Privacy Policy

Welcome to our website. We take the protection of your data very seriously. For this reason, we would like to let you know which data from your visit we will use and for which purposes. Should you have any questions on how we handle your personal data, please do not hesitate to contact our Data Protection Officer (contact details are provided at the end of this privacy policy).


Party responsible for data processing


The party responsible, as specified by the General Data Protection Regulation (GDPR), for using your data collected by this website is:

HIW Hamburg Invest Wirtschaftsförderungsgesellschaft mbH
Wexstrasse 7
D-20355 Hamburg

I. General information on data processing

 

What are personal data?

The term ‘personal data’ is defined in the General Data Protection Regulation (hereinafter referred to as the “GDPR”). According to this definition, ‘personal data’ means any information relating to an identified or identifiable natural person

This includes details like your name, address, telephone number and date of birth. Information on how you use this website may also be categorised as personal data if it can be used to derive your identity.

 


2. Scope of processing of personal data

As a general rule, we process our users’ personal data only if this is required in order to be able to provide a functional website as well as our content and services. Our users’ personal data are regularly processed only after the users have expressed their consent or if processing is permitted by legal provisions.

 


a) Legal basis for processing personal data

Provided we acquire the consent of the data subject for processing their personal data, the legal basis is defined by Art. 6 para. 1 lit. a of the GDPR.

 

Art. 6 para. 1 lit. b of the GDPR forms the legal basis for the processing of personal data that is necessary for the performance of a contract to which the data subject is party. This also applies to processing operations that are necessary prior to entering into a contract.

 

Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, the legal basis is defined by Art. 6 para. 1 lit. c of the GDPR.

 

Art. 6 para. 1 lit. d of the GDPR forms the legal basis in the event that the processing of personal data is necessary in order to protect the vital interests of the data subject or of another natural person.

 

If processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, the legal basis is defined by Art. 6 para. 1 lit. f of the GDPR.

 


b) Data erasure and retention period

The data subject’s personal data shall be erased or blocked if the purpose for which they were stored no longer applies. The data may be stored beyond this time if this was stipulated by European or national legislators in Union regulations, laws or other provisions to which the controller is subject. The data shall also be blocked or erased if a retention period stipulated by the stated standards expires, unless it is necessary to continue storing the data for a contract conclusion or contract performance.

II. Provision of website and creation of log files

 

1. Description and scope of data processing

The following information is documented when accessing our website:

 

  • Browser type/browser version

  • Operating system

  • Referrer URL (previously visited website), as well as the pages accessed on our website

  • IP address

  • Date and time of the server request

  • Internet service provider

The data are also stored in our system’s log files. However, these data are not stored together with other personal data from the user.

2. Legal basis for data processing

The legal basis for storing the data and the log files is Art. 6 para. 1 lit. f of the GDPR.
The system’s temporary storage of the IP address is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must be stored for the duration of the session. The data are stored in log files to ensure that the website functions. In addition, the data help us to optimise the website and ensure the security of our information technology systems. The data are not evaluated in this context for marketing purposes. Our legitimate interest in data processing also lies in these purposes, in accordance with Art. 6 para. 1 lit. f of the GDPR.

3. Purpose of data processing

The system’s temporary storage of the IP address is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must be stored for the duration of the session. The data are stored in log files to ensure that the website functions properly. In addition, the data help us to optimise the website and ensure the security of our information technology systems. The data are not evaluated in this context for marketing purposes. Our legitimate interest in data processing also lies in these purposes, in accordance with Art. 6 para. 1 lit. f of the GDPR.

 

4. Retention period

The data we store shall be erased as soon as they are no longer required for achieving the purpose of their collection. This is the case after no more than seven days. The data may also be stored beyond this period. In this case, the user’s IP address shall be erased or distorted so that the calling client can no longer be classified.


5. Possibility to object and opt out

Collecting the stated data is essential to be able to operate the website. For this reason, the user shall have no possibility to object.

 

III. Registration

1. Description and scope of data processing


You can register on our website using the form provided. Compulsory personal data are marked as mandatory fields in the respective registration form. Any additional information is provided by you on a voluntary basis.
As part of the registration process, we use the ‘double opt-in’ procedure, i.e. your registration is not complete until you have confirmed your registration by clicking on the link included in a confirmation e-mail that is sent to you for this purpose. In the event that you do not confirm, your registration information will be automatically erased from our database. Once you have registered, you will receive your individual, password-protected log-in details, allowing you to view and manage the information you provided to us. Registration is voluntary but may be a prerequisite for using some of our services.

