Data Protection

1. Name and contact information of the party responsible for the processing of data (the Controller) and of the company’s Data Protection Officer

This Data Protection Information applies to data processed by:

HVD’s Data Protection Officer can be reached at the above-specified address, Attn. Mr. Andreas Pfeifer, or via e-mail at andreas.pfeifer@hvd-hamburg.de.

2. Collection and archiving of personal data; types and purposes of use

a) When visiting HVD’s website

When our website www.hvd-hamburg.de is accessed, the browser on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called logfile. The following information will be recorded without your involvement and will be stored until it is automatically deleted:

• IP address of the accessing computer/device,
• Date and time the site was accessed,
• Name and URL of the accessed file,
• Website, from which our site was accessed (referrer URL),
• Used browser and, if applicable the operating system of your computer as well as the name and address of your access provider.

We use the above-mentioned data for the following purposes:

• To ensure that your connection to our website is established without any problems,
• To guarantee that using our website is convenient for users,
• The analysis of our system’s security and stability as well as
• Other administrative purposes.

The legal basis for our data processing activities is Art. 6 Sect. 1 S. 1 lit. f GDPR General Data Protection Regulation (GDPR). Our legitimate interest is backed by the above-listed data collection purposes. We do not use the collected data to arrive at conclusions about you as an individual under any circumstances.

3. Sharing of Data

We do not transmit any of your personal data to anyone for purposes other than those outlined below.

We share your personal data with third parties only in the following cases:

• If you have given us your express consent to do so pursuant to Art. 6 Sect. 1 S. 1 lit. a GDPR,
• If the sharing of data is required to claim, exercise or defend legal entitlements pursuant to Art. 6 Sect. 1 S. 1 lit. f GDPR and if there are no grounds to presume that you have a legitimate interest in the non-sharing of your data that outweighs ours,
• In the event that the sharing of your data is mandatory pursuant to Art. 6 Sect. 1 S. 1 lit. c GDPR as a matter of law, as well as
• If this is permitted by law and if this is necessary for the management of contractual relationships with you pursuant to Art. 6 Sect. 1 S. 1 lit. b GDPR.

4. Google Maps

This website uses Google Maps to provide a location map. The operator of Google Maps is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

By using this website, you declare your consent with the tracking, processing and use of automatically collected data and information you enter by Google, its representatives or third party providers. To review Google Maps’ Terms of Use please review the Google Maps Terms of User. For detailed information, please visit the data protection center of google.de: Transparency and Options as well as the Data Privacy Polity. You will also have the option to change your settings in the data protection center, so that you can manage and protect your data. Here you will find further instructions concerning the management of your own data in conjunction with Google products.

5. Rights of Affected Individuals (Data Subjects)

You have the following rights:

• To demand information about all personal data of yours we process pursuant to Art. 15 GDPR. In particular, you may demand information about the purposes of processing your data, the categories of personal data, the categories of recipients to whom your information was or will be disclosed, the planned duration of data storage, the existence of the right to correction, deletion or restriction of the processing of your data, your right to object, your right to file a grievance, the source of your data, if we did not collect the information directly as well as the existence of an automated decision-making tool, including profiling and, if applicable, meaningful information on the details.
• Pursuant to Art. 16 GDPR, to demand the prompt correction of incorrect or the completion of incomplete data of yours we archive.
• Pursuant to Art. 17 GDPR, to demand the deletion of your personal data stored by us, if its processing is not required for the exercising of the right to freedom of speech and information, to fulfill a legal obligation, on the grounds of public interest or to claim, exercise or defend legal entitlements.
• Pursuant to Art. 18 GDPR, to demand restrictions to the processing of your personal data, if the correctness of the data has been disputed by you, if the processing of the data is illegal but you reject its deletion and we no longer require the data and you need it to exercise, claim or defend legal entitlements or if you have filed an objection to the processing of your data pursuant to Art. 21 GDPR.
• Pursuant to Art. 20 GDPR you may demand that the personal data you have shared with us be given to you in a structured, commonly used and machine-readable format or may demand the transfer of the information to a different Controller.
• Pursuant to Art. 7 Sect. 3 GDPR, you may at any time revoke your consent once given to us. The consequence of this will be that we may no longer process the data based on which you provided your consent in the future and
• Pursuant to Art. 77 GDPR, you may file a grievance with a supervisory agency. As a rule, you may direct your grievance to the supervisory agency in charge at your usual place of domicile or work or at the seat of our insurance enterprise.

6. Right to Object

If we process your personal data based on legitimate interests pursuant to Art. 6 Sect. 1 S. 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, if there are grounds for this arising from a special situation you as an individual are in or if your objection targets direct advertising. In the latter case, you have a general right to object, which will be implemented by us without you providing an explanation of a special situation.

If you would like to exercise your right to object or revoke your consent, all you need to do is send an e-mail to andreas.pfeifer@hvd-hamburg.de.

7. Data Security

During your visit to our website, we use the commonly used SSL process (Secure Socket Layer) in combination with the highest level of encryption available at any given time, which is supported by your browser. As a rule, this is a 256 Bit encryption solution. If your browser does not support a 256-Bit encryption solution, we will use 128-Bit v3 encryption technology instead. You can see whether an individual page of our website is transferred in an encrypted manner by checking whether the key or lock symbol appears in a locked condition in the bottom status panel of your browser.

Moreover, we use suitable technical and organizational security precautions to protect your data against accidental or intentional manipulations, partial or complete loss, destruction or against unauthorized third party access. Our security measures are constantly updated to the latest state-of-the-art.

8. Topicality and Changes to this Data Protection Declaration

This is the latest, most up-to-date version of our Data Protection Declaration. Its status date is May 2018. The further development of our website and our product/service portfolio we offer on it or because of changed statutory or government agency regulations, may make it necessary to change this Data Protection Declaration. The most up-to-date, effective Data Protection Declaration may be accessed on our website at https://www.hvd-hamburg.de/privacy-policy.php and may be printed out.