PRIVACY POLICY

DATA CONTROLLER:

OBERDECK Betreibergesellschaft mbH
Große Elbstraße 145 c
22767 Hamburg

Represented by its managing director
Frank Kirschke

Contact
Tel.: +49 (0) 40 58 75 62
Fax: +49 (0) 40 58 76 28
​Email: mail@oberdeck-hamburg.de

Commercial Register Hamburg-Altona
HRB 148976

VAT ID DE 314 575 329
Tel.: +49 (0) 40 58 76 62
​Email: mail@oberdeck-hamburg.de

SSL encryption

We use state-of-the-art encryption methods (e.g. SSL) via HTTPS to protect the security of your data during transmission.

COLLECTION OF GENERAL INFORMATION

When you access our website, information of a general nature is gathered automatically. This information (server log files) includes, among others things, the type of browser used, the operating system used, the domain name of your internet service provider, and other similar data. It is exclusively information that cannot be connected to you as an individual. This information is produced automatically during Internet use and is required for technical reasons so that the requested web content can be correctly displayed. Anonymous information of this kind can be statistically analysed in order to improve our website and its underlying technology.

The legal basis for this processing is our legitimate interest per Art. 6 para. 1 clause 1 lit. f of the EU General Data Protection Regulation (GDPR). Our legitimate interest consists in the desire to deliver the contents of our website correctly, to optimise the content of our website, and to provide law enforcement agencies with the information they need to investigate and prosecute cyber-attacks. As soon as there is no longer a legitimate interest and there is no statutory retention requirement, this data is routinely deleted.

DELETION AND BLOCKING OF DATA

We adhere to the principles of data avoidance and data economy. Therefore, we store your personal data only as long as is necessary to achieve the purposes mentioned here or as required according to the various storage periods determined by the competent legal authorities. Once the purpose in question no longer exists or the storage period expires, the corresponding data will be routinely blocked or deleted corresponding to statutory requirements.

CONTACT FORM

If you contact us with any questions by email or through the contact form, we will ask your voluntary consent before returning your message per Art. 6 para. 1 clause 1 lit. a GDPR.

A valid email address is required for this purpose. This is used to sort the request and then reply to it. The provision of any further data is optional. The information you give us will be stored for the purpose of processing the request, as well as for potential follow-up questions. After your request has been processed, your personal data will automatically be deleted.

You have the right to revoke your consent and the storage of your data at any time, with future effect. Contact the person named in this privacy statement (in writing, by email, or by phone). The data from the previous communication will then be deleted; further communication will no longer be possible without renewed consent.

Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (Google Ireland Limited, Gorden House, Barrow Street, Dublin 4, Ireland). Google Analytics uses so-called “cookies”, text files stored on your computer which enable your website use to be analysed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the US and stored there. However, because IP anonymization is activated on this website, Google will store your IP address in shortened form if you are accessing this site from within the European Union or the European Economic Area. Only in exceptional cases will the entire IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics is not conflated with other Google data.
You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please be advised that if you opt out of using cookies, you may not be able to use all the features of this website. You can additionally prevent the collection of data produced by the cookie and associated with your use of the website (including your IP address), its transmission to, and its processing by Google, by downloading and installing the browser plugin available at the following link:

Link: Browser add-on to disable Google Analytics

In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking this link. This will save an opt-out cookie onto your device. This will prevent the collection of data by Google Analytics for this website and for this browser for as long as the cookie remains installed in your browser.

WE ACKNOWLEDGE THAT GOOGLE ANALYTICS ON THIS WEBSITE HAS THE CODE “GAT.”anonymizeIp” has been used to achieve the anonymous collection of IP addresses (so called IP-masking).

“Due to Google’s certification under the EU-US Privacy Shield, the European Commission has identified an appropriate level of privacy for Google.”

“We use Google Analytics on the basis of Art. 6 para. 1 clause 1 lit. f GDPR. We want to ensure a needs-based design and the continuous optimisation of our website. We also use the tracking measures to make statistical records about the use of our website and to evaluate it for the purpose of optimising our online presence for you. These interests are to be regarded as legitimate under the aforementioned provision.”

Use of script libraries (Google Web Fonts)

In order to present our contents correctly and in a graphically appealing way across all browsers, we use script libraries and font libraries such as Google Web Fonts (https://www.google.com/webfonts/) on this website. Google Web Fonts are loaded into your browser’s cache to avoid multiple loading. If your browser does not support Google Web Fonts or does not allow access, content will be displayed in a default font.

Calling script libraries or font libraries automatically triggers a connection to the library operator. In theory, it is possible, though it currently still remains unclear whether and, if so, for what purposes, the operators of the corresponding libraries might collect data.

The privacy policy of the library operator Google can be found here:
https://www.google.com/policies/privacy/

Use of Google Maps

This website uses Google Maps API to display geographical information. When Google Maps is used, Google also collects, processes and utilises data about the visitor’s use of map functions. For more information about how Google processes your information, please see Google Privacy Notices. You can also access the Data Protection Centre there to change the protection settings for your personal data.

Detailed instructions for managing your own data in connection with Google products  can be found here.

EMBEDDED YOUTUBE VIDEOS

We embed YouTube videos on some of our websites. The operator of the respective plugins is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. As soon as you visit a page with a YouTube plugin, a connection to YouTube servers will be established. This will inform YouTube which pages you are visiting. YouTube can recognise your surfing habits if and when you are logged into your YouTube account, You can prevent this by logging out of your YouTube account beforehand.

As soon as a YouTube video starts, the provider uses cookies that collect information about user behaviour.