2. Legal basis for data processing

The legal basis for processing personal data is Art. 6 para. 1 lit. a,b of the GDPR. If you wish to delete any of the information provided by you on a voluntary basis, you can do so independently by accessing your user account.

3. Purpose of data processing

The collection, the subsequent processing and, where applicable, the sharing of your data is necessary for the performance of the contracts requested by you or in order to take steps prior to entering into a contract. Furthermore, your registration may be required in order to be able to provide specific contents and services on our website.


4. Retention period

The data we store shall be erased as soon as they are no longer required for achieving the purpose of their collection.This applies to any data collected during the registration process in the event that registration on our website is cancelled or modified.

This applies to data collected during the registration process for the purpose of performing a contract or taking steps prior to entering into a contract if the data are no longer required for the performance of the contract. Following the conclusion of the contract, it may still be necessary to store personal data of the contractual partner in order to comply with contractual or legal obligations.


5. Possibility to object and opt out

At any time, you have the option to revoke registration and/or to request a rectification of your data stored in our system. You can find out how to delete your registration information from the party responsible as well as from our Data Protection Officer. If the data are necessary for the performance of a contract or taking steps prior to entering into a contract, early erasure of data shall only be possible provided that there are no contractual or statutory obligations to retain such data.

IV. Contact form and e-mail contact


1. Description and scope of data processing

Our website provides a contact form that can be used for contacting us electronically. If users make use of this option, the data they enter will be transferred to us and stored.
The moment the message is sent, the following data will also be stored:

● The date and time of registration

Alternatively, contact is also possible via the e-mail address provided. In this case, the user’s personal data transmitted in the e-mail will be stored. The data thus provided shall not be forwarded to third parties. The data will be solely used for the purpose of processing the conversation.

2. Legal basis for data processing

The legal basis for processing data if the user’s consent is provided is Art. 6 para. 1 lit. a of the GDPR.
The legal basis for processing data transmitted in an e-mail is Art. 6 para. 1 lit. f of the GDPR. If the aim of the e-mail contact is to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b of the GDPR.

3. Purpose of data processing

Processing the personal data entered into the input mask serves the sole purpose of handling the request. If contact is made by e-mail, the required legitimate interest shall also lie in processing the data.
Other personal data processed during the sending procedure serve to prevent a misuse of the contact form and ensure the security of our information technology systems.


4. Retention period

The data shall be erased as soon as they are no longer required for achieving the purpose of their collection. This is the case for personal data entered into the contact form’s input mask and data sent by e-mail when the respective conversation with the user has ended. The conversation is deemed to have ended when the circumstances show that the situation in question has been conclusively clarified.
The personal data additionally collected during the sending procedure shall be erased no later than after a period of seven days.

5. Possibility to object and opt out

Users can withdraw their consent to having their personal data processed at any time. If users contact us by e-mail, they can object to their personal data being stored at any time. In this case, the conversation cannot be continued.
All personal data stored during the contact process shall be erased in this case.

 

V. Use of cookies


1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on his or her operating system. This cookie contains a characteristic string of characters that enables the browser to be unambiguously identified the next time the website is accessed.

We use cookies in order to make our website more user-friendly. Some elements on our website also require the calling browser to be identified after changing pages.

The following data, among others, are stored and transmitted in the cookies:
•    Language settings
•    Log-in information

On our website, we also use cookies that enable an analysis of the user’s surfing behaviour.
The following data, among others, may be transmitted in this way:
•    The search terms entered
•    The frequency of page views
•    The use of website features

User data collected in this way are pseudonymised by technical means. It is, therefore, no longer possible to assign the data to the respective user. The data are not stored together with other personal data of the user.

2. Legal basis for data processing
The legal basis for processing personal data using cookies is Art. 6 para. 1 lit. f of the GDPR.

3. Purpose of data processing
The purpose of using technically necessary cookies is to make it easier for users to use websites. Some features of our website could not be provided without the use of cookies. These features require the browser to be recognised again after a change of page.

We need cookies for the following applications, among others:
•    Applying language settings
•    Remembering search terms

The user data collected by the technically necessary cookies are not used to create user profiles.
The use of analysis cookies serves the purpose of improving the quality of our website and its content. The analysis cookies enable us to find out how the website is used so that we can continuously optimise our services.

