Information on
data protection

This data protection notice informs you about how we handle your personal data and about your rights under the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Responsible for data processing is Science City Hamburg Bahrenfeld GmbH (hereinafter referred to as "we" or "us").

Contents

  1. Contact us
  2. Legal basis
  3. Duration of storage
  4. Categories of recipients of the data
  5. Data transfer to third countries
  6. Processing when exercising your rights
  7. Your rights
  8. Right of objection
  9. Data Protection Officer
  1. Processing of server log files
  2. Contact options and inquiries
  3. Cookies
  4. Consent Management Tool
  5. External media and third-party services
    • a. Vimeo
    • b. Typeform
  1. Contact by e-mail
  2. Data from interested parties
  3. Use of the e-mail address for marketing purposes

I. General information

1. contact

If you have any questions or suggestions regarding this information or would like to contact us to assert your rights, please send your request to

Science City Hamburg Bahrenfeld GmbH


2. legal bases

The data protection term "personal data" refers to all information relating to an identified or identifiable person. We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and the BDSG. Data processing by us only takes place on the basis of legal permission. We only process personal data with your consent (Section 25 (1) TTDSG or Art. 6 (1) (a) GDPR), to fulfill a contract to which you are a party or at your request to carry out pre-contractual measures (Art. 6 (1) (b) GDPR), to fulfill a legal obligation (Art. 6(1)(c) GDPR) or if processing is necessary for the purposes of our legitimate interests or the legitimate interests of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data (Art. 6(1)(f) GDPR).

3. duration of storage

Unless otherwise stated in the following information, we only store the data for as long as is necessary to achieve the purpose of processing or to fulfill our contractual or legal obligations. Such statutory retention obligations may arise in particular from commercial or tax law regulations. From the end of the calendar year in which the data was collected, we will store such personal data contained in our accounting data for ten years and store personal data contained in commercial letters and contracts for six years. In addition, we will retain data in connection with consents requiring proof and with complaints and claims for the duration of the statutory limitation periods. We will delete data stored for advertising purposes if you object to processing for this purpose.

4. categories of recipients of the data

We use processors within the scope of processing your data. The processing operations carried out by such processors include, for example, hosting, maintenance and support of IT systems, customer and order management, accounting and billing, marketing measures or file and data carrier destruction. A processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the data controller. Processors do not use the data for their own purposes, but carry out the data processing exclusively for the controller and are contractually obliged to guarantee suitable technical and organizational measures for data protection. We may also transfer your personal data to bodies such as postal and delivery services, your bank, tax consultants/auditors or the tax authorities. Further recipients may result from the following information.

5. data transfer to third countries

Our data processing may involve the transfer of certain personal data to third countries, i.e. countries in which the GDPR is not applicable law. Such a transfer is permitted if the European Commission has determined that an adequate level of data protection is required in such a third country. If there is no such adequacy decision by the European Commission, personal data will only be transferred to a third country if there are suitable guarantees in accordance with Art. 46 GDPR or if one of the requirements of Art. 49 GDPR is met.

Unless otherwise stated below, we use the EU standard data protection clauses as appropriate safeguards for the transfer of personal data to third countries. You have the option of receiving or viewing a copy of these EU standard data protection clauses. Please contact us at the address given under Contact.

If you consent to the transfer of personal data to third countries, the transfer takes place on the legal basis of Art. 49 para. 1 letter a GDPR.

6. processing in the exercise of your rights

If you exercise your rights in accordance with Art. 15 to 22 GDPR, we process the personal data transmitted for the purpose of implementing these rights by us and to be able to provide proof of this. We will only process data stored for the purpose of providing and preparing information for this purpose and for the purposes of data protection monitoring and will otherwise restrict processing in accordance with Art. 18 GDPR.

This processing is based on the legal basis of Art. 6 para. 1 lit. c GDPR in conjunction with. Art. 15 to 22 GDPR and § 34 para. 2 BDSG.

