Skip to main content Skip to page footer


Privacy Policy

We are pleased to welcome you to our website. The protection of your personal data is important to us and we want you to feel safe when visiting our website. We protect your privacy and your personal data. We process your personal data in accordance with the contents of this privacy policy in compliance with the applicable data protection regulations of the General Data Protection Regulation (GDPR) as well as the other relevant data protection regulations in each case.

Table of contents

  1. Name and contact details of the data controller
  2. Contacting the Data Protection Officer
  3. What is personal data?
  4. Purposes of data processing
  5. Legal basis of data processing
  6. Right to object
  7. Network service
  8. Use of our website for information purposes
  9. Use of our website for other services
  10. Contacting us
  11. Safety
  12. Cookies
  13. Web storage
  14. Consent tool
  15. Web analytics
  16. Social media
  17. Other functions and content
  18. Recipients and data transfer
  19. Data transfer to third countries
  20. Deletion of your data
  21. Your rights
  22. Information for customers, suppliers and other third parties according to Art. 13 / Art. 14 GDPR 

1. Name and contact details of the data controller 
As the operator of the website, H + E Logistik GmbH, Josef-Baumann-Strasse 18, 44805 Bochum, Germany, is the data controller within the meaning of the GDPR. 

2. Contacting the Data Protection Officer 
You can contact our Data Protection Officer at any time with any privacy concerns at

3. What is personal data?  
Personal data refers to any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. 

4. Purposes of data processing 
The extent and nature of the collection, processing and use of your data depends on whether you visit our website only to retrieve generally available information or make use of additional services. We always process your personal data in the course of our business activities for pre-contractual or contractual purposes. In addition, the exercise of our legitimate interest or compliance with legal requirements may also be the substantive purpose of data processing by us. We inform you about the respective specific purposes of data processing in the sections below.

5. Legal basis for data processing 
We process your personal data according to the following legal bases:

  • To fulfill pre-contractual or contractual obligations (Art. 6 (1) (b) GDPR)
  • On the basis of your consent (Art. 6 (1) (a) GDPR)
  • In the context of a balancing of interests (Art. 6 (1) (f) GDPR)
  • Due to legal requirements (Art. 6 (1) (c) GDPR)

In connection with the respective instances of data processing carried out by us we will inform you of the specific legal basis of the data processing.

6. Right of objection 
If in the context of a balancing of interests we process your personal data on the basis of our overriding legitimate interest (legal basis for data processing is Art. 6 (1) ( f) GDPR), you have the right to object to this processing at any time for reasons arising from your particular situation. If you exercise your right to object, we will stop processing the data concerned. However, we reserve the right to further processing (with the exception of direct advertising, in which case we will comply with your objection immediately) if we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or if the processing is for the assertion, exercise or defense of legal claims. More extensive data subject rights remain unaffected by this.

7. Network service 
Our website runs on the network of Host Europe GmbH, c/o WeWork, Friesenplatz 4, 50672 Cologne, Germany. The server location is Germany.

8. Use of our website for information purposes 
It is not generally required to enter personal data for the purely informational use of our website. Rather, in this case, when you access our web pages, we only collect the data that your internet browser automatically transmits to us, such as:

  • Referrer (previously visited website)
  • Requested webpage or file 
  • Browser type and version
  • Operating system
  • Device type
  • Time of retrieval
  • IP address in anonymized form
  • Other similar data and information used to avert danger in the event of attacks on our information technology systems.

This is usually done using log files. The purpose of processing is to ensure the functionality and compatibility of our website for technically unproblematic use, including troubleshooting and protection against technical attacks and misuse of the usage. The legal basis for this processing is our legitimate interest in accordance with Art. 6 (1) (f) GDPR. Our legitimate interest lies in the proper operation of our website. The log file data is deleted when it is no longer required for the purpose of processing.

