Privacy policy

This Privacy Statement is effective as of May 2018.

This Privacy Policy clarifies the nature, scope and purpose of the processing of personal data (hereinafter referred to as "data") within our online services and the related websites, features and content, as well as external online presences, e.g. our social media profiles (collectively referred to as "online offer"). With regard to the terminology used, e.g. "Processing" or "Responsible", we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

Contacting us

Hanseaticsoft GmbH
Poßmoorweg 2
22301 Hamburg

E-Mail: info@hanseaticsoft.com
Phone: +49 (0)40 349 700 10 210

CEO: Alexander Buchmann
Imprint: https://hanseaticsoft.com/imprint

Data Protection Official: Kira Stock
E-Mail: gdpr@hanseaticsoft.com

Since 2017, Hanseaticsoft is part of the Lloyd’s Register Group.
In particular, we work with Lloyd's Register Group Services Limited and OneOcean Group Limited.

General categories of personal data that we may process:

• Inventory data (e.g. name, address).
• Contact details (e.g. telephone number, email address).
• Content data (e.g. text input, photographs, videos).
• Usage data (e.g. page views, website navigation paths, length of visit).
• Meta/communication data (e.g. operating system, IP address).

The data may be processed for the purposes of

• Operating our website and providing our services
• Communicating with you
• Ensuring the security of our website and services
• Analyzing the use of the website and services/marketing

Terminology

“Personal data” means any information relating to an identified or identifiable natural person (‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

“Processing” is any operation or set of operations that is performed on personal data or on sets of personal data, whether or not by automated means. The term is extensive and contains any possible dealing with personal data.

“Controller” is the natural or legal person, public authority, agency or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data.

Legal basis

In accordance with Art. 13 GDPR we inform you of the legal basis of our data processing. Unless the legal basis is stated in the privacy policy, the following applies: The legal basis for obtaining consent is Article 6 (1) lit. a and Art. 7 GDPR, the legal basis for the processing for the performance of our services and the execution of contractual measures as well as the response to inquiries is Art. 6 (1) lit. b GDPR, the legal basis for processing in order to fulfill our legal obligations is Art. 6 (1) lit. c GDPR, and the legal basis for processing in order to safeguard our legitimate interests is Article 6 (1) lit. f GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR as legal basis.

Safety measures

We ask you to inform yourself regularly about the content of our privacy policy. We will adjust the privacy policy as soon as the changes we make to the data processing require it. We will notify you as soon as the changes require your participation (eg. consent) or other individual notification.

Collaboration with processors and third parties

If, in the context of our processing, we disclose data to other persons and companies (contract processors or third parties), transmit them to them or otherwise grant access to the data, this will only be done on the basis of a legal permission (eg. if a transmission of the data to third parties like payment service providers is required, pursuant to Art. 6 (1) (b) GDPR to fulfill the contract), you have consented to a legal obligation or based on our legitimate interests (e.g. the use of agents, webhosters, etc.).

If we commission third parties to process data on the basis of a so-called "contract processing contract", this is done on the basis of Art. 28 GDPR.

International transfers of your personal data

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or in the context of the use of third party services or disclosure or transmission of data to third parties, this will only be done if it is to fulfil our contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only in the presence of the special conditions of Chapter 5. GDPR. That is the processing is e.g. on the basis of specific protections, such as an adequacy decision taken by the European Commission (e.g. for the UK through Commission Implementing Decision of 28.6.2021 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate protection of personal data by the United Kingdom (28 June 2021) or for the US through the EU-US Data Privacy Framework) or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").

Your rights

You have the right to ask for confirmation as to whether the data in question is being processed and for information about this data as well as for further information and a copy of the data in accordance with Art. 15 GDPR.

In accordance with Art. 16 GDPR you have the right to demand the completion of the data concerning you or the correction of the incorrect data concerning you.

In accordance with Art. 17 GDPR you have the right to demand the immediate deletion of the relevant data or, alternatively, to require a restriction of the processing of data in accordance with Art. 18 GDPR.

You have the right to demand that you receive the data concerning you, which you have provided to us, in accordance with Art. 20 GDPR and demand that it be transmitted to other persons responsible.

You have the right to demand the data relating to you, which you have provided to us, to be obtained in accordance with Art. 20 GDPR and request their transmission to other persons responsible.

