Source: https://www.hamburg-region.com/data-protection-datenschutz/
Timestamp: 2019-06-18 23:23:18+00:00

Document:
Data Protection • Datenschutz
Note: You will find our Data Privacy Policy (english version) below the german version
Die nachfolgenden Hinweise geben Ihnen Informationen über die Art, den Umfang und die Zwecke der Erhebung, Verwendung und Verarbeitung von personenbezogenen Daten auf unserer Webseite https://www.hamburg-region.com.
Jakob Richter (Leiter der Geschäftsstelle der Metropolregion Hamburg)
Telefon: +49/ 40/ 42841-2600
E-Mail: info@metropolregion.hamburg.de
Ansprechpartner: Verena von der Hagen
a) Wenn Sie Fragen zum Datenschutz haben, Rechte oder Ansprüche zu Ihren personenbezogenen Daten ausüben möchten, können Sie uns unter den oben (unter Ziffer 1.1.) angegebenen Kontaktmöglichkeiten kontaktieren.
b) Bei der Kontaktaufnahme (zum Beispiel per Telefon oder E-Mail) werden Ihre Angaben zur Bearbeitung der Anfrage sowie für den Fall, dass Anschlussfragen entstehen, gem. Art. 6 Abs. 1 lit. b) DSGVO gespeichert. Die in diesem Zusammenhang anfallenden Daten löschen wir, nachdem die Speicherung nicht mehr erforderlich ist, oder schränken die Verarbeitung ein, falls gesetzliche Aufbewahrungspflichten bestehen (Siehe Ziffer 13).
Sie uns Ihre Einwilligung erteilt haben (Art. 6 Abs. 1 S. 1 lit. a DSGVO), oder
die Verarbeitung zur Erfüllung unseres Vertrags mit Ihnen erforderlich ist (Art. 6 Abs. 1 S. 1 lit. b DSGVO), oder
im Falle einer Anfrage durch Sie vorvertragliche Maßnahmen erforderlich sind (Art. 6 Abs. 1 S. 1 lit. b DSGVO), oder
die Verarbeitung zur Wahrung unserer berechtigten Interessen oder die eines Dritten erforderlich ist, sofern nicht Ihre Interessen oder Grundrechte und Grundfreiheiten, die den Schutz personenbezogener Daten erfordern, überwiegen (Interessensabwägung) (Art. 6 Abs. 1 S. 1 lit. f DSGVO).
d) Die von Ihnen erhobenen Personenbezogenen Daten werden gelöscht, sobald der Zweck der Erhebung weggefallen ist (Siehe Ziffer 13).
2.3. Was versteht man unter „Verarbeitung“?
7.1. Was sind „Cookies“?
7.2. Welche Arten von „Cookies“ benutzen wir?
https://www.hamburg-region.com kann Links auf Internet-Seiten anderer Unternehmen enthalten. Wir sind nicht verantwortlich für die Datenschutzvorkehrungen auf externen Webseiten, die Sie über diese Links erreichen können. Bitte informieren Sie sich dort über den Datenschutz dieser externen Webseiten.
10. Einbindung des Tracking Tools Google Analytics
c) Google Analytics verwendet sog. „Cookies“, Textdateien, die auf Ihrem Computer gespeichert werden und die eine Analyse der Benutzung der Website durch Sie ermöglichen (Siehe Ziffer 9). Die durch den Cookie erzeugten Informationen über Ihre Benutzung dieser Website werden in der Regel an einen Server von Google in den USA übertragen und dort gespeichert. Im Falle der Aktivierung der IP-Anonymisierung auf dieser Website, wird Ihre IP-Adresse von Google jedoch innerhalb von Mitgliedstaaten der Europäischen Union oder in anderen Vertragsstaaten des Abkommens über den Europäischen Wirtschaftsraum zuvor gekürzt. Nur in Ausnahmefällen wird die volle IP-Adresse an einen Server von Google in den USA übertragen und dort gekürzt. Im Auftrag des Betreibers dieser Website wird Google diese Informationen benutzen, um Ihre Nutzung der Website auszuwerten, um Reports über die Website-Aktivitäten zusammenzustellen und um weitere mit der Website-Nutzung und der Internetnutzung verbundene Dienstleistungen gegenüber dem Website-Betreiber zu erbringen.
e) Sie können die Speicherung der Cookies durch eine entsprechende Einstellung Ihrer Browser-Software verhindern; wir weisen Sie jedoch darauf hin, dass Sie in diesem Fall gegebenenfalls nicht sämtliche Funktionen dieser Website vollumfänglich werden nutzen können. Sie können darüber hinaus die Erfassung der durch das Cookie erzeugten und auf Ihre Nutzung der Website bezogenen Daten (inkl. Ihrer IP-Adresse) an Google sowie die Verarbeitung dieser Daten durch Google verhindern, indem sie das unter dem folgenden Link verfügbare Browser-Plug-in herunterladen und installieren: http://tools.google.com/dlpage/gaoptout?hl=de.
f) Weitere Informationen zur Datennutzung zu Werbezwecken durch Google, Einstellungs- und Widerspruchsmöglichkeiten erfahren Sie auf den Webseiten von Google:
Datennutzung durch Google: http://www.google.com/analytics/terms/de.html
Informationen zum Datenschutz: http://www.google.com/intl/de/analytics/learn/privacy.html,
Zur Datenschutzerklärung: http://www.google.de/intl/de/policies/privacy
13. Löschung und Aufbewahrungsfristen Ihrer Daten
The following notes give you information about the nature, extend and purpose of the collection, use and processing of personal data on our website https://www.hamburg-region.com.
1. Responsible authority, contact
1.1. Responsible authority in the sense of the Data Protection Act
Responsible body within the meaning of Article 4 sect. 7 of the EU General Data Protection Regulation (GDPR) is:
Head office of Metropolregion Hamburg
Jakob Richter (head of the Business Office of Metropolregion Hamburg)
Telephone: +49-40696323220
Contact person: Verena von der Hagen
a) If you have any questions about privacy, rights or claims to your personal information, you can contact us using the contact details above (under 1.1.) or via our contact form.
b) When contacting us (for example by telephone, e-mail or contact form), as well as in the event that follow-up questions arise, your data for processing the inquiry is beeing stored (according to. Art. 6 sect. 1 lit. b) GDPR. We will delete the related data after the storage is no longer required or restrict processing it if there are statutory retention requirements (see section 13).
a) A processing or transfer of data to third parties only takes place within the extent of the statutory requirements (legal basis). According to Art. 6 sect. 1 GDPR this is the case, if
you have given express consent according to Art. 6 sect. 1 sentence 1 lit. a GDPR,
the processing is required to fulfill our contractual obligations with you (Art. 6 sect. 1 sentence 1 lit. b GDPR), or
in the case of a request by you, if pre-contractual measures are required (Art. 6 sect. 1 sentence 1 lit. b GDPR), or
we are legally obliged to transfer data (Art. 6 sect. 1 sentence 1 lit. c GDPR), or
the processing is necessary for the protection of our legitimate interests or that of a third party, unless your interests or fundamental rights and fundamental freedoms, which require the protection of personal data, are outweighed (balance of interests) (Art. 6 sect. 1 sentence 1 lit. f GDPR).
b) We remind you that in addition to this privacy policy, the privacy policies and declarations of the locally responsible partners and their designated institutions may apply.
c) When transferring your personal data, we always ensure the highest possible level of security. Therefore, your data will only be transferred to carefully selected and contractually-obligated service providers and partner companies in order to protect your personal data in accordance with the relevant statutory provisions.
d) The Personal data collected will be deleted as soon as the purpose of the elicitation ceases (see section 13).
a) The definition of "personal data" is grounded on Article 4 of the General Data Protection Regulation (GDPR). According to this, personal data is information that can be allocated with relative means to your person. Information that can not or only with a disproportionate amount of time, cost and labor be assigned to a particular or identifiable person is not personal data. A natural person is considered to be identifiable, if he or she can be identified directly or indirectly, in particular by association with an identifier such as a name, with location data or with one or more special features expressing the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.
b) When visiting our website for technical reasons, other data will be processed. These are mainly technical information such as your IP-address that your Internet Access provider assigns to your computer when you connect to the Internet, or information about the Internet page from which you accessed our offer, or the type and version of your browser. It also includes login details, your operating system, download errors, length of visits to particular pages, and any phone numbers from which you call our customer service number. This technical information may be personally identifiable information in individual cases. Usually, however, we use technical information only for technical reasons and if fit is required for the operation and protection of our website from attacks and misuse according to Art. 6 sect. 1 lit. f. GDPR.
2.3. What means "processing?
The meaning of "processing" is also grounded on Article 4 GDPR. “Processing” includes all processes that belong to the handling of data. Even the raising or the grasping, but also the organization or the arrangement or the storage, the adjustment or the change, are included in the term "processing". Also other manners, such as the actual use, or the transmission or the passing on are enfolded. Ultimately, however, this includes the restriction, the deletion or the destruction of data.
