Data Protection

Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is:

Karl Michl Speditions GmbH
Elias-Holl-Straße 7
86836 Obermeitingen, Germany
Represented by: Norbert Michl, Stefan Michl
Phone: +49 8232 9970 40
Email: info@michl-gruppe.de

2. Data Protection Officer

You can reach our appointed Data Protection Officer at:

Frank Riesner – D&S Arbeitsschutz
Phone: +49 89 78596606
Mobile: +49 176 64177481
Email: datenschutz@michl-gruppe.de

3. General information and legal bases

Protecting your personal data is important to us. We process personal data (e.g. name, address, email address) exclusively in accordance with the GDPR and the German Federal Data Protection Act (BDSG). Personal data is any information relating to an identified or identifiable natural person.

The legal basis for processing is, where we obtain your consent, Art. 6(1)(a) GDPR; for the performance of a contract or pre-contractual measures, Art. 6(1)(b) GDPR; to comply with a legal obligation, Art. 6(1)(c) GDPR; and to safeguard legitimate interests, Art. 6(1)(f) GDPR.

4. Hosting and delivery of the website (Cloudflare)

This website is hosted and delivered by Cloudflare. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When the website is accessed, technically necessary connection data (see "Server log files") is processed to provide the website securely, reliably and efficiently. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the reliable and secure presentation of our website. A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare. Cloudflare is certified under the EU-U.S. Data Privacy Framework; in addition, we have concluded Standard Contractual Clauses to ensure an adequate level of data protection for any transfer to the USA.

5. Server log files

Each time the website is accessed, information transmitted by your browser is automatically collected and stored in so-called server log files: browser type and version, operating system used, referrer URL, the page accessed, the date and time of the request, and the IP address. This data is not merged with other data sources and serves the technically error-free provision and security of our website. The legal basis is Art. 6(1)(f) GDPR. The data is deleted as soon as it is no longer required for the purpose of its collection.

6. Contact and application forms (delivery via Mailjet)

If you contact us via a form on this website or submit a job application, we process the data you provide (e.g. name, email address, phone number, message, and — for applications — the attachments you upload such as your CV and references) in order to handle your request. For the technical delivery of the form messages we use the Mailjet service provided by Mailjet SAS, 4 Rue Jules Lefebvre, 75009 Paris, France.

The legal basis is, for applications, Art. 6(1)(b) GDPR in conjunction with Sec. 26 BDSG (initiation of an employment relationship); for other enquiries, Art. 6(1)(f) GDPR (handling your request) or Art. 6(1)(a) GDPR where you have given consent. Application documents are deleted no later than six months after the application process has been completed, unless you have consented to longer storage and no statutory retention obligations apply. Data from general enquiries is deleted once your request has been conclusively handled and no statutory retention obligations (in particular under commercial and tax law) apply.

7. Job listings (Personio)

On our careers page we display current job openings that we embed via the Personio service provided by Personio SE & Co. KG, Seidlstraße 3, 80335 Munich, Germany. When the careers page is loaded, your IP address is transmitted to Personio so that the current job listings can be loaded. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in displaying up-to-date job openings.

8. Fonts

For a consistent presentation, this website uses fonts stored locally on our server. No connection to third-party servers (such as Google Fonts) takes place.

9. Cookies and tracking

This website does not use any cookies for analytics, tracking or advertising purposes and does not integrate any services that set non-essential cookies. No web analytics (e.g. Google Analytics) takes place. A consent banner is therefore not required.

10. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" and the padlock symbol in your browser's address bar.

11. Your rights as a data subject

You have the following rights:

  • Access to the data stored about you (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing (Art. 21 GDPR)

You may withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR). To exercise your rights, please contact the controller named above or our Data Protection Officer.

12. Right to lodge a complaint with a supervisory authority

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

13. Validity and amendment of this privacy policy

This privacy policy is dated July 2026. As our website develops, or due to changed legal or regulatory requirements, it may become necessary to amend this privacy policy.