Privacy Policy

 

Welcome to our website. We take the protection of your data very seriously. For this reason, we would like to let you know which data from your visit we will use and for which purposes. Should you have any questions on how we handle your personal data, please do not hesitate to contact our Data Protection Officer (contact details are provided at the end of this privacy policy).

 

I. Party responsible for data processing

The party responsible, as specified by the General Data Protection Regulation (GDPR), for using your data collected by this website is: 

HIW Hamburg Invest Wirtschaftsförderungsgesellschaft mbH
Wexstraße 7
20355 Hamburg

 

II. General information on data processing

1. What are personal data?

The term ‘personal data’ is defined in the General Data Protection Regulation (hereinafter referred to as the “GDPR”). According to this definition, ‘personal data’ means any information relating to an identified or identifiable natural person. This includes details like your name, address, telephone number and date of birth. Information on how you use this website may also be categorised as personal data if it can be used to derive your identity. 

2. Scope of processing of personal data

As a general rule, we process our users’ personal data only if this is required in order to be able to provide a functional website as well as our content and services. Our users’ personal data are regularly processed only after the users have expressed their consent or if processing is permitted by legal provisions. 

3. Legal basis for processing personal data

Provided we acquire the consent of the data subject for processing their personal data, the legal basis is defined by Art. 6, para. 1, sent. 1, lit. a of the GDPR.

Art. 6, para. 1, sent. 1, lit. b of the GDPR forms the legal basis for the processing of personal data that is necessary for the performance of a contract to which the data subject is party. This also applies to processing operations that are necessary prior to entering into a contract.

Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, the legal basis is defined by Art. 6, para. 1, sent. 1, lit. c of the GDPR.

Art. 6, para. 1, sent. 1, lit. d of the GDPR forms the legal basis in the event that the processing of personal data is necessary in order to protect the vital interests of the data subject or of another natural person.

If processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, the legal basis is defined by Art. 6, para. 1, sent. 1, lit. f of the GDPR. 

4. Data erasure and data storage

The data subject’s personal data shall be erased or blocked if the purpose for which they were stored no longer applies. The data may be stored beyond this time if this was stipulated by European or national legislators in Union regulations, laws or other provisions to which the controller is subject. The data shall also be blocked or erased if a retention period stipulated by the stated standards expires, unless it is necessary to continue storing the data for a contract conclusion or contract performance.

 

III. Provision of website and creation of log files

1. Description and scope of data processing

The following information is documented when accessing our website: 

  • Browser type/browser version
  • Operating system
  • Referrer URL (previously visited website), as well as the pages accessed on our website
  • IP address
  • Date and time of the server request
  • Internet service provider

The data are also stored in our system’s log files. However, these data are not stored together with other personal data from the user.

2. Legal basis for data processing

The legal basis for storing the data and the log files is Art. 6, para. 1, sent. 1, lit. f of the GDPR.

3. Purpose of data processing

The system’s temporary storage of the IP address is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must be stored for the duration of the session. The data are stored in log files to ensure that the website functions properly. In addition, the data help us to optimise the website and ensure the security of our information technology systems. The data are not evaluated in this context for marketing purposes. Our legitimate interest in data processing also lies in these purposes, in accordance with Art. 6, para. 1, sent. 1, lit. f of the GDPR.

4. Retention period

The data we store shall be erased as soon as they are no longer required for achieving the purpose of their collection. This is the case after no more than seven days. The data may also be stored beyond this period. In this case, the user’s IP address shall be erased or distorted so that the calling client can no longer be classified.

5. Possibility to object and opt out

Collecting the stated data is essential to be able to operate the website. For this reason, the user shall have no possibility to object.

 

IV. Registration

1. Description and scope of data processing

You can register on our website using the form provided. Compulsory personal data are marked as mandatory fields in the respective registration form. Any additional information provided by you is on a voluntary basis.

As part of the registration process, we use the ‘double opt-in’ procedure, i.e. your registration is not complete until you have confirmed your registration by clicking on the link included in a confirmation e-mail that is sent to you for this purpose. In the event that you do not confirm, your registration information will be automatically erased from our database. Once you have registered, you will receive your individual, password-protected log-in details, allowing you to view and manage the information you provided to us. Registration is voluntary but may be a prerequisite for using some of our services.

