Privacy policy

I. General

Responsible legal entity for the data processing on this website is:

ExpressGroup GmbH
Am Sandtorkai 73
20457 Hamburg
Phone: +49 (0) 40228682756

(„we“ or „ExpressGroup“).

1. Definitions

"Personal data" means any information relating to an identified or identifiable natural person. This also includes your IP address.

"Processing" or "process" means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection or storage of personal data.

In addition, we refer to the definitions in Article 4 of the General Data Protection Regulation ("GDPR") and the terms defined in our General Terms and Conditions.

II. Usage of website

1. Provision of the website and creation of log files

Each time you visit our website, our system automatically collects data and information from the computer system of the calling computer. The following data is collected for a limited period of time:

  • Information about the type of browser and the version and language used.
  • The operating system of the user
  • The Internet service provider of the user
  • The IP address of the user
  • Date and time of access
  • The amount of data transferred
  • The message whether the call was successful
  • The GMT time zone difference
  • Websites from which the user's system accesses our website
  • Websites that are accessed by the user's system via our website

The data is stored in the log files of our system. This data is only required for the analysis of any malfunctions and is deleted within seven days at the latest. The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 p. 1 lit. f DSGVO. The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the IP address of the user must remain stored for the duration of the session. The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context and no conclusions are drawn about your person. The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

2. Website builder

2.1. We use the external service provider Webflow (Webflow Inc., 398 11th Street, 2nd Floor, 94103 San Francisco, CA, USA) to build and host our site. The service is only used to compile the designs of the subsites. We do not use Webflow, nor have we instructed Webflow, to collect, analyse or process user data. We have nonetheless concluded a data processing agreement with Webflow, Inc., pursuant to Art. 28 GDPR, to ensure that Webflow processes any data in accordance with our instructions and the European data protection principles. If Webflow transfers data to companies outside Europe (e.g. to the USA), Webflow has taken contractual and technical precautions to ensure compliance with the European data protection principles. However, when personal data is processed outside Europe, it may in individual cases be the case that the rights of EU citizens cannot or cannot fully be enforced.

2.2. The processing of this personal data is based on Art. 6 (1) sentence 1 lit. f DSGVO (legitimate interest). Our legitimate interest is to be able to offer you the web app in good quality as a web version and to be able to guarantee its stability and security and to be able to constantly improve the web app through statistical evaluations.

2.3. Applying to ExpressGroup: You have the possibility to use our online application form. Please note the separate privacy notice for our application system.

3. Cookies

Currently we use no cookies.

4. Contact ExpressGroup

4.1. If you contact us directly, e.g. for technical questions, we process the personal data you provide, i.e. your name, your e-mail address and the description of your specific request. We process this personal data in order to be able to process your request.

5.2. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. b DSGVO.

III. Transfer of personal data

The performance of our services on this website currently requires no transfer of personal data.

IV. Storage duration

We keep your personal data only as long as we need them to achieve the respective processing purpose and delete them afterwards, unless we are entitled or obliged to further storage due to legal regulations.

VI. Your rights

You have the right to exercise the following rights with respect to personal data concerning you:

(a) The right to obtain information about your personal data processed by us, including the purposes of processing, pursuant to Art. 15 GDPR,

(b) the right to rectify inaccurate personal data in accordance with Art. 16 DSGVO,

(c) the right to erasure of your personal data ("right to be forgotten") under Art. 17 DSGVO,

(d) the right to restrict the processing of your personal data according to Art. 18 DSGVO,

(e) the right under Art. 20 DSGVO to receive a copy of your personal data in a structured, commonly used and machine-readable format, provided that their processing is based on your consent or they are processed in the context of or with regard to a contractual relationship with you ("right to data portability"),

(f) the right under Article 7(3) of the GDPR to withdraw at any time your consent on which the processing of your personal data is based; and

(g) the right to object at any time to the processing of your personal data if we process your personal data for direct marketing purposes or if we process your personal data for the pursuit of our legitimate interests and there are grounds resulting from your particular situation (Art. 21 (1) DSGVO).

You can exercise these rights by email to or by post to:

ExpressGroup GmbH,
Am Sandtorkai 73,
20457 Hamburg

Phone: +49 (0) 40228682756

You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.