In accordance with Art. 77 GDPR, you also have the right to lodge a complaint with the competent supervisory authority.

Right of withdrawal

You have the right to withdraw granted consent with effect for the future in accordance with Art. 7 (3) GDPR.

Right of objection

You can object to the future processing of your data in accordance with Art. 21 GDPR at any time. The objection may in particular be made against processing for direct marketing purposes.

Cookies

"Cookies" are small files that are stored on users' computers. Different information can be stored within cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after his visit to an online service. Temporary cookies, or "session cookies" or "transient cookies", are cookies that are deleted after a user leaves an online service and closes his browser. In such a cookie, e.g. the contents of a shopping cart in an online shop or a login status can be stored.

The term "permanent" or "persistent" refers to cookies that remain stored even after the browser has been closed. Thus, e.g. the login status will be saved even if users visit after several days. Likewise, in such a cookie the interests of the users can be stored, which are used for range measurement or marketing purposes.

A "third-party cookie" refers to cookies that are offered by providers other than the controller of the online service (otherwise they’re called "first-party cookies").

We can use temporary and permanent cookies and clarify this in the context of our privacy policy.

If users do not want cookies stored on their computer, we ask them to disable the option in their browser's system settings. Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online service.

A general objection to the use of cookies used for online marketing purposes is explained in a large number of services. Especially in the case of tracking the american website http://www.aboutads.info/choices/ or the european site http://www.youronlinechoices.com/ can be visited. Furthermore, the storage of cookies can be achieved by switching them off in the browser’s settings. Please note that in this case it’s possible that not all features of this online service can be used.

Deleting Personal Data

The data processed by us are deleted or limited in their processing in accordance with Articles 17 and 18 GDPR. Unless explicitly stated in this privacy policy, the data stored by us is deleted as soon as it is no longer required for their purpose and the deletion does not conflict with any legal obligation to retain data. Unless the data is deleted because it is required for other and legitimate purposes, its processing will be restricted. This means the data will be blocked and will not be processed for other purposes. This applies, for example to data that must be kept for commercial or tax reasons.

In accordance with legal requirements in Germany, the data will be stored for 10 years pursuant to §§ 147 (1) AO, 257 (1) Nr 1 and 4 (4) HGB (books, records, management reports, accounting documents, trading books for taxation of relevant documents, etc.) and 6 years pursuant to § 257 (1) Nr. 2 and 3 (4) HGB (commercial letters).

Hosting

The hosting services we use serve the providing of: infrastructure and platform services, computing capacity, maintaining back-ups of our databases, ensuring the security of our website and maintenance services for the purpose of operating our website and providing our services.

Here we or our hosting providers process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online service on the basis of our legitimate interests in an efficient and secure provision of this online service pursuant to Art. 6 (1) lit. f GDPR and Art. 28 GDPR (job processing contract closing).

Collection of access data and log files

Based on our legitimate interests within the meaning of Art. 6 (1) lit. f GDPR we or our hosting provider collect data on every access to the server on which this service is located (so-called server log files).

Access data includes:

• Name of the visited website
• File
• Date and time of access
• Transferred amount of data
• Report of successful access
• Browser type and version
• Host name of the accessing computer
• Operating system of the user
• Referrer URL (the previously visited page)
• IP address
• requesting providers

Logfile information is stored for security purposes (for example, to investigate abusive or fraudulent activities) for a maximum of 7 days and then deleted. Data required for evidential purposes shall be exempted from the deletion until final clarification of the incident.

A merge of this data with other data sources will not be made.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection in your browser’s address line when it changes from “http://” to “https://” and the lock icon is displayed in your browser’s address bar.

If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.

Contact Form

Should you send us questions via the contact form, email, telephone or social media, we will collect the data you provide, to answer your question and any follow-up questions as per Art. 6 (1) lit. a GDPR. The data may be stored in a Customer-Relation-Management System (“CRM System”) or similar systems.

We delete the requests, if they are no longer required. We check the necessity every two years. Furthermore, the legal archiving obligations apply.

Newsletter

We are providing you with the following information to explain the content of our newsletter as well as the registration, dispatch and statistical evaluation processes and your right of objection. By subscribing to our newsletter you agree with the described processes. Content of our newsletter: We send newsletter, emails and other electronic notifications with advertising material (referred to hereinafter as the “newsletter”) with the consent of the recipients or legal permission. If specific content of the newsletter is altered during the registration process, this content is essential for the consent of the users. Our newsletters contain information on our services and us.