2. Legal basis for data processing

The legal basis for processing personal data is Art. 6, para. 1, sent. 1. lit. a, b of the GDPR. If you wish to delete any of the information provided by you on a voluntary basis, you can do so independently by accessing your user account. 

3. Purpose of data processing

The collection, the subsequent processing and, where applicable, the sharing of your data is necessary for the performance of the contracts requested by you or in order to take steps prior to entering into a contract. 

Furthermore, your registration may be required in order to be able to provide specific contents and services on our website.

4. Retention period

The data we store shall be erased as soon as they are no longer required for achieving the purpose of their collection. 

This applies to any data collected during the registration process in the event that registration on our website is cancelled or modified. 

This also applies to data collected during the registration process for the purpose of performing a contract or taking steps prior to entering into a contract if the data are no longer required for the performance of the contract. Following the conclusion of the contract, it may still be necessary to store personal data of the contractual partner in order to comply with contractual or legal obligations. 

5. Possibility to object and opt out

You have the option to revoke registration at any time and/or to request a rectification of your data stored in our system. 

You can find out how to delete your registration information from the party responsible as well as from our Data Protection Officer. 

If the data are necessary for the performance of a contract or taking steps prior to entering into a contract, early erasure of data shall only be possible provided that there are no contractual or statutory obligations to retain such data. 

 

V. Contact form and e-mail contact

1. Description and scope of data processing

Our website provides a contact form that can be used for contacting us electronically. If users make use of this option, the data they enter will be transferred to us and stored. 

When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, name and telephone number) will be stored by us in order to answer your questions and process your requests.

The moment the message is sent, the following data will also be stored:

       a) The user’s IP address

       b) The date and time of registration

Alternatively, contact is also possible via the e-mail address provided. In this case, the user’s personal data transmitted in the e-mail will be stored. If you provide us with details regarding your communication channels (such as your e-m address, telephone number), we will only use them to reply to your enquiries.

The data thus provided shall not be forwarded to third parties. The data will be solely used for the purpose of processing the conversation.

2. Legal basis for data processing

The legal basis for processing data that you transmit to us when making contact is Art. 6, para. 1, sent. 1 lit. f of the GDPR. Where our contact form requests information that is not necessary for making contact, we have always marked this as optional. This information serves to specify your enquiry and process your concern better. Providing such information is voluntary and requires your express consent, as per Art. 6, para. 1, sent. 1 lit. a of the GDPR.

If the aim of the e-mail contact is to conclude a contract, the additional legal basis for the processing is Art. 6, para. 1, sent. 1 lit. b of the GDPR.

3. Purpose of data processing

Processing the personal data entered into the input mask serves the sole purpose of handling the request. If contact is made by e-mail, the required legitimate interest shall also lie in processing the data.

Other personal data processed during the sending procedure serve to prevent a misuse of the contact form and ensure the security of our information technology systems.

4. Retention period

The data shall be erased as soon as they are no longer required for achieving the purpose of their collection. This is the case for personal data entered into the contact form’s input mask and data sent by e-mail when the respective conversation with the user has ended. The conversation is deemed to have ended when the circumstances show that the situation in question has been conclusively clarified. 

The personal data additionally collected during the sending procedure shall be erased no later than after a period of seven days.

5. Possibility to object and opt out

Users can withdraw their consent to having their personal data processed at any time. If users contact us by e-mail, they can object to their personal data being stored at any time. In this case, the conversation cannot be continued.

All personal data stored during the contact process shall be erased in this case.

 

 

 

 

VI. Use of cookies

1. Description and scope of data processing

Our website uses various cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on his or her operating system. This cookie contains a characteristic string of characters that enables the browser to be unambiguously identified the next time the website is accessed. 

We use cookies in order to make our website more user-friendly. Some elements on our website also require the calling browser to be identified after changing pages.

The following data, among others, are stored and transmitted in the cookies:

  • Language settings
  • Items in a shopping cart
  • Log-in information
  • Cookie info banner notifying that this website uses cookies

On our website, we also use cookies that enable an analysis of the user’s surfing behaviour. 

The following data, among others, may be transmitted in this way:

  • The search terms entered
  • The frequency of page views
  • The use of website features
     
2. Legal basis for data processing

To the extent that we use cookies for analysis or marketing purposes, we process your data in accordance with your consent as per Art. 6, para. 1, sent. 1 lit. a of the GDPR and § 25, para. 1 of the German Telecommunications-Telemedia Data Protection Act (TTDSG). For the use of technically necessary cookies, the legal basis is Art. 6, para. 1, sent. 1 lit f of the GDPR and § 25, para. 2, no. 2 of the TTDSG (essential cookies). Any other processing is compliant with Art. 6, para. 1 of the GDPR.

