Privacy

1) Information about the collection of personal data and contact details of the person responsible
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following we will inform you about the handling of your personal data when using our website. Personal data is all data by which you can be personally identified.

1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is ”HBB Hanseatische Betreuungs- und Beteiligungsgesellschaft mbH GmbH”, Brooktorkai 22, 20457 Hamburg, Germany, Tel.: +49 (40) 60 09 07-0, Fax: +49 (40) 60 09 07-499, email: info@hbb.de. The person responsible for the processing of personal data is the natural or legal person who, alone or together with others, decides on the purposes and means of processing personal data.

1.3 The person responsible has appointed a Data Protection Officer, who can be contacted as follows: “Simon Lang, c/o “Althammer & Kill GmbH & Co. KG”, Roscherstraße 7, 30161 Hanover, 0511 330 603 90, kontakt-dsb@althammer-kill.de”

1.4 This website uses for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible) SSL or TLS encryption. You can recognise an encrypted connection by the character string “https://” and the padlock symbol on your browser line.

2) Data collection when visiting our website
When using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “Server Log Files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our visited website
• Date and time of access
• Amount of data sent in bytes
• Source/referrer from which you arrived on the page
• Browser used
• Operating system used
• IP address used (if applicable: in anonymous form)

Processing takes place in accordance with Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are actual indications of illegal use.

3) Cookies
In order to make visiting our website attractive and to enable the use of certain functions, we use so-called “cookies” on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called “session cookies”). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognise your browser the next time you visit (persistent cookies). If cookies are deposited, they collect and process user-specific information, such as browser and location data, as well as IP address values. Persistent cookies are automatically deleted after a specified period, which can differ depending on the cookie. If personal data is also processed by individual cookies implemented by us, processing takes place in accordance with Art. 6 para. 1 lit. b GDPR, either for the execution of the contract or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit. We may work together with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). If we work with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected within the following paragraphs. Please note that you can set your browser so that you are informed about the depositing of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the Help menu of every browser, which explains how you can change your cookie settings. You can find these for the respective browser under the following links:

Internet Explorer: https://support.microsoft.com/en-us/topic/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d

Firefox: https://support.mozilla.org/en-US/kb/websites-say-cookies-are-blocked-unblock-them

Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=en

Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac

Opera: https://help.opera.com/en/latest/web-preferences/

Please note that if you do not accept cookies, the functionality of our website may be restricted.

Change Cookie-Settings

4) Contact
When you contact us (e.g. using the contact form or email), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. Such data is stored and used exclusively for the purpose of answering your request or for establishing contact and its associated technical administration. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact aims to conclude any contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after your request has been processed. This applies when it can be inferred from the circumstances that the matter in question has been finally clarified and provided that there are no statutory retention requirements.

5) Use of social media: Videos
Use of YouTube videos This website uses the YouTube embedding function to display and play back videos from the provider “YouTube”, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) . The extended data protection mode is used here, which, according to the provider, does not start storing user information until the video(s) play. If the playback of embedded YouTube videos is started, the provider “YouTube” uses cookies to collect information about user behaviour. According to information from “YouTube”, these are used, among other things, to record video statistics, improve user-friendliness and prevent abusive practices. If you are logged in to Google, your data will be assigned directly to your account when you click on a video. If you do not wish assignment of your profile to YouTube, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation takes place in particular in accordance with Art. 6 para. 1 lit. f GDPR based on Google’s legitimate interests in displaying personalised advertising, market research and/or needs-based design of its website. You have the right to object to the creation of these user profiles, although you must contact YouTube to exercise this right. When using YouTube, personal data coming to the US may also be transmitted to the servers of Google LLC. Regardless of whether the embedded videos are played, a connection to the Google network is established each time this website is accessed, which can trigger further data processing operations outside our control. Further information on data protection at “YouTube” can be found in the provider’s data protection declaration at: https://www.google.de/intl/de/policies/privacy As far as legally required, we have obtained your consent to the processing of your data described above in accordance with Art . 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the “Cookie Consent Tool” provided on the website.

