Privacy policy

In the following, we inform you about the collection of personal data when using this website. Personal data are all data that can be related to you personally, e.g. your name, your address, your e-mail address, etc. 

  1. Information on the controller within the meaning of Art. 4 No. 7 GDPR

Controller within the meaning of the General Data Protection Regulation (GDPR) and service provider within the meaning of the Telemedia Act (TMG) is: 

Science City Hamburg Bahrenfeld GmbH
c/o HafenCity Hamburg GmbH
Osakaallee 11
20457 Hamburg 

  1. Contact details of the company data protection officer

You can reach our data protection officer using the following contact details:
Herting Oberbeck Datenschutz GmbH
Hallerstr. 76, 20146 Hamburg, Germany 

  1. Collection of personal data when visiting our website

Type and scope of the processing of your personal data differ depending on whether you visit our website only to retrieve information (see section 3.1) or to contact us (see section 5). For the use of so-called cookies, see section 3.2 of this policy. 

3.1 In the case of mere informational use of the website, i.e. if you do not contact us via our contact form, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis is Art. 6 para. 1 lit. f GDPR). 

3.1.1 IP address; host name of the accessing computer; date and time of the request; content of the request (specific page); access status/HTTP status code; amount of data transferred in each case; website from which the request comes (referrer URL); browser type and version; operating system and its interface; language and version of the browser software. 

3.1.2 This data is stored in the log files of our system. 

3.2 In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive in relation to the browser you are using and which provide the party setting the cookie (in this case, us) with certain information. Cookies cannot execute programmes or transfer viruses to your computer. They serve to make the internet offer as a whole more user-friendly and effective. 

3.2.1 This website uses the following types of cookies, the scope and functionality of which are explained below: transient cookies (see section 3.2.2) and persistent cookies (see section 3.2.3). 

3.2.2 Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This enables your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser. 

3.2.3 Persistent cookies are automatically deleted after a predefined period of time, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time. 

3.2.4 You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may then not be able to use all the functions of this website. 

  1. Data deletion and storage period

4.1 We delete (Art. 17 GDPR) the personal data as soon as the purpose of storage ceases to apply or restrict its processing (Art. 18 GDPR). In addition, storage may take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which we are subject. Data will also be deleted or processing restricted if a storage period prescribed by the aforementioned legal norms expires, unless there is a need to continue storing the data for the conclusion or fulfilment of a contract. 

4.2 This regulation applies to all data collection and data processing operations listed in this policy, unless otherwise specified in the individual case. 

If the data is stored in log files (see No. 3.1.2 of this policy), the purpose of storage ceases to apply after seven days at the latest. However, storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated so that an assignment of the calling client is no longer possible. 

  1. Contact forms, e-mail contact, Typeform

5.1 When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name, your address and your telephone number, if applicable) will be processed by us in order to answer your questions. We delete the data accruing in this context after the storage is no longer necessary for these purposes, or we restrict the processing if there are legal retention obligations. 

5.2 The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f GDPR (legitimate interests). 

5.3 The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified. 

5.4 We use the survey service Typeform (TYPEFORM S.L., Carrer Bac de Roda, 163, 08018 Barcelona, 1-2, Spain) to organise participation in events and to submit questions in advance. 

5.5 The legal basis for the use of Typeform is your consent pursuant to Art. 6 para. 1 lit. a) GDPR for the collection of input data and your consent pursuant to Art. 6 para. 1 lit. f). Typeform collects access data (IP address) and input data. We collect the data that you enter in the form and technical data that we need for the technical functioning and maintenance of the service. 

5.6 The personal data is processed by Typeform. You can find out more about Typeform’s data protection policy here: The deposited data will be stored on the servers of TYPEFORM S.L. until the purpose for the processing no longer applies or the consent to the processing has been revoked. You can request information about the personal data concerned. You also have the right to rectification, erasure, restriction of processing, objection and data portability. Your consent to processing can be revoked at any time with effect for the future. 

  1. Recipients

Except as expressly stated in this Privacy Policy, we do not disclose any personal data collected through this website to third parties or other recipients. This does not include external service providers who provide IT services to us in relation to the creation, changes and maintenance of this website and who may have access to personal data in this context. 

  1. Integration of Maptionnaire

7.1 No personal data will be processed, i.e. in particular collected, determined or stored, as part of the online participation for Science City Hamburg Bahrenfeld. The surveys are anonymised and are carried out with the help of software from the service provider maptionnaire. Maptionnaire only acts as a data processor with regard to the data collected by means of the questionnaires. 

7.2 If you agree to cookies in the application, then data, i.e. in particular your IP address, may be processed by the service provider maptionnaire. Find out more about this in the privacy policy of the company maptionnaire. 

7.3 However, consent to the cookies with “OK” is not necessary to participate in the online dialogue. 

  1. Integration of Vimeo

8.1 We use plugins of the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. 

8.2 When you visit one of our pages equipped with Vimeo videos, a connection to the Vimeo servers is established. In the process, the Vimeo server is informed which of our pages you have visited. Vimeo also obtains your IP address. However, we have set up Vimeo in such a way that Vimeo will not track your user activities and will not set any cookies. 

8.3 Vimeo is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 (1) f GDPR. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time. 

8.4 We occasionally offer you the opportunity to send us messages via a chat window. The chat functions are provided by Vimeo. If you use this chat window, we also save your IP address in addition to your chat messages. It is not necessary to give your name for the chat. 

8.5 If you have a Vimeo user account and do not want Vimeo to collect data about you via this website and link it to your membership data stored with Vimeo, you must log out of Vimeo before visiting this website. 

8.6 We have no influence on the data processing by Vimeo. The data protection declaration for Vimeo with more detailed information on the collection and use of your data by Vimeo can be found at 

  1. Your rights

9.1 You have the right to access, rectification or erasure, restriction of processing, objection to processing as well as the right to data portability if the legal requirements according to Art. 15 to 22 GDPR are met. 

9.2 Furthermore, you have the right to complain to the supervisory authority if you believe that the processing of your data is not lawful. The supervisory authority responsible for us is: 

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str 22, 7. OG,
20459 Hamburg