Privacy notice

1. Introduction and general information

Protecting your personal data is our highest priority. This privacy notice explains the nature, scope and purpose of the processing of personal data (hereinafter “data”) in connection with our website. Your data is treated confidentially and processed exclusively in accordance with statutory data protection law and this notice.

Personal data is any information by which you can be personally identified. It is collected on the one hand when you actively provide it, for example via the contact form. Other data is collected automatically by the host’s IT systems when you visit the website. This is mainly technical data such as browser, operating system or time of access.

This website sets no cookies, uses no analytics or tracking tools and embeds no third-party services. Fonts and the video on the home page are served from our own server.

2. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is: HTA Hamburger Technik-Assistenz, represented by Mr Manfred Manicke, Ifflandstraße 4, 22087 Hamburg, Germany. Website: www.hta-hamburg.de, e-mail: info@hta-hamburg.de, phone: +49 40 25330805.

3. Definitions

We use the terms of the GDPR. The full legal definitions can be found in Art. 4 GDPR. In brief:

Personal data means any information relating to an identified or identifiable natural person, such as a name, an identification number, location data or an online identifier. Processing means any operation performed on such data, from collection and storage to retrieval, transmission and erasure. Controller means the body that decides on the purposes and means of processing. Processor means a body that processes data on behalf of the controller. Consent means any freely given, specific, informed and unambiguous indication of a person’s wishes by which they agree to the processing of their data.

4. Legal bases for processing

We process your data on the basis of the GDPR and other applicable provisions. Different legal bases apply depending on the purpose: where you have given consent, processing is based on Art. 6(1)(a) GDPR; you may withdraw consent at any time with effect for the future. Where processing is necessary for the performance of a contract or for pre-contractual measures, it is based on Art. 6(1)(b) GDPR. Where we must comply with a legal obligation, processing is based on Art. 6(1)(c) GDPR. Where processing serves our legitimate interests and your interests or fundamental rights do not override them, it is based on Art. 6(1)(f) GDPR.

As this website sets no cookies and does not access information on your device beyond what is technically necessary, Section 25 of the German TDDDG does not apply here. The legal bases applicable in each case are stated in the following sections.

5. Hosting

This website is hosted on the servers of an external provider to ensure reliable and secure operation. The hosting provider is IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Deutschland. The servers are located in Germany. Processing by the host is based on Art. 6(1)(f) GDPR, our legitimate interest in providing a stable and secure website.

A data processing agreement pursuant to Art. 28 GDPR is in place with the host. It obliges the host to process visitors’ data solely on our instructions and in compliance with the GDPR and to protect it through technical and organisational measures. Host privacy notice: https://www.ionos.de/terms-gtc/datenschutzerklaerung/

6. Server log files

Each time the website is accessed, the server automatically records information transmitted by your browser and stores it in log files. This usually includes: the IP address of the requesting computer, date and time of access, name and URL of the file retrieved, the website from which access occurred (referrer), browser and operating system used, the name of your access provider and the HTTP status code.

This data is stored for security, for smooth operation of the website, to assess system security and stability and for administrative purposes. The legal basis is Art. 6(1)(f) GDPR. The data is not used to draw conclusions about you personally and is deleted or anonymised as soon as it is no longer needed for these purposes.

7. No cookies, no analytics, no third-party services

This website sets no cookies and uses no analytics or tracking services. A consent banner is therefore not required. Fonts are served locally from our own server; no connection is made to Google Fonts or other providers. The video on the home page is also hosted on our server.

On the contact page we link to Google Maps for directions. No map is embedded; you only leave our website when you click the link. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for any processing that takes place there (privacy policy: https://policies.google.com/privacy).

This website does not transfer your data to third countries outside the European Union.

8. Contact form

You can send us enquiries via the contact form. Your name, e-mail address and message are required; company and phone number are optional. The details are transmitted to us by e-mail and used solely to handle your enquiry and any follow-up questions.

Processing is based on your consent under Art. 6(1)(a) GDPR, which you give when submitting the form, and, where your enquiry relates to a contract, on Art. 6(1)(b) GDPR. The form contains an invisible protection field against automated submissions; no data is transmitted to third parties in the process. The data is deleted once your enquiry has been dealt with and no statutory retention obligations apply.

9. Enquiries by e-mail or phone

If you contact us by e-mail or phone, we process the data transmitted (for example name, e-mail address, phone number and the content of the enquiry) solely to handle your enquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR on the basis of our legitimate interest in responding.

10. Processors and disclosure

Where we use service providers for processing (currently the host), this is done under a data processing agreement pursuant to Art. 28 GDPR. The providers are obliged to treat the data confidentially and to process it only within the scope of the respective service.

Personal data is disclosed to other third parties only where necessary for the performance of a contract, where a legal obligation exists, where there is a legitimate interest under Art. 6(1)(f) GDPR or where you have consented.

11. Retention period

Unless a more specific period is stated in this notice, your data remains with us until the purpose of processing ceases to apply. If you make a legitimate request for erasure or withdraw consent, the data is deleted unless other legally permissible grounds for storage exist, such as retention periods under tax or commercial law. In such cases, deletion takes place once those grounds cease to apply.

12. Security measures and data minimisation

We take technical and organisational measures to protect your data against accidental or unlawful destruction, loss, alteration and unauthorised disclosure or access. We collect only the data required for the respective purpose. The measures are continuously adapted to the state of the art.

13. SSL/TLS encryption

This website uses state-of-the-art encryption over HTTPS (TLS) for secure transmission. This protects the data exchanged between your browser and the server from being read by third parties. You can recognise an encrypted connection by the padlock symbol in your browser’s address bar and by the address beginning with “https://”.

14. Your rights

You have the right to obtain, free of charge, information about the data we hold about you, its origin, its recipients and the purpose of processing (Art. 15 GDPR). You have the right to rectification of inaccurate data (Art. 16), to erasure (Art. 17) and to restriction of processing (Art. 18), for example while the accuracy of data is being verified or if you request restriction instead of erasure.

Data that we process automatically on the basis of your consent or for the performance of a contract can be provided to you in a structured, commonly used and machine-readable format or, where technically feasible, transmitted to another controller (Art. 20 GDPR).

You may withdraw any consent you have given at any time with effect for the future; the lawfulness of processing carried out until then remains unaffected.

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement. The authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Strasse 22, 20459 Hamburg, Germany. Other administrative or judicial remedies remain unaffected.

To exercise your rights, a message to info@hta-hamburg.de is sufficient.

15. Right to object (Art. 21 GDPR)

Where your data is processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where your data is processed for direct marketing, you may object to such processing at any time. After your objection we will no longer use your data for this purpose. We currently do not carry out direct marketing and do not send a newsletter.

16. Objection to unsolicited advertising

We hereby object to the use of the contact details published in the imprint for sending unsolicited advertising and information material. We expressly reserve the right to take legal action in the event of unsolicited advertising, for example spam e-mails.

17. Validity

This privacy notice is currently valid. Changes to the website or to legal requirements may make an update necessary. The current version can always be found on this page.