9. Use of our website for further services 
If you make use of other services of our company via our website, it may be necessary for you to provide personal information. The personal data required for the provision of services is specified in the respective input mask or application. You can voluntarily provide additional information. You can tell which information is required and which is voluntary by the fact that the mandatory information is marked with an asterisk (*) or with the note "Mandatory field". Your data will be processed exclusively for the purpose of providing the service you requested. The legal basis for the processing of your personal data as well as the information about when your personal data will be deleted can be found in the descriptions of the specific services.

10. Contacting us 
Contact by mail 
On our website, we offer the possibility of contacting us via email. Please note that unencrypted communication via email is insecure. It is possible that data transmitted in this way may be read, copied, altered or deleted by unauthorized persons. The personal data you provide when contacting us via email will only be processed for the purpose of dealing with your contact via email. Data will only be passed on to third parties if this is necessary for the purpose of processing this contact. The legal basis for this processing is Art. 6 (1) (b) GDPR. Your personal data will be deleted when no longer required to fulfill the purpose of your contact. Please note that your messages may have to be stored due to statutory retention requirements. In this case, the legal basis is Art. 6 (1) (c) GDPR.

11. Safety 
We have taken technical and organizational measures to secure our website and other systems against loss, destruction, access, alteration or distribution of your data by unauthorized persons. We use the TLS 1.3 (Transport Layer Security) coding system for this purpose.

12. Cookies  
We use cookies to track visitor preferences and to optimize the design of our web pages. Cookies are small text files that are stored on your computer whenever you use our website. If you do not want cookies to be used, you can delete them at any time. As a result, however, certain features of the website may no longer be available. To delete the cookies, please refer to your browser's help function.

13. Web storage 
We use so-called web storage technology (also known as "local data" and "local storage") on our website. We do this to make use of functionalities we deploy on our website.Data is stored locally in your browser's memory ("cache") that continues to exist and can be processed even after closing the browser window or exiting the program. Third parties cannot access the data stored in web storage. It is not passed on to third parties and is not used for advertising purposes. We only use web storage technology where this is absolutely necessary to enable the functionality of our website (see section 25 TDDDG - German Federal Act on the Regulation of Data Protection and Privacy in Telecommunications and Telemedia). The legal basis for this is Art. 6 (1) (f) GDPR. The data collected in this way is stored until you close the browser window (session storage) or clear the cache via your internet browser (local storage). Where the use of web storage technology is not absolutely necessary to enable the functionality of our website, we only use it with your consent; the legal basis for this is Art. 6 (1) (a) GDPR.  

14. Cookiebot  
This website uses the cookie consent tool "Cookiebot" from Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (Usercentrics). The purpose of the processing is to obtain and document consent to the storage of certain cookies on your device or to the use of certain technologies as well as to technically enable revocation of consent given. In this connection your browser may transmit personal data to Furthermore, stores a cookie in your browser in order to be able to associate you with the consents granted or their revocation. The legal basis for this is Art. 6 (1) (f) GDPR. Data collected in this way will be stored until you request us to delete it, delete the cookie yourself or the purpose for storing the data no longer applies. Mandatory statutory retention requirements remain unaffected. For more information, see's privacy policy at:

15 Web analytics 
Google analytics 
TThis website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses "cookies", which are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the U.S.A. and stored there. Your IP address will therefore be truncated by Google within Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases is the complete IP address transmitted to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information for the purpose of analyzing your use of the website, compiling reports on website activity and providing the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser; please note, however, that if you do this you may not be able to use the full functionality of this website.  You can also prevent the data generated by the cookie about your use of the website (incl. your IP address) being sent to Google as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link:  ( ).

As an alternative to the browser plugin, you can prevent Google Analytics from collecting data by clicking on the following link. An opt-out cookie is set that prevents future collection of your data when visiting this website:

For more information on terms of use and privacy, please visit or
Please note that the code "gat._anonymizeIp();" has been added to Google Analytics on this website to ensure that IP addresses are recorded anonymously.

