Privacy policy
Privacy policy
Last updated: 30.09.2026
1. General information
Protecting your personal data matters to us. Below we explain how we collect, process and use your data when you use our website and book transport, in line with the General Data Protection Regulation (GDPR). This English version is for information; the German version is legally binding.
Controller within the meaning of the GDPR:
VEMO Logistik GmbH
Wilhelm-Mauser-Str. 47
50827 Köln
Germany
Operations: VEMO Depot Bonn, Brühler Straße 30, 53119 Bonn
Email: kontakt (at) vemo-logistik.de
Phone: +49 (0) 228 50446044
2. Hosting
Our website and booking system run on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, in a data centre in Germany. When you visit, the server processes access data (IP address, date and time, page requested, browser, operating system, referrer). We have a data processing agreement with Hetzner under Art. 28 GDPR.
Legal basis: Art. 6(1)(f) GDPR (secure and stable operation). To prevent abuse, we limit the number of requests per IP address.
3. Website software and cookies
The website runs on the Odoo software, which we operate ourselves on this server; no data is sent to the vendor. We load fonts from our own server, not from Google.
On your first visit we show a cookie banner where you can accept or reject certain cookies. Your choice is saved and can be changed at any time.
Legal basis for cookies that are not technically necessary: Art. 6(1)(a) GDPR (consent). We process technically necessary cookies on the basis of Art. 6(1)(f) GDPR (legitimate interest in providing the website).
For bookings, your browser keeps an interim state (session storage) so your entries are not lost when you log in; it is deleted when you close the browser (technically necessary, Section 25(2) no. 2 TDDDG).
Our domain is registered with united-domains AG, Gautinger Straße 10, 82319 Starnberg; no visitor data is processed in the process.
4. Contact and enquiry forms
When you contact us through a form on the website, we process:
name and company, if applicable
email address
phone number (if provided)
your message or enquiry
We store enquiries in our own system (Odoo) to handle them. The data is used only for this purpose and is not passed on without your consent.
Legal basis: Art. 6(1)(b) GDPR (steps prior to or performance of a contract) and Art. 6(1)(a) GDPR (consent).
The data is deleted once it is no longer needed, unless statutory retention periods apply.
5. Booking transport
When you book transport, we process: name, company if applicable, email address, phone number, pickup and delivery address, the recipient's name and, if provided, phone number and email address, shipment details (size, weight, value of goods, your reference, preferred date) and the time and price of the booking. Purpose: pickup, delivery, invoicing and queries.
Legal basis: Art. 6(1)(b) GDPR (contract). To plan the trips, we pass name, addresses, phone number and notes on to our drivers.
6. Recipient data
We receive the recipient's data from the sender (Art. 14 GDPR). We use it only for delivery. If the sender provided an email address, we send the recipient a tracking link.
Legal basis: Art. 6(1)(b) GDPR (contract with the sender) and Art. 6(1)(f) GDPR (legitimate interest in successful delivery).
7. Initial business contact from public sources
We approach companies, practices, law firms and institutions in and around Bonn about our logistics services. The contact details we use for this do not come from you — which is why we inform you here in accordance with Art. 14 GDPR.
What data we process: company name, address, line of business, the publicly listed business email address and phone number and — where publicly named — the name and role of the person to contact. We do not process special categories of personal data.
Where the data comes from: exclusively from publicly accessible sources, namely the legal notice and contact pages of the company's own website as well as public trade and member directories. We do not buy address lists and do not use data from private sources.
Purpose: we would like to make an offer for courier, parcel or transport services that suits your business. We approach companies and institutions at their business address only, never private individuals.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in establishing business relationships).
Storage period: if you do not respond, we delete your contact details twelve months after the last approach. If you object, we delete them immediately — we only keep the email address on an internal suppression list so that we do not contact you again. We keep that entry indefinitely; it serves solely to honour your objection.
Disclosure: we do not pass this data on to third parties. It is held in our own system on our server in Germany (section 2); mailbox.org sends the emails as a processor (section 12).
Your right to object: you may object to the processing of your data for this purpose at any time, without giving reasons and free of charge (Art. 21(2) GDPR). A reply to our email is enough, or a message to kontakt (at) vemo-logistik.de. You will then not hear from us again.
8. Customer account
On request (tick box when booking) we create a customer account; you set the password yourself via a link sent by email. In your account you see your shipments, labels and invoices. You can have the account deleted at any time.
Legal basis: Art. 6(1)(b) GDPR.
9. Address search, route calculation and map
We calculate address suggestions, distances and the tracking map on our own server using OpenStreetMap data (© OpenStreetMap contributors, ODbL). Only if an address is missing from our directory do we look up its location with the Nominatim service of the OpenStreetMap Foundation (United Kingdom); only the address is transmitted, not your name. An adequacy decision of the EU Commission exists for the United Kingdom.
Legal basis: Art. 6(1)(b) and (f) GDPR.
10. Shipment tracking
Tracking is available via a link with a random key or via tracking number and postcode. With the pickup postcode we only show whether the booking is genuine and when it will be picked up. If the vehicle is currently on its way to you, we show its approximate location; we do not show the driver's name.
11. Payment
For SEPA direct debit we process the account holder, IBAN and mandate reference and pass them to our bank for collection. For prepayment we match your bank transfer with the booking.
Legal basis: Art. 6(1)(b) GDPR.
12. Invoices and emails
We create invoices with lexoffice by Haufe-Lexware GmbH & Co. KG, Munzinger Str. 9, 79111 Freiburg. We send emails via mailbox.org (Heinlein Hosting GmbH, Schwedter Str. 8/9a, 10119 Berlin). We have data processing agreements with both.
13. Storage period
We keep booking and invoice data for as long as commercial and tax law requires (up to ten years, Section 257 HGB, Section 147 AO). We delete vehicle location data after seven days. Your browser deletes the booking session storage when you close it.
14. Your rights as a data subject
Under the GDPR you have the following rights:
Access to your stored data (Art. 15 GDPR)
Rectification of inaccurate data (Art. 16 GDPR)
Erasure of your data (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection to processing (Art. 21 GDPR)
Withdrawal of consent given (Art. 7(3) GDPR)
Complaint to a supervisory authority (Art. 77 GDPR)
Competent supervisory authority:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2-4
40213 Düsseldorf
Phone: 0211 / 38424-0
15. Data security
We use up-to-date technical and organisational security measures on our website to protect your data against loss, destruction, access, alteration or disclosure by unauthorised persons. Data is transmitted encrypted using SSL/TLS.
16. Changes to this privacy policy
We reserve the right to amend this privacy policy to keep it in line with current legal requirements or to reflect changes to our services. The updated privacy policy then applies to your next visit.