Privacy Policy

 

Welcome to our website. We take the protection of your data very seriously. For this reason, we would like to let you know which data from your visit we will use and for which purposes. Should you have any questions on how we handle your personal data, please do not hesitate to contact our Data Protection Officer (contact details are provided at the end of this privacy policy).

The party responsible, as specified by the General Data Protection Regulation (GDPR), for using your data collected by this website is:

HIW Hamburg Invest Wirtschaftsförderungsgesellschaft mbH
Wexstrasse 7
D-20355 Hamburg

 

I. General information on data processing

What are personal data?

The term ‘personal data’ is defined in the General Data Protection Regulation (hereinafter referred to as the “GDPR”). According to this definition, ‘personal data’ means any information relating to an identified or identifiable natural person. This includes details like your name, address, telephone number and date of birth. Information on how you use this website may also be categorised as personal data if it can be used to derive your identity.

Scope of processing of personal data

As a general rule, we process our users’ personal data only if this is required in order to be able to provide a functional website as well as our content and services. Our users’ personal data are regularly processed only after the users have expressed their consent or if processing is permitted by legal provisions.

a) Legal basis for processing personal data

Provided we acquire the consent of the data subject for processing their personal data, the legal basis is defined by Art. 6 para. 1 lit. a of the GDPR.

Art. 6 para. 1 lit. b of the GDPR forms the legal basis for the processing of personal data that is necessary for the performance of a contract to which the data subject is party. This also applies to processing operations that are necessary prior to entering into a contract.

Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, the legal basis is defined by Art. 6 para. 1 lit. c of the GDPR.

Art. 6 para. 1 lit. d of the GDPR forms the legal basis in the event that the processing of personal data is necessary in order to protect the vital interests of the data subject or of another natural person.

If processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, the legal basis is defined by Art. 6 para. 1 lit. f of the GDPR.

b) Data erasure and retention period

The data subject’s personal data shall be erased or blocked if the purpose for which they were stored no longer applies. The data may be stored beyond this time if this was stipulated by European or national legislators in Union regulations, laws or other provisions to which the controller is subject. The data shall also be blocked or erased if a retention period stipulated by the stated standards expires, unless it is necessary to continue storing the data for a contract conclusion or contract performance.

 

II. Provision of website and creation of log files

1. Description and scope of data processing

The following information is documented when accessing our website:

  • Browser type/browser version
  • Operating system
  • Referrer URL (previously visited website), as well as the pages accessed on our website
  • IP address
  • Date and time of the server request
  • Internet service provider

The data are also stored in our system’s log files. However, these data are not stored together with other personal data from the user.

2. Legal basis for data processing

The legal basis for storing the data and the log files is Art. 6 para. 1 lit. f of the GDPR.

3. Purpose of data processing

The system’s temporary storage of the IP address is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must be stored for the duration of the session. The data are stored in log files to ensure that the website functions properly. In addition, the data help us to optimise the website and ensure the security of our information technology systems. The data are not evaluated in this context for marketing purposes. Our legitimate interest in data processing also lies in these purposes, in accordance with Art. 6 para. 1 lit. f of the GDPR.

4. Retention period

The data we store shall be erased as soon as they are no longer required for achieving the purpose of their collection. This is the case after no more than seven days. The data may also be stored beyond this period. In this case, the user’s IP address shall be erased or distorted so that the calling client can no longer be classified.

5. Possibility to object and opt out

Collecting the stated data is essential to be able to operate the website. For this reason, the user shall have no possibility to object.

 

III. Registration

1. Description and scope of data processing

You can register on our website using the form provided. Compulsory personal data are marked as mandatory fields in the respective registration form. Any additional information is provided by you on a voluntary basis.

As part of the registration process, we use the ‘double opt-in’ procedure, i.e. your registration is not complete until you have confirmed your registration by clicking on the link included in a confirmation e-mail that is sent to you for this purpose. In the event that you do not confirm, your registration information will be automatically erased from our database. Once you have registered, you will receive your individual, password-protected log-in details, allowing you to view and manage the information you provided to us. Registration is voluntary but may be a prerequisite for using some of our services.

2. Legal basis for data processing

The legal basis for processing personal data is Art. 6 para. 1 lit. a, b of the GDPR. If you wish to delete any of the information provided by you on a voluntary basis, you can do so independently by accessing your user account.

3. Purpose of data processing

The collection, the subsequent processing and, where applicable, the sharing of your data is necessary for the performance of the contracts requested by you or in order to take steps prior to entering into a contract.

Furthermore, your registration may be required in order to be able to provide specific contents and services on our website.

4. Retention period

The data we store shall be erased as soon as they are no longer required for achieving the purpose of their collection.