Google Tag Manager 
This website uses "Google Tag Manager". Google Tag Manager is a tool for managing website tags. The tool is a cookieless domain and does not collect any personal data. The tool activates other tags that may, in turn, collect data under certain circumstances. Google Tag Manager does not access this data. If the domain or cookie is deactivated, they remain in place for all tracking tags that are used with Google Tag Manager ( The legal basis for the data processing is Art. 6 (1) (a) GDPR.

16. Social media 
We maintain publicly available profiles on social networks. The individual social networks we use can be found below. 
Social networks such as Facebook etc. can generally analyze your user behavior extensively when you visit their website or a website with integrated social media content (such as Like buttons or banner ads). By visiting our social media presences, numerous data protection-relevant processing operations are triggered. Specifically: 
If you are logged in to your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, however, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, data is collected, for example, via cookies, which are stored on your device or by recording your IP address. 
With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way you can be shown interest-based advertising within and outside of the particular social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are or were logged in. 
Please also note that we cannot reconstruct all processing processes on the social media portals. Depending on the provider, therefore, additional processing operations may possibly be carried out by the operators of the social media portals. Details can be found in the terms of use and privacy policy of the respective social media portals. 

Legal basis 
Our social media presences are designed to provide an informative presence on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. The analysis processes initiated by the social networks may be based on divergent legal bases to be specified by the operators of the social networks (for example, consent within the meaning of Article 6 (1) (a) GDPR).

Responsible entity and assertion of rights 
If you visit any of our social media sites, together with the social media platform operator we are jointly responsible for the data processing operations triggered during this visit. As a matter of principle, you can assert your rights (access, rectification, erasure, restriction of processing, data portability and complaint) both to us and to the operator of the respective social media portal.

Please note that despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are determined by the company policy of the respective provider. 

Duration of storage 
The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose of storage no longer exists, you ask us to delete it, you withdraw your consent to the storage or the purpose for the data storage no longer exists. Saved cookies remain on your device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected. 
We have no control over the duration of storage of your data stored by the social network operators for their own purposes. For details, please refer to the social network operators directly (e.g. in their privacy notice, see below).

Social networks in detail

We have a profile on Facebook. The operating company of Facebook is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. You can customize your advertising settings yourself in your user account. To do this, click on the following link and log in:  
It cannot be ruled out that your personal data will also be transferred to Meta Platforms Inc., based in the U.S.A. Meta has certified itself under the EU-U.S. Data Privacy Framework to comply with the level of data protection applicable in the EU. The certificate can be viewed at Further information on data protection can be found in Facebook's privacy policy:

Social media plugins from Kununu are used on our website. For this we use the "Kununu" button. This is a service provided by Kununu. When you visit a page on our website containing one of these plugins, your browser establishes a direct connection to the Kununu servers. The content of the plugin is transmitted by Kununu directly to your browser, which integrates it into the website. 
By integrating the plugin, Kununu receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Kununu account or are not currently logged in to Kununu. This information (including your IP address) is transmitted from your browser directly to a Kununu server in Europe and stored there. 
If you are logged in to Kununu, Kununu can associate your visit to our website directly with your Kununu account. If you interact with the plugins, the corresponding information is also transmitted directly to a Kununu server and stored there. The information is also published on Kununu and displayed to your Kununu contacts. 
Kununu may use this information for the purposes of advertising, market research and for tailoring Kununu pages to user needs. For this purpose, Kununu creates usage, interest and relationship profiles, e.g. to evaluate your use of our website with regard to the advertisements displayed to you on Kununu, to inform other Kununu users about your activities on our website and to provide other services related to the use of Kununu. 
If you do not want Kununu to associate the data collected via our website with your Kununu account, you must log out of Kununu before visiting our website. The purpose and scope of data collection and the further processing and use of the data by Kununu as well as your related rights and settings options to protect your privacy can be found (in German) in Privacy policy kununu's privacy policy: 

We use the services of the recruiting platform Stepstone. The service provider is Stepstone Deutschland GmbH, Völklinger Strasse 1, 40219 Düsseldorf, Germany. You can find out more about data protection at Stepstone at

We have a profile on XING. The operating company of XING is XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany. For details on how they handle your personal information, please refer to LinkedIn's privacy policy:

We have a profile on LinkedIn. The operating company of LinkedIn is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies. If you wish to disable LinkedIn advertising cookies, please use the following link: 
For details on how they handle your personal information, please refer to LinkedIn's privacy policy:

17. Other functions and content 
If we use additional functions and content (e.g. map or font services) on our website, by means of which we or the provider of the services process personal data from you, we will inform you about this here.

