Data protection

This website (hereinafter “website”) is provided by Hamburger Hafen und Logistik Aktiengesellschaft (hereinafter “us” or “we”). Further information on the provider of the website can be found in our legal notice.

A. Handling of personal data

The following provides information about how personal data is handled when using this website. Where not described otherwise in the following sections, the legal basis for handling your personal data arises from the necessity of handling it for the purpose of providing the functionalities requested by you on this website (Section 6 [1][b] of the General Data Protection Regulation [GDPR]).

I. Use of the website

1. Calling up the website

When you call up our website, your browser automatically transfers certain data to our web server in order to provide you with the information you have called up. In order to make your visit to our website possible, the following data is collected, briefly stored and used:

  • IP address
  • Date and time of the request
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Operating system and its access status / HTTP status code
  • Data volume transferred
  • Website from which the request comes
  • Browser, language and version of the browser software

To safeguard our legitimate interests, we also store this data for a limited time to allow derivation of personal data in the case of unauthorised access or attempted access to local servers (Section 6 [1][f] GDPR).

2. Use of Cookies

a) What cookies are
We use cookies on this website. Cookies are small text files that are stored in your device memory via your browser. Cookies store certain information (e.g. your preferred language or site settings), which can be returned to us by your browser when you visit the website again (depending on the life of the cookies).

The cookies we currently use on our website, in particular on the website of the online annual reports and the online interim reports, are listed below.

Cookies, which are important for the smooth functioning of specific services of the website:

  • Cookie: PHPSESSID

    Function: The PHPSESSID cookie is a technically necessary cookie for the identification of the current browser session (e.g. for the search function).

    Lifespan: Duration of the session. The cookie is deleted when the browser is closed.

b) How you can limit the use of Cookies
You can configure or entirely deactivate the use of cookies in your browser settings at any time.

However, this may lead to a limitation in the functionality or user-friendliness of our website.

3. Website analysis

  • Matomo - Access analysis

    The website of the online annual reports and the online interim reports uses Matomo – an open-source software platform for the statistical analysis of website visits.

    However, no cookie is set (cookieless tracking) for this analysis tool. Furthermore, the IP address is shortened by the 3rd and 4th octets and thus anonymized.

4. Use of contact form

You can contact us directly using the contact forms provided on the website. They allow you to share the following information in particular:

  • First name and surname, title
  • Country
  • Contact details (e.g. email address, telephone number)
  • Message

We collect, process and use the information you have shared with us using the contact forms exclusively for processing your specific concern.

5. External services and content on our website

We integrate external services or content on our website. If you use such a service or if third party content is displayed to you, communication data between you and the respective provider is automatically exchanged.

It may also be the case that the provider of the respective services or content processes your data for its own, alternative purposes. We have configured services or content from providers that are known to use data for their own purposes to the best of our knowledge and belief in such a way that there is no communication for purposes other than for display of the content or services on our website or that communication only takes place if you actively decide to use the service. Since we have no influence on the data collected by third parties and how they process it, we are unable to give definitive information about the purpose and scope of the processing of your data.

Further information about the purpose and scope of the collection and processing of your data can therefore be found in the data protection notice of the respective data protection-compliant provider of the services or content integrated by us. These include:

  • YouTube (videos)
  • Google Maps (geodata)
  • Instagram (photo gallery)
  • Shareholder portal (
  • Investis for share prices and charts

6. Transfer of data for processing on our behalf

We use specialised service providers to process some of your data. We carefully select and regularly monitor our service providers. They process personal data via order processing exclusively on our behalf and strictly in accordance with our instructions on the basis of corresponding agreements.

Data is not processed outside the EU / the European Economic Area.

7. Information about your rights

You have the following rights based on the applicable data protection laws:

  • Right to information about the data we have stored about you
  • Right to rectification, deletion or limitation of the processing of your personal data
  • Right to object to processing that serves our legitimate interests, a public interest or profiling, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the enforcement, exercise or defence of legal claims
  • Right to data transferability
  • Right to complain to a supervisory authority

You can revoke the consent you gave for the collection, processing and use of your personal data at any time with future effect. More detailed information relating to this can be found in the respective sections above, which describe data processing based on your consent.

Should you wish to exercise your rights, please direct your concerns to the contact person named below.

Responsible data processing

The responsible body is

Hamburger Hafen und Logistik AG
Bei St. Annen 1
20457 Hamburg
Phone: +49 40 3088-0
Fax: +49 40 3088-3355

Please contact our data protection officer if you have any questions regarding this information. Our data protection officer can be contacted either either at the above address or by e-mail at

Amending the data protection declaration

We reserve the right to update this data protection declaration from time to time. Updates to this data protection declaration will be published on our website. Changes apply from the date of their publication on our website. We therefore recommend that you regularly visit our website and take note of any possible updates.

Dated: 12 August 2020