Privacy Policy
 

Welcome to our website. The protection of your data is very important to us. We would therefore like to inform you below which data from your visit we use for which purposes. If you have any further questions regarding the handling of your personal data, please do not hesitate to contact our data protection officer (contact details at the end of the privacy policy).
 

I. Person responsible for data processing

Responsible within the meaning of the General Data Protection Regulation (GDPR) for the use of your data in connection with this website is

HIW Hamburg Invest Wirtschaftsförderungsgesellschaft mbH
Wexstraße 7
20355 Hamburg

and

HIW Hamburg Invest Wirtschaftsförderungsgesellschaft mbH
Wexstraße 7
20355 Hamburg
 

II. General information on data processing

1. What is personal data?

The term "personal data" is defined in the General Data Protection Regulation (hereinafter "GDPR"). It defines "personal data" as any information relating to an identified or identifiable natural person. This includes, for example, your civil name, your address, your telephone number or your date of birth. Information about your usage behaviour on this website can also be personal data if it is possible to draw conclusions about your person from this information.

2. Scope of the processing of personal data

We only process our users' personal data to the extent necessary to provide a functional website and our content and services. The processing of personal data of our users only takes place regularly with the consent of the user or if the processing is permitted by legal regulations.

3. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 sentence 1 lit. a) GDPR serves as the legal basis.

When processing personal data that is necessary for the fulfilment of a contract to which the data subject is a party, Art. 6 para. 1 sentence 1 lit. b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 sentence 1 lit. c) GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 sentence 1 lit. d) GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 sentence 1 lit. f) GDPR serves as the legal basis for the processing.

4. Data erasure and storage duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
 

III. Provision of the website and creation of log files

1. Description and scope of data processing

When accessing our website

• Browser type/version
• Operating system used
• Referrer URL (previously visited website) and pages accessed on our website
• IP address
• Date and time of the server request
• Internet Service Provider

is logged. The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

2. Legal basis for data processing

The legal basis for the storage of data and log files is Art. 6 (1) sentence 1 lit. f) GDPR.

3. Purpose of the data processing

Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. The data is stored in log files to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 (1) sentence 1 lit. f) GDPR.

4. Duration of storage

The data stored by us will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. This is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymised so that it is no longer possible to identify the accessing client.

5. Objection and removal option

The collection of the aforementioned data is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.
 

IV. Registration

1. Description and scope of data processing

You can register on our website using the form provided. Personal data that must be provided is marked as a mandatory field in the respective registration form; any additional information is voluntary.

We use the so-called double opt-in procedure for registration, i.e.

Your registration is not complete until you have confirmed your registration by clicking on the link contained in a confirmation e-mail sent to you for this purpose. If you do not confirm your registration, it will be automatically deleted from our database. Once you have registered, you will receive personal, password-protected access and can view and manage the data you have stored. Registration is voluntary, but may be a prerequisite for using certain services.

2. Legal basis for data processing

The legal basis for the processing of personal data is Art. 6 para. 1 sentence 1 lit. a) and b) GDPR. You can delete your voluntarily provided information in your user account management independently.

3. Purpose of the data processing

The collection and subsequent processing and, if necessary, forwarding of your data is necessary for the fulfilment of the contracts requested by you or for the implementation of pre-contractual measures.

Furthermore, your registration may be required for the provision of certain content and services on our website.

4. Duration of storage

We will delete the data as soon as it is no longer required to fulfil the purpose for which it was collected.

This is the case for the data collected during the registration process if the registration on our website is cancelled or amended.

This is the case during the registration process for the fulfilment of a contract or for the implementation of pre-contractual measures if the data is no longer required for the implementation of the contract. Even after conclusion of the contract, it may be necessary to store personal data of the contractual partner in order to fulfil contractual or legal obligations.

5. Objection and cancellation options

You have the option of cancelling your registration or having your data stored by us corrected at any time.

You can find out how the registration can be cancelled from the person responsible and our data protection officer.

If the data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, premature deletion of the data is only possible if contractual or legal obligations do not prevent deletion.
 

V. Contact form and e-mail contact

1. Description and scope of data processing

There is a contact form on our website that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored.

When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, possibly your name and telephone number) will be stored by us in order to answer your questions and process your requests.

The following data is also stored at the time the message is sent:

• The IP address of the user
• Date and time of registration

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored. If you provide us with information regarding your communication channels (e.g. e-mail address, telephone number), we will only use this information to respond to your enquiry.

No data will be passed on to third parties in this context. The data is used exclusively for processing the conversation.

