Privacy policy

Last updated: September 2026 · This is a translation of our German Datenschutzerklärung. If the two versions differ, the German version prevails.

1. Controller

The controller responsible for processing personal data on this website is:

SLS Nord GmbH, represented by its managing director Ruslan Chedric
Breslauer Str. 8, 23701 Eutin, Germany
Phone: +49 4521 8311 051
Email: info@slsnord.de

2. General information and legal bases

We process personal data only where this is necessary to run this website, to handle your enquiries or – with your consent – for the services listed in section 10. The legal bases are in particular:

• Art. 6(1)(a) GDPR – your consent;
• Art. 6(1)(b) GDPR – performance of a contract and pre-contractual steps (e.g. preparing a quote);
• Art. 6(1)(c) GDPR – compliance with legal obligations (e.g. retention duties);
• Art. 6(1)(f) GDPR – our legitimate interests, which we name in each case.

Storing information on your device or accessing it is additionally governed by Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG): it only takes place with your consent (Section 25(1) TDDDG) unless it is strictly necessary for a service you have requested (Section 25(2) No. 2 TDDDG).

3. Hosting

This website is hosted by GoDaddy.com, LLC, 2155 E. GoDaddy Way, Tempe, AZ 85284, USA (“GoDaddy”); the servers are located in a data centre in Europe. GoDaddy processes the data generated when the website is accessed solely on our behalf and on our instructions, under a data processing agreement pursuant to Art. 28 GDPR (GoDaddy Data Processing Addendum).

As GoDaddy is based in the USA, data may also be processed there, for example for maintenance and support. GoDaddy is certified under the EU-U.S. Data Privacy Framework, for which an adequacy decision of the European Commission exists (Art. 45 GDPR). In addition, the European Commission’s standard contractual clauses have been agreed (Art. 46(2)(c) GDPR).

4. Server log files

Each time this website is accessed, the web server automatically stores information transmitted by your browser: IP address, date and time of access, page or file requested, referring page, amount of data transferred, HTTP status code, and browser type and operating system.

We need this data to deliver the website and to keep it stable and secure, for example to detect and fend off attacks. The legal basis is our legitimate interest in secure and trouble-free operation (Art. 6(1)(f) GDPR). The log files are deleted after daily processing, within 7 days at the latest, unless they are needed for longer to investigate a specific security incident.

Our host’s software automatically generates access statistics from the log files (AWStats and Webalizer); these cannot be switched off in our hosting package. They mostly contain aggregated figures such as page views per day but may also list IP addresses of frequent visitors. The statistics can only be viewed by us in the hosting control panel; we do not use them to identify visitors and delete them after twelve months at the latest (Art. 6(1)(f) GDPR). The data is not combined with other data or used for advertising.

5. Request form

If you send us a transport request via the request form, we process the details you enter: first and last name, email address, pickup and destination, dimensions and weight of the consignment and your message (required fields) and – if you provide them – company, phone number and preferred date.

Your details are transmitted to our web server in encrypted form and forwarded from there as an email to our dispatch team’s mailbox (see section 6). They are not stored permanently on the web server.

The purpose is to handle your request and prepare a quote. The legal basis is Art. 6(1)(b) GDPR where your request aims at concluding a contract, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

We need the required fields to process your request; without them the form cannot be sent. You are under no statutory or contractual obligation to provide the data – you can also simply call us.

To protect against automated spam, the form contains a field that is invisible to visitors and checks the time between loading the page and submitting it. For this, only the time the page was loaded is sent along with the form; no cookies are set and your usage behaviour is not analysed (Art. 6(1)(f) GDPR).

We only pass your data on to third parties where this is necessary to carry out the transport (e.g. to a carrier involved, Art. 6(1)(b) GDPR).

6. Contact by email and phone, email mailboxes

If you contact us by email or phone, we process your details (e.g. name, contact details, content of your enquiry) to deal with your request. The legal bases are the same as in section 5.

Our email mailboxes run on Microsoft 365. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland. Microsoft processes the emails on our behalf under a data processing agreement (Art. 28 GDPR; Microsoft Products and Services Data Protection Addendum). Processing in the USA cannot be ruled out; Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework, and standard contractual clauses apply in addition.

7. Job applications

If you send us an application by email or post, we process the data it contains to carry out the application process. The legal basis is Art. 6(1)(b) GDPR (steps prior to an employment relationship) in conjunction with Section 26 of the German Federal Data Protection Act (BDSG).

If no employment relationship results, we delete your documents no later than six months after the process has ended. This period allows us to defend against possible claims under the German General Equal Treatment Act (AGG; Art. 6(1)(f) GDPR). If you would like us to keep your documents for future vacancies, we will only do so with your express consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

8. Fonts, images and video

Fonts, images and the video on the home page are loaded exclusively from our own web server. No connection to third-party servers (e.g. Google Fonts or YouTube) is made for this.

9. Cookies and consent management

This website does not set any cookies of its own. Cookies or similar technologies from third-party providers are only used if you have consented to the respective services (section 10).

On your first visit, a banner asks which optional services you want to allow. So that we can respect your decision, we store the entry “sls-consent” in your browser’s local storage (localStorage), containing your choice, the time and the banner version. This entry stays on your device and is not transmitted to us. Storing it is strictly necessary to implement your choice (Section 25(2) No. 2 TDDDG); the legal basis is Art. 6(1)(c) in conjunction with Art. 7(1) GDPR. We ask again after twelve months. You can delete the entry at any time in your browser settings.

Changing and withdrawing consent: Using the “Cookie settings” link at the bottom of every page, you can change your choice at any time and withdraw any consent with effect for the future.

Open cookie settings

10. Services we only use with your consent

11. Transfers to third countries

Some of the service providers named above are based in the USA or belong to groups based in the USA. We base transfers there on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework (Art. 45 GDPR) where the recipient is certified, and additionally on the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

12. Retention

We only keep personal data for as long as is necessary for the respective purpose. We delete enquiries once they have been fully dealt with and no follow-up questions are to be expected. If an enquiry leads to an order, the statutory retention periods under German commercial and tax law apply: generally six years for business correspondence and eight or ten years for accounting records and books (Section 257 HGB, Section 147 AO). For the other processing operations, the retention period is stated in the respective section.

13. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR); this does not affect the lawfulness of processing carried out before the withdrawal. Simply contact us at info@slsnord.de or at the address above.

14. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany, www.datenschutzzentrum.de.

15. No automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

16. Encryption

This website is delivered exclusively over an encrypted connection (TLS), recognisable by “https://” and the padlock symbol in your browser’s address bar. Data you send us via the website therefore cannot be read by third parties.

17. Changes to this privacy policy

We update this privacy policy when the website, our services or the legal situation change. The version published here applies.