7. your rights

As a data subject, you have the right to assert your data subject rights against us. In particular, you have the following rights:
  • In accordance with Art. 15 GDPR and Section 34 BDSG, you have the right to request information as to whether or not we process personal data relating to you and, if so, to what extent.
  • You have the right to demand that we rectify your data in accordance with Art. 16 GDPR.
  • You have the right to demand that we erase your personal data in accordance with Art. 17 GDPR and Section 35 BDSG.
  • You have the right to restrict the processing of your personal data in accordance with Art. 18 GDPR.
  • In accordance with Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit those data to another controller.
  • If you have given us separate consent to process your data, you can withdraw this consent at any time in accordance with Art. 7 (3) GDPR. Such a revocation does not affect the legality of the processing that was carried out on the basis of the consent until the revocation.
  • If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR.

8. right of objection

In accordance with Art. 21 (1) GDPR, you have the right to object to processing based on the legal basis of Art. 6 (1) (e) or (f) GDPR on grounds relating to your particular situation. If we process personal data about you for the purpose of direct marketing, you can object to this processing in accordance with Art. 21 (2) and (3) GDPR.

9. data protection officer

You can reach our data protection officer using the following contact details:

E-mail: datenschutz@hafencity.com

Herting Oberbeck Datenschutz GmbH
Hallerstraße 76
20146 Hamburg


https://www.datenschutzkanzlei.de

II Data processing on our website

1. processing of server log files

When using our website for purely informational purposes, general information that your browser transmits to our server is initially stored automatically (i.e. not via registration). By default, this includes: browser type/version, operating system used, page accessed, the previously visited page (referrer URL), IP address, date and time of the server request and HTTP status code.

The processing is carried out to protect our legitimate interests and is based on the legal basis of Art. 6 para. 1 letter f GDPR. This processing serves the technical administration and security of the website. The stored data will be deleted after fourteen days unless there is a justified suspicion of unlawful use based on concrete evidence and further examination and processing of the information is necessary for this reason. We are not in a position to identify you as a data subject on the basis of the stored information. Art. 15 to 22 GDPR therefore do not apply in accordance with Art. 11 para. 2 GDPR, unless you provide additional information that enables your identification in order to exercise your rights set out in these articles.

2. contact options and inquiries

Our website contains contact forms that you can use to send us messages. The transfer of your data is encrypted (recognizable by the "https" in the address line of the browser). All data fields marked as mandatory are required to process your request. If you do not provide this data, we will not be able to process your request. The provision of further data is voluntary. Alternatively, you can also send us a message via the contact e-mail. We process the data for the purpose of answering your request.

If your request is aimed at the conclusion or execution of a contract with us, Art. 6 para. 1 letter b GDPR is the legal basis for data processing. Otherwise, we process the data on the basis of our legitimate interest in contacting inquiring persons. The legal basis for data processing is then Art. 6 para. 1 letter f GDPR.

3. cookies

We use cookies and similar technologies ("cookies") on our website. Cookies are small data records that are stored by your browser when you visit a website. This identifies the browser used and can be recognized by web servers. You have full control over the use of cookies through your browser. You can delete cookies at any time in the security settings of your browser. You can object to the use of cookies through your browser settings in principle or for certain cases.

The use of cookies is in part technically necessary for the operation of our website and is therefore permitted without the user's consent. We may also use cookies to offer special functions and content and for analysis and marketing purposes. These may also include cookies from third-party providers (so-called third-party cookies). We only use such technically unnecessary cookies with your consent in accordance with Section 25 (1) TDDDG and, if applicable, Art. 6 (1) (a) GDPR. Information on the purposes, providers, technologies used, stored data and the storage duration of individual cookies can be found in the

4. consent management tool

This website uses the consent management tool Complianz to control cookies and the processing of personal data.

The consent banner enables users of our website to give their consent to certain data processing operations or to withdraw their consent. By confirming the "I accept" button or by saving individual cookie settings, you consent to the use of the associated cookies.

The legal basis under data protection law is your consent within the meaning of Art. 6 (1) (a) GDPR.

The banner also helps us to provide evidence of the declaration of consent. For this purpose, we process information about the declaration of consent and other log data relating to this declaration. Cookies are also used to collect this data. The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis arises from our legal obligation to document your consent (Art. 6 para. 1 letter c in conjunction with Art. 7 para. 1 GDPR).

You can revoke your consent for cookies here:

Customize cookie settings

5. external media and third-party services

a. Vimeo

We use the Vimeo service of Vimeo, Inc. (USA) on our website to integrate videos. For such integration, it is technically necessary to process your IP address so that the content can be sent to your browser. Your IP address is therefore transmitted to Vimeo and Vimeo may set its own cookies.