If you have deactivated the storage of cookies for the Google Ad program, you do not have to reckon with such cookies when viewing YouTube videos. YouTube also stores information on usage which is not related to individuals in other cookies. You must configure your browser to block cookies if you wish to prevent this.

Further information on data protection at “YouTube” can be found in the provider’s privacy policy at: https://www.google.com/intl/en/policies/privacy/

GOOGLE ADS

Our website uses Google Conversion Tracking. If you have reached our website via an ad placed by Google, Google Adwords sets a cookie on your computer. The cookie for conversion tracking is set when a user clicks on an ad placed by Google. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of our website when the cookie has not yet expired, we and Google can detect that the user clicked on the ad and proceeded to this website. Each Google AdWords customer has a different cookie. Thus, cookies cannot be tracked using the website of Adwords customers. The information obtained using the conversion cookie is used to create conversion statistics for Adwords customers who have opted into conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, advertisers do not obtain any information that can be used to personally identify users.

If you do not wish to participate in tracking, you can refuse to allow the required cookie to be set – for example using browser settings that deactivate all automatic cookie setting, or by setting your browser to block cookies from the “googleleadservices.com” domain.

Please note that if you do not wish measurement data to be recorded, you must not delete opt-out cookies. If you have deleted all of the cookies in your browser, you must reset the respective opt-out cookie.

We use Google Ads on the basis of Art. 6 para. 1 clause 1 lit. f GDPR. We want to ensure a targeted and needs-based application of our website. In connection with the described tracking measures (Google Analytics), the use of the advertising offers of our website is statistically recorded and evaluated for the purpose of optimising our offer for you. These interests are to be regarded as legitimate under the aforementioned provision.

The purpose of Google Ads is to promote our website by displaying advertisements on third-party websites and in Google’s search results, as well as showing advertisements on our website.

YOUR RIGHTS

As a data subject, you have the following rights. If you would like to assert any of these rights, please contact the data controller via the contact methods listed above.

1. Right to information (Art. 15 GDPR)

You can request that the data controller confirm whether we will process personal data that concerns you.

On request, we will be glad to inform you about the purposes of this data processing; the categories of personal data that we process; the recipients or categories of recipients to whom your personal data has been or is being disclosed, in particular for recipients in third countries or international organisations; if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration; the existence of a right to rectify or delete the personal data concerning you or to restrict processing by us or a right of objection to such processing; the existence of a right to file a complaint to a supervisory authority; all available information on the origin of the data, if we have not collected your personal data from you; the existence of automated decision-making, including profiling per Art. 22 para. 1, 4 GDPR and, at least in these cases, meaningful information about the logic involved and about the scope and the intended effects of such data processing for you; the transfer of personal data to a third country or to an international organization, as well as the guarantees that are appropriate in this context, in accordance with Art. 46 GDPR.

2. Right to correct data (Art. 16 GDPR)

You have a right to the immediate correction and/or completion of your personal data to the controller if the personal data we are processing is incorrect or incomplete.

3. Right to deletion (Art. 17 GDPR)

You may request the deletion of your data stored by us if the data is no longer necessary for the purposes for which it was  collected or processed; you revoke your consent and there is no other legal basis for processing; you object per Art. 21 para. 1 GDPR and no prior justifiable reasons for the processing exist; or you object per Art. 21 para. 2 GDPR; the personal data has been processed unlawfully; the deletion of the personal data is necessary in order to fulfil a legal obligation; or the personal data has been processed by an information service provider per Art. 8 para. 1 GDPR.

However, this right shall not exist, in particular, if the processing is required for exercising the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to assert, exercise or defend legal claims.

4. Right to restrict the processing of your data (Art. 18 GDPR)

You may request the restriction of the processing of personal data concerning you, if you deny its accuracy for as long as it takes us to verify its accuracy; if the processing is unlawful, but instead of deletion, you wish to restrict

its processing; the data controller no longer needs the data, but you need it to assert, exercise, or defend your legal claims; or you object to its processing per Art. 21 para. 1 GDPR and it has not yet been established whether the data controller’s legitimate reasons for processing your data outweigh yours.

If the processing of personal data concerning you has been restricted, then – apart from their storage – this data may only be processed with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person, or for reasons of an important public interest on the part of the Union or a Member State.

If the limitation of the processing has been restricted for any of the grounds listed above, the responsible entity will notify you before lifting the restriction.

5. Right to data portability (Art. 20 GDPR)

You have the right to receive the data that you have provided to us in a structured, current and machine-readable format or to request its transfer to another data controller.

6 Right of objection

If your personal data is processed based on our legitimate interests per Art. 6 para. 1 clause 1 lit. f GDPR, you have the right to object to the processing of your personal data if there are reasons for this that arise from your particular situation or if the objection is directed against direct advertising. If the objection is made against direct promotional activities, you have a general right to object, which we will implement without specifying a particular situation.

7. The right to revoke consent (Art. 7 para. 3 GDPR )

You have the right to revoke at any time a consent previously given; this will mean that we may no longer continue the data processing based on this consent.

8. Right to file grievances (Art. 77 GDPR)

You are also entitled to file a grievance with a supervisory authority. You may contact the supervisory authority responsible for your domicile or workplace or the supervisory authority responsible for us.

QUESTIONS ABOUT DATA PROTECTION?

If you have any questions about data protection, please write us an email or contact us directly:

Tel.: +49 (0) 40 58 75 62
Fax: +49 (0) 40 58 76 28
​Email: mail@oberdeck-hamburg.de