Privacy Policy
Last updated: 2 November 2026
This privacy policy informs you, in accordance with Art. 13 of the General Data Protection Regulation (GDPR), which personal data is processed when you visit this website, for what purpose and on what legal basis, how long we keep it and what rights you have. This English version is provided for your convenience; in case of any discrepancy, the German version shall prevail.
1. Controller
The controller responsible for data processing on this website within the meaning of Art. 4(7) GDPR is:
Reiser Schwertransport GmbH, Chiemgaustr. 7, 83123 Amerang-Evenhausen, Germany. Represented by the Managing Director Stephan Reiser. Phone: +49 (0) 8075 / 9148 01. Fax: +49 (0) 8075 / 9148 03. E-mail: info@reiser-schwertransport.de.
2. The essentials in brief
This website does not set any cookies for its visitors and does not store anything on your device. It uses no advertising or tracking services and does not load any content from third-party servers when a page is opened — we even serve the fonts from our own server. We count how many people visit our site ourselves, on our own web space, without cookies and without storing your IP address (Section 13).
We only process personal data where it cannot be avoided: when delivering the pages technically, when you write to us or call us, when you use one of the enquiry forms or the application form, and when you play the TV report hosted on YouTube. Each of these cases is described individually below.
3. Legal bases
We process personal data on the basis of the GDPR and the German Federal Data Protection Act (BDSG): with your consent (Art. 6(1)(a) GDPR), to perform a contract or to take steps prior to entering into a contract — such as handling a freight enquiry, an escort request or an application (Art. 6(1)(b) GDPR) —, to comply with legal obligations such as retention obligations under commercial and tax law (Art. 6(1)(c) GDPR), and to protect legitimate interests (Art. 6(1)(f) GDPR). Storing information on your device and accessing it is additionally governed by Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG). The applicable basis in each case is stated in the respective section.
4. Hosting and server logs
This website is operated by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, on servers in Germany. Each time the site is accessed, the server automatically processes the data transmitted by your browser: IP address, date and time of access, page or file requested, amount of data transferred, response status code, the previously visited page (referrer), and browser and operating system.
This data is technically necessary to deliver the website at all, to ensure its stable operation and to detect and fend off attacks and misuse. The legal basis is our legitimate interest in a secure and functional website pursuant to Art. 6(1)(f) GDPR. This data is not combined with other data sources or evaluated for advertising purposes.
The logs are kept only as long as necessary for these purposes and are then deleted automatically. We only keep an entry for longer if it is needed to investigate a specific security incident; its processing is then restricted until the investigation is complete. We have concluded a data processing agreement with our host pursuant to Art. 28 GDPR.
The connection to this website is encrypted throughout using TLS. You can recognise this by the “https://” in your browser’s address bar. Third parties therefore cannot read the data you transmit to us.
5. Access via our previous address
Our website was previously available at reiser-schwertransport.de. That address now redirects to the new address reiserschwertransport.com, so that existing links and bookmarks continue to work. The redirect is handled by the server of our previous website provider, Worldsoft AG, Pfäffikon SZ, Switzerland, which also hosts our e-mail mailboxes (Section 12).
If you call up the previous address, this server processes the access data transmitted by your browser (as described in Section 4) and redirects you immediately. In doing so, the address of the page you came from is appended to the new address so that our visitor statistics can attribute the source correctly (Section 13); on the new site, this addition is removed from the address bar straight away. The legal basis is our legitimate interest in remaining reachable at the familiar address pursuant to Art. 6(1)(f) GDPR. We have concluded a data processing agreement with Worldsoft AG pursuant to Art. 28 GDPR; regarding the transfer to Switzerland, see Section 17.
6. Cookies and storage on your device
We do not use cookies for visitors to this website and do not store anything on your device: no local browser storage (localStorage, sessionStorage), no tracking pixels and no comparable techniques. Our visitor statistics (Section 13) also work without any of this and do not recognise you on a later visit.
There are two exceptions. First, the password-protected internal area of our visitor statistics, which serves exclusively our own staff, sets a session cookie when opened. It is technically necessary for secure login (Section 25(2) no. 2 TDDDG), applies only to that area and is deleted when you close your browser. Second, the embedded TV report, which we only load after your explicit click, may store information on your device (Section 14).
7. Fonts, images and maps
All fonts, images, icons and program files of this website are located on our own server and are delivered from there. We do not use services such as Google Fonts, Adobe Fonts or a content delivery network. No map is embedded; our location is merely provided as a link (Section 15).
8. Contact by e-mail, phone or fax
If you contact us by e-mail, phone or fax, we process the information you provide — usually your name, contact details and the content of your request — in order to deal with it. The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract or its initiation, otherwise our legitimate interest in answering enquiries pursuant to Art. 6(1)(f) GDPR.
Please note that an ordinary e-mail is not necessarily encrypted throughout its journey across the internet and may, under certain circumstances, be read by third parties. Please therefore do not send us particularly sensitive information by e-mail; call us or use the post instead.