Our legitimate interest in processing personal data also lies in these purposes, in accordance with Art. 6 para. 1 lit. f of the GDPR.

4. Retention period and possibility to object and opt out

Cookies are stored on the user’s computer and transmitted from the computer to our website. As the user, you therefore have full control of the use of cookies. By changing the settings in your internet browser, you can deactivate or limit the transmission of cookies. Cookies already stored can be erased at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to make full use of all of the website’s features.

 

VI. Google Analytics


1. Description and scope of data processing

This website uses Google Analytics, a web analysis service of Google Inc, (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). The use includes the “Universal Analytics” operating mode. This facilitates the assignment of data, sessions and interactions across several devices to a pseudonymous user ID and thus the analysis of a user’s activities across devices. At this point in time, cross-device tracking is disabled.

Google Analytics uses ‘cookies’, which are text files placed on your computer, to allow the website operator to analyse how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. IP anonymisation has been activated on this website. Thus, prior to being transferred to the USA, your IP address will be truncated by Google within Member States of the European Union or in other states party to the Agreement on the European Economic Area.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. Sessions and campaigns are terminated after a certain period of time. By default, sessions are closed after 30 minutes without activity and campaigns after six months.

The time limit for campaigns may not exceed two years. For more information on terms of use and data protection, please visit www.google.com/analytics/terms/gb.html or https://policies.google.com/?hl=en.
Personal data will be transferred to the USA under the EU-US Privacy Shield on the basis of the European Commission's adequacy decision. The relevant certificate is available for download here:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI


2. Legal basis for data processing

The legal basis for processing the user’s personal data is Art. 6 para. 1 lit. f of the GDPR.

3. Purpose of data processing

Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet use. Our legitimate interest also lies in these purposes.

4. Retention period

For more information on the retention period, please visit www.google.com/analytics/terms/gb.html or https://policies.google.com/?hl=en


5. Possibility to object and opt out

By changing the settings in your internet browser, you can deactivate or limit the transmission of cookies, however, please note that if you do this you may not be able to make full use of all of the website’s features. In addition, you can prevent Google from collecting and processing data generated by the cookie and on your use of the website (including your IP address) by downloading and installing the browser add-on at tools.google.com/dlpage/gaoptout.
Opt-out cookies prevent the future collection of your data when you visit this website. To prevent Universal Analytics from collecting your data across multiple devices, you must complete the opt-out process on all systems used. If you click here, the opt-out cookie will be set: Disable Google Analytics.
To learn more about the Terms of Service of Google Analytics as well as Google's privacy policy, please visit marketingplatform.google.com/about/analytics/terms/us/ as well as https://policies.google.com/?hl=en

VII. Google AdWords


1. Description and scope of data processing

Our website uses Google Ads. Google Ads is an online advertising platform provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Our website further uses Remarketing Lists for Search Ads. This allows us to customise search ad campaigns for users who have previously visited our website. These features enable us to combine our ads with certain search terms and/or to serve ads to previous visitors, such as ads promoting services that visitors may have viewed on our website. When the user clicks on an ad or visits our website, a cookie is placed on the user’s computer by Google. The information entailed is used to facilitate the targeting of the user when he/she enters a search query at a later stage. For this purpose, a ‘DoubleClick’ cookie may be sent to the browser when a user visits a website containing DoubleClick ads. Information on the DoubleClick cookie technology used is available here. Further information can also be found on Google’s Site Stats pages as well as in Google’s privacy policy.

With the help of this technology, Google and HIW as a client obtain information regarding the fact that a user has clicked on an ad and has proceeded to our web pages to contact us via the contact form. The information obtained is used exclusively for statistical purposes aimed at optimising our ads. We do not obtain any information that could be used to personally identify the user. The statistics provided to us by Google include the total number of users who clicked on one of our ads and, where applicable, information on whether users proceeded to a HIW web page equipped with a conversion tag. These statistics allow us to track which keywords prompted the most frequent clicks on our ad and which ads resulted in the user making contact via the contact form.

2. Legal basis for data processing

The legal basis for processing personal data using cookies is Art. 6 para. 1 lit. f of the GDPR. Our legitimate interest lies in presenting ads to you that match your interests, to make our website more interesting for you and to achieve a fair calculation of advertising costs.

