Data protection

Thank you for your interest in our website. Below you will find information on how we handle your data that is collected through your use of our website. Your data will be processed in accordance with the legal regulations on data protection.

Person responsible within the meaning of the DSGVO

Deutsche Seereederei GmbH Niederlassung Hamburg
Am Kaiserkai 69
20457 Hamburg
Tel: +4940 – 300 322 250

e-mail: a.freystatzky@deutsche-seereederei.de

Data protection officer

DS EXTERN GmbH
Dipl.-Kfm. Marc Althaus
Frapanweg 22
22589 Hamburg

https://www.dsextern.de/anfragen

Definitions

Our privacy policy should be simple and understandable for everyone. In this privacy policy, the official terms of the General Data Protection Regulation (GDPR) are generally used. The official definitions are explained in Art. 4 GDPR.

Access to and storage of information in terminal equipment

By using our website, information (e.g. IP address) may be accessed in your terminal equipment. This access may involve further processing of personal data within the meaning of the GDPR.

In cases where such access to information or such storage of information is absolutely necessary for the technically error-free provision of our services, this is done on the basis of § 25 para. 1 S. 1, Abs. 2 Nr. 2 TTDSG.
In cases where such a process serves other purposes (e.g. the needs-based design of our website), this is carried out on the basis of § 25 para. 1 TTDSG only with your consent in accordance with Art. 6 Para. 1 lit. a GDPR. The consent can be revoked at any time for the future. The requirements of the DSGVO and the Federal Data Protection Act (BDSG) apply to the processing of your personal data.

For further information on the processing of your personal data and the relevant legal bases in this context, please refer to the following sections on the specific processing activities on our website.

Webhosting

This website is hosted by an external service provider (hoster: punkt.de GmbH in Germany). This website is hosted in Germany. Personal data collected on this website is stored on the hoster’s servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, website traffic and other data generated through a website.

We collect the listed data in order to be able to guarantee a smooth connection setup of the website and a technically error-free provision of our services. The processing of this data is strictly necessary to provide you with the website. The legal basis for the processing of the data is our legitimate interest in the correct presentation and functionality of our website in accordance with Art. 6 Para. 1 lit. f GDPR.

We have concluded an order processing contract with the provider in accordance with the requirements of Art. 28 DSGVO, in which we oblige the provider to protect our customers’ data and not to pass it on to third parties.

Server log files

When you access our website, it is technically necessary for data to be transmitted to our web server via your internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:

Date and time of the request
Name of the requested file
Page from which the file was requested
Access status
Web browser and operating system used
(Complete) IP address of the requesting computer
Transmitted data volume

We collect the listed data to ensure a smooth connection of the website and to enable a comfortable use of our website by the users. In addition, the log file is used to evaluate system security and stability as well as for administrative purposes. The legal basis for the temporary storage of the data or the log files is Art. 6 para. 1 lit. f GDPR.

For reasons of technical security, in particular to defend against attempted attacks on our web server, we store this data for a short period of time. It is not possible for us to draw conclusions about individual persons on the basis of this data. After 30 days at the latest, the data is anonymised by shortening the IP address at domain level, so that it is no longer possible to establish a link to the individual user.

Contact form and contact by e-mail

If you send us enquiries via the contact form or e-mail, your details from the enquiry form or your e-mail, including the personal data you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up enquiries. The specification of an e-mail address is required to contact us, the specification of further personal data is voluntary. Under no circumstances do we pass on this data without your consent. The legal basis for the processing of the data is our legitimate interest in responding to your request in accordance with Art. 6 Para. 1 lit. f DSGVO and Art. 6 Abs. 1 lit. b DSGVO,if your request is aimed at the conclusion of a contract. Your data will be deleted after your enquiry has been processed, provided that there are no legal obligations to retain the data. In the case of Art. 6 para. 1 lit. f GDPR object to the processing of your personal data at any time.

Data sharing and recipients

Your personal data will not be transferred to third parties unless

if we have explicitly pointed this out in the description of the respective data processing,
if you have given your express consent in accordance with Art. 6 para. 1 S. 1 lit. a GDPR,
the disclosure pursuant to Art. 6 para. 1 S. 1 lit. f GDPR is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
in the event that a legal obligation exists for the disclosure pursuant to Art. 6 para. 1 S. 1 lit. c GDPR and
insofar in accordance with Art. 6 para. 1 S. 1 lit. b GDPR as this is necessary for the processing of contractual relationships with you.

Furthermore, we use external service providers for the processing of our services, which we have carefully selected, commissioned in writing and with whom we have concluded order processing agreements pursuant to Art. 28 GDPR, if necessary. They are bound by our instructions and are regularly inspected by us. These are, among others, service providers for hosting, sending e-mails and maintenance and care of our IT systems and HR software, etc. The service providers will not pass this data on to third parties.

Data security

We shall take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk in accordance with Article 32 of the GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons. This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content.

Duration of the storage of personal data

The duration of the storage of personal data is determined by the relevant statutory retention periods (e.g. from commercial law and tax law). After expiry of the respective deadline, the corresponding data will be deleted. If data is required to fulfil or initiate a contract or if we have a legitimate interest in continuing to store it, the data will be deleted when it is no longer required for these purposes or you have exercised your right of revocation or objection.

Your rights

Below you will find information on which data subject rights the applicable data protection law grants you vis-à-vis the controller with regard to the processing of your personal data:

The right to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.

The right to request the correction of inaccurate or incomplete personal data stored by us without delay in accordance with Art. 16 GDPR.

The right to request the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.

The right to demand the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR.

The right, in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller.

The right to complain to a supervisory authority in accordance with Article 77 of the GDPR.

The right to revoke consent given in accordance with Art. 7 para. 3 GDPR: You have the right to revoke your consent to the processing of data at any time with effect for the future. In the event of revocation, we will immediately delete the data concerned unless further processing can be based on a legal basis for processing without consent. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

Right of objection

Insofar as your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 para. 1 S. 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 DSGVO, insofar as this is done for reasons arising from your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement to specify a particular situation.
If you wish to make use of your right of revocation or objection, it is sufficient to send an e-mail to a.freystatzky@deutsche-seereederei.de

Legal obligations

The provision of personal data for the decision on the conclusion of a contract, the fulfilment of a contract or for the implementation of pre-contractual measures is voluntary. However, we can only make the decision in the context of contractual measures if you provide such personal data that is required for the conclusion of the contract, the performance of the contract or pre-contractual measures.

Automated decision making

Automated decision-making or profiling in accordance with Art. 22 GDPR does not take place.

Subject to change

We reserve the right to adapt or update this data protection declaration if necessary in compliance with the applicable data protection regulations. In this way, we can adapt them to the current legal requirements and take into account changes in our services, e.g. when introducing new services. The current version applies to your visit.

Status of this privacy policy: 21.04.2023