Privacy Policy

1) Information about the data controller collecting personal data and contact details

1.1 Thank you for visiting our website and your interest in our company. Below we provide information about how we deal with your personal data when using our website. Personal data refers to all data that can identify you personally.

1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is HBB Hanseatische Betreuungs- und Beteiligungsgesellschaft mbH GmbH, Brooktorkai 22, 20457 Hamburg, Germany, Tel.: +49 (40) 60 09 07-0, Fax: +49 (40) 60 09 07-499, E-Mail: info@hbb.de. The controller of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

1.3 The responsible party has appointed a data protection officer, who can be contacted as follows: “Levin Rühmann, c/o Althammer & Kill GmbH & Co. KG, Roscherstraße 7, 30161 Hannover, 0511 330 603 72, lr@althammer-kill.de”

1.4 For security reasons and to protect the transmission of personal data and other confidential information (e.g. orders or enquiries to the data controller), this website uses SSL and TSL encryption. An encrypted connection can be identified by the character sequence “https://” and the lock symbol in your browser title.

2) Data collection when visiting our website

If you use our website purely for information, i.e. you do not register or transmit information in any other way, we only collect the data that your browser transmits to our server (so-called “server logfiles”). When you call up our website we will collect the following data that we require from a technical point of view to display our website to you:

The website visited
Date and time of accessing the website
Volume of data transmitted in bytes
Source/reference from where you accessed the website
Browser used
Operating system used
IP address used (anonymous if applicable)

The data is processed in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disseminated or used in any other way. However, we reserve the right to check the server logfiles retrospectively if there is concrete evidence of unlawful use.

3) Cookies

We use so-called cookies on various pages to make the user experience attractive and enable the use of certain functions. Cookies are small text files which are stored on your end device. Some of the cookies we use will be deleted at the end of the browser session, i.e. after you close your browser. These are so-called session cookies. Other cookies will remain on your end device and enable us or our partner companies (third party cookies) to recognize your browser when you next visit our website (persistent cookies). If cookies are set, they will collect and process certain user information individually, such as browser and location data as well as IP address values. Persistent cookies will be deleted automatically after a specified period; this can vary depending on the cookie.

If individual cookies that we have implemented are also used to process personal data, this data will be processed in accordance with Article 6(1)(b) GDPR to either perform the contract, or, in accordance with Article 6(1)(f) GDPR, to safeguard our legitimate interests in the best possible functionality of our website as well as a user-friendly and effective experience of your visit.

We may work together with advertising partners that help us to make our internet offering more interesting for you. For this purpose and in this case, cookies from partner companies (third party cookies) will also be stored on your hard drive when you visit our website. Where we work together with the above-mentioned advertising partners, you will be informed in the subsequent paragraphs individually and separately about the use of such cookies and the extent of the information collected.

Please note that you can set your browser such that you will be informed about cookie settings and can decide individually which cookies to accept or can reject the acceptance of cookies in certain cases or in general. Each browser manages cookie settings in different ways. This is described in the Help menu of each browser,which also provides an explanation how you can change your cookie settings. You can find this information for the respective browsers under the following links:

Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac
Opera: http://help.opera.com/Windows/10.20/de/cookies.html

Please note that the functionality of our website may be restricted if you reject cookies.

4) Contacting us

When contacting us (eg via contact form or e-mail), personal data is collected. Which data are collected in the case of a contact form can be seen from the respective contact form. These data are stored and used solely for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f DSGVO. If your contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO. Your data will be deleted after final processing of your request. This is the case if it can be inferred from the circumstances that the matter in question has been finally clarified and provided that no statutory storage requirements are in conflict.

5) Use of Social Media: videos

Use of YouTube videos

This website uses the YouTube embedding function do display and play videos of the service provider YouTube, which is part of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Here, the extended data protection mode is in use; according to information by the service provider, the storage of user information is only initiated once (a) video/s is/are played. Once embedded YouTube videos start to be played, the service provider YouTube uses cookies to collect information about the user behaviour. According to information provided by YouTube, these cookies are used, amongst others, to collect video statistics, improve the user experience, and prevent misuse. If you are logged into Google, your data will be directly assigned to your account when you click on a video. If you do not want your profile to be assigned to YouTube you will need to log out before activating a video button. Google stores your data (even for users that are not logged in) as user profiles and uses these for analysis. Such analysis is carried out in particular in accordance with Article 6(1)(f) GDPR on the basis of Google’s legitimate interest in displaying personalized advertisements, in market research, and/or Google’s tailored website service. You have the right to object against the creation of these user profiles; you will need to contact YouTube to exercise this right. Within the use of YouTube, personal data may also be transmitted to the servers of Google LLC in the USA.
Independent of the embedded videos being played, every time this website is called up a connection is made to the Google network which may initiate further data handling processes that we cannot influence.

