Privacy Policy

I. General Information

When you visit our websites, personal data about you is collected. This data is necessary to enable you to use our websites or to allow us to consider your preferences. Additionally, it includes information you voluntarily provide via the contact options offered on these pages.

We use this data to ensure the proper functioning of our website and to respond to your enquiries.

Below, we inform you about which data is collected on our website and for what purposes this data is processed. We also explain the use of so-called „cookies,“ the analysis tools employed on our website, and how you can consent to or refuse these.

At the end of this privacy notice, we provide information about your rights and the contact details of our Data Protection Officer.

Server Log Files

The provider of our website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. The following data may be recorded:

1. Types and versions of browsers used,
2. Operating system of the accessing system,
3. The website from which an accessing system reached our website (referrer),
4. Subpages accessed on our website via an accessing system,
5. Date and time of access,
6. Internet Protocol address (IP address),
7. Internet service provider of the accessing system, and
8. Other similar data used for threat prevention in the event of attacks on our IT systems.

These data are not used to draw conclusions about you personally. They are required to:

• Deliver the content of our website correctly,
• Optimise our website’s content and advertising,
• Ensure the continuous functionality of our IT systems and website technology, and
• Provide law enforcement with information necessary for investigating cyberattacks.

We analyse these data statistically and to improve data protection and security within our company. Anonymous server log data is stored separately from all personal data you provide. No merging with other data sources occurs, although retrospective checks may be performed if there are indications of unlawful use.

Cookies

We use cookies, which are text files stored by your browser on your computer. Many websites and servers use cookies containing a unique cookie ID. This allows websites to recognise your individual browser among others.

Cookies help us provide user-friendly services and optimise information and offers by recognising repeat visitors, so you do not have to re-enter login details each visit.

Necessary cookies are used based on our legitimate interest (Art. 6 (1) lit. f GDPR). Session cookies are used, which are deleted when you close your browser or log out.

Other cookies may be used for analysing user behaviour or marketing purposes only if you have consented to this (Art. 6 (1) lit. a GDPR). You can disable cookies in your browser settings at any time or delete cookies that have already been set. Disabling cookies may limit some website functions.

Detailed information about disabling cookies in popular browsers can be found here on websites such as:

Mozilla Firefox, Internet Explorer, Google Chrome, Microsoft Edge, Safari

Contact Option

Our website contains contact details enabling quick electronic communication, including a general email address. If you contact us by email, your personal data sent will be stored automatically for the purpose of processing or communication. This data will not be passed to third parties.

II. Purposes and Legal Grounds for Data Processing, Processors, Transfer to Third Countries

We use your personal data only for the intended purposes. Legal grounds may include:

• Your consent (Art. 6 (1) lit. a GDPR), e.g., for cookies or web analysis,
• Contract initiation and performance (Art. 6 (1) lit. b GDPR), e.g., if you contact us by form,
• Our legitimate interest (Art. 6 (1) lit. f GDPR) in publicity, quality assurance, fraud prevention,
• Possible pursuit of criminal offences (Art. 6 (1) f GDPR).

You may revoke any consent you have given at any time with future effect.

Data transfer to authorities is based solely on mandatory legal provisions.

Persons involved in data processing are obliged to confidentiality and lawful processing. If your data are processed beyond the original purpose, we will notify you accordingly.

We use external service providers (processors) for certain technical processes, who comply with Art. 32 GDPR and confidentiality. Processing occurs only on our instructions. Additional processing requires your explicit consent or legal orders.

Data transfers to third countries (outside the EEA) occur only if necessary for contract fulfilment, legally required, or you have consented. We will inform you about details as required by law.

III. Data Retention Periods

If you contact us by email, your personal data are stored from collection for the duration of our business relationship, including contract initiation and processing.

We are subject to various retention obligations under the Handelsgesetzbuch (HGB) and Abgabenordnung (AO), typically up to ten years after the contract ends. Additionally, retention is based on limitation periods for legal claims, usually 3 years after the year of occurrence according to §§ 195 ff of the Bürgerliches Gesetzbuch (BGB).

For purely informational website use, browser-transmitted data are stored only as long as necessary to resolve errors, typically deleted within 7 days after connection ends.

IV. Your Rights as a Data Subject

You have the following rights under the GDPR:

• Right of access (Art. 15),
• Right to rectification (Art. 16),
• Right to erasure (Art. 17),
• Right to restriction of processing (Art. 18),
• Right to data portability (Art. 20),
• Right to object to processing (Art. 21).

You may also lodge a complaint with a data protection authority (Art. 77 GDPR), particularly in the country where you live, work, or where the alleged infringement occurred. Authorities coordinate across member states as necessary. See:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Our supervisory authority is:

Der Hamburgische Beauftragte für Datenschutz und Informationssicherheit
Ludwig-Erhard-Str 22, 7. OG
20459 Hamburg
Tel.: +49 40 42854-4040
Fax: +49 40 42854-4000
E-Mail: mailbox(at)datenschutz.hamburg(dot)de

You can reach our Data Protection Officer as follows: