Privacy Policy

Effective : January 1, 2022

This Privacy Policy (the “Privacy Policy”) serves to inform you of our policies and procedures regarding the collection, use and disclosure of the information we receive when you access and use our website (our “Site”), sign up for our newsletter or access and use such other subscriptions and services that may be provided by us from time to time (collectively, the “Services”). This Privacy Policy is a legally binding agreement between Cartken Inc. (“Cartken,” “we,” “our” or “us”) and you (and your employer or an entity if you are acting on their behalf, “you” or “your”) as the user of the Services. By using the Services, you hereby warrant and represent that (i) you have read, understand and agree to this Privacy Policy, and (ii) if you are acting on behalf of your employer or an entity, you have the authority to accept and agree to this Privacy Policy.

PLEASE DO NOT ACCESS OR USE THE SERVICES IF YOU DO NOT AGREE TO THIS PRIVACY POLICY.

This Privacy Policy may be updated from time to time. We will notify you of any material changes by posting the new Privacy Policy on our Site. Your use of the Services following any such notice will signify and constitute your agreement to and acceptance of such revised Privacy Policy.

Information Collection

For the purposes of this Privacy Policy, “Personal Information” means data that allows someone to identify or contact you, including, for example, your name and e-mail address, as well as any other non-public information about you that is associated with or linked to any of the foregoing data.

Personal Information we Collect

When you interact with us, we collect Personal Information that you voluntarily provide. For example, when you sign up for our newsletter or other e-mail lists or otherwise use certain aspects of our Services, we may ask you to provide information such as your name and e-mail address. In addition to collecting information on our Site, we may collect information from you when you communicate with us via e-mail. You can choose not to provide any information that is requested of you by us. However, this may limit your ability to use the Services.

Non-Personal Information

We and/or our third-party service providers may also collect information in a form that does not personally identify you (“Non-Personal Information”). Non-Personal Information can include certain Personal Information that has been de-identified; that is, information that has been rendered anonymous. We and/or our third-party service providers obtain Non-Personal Information about you from information that you provide us, either separately or together with your Personal Information. We also use cookies and other technologies to passively collect Non-Personal Information as described below.

In this Privacy Policy, we refer to all information collected from or about you, including Personal Information and Non-Personal Information, as “Your Information.”

Non-Personal Information Automatically Collected

We and our third-party service providers may use a variety of technologies, now and hereafter devised, that automatically record certain usage information. When accessing our Site, Squarespace may log your IP address, access URL, time of access, geographic location, browser type, and referral URL in order to provide us with internal information regarding Site traffic statistics. This information may also be used to identify users who are using our Site for spam or other activity that is deemed in conflict with our Terms of Service. Otherwise, this information is used in the aggregate, and is never linked back to any Personal Information. 

Cookies and Other Technologies we Use

Squarespace and our other service providers may use cookies (both session cookies and persistent cookies) to analyze trends, administer our Site, track your movements around our Site, better understand how you interact with our Site, determine interest in particular content and monitor aggregate usage by visitors and online traffic routing. We may receive reports based on the use of these technologies by these companies on an individual and aggregated basis. You may be able to instruct your browser, by changing its option, to stop accepting cookies or to prompt you before accepting a cookie from the online services you visit. You may also remove persistent cookies by following your web browser’s help file directions. If you do not accept cookies, however, you may not be able to use all portions of our Site or all functionality of our Site.

Squarespace and our other service providers may also use “pixel tags,” “web beacons,” “clear GIFs,” or similar means in connection with our Site and HTML-formatted e-mail messages to, among other things, track the actions of users, to determine the success of marketing campaigns and to compile aggregate statistics about Site usage and response rates. This information is collected anonymously, in a manner that does not personally identify you

Our Use of Your Information

We mainly use Your Information, either alone or in combination with other information, so that we can provide, enhance and personalize our Services and related content. Your Information is used and disclosed for, but is not limited to, the following purposes:

We may combine your Personal Information with Non-Personal Information and aggregate it with information collected from other users or sources to attempt to provide you with a better experience, to improve the quality of our Services, and to analyze and understand how our Services are used. We may also use the combined information without aggregating it to serve you specifically. After you terminate your use of the Services, we may continue to use your Non-Personal Information for statistical purposes or other purposes as we see fit. Please note that we cannot guarantee that Non-Personal Information will not identify you as we cannot guarantee that others with access to Non-Personal Information may not have knowledge sufficient to identify you.