6) Web analysis services
Google (Universal) Analytics This website uses Google (Universal) Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google (Universal) Analytics uses so-called “Cookies” are text files that are stored on your device and enable your use of the website to be analysed. The information generated by the cookie about your use of this website (including the abbreviated IP address) is usually transferred to a Google server and stored there; it can also be transferred to the Google LLC server in the US. This website uses Google (Universal) Analytics exclusively with the extension “_anonymizeIp ()”, which ensures anonymisation of the IP address by shortening it and excludes any direct personal reference. As a result of the extension, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google LLC Server in the USA and shortened there. Google will use this information on our behalf to evaluate your use of the website, compile reports on website activity and provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics is not merged with other Google data. By a special function, the so-called “demographic characteristics”, Google Analytics also enables the creation of statistics with statements about the age, gender and interests of the site visitors on the basis of an evaluation of interest-related advertising and with the help of information from third parties. This allows the definition and differentiation of user groups of the website for the purpose of target group-optimised alignment of marketing strategies. However, data records recorded via the “demographic characteristics” cannot be assigned to any specific person. All processing described above, in particular the setting of Google Analytics cookies for reading out information on the terminal device used, will only be carried out if you have given us in accordance with Art. 6 para. 1 lit. a GDPR your express consent to this. Without this consent, Google Analytics will not be used during your website visit. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the “Cookie Consent Tool” provided on the website. We have concluded an order processing agreement with Google for the use of Google Analytics, by which Google is obliged to protect data of our website visitors and not to pass them on to third parties. For transmission of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA. You can find more information on Google (Universal) Analytics here: https://policies.google.com/privacy?hl=de&gl=de

7) Tools and miscellaneous
7.1 – Borlabs This website uses the cookie consent tool Borlabs from the provider Mr. Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg (“Borlabs”), which deposits two technically necessary cookies (“borlabsCookie” and “borlabsCookieUnblockContent”) in order to save your cookie preference. The aforementioned processing takes place in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the provision of cookie preference management for website visitors. The “Borlabs Cookie” does not process any personal data. The “borlabsCookie” cookie stores those preferences you selected when you entered the website. The “borlabsCookieUnblockContent” cookie stores which (external) media/content you always want to have automatically unblocked. If you would like to revoke these settings, simply delete the cookies in your browser. When you re-enter/reload the website, you will be asked again for your cookie preferences.

7.2 – Google Web Fonts This site uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you are using must connect to the Google servers. This can also result in the transmission of personal data to the servers of Google LLC. in the US. In this way, Google learns that our website has been accessed via your IP address. Google Web Fonts are used in the interests of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If your browser does not support web fonts, a standard font will be used by your computer. Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s data protection declaration: https://www.google.com/policies/privacy/

7.3 Applications for job advertisements via email On our website we advertise currently vacant positions in a separate section, for which interested parties may apply by email to the contact address provided. In order to be included in the application process, applicants must provide us with all the personal data required for a well-founded and informed assessment and selection by email together with their application. The required information includes general information about the person (name, address, a telephone or electronic contact option), as well as performance-specific evidence of those qualifications required for a position. If necessary, health-related information is also required, which must be given special consideration under labour and social law in the applicant’s person in the interests of social protection. Which components an application must contain in individual cases in order to be considered and in which form these components are to be sent by email can be found within the respective job advertisement. After receipt of the application sent using the specified email contact address, the applicant data will be stored by us and evaluated exclusively for the purpose of processing the application. For any queries that arise in the course of processing, we either use the email address provided by the applicant with his application or the telephone number provided, as we choose. The legal basis for this processing, including contacting us for queries, is generally Art. 6 para. 1 lit. b GDPR (for processing in Germany in conjunction with Section 26 (1) BDSG), in the sense of which going through the application process is considered to be the initiation of an employment contract. Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR (e.g. health data, such as information about a severely disabled status) are requested from applicants, the processing takes place in accordance with Art. Art. 9 para. 2 lit. b. GDPR so that we can exercise the rights arising from labour law and social security and social protection law and meet our obligations in this regard. Cumulatively or alternatively, the processing of special data categories can also be based on Art. 9 para. 1 lit. h GDPR, if they are for the purposes of health care or occupational medicine, for assessing the applicant’s ability to work, for medical diagnostics, care or treatment in the health or social sector or for the administration of systems and services in the health or social sector he follows. If, in the course of the evaluation described above, the applicant is not selected or if an applicant withdraws their application prematurely, their data transmitted by email as well as all electronic correspondence, including the original application email, will be deleted after 6 months at the latest after notification. This period is based on our legitimate interest in answering any follow-up questions about the application and, if necessary, being able to meet our obligations to provide evidence under the provisions on the equal treatment of applicants. In the event of a successful application, the data provided will be processed on the basis of Art. 6 para. 1 lit. b GDPR (for processing in Germany in conjunction with Section 26 (1) BDSG) further processed for the purpose of carrying on the employment relationship.