3. Purpose of data processing

On our website we use Google Ads in conjunction with Google Conversion Tracking to draw attention to our current projects and developments as well as scheduled activities and services. Within the Google Advertising Network, our ads are distributed on relevant web pages and in relevant search results taking into account the keywords previously defined by us.

4. Retention period

The cookies set on your device will expire after 90 days. Further information regarding retention periods can be obtained from the relevant service provider as well as by visiting https://policies.google.com/privacy?hl=en-GB&gl=en.


5. Possibility to object and opt out

Cookies are stored on the user’s computer and transmitted from the computer. Users therefore have full control of the use of cookies. If you do not want your visit to be included in the user statistics, you can prevent this by prohibiting the storage of cookies required for these technologies, e.g. via the settings of your browser. Furthermore, you have the option of changing your ads settings or disabling interest-based ads on Google. Alternatively, you may deactivate the use of cookies by third parties by accessing the Network Advertising Initiative’s opt-out page. However, we and Google will continue to receive statistical information on how many users have visited this website as well as the time of their visit. If you do not wish to be included in these statistics either, you can prevent this by using additional programs for your browser (e.g. the Ghostery add-on).

VIII. Two-click solution for integrating Vimeo


1. Description and scope of data processing

On our website, we use components of Vimeo. Vimeo is an online video portal that allows video publishers to post video clips free of charge and users to view, rate and comment on videos, also free of charge. Since Vimeo allows all types of videos to be published, the portal includes complete film and television programmes as well as music videos, trailers and user-generated content.

The service is provided by Vimeo Inc. 555 West 18th Street, New York, New York 10011.
Vimeo videos are not embedded in our website. Therefore, it is not possible for third parties to create profiles.

To be able to watch the videos displayed on our website, users are required to click on the preview image first, and only by clicking on the play button can the video be viewed. It is only then that the transmission of data starts. Further information on the above is available at vimeo.com/privacy.
The privacy policy provides insights into the collection, processing and use of personal data by Vimeo.

2. Legal basis for processing data

The legal basis for collecting and sharing personal data of users is Art. 6 para. 1 lit. f of the GDPR. Please note that we have no influence on the processing of your personal data by Vimeo.

3. Purpose of data processing

The purpose of processing data is to provide users with a broad range of content across different media.

4. Retention period

Information on retention periods can be found in Vimeo’s privacy policy at vimeo.com/privacy
5. Possibility to object and opt out. If you do not want Vimeo to process data via this service, you can deactivate the use of JavaScript in your browser settings. Please note that in this case any Vimeo videos displayed on our website can no longer be viewed.

IX. Data security


We take technical and organisational security measures to protect your data from accidental or intentional manipulation, loss, destruction or unauthorised access. Our security measures are continuously improved in line with technological developments.

X. Rights of the data subject


Whenever your personal data are processed, you are a data subject within the meaning of the GDPR, and in relation to the party responsible you shall be entitled to the following rights:

We will be happy to provide you with information as to whether or not personal data concerning you are being processed by us, and, where that is the case, for which purposes such data are being processed (Art. 15 GDPR). Furthermore, subject to the respective legal requirements, you are entitled to the right to rectification (Art. 16 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to erasure (Art. 17 GDPR) and the right to data portability (Art. 20 GDPR).

Pursuant to statutory requirements, you have the right to object to the processing of data (Art. 21 GDPR).
To exercise your above rights, please contact us by sending an e-mail to Datenschutz@XYZ.de or by mailing a letter to our corporate address. You can exercise the aforementioned rights free of charge.
Without prejudice to these rights and any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes any privacy regulations (Art. 77 GDPR).

The supervisory authority competent for our place of business is:
Der Hamburgische Beauftragte für Datenschutz und Informationssicherheit
(Hamburg Representative for Data Protection and Freedom of Information)

XI. Amendments to the privacy policy


This privacy policy shall be regularly updated in the context of the further development of the internet or of our services. We shall communicate any amendments in good time. To stay informed of the latest status of our data protection provisions, we recommend visiting this site on a regular basis.

XII. Contact details Data Protection Officer


Ms Katrin Rammo
intersoft consulting services AG
Beim Strohhause 17
D-20097 Hamburg
Telephone: +49 40 790 235 - 235  |  Mobile: +49 175 261 724 2 

E-mail: KRammo@intersoft-consulting.de

 

 

Login

Enter your username and password here in order to log in on the website:
Forgot your password? Register