Public Forums

Our Site has features that enable users to post content publicly (including, without limitation, user comments). The protections described in this Privacy Policy do not apply when you provide information (including Personal Information about you or any person) in connection with your use of these public forums. Any information you share in a public forum is public information and may be seen or collected by other persons, including third parties that do not adhere to the standards set forth in this Privacy Policy. We are not responsible for events arising from the distribution of any information you choose to publicly post or share through our Site. You agree that we may use Personal Information and other information about you to identify you with a posting in a public forum. If you would not like to have these details disclosed, you should refrain from posting any comments on our Site.

Information Sharing and Disclosure

We will not rent or sell your Personal Information to others. Non-Personal Information may be provided to third parties for marketing, advertising, or other uses.

Our Service Providers and Other Third Parties

To operate the Services, we may share Your Information with our agents, representatives and contractors so they can provide us with support services and other features. We also may engage third-party companies and individuals to perform services on our behalf or to assist us in analyzing how our Services are used. These third parties may have access to your Personal Information. If they do, this access is provided so that they may perform these tasks on our behalf and we ask these third parties not to otherwise use or disclose your Personal Information in ways that are prohibited by this Privacy Policy, except to the extent required by law. However, Cartken is not responsible for the privacy policies and/or practices of such third parties.

Analytics Information

Squarespace uses analytics tools to help us measure traffic and usage trends for our Site. These tools collect information sent by your browser as part of a web page request, including the web pages you visit, your browser add-ons, and other information that assists us in improving our Site. We may collect and use this analytics information together with your Personal Information and stitch together session data from user visits to build a broader profile of our individual users so that we can serve you better.

Third-Party Products and Our Site

Our Site contain links to, and/or content from, third-party websites and online services. The fact that we link to a website or display an advertisement or other third-party content or product is not an endorsement, authorization or representation of our affiliation with any of those third parties, nor is it an endorsement of their privacy or information security policies or practices.

This Privacy Policy applies only to our Site and your interactions with those third-party services are governed by the privacy policy of the third party providing it. We do not exercise control over third-party websites, products or services. Other websites, products and services may place their own cookies or other files on your computer and/or collect data or solicit Personal Information from you. We encourage you to read the privacy policies and other terms of such third parties before using their services.

Compliane with Laws, Legal Process and Authorities

We may disclose any of Your Information to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate to: (1) comply with a legal requirement or process, including, but not limited to, civil and criminal subpoenas, court orders or other compulsory disclosures; (2) enforce our Privacy Policy or Terms of Service; (3) respond to claims of a violation of the rights of third parties; (4) respond to user comments or service inquiries; (5) protect our rights, property, or safety and the rights, property and safety of our users or the public; or (6) prevent or stop any activity we may consider to be, or to pose a risk of being, illegal, unethical, inappropriate or legally actionable. However, Cartken will endeavor only to disclose information requested via a valid legal process, and will endeavor to notify any user about whom we have disclosed information if possible.

Data Transfer

Squarespace and Cartken process Personal Information in the United States of America. You should be aware that the United States and other countries have not harmonized their privacy regulations. Because Cartken and Squarespace are located in the United States, we have written our Privacy Policy to satisfy United States regulations. By using our Services or providing us with Your Information, you explicitly (i) acknowledge and agree that Your Personal Information may be transferred to, and used by, entities located outside of your state, province, country or other governmental jurisdiction where the privacy laws may not be as protective as those in your jurisdiction, and (ii) consent to the collection, transfer, storage and processing of your Information to and in the United States and the use and disclosure of Your Information as described in this Privacy Policy.

Business Transfers

Circumstances may arise where, whether for strategic or other business reasons, we may sell, transfer or otherwise disclose some or all of our assets, including your Personal Information, in connection with a merger, acquisition, reorganization or sale of assets or in the event of bankruptcy. It’s our practice to seek appropriate protection for Your Information in those types of transactions.

Opting Out

If you decide at any time that you no longer wish to receive communications from us, please follow any unsubscribe instructions that may be provided on our Site or in our communications to you. Please note that we may use your Personal Information to contact you with important notifications, such as changes to our terms, conditions and policies; you may not opt out of these notifications. Please also note that we may continue to use Your Information for statistical or other purposes as we see fit after you unsubscribe from any communications and/or terminate your use of the Services.

Changing or Deleting Your Information

We keep your data on your behalf and for your benefit. You can correct your name and e-mail address that we have on file by e-mailing us at info@cartken.com, which you may also contact for further assistance and questions regarding this Privacy Policy. If you request us to delete your Personal Information, we will delete such Personal Information within seven (7) business days. We may decline to process change or deletion requests that we deem to be unreasonable, require disproportionate technical effort, jeopardize the privacy of others, or as may be required by law.

