1. Name and contact details of the controller:
Hanse Mondial GmbH
Phone: +49 (0)40 855 989 00
Managing Director: Julien Figur
Contact details of the data protection officer
When contacting the Data Protection Officer, please state the company to which your enquiry relates. Please refrain from enclosing sensitive information such as a copy of an identity card with your request.
2. Collection and storage of personal data; the nature and purpose of their use
a) When visiting the website
Whenever you access our website, the browser used on your end device automatically sends information to our website's server. That information is temporarily stored in what is called a “log file”. The following information is thereby collected without any action on your part and stored until it is automatically deleted:
- Name of the accessed file
- Date and time of access
- Volume of data transferred
- Notification whether access was successful
- Description of the type of web browser used
- Operating system used
- Site visited previously
- Your IP address
The above data will be processed by us for the following purposes:
- To ensure a smooth-running website connection,
- To ensure comfortable use of our website,
- To analyse system security and stability, and
- for further administrative purposes.
b) When using our contact form
For questions of any kind, we offer the option of contacting us via a form provided on the website. In doing so, it is necessary to provide your name, a valid e-mail address and your specific enquiry so that we know who the enquiry is from and can answer it. Further information can be provided voluntarily.
The personal data collected by us for the use of the contact form will be automatically deleted after your request has been fulfilled, unless another legitimate basis (e.g., a specific order) justifies further processing.
Data processing for the purpose of establishing contact is carried out on the basis of your specific enquiry, pursuant to Art. 6 (1) (b) of the GDPR.
c) When using our newsletter
On our website, you have the option of subscribing to a free e-mail newsletter. If you register for the newsletter, the data from the input mask will be transmitted to us.
In addition, the following data are collected on registration:
- IP address of the accessing computer
- Date and time of registration
Your consent to the data processing will be obtained in the course of the registration process and reference will be made to this Data Privacy Declaration.
If you commission us with the provision of services and provide us with your e-mail address, it may subsequently be used to send you newsletters. In such a case, only direct advertising for our own similar goods or services will be sent via the newsletter.
No data are transferred to third parties in connection with the processing of data for sending out newsletters. The data are used exclusively for sending out the newsletter.
The purpose of collecting the user’s e-mail address is to deliver the e-mail newsletter. The collection of other personal data during the registration process serves to prevent misuse of the services or the e-mail address
The data are deleted as soon as they are no longer required to achieve the purpose for which it was collected. The user's email address will thus be stored for as long as their subscription to the newsletter is active.
Any other personal data collected during the registration process are usually deleted after a period of seven days.
The subscription to the newsletter can be cancelled by the user concerned at any time. A link for this purpose can be found in each newsletter. The link also enables a user to revoke their consent to the storage of personal data collected during the registration process.
The legal basis for processing data after the user has registered for the newsletter is the user's consent (Art. 6 (1)(a) GDPR). The legal basis for sending the newsletter as a result of the sale of goods or services is Art. 6 (1)(f) in conjunction with Section 7 (3) of the German Unfair Competition Act (UWG).
d) When you place an order
In the event that you place an order with us, we will store your personal data – usually, in addition to your name, the contact details for invoicing, as well as the telephone number of, if necessary, a further contact person for processing the order. The storage period for these data will be in conformity with the applicable legal regulations. The basis for the data storage is Art 6 (1)(b), as well as Section14b of the German Turnover Tax Act (UStG).
In order to fulfil the contractual relationship, we may transfer contact details (usually only the name and mobile number) of the Customer and of the contractor commissioned by us (e.g., the contact details of the bus driver) to the other party involved, pursuant to Art. 6 (1)(b) of the GDPR; this may also include transfer to other EU countries (e.g., in the case of orders in Switzerland).
3. Data transfer
We will not transfer your personal data to third parties for any purposes other than those set out in this Data Protection Declaration. We will only transfer your personal data to third parties if:
- you have given your express consent to this, pursuant to Art. 6 (1)(a) of the GDPR,
- the data transfer is legally permissible and necessary for fulfilling the contractual relationship with you, pursuant to Art. 6 (1)(b) of the GDPR,
- in the case that there is a legal obligation to transfer the data, pursuant to Art. 6 (1)(c) of the GDPR, and
- the transfer is necessary to protect our legitimate interests pursuant to Art. 6 (1)(f) of the GDPR and there is no reason to assume that you have an overriding legitimate interest in the non-transfer of your data.
