Privacy Poilicy

Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is all data with which you can be personally identified. Detailed information on the subject of data protection can be found in our data protection declaration listed below this text.

Data collection on our website

Who is responsible for data collection on this website?

Responsible for the processing of data on this website is

Hamburg Port Authority, Anstalt des öffentlichen Rechts
Neuer Wandrahm 4, 20457 Hamburg
Tel: (+49) 040 42847-0
Internet: www.hamburg-port-authority.de

A. Data processing

1. provision of the website and creation of log files

Every use of the Internet involves the transmission of data. Some data, such as your IP address, must be transmitted in order for the web portal to be technically available to you. We require other data so that the website can fulfill its purpose. In the following, we explain in particular what data we collect, why we process this data and what rights you have. The following data is processed and logged when you visit the website:

• IP address
• cInformation about the browser type and version used
• Date and time of access
• Internet service provider of the user
• Operating system of the user
• Websites from which the user's system accesses our website
• Websites that are accessed by the user's system via our website

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 e GDPR, in conjunction with Art. 6 para. 1 f GDPR. § 4 HmDSG.

2. Newsletter and contact form

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected, or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties. The data entered in the newsletter registration form is processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time, for example via the "Unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

Contact form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent.

The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. All you need to do is send an informal email to info@homeport.hamburg. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions - in particular retention periods - remain unaffected.

B. Web analysis

Google Analytics

IP anonymization

We have activated the IP anonymization function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: Click below to deactivate Google Analytics. You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Order data processing

We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics in Google Analytics

Google reCAPTCHA

We use "Google reCAPTCHA" (hereinafter referred to as "reCAPTCHA") on our websites. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

The purpose of reCAPTCHA is to check whether data is entered on our websites (e.g. in a contact form) by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website by the website visitor or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place. Data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its website from abusive automated spying and SPAM.

Further information about Google reCAPTCHA and Google's privacy policy can be found in the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

 C. Cookies

Some of the Internet pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. Please read our cookie policy to find out how we use cookies.

D. Disclosure of data to third parties

1. Social Media

Twitter Plugin

Functions of the Twitter service are integrated on our pages. These functions are offered by Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the "Re-Tweet" function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transmitted to Twitter in the process. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Twitter. Further information on this can be found in Twitter's privacy policy at: https://twitter.com/privacy.

The legal basis for the use of Twitter is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

You can change your data protection settings on Twitter in the account settings at https://twitter.com/account/settings.

Instagram Plugin

Functions of the Instagram service are integrated on our pages. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

The legal basis for the use of Instagram is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram. You can find more information on this in Instagram's privacy policy: https://instagram.com/about/legal/privacy/.

LinkedIn Plugin

Our website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

Each time one of our pages containing LinkedIn functions is accessed, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited our website with your IP address. If you click on the LinkedIn "Recommend" button and are logged into your LinkedIn account, LinkedIn is able to associate your visit to our website with you and your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by LinkedIn.
The legal basis for the processing is Art. 6 para. 1 lit. a) GDPR. You can revoke your consent via this link.

Further information on this can be found in LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy.

2. Third-party tools

YouTube

Our website uses plugins from YouTube, which is operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

Further information on the handling of user data can be found in YouTube's privacy policy at https://www.google.de/intl/de/policies/privacy.

Vimeo

Our website uses plugins from the video portal Vimeo. The provider is Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA.

When you visit one of our pages equipped with a Vimeo plugin, a connection to the Vimeo servers is established. This tells the Vimeo server which of our pages you have visited. Vimeo also obtains your IP address. This also applies if you are not logged in to Vimeo or do not have a Vimeo account. The information collected by Vimeo is transmitted to the Vimeo server in the USA.

If you are logged into your Vimeo account, you enable Vimeo to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Vimeo account.

The legal basis is Art. 6 (1) (a) GDPR. Further information on the handling of user data can be found in Vimeo's privacy policy at: https://vimeo.com/privacy.

Google Maps

a) Description

In rare cases, we still use the "Google Maps" service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google) on hamburg.de. Google Maps provides free map material, including city maps.

b) Data processing

When the "Google Maps" service is called up, Google may process information, in particular user settings and data, by setting a persistent cookie. In doing so, Google also records the requesting IP address and stores it for statistical purposes, for example. The information about the use of the online offer is usually transmitted to a Google server in the USA and stored there. We have no influence on how Google handles this data. Google's privacy policy can be found here: https://www.google.com/policies/privacy/

You can deactivate the "Google Maps" map service here https://www.google.com/settings/ads/ and thereby prevent data transmission to Google.

c) Legal basis

Spotify

Functions of the Spotify music service are integrated on our pages. The provider is Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden. You can recognize the Spotify plugins by the green logo on our site. You can find an overview of the Spotify plugins at: https://developer.spotify.com.