Do Not Track

Squarespace currently does not respond to Do Not Track signals.

Security

Please be advised that while we strive to protect your Personal Information and privacy, we cannot guarantee or warrant the security of any information you disclose or transmit to us online and we are not responsible for the theft, destruction or inadvertent disclosure of your Personal Information.

Compromise of Personal Information

In the event that Personal Information is compromised as a result of a breach of security, Cartken will promptly notify those persons whose Personal Information has been compromised, in accordance with the notification procedures set forth in this Privacy Policy, or as otherwise required by applicable law. In the event that we or our Site suffers a data security breach that requires us to provide you with notice, such as under applicable law, you consent to allow us to provide you with such notice by sending an e-mail to the e-mail address you have provided to us.

Notification Procedures

It is our policy to provide notifications, whether such notifications are required by law or are for other business related purposes, to you via e-mail notice, written or hard copy notice, or through conspicuous posting of such notice on our Site, as determined by Cartken in its sole discretion. We reserve the right to determine the form and means of providing notifications to you, provided that you may opt out of certain means of notification as described in this Privacy Policy.

Our Policy Towards Children

We do not knowingly collect Personal Information from children under 13 via our Services, and we do not target our Services to children under 13. We encourage parents and guardians to take an active role in their children’s online activities and interests. If we become aware that we have unknowingly collected Personal Information from a child under the age of 13, we will make commercially reasonable efforts to delete such information from our databases. If you are the parent of a child under the age of 13 and have a concern regarding your child’s information on our Site, please contact us at info@cartken.com.

Changes to this Privacy Policy

Our security and this Privacy Policy are periodically reviewed and enhanced as necessary. This Privacy Policy might change as we update and expand the Services. We will notify you of any material changes by posting the new Privacy Policy on our Site. We encourage you to review this Privacy Policy periodically. If you do not understand any of the terms or conditions of any of our policies, you may inquire regarding the same via e-mail at info@cartken.com. Your continued use of the Services after any change in this Privacy Policy will constitute your acceptance of such change.

EU GDPR

We at Cartken are pleased to welcome you to our website. Data protection is a very important topic for us. Therefore, we would like to inform you in the following which data we collect from you in the context of our delivery robots and for which purposes we use them.

The privacy policy can be accessed, saved and printed out at any time. Changes to processes and laws can lead to adjustments in this data protection declaration. Therefore, we ask you to read through the data protection declaration regularly.

I. Data Controller and Scope

The responsible party within the meaning of the EU General Data Protection Regulation (hereinafter: GDPR) and other national data protection laws of the member states as well as other data protection regulations is:

Cartken GmbH
Rosenheimer Str. 139
81671 Munich

II. Processing Activities

Personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your appearance, name, age, address, telephone number, date of birth, e-mail address, IP address or user behavior. Information for which we cannot (or can only with a disproportionate effort) establish a link to your person, e.g. by anonymizing the information, is not personal data. The processing of personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal basis or your consent. Processed personal data will be deleted as soon as the purpose of the processing has been achieved and there are no longer any legally required retention obligations.

If we process your personal data for the provision of certain offers, we will inform you below about the specific processes, the scope and purpose of the data processing, the legal basis for the processing and the respective storage period.

III. Processing Activities

A. Delivery of Goods to and Address

1. Scope and Purpose of the Processing
We process the delivery address provided by the customer when placing the order with the provider for the purpose of carrying out the delivery to the address provided.

2. Legal Basis
The legal basis for this processing activity is the fulfillment of the contract concluded between the ordering party and the provider pursuant to Art. 6 (1) lit. b GDPR.

3. Storage Time
The address will be deleted from our system after delivery of the order.

4. Recipients and Data Transfers outside the European Economic Area The address will not be passed on to third parties. Within our company, only those employees who are entrusted with technical support have access to this data.

B. Video Recording by the Robots for External Control

1. Scope and Purpose of the Processing Cartken's robots are equipped with video cameras that film their surroundings. The livestream is used so that we can access the robots from outside and control them remotely if necessary. Passers-by are blacked out so that they are no longer identifiable. Other objects or buildings, for example, are still recognizable in the images and may possibly have a personal reference.

3. Legal Basis
The legal basis for this processing is our legitimate interest pursuant to Art. 6 (1) lit. f GDPR to comply with our road traffic obligations. The possibility of access from the outside allows us to control the Cartken robots ourselves in an emergency through our Technical Supervision in Germany and thereby defuse and avoid dangerous situations. It is important to us to respect the rights of all participants in road traffic. The livestream will only be activated as far as this is required by one of the mentioned purposes.

