Privacy policy

This English translation is provided for information. The German version is authoritative.

1. Introduction and controller contact details

We are pleased that you are visiting our website and thank you for your interest. The following information explains how we handle your personal data when you use our website. Personal data means all data by which you can be personally identified.

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Emanuel P. Rob e.U., owner: Paul Emanuel Rob, Niederzirking 98, 4312 Ried in der Riedmark, Austria, phone: +43 1 442 00 92, email: info@roblogistics.at. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2. Data collected when you visit our website

When you use our website for information only, meaning you do not otherwise provide information to us, only data transmitted by your browser to the website server is processed (known as server log files). This may include, in particular, the page accessed, date and time of access, volume of data transferred, source or referring page, browser used, operating system used and IP address.

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in providing a secure, stable and functional website. Log data may subsequently be evaluated if there are specific indications of unlawful use or a security incident.

3. Hosting and technical provision

For the hosting, maintenance and technical provision of this website, we use “ChatGPT Sites” from OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland (“OpenAI”). OpenAI processes data generated through the operation of this website on our behalf. This includes technical connection and usage data as well as information submitted through the forms.

Form data is stored in a protected database within the hosting infrastructure. OpenAI may use further subprocessors to provide its services, particularly for web hosting, infrastructure, security and content delivery. According to the current subprocessor list, these include Cloudflare, Ltd.

Where data is processed outside the European Economic Area, OpenAI states that the transfer is based on an adequacy decision by the European Commission or appropriate safeguards, in particular the European Commission’s Standard Contractual Clauses.

Further information is available in the ChatGPT Sites Data Processing Addendum and the OpenAI subprocessor list.

4. Cookies, fonts and external services

This website does not use its own analytics or marketing cookies. The hosting provider may use technically necessary cookies or comparable technologies where required for secure provision, protection against misuse or access control. Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in the secure and functional operation of the website.

A cookie consent tool is currently not used because the website does not integrate any analytics, advertising or other third-party browser services that require consent. The server-side email delivery described in section 5.4 does not set cookies in visitors’ browsers. The fonts used are provided locally, so no connection to Google Fonts is established when a page is loaded. Google Maps and Google reCAPTCHA are also not used on this website.

5. Contact, transport requests and applications

5.1 General contact

When you contact us, for example by phone, email or a form, personal data is collected. The data collected when a form is used can be seen in the relevant form. This data is used solely to process and respond to your enquiry and for the related administration.

The legal basis is our legitimate interest in responding to your enquiry in accordance with Art. 6(1)(f) GDPR. If your contact is intended to conclude a contract, Art. 6(1)(b) GDPR provides an additional legal basis. The data will be deleted once the matter has been fully processed, unless statutory retention obligations or legitimate interests require further storage.

5.2 Transport requests

For a transport request, we process in particular your name, email address, phone number, pickup and destination address, as well as information about the requested service, date, goods, quantity, dimensions, weight and on-site conditions. Voluntary additional information is also processed if you provide it in the form.

Processing is carried out to handle your request and take steps prior to entering into a contract in accordance with Art. 6(1)(b) GDPR. Where your request is not directly aimed at concluding a contract, processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in efficiently processing and responding to your request.

5.3 Applications and transport partners

For job applications and enquiries as a self-employed transport partner, we process in particular the type of application, first and last name, phone number, email address, place of residence or company location and, depending on the selected application, driving licence categories, company name, vehicle type, number of vehicles, availability and voluntary information in the message field.

Processing is carried out to manage the application or selection procedure and assess possible employment or cooperation in accordance with Art. 6(1)(b) GDPR. Where the person making the enquiry is not themselves intended to become a party to a possible contractual relationship, processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in efficiently selecting and communicating with applicants and potential business partners.

No decision based solely on automated processing or profiling takes place when handling transport requests and applications. Form data is accessible only through a protected internal overview for duly authorised persons.

Application data is stored until the relevant selection process is complete and generally for a further seven months. Continued storage is based on Art. 6(1)(f) GDPR and our legitimate interest in defending against or asserting possible legal claims. After this period, the data is deleted unless statutory retention obligations apply, an employment or contractual relationship has been established, or separate consent has been given for longer storage. If an employment or contractual relationship is established, the data required for that relationship is transferred to the relevant personnel or contract administration.

5.4 Email delivery via Resend

To reliably transmit internal email notifications about incoming contact enquiries, transport requests and applications, we use the email delivery service “Resend” from Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA (“Resend”). The contact details and message content entered in the relevant form, together with the related reference number, are transmitted to Resend so that the enquiry can be delivered to us by email.

Depending on the purpose of the relevant enquiry, processing is based on Art. 6(1)(b) GDPR to take steps prior to entering into a contract or Art. 6(1)(f) GDPR on the basis of our legitimate interest in reliably, securely and efficiently handling incoming enquiries. Resend processes this data as a processor.

Ireland is selected as the sending region. According to Resend, this setting controls the sending route, while account data, email metadata, logs and API records may also be stored in the USA. For transfers of personal data outside the European Economic Area, the data processing addendum concluded with Resend provides, in particular, for the European Commission’s Standard Contractual Clauses.

Further information is available in Resend’s Data Processing Addendum and Privacy Policy.

6. Encrypted transmission

For security reasons and to protect the transmission of personal data and other confidential content, this website uses SSL or TLS encryption. You can recognise an encrypted connection by “https://” and the padlock symbol in your browser’s address bar.

7. Rights of data subjects

Under the applicable data protection law and subject to the statutory requirements, you have the following rights in particular in relation to the controller:

• Right of access under Art. 15 GDPR;
• Right to rectification under Art. 16 GDPR;
• Right to erasure under Art. 17 GDPR;
• Right to restriction of processing under Art. 18 GDPR;
• Right to notification under Art. 19 GDPR;
• Right to data portability under Art. 20 GDPR;
• Right to withdraw consent under Art. 7(3) GDPR;
• Right to lodge a complaint under Art. 77 GDPR.

8. Right to object

Where we process your personal data on the basis of our overriding legitimate interests following a balancing of interests, you have the right to object to this processing at any time, on grounds relating to your particular situation, with effect for the future.

If you exercise your right to object, we will stop processing the affected data. We may continue processing where we can demonstrate compelling legitimate grounds that override your interests, fundamental rights and freedoms, or where processing serves the establishment, exercise or defence of legal claims.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing. If you exercise this right, we will stop processing the affected data for direct marketing purposes.

9. Duration of personal data storage

The duration of personal data storage is determined by the respective legal basis, the purpose of processing and, where applicable, statutory retention periods, such as commercial and tax retention periods.

Where processing is based on explicit consent under Art. 6(1)(a) GDPR, the affected data is stored until you withdraw your consent.

Where statutory retention periods apply to data processed in the context of legal or similar obligations on the basis of Art. 6(1)(b) GDPR, the data will routinely be deleted after those periods expire, provided that it is no longer required for performing or initiating a contract and we have no legitimate interest in continuing to store it.

Where processing is based on Art. 6(1)(f) GDPR, data is stored until you exercise your right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing or the processing serves the establishment, exercise or defence of legal claims.

Unless the other information in this policy indicates otherwise, stored personal data is deleted when it is no longer required for the purposes for which it was collected or otherwise processed.

Last updated: 13 August 2026