Double-opt-in and recording process

Registration for our newsletter is completed as part of a so called double-opt-in process. This means you will receive an email after registration in which you will be asked to confirm your registration. This confirmation is required so that nobody can register with email addresses that do not belong to them. The newsletter registrations are recorded in order to be able to verify the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation and the IP address. The changes to your data that is held by your email service provider are also recorded.

Credentials

You only need to provide your email address to register for the newsletter. If you also provide us with your and your company’s names this enables us to personalise our newsletter.

The dispatch of our newsletter and the related performance measurement is based on the consent of the recipient in accordance to Art. 6 (1) lit. f GDPR, § 7 (2) Nr. 3 UWG and on the basis of the legal permission according to § 7 (3) UWG.

The protocolling of the registration process is based on our legitimate interests in accordance with Art. 6 (1) lit. f GDPR. Our interest is a user-friendly and secure newsletter system, which serves both our business interests and the expectations of the users and also allows us to prove consent.

Termination/Revocation/Withdrawal

You may opt-out of receiving our newsletter at any time, i.e. withdraw your consent. You can find a link to unsubscribe to the newsletter at the end of each newsletter. We may store the withdrawn email addresses based on our legitimate interests for up to three years before we delete them to prove prior consent. The processing of this data is limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that at the same time the former existence of a consent is confirmed.

Email service provider

The newsletter is dispatched by “MailChimp”, a newsletter distribution platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the MailChimp privacy policy here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the US-EU data privacy agreement Privacy-Shield and agrees to comply with the EU data privacy guidelines (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The use of Mailchimp constitutes a justified interest pursuant to Art. 6 (1) (f) GDPR and a job processing contract pursuant to Art. 28 (3) GDPR.

MailChimp can by its own admission also use this data in a pseudonymous form to enhance or improve its own services, e.g. to technically enhance the dispatch procedure and display of the newsletter or for commercial purposes to be able to determine which countries the recipients are from. However, MailChimp will not use the data of our newsletter recipients to contact them itself or forward it to third parties.

Performance measurement

Our emails contain a “web beacon”, i.e. a pixel-size file that is retrieved from our or the MailChimp server when opening emails. This initially involves technical information being retrieved such as information on the browser and your system as well as your IP address and the time of retrieval.

This information is used to make technical improvements to services based on technical data or the target groups and their reading behaviour based on their retrieval locations (that can be determined with the IP address) or access times. The statistical surveys also involve determining whether the newsletters are opened, when they are opened and which links are clicked on. This information may be assigned to individual newsletter recipients for technical reasons but it is neither our intention nor that of MailChimp to monitor individual users. The evaluations instead help us to recognise the reading habits of our users and to adapt our content to them or to send different content based on our users’ interests.

Application procedures

In the course of handling application procedures in our company, we work together with the application platform of the service provider Workwise GmbH, Imprint (https://www.workwise.io/impressum). The recruitment of personnel on behalf of job seekers or employers is not commissioned processing, but the use of an external specialist service of an independently responsible person (LDA-Bayern, FAQ list dated 20.07.2018). Further information on the data protection of the service provider Workwise GmbH can be found in the data protection declaration (https://www.workwise.io/datenschutz).

Cookies

Plugins and Tool

Based on our legitimate interests (ie. interest in the analysis, optimization and economic operation of our online services in accordance to Art. 6 (1) lit. GDPR), we make use of contents and services offered by third-party providers in order to provide their content and services, such as including videos or fonts (collectively referred to as "content").

This always presupposes that the third-party providers of this content perceive the IP address of the users, since they could not send the content to their browser without the IP address. The IP address is therefore required for the presentation of this content. We endeavor to use only content whose respective providers use the IP address solely for the delivery of the content. Third parties may also use so-called pixel tags (invisible graphics, also referred to as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as traffic of visitors on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may include, but is not limited to, technical information about the browser and operating system, referring web pages, visit time, and other information regarding the use of our online offer.

Online presence in social media

We maintain online presences within social networks and platforms in order to communicate with customers, prospects and users to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and the data processing guidelines apply to their respective operators.

Unless otherwise stated in our Privacy Policy, we process users' data if they communicate with us within social networks and platforms, e.g. write posts on our online presence or send us messages.