Source: https://future.hamburg/en/privacy/
Timestamp: 2019-04-26 04:09:54+00:00

Document:
Projects43See how Hamburg and it’s citizens are changing the way the city lives.
Creators84Meet the Persons and companies that move the innovation forward.
Please find detail on the nature, scope and purpose of the collection and use of data by the Hamburg Marketing GmbH (HMG).
The term ‘personal data’ is defined in the General Data Protection Regulation (hereinafter referred to as the “GDPR”). According to this definition, ‘personal data’ means any information relating to an identified or identifiable natural person. This includes details like your name, address, telephone number and date of birth. Information on how you use this website may also be categorised as personal data if it can be used to derive your identity.
As a general rule, we process our users’ personal data only if this is required in order to be able to provide a functional website as well as our content and services. Our users’ personal data are regularly processed only after the users have expressed their consent or if processing is permitted by legal provisions.
Provided we acquire the consent of the data subject for processing their personal data, the legal basis is defined by Art. 6 para. 1 lit. a of the GDPR.
Art. 6 para. 1 lit. b of the GDPR forms the legal basis for the processing of personal data that is necessary for the performance of a contract to which the data subject is party. This also applies to processing operations that are necessary prior to entering into a contract.
Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, the legal basis is defined by Art. 6 para. 1 lit. c of the GDPR.
Art. 6 para. 1 lit. d of the GDPR forms the legal basis in the event that the processing of personal data is necessary in order to protect the vital interests of the data subject or of another natural person.
If processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, the legal basis is defined by Art. 6 para. 1 lit. f of the GDPR.
The data subject’s personal data shall be erased or blocked if the purpose for which they were stored no longer applies. The data may be stored beyond this time if this was stipulated by European or national legislators in Union regulations, laws or other provisions to which the controller is subject. The data shall also be blocked or erased if a retention period stipulated by the stated standards expires, unless it is necessary to continue storing the data for a contract conclusion or contract performance.
The data are also stored in our system’s log files. However, these data are not stored together with other personal data from the user.
The legal basis for storing the data and the log files is Art. 6 para. 1 lit. f of the GDPR.
The system’s temporary storage of the IP address is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must be stored for the duration of the session. The data are stored in log files to ensure that the website functions. In addition, the data help us to optimise the website and ensure the security of our information technology systems. The data are not evaluated in this context for marketing purposes. Our legitimate interest in data processing also lies in these purposes, in accordance with Art. 6 para. 1 lit. f of the GDPR.
The data we store shall be erased as soon as they are no longer required for achieving the purpose of their collection. This is the case after no more than seven days. The data may also be stored beyond this period. In this case, the user’s IP address shall be erased or distorted so that the client can no longer be classified.
Collecting the stated data is essential to be able to operate the website. For this reason, the user shall have no possibility to object.
User data collected in this way are pseudonymised by technical means. It is, therefore, no longer possible to assign the data to the respective user. The data are not stored together with other personal data from the user.
The use of analysis cookies serves the purpose of improving the quality of our website and its content. The analysis cookies enable us to find out how the website is used so that we can continuously optimise our services.
Our legitimate interest in processing personal data also lies in these purposes, in accordance with Art. 6 para. 1 lit. f of the GDPR.
This website uses Google Analytics, a web analysis service of Google Inc, (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). The use includes the “Universal Analytics” operating mode. This facilitates the assignment of data, sessions and interactions across several devices to a pseudonymous user ID and thus the analysis of a user’s activities across devices.
The legal basis for processing the user’s personal data is Art. 6 para. 1 lit. f of the GDPR.
Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet use. Our legitimate interest also lies in these purposes.
For more information on the retention period, please visit https://www.google.com/analytics/terms/gb.html or https://policies.google.com/?hl=en.
By changing the settings in your internet browser, you can deactivate or limit the transmission of cookies. You can also delete cookies already stored at any time. In this event, it may no longer be possible for you to fully use all the website’s features.
In addition, you can prevent Google from collecting and processing data generated by the cookie and on your use of the website (incl. your IP address) by downloading and installing the browser add-on at https://tools.google.com/dlpage/gaoptout?hl=en.
This website uses Google Adsense. Provider is Google Inc, (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Analysis cookies are used here. Google Adsense also uses so-called ”Web Beacons” (small invisible graphics) to collect information. By using the Web Beacon, simple actions such as visitor traffic to the site can be recorded and collected. The information generated by the cookies and/or web beacon about your use of this website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information to evaluate your use of the website with regard to the advertisements, to compile reports on the website activities and advertisements for the website operators and to provide other services associated with the use of the website and the Internet. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google. Google will not associate your IP address with any other data held by Google.
The processing of users’ personal data enables us to analyse the surfing behaviour of our users with regard to the integration and placement of advertisements on our website. By evaluating the data obtained, we are in a position to compile information about the use of the individual components of our website including the ads placed there. This helps us to continuously improve our website and its user-friendliness. For these purposes, it is also in our legitimate interest to process the data in accordance with Art. 6 para. 1 lit. f GDPR. By anonymizing the IP address, users’ interest in protecting their personal data is sufficiently taken into account.