This applies to any data collected during the registration process in the event that registration on our website is cancelled or modified.

This supplies to data collected during the registration process for the purpose of performing a contract or taking steps prior to entering into a contract if the data are no longer required for the performance of the contract. Following the conclusion of the contract, it may still be necessary to store personal data of the contractual partner in order to comply with contractual or legal obligations.

5. Possibility to object and opt out

At any time, you have the option to revoke registration and/or to request a rectification of your data stored in our system.

You can find out how to delete your registration information from the party responsible as well as from our Data Protection Officer.

If the data are necessary for the performance of a contract or taking steps prior to entering into a contract, early erasure of data shall only be possible provided that there are no contractual or statutory obligations to retain such data.

 

IV. Contact form and e-mail contact

1. Description and scope of data processing

Our website provides a contact form that can be used for contacting us electronically. If users make use of this option, the data they enter will be transferred to us and stored.

The moment the message is sent, the following data will also be stored:

● The date and time of registration

Alternatively, contact is also possible via the e-mail address provided. In this case, the user’s personal data transmitted in the e-mail will be stored. The data thus provided shall not be forwarded to third parties. The data will be solely used for the purpose of processing the conversation.

2. Legal basis for data processing

The legal basis for processing data if the user’s consent is provided is Art. 6 para. 1 lit. a of the GDPR.

The legal basis for processing data transmitted in an e-mail is Art. 6 para. 1 lit. f of the GDPR. If the aim of the e-mail contact is to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b of the GDPR.

3. Purpose of data processing

Processing the personal data entered into the input mask serves the sole purpose of handling the request. If contact is made by e-mail, the required legitimate interest shall also lie in processing the data.

Other personal data processed during the sending procedure serve to prevent a misuse of the contact form and ensure the security of our information technology systems.

4. Retention period

The data shall be erased as soon as they are no longer required for achieving the purpose of their collection. This is the case for personal data entered into the contact form’s input mask and data sent by e-mail when the respective conversation with the user has ended. The conversation is deemed to have ended when the circumstances show that the situation in question has been conclusively clarified.

The personal data additionally collected during the sending procedure shall be erased no later than after a period of seven days.

5. Possibility to object and opt out

Users can withdraw their consent to having their personal data processed at any time. If users contact us by e-mail, they can object to their personal data being stored at any time. In this case, the conversation cannot be continued.

All personal data stored during the contact process shall be erased in this case.

 

 

 

 

 

V. Use of cookies

1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on his or her operating system. This cookie contains a characteristic string of characters that enables the browser to be unambiguously identified the next time the website is accessed.

We use cookies in order to make our website more user-friendly. Some elements on our website also require the calling browser to be identified after changing pages.

The following data, among others, are stored and transmitted in the cookies:

  • Language settings
  • Log-in information

On our website, we also use cookies that enable an analysis of the user’s surfing behaviour.

The following data, among others, may be transmitted in this way:

  • The search terms entered
  • The frequency of page views
  • The use of website features

User data collected in this way are pseudonymised by technical means. It is, therefore, no longer possible to assign the data to the respective user. The data are not stored together with other personal data of the user.

When you visit our website, users are informed by an information banner about the use of cookies and may accept or reject cookies.

2. Legal basis for data processing

The legal basis for the processing of personal data using cookies for analysis purposes is the user’s consent according to Art. 6 para. 1 lit. a of the GDPR.

The legal basis for the processing of personal data using cookies necessary for the operation of the site is our legitimate interest in providing users with a functioning website, Art. 6 para. 1 lit. f of the GDPR.

3. Purpose of data processing

The purpose of using technically necessary cookies is to make it easier for users to use websites. Some features of our website could not be provided without the use of cookies.

We need cookies for the following applications, among others:

  • Applying language settings
  • Remembering search terms

The user data collected by the technically necessary cookies are not used to create user profiles.

The use of analysis cookies serves the purpose of improving the quality of our website and its content. The analysis cookies enable us to find out how the website is used so that we can continuously optimise our services.

4. Retention period and possibility to object and opt out

Cookies are stored on the user’s computer and transmitted from the computer to our website. As the user, you therefore have full control of the use of cookies. By changing the settings in your internet browser, you can deactivate or limit the transmission of cookies. Cookies already stored can be erased at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to make full use of all of the website’s features.

For more information on the cookies we use and the option to change your cookie settings, please click here.