3. Purpose of data processing

The purpose of using technically necessary cookies is to make it easier for users to use websites. Some features of our website could not be provided without the use of cookies. These features require the browser to be recognised again after a change of page.

We need cookies for the following applications, among others:

    a)  Applying language settings

    b)  Remembering search terms

The user data collected by the technically necessary cookies are not used to create user profiles.

The use of analysis cookies serves the purpose of improving the quality of our website and its content, and so that you can use our services on the website more conveniently. The analysis cookies enable us to find out how the website is used so that we can continuously optimise our services.

The so-called marketing cookies are used to show you personalized content that matches your interests. We can then show you personal offers and information that are of particular relevance to your planned trip.

4. Retention period, and possibility to object and opt out

As part of the consent management (“cookie banner”), HIW Hamburg Invest Wirtschaftsförderung mbH offers you the opportunity to decide on the placement of cookies with regard to our services based on your own specifications. For more information on the individual services, the scope, as well as the retention period or to be able to view and manage your own consent, you may access our consent platform and make your personal settings again: Edit cookie settings.

By changing the settings in your internet browser, you can deactivate or limit the transmission of cookies. Cookies already stored can be erased at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to make full use of all of the website’s features.

 

VII. Use of Matomo

1. Description and scope of data processing

Our website uses the web analytics service Matomo. Matomo is an open source project and is legally represented by the founder Matthieu Aubry. Matomo uses “cookies”, which enable an analysis of the use of the website. For this purpose, the usage information recorded in the cookie (including your abbreviated IP address) is transmitted to our server and stored for usage analysis purposes. With Matomo, no data are transmitted to servers that are beyond our control. Your IP address is immediately anonymized during this process so that we cannot identify you as a user. The information collected about your use of this website will not be passed on to third parties.

2. Legal basis

The legal basis for the use of Matomo is your consent as per Art. 6, para. 1, sent. 1 lit. a of the GDPR.

3. Purpose of data processing

We use the collected data for statistical analysis of user behaviour for the purpose of optimising the functionality and stability of the website and for marketing purposes.

4. Retention period, and possibility to object and opt out

You can access further information about Matomo the possibilities for revoking your consent here: Edit cookie settings.

 

VIII. Use of Google Maps

This website uses the Google Maps mapping service. Google Maps is a mapping service from Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The responsible authority for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

To use the features of Google Maps, information such as the IP address and the address entered in the route feature, may be transmitted to the provider’s servers. This information is normally transferred to a Google server in the USA and stored there. When accessing a website that contains Google Maps, your browser establishes a direct connection to the Google servers, whereby the map content is sent to your browser and integrated by it. The provider of this site has no influence on this data transfer. According to current knowledge, this includes the following data:

– the date and time of the visit to the relevant website,

– the internet address or URL of the website accessed,

– the IP address, (start) address entered as part of the route planning.

We use Google Maps to present our online content in an appealing manner and to make the locations disclosed on our website easy to find. If you do not want Google to process your data via this service, you can disable the use of JavaScript in your browser settings. Please note, however, that it will then not be possible to use the Google Maps interactive mapping feature in this case.

Google uses standard contractual clauses in cases where data are processed outside the European Economic Area / EU when there is no level of data protection that corresponds to the European standard.

You can find more information on handling user data in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.

The legal basis for the use of Google Maps is Art. 6, para. 1, sent. 1 lit. f of the GDPR and §25, para. 2, sent. 1, no. 2 of TTDSG. The map view is technically necessary to be able to display the website and the related services correctly.

 

IX. Google Adwords

1. Description and scope of data processing

Our website uses Google Ads. Google Ads is an online advertising platform provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Ads enables us to combine our ads with specific search terms. These ads can be inserted when search queries are entered on websites in the Google advertising network. Our website also uses remarketing lists for search ads. This allows us to customise search ad campaigns for users who have previously visited our website. These features enable us to combine our ads with certain search terms and/or to serve ads to previous visitors, such as ads promoting services that visitors may have viewed on our website. When the user clicks on an ad or visits our website, a cookie is placed on the user’s computer by Google. This information is used to facilitate the targeting of the user when he/she enters a search query at a later stage. For this purpose, a ‘DoubleClick’ cookie may be sent to the browser when a user visits a website containing DoubleClick ads. Information on the DoubleClick cookie technology used is available here. Further information can also be found on Google’s site stats pages as well as in Google’s privacy policy.

