Privacy policy

This website (hereinafter “website”) is provided by Hamburger Hafen und Logistik Aktiengesellschaft (hereinafter “us” or “we”). Further information on the provider of the website can be found in our legal notice.

Handling of personal data

The following provides information about how personal data is handled when using this website. Where not described otherwise in the following sections, the legal basis for handling your personal data arises from the necessity of handling it for the purpose of providing the functionalities requested by you on this website.

Use of the website

1. Calling up the website

When you call up our website, your browser automatically transfers certain data to our web server in order to provide you with the information you have called up. In order to make your visit to our website possible, the following data is collected, briefly stored and used:

• IP address
• Date and time of the request
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Operating system and its access status / HTTP status code
• Data volume transferred
• Website from which the request comes
• Browser, language and version of the browser software

To safeguard our legitimate interests, we also store this data for a limited time to allow derivation of personal data in the case of unauthorised access or attempted access to local servers (Section 6 [1][f] GDPR).

2. Use of Cookies

We use cookies on this website. Cookies are small text files that are stored in your device memory via your browser. Cookies store certain information (e.g. your preferred language or site settings), which can be returned to us by your browser when you visit the website again (depending on the life of the cookies).

The cookies we currently use on our website, in particular on the website of the online annual reports and the online interim reports, are listed below.

Cookies, which are important for the smooth functioning of specific services of the website:

• Name: MATOMO_SESSID
  Reason: Temporary nonce cookie to prevent CSRF security issues (https://matomo.org/faq/general/faq_146/).
  Lifespan: Duration of the session: the cookie is deleted when the browser is closed.

We do not use these necessary cookies for analysis, tracking or advertising purposes. Some of these cookies only contain information about certain settings and cannot be related to a person. They may also be necessary to enable user guidance, security and implementation of the site. We use these cookies on the basis of Section 6 [1][f] GDPR. You can set your browser so that it informs you about the placement of cookies. So the use of cookies becomes transparent for you. You can also delete cookies at any time using the appropriate browser setting and prevent new cookies from being set. Please note that our website may then not be displayed and some functions are technically no longer available.

3. Website analysis

Matomo - Access analysis

We use the "Matomo" web analysis tool to tailor our website to your needs. Matomo creates usage profiles based on fingerprints (including the hash value of the operating system, browser, browser plug-ins, anonymized IP address and browser language). No cookies are set. In this way we are able to recognize returning visitors and count them as such. Data processing takes place on the basis of your consent in accordance with Article 6 (1) (a) GDPR or Section 15 (3) sentence 1 TMG, provided that you have given your consent via our banner.
You can withdraw your consent at any time. Please follow this link and make the appropriate settings via our banner.

4. Use of contact form

You have the option of contacting us using our contact form. To use our contact form, we first need the data marked as mandatory fields from you. We use this data on the basis of Article 6 (1) (f) GDPR to answer your request. In addition, you can decide for yourself whether you would like to provide us with further information. This information is provided voluntarily and is not absolutely necessary to contact you. We process your voluntary information on the basis of your consent in accordance with Article 6 (1) (a) GDPR.

Your data will only be processed to answer your request. We delete your data if it is no longer required and if there are no statutory retention requirements.

Insofar as your data transmitted via the contact form is processed on the basis of Article 6 (1) (f) GDPR, you can object to the processing at any time. You can also revoke your consent to the processing of the voluntary information at any time. To do this, please contact the email address given in the legal notice.

5. External services and content on our website

We integrate external services or content on our website. If you use such a service or if third party content is displayed to you, communication data between you and the respective provider is automatically exchanged.

It may also be the case that the provider of the respective services or content processes your data for its own, alternative purposes. We have configured services or content from providers that are known to use data for their own purposes to the best of our knowledge and belief in such a way that there is no communication for purposes other than for display of the content or services on our website or that communication only takes place if you actively decide to use the service. Since we have no influence on the data collected by third parties and how they process it, we are unable to give definitive information about the purpose and scope of the processing of your data.

Further information about the purpose and scope of the collection and processing of your data can therefore be found in the data protection notice of the respective data protection-compliant provider of the services or content integrated by us.

We embed videos on our websites that are not stored on our servers. Calling up our pages with embedded videos results in the content of the third-party provider providing the videos being reloaded. In this way, the third-party provider receives the information that you have accessed our site and the usage data that is technically required in this context. We have no influence on further data processing by the third party provider. The embedding is carried out on the basis of Article 6 (1) (f) GDPR and in the interest of making our website as appealing and informative as possible.

6. Transfer of data for processing on our behalf

We use specialised service providers to process some of your data. We carefully select and regularly monitor our service providers. They process personal data via order processing exclusively on our behalf and strictly in accordance with our instructions on the basis of corresponding agreements.

Data is not processed outside the EU / the European Economic Area.

7. Information about your rights

You have the following rights based on the applicable data protection laws:

• Right to information about the data we have stored about you
• Right to rectification, deletion or limitation of the processing of your personal data
• Right to object to processing that serves our legitimate interests, a public interest or profiling, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the enforcement, exercise or defence of legal claims
• Right to data transferability
• Right to complain to a supervisory authority; The right of appeal can in particular be asserted with a supervisory authority in the member state of your habitual residence, your place of work or the place of the alleged violation;

You can revoke the consent you gave for the collection, processing and use of your personal data at any time with future effect. More detailed information relating to this can be found in the respective sections above, which describe data processing based on your consent.

Should you wish to exercise your rights, please direct your concerns to the contact person named below.

Contact

For matters relating to data protection please use our contact form or contact our Group data protection officer at the following address:

Hamburger Hafen und Logistik Aktiengesellschaft
Group data protection officer
Bei St. Annen 1
20457 Hamburg

Amending the data protection declaration

We reserve the right to update this data protection declaration from time to time. Updates to this data protection declaration will be published on our website. Changes apply from the date of their publication on our website. We therefore recommend that you regularly visit our website and take note of any possible updates.

Dated: 1 January 2022