The security of your personal data is one of our top priorities. We therefore protect your stored data with technical and organizational measures. This ensures that the regulations of data protection laws are adhered to and that any loss or misuse by third parties is effectively prevented. In particular, our employees who process personal data are required to maintain data secrecy and must comply with it.
Our website uses secure SSL encryption during the transmission of personal data or personal content of our users. Please make sure that the SSL-encryption is activated. The use of encryption is easy to recognize: The display in your browser line changes from "http: //" to "https: //". SSL encrypted data is not readable by third parties. Therefore, transmit your confidential information only with activated SSL encryption and contact us in case of doubt.
a) In the case of merely informative use of the website (if you do not register or otherwise provide us with information) we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to show you our website and to ensure stability and security (legal basis is Art. 6 sect. 1 sentence 1 lit. f. DSGVO):
the IP address of the requesting device (ie your computer or smartphone),
the website from which the access takes place (referrer URL),
as well as the browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
b) In addition to the aforementioned data, cookies are stored on your computer when you use our website. For more information about cookies see section 9.
c) The data mentioned above is processed by us on the basis of our legitimate interests within the range of Art. 6 sect. 1 lit. f. GDPR. In no case we use the collected data for the purpose of drawing conclusions about you. Among the purposes we pursue are:
investigating abuse or fraud,
evaluating our system security and stability as well as
a) The personal data collected will generally be stored within the European Union ("EU"). However, it may exceptionally happen that personal data is transmitted to non-European countries. In these so-called countries the GDPR is no directly applicable law. Usually, third countries have a less stringent data protection law.
b) Such data transmission to countries outside the European Economic Area may take place, when processing a service request or providing electronical support-services.
c) In case of such transmission of data to a third country, we ensure that this is done in accordance with this privacy policy. In addition, we ensure that an appropriate level of data protection for you and other parties is guaranteed or that there is a legal permit. This is done by concluding a contract with the recipient in the third country on the basis of standard contractual clauses provided by the European Commission. These standard contractual clauses ensure a similar level of data protection as provided by the European Data Protection Regulation.
We use so-called "cookies" to recognize the multiple use of our website by the same user or Internet access holder. The data processed by cookies is required for the protection of our legitimate interests according to Art. 6 sect. 1 p. 1 lit. f GDPR (see section 3.1.).
7.1. What are "cookies"?
Almost every single website uses different cookies, so that the respective pages work as desired and their design and functions can be presented to you optimally.
Cookies are information files that are transmitted from our web server or third-party web servers to your web browser, where they are stored for later retrieval. These information-files are specific information related to your device (PC, smartphone and browser used). However, this does not mean that we are immediately aware of your identity. Cookies are mainly used for the user-friendliness of websites (eg, they store login data or the selected language). Cookies do not harm your device or contain viruses, trojan horses or other malicious software.
7.2. What types of "cookies" do we use?
This website uses transient and persistent cookies, their extent and operation are explained below:
a) Transient cookies are automatically being deleted when you close your browser. This includes session cookies in particular. Those cookies store a so-called session ID, with which various requests from your browser can be assigned to the common session. This will allow your computer to be recognized when you return to our website. We therefore use these cookies to identify you for follow-up visits if you have an account with us. Otherwise, you would have to log in again for each visit. The session cookies are deleted when you log out or close your browser.
b) Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete cookies in the security settings of your browser at any time.
7.3. What can I do against the use of cookies?
a) We will not disclose your personal information to third parties, unless the data is required for the processing of your contract, there are legitimate interests or you have expressly consented to the disclosure. Insofar as we are legally obliged to do so, we will pass on your data to government agencies and authorities entitled to receive information. Our legitimate interests are, for example, the interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 sect. 1 lit. f. GDPR.
b) In cases of transfering your personal data, we always ensure the highest possible level of security. Therefore, your data will only be tranfered to carefully selected and contractually-obligated service providers and partner companies in order to protect your personal data in accordance with the relevant statutory provisions.
9. Links to Internet pages of third parties
https://www.hamburg-region.com may contain links to other companies' websites. We are not responsible for the privacy practices on external websites that you can access via these links. Please inform yourself about the privacy policies of these external websites.