 

VI. Google AdWords

1. Description and scope of data processing

Our website uses Google Ads. Google Ads is an online advertising platform provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Ads enables us to combine our ads with specific search terms. These ads can be inserted when search queries are entered on websites in the Google advertising network. Our website also uses remarketing lists for search ads. This allows us to customise search ad campaigns for users who have previously visited our website. These features enable us to combine our ads with certain search terms and/or to serve ads to previous visitors, such as ads promoting services that visitors may have viewed on our website. When the user clicks on an ad or visits our website, a cookie is placed on the user’s computer by Google. This information is used to facilitate the targeting of the user when he/she enters a search query at a later stage. For this purpose, a ‘DoubleClick’ cookie may be sent to the browser when a user visits a website containing DoubleClick ads. Information on the DoubleClick cookie technology used is available here. Further information can also be found on Google’s site stats pages as well as in Google’s privacy policy.

With the help of this technology, Google and we as a client obtain information regarding the fact that a user has clicked on an ad and has proceeded to our web pages to contact us via the contact form. The information obtained is used exclusively for statistical purposes aimed at optimising our ads. We do not obtain any information that could be used to personally identify the user. The statistics provided to us by Google include the total number of users who clicked on one of our ads and, where applicable, information on whether users proceeded to a page on our website equipped with a conversion tag. These statistics allow us to track which keywords prompted the most frequent clicks on our ad and which ads resulted in the user making contact via the contact form to order a brochure.

2. Legal basis for data processing

The legal basis for processing personal data using cookies is Art. 6 para. 1 lit. f of the GDPR. Our legitimate interest lies in presenting ads to you that match your interests, to make our website more interesting for you and to achieve a fair calculation of advertising costs.

3. Purpose of data processing

On our website we use Google Ads in conjunction with Google Conversion Tracking to draw attention to our current projects and developments as well as scheduled activities and services. Within the Google advertising network, our ads are distributed on relevant web pages and in relevant search results taking into account the keywords previously defined by us.

4. Retention period

The cookies set on your device will expire after 90 days. Further information regarding retention periods can be obtained from the relevant service provider as well as by visiting https://policies.google.com/privacy?hl=en-GB&gl=en.

5. Possibility to object and opt out

Cookies are stored on the user’s computer and transmitted from the computer. Users therefore have full control of the use of cookies. If you do not want your visit to be included in the user statistics, you can prevent this by prohibiting the storage of cookies required for these technologies, e.g. via the settings of your browser. Furthermore, you have the option of changing your ad settings or disabling interest-based ads on Google. Alternatively, you may deactivate the use of cookies by third parties by accessing the Network Advertising Initiative’s opt-out page. However, we and Google will continue to receive statistical information on how many users have visited this website as well as the time of their visit. If you do not wish to be included in these statistics either, you can prevent this by using additional programs for your browser (e.g. the Ghostery add-on).

 

VII. Data security

We take technical and organisational security measures to protect your data from accidental or intentional manipulation, loss, destruction or unauthorised access. Our security measures are continuously improved in line with technological developments.
 

VIII. Rights of the data subject

Whenever your personal data are processed, you are a data subject within the meaning of the GDPR, and in relation to the party responsible you shall be entitled to the following rights:

We will be happy to provide you with information as to whether or not personal data concerning you are being processed by us, and, where that is the case, for which purposes such data are being processed (Art. 15 GDPR). Furthermore, subject to the respective legal requirements, you are entitled to the right to rectification (Art. 16 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to erasure (Art. 17 GDPR) and the right to data portability (Art. 20 GDPR).

Pursuant to statutory requirements, you have the right to object to the processing of data (Art. 21 GDPR).

To exercise your above rights, please contact us by sending an e-mail to KRammo@intersoft-consulting.de or by mailing a letter to Hamburg Invest. You can exercise the aforementioned rights free of charge.

Without prejudice to these rights and any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes any privacy regulations (Art. 77 GDPR).

The supervisory authority responsible for our place of business is:

Der Hamburgische Beauftragte für Datenschutz und Informationssicherheit (the Hamburg Representative for Data Protection and Freedom of Information)

 

IX.  Amendments to the privacy policy

This privacy policy shall be regularly updated in the context of the further development of the internet or of our services. We shall communicate any amendments in good time. To stay informed of the latest status of our data protection provisions, we recommend visiting this site on a regular basis.

 

X. Contact details for the Data Protection Officer

Ms Katrin Rammo

intersoft consulting services AG

Beim Strohhause 17
D-20097 Hamburg

Telephone: +49 40 790 235 - 235  |  Mobile: +49 175 261 724 2  

E-mail: KRammo@intersoft-consulting.de

The Consent Management Platform (https://app.usercentrics.eu/) we use could not be loaded. This can happen if AdBlockers incorrectly block this URL. Some features such as maps, proximity search or forms, cannot be used this way. To use these features, please deactivate your AdBlocker.