In some areas of our website, we use what are called “cookies”. Such file elements enable your computer to be identified as a technical device during your visit to this website in order to make it easier for you to use our services – also on repeat visits.
However, you usually have the option of setting your internet browser so that you are informed of the presence of cookies, allowing you to enable or disable them, or delete existing cookies.
5. Use of Google Analytics
We use Google Analytics, a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google is certified under the Privacy Shield agreement and thus offers a guarantee of compliance with European data protection law (see https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google Analytics uses “cookies” – text files that are placed on your computer and enable an analysis of the use of the website. The information generated by the cookie about your use of this website will usually be transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on this website, your IP address will be shortened beforehand by Google within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Google will use this information on our behalf, for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services to us relating to website activity and internet usage. The IP address transmitted by your browser in the context of Google Analytics will not be combined with other data by Google. You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however, we hereby draw your attention to the fact that, in that case, you may not be able to make full use of all the functions of this website. You can also prevent the data generated by the cookie and relating to your use of the website (including your IP address) from being collected to Google and prevent the processing of those data by Google through downloading and installing the browser plugin, which is available at the following link: (http://tools.google.com/dlpage/gaoptout?hl=en).
We hereby draw your attention to the fact that Google Analytics has been extended by the code "gat._anonymizeIp();" on this website, to ensure the anonymised collection of IP addresses (or what is called “IP masking”).
You can also prevent Google Analytics from collecting your data by clicking on the link below. An opt-out cookie will then be set, which prevents any further collection of your data when visiting this website. This procedure is particularly advisable when accessing our website via mobile devices.
We base the use of the aforementioned analysis tool on Art.6 (1)(f) of the GDPR: the data processing is carried out to analyse user behaviour and is therefore necessary for the protection of our legitimate interests.
6. Use of Facebook plugins
A Facebook “Share Button” from Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA (“Facebook”) is integrated into this page. You can recognise that button on this page by the Facebook logo.
The Facebook “Share Button” is set up in accordance with the data protection regulations. Only if you click on the Facebook “Share Button” on this page (and only then) will a direct connection established between your browser and the Facebook server. Facebook will thereby receive the information that you have accessed a corresponding page of the online offering from your IP address. If you are not a member of Facebook, it is still possible that Facebook may obtain and store your IP address. If you click on the Facebook “Share Button” while you are logged into your Facebook account, you can link the contents of our pages to your Facebook profile. In that case, Facebook can assign the visit to your user account. If you are a Facebook member and do not want information about your visit to our website to be passed on to Facebook, you must log out of Facebook before visiting our website.
We base this use of data on Art. 6 (1)(f) of the GDPR: the said data processing is necessary for the needs-based design of our website and is therefore necessary for the protection of our legitimate interests.
7. Rights of the data subject
As a data subject, you have the following rights:
a) The right of access: You have the right to request confirmation from us as to whether or not personal data relating to you are being processed.
b) The rectification/erasure/restriction of processing: Furthermore, you have the right to require us to do the following:
- to promptly correct inaccurate personal data relating to you (the right to rectification);
- to promptly erase personal data relating to you (the right to erasure); and
- to restrict the data processing (the right to restriction of processing).
c) The right to data portability: You have the right to receive personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format and to transfer those data to another data controller.
d) The right of withdrawal: You have the right to withdraw your consent at any time. A revocation of consent shall not affect the legitimacy of the processing carried out on the basis of the consent up to the time of revocation.
e) The right of objection: If the processing of personal data relating to you is necessary for the performance of a task carried out in the public interest (Art. 6 (1)(e) GDPR) or for the protection of our legitimate interests, you have the right to declare your objection to the said processing.
f) The right to lodge a complaint: If you consider that the processing of personal data relating to you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, without prejudice to other legal remedies.
8. Embedded YouTube videos
We embed YouTube videos on our website. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit a website with the YouTube plugin, a connection to YouTube servers is established. This tells YouTube which websites you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by logging out of your YouTube account first.
Anyone who has deactivated the storage of cookies for the Google Ad programme can expect to be free of such cookies while watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you wish to prevent this, you must block the storage of cookies in the browser.
9. Changes to this Data Protection Declaration
We reserve the right to adjust this Data Protection Declaration in the event of any changes in the legal situation, to the service or to the data processing. However, this shall only apply with regard to declarations on data processing. Insofar as user consents are required or components of the Data Protection Declaration contain provisions of the contractual relationship with the users, such changes will only be made with the consent of the users.
Users can regularly visit this Data Protection Declaration to stay informed about any changes.