2. Legal basis for data processing

The legal basis for the processing of the data that you transmit to us in the course of contacting us is Art. 6 para. 1 sentence 1 lit. f) GDPR. If we request information via our contact form that is not required to contact you, we have always marked this as optional. We use this information to specify your enquiry and to improve the processing of your request. This information is provided expressly on a voluntary basis and with your consent, Art. 6 para. 1 sentence 1 lit. a) GDPR.

If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing of the data is Art. 6 para. 1 sentence 1 lit. b) GDPR.

3. Purpose of the data processing

The processing of the personal data from the input mask serves us solely to process the contact. If you contact us by email, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of storage

The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For the personal data from the input screen of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5. Possibility of objection and removal

The user has the option to withdraw their consent to the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

All personal data stored in the course of contacting us will be deleted in this case.
 

VI. Use of cookies

1. Description and scope of data processing

Our website uses various cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change. For example, the following data is stored and transmitted in the cookies:

• Language settings
• Articles in a shopping basket
• Log-in information
• Cookie info banner that this website uses cookies
• We also use cookies on our website that enable us to analyse the surfing behaviour of users.

The following data, for example, can be transmitted in this way:

• Search terms entered
• Frequency of page views
• Utilisation of website functions

2. Legal basis for data processing

Insofar as we use cookies for analysis or marketing purposes, we process your data on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR and § 25 para. 1 TTDSG. The legal basis for the use of technically necessary cookies is Art. 6 para. 1 sentence 1 lit. f) GDPR and § 25 para. 2 no. 2 TTDSG (essential cookies). Further processing is carried out in accordance with Art. 6 (1) GDPR.

3. Purpose of the data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognised even after a page change.

For example, we need cookies for the following applications:

• Transfer of language settings
• Memorising search terms

The user data collected by technically necessary cookies is not used to create user profiles.

The purpose of using analytics cookies is to improve the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimise our offer.

Marketing cookies are used to show you personalised content that matches your interests. We can use them to show you personalised offers and information that is particularly relevant to your planned trip.

4. Duration of storage, objection and removal options

As part of consent management ("cookie banner") those responsible offer you the opportunity to decide on the setting of cookies in the area of our offer according to your specifications. For more information on the individual services, the scope and duration of data storage or to view and manage your consent individually, you can access our consent platform and change your personal settings again: Edit cookie settings.

Furthermore, you can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.
 

VII. Use of Matomo

1. Description and scope of data processing

Our website uses the web analysis service Matomo. Matomo is an open source project and is legally represented by its founder Matthieu Aubry. Matomo uses "cookies", which make it possible to analyse the use of the website. For this purpose, the usage information recorded in the cookie (including your shortened IP address) is transmitted to our server and stored for usage analysis purposes. Matomo does not transmit any data to servers that are outside our control. Your IP address is immediately anonymised during this process so that you as a user are not identifiable to us. The information collected about your use of this website is not passed on to third parties.

2. Legal basis

The legal basis for the use of Matomo is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a) GDPR, § 25 para. 1 TTDSG.

3. Purposes of the processing

We use the data collected for statistical analysis of user behaviour for the purpose of optimising the functionality and stability of the website and for marketing purposes.

4. Duration of storage, objection and removal options

Further information on Matomo and the option to withdraw your consent can be found here: Edit cookie settings.
 

VIII. Use of Google Maps

This site uses the map service Google Maps. Google Maps is a map service provided by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

To use the functions of Google Maps, information, including the IP address and the address entered as part of the route function, may be transmitted to the provider's servers. This information is usually transferred to a Google server in the USA and stored there. When you visit a website that contains Google Maps, your browser establishes a direct connection with Google's servers, whereby the map content is sent to your browser and integrated by it. The provider of this site has no influence on this data transfer. According to current knowledge, this includes the following data:

• Date and time of the visit to the website in question,
• Internet address or URL of the website accessed,
• IP address, (start) address entered as part of route planning

The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. If you do not wish Google to process data via this service, you can deactivate the use of JavaScript in your browser settings. Please note that in this case you will not be able to use the interactive map function of Google Maps.

Where data is processed outside the European Economic Area / the EU, where there is no level of data protection corresponding to the European standard, Google states that it uses standard contractual clauses.

You can find more information on the handling of user data in Google's privacy policy: https://www.google.de/intl/de/policies/privacy.

The legal basis for the use of Google Maps is Art. 6 para. 1 sentence 1 lit. f) GDPR and § 25 para. 2 sentence 1 no. 2 TTDSG. The map view is technically necessary in order to display the website and related services correctly.