended storage (Article 6(1)(a) GDPR)

3.2 Applicants

If your application leads to employment, your data will be stored in accordance with legal requirements.

If not, your data will be stored for six months in accordance with § 61b Abs. 1 ArbGG in conjunction with § 15 AGG and then deleted.

If you expressly agree to being added to our applicant pool, processing is based on Article 6(1)(a) GDPR.

3.3 Visitors to Our Locations

Visitor data is stored until the end of the regular statute of limitations under § 195 BGB and then deleted.

Disclosure of Data

Your personal data will not be transmitted to third parties except in the following cases:

  • You have given explicit consent (Article 6(1)(a) GDPR)

  • Disclosure is necessary for the establishment, exercise, or defense of legal claims and there is no reason to assume an overriding interest in keeping your data confidential (Article 6(1)(f) GDPR)

  • A legal obligation exists (Article 6(1)(c) GDPR)

  • Disclosure is permitted by law and necessary for fulfilling a contract with you (Article 6(1)(b) GDPR)

Your Rights as a Data Subject

You have the following rights under GDPR:

  • Right of access (Art. 15 GDPR)
    Access to your personal data and detailed information about its processing.

  • Right to rectification (Art. 16 GDPR)
    Correction or completion of inaccurate or incomplete data.

  • Right to erasure (Art. 17 GDPR)
    Deletion of your personal data, unless exceptions apply (e.g. legal obligations, public interest, legal claims).

  • Right to restriction of processing (Art. 18 GDPR)

  • Right to data portability (Art. 20 GDPR)
    Receive your data in a structured, machine-readable format or request transfer to another controller.

  • Right to withdraw consent (Art. 7(3) GDPR)
    You may withdraw consent at any time.

  • Right to lodge a complaint (Art. 77 GDPR)
    With any supervisory authority, especially in your place of residence, workplace, or where a violation is suspected.

Right to Object

If your personal data is processed on the basis of legitimate interests under Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation.

You may object to processing for direct marketing purposes at any time without providing a reason.

To exercise your right to object, simply send an informal message — for example, by email — to the contact address listed above, indicating which processing you object to.

Legal Status

These data protection notices reflect the legal situation as of December 2024.
We reserve the right to adapt this information to future legal or judicial developments.