We use a service on our website provided by Npm, Inc, 1999 Harrison Street #1150, CA 94612 Oakland, U.S.A.: "unpkg". unpkg enables shorter and more stable loading times of data and information even with higher access rates. The legal basis for the data processing is Art. 6 (1) (a) GDPR. The legitimate interest is to ensure the functionality of our website. For more information about unpkg, see the provider's privacy policy at You can prevent unpkg collecting and processing your data by disabling the execution of script code in your browser or installing a script blocker in your browser (you can find one e.g. at or or

18. Recipients and data transfer 
We have bundled certain data processing operations within our company. These can be used centrally by individual areas of our company, e.g. for processing inquiries. External contractors and service providers (e.g. logistics companies or IT service providers) may also be used to ensure our responsibilities are met and to fulfill contracts. In addition, data may go to recipients to whom we are obligated or entitled to disclose data due to contractual or legal obligations or due to your consent.

19. Data transfer to third countries 
Data is only transferred to third countries (countries outside the EU and the European Economic Area EEA) if this is necessary for the execution of a contract/order/business relationship, including the initiation thereof, or if it is permissible due to our legitimate interest or your consent, and only in compliance with the data protection requirements stipulated for this purpose.

Note on data transfer to the U.S.A 
Services from companies based in the U.S.A. are integrated into our website or we link to these services. In connection with the use of these services, personal data may be transmitted to U.S. servers of the respective service providers. 

As part of the so-called "Data Privacy Framework" (DPF), the EU Commission has recognized the level of data protection for certain companies from the U.S.A. as secure within the framework of the adequacy decision of July 10, 2023. The list of certified companies and further information about the DPF can be found on the website of the U.S. Department of Commerce at In this privacy policy, for the respective services we inform you which of the service providers we use are certified under the DPF.

20. Deletion of your data 
We process your personal data only for as long as this is necessary to fulfill the respective purpose or until there is no longer a legal basis for processing (e.g. revocation of consent to data processing). In doing so, we observe the existing statutory retention and storage periods. 

21. Your rights  
You have the following rights:

  • to gain access free of charge to the personal data concerning you that are stored by us (right to access)
  • to obtain confirmation whether we are processing personal data concerning you (right to confirmation)
  • to request us to immediately delete the personal data concerning you if the processing is no longer required and the other requirements for the erasure pursuant to GDPR have been fulfilled (right to erasure)
  • to the immediate rectification and completion of inaccurate personal data concerning (right to rectification)
  • to request restriction of processing of your personal data (right to restriction of processing)
  • to receive the personal data concerning you in a structured, commonly used and machine-readable format (right to data portability)
  • to object to the processing of your personal data (right to object)
  • You have the right not to be subject to a decision that is based solely on an automated processing of data, including profiling, and that may have a legal effect on you or any similarly significant restrictive effect (right to individual decision-making).
  • to revoke your consent to the processing of your personal data with effect for the future at any time.
  • to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is in violation of GDPR (right to lodge a complaint).  

    For more information on your rights, please contact our Data Protection Officer.

22. Changes to our privacy policy 
In order to ensure our privacy policy always complies with the current statutory requirements, we reserve the right to make changes at any time. This also applies in the event that the privacy policy needs to be adapted due to new or revised offerings, for example new service offerings. The new privacy policy will then take effect the next time you visit our site.

23. Information for customers, suppliers and other third parties according to Art. 13 / Art. 14 GDPR 
This information can be found in this PDF