3. Storage Time
The live stream of the video cameras is not recorded.

4. Recipients and Data Transfers outside the European Economic Area We also forward the livestream with the redacted passers-by to our service provider in Mexico. The transfer takes place on the basis of the European Union Standard Contractual Clauses (SCC’s) in accordance with Art. 46 GDPR to ensure an adequate level of data protection in the processing of your personal data.

C. Video Recording by the Robots for Evidence

1. Scope and Purpose of the Processing
If a robot is damaged, removed from its position or otherwise operated unlawfully, a 30-second section of the recordings can be saved for later evidentiary purposes. People and license plates, for example, may be recognizable on the recordings.

2. Legal Basis
The legal basis for this processing is our legitimate interest pursuant to Art. 6 (1) lit. f GDPR to protect our property (the robots).

3. Storage Time
The 30-second recording will only be stored in the event of an incident mentioned above. This recording will then be stored in accordance with the legal provisions for the assertion of our rights. The recordings will be deleted as soon as they are no longer needed for the aforementioned evidentiary purposes.

4. Recipients and Data Transfers outside the European Economic Area
In certain circumstances, we forward video footage to our parent company Cartken Inc. in the USA for evidentiary purposes. The transfer to recipients outside the EEA in accordance with the principles of the European Union Standard Contractual Clauses (EU Standard Contractual Clauses) under Article 46 GDPR to ensure an adequate level of data protection in the processing of your personal data. We also want to comply with this standard of protection at Cartken and have therefore committed to respecting these requirements and implementing them internally within the Group as part of an Inter Company Agreement.

D. Video Recordings by the Robots for the Correction of System Errors

1. Scope and Purpose of the Processing
The Cartken robots create video recordings that we regularly evaluate for troubleshooting purposes. The video recordings are pixelated so that no personal reference can be made.

2. Legal Basis
The legal basis for this processing is our legitimate interest pursuant to Art. 6 (1) lit. f GDPR to continuously improve our system. By pixelating/anonymizing the recordings, no video material with personal reference is further processed in this respect.

3. Storage Time
The images are pixelated to such an extent that it is no longer possible to identify a person.

4. Recipients and Data Transfers outside the European Economic Area
Recipients of the videos only receive the pixelated recordings, so that there is no longer any personal reference.

IV. Your Rights as a Subject

The GDPR gives you the following rights as a data subject of a processing of personal data:

V. Right of Ojections

In the case of processing of your personal data on the basis of legitimate interests pursuant to Article 6 (1) p. 1 lit. f) GDPR, you have the right to object to the processing of your personal data pursuant to Article 21 GDPR, provided that there are grounds for doing so that arise from your particular situation.

VI. Data Security and Backup Measures

We are committed to protecting your privacy and treating your personal data confidentially. To prevent manipulation, loss or misuse of your data stored with us, we take extensive technical and organizational security precautions, which are regularly reviewed and adapted to technological progress.

Datenschutz

Cartken freut sich über Ihren Besuch auf unserer Webseite. Datenschutz ist für uns ein sehr wichtiges Thema. Deswegen möchten wir Sie im Folgenden darüber informieren, welche Daten wir von Ihnen im Rahmen unserer Liefer-Roboter erfassen und für welche Zwecke wir diese nutzen.

Die Datenschutzerklärung kann jederzeit abgerufen, gespeichert und ausgedruckt werden. Änderungen von Prozessen und Gesetzen können zu Anpassungen in dieser Datenschutzerklärung führen. Deswegen bitten wir Sie, die Datenschutzerklärung regelmäßig durchzulesen.

I. Verantwortlicher und Geltungsbereich

Der Verantwortliche im Sinne der EU-Datenschutzgrundverordnung (im Folgenden: DSGVO) und anderer nationaler Datenschutzgesetze der Mitgliedsstaaten sowie sonstiger datenschutzrechtlicher

Bestimmungen ist:
Cartken GmbH
Rosenheimer Str. 139
81671 München
Kontaktinformationen