7.4 Online applications using a form on our website, we offer prospective job applicants the opportunity to apply online using the corresponding form. In order to be included in the application process, applicants must use the form to provide us with all of the personal data required for a well-founded and informed assessment and selection. The required information includes general information about the person (name, address, a telephone or electronic contact option) as well as performance-specific evidence of those qualifications required for a position. If necessary, health-related information is also required, which must be given special consideration under labour and social law in the applicant’s person in the interests of social protection. During the course of submitting the form, the applicant’s data is encrypted and transmitted to us in accordance with the state of the art, stored by us and evaluated exclusively for the purpose of processing the application. The legal basis for this processing is generally Art. 6 para. 1 lit. b GDPR (for processing in Germany in conjunction with Section 26 (1) BDSG), in the sense in which going through the application process is considered to be the initiation of an employment contract. Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR (e.g. health data, such as information about a severely disabled status) are requested from applicants, the processing takes place in accordance with Art. Art. 9 para. 2 lit. b. GDPR so that we can exercise the rights arising from labour law and social security and social protection law and meet our obligations in this regard. Cumulatively or alternatively, the processing of special data categories can also be based on Art. 9 para. 1 lit. h GDPR, if they are for the purposes of health care or occupational medicine, for assessing the applicant’s ability to work, for medical diagnostics, care or treatment in the health or social sector or for the administration of systems and services in the health or social sector he follows. If, during the course of the evaluation described above, the applicant is not selected or if an applicant withdraws his application prematurely, the data transmitted in the form will be deleted after a corresponding notification after 6 months at the latest. This period is based on our legitimate interest in answering any follow-up questions about the application and, if necessary, being able to meet our obligations to provide evidence relating to the provisions on the equal treatment of applicants. In the event of a successful application, the data provided will be processed on the basis of Art. 6 para. 1 lit. b GDPR (for processing in Germany in conjunction with Section 26 (1) BDSG) further processed for the purpose of carrying on the employment relationship.

7.5 – Google Maps Our website uses Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Maps is a web service for displaying interactive (land) maps in order to visually display geographic information. When you use this service, you will be shown our location and any journey will thus be made easier. When you call up those sub-pages in which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to and stored by Google on servers; this can also be transmitted to the server of Google LLC in the US. This happens regardless of whether Google provides a user account that you are logged into or whether there is a user account. If you are logged into Google, your data will be assigned directly to your account. If you do not want this assignment to your profile on Google, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. The collection, storage and evaluation are carried out in accordance with Art. 6 para. 1 lit. f GDPR based on the legitimate interest of Google in the display of personalised advertising, market research and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, although you must contact Google to exercise it. If you do not agree to the future transmission of your data to Google when using Google Maps, you can also completely deactivate the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus also the map display on this website cannot then be used. You can view Google’s terms of use at https://www.google.de/intl/de/policies/terms/regional.html, the additional terms of use for Google Maps can be found at https://www.google.com/intl /de_US/help/terms_maps.html You can find detailed information on data protection in connection with the use of Google Maps on the Google website (“Google Privacy Policy”): https://www.google.de/intl/de/policies/privacy/ As far as legally required, we have your consent to the processing of your data described above in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. In order to exercise your revocation, please follow the option outlined above to make an objection.

