Privacy Policy

1. Name and Contact Details of the Controller and the Data Protection Officer:

This privacy policy applies to data processing by:

Green Ports (Hamburg) GmbH
Theodor-Yorck-Str. 6
21079 Hamburg
Germany
Tel.: +49 40. 210 917 100
Fax: +49 40. 210 917 105
info@gp-hamburg.de

The data protection officer can be contacted at the above address, at the attention of the data protection officer, or by e-mail at datenschutz@gp-hamburg.de.

2. Collection and Storage of Personal Data and Type and Purpose of their Use:

a) When visiting the website:

When visiting our website www.gp-hamburg.de information is automatically sent to our website server by the browser used on your terminal device. This information will be temporarily stored in a so-called log file. The following information will be recorded without your intervention and stored until automated deletion.

• IP address of the requesting computer,
• date and time of access,
• name and URL of the file accessed,
• website from which access has been made (Referrer-URL),
• the browser used and, if applicable, your computer’s operating system, and your access provider’s name.

We will be processing the above-mentioned data for the following purposes:

• ensuring a smooth connection of the website,
• ensuring comfortable use of our website,
• evaluation of system security and stability,
• for other administrative purposes.

The legal basis for data processing is GDPR sec. 6 para 1 lit. f. Our legitimate interest follows from the purposes listed above for data collection. In no case we will be using the collected data for the purpose of drawing conclusions about you.

b) when contacting us (via phone or email):
For questions of any kind, we invite you to contact us by email or telephone, for example to info@gp-hamburg.de. We will process the personal data you provide by email or telephone in order to answer your question. For this purpose, we need your name and a contact option (for example telephone number or email address). You may provide further information about your request voluntarily.

Data processing for the purpose of establishing contact will be carried out in accordance with GDPR sec. 6 para 1 lit. a on the basis on your voluntarily given consent.

Please bear in mind that, for technical reasons, exchanges by e-mail always carry the risk of unwanted disclosure of content to third parties. In principle, we therefore send you e-mails encrypted in transit. But for technical reasons you may not be able to participate yourself. If you nevertheless contact us by e-mail, you thereby give us your consent to transmitting your personal data by unencrypted e-mail.

You may revoke your consent at any time without giving reasons with effect for the future. All you need to do is sending an informal message by e-mail to info@gp-hamburg.de. The lawfulness of the data processing operations carried out until your revocation remains unaffected by your revocation. The data you provide when contacting us will be deleted if you withdraw your consent or if the purpose for processing the data no longer applies (for example after your request has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

c) When subscribing to the newsletter:

If you have expressly consented in accordance with GDPR sec. 6 para 1 lit. a, we will use your e-mail address to send you our newsletter on a regular basis. To receive the newsletter, it is sufficient to provide an e-mail address. You may provide further information voluntarily.

Your data will only be passed on to third parties, if at all, for a technical processing of the newsletter dispatch via a service provider who works in accordance with data protection regulations (order processing in accordance with GDPR sec. 28).

Unsubscribing from the newsletter is possible at any time, for example via a link at the end of each newsletter. Alternatively, you may also send us your request to unsubscribe at any time by using the e-mail info@gp-hamburg.de.

d) Erasure of your data:

Your personal data will be deleted in accordance with legal requirements as soon as you have revoked your consent to processing or other legal permissions cease to apply (for example if the data is no longer required to fulfil the respective purpose).

Should the data not be erased because it is required for other legally permissible purposes, we will limit its processing to those purposes. Your personal data will then be blocked and not processed for other purposes. This applies, for example, to order and payment data that must be retained for reasons of commercial or tax law or whose processing is necessary for an assertion, exercise or defence of legal claims or to protect the rights of another natural or legal person.