We delete the data as soon as your request has been dealt with conclusively and no statutory retention obligations apply. If an order is placed, or in the case of commercial or business letters, we keep the documents within the statutory periods under German commercial and tax law (Section 257 HGB, Section 147 AO); depending on the document, these are six, eight or ten years. The legal basis for this is Art. 6(1)(c) GDPR.
9. Freight enquiry and escort request via the online forms
You can request a transport from us using the “Freight enquiry” form. Mandatory fields are your name and e-mail address, so that we can reply to you. All other fields are optional: phone number, load, length, width, height, weight, loading point, unloading point, preferred date and a message. You can also attach files — up to five with a total of no more than 10 MB; permitted are PDF, photos (JPEG, PNG, GIF, WebP, HEIC), drawings (DWG, DXF) and ZIP archives.
You can request escort vehicles for a transport using the “BF3/BF4 escort request” form. Here too, only your name and e-mail address are mandatory. Optional are company, phone number, the required escort level and the number of escort vehicles, start and destination, date or period, travel time, details of the transport (load, length, width, height, weight), the status of the permit with reference number, validity and issuing authority, and a message. You can attach files — such as the permit — to the same extent and in the same formats as with the freight enquiry.
With both forms, your information is transmitted in encrypted form to our web server, which forwards it together with the attachments directly as an e-mail to our mailbox (Section 12). It is not stored in a database on the web server; uploaded files are removed from the web server after sending. The legal basis is taking steps at your request prior to entering into a contract pursuant to Art. 6(1)(b) GDPR. Section 8 applies to further retention.
To protect against automated spam submissions, both forms contain a field that is invisible to humans and is only filled in by programs. No additional data about you is collected in the process, and your behaviour is not analysed. A service such as Google reCAPTCHA is not used.
10. Applications
You can apply for an advertised position using the application form. Mandatory fields are your name and e-mail address; optional are your phone number, a cover letter and your documents as files — up to three files totalling no more than 10 MB in PDF, Word, OpenDocument, RTF or text format. The position you are applying for is sent automatically. Your information reaches our mailbox by the same route as the freight enquiry (Section 12).
We do not need a driving licence, an ID card or photos of them for your application; please do not send such documents. A photo of yourself is not required either.
We process your application exclusively to decide on establishing an employment relationship. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract). If you voluntarily provide special categories of personal data, such as information about a severe disability, we process it pursuant to Art. 9(2)(b) GDPR insofar as this is necessary to exercise rights and fulfil obligations under employment law. Only the persons involved in the selection decision have access to your documents.
If you are hired, your documents are transferred to your personnel file. Otherwise, we delete them six months after notifying you of the rejection. This period serves to defend against possible claims under the German General Equal Treatment Act, for which the law provides two months to assert a claim and three months to file a lawsuit (Section 15(4) AGG, Section 61b(1) ArbGG); the legal basis for this retention is our legitimate interest pursuant to Art. 6(1)(f) GDPR. Longer retention, for example to consider you for future positions, only takes place with your explicit consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.
11. Log of form submissions
Solely for troubleshooting and detecting misuse, our server logs every submission of all forms (Sections 9 and 10): date and time, which form it was, whether sending succeeded or why it failed, and the names of the submitted fields and the length of their values in characters. The values themselves are not logged, nor is your IP address. An entry therefore shows that someone filled in a “message” field with 230 characters, but not what it said.
The log contains at most the last 200 entries; older ones are overwritten automatically. It cannot be accessed via the internet. The legal basis is our legitimate interest in the reliable operation of the forms pursuant to Art. 6(1)(f) GDPR.
12. Sending e-mails and mailboxes
Our web server passes the content of the freight enquiry, the escort request and the application, including attachments, to the mail server of our host (Section 4), which delivers it as an e-mail to our mailbox. Our mailboxes are hosted by our e-mail provider, Worldsoft AG, Pfäffikon SZ, Switzerland. We have concluded a data processing agreement pursuant to Art. 28 GDPR with both. No transfer to any other service provider takes place.
The mailboxes and mail servers of our e-mail provider are located in Switzerland. The European Commission has determined that Switzerland ensures an adequate level of data protection (adequacy decision pursuant to Art. 45 GDPR, Decision 2000/518/EC); the transfer is based on this. The same applies to e-mails you send us directly.
13. Our own visitor statistics
To understand how our website is used — how many people visit it, how they find us and how many of them send an enquiry — we run our own visitor statistics. They run entirely on our own web space with our host (Section 4). No other service is involved, no data is passed on to third parties, and no cookies are set.
Each time a page is opened, a small script on the page reports to our server which page was opened and, on the first page view, additionally which page you came from. From this we store: day and time (hour and minute), the page opened, the address of our website under which it was opened, the source — reduced to the name of the source, such as “Google” or the name of the referring website, not the full address —, the country from which the request came, and the type of device (phone, tablet or computer). If a freight enquiry, an escort request or an application is sent, we record that this happened — without any of the form’s content.