II. Grundsätze der Datenverarbeitung

Personenbezogene Daten sind alle Informationen, die sich auf eine identifizierte oder identifizierbare natürliche Person beziehen. Hierzu gehören beispielsweise Informationen wie Ihr Aussehen, Ihr Name, Ihr Alter, Ihre Anschrift, Ihre Telefonnummer, Ihr Geburtsdatum, Ihre E-Mail-Adresse, Ihre IP-Adresse oder das Nutzerverhalten. Informationen, bei denen wir keinen (oder nur mit einem unverhältnismäßigen Aufwand einen) Bezug zu Ihrer Person herstellen können, z.B. durch Anonymisierung der Informationen, sind keine personenbezogenen Daten. Die Verarbeitung von personenbezogenen Daten (bspw. das Erheben, das Abfragen, die Verwendung, die Speicherung oder die Übermittlung) bedarf immer einer gesetzlichen Grundlage oder Ihrer Einwilligung. Verarbeitete personenbezogene Daten werden gelöscht, sobald der Zweck der Verarbeitung erreicht wurde und keine gesetzlich vorgeschriebenen Aufbewahrungspflichten mehr zu wahren sind.

Sofern wir für die Bereitstellung bestimmter Angebote Ihre personenbezogenen Daten verarbeiten, informieren wir Sie nachfolgend über die konkreten Vorgänge, den Umfang und den Zweck der Datenverarbeitung, die Rechtsgrundlage für die Verarbeitung und die jeweilige Speicherdauer.

III. Verarbeitungstätigkeiten

A. Auslieferung der Ware an Adresse

1. Art und Umfang der Datenverarbeitung
Wir verarbeiten die vom Besteller bei der Bestellung bei REWE angegebene Lieferadresse zum Zwecke der Durchführung der Lieferung an die angegebene Adresse.

2. Rechtsgrundlage
Rechtsgrundlage für diese Verarbeitungstätigkeit ist die Erfüllung des zwischen dem Bestellenden und dem Anbieter (z.B. REWE) geschlossenen Vertrages gemäß Art. 6 Abs. 1 lit. b DSGVO.

3. Speicherdauer
Die Adresse wird nach Auslieferung der Bestellung aus unserem System gelöscht.

4. Empfänger und Datenübermittlungen außerhalb des Europäischen Wirtschaftsraums

Die Adresse wird nicht an Dritte weitergegeben. Innerhalb unseres Unternehmens haben nur diejenigen Mitarbeiter Zugang zu diesen Daten, die mit der technischen Betreuung betraut sind.

B. Videoaufnahmen durch die Roboter für externe Kontrolle

1. Art und Umfang der Datenverarbeitung
Die Roboter von Cartken sind mit Videokameras ausgestattet, die ihre Umgebung filmen. Der Livestream dient dazu, dass wir von außen auf die Roboter zugreifen und sie bei Bedarf fernsteuern können. Passanten werden dabei geschwärzt, so dass sie nicht mehr identifizierbar sind. Sonstige Gegenstände oder beispielsweise Gebäude sind auf den Bildern weiter erkennbar und können unter Umständen einen Personenbezug aufweisen.

2. Rechtsgrundlage
Rechtsgrundlage für diese Verarbeitung ist unser berechtigtes Interesse gemäß Art. 6 Abs. 1 lit. f DSGVO, unseren Verpflichtungen im Straßenverkehr nachzukommen. Durch die Möglichkeit des Zugangs von außen können wir die Cartken Roboter im Notfall ddurch unsere Technische Aufsicht un Deutschland selbst steuern und dabei gefährliche Situationen entschärfen und vermeiden. Dabei ist es uns wichtig die Rechte aller Beteiligten im Straßenverkehr zu achten. Der Livestream wird nur aktiviert, soweit dies durch einer der genannten Zwecke geboten ist.

3. Speicherdauer
Der Livestream der Videokameras wird nicht aufgezeichnet.

4. Empfänger und Datenübermittlungen außerhalb des Europäischen Wirtschaftsraums
Wir leiten den Livestream mit den geschwärzten Passanten auch an unseren Dienstleister in Mexiko weiter. Die Übermittlung an Empfänger außerhalb des EWR erfolgt auf Grundlage der Standardvertragsklauseln der Europäischen Union (EU-Standardvertragsklauseln) gemäß Art. 46 GDPR, um ein angemessenes Datenschutzniveau bei der Verarbeitung Ihrer personenbezogenen Daten zu gewährleisten.

C. Videoaufnahmen durch die Roboter für Beweiszwecke

1. Art und Umfang der Datenverarbeitung
Sollte ein Roboter beschädigt, von seiner Position entfernt oder anderweitig unrechtmäßig bedient werden, kann ein 30-sekündiger Ausschnitt der Aufnahmen für spätere Beweiszwecke gespeichert werden. Auf den Aufnahmen können beispielsweise Personen und Nummernschilder erkennbar sein.