Information on the duration of storage can be obtained from the provider or at https://policies.google.com/technologies/ads?hl=en.
You can also deactivate the display of personalised advertising at https://support.google.com/ads/answer/2662922?hl=en.
We have integrated Google AdWords on our website. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA.
The use of Google AdWords enables the promotion of our website by inserting relevant ads into third-party websites and into Google search results, and inserting third-party ads into our website. When a user clicks on a Google AdWords ad, a conversion cookie is dropped onto the user’s computer. Conversion cookies do not identify the user. Instead, they help to show which pages on our website were accessed and whether or not a sale was generated or interrupted. The personal data are stored by Google in the USA. Under certain circumstances, Google may transfer these data to third parties.
The legal basis for processing personal data using cookies is Art. 6 para. 1 lit. f of the GDPR. The legal basis for processing personal data using cookies for analysis purposes is Art. 6 para. 1 lit. a of the GDPR, if the user’s consent to this is provided.
Google AdWords enables internet ads to be shown in Google’s search engine results and in Google’s ad network. For this purpose, we select keywords that are used to display an ad in Google’s search engine results if the search engine user accesses a search result that is relevant to the keyword. With the help of an automatic algorithm and taking the previously selected keywords into account, Google’s ad network distributes the ads to thematically relevant websites. The extracted data help us to optimise our ads.
Information on the retention period is available from the provider or at https://policies.google.com/privacy?hl=en&gl=de.
Furthermore, it is possible for the data subject to object to interest-based ads from Google. The data subject can do this by accessing the link www.google.com/settings/ads from all the internet browsers he or she uses and then selecting the desired settings.
A contact form on our website can be used for making contact to us electronically. If users make use of this possibility, the data they enter will be transferred to us and stored.
Alternatively, contact is also possible via the provided e-mail address. In this case, the user’s personal data transmitted in the e-mail will be stored.
The data thus provided shall not be forwarded to third parties. Instead, the data will only be used to process the conversation.
The legal basis for processing data if the user’s consent is provided is Art. 6 para. 1 lit. a of the GDPR.
The legal basis for processing data transmitted in an e-mail is Art. 6 para. 1 lit. f of the GDPR. If the aim of the e-mail contact is to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b of the GDPR.
Processing the personal data entered into the input mask serves the sole purpose of handling the request. If contact is made by e-mail, the required legitimate interest shall also lie in processing the data.
Other personal data processed during the sending procedure serve to prevent a misuse of the contact form and ensure the security of our information technology systems.
The data shall be erased as soon as they are no longer required for achieving the purpose of their collection. This is the case for personal data entered into the contact form’s input mask and data sent by e-mail when the respective conversation with the user has ended. The conversation is deemed to have ended when the circumstances show that the situation in question has been conclusively clarified.
The personal data additionally collected during the sending procedure shall be erased no later than after a period of seven days.
Users can withdraw their consent to having their personal data processed at any time. If users contact us by e-mail, they can object to their personal data being stored at any time. In this case, the conversation cannot be continued.
All personal data stored during the contact process shall be erased in this case.
In order to share our offers via Pinterest, Instagram, Facebook, Twitter, XING or Google+, we use the so-called two-click solution.
On our website we have integrated components of Soundcloud. SoundCloud is an online music service for the exchange and distribution of audio files.
We take technical and organisational security measures to protect your data from accidental or intentional manipulation, loss, destruction or unauthorised access. Our security measures are continuously improved in line with technological developments.
If the data we collect from you are inaccurate or incomplete, you have the right to obtain a rectification from us without undue delay, in accordance with Article 16 of the GDPR.
According to the conditions of Article 18 of the GDPR, you have the right to obtain a restriction of processing regarding your personal data.
After restriction, your data may only be processed with the data subject’s consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. We shall inform you before the restriction of processing is lifted.
If one of the grounds from Article 17 para. 1 of the GDPR applies, you shall have the right to obtain from us the erasure of personal data without undue delay, unless there is an exception to the obligation to erase in accordance with Article 17 para. 3 of the GDPR.
If you have asserted your right to rectification, erasure or restriction against us, we shall be obliged to communicate this, in accordance with Article 19 of the GDPR, to all recipients of your personal data, unless this proves impossible or involves disproportionate effort. You also have the right to be informed about these recipients. The controller is obliged to inform you about these recipients.
According to Article 20 of the GDPR, you also have the right to receive your personal data from us in a machine-readable format and to transmit those data to another controller without hindrance, provided the conditions of Article 20 para. 1 lit. a of the GDPR are given, or to have the personal data transmitted directly from us to another controller, where this is technically feasible and where the rights and freedoms of others are not adversely affected. This right shall not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
You have the right to object at any time to the processing of personal data concerning you, in accordance with Art. 6 para. 1 lit. f of the GDPR.
We shall no longer process your personal data unless compelling legitimate grounds override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
You have the right to withdraw your declaration of consent at any time by making a corresponding declaration to us. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

References: Art. 6

Art. 6
 Art. 6

Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6