Your IP address is not stored. It is only used at the moment of the request: to determine the country — using a table on our own server (IP to Country Lite by DB-IP, licensed under CC BY 4.0), without querying any other service — and to form a daily identifier. This identifier is a shortened hash value derived from the IP address, the browser identifier and a random key. The key is valid for one calendar day only: with the first request on the following day it is replaced by a new one and is thus irretrievably deleted. The identifier serves solely to count several page views on the same day as one visitor; you are not recognised on another day. Once the key has been deleted, the identifier can no longer be attributed to anyone, not even by us. We keep the then anonymous entries in order to compare developments over several years.
The legal basis is our legitimate interest in designing and evaluating our website according to need pursuant to Art. 6(1)(f) GDPR. Nothing is stored on your device for this purpose.
You can object to this collection at any time (Section 21). Because we do not recognise you, we implement an objection via your browser: if “Do Not Track” or “Global Privacy Control” is switched on there, we do not count your visits. Likewise, nothing is counted if you block scripts for this website; all content remains readable nonetheless.
14. Embedded TV report (YouTube)
In one of our project reports you can play a TV report that is hosted on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
As long as you do not start the report, you only see a still image from our own server and, below it, a notice that data will be transmitted to YouTube when playing. Until then there is no connection to Google whatsoever. Only when you click the play button is the video loaded — in privacy-enhanced mode via the address youtube-nocookie.com.
With this click, your browser establishes a connection to Google’s servers. In particular, your IP address, the page opened and information about your device are transmitted. YouTube may store or read information on your device and may also process the data in the United States; if you are logged in to Google, the company can associate the access with your account.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG, which you give by clicking. It applies to this one playback only: if you reload the page or come back later, the report is blocked again until you click once more. Google LLC is certified under the EU-U.S. Data Privacy Framework; there is therefore an adequacy decision of the European Commission pursuant to Art. 45 GDPR for transfers to the United States. Further information: policies.google.com/privacy.
15. Links to Google Maps, Google reviews and Instagram
Our website contains links to our location on Google Maps, to our reviews on Google and to our Instagram profile. These are ordinary links, not embedded content: as long as you do not click, no data is transmitted to these providers and no connection to them is established.
If you follow such a link, you leave our website. From that point on, the privacy policy of the respective provider applies, over whose content we have no influence — for Google Maps and Google reviews that of Google Ireland Limited (address see Section 14), for Instagram that of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
16. Recipients of your data
Within our company, only those persons who need access to deal with your request receive access to your data. As processors we use exclusively our host STRATO (website, statistics and sending of form e-mails, Sections 4 and 12) and Worldsoft AG (e-mail mailboxes and redirection of the previous address, Sections 5 and 12). Both process the data on our behalf and in accordance with our instructions. Beyond that, we only pass on personal data to public authorities where we are legally obliged to do so. There is no sale of data and no disclosure for advertising purposes.
17. Transfers to countries outside the EU
The operation of the website and the visitor statistics (Section 13) take place entirely in Germany. Our e-mail mailboxes, which also receive the form e-mails, and the server that redirects the previous address are located with our e-mail provider in Switzerland (Sections 5 and 12); for Switzerland, an adequacy decision of the European Commission exists. Data can only reach the United States if you play the TV report (Section 14). The respective basis is stated there.
18. No automated decision-making
There is no automated decision-making, including profiling, pursuant to Art. 22 GDPR. Decisions on your enquiry and your application are made by people.
19. Obligation to provide data
You are under no legal or contractual obligation to provide us with personal data. Without a name and e-mail address, however, we cannot process a freight enquiry, an escort request or an application via the forms, because we would not be able to reply to you. You can reach us by phone or by post at any time instead.
20. Your rights
You have the right of access to the data stored about you (Art. 15 GDPR), to rectification of inaccurate or incomplete data (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to receive the data you provided in a structured, commonly used and machine-readable format (Art. 20 GDPR).
If you have given us consent, you can withdraw it at any time with effect for the future (Art. 7(3) GDPR); processing carried out until then remains unaffected. For all of these requests, an informal message to the contact details given in Section 1 is sufficient. This costs you nothing.
21. Your right to object under Art. 21 GDPR
Where we process personal data on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. This applies in particular to the server logs (Section 4), the redirection of the previous address (Section 5), the form log (Section 11) and the visitor statistics (Section 13).
If you object, we will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You can send your objection informally to the contact details given in Section 1. For the visitor statistics, the browser setting described in Section 13 is sufficient.
22. Complaint to a supervisory authority
Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your data infringes the GDPR (Art. 77 GDPR). You can contact the authority of your place of residence, your place of work or the place of the alleged infringement. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.
23. Changes to this policy
We adapt this privacy policy when the website, the services used or the legal situation change. The version published on this website applies; the date at the top shows when it was last updated.