For more information on data protection at "YouTube", please see the provider's privacy policy at: https://www.google.com/intl/en/policies/privacy

As far as legally required, we have your consent to the processing of your data described above in accordance with Art. 6 Para. 1 lit. a GDPR obtained. You can revoke the consent you have given at any time with future effect. In order to exercise your revocation, deactivate this service in the "cookie consent tool" provided on the website.

6) web analytics services

Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google (Universal) Analytics uses so-called "cookies", which are text files that are stored on your device and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website (including the abbreviated IP address) is usually transferred to a Google server and stored there; it can also be transferred to the Google LLC server. come in the US.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp ()", which ensures anonymization of the IP address by shortening it and excludes direct personal reference. With the extension, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google LLC. Server in the USA and shortened there. Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics is not merged with other Google data.
With a special function, the so-called "demographic characteristics", Google Analytics also enables the creation of statistics with statements about the age, gender and interests of the site visitors on the basis of an evaluation of interest-related advertising and with the help of third-party information. This allows the definition and differentiation of user groups of the website for the purpose of target group-optimized alignment of marketing measures. However, data records recorded via the “demographic characteristics” cannot be assigned to a specific person.
All processing described above, in particular the setting of Google Analytics cookies for reading out information on the device used, will only be carried out if you have given us a message in accordance with Art. 6 Para. 1 lit. a GDPR have given your express consent to this. Without this consent, Google Analytics will not be used during your website visit.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website. We have concluded an order processing contract with Google for the use of Google Analytics, with which Google is obliged to protect the data of our website visitors and not to pass them on to third parties.
For the transmission of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European data protection level in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de

7) Tools and miscellaneous

7.1 - Borlabs
This website uses the cookie consent tool Borlabs from the provider Mr. Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg (“Borlabs”), which sets two technically necessary cookies (“borlabsCookie” and “borlabsCookieUnblockContent”) to save your cookie preference. The aforementioned processing is carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR based on our legitimate interest in providing cookie preference management for website visitors.
The “Borlabs Cookie” does not process any personal data. The “borlabsCookie” cookie stores your chosen preference, which you selected when entering the website. The cookie “borlabsCookieUnblockContent” stores which (external) media/content you always want to have automatically unblocked. If you would like to revoke these settings, simply delete the cookies in your browser. When you re-enter/reload the website, you will be asked again for your cookie preference.

7.2 - Google web fonts
For a uniform presentation of fonts, this website uses so-called web fonts; these are provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). When you call up a page your browser loads the required web fonts into your browser cache to display texts and fonts correctly.
For this purpose, the browser you use must make a connection to the Google servers. In doing so, personal data may also be transmitted to the servers of Google LLC in the USA. This way Google becomes aware that our website has been called up via your IP address. We use Google web fonts in the interest of a uniform and appealing presentation of our online offering. According to Article 6(1)(f) GDPR, this presents a legitimate interest. If your browser does not support web fonts your computer will use a standard font. For further information on Google web fonts please refer to https://developers.google.com/fonts/faq and Google’s privacy policy on: https://www.google.com/policies/privacy/

7.3 Applications for job advertisements by email

On our website, we are currently advertising vacancies in a separate section, to which interested parties can apply by e-mail to the contact address provided.

In order to be included in the application process, applicants must provide us with all the personal data required for a well-founded and informed assessment and selection together with the application by email.
The required information includes general information about the person (name, address, telephone or electronic contact options) as well as performance-specific evidence of the qualifications required for a job. If necessary, health-related information is also required, which, in the interest of social protection, must be given special consideration in the person of the applicant in terms of labor and social law.

The respective job advertisement shows which components an application must contain in individual cases in order to be considered and in which form these components are to be sent by email.

