We are pleased that you are visiting our website and thank you for your interest in HBB's offerings.
Below we provide information about the collection of personal data when you use our website. Personal data is all data that can be personally related to you, such as your name, address, email addresses, and user behavior.
Person responsible for data processing
The responsible party according to Art. 4 Para. 7 of the General Data Protection Regulation (GDPR) is HBB Hanseatische Betreuungs- und Beteiligungsgesellschaft mbH, see our Imprint.
Contracted service providers:
The general provision and maintenance of our websites and email systems is carried out with the support of IT service providers who work on our behalf and may therefore also be able to view (receive) your data to the extent necessary.
Data protection officer:
Althammer & Kill GmbH & Co.KG
Roscherstraße 7, 30161 Hanover
Phone: +49 511 330603-90
Email: kontakt-dsb@althammer-kill.de
collection and use of your data
The extent and nature of the collection and use of your personal data differs depending on whether you visit our website only to retrieve information or whether you use services that we may offer.
If we use other (IT) service providers for individual functions of our offering or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes (all data processing). We will also state the established criteria for the storage period and the applicable legal basis for the data processing.
Informational use
For the informational use of our website, we only collect the personal data that your browser automatically transmits to us, such as:
• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• amount of data transferred and the access status (file transferred, file not found, etc.)
• Website from which the request comes
• Browser type / version / language
• Operating system and its interface
• Language and version of your browser.
Legal basis of data processing:
The above data is technically necessary to display our websites to you and to ensure stability and security, in accordance with Art. 6 (1) (f) GDPR.
Contacting us
When you contact us via contact forms, by email or telephone, the personal data you provide (e.g. your name, email address and message) will be stored by us in order to answer your question(s) and concerns.
Legal basis of data processing:
Data processing is generally carried out in accordance with Art. 6 (1) (b) GDPR to carry out pre-contractual measures and in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in processing your request.
Application
If you apply for a position at HBB, we will process the data you sent us in connection with your application (including cover letter, CV and references) in order to assess your suitability for the position (or other open positions, if applicable) and to carry out the application process.
We have provided appropriate forms on our website for online applications, allowing you to conveniently apply for a position that suits you. Required information is marked separately; further information is voluntary.
Your application will be forwarded directly to the contact person responsible for your position. The next steps will then be coordinated. Access to your data is generally restricted to those who need it for the proper application process.
If you apply to us on your own initiative, your application will be reviewed either centrally by the Human Resources department or, in the case of regionally received unsolicited applications, by the relevant department heads and then forwarded to the responsible contact person within HBB.
Storage time:
In case of rejection, applicants’ data will be deleted after 6 months.
If you are selected for a position as part of the application process, your data will be transferred to our personnel information system.
Legal basis for data processing:
The processing of your data within the scope of the application procedure is permissible for the decision on the establishment of an employment relationship, in accordance with Section 26 Paragraph 1 BDSG.
Should the data be required for legal proceedings after the application process has been completed, data processing may be carried out to protect legitimate interests pursuant to Art. 6 (1) (f) GDPR. Our interest then lies in asserting or defending against claims.
Cookies
We use cookies on our website. Cookies are small text files that are sent from our web server to your browser when you visit our website. These files are stored on your computer for later retrieval. They serve to make the website more user-friendly and effective.
Cookies can generally be divided into two categories:
Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies. These store a so-called session ID, which allows various requests from your browser to be assigned to the shared session. This allows your computer to be recognized when you return to the website. Session cookies are deleted when you log out or close your browser.
Persistent cookies are automatically deleted after a specified period, which can differ depending on the cookie. You can delete cookies at any time in the security settings of your browser.
Cookies have various functions. Many cookies are technically necessary because certain website functions would not work without them. These cookies are stored on the basis of Art. 6 (1) (f) GDPR, unless another legal basis is specified. We have a legitimate interest in storing necessary cookies to ensure the technically error-free and optimized provision of this website. Other cookies can be used to evaluate user behavior or for advertising purposes. These cookies are integrated exclusively on the basis of your consent (Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG); this consent can be revoked at any time.
Privacy Settings / Consent Management Tool
When you first access this website, you have the option to configure your privacy and third-party service settings in the consent manager according to your preferences and to prohibit the acceptance or setting of certain cookie categories, such as third-party cookies, as well as the transmission of data to certain third-party services. However, please note that if you do this, you may not be able to use all of the features of this website.
The settings you select will then be saved for future sessions unless you delete the corresponding cookies. In this case, you will be prompted to repeat your individual privacy settings the next time you visit our website.
Consent management (Borlabs)
In order to obtain your consent to the storage of certain cookies in your browser or to the use of certain technologies and to document this in compliance with data protection regulations, we use the technology of Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany (hereinafter Borlabs).
When you visit our website, a Borlabs cookie is stored in your browser, which stores the consent you have given or the revocation of that consent. This data is not shared with Borlabs.
The collected data will be stored until you request its deletion, until you delete the Borlabs cookie yourself, or until the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected.
Details on Borlabs' data processing can be found at https://de.borlabs.io/kbtopic/borlabs-cookie/
Cookie consent technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 (1) (c) GDPR in conjunction with Section 25 of the Telemedia Act (TDDDG).
You can adjust your privacy settings at any time using the persistent link in the footer.
Integrated third-party services
It's important to us to make our websites as optimal as possible and thus attractive to our visitors. For this purpose, and to help us design our websites and provide additional features, we integrate certain external services.
Your rights
You have the following rights vis-à-vis us with regard to your personal data:
- right to information,
- right to rectification or erasure,
- right to restriction of processing,
- Right to data portability.
Right to complain to a supervisory authority
You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
Right of objection and withdrawal
If you have given your consent to the processing of your data, you can revoke this at any time. Such a revocation affects the admissibility of the processing of your personal data after you have given it to us.
If we base the processing of your personal data on the balancing of interests (the legal basis in this case is Art. 6 (1) (f) GDPR), you can object to the processing. This is the case if, in particular, the processing is not necessary to fulfill a contract with you, which we address when explaining the individual data processing operations and functions on our websites further up in this data protection notice. If you exercise such an objection, we ask you to explain the reasons why we should not process your personal data as we do. If your objection is justified, we will examine the situation and will either stop or adapt the data processing or explain to you our compelling legitimate reasons on the basis of which we continue the processing.
Right to object to direct advertising
Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time, e.g. even if you receive advertising from us in the form of a newsletter, customer magazine or information material by post as part of a business relationship.
Contact options regarding your rights
To exercise your rights, you can contact us at any time. Please use the following email address: info@hbb.de
You are also welcome to use one of the contact options in our legal notice or contact our data protection officer directly (contact details above).
Data deletion
The data we process will be deleted in accordance with legal requirements as soon as the consent to processing is revoked or other permissions expire (e.g., if the purpose for processing this data no longer applies or it is no longer required for that purpose). If the data is not deleted because it is required for other legally permissible purposes, its processing will be limited to these purposes. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons or whose storage is necessary to assert, exercise, or defend legal claims or to protect the rights of another natural or legal person.
Data security
We also implement technical and organizational security measures to protect personal data that is generated or collected, in particular against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security measures are continuously improved in line with technological developments.
The transmission of your personal data is encrypted using SSL technology (https) to prevent access by unauthorized third parties.
Communication by E-Mail
Our email systems support encrypted communication using SSL technology. This means that your email can generally be transmitted encrypted. However, please note that encryption also depends on the configuration of your email program, and we therefore cannot guarantee complete data security during transmission.
For information that requires a high degree of confidentiality, we recommend sending it by post.