With the help of this technology, Google and we as a client obtain information regarding the fact that a user has clicked on an ad and has proceeded to our web pages to contact us via the contact form. The information obtained is used exclusively for statistical purposes aimed at optimising our ads. We do not obtain any information that could be used to personally identify the user. The statistics provided to us by Google include the total number of users who clicked on one of our ads and, where applicable, information on whether users proceeded to a page on our website equipped with a conversion tag. These statistics allow us to track which keywords prompted the most frequent clicks on our ad and which ads resulted in the user making contact via the contact form to order a brochure.

2. Legal basis for data processing

The legal basis for processing personal data using cookies is Art. 6, para. 1, sent. 1 lit. a of the GDPR (your consent).

3. Purpose of data processing

On our website, we use Google Ads in conjunction with Google conversion tracking to draw attention to our current projects and developments as well as scheduled activities and services. Within the Google advertising network, our ads are distributed on relevant web pages and in relevant search results taking into account the keywords previously defined by us.

4. Retention period

The cookies set on your device will expire after 90 days. Further information regarding retention periods can be obtained from the relevant service provider as well as by visiting https://www.google.de/intl/de/policies/privacy/.

5. Possibility to object and opt out

Cookies are stored on the user’s computer and transmitted from the computer. Users therefore have full control of the use of cookies. If you do not want your visit to be included in the user statistics, you can prevent this by prohibiting the storage of cookies required for these technologies, such as via the settings of your browser or via the tool “Edit cookie settings”.

Furthermore, you have the option of selecting the types of Google ads via the ad settings or disabling interest-based ads on Google. Alternatively, you may deactivate the use of cookies by third parties by accessing the Network Advertising Initiative’s opt-out page.

However, we and Google will continue to receive statistical information on how many users have visited this website as well as the time of their visit. If you do not wish to be included in these statistics either, you can prevent this by using additional programs for your browser (e.g. the Ghostery add-on).

 

X. Data security

We take technical and organisational security measures to protect your data from accidental or intentional manipulation, loss, destruction or unauthorised access. Our security measures are continuously improved in line with technological developments.

 

XI. Rights of the data subject

If your personal data are processed, you are a data subject in accordance with the GDPR and you are entitled to the following rights from the controller:  

We will be happy to provide you with information as to whether or not personal data concerning you are being processed by us, and, where that is the case, for which purposes such data are being processed (Art. 15 GDPR). Furthermore, subject to the respective legal requirements, you are entitled to the right to rectification (Art. 16 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to erasure (Art. 17 GDPR) and the right to data portability (Art. 20 GDPR).

Pursuant to statutory requirements, you have the right to object to the processing of data (Art. 21 GDPR).

To exercise your above rights, please contact us by sending an e-mail to KRammo@intersoft-consulting.de or by mailing a letter to us (HIW Hamburg Invest Wirtschaftsförderung mbH, Wexstraße 7, 20355 Hamburg). You can exercise the aforementioned rights free of charge.

Without prejudice to these rights and any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes any privacy regulations (Art. 77 GDPR).

The supervisory authority responsible for our place of business is: the Hamburg Representative for Data Protection and Freedom of Information.

 

XII. Amendments to the privacy policy

This privacy policy shall be regularly updated in the context of the further development of the internet or of our services. We shall communicate any amendments in good time. To stay informed of the latest status of our data protection provisions, we recommend visiting this site on a regular basis.

 

XIII. Contact details for the Data Protection Officer

C/o external Data Protection Officer of HIW Hamburg Invest Wirtschaftsförderung mbH

Katrin Rammo
intersoft consulting services AG
Beim Strohhause 17
20097 Hamburg

Telephone: +49 (0) 40 790 235 0
E-mail: KRammo@intersoft-consulting.de

The Consent Management Platform (https://app.usercentrics.eu/) we use could not be loaded. This can happen if AdBlockers incorrectly block this URL. Some features such as maps, proximity search or forms, cannot be used this way. To use these features, please deactivate your AdBlocker.