After receipt of the application sent using the specified email contact address, we will save the applicant data and evaluate it exclusively for the purpose of processing the application. For any queries that arise in the course of processing, we use either the e-mail address provided by the applicant with his application or a specified telephone number.

The legal basis for this processing, including the establishment of contact for queries, is Article 6 (1) lit. b GDPR (for processing in Germany in conjunction with Section 26 (1) BDSG), in the sense of which going through the application process is considered to be the initiation of an employment contract.

Insofar as special categories of personal data within the meaning of Art. 9 para. 1 DSGVO (eg health data such as information on the severely disabled property) are requested from applicants in the context of the application process, the processing is carried out in accordance with Art. 9 para. 2 lit. b. DSGVO, so that we can exercise the rights arising from employment and social security and social protection legislation and fulfill our obligations in this regard.

Cumulatively or alternatively, the processing of the special data categories may also be based on Art. 9 para. 1 lit. h DSGVO if it is used for health or occupational health purposes, for assessing the applicant's ability to work, for medical diagnosis, care or treatment in the health or social sector or for the administration of systems and services in the health or social sector he follows.

If the applicant is not selected in the course of the evaluation described above, or if an applicant withdraws his application prematurely, his data transmitted by email and all electronic correspondence including the original application email will be deleted after a corresponding notification after 6 months at the latest. This time limit is based on our legitimate interest in answering any follow-up questions to the application and, if necessary, in being able to meet our obligations to provide evidence from the regulations on equal treatment of applicants.

In the event of a successful application, the data provided will be processed on the basis of Art. 6 Para. 1 lit. b GDPR (for processing in Germany in conjunction with Section 26 (1) BDSG) further processed for the purpose of carrying out the employment relationship.

7.4 Online applications using a form

On our website we offer those interested in a job the opportunity to apply online using a corresponding form. Inclusion in the application process requires that applicants provide us with all the personal data required for a well-founded and informed assessment and selection via the form.

The required information includes general information about the person (name, address, telephone or electronic contact option) as well as performance-specific evidence of the qualifications required for a position. Health-related information may also be required, which must be given special consideration under labor and social law in the interest of the applicant's social protection.

When you send the form, the applicant data is transmitted to us in encrypted form in accordance with the state of the art, stored by us and evaluated exclusively for the purpose of processing the application.
The legal basis for this processing is generally Art. 6 Para. 1 lit. b GDPR (for processing in Germany in conjunction with Section 26 Para. 1 BDSG), in the sense of which going through the application process is considered to be the initiation of an employment contract.

If an applicant is not selected in the course of the evaluation described above or if an applicant withdraws their application prematurely, the data submitted in the form will be deleted after a corresponding notification at the latest after 6 months. This deadline is based on our legitimate interest in answering any follow-up questions regarding the application and, if necessary, in being able to meet our obligations to provide evidence under the regulations on equal treatment of applicants.

7.5 -Google Maps
On our website we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Maps is a web service for displaying interactive (land) maps to visually represent geographic information. By using this service you will be shown our location and will facilitate your arrival.
When you access the sub-pages in which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to and stored by Google on servers; this can also be transmitted to the server of Google LLC. come in the US. This happens regardless of whether Google provides a user account that you are logged into or whether there is a user account. If you are logged into Google, your data will be assigned directly to your account. If you do not wish to be assigned to your profile on Google, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. The collection, storage and evaluation are carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on the legitimate interest of Google in the display of personalized advertising, market research and / or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, although you must contact Google to exercise it. If you do not agree to the future transmission of your data to Google as part of the use of Google Maps, you can also completely deactivate the Google Maps web service by turning off the JavaScript application in your browser. Google Maps and thus also the map display on this website can then not be used.
You can view Google's terms of use at https://www.google.de/intl/de/policies/terms/regional.html, the additional terms of use for Google Maps can be found at https://www.google.com/intl /de_US/help/terms_maps.html
For details on privacy related to the use of Google Maps, please visit the Google Privacy Policy: https://www.google.com/intl/en/policies/privacy/
As far as is legally required, we have obtained your consent to your data being processed as described above in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time with future effect. To exercise the withdrawal of your consent, please refer to the option for exercising an objection as detailed above.