3. Disclosure of data:

Your personal data will not be transferred to third parties for purposes other than those mentioned. We will only pass on your personal data to third parties:

• if you expressively have consented pursuant GDPR sec. 6 para. 1 sentence 1 lit. a;
• if passing on your personal data pursuant GDPR sec. 6 para. 1 sentence 1 lit. f is necessary for assertion, exercise or defence of legal claims, and there is no reason to believe that you have an overriding interest worthy of protection in non-disclosure of your data;
• in the event of a legal obligation existing for their transfer pursuant to GDPR sec. 6 para. 1 sentence 1 lit. c; and
• if this is permitted by law, and it is necessary for processing our contractual relationships with you pursuant to GDPR sec. 6 para. 1 sentence 1 lit. b.

4. Social network presence (Social Media):

We maintain presences in social networks and process personal data of users in this context to communicate with users active there or to publish information about our company.

We would like to point out that user data may be processed outside the European Union. This might result in risks for users because, for example, it may be more difficult to enforce users’ rights.

Furthermore, user data is usually processed within social networks for market research and advertising purposes. For example, usage profiles can be created based on the usage behaviour and resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements within and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users’ computers, in which the usage behaviour and interests of the users are stored. Moreover, data may also be stored in the usage profiles irrespective of the devices used by the users (in particular if the users are members of the respective platforms and are logged in to them).

For a detailed presentation of the respective forms of processing and the options to object (opt-out), we refer to the data protection declarations and information provided by the operators of the respective networks.

Also, in case of requests for information and assertion of data subject rights, we point out that these can be asserted most effectively with the respective providers. Only the providers have access to the data of the respective users and can directly take appropriate measures and provide information. If you still need help, you may contact us.

a) Facebook:

We are jointly responsible with Facebook Ireland Ltd (4 Grand Canal Square, Dublin 2, Ireland, parent company: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA) for collection (but not further processing) of data of visitors to our Facebook page (so-called “Fanpage”), available at https://m.facebook.com/profile.php?id=918418338212737. This data includes information about the types of content users view or interact with, or the actions they take (learns more about Facebook Data Policy: https://www.facebook.com/policy and get information about the devices users use (e.g. IP addresses, operating system, browser type, language settings, cookie data; see under “Device Information” in the Facebook Data Policy Statement: https://www.facebook.com/policy

As described in the Facebook Privacy Policy, Facebook also processes information to provide analytics services, called “Page Insights”, to page operators to provide them with insights into how people interact with their pages and with content associated with them. We have concluded a special agreement with Facebook (“Information on Page Insights“), which regulates in particular which security measures Facebook must observe and in which Facebook has agreed to fulfil the data subject rights (i.e. users may, for example, send information or deletion requests directly to Facebook). The rights of users, in particular regarding information, deletion, objection and complaint to the competent supervisory authority, are not restricted by our agreements with Facebook. Further information can be found in the „Information on Page-Insights“).

b) other services and service providers:

• LinkedIn: Our LinkedIn channel is available at: https://de.linkedin.com/company/green-ports-hamburg-gmbh

Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland; Website: https://de.linkedin.com/;
Privacy Policy: https://www.linkedin.com/legal/privacy-policy.

5. Data subject rights:

You are entitled to:

• under GDPR sec. 15 to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.
• under GDPR sec. 16 immediately request the correction of incorrect or incomplete personal data stored by us;
• under GDPR sec. 17 request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
• under GDPR sec. 18 demand restriction of the processing of your personal data, insofar as the correctness of the data is disputed by you, the processing is unlawful, but you refuse its deletion and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with GDPR Art. 21.
• under GDPR sec. 20 to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller;
• under GDPR sec. 7 para 3 revoke your consent at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future; and
• under GDPR sec. 77 complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

7. Data Security:

We use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

8. Currentness and Change of this Privacy Policy

This Privacy Policy is currently valid and has the status as of January 2024.

Due to further development of our website and offers or due to changed legal or official requirements, it may become necessary to change this Privacy Policy. You may access and print out the current Privacy Policy at any time on our website.