This allows a direct connection to be established between your browser and the Spotify server when you visit our website via the plugin. Spotify receives the information that you have visited our site with your IP address. If you click on the Spotify button while you are logged into your Spotify account, you can link the content of our pages to your Spotify profile. This allows Spotify to associate your visit to our website with your user account. Further information on this can be found in Spotify's privacy policy: https://www.spotify.com/de/legal/privacy-policy/.

If you do not want Spotify to be able to associate your visit to our pages with your Spotify user account, please log out of your Spotify user account.

HubSpot

We use the HubSpot service for various purposes on this website. HubSpot is a software company from the USA with a branch in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500.

Hubspot is an integrated software solution that we use to cover various aspects of our online marketing. These include, among others:

Email marketing, contact management (e.g. user segmentation & CRM) and contact forms. Our sign-up service allows visitors to our website to join a community, learn more about our mission, consume content and provide their contact information and other demographic information. This information and the content of our website is stored on the servers of our software partner HubSpot. It can be used by us to contact visitors to our website and to determine which of our company's services are of interest to them. All information we collect is subject to this privacy policy. We use all information collected exclusively to optimize our contact approach and for marketing purposes. You can find more information about HubSpot's privacy policy (here) or more information from HubSpot regarding EU data protection regulations (here) on the corresponding website.

The following data may be collected and processed via Hubspot as part of the optimization of our contact approach and marketing measures:

– Geographical position
– Browser type and version
– Navigationsinformationen
– Reference URL
– Performance data
– Information about how often the application is used
– Login information for the HubSpot subscription service
– Files that are displayed on site
– Domain names
– Pages viewed
– Aggregated use
– Internet service provider
– IP-Address
– Device identification
– Duration of the visit
– Operating system
– Events that occur during the visit
– Access times
– Device model and version

In addition, we also use Hubspot to provide contact forms. Further information on this can be found in section 7 of this privacy policy. Furthermore, we use HubSpot's live chat service "Messages" (round chat icon at the bottom right of the screen) to improve the user experience on our website for sending and receiving messages on some subpages. If you consent to and use this function, the following data will be transmitted to HubSpot's servers:

– Content of all sent and received chat messages
– Context information (e.g. page on which the chat was used)
– Optional: E-mail address of the user (if provided by the user via the chat function)

The legal basis for processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR. If you do not want Hubspot to collect and process the aforementioned data, you can refuse your consent or withdraw it at any time with effect for the future. The personal data will be stored for as long as it is necessary to fulfill the purpose of processing. The data will be deleted as soon as it is no longer required to achieve the purpose.

As part of processing via HubSpot, data may be transferred to the USA. The security of the transfer is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a level of security that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to establish an adequate level of security, your consent may serve as the legal basis for the transfer to third countries in accordance with Art. 49 para. 1 lit. a GDPR. Please refer to the subsection "7. Forms".

E. Rights of data subjects

Every person whose personal data is processed ("data subject") has the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR and the right to data portability under Art. 20 GDPR. The restrictions under Sections 34 and 35 BDSG apply to the right of access and erasure. Finally, there is a right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG).

F. Obligation to make available

When using the website, you only need to provide the personal data required to use the web portal and the services offered. There is no obligation to provide data.

H. Profiling (scoring)

An automated evaluation of personal aspects (profiling) does not take place.

I. Adaptation of this data protection notice

As the website is further developed and new technologies are implemented, it may become necessary to make changes to this privacy policy. The HPA will therefore adapt these data protection provisions at irregular intervals. We therefore recommend that you read this data protection policy again from time to time.

J. Notes on communication on the Internet

Data transmission via the website is encrypted. However, this does not apply to the sending of e-mails. It is therefore possible that your data may be intercepted by unauthorized persons. As the HPA is currently unable to offer a secure connection or encryption of e-mails, if you are in doubt and do not wish to take this risk, you should choose another means of communication. The transmission of data in this way is expressly at your own risk.

K. Withdrawal of consent/objection to processing

You can find out from which body you can withdraw your consent in the information in the respective declaration of consent.

L. Asserting data subject rights

You can assert your rights as a data subject, e.g. information on stored data, by contacting Datenschutz@hpa.hamburg.de.