8) Rights of the data subject

8.1 The effective data privacy law gives you comprehensive rights of the data subject (rights to access and intervention) towards the data controller with regard to the processing of your personal data. These are dealt with below:

Right to access by the data subject in accordance with Article 15 GDPR: You have, in particular, the right to obtain information about the personal data processed by us, the purposes of the processing, the categories of the personal data processed, the recipients or categories of recipient to whom the personal data have been disclosed, the envisaged storage period or the criteria used for determining the storage period, the right to request rectification, erasure, restriction of processing, the right to object against the processing, to lodge a complaint with a supervisory authority, the source of your personal data if these were not collected from you by us, the existence of automated decision-making, including profiling and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you, and your right to be informed of the appropriate safeguards pursuant to Article 46 GDPR where personal data are transferred to a third country;
Right to rectification in accordance with Article 16 GDPR: You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you and/or to have incomplete personal data stored about you by us completed;
Right to erasure in accordance with Article 17 GDPR: You have the right to obtain the erasure of your personal data if the conditions of Article 17(1) GDPR apply. This right shall not apply to the extent that processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defence of legal claims;
Right to restriction of processing in accordance with Article 18 GDPR: You have the right to obtain restriction of processing your personal data so long as the accuracy of the personal data contested by you is verified, the processing is unlawful and you oppose the erasure of your personal data and request the restriction of their use instead, if you require your data for the establishment, exercise, or defence of legal claims once we no longer need this data for the purposes of the processing, or if you have objected for reasons of your specific situation as long as the verification whether our legitimate grounds are overriding has not been established;
Right to notification in accordance with Article 19 GDPR: If you have exercised the right of rectification, erasure, or restriction of processing towards the data controller they are obliged to inform each recipient to whom your personal data have been disclosed of the rectification, erasure, or restriction of processing unless this proves impossible or involves disproportionate effort. You have the right to be informed about those recipients.
Right to data portability in accordance with Article 20 GDPR: You have the right to receive your personal data, which you have provided to to us, in a structured, commonly used, and machine-readable format or request the transmission to another data controller as long as this is technically feasible;
Right to withdraw your consent in accordance with Article 7(3) GDPR: You have the right to withdraw the consent you gave once to the processing of data at any time with future effect. In the event of a withdrawal of consent we will erase the affected data immediately as long as further processing cannot be supported by a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal;
Right to lodge a complaint in accordance with Article 77 GDPR: If you consider that the processing of personal data relating to you infringes GDPR, you - without prejudice to any other administrative or judicial remedy - have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.

8.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA WITHIN A BALANCING OF INTERESTS AND BASED ON OUR OVERRIDING LEGITIAMTE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH FUTURE EFFECT FOR REASONS EMANATING FROM YOUR SPECIFIC SITUATION.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT WE WILL TERMINATE PROCESSING THE RELEVANT DATA. WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING PRIVILEGED REASONS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING PURPOSES AT ANY TIME. YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.

IF YOU MAKE USE OF YOUR RIGHT TO OBJECT WE WILL TERMINATE PROCESSING THE RELEVANT DATA FOR DIRECT ADVERTISING PURPOSES.

9) Storage period of personal data

The storage duration of personal data is determined by the respective legal framework, the processing purpose, and - where appropriate - additionally by the respective legal retention period (e.g. retention periods pertaining to commercial or tax legislation).

When processing personal data based on an explicit consent in accordance with Article 6(1)(a) GDPR this data will be stored until the data subject withdraws their consent.

If legal retention periods exist for data that have been processed within transactional or transactional-similar obligations on the basis on Article 6(1)(b) GDPR, these data will be routinely erased after expiry of the retention period provided they are no longer required for the fulfilment or initiation of a contract and/or no legitimate interest on continued storage continues from our side.

When processing personal data on the basis of Article 6(1)(f) GDPR we will store these data until the data subject exercises their right to object in line with Article 21(1) GDPR, unless we can prove compelling privileged reasons for processing that override the interests, rights, and freedoms of the data subject, or the processing serves the establishment, exercise, or defence of legal claims.

When processing personal data for the purpose of direct advertising on the basis of Article 6(1)(f) GDPR these data are stored until the data subject exercises their right to object in line with Article 21(2) GDPR.

If any other information of this declaration about specific processing situations does not result in any other outcomes, stored personal data will be erased when they are no longer required for the purposes for which they were collected or processed in any other way.