2. Rechtsgrundlage
Rechtsgrundlage für diese Verarbeitung ist unser berechtigtes Interesse gemäß Art. 6 Abs. 1 lit. f DSGVO, unser Eigentum (die Roboter) zu schützen.

3. Speicherdauer
Die 30 Sekunden lange Aufnahme wird nur im Falle eines oben genannten Vorfalls gespeichert. Diese Aufnahme wird dann entsprechend den gesetzlichen Bestimmungen zur Geltendmachung unserer Rechte aufbewahrt. Die Aufnahmen werden gelöscht, sobald sie für den genannten Beweiszwecke nicht mehr gebraucht werden.

4. Empfänger und Datenübermittlungen außerhalb des Europäischen Wirtschaftsraums
Unter bestimmten Umständen leiten wir Videomaterial zu Beweiszwecken an unsere Muttergesellschaft Cartken Inc. in den USA weiter. Die Übermittlung an Empfänger außerhalb des EWR nach den Grundsätzen der Standardvertragsklauseln der Europäischen Union (EU Standardvertragsklauseln) gemäß Art. 46 GDPR, um ein angemessenes Datenschutzniveau bei der Verarbeitung Ihrer personenbezogenen Daten zu gewährleisten. Diesen Schutzstandard wollen wir auch bei Cartken einhalten und haben uns deshalb im Rahmen eines Inter Company Agreement verpflichtet, diese Anforderungen zu respektieren und konzernintern umzusetzen.

D. Videoaufnahmen durch die Roboter für die Behebung von Systemfehlern

1. Art und Umfang der Datenverarbeitung
Die Cartken-Roboter erstellen Videoaufnahmen, die wir zur Fehlerbehebung regelmäßig auswerten. Die Videoaufnahmen werden dabei verpixelt, sodass kein Personenbezug mehr hergestellt werden kann.

2. Rechtsgrundlage
Rechtsgrundlage für diese Verarbeitung ist unser berechtigtes Interesse gemäß Art. 6 Abs. 1 lit. f DSGVO, unser System ständig zu verbessern. Durch die Verpixelung/Anonymisierung der Aufnahmen wird in dieser Hinsicht kein Videomaterial mit Personenbezug weiterverarbeitet.

3. Speicherdauer
Die Aufnahmen werden so weit verpixelt, dass eine Identifizierung einer Person nicht mehr möglich ist.

4. Empfänger und Datenübermittlungen außerhalb des Europäischen Wirtschaftsraums
Empfänger der Videos erhalten lediglich die verpixelten Aufnahmen, sodass kein Personenbezug mehr vorliegt.

IV. Ihre Rechte als Betroffene/r

Aus der DSGVO ergeben sich für Sie als Betroffene/r einer Verarbeitung personenbezogener Daten die folgenden Rechte:

Gemäß Artikel 15 DSGVO können Sie Auskunft über Ihre von uns verarbeiteten personenbezogenen Daten verlangen. Sie können insbesondere Auskunft über die Verarbeitungszwecke, die Kategorien der personenbezogenen Daten, die Kategorien von Empfängern, gegenüber denen Ihre Daten offengelegt wurden oder werden, die geplante Speicherdauer, das Bestehen eines Rechts auf Berichtigung, Löschung, Einschränkung der Verarbeitung oder Widerspruch, das Bestehen eines Beschwerderechts, die Herkunft ihrer Daten, sofern diese nicht bei uns erhoben wurden, über eine Übermittlung in Drittländer oder an internationale Organisationen sowie über das Bestehen einer automatisierten Entscheidungsfindung einschließlich Profiling und ggf. aussagekräftige Informationen zu deren Einzelheiten verlangen.

Gemäß Artikel 16 DSGVO können Sie unverzüglich die Berichtigung unrichtiger oder die Vervollständigung Ihrer bei uns gespeicherten personenbezogenen Daten verlangen.

Gemäß Artikel 17 DSGVO können Sie die Löschung Ihrer bei uns gespeicherten personenbezogenen Daten verlangen, soweit die Verarbeitung nicht zur Ausübung des Rechts auf freie Meinungsäußerung und Information, zur Erfüllung einer rechtlichen Verpflichtung, aus Gründen des öffentlichen Interesses oder zur Geltendmachung, Ausübung oder Verteidigung von Rechtsansprüchen erforderlich ist.