8) Rights of the data subject
8.1 The applicable data protection law grants you comprehensive data protection rights (information and intervention rights) vis-à-vis the person responsible for processing your personal data, about whom we will inform you below:

• Right to information according to Art. 15 GDPR: In particular, you have the right to information about your personal data processed by us, the processing purposes, the categories of the processed personal data, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for the determination of the storage period, the right to rectification, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if we did not collect it from you, the existence of automated decision-making including profiling and if necessary, meaningful information about the logic involved and the scope and the intended effects of such processing, as well as your right to be informed about the guarantees according to Art. 46 GDPR exists when your data is forwarded to third party countries;
• Right to correction according to Art. 16 GDPR: You have the right to immediate correction of incorrect data concerning you and/or completion of your incomplete data stored by us;
• Right to deletion according to Art. 17 GDPR: You have the right to have your personal data deleted by satisfying the requirements of Art. 17 para. 1 GDPR. However, this right does not exist in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
• Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request that the processing of your personal data be restricted as long as the accuracy of your data, which you disputed, is being checked, if you refuse to delete your data due to inadmissible data processing and instead request that the processing of your data be restricted if you use your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved or if you have lodged an objection for reasons of your own particular situation, as long as it has not yet been determined whether our legitimate reasons prevail;
• Right to information in accordance with Art. 19 GDPR: If you have asserted the right to correction, deletion or restriction of processing against the person responsible, the person responsible is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction of processing, unless this turns out to be impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
• Right to data portability in accordance with Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible, insofar as this is technically feasible;
• Right to withdraw consent given in accordance with Art. 7 para. 3 GDPR: You have the right to revoke your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. Withdrawing consent does not affect the legality of the processing carried out on the basis of consent up to the point of withdrawal;
• Right to complain in accordance with Art. 77 GDPR: If you are of the opinion that the processing of your personal data violates the GDPR, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged violation.

8.2 RIGHT TO OBJECT IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR MAINLY LEGITIMATE INTEREST IN THE BALANCE OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS THAT WE REQUIRE YOU TO OBJECT TO YOUR OBJECTIVE WITH EFFECT IN THE FUTURE. IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE DATA CONCERNED. FURTHER PROCESSING IS RESERVED IF WE CAN PROVE GROUNDS FOR COMPULSORY PROCESSING, THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING OR EXPRESSION OF THE EXPRESSION APPLIES. IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY OBJECT AS DESCRIBED ABOVE. IF YOU USE YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE DATA AFFECTED FOR DIRECT ADVERTISING PURPOSES.

9) Duration of storage of personal data
The duration of storage of personal data is based on the respective legal basis, the processing purpose and – if relevant – also on the basis of the respective statutory retention period (e.g. commercial and tax retention periods). When processing personal data on the basis of express consent in accordance with Art. 6 para. 1 lit. a GDPR, this data is stored until the person concerned revokes his consent. Are there any statutory retention periods for data that are required within the framework of legal or similar obligations on the basis of Art. 6 para. 1 lit. b GDPR to be processed, this data are routinely deleted after the retention periods have expired, provided that they are no longer required for contract fulfilment or contract initiation and/or on our part there is no legitimate interest in further storage. When processing personal data on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until the person concerned exercises his right of objection according to Art. 21 Para. 1 GDPR, unless we can prove compelling legitimate reasons for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims. When processing personal data for the purpose of direct advertising on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until the person concerned exercises his right of objection according to Art. 21 para. 2 GDPR. Unless otherwise stated in the other information of this declaration on specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.