Your data is processed on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.

When using the service, a transfer of your data to the USA cannot be ruled out. Please note the information in the section "Data transfer to third countries". Further information on data protection at Vimeo can be found in Vimeo's privacy policy at https://vimeo.com/privacy

b. Typeform

We use the Typeform service (Spain, EU) on our website to provide forms for our customers. These forms help us to collect data that we need to process orders and/or inquiries from our customers. When using these forms, personal customer data is transmitted to Typeform so that we can assign it to your order. Typeform itself acts as our processor and is therefore not authorized to use this information for its own purposes.

When using the service, a transfer of your data to the USA cannot be ruled out. Please note the information in the section "Data transfer to third countries". Further information on data protection at Typeform can be found in Typeform's privacy policy at https://admin.typeform.com/to/dwk6gt/?typeform-source=www.sciencecity.hamburg

III. further data processing

1. contact by e-mail

If you send us a message via the contact email provided, we will process the data transmitted for the purpose of responding to your request. We process this data on the basis of our legitimate interest in contacting inquiring persons.

The legal basis for data processing is Art. 6 (1) (f) GDPR.

2. data of interested parties

If you contact our company as an interested party, we process your data to the extent necessary to establish or implement the contractual relationship. This regularly includes the processing of the personal master, contract and payment data provided to us as well as contact and communication data of our contact persons for commercial prospects and business partners. The legal basis for this processing is Article 6(1)(f) GDPR.

We also process interested party data for evaluation and marketing purposes. This processing takes place on the legal basis of Art. 6 para. 1 letter f GDPR and serves our interest in further developing our offer and informing you specifically about our offers.

Further data processing may take place if you have given your consent (Art. 6 (1) (a) GDPR) or if this is necessary to fulfill a legal obligation (Art. 6 (1) (c) GDPR).

3. use of the e-mail address for marketing purposes

We may use your e-mail address provided in the course of our cooperation to inform you about similar products and services offered by us.

The legal basis is Art. 6 para. 1 letter f GDPR in conjunction with. § Section 7 (3) UWG. You can object to this at any time without incurring any costs other than the transmission costs according to the basic rates. To do so, you can unsubscribe by clicking on the unsubscribe link contained in each mailing or by sending an email to info@sciencecity.hamburg

4. feedback on our offers

You have the opportunity to give us feedback on our various offers in digital or analog form. Participation in these surveys is voluntary and is pseudonymized. For technical reasons, we collect your IP address by default when you participate digitally. In the case of analog participation, we do not collect any personal data from you unless you provide us with information about yourself in the free text fields.

The processing of personal data is based on our legitimate interest in ensuring and improving the quality of our services. The legal basis is therefore Art. 6 para. 1 lit. f GDPR.

We use the service provider Microsoft Forms from Microsoft Ireland Operations Limited (Ireland, EU) to conduct the digital surveys. When using Microsoft, a transfer of data to the USA cannot be ruled out. Please also note the information in the section "Data transfer to third countries".

Status: 22.11.2024

This website uses cookies. We use cookies to personalize content and ads, to provide social media features and to analyze traffic to our website. We also share information about your use of our website with our social media, advertising and analytics partners. Our partners may combine this information with other data that you have provided to them or that they have collected as part of your use of the services.

Cookies are small text files that are used by websites to make the user experience more efficient.

By law, we can store cookies on your device if they are strictly necessary for the operation of this site. We need your permission for all other types of cookies.

This site uses different types of cookies. Some cookies are placed by third parties that appear on our pages.

You can change or withdraw your consent at any time from the cookie declaration on our website.

Find out more about who we are, how you can contact us and how we process personal data in our privacy policy.

Please provide your consent ID and the date when you contact us regarding your consent.

Your consent applies to the following domains: www.sciencecity.hamburg

Your current status: Reject

Your authorization ID: SkGiAXB+4JGt/BWFqonNWwBJ0Z/211hls0Oci4CQ0MioI9UfS21lFw==  

Consent date: Wednesday, February 7, 2024 at 10:16:20 CET

The cookie statement was last updated on 15.08.24 by Cookiebot:

You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.

Skip to content