Gemäß Artikel 18 DSGVO können Sie die Einschränkung der Verarbeitung Ihrer personenbezogenen Daten verlangen, soweit die Richtigkeit der Daten von Ihnen bestritten wird, die Verarbeitung unrechtmäßig ist, wir die Daten nicht mehr benötigen und Sie deren Löschung ablehnen, weil Sie diese zur Geltendmachung, Ausübung oder Verteidigung von Rechtsansprüchen benötigen. Das Recht aus Art. 18 DSGVO steht Ihnen auch zu, wenn Sie gemäß Art. 21 DSGVO Widerspruch gegen die Verarbeitung eingelegt haben.

Gemäß Artikel 20 DSGVO können Sie verlangen, Ihre personenbezogenen Daten, die Sie uns bereitgestellt haben, in einem strukturierten, gängigen und maschinenlesebaren Format zu erhalten oder Sie können die Übermittlung an einen anderen Verantwortlichen verlangen.

Gemäß Artikel 7 Abs. 3 DSGVO können Sie Ihre einmal erteilte Einwilligung jederzeit gegenüber uns widerrufen. Dies hat zur Folge, dass wir die auf dieser Einwilligung beruhende Datenverarbeitung für die Zukunft nicht mehr fortführen dürfen.
Gemäß Artikel 77 DSGVO steht Ihnen das Recht zu, sich bei einer Aufsichtsbehörde z beschweren. In der Regel können Sie sich hierfür an die Aufsichtsbehörde Ihres üblichen Aufenthaltsortes, Ihres Arbeitsplatzes oder unseres Unternehmenssitzes wenden.

V. Widerspruchsrecht

Bei der Verarbeitung Ihrer personenbezogenen Daten auf Grundlage berechtigter Interessen gemäß Artikel 6 Abs. 1 S. 1 lit. f) DSGVO, haben Sie das Recht, gemäß Artikel 21 DSGVO Widerspruch gegen die Verarbeitung Ihrer personenbezogenen Daten einzulegen, soweit dafür Gründe vorliegen, die sich aus Ihrer besonderen Situation ergeben.

VI. Datensicherheit und Sicherungsmaßnahmen

Wir verpflichten uns, Ihre Privatsphäre zu schützen und Ihre personenbezogenen Daten vertraulich zu behandeln. Um eine Manipulation, einen Verlust oder einen Missbrauch Ihrer bei uns gespeicherten Daten zu vermeiden, treffen wir umfangreiche technische und organisatorische Sicherheitsvorkehrungen, die regelmäßig überprüft und dem technologischen Fortschritt angepasst werden.

Contacting Us

If you have any questions about this Privacy Policy, please feel free to contact us via mail at info@cartken.com.

Privacy Policy (Excluding EU): Delivery Robots (en.)

We at Cartken are pleased to welcome you to our website. Data protection is a very important topic  for us. Therefore, we would like to inform you in the following which data we collect from you in the  context of our delivery robots and for which purposes we use them.  The privacy policy can be accessed, saved and printed out at any time. Changes to processes and laws  can lead to adjustments in this data protection declaration. Therefore, we ask you to read through  the data protection declaration regularly.

I. Data Controller and Scope

The responsible party within operations in North America and adherence to other national data protection laws and data protection regulations, except those covered under the EU General Data Protection Regulation:

Cartken Inc.
8000 Edgewater Dr., Suite #200,
Oakland, CA 94621

II. Principles of Processing Activities 

Personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your appearance, name, age, address, telephone number, date of birth, e-mail address, IP address or user behavior. Information for which we cannot (or can only with a disproportionate effort) establish a link to your person, e.g. by anonymizing the information, is not personal data. The processing of personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal basis or your consent. Processed personal data will be deleted as soon as the purpose of the processing has been achieved and there are no longer any legally required retention obligations.

If we process your personal data for the provision of certain offers, we will inform you below about the specific processes, the scope and purpose of the data processing, the legal basis for the processing and the respective storage period.

III. Processing Activities 

A. Delivery of Goods to an Address

1. Scope and Purpose of the Processing 
We process the delivery address provided by the customer when placing the order with the provider  for the purpose of carrying out the delivery to the address provided. 

2. Legal Basis 
The legal basis for this processing activity is the fulfillment of the contract concluded between the  ordering party and the provider

3. Storage Time 
The address will be deleted from our system after delivery of the order. 

4. Recipients and Data Transfers outside the Service Area 
The address will not be passed on to third parties. Within our company, only those employees who  are entrusted with technical support have access to this data. 

B. Video Recording by the Robots for External Control

1. Scope and Purpose of the Processing 
Cartken's robots are equipped with video cameras that film their surroundings. The livestream is used so that we can access the robots from outside and control them remotely if necessary. Passers-by are blacked out so that they are no longer identifiable. Other objects or buildings, for example, are still recognizable in the images and may possibly have a personal reference. 