10. Integration of Google Analytics (tracking tool)
a) For the purpose of the need-based design and continuous optimization of our website, we use Google Analytics, a web analytics service provided by Google Inc. ("Google"), 1600 Amphitheater Parkway Mountain View, CA 94043, USA.
b) The use of Google Analytics is based on our legitimate interests within the range of Art. 6 sect. 1 lit. f. GDPR. We use Google Analytics to analyze and improve the use of our website. With the statistics given by Google Analytics we can improve our offer and make it more interesting for users. For the exceptional cases in which personal data is transferred to the US, Google has submitted to the EU-US Privacy Shield, thereby guaranteeing compliance with European data protection law: https://www.privacyshield.gov/EU-US-Framework.
c) Google Analytics uses so-called "cookies". Those are text files that are stored on your computer and allow an analysis of the use of our website by the user (see paragraph 9). The information generated by the cookie is usually transmitted to a Google server in the US and stored there. However, in the event of activation of IP-anonymisation on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement in the European Economic Area. Only in exceptional cases the full IP address will be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide other services related to the website usage and internet usage to the website operator.
d) The IP address transmitted by Google Analytics as part of Google Analytics will not be merged with other data provided by Google.
e) You can prevent the storage of cookies by setting your browser software accordingly; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. You may also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google. In order to do so, you have to download and install the following browser plug-in: http://tools.google.com/dlpage/gaoptout?hl=de.
f) For more information on the use of data for advertising purposes by Google, settings and objections, visit the websites of Google:
Data usage by Google https://www.google.com/analytics/terms/us.html
Promotional data http://www.google.com/policies/technologies/ads
Privacy Policy http://www.google.com/intl/en/analytics/learn/privacy.html
Privacy Policy http://www.google.com/intl/en/policies/privacy
You have the following rights regarding to your personal data:
According to Art. 15 GDPR, you may request information about your personal data processed by us. In particular, you can demand information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been tranferred, the planned retention period, the right to rectification, deletion, limitation of processing or opposition, the existence of the right to complain, the source of your data, if not collected from us, and the existence of automated decision-making including profiling and details about profiling;
in accordance with Art. 16 GDPR, you can immediately request the correction of incorrect or incomplete personal data stored by us;
according to Art. 18 GDPR you can demand the restriction of processing your personal data, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you reject their deletion and we no longer need the data, but you assert the data to exercise or defend legal claims or you have objected to processing the data according to Art. 21 GDPR;
according to Art. 20 GDPR you have the right to transfer data, which means we have to provide you with your personal information in a structured, common and machine-readable format. You can also require transmission to another person in charge, provided that the processing is based on your consent or a contract with us and the processing has been automated. In case of data transfer to another person in charge, however, you can only effect the transfer if it is technically feasible;
in accordance with Art. 7 sect. 3 GDPR, you can withdraw your once given consent at any time. As a result, we are not allowed to continue the processing your data based on this consent for the future; and
according to Art. 77 GDPR you have the right to complain to a supervisory authority. Usually you can contact the supervisory authority of your usual place of residence or workplace or our headquarters.
In order to exercise your rights to rectification or deletion of personal data, for your request for information, the withdrawal of consent or an objection, a short message to us will suffice. Exercising your rights is free of charge. You can contact us under the contact information provided in section 1 of this privacy policy.
a) If you have given your consent to the processing of your data, you can withdraw it at any time. The withdrawal will affect the admissibility of the processing of your personal data after you have given it to us.
b) As far as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not required to fulfill a contract with you. In the event of such a disagreement, we ask you to explain the reasons why we should not process your personal data as we have done. In the case of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or point out our compelling legitimate reasons on which we continue the processing. You have the right to complain to a regulator at any time (for example, the regulator at your place of residence or at our company headquarters).
c) Of course, you may object to the processing of your personal data for purposes of advertising and data analysis at any time. You can contact us under the given contact information in section 1.1.
d) If you want to withdraw or object, please send an e-mail to the person named under section 1.1.
13. Deletion and retention of your data
a) The data stored with us is deleted as soon as it is no longer necessary for the intended purpose. For details, see the sections in this statement that explain the nature and purpose of each processing of personal information.
b) Data that we have to store due to statutory or contractual retention obligations (eg for tax reasons) will be blocked instead of a deletion in order to prevent use for other purposes. This includes, for example, the storage for 6 years pursuant to § 257 paragraph 1 German Commercial Code (for trading books, inventories, opening balances, annual accounts, trade letters, accounting documents, etc.) or the storage for 10 years in accordance with § 147 Abs. 1 Tax Code (books, records, Management reports, accounting documents, trade and business letters, documents relevant to taxation, etc.).
b) Due to legislative changes or adjustments in data processing, updates to this privacy policy may be required. We therefore recommend that you inform yourself regularly about changes on this page. If the change affects your consent or the provisions of the contractual relationship, these changes only apply with your consent wherefore you will be contacted separately.
>> back to main page • zurück zur Hauptseite

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 15
 Art. 16
 Art. 18
 Art. 21
 Art. 20
 Art. 7
 Art. 77
 § 257
 § 147