2. Legitimate Interest 
Access to the recordings are made under legitimate interest to comply with our road traffic obligations. The possibility of access from the outside allows us to control the  Cartken robots ourselves in an emergency through our Technical Supervision and thereby defuse and  avoid dangerous situations. It is important to us to respect the rights of all participants in road traffic.  The livestream will only be activated as far as this is required by one of the mentioned purposes. A  continuous transmission does not take place. 

3. Storage Time 
The live stream of the video cameras is not recorded. 

4. Recipients and Data Transfers outside the Service Area We also forward the livestream with the redacted passers-by to our service provider in Mexico. The transfer takes place ensuring an adequate level of data protection in the processing of your personal data. 

C. Video Recording by the Robots for Evidence

1. Scope and Purpose of the Processing
If a robot is damaged, removed from its position or otherwise operated unlawfully, a 30-second section of the recordings can be saved for later evidentiary purposes. People and license plates, for example, may be recognizable on the recordings.

2. Legitimate Interest
Access to the recordings are made under legitimate interest to protect our property (the robots).

3. Storage Time
The 30-second recording will only be stored in the event of an incident mentioned above. This recording will then be stored in accordance with the legal provisions for the assertion of our rights. The recordings will be deleted as soon as they are no longer needed for the aforementioned evidentiary purposes.

4. Recipients and Data Transfers outside the Service Area
In certain circumstances, we forward video footage between our parent company Cartken Inc. in the  USA and Cartken GmbH in Germany for evidentiary purposes. The transfer to recipients outside the  EEA in accordance with the principles of the European Union Standard Contractual Clauses (EU  Standard Contractual Clauses) under Article 46 GDPR to ensure an adequate level of data protection  in the processing of personal data. We also want to comply with this standard of protection at  Cartken and have therefore committed to respecting these requirements and implementing them  internally within the Group as part of an Inter Company Agreement.

D. Video Recordings by the Robots for the Correction of System Errors 1.

1. Scope and Purpose of the Processing
The Cartken robots create video recordings that we regularly evaluate for troubleshooting purposes.  The video recordings are pixelated so that no personal reference can be made.

2. Legitimate Interest
Access to the recordings are made under legitimate interest to  continuously improve our system. By pixelating/anonymizing the recordings, no video material with  personal reference is further processed in this respect.

3. Storage Time
The images are pixelated to such an extent that it is no longer possible to identify a person.

4. Recipients and Data Transfers
Recipients of the videos only receive the pixelated recordings, so that there is no longer any personal  reference.

IV. Your rights as a data subject

• You can request information about your personal data  processed by us. In particular, you can request information about the processing purposes,  the categories of personal data, the categories of recipients to whom your data has been or  will be disclosed, the planned storage period, the existence of a right to rectification, erasure,  restriction of processing or objection, the existence of a right of complaint, the origin of your  data if it has not been collected by us, about a transfer to third countries or international  organizations and about the existence of automated decision-making, including profiling,  and, if applicable, meaningful information about its details.

• You can immediately request the correction of incorrect  or the completion of your personal data stored by us.

• You may request the erasure of your personal data stored by us,  unless the processing is necessary for the exercise of the right to freedom of expression and  information, for compliance with a legal obligation, for reasons of public interest, or for the  establishment, exercise or defense of legal claims.

• You may request the restriction of the processing of your  personal data if you dispute the accuracy of the data, the processing is unlawful, we no  longer need the data and you object to their deletion because you need them for the  assertion, exercise or defense of legal claims.

• You may request to receive your personal data that you have  provided to us in a structured, commonly used and machine-readable format or you may  request that it be transferred to another controller.

• You can withdraw your consent once given to us at any  time. This has the consequence that we may no longer continue the data processing based  on this consent for the future.

• You have the right to complain to a supervisory authority. As a  rule, you can contact the supervisory authority of your usual place of residence, your place of  work or our company headquarters.

V. Right of Objection

In the case of processing of your personal data on the basis of legitimate interests, you have the right to object to the processing of your personal data pursuant, provided that there are grounds for doing so that arise from your particular  situation.

VI. Data security and backup measures

We are committed to protecting your privacy and treating your personal data confidentially. To  prevent manipulation, loss or misuse of your data stored with us, we take extensive technical and  organizational security precautions, which are regularly reviewed and adapted to technological  progress.

Contacting Us

If you have any questions about this Privacy Policy, please feel free to contact us via mail at info@cartken.com.