Website privacy policy and at the same time information for data subjects in accordance with Article 13 and Article 14 of the EU General Data Protection Regulation

General information
Details of the responsible body

Company: Seehafen Wismar GmbH
Managing Director: Michael Kremp
Company address: Kopenhagener Straße, 223966 Wismar

Contact details:
Phone: +49 3841 452-0
E-mail: datenschutz@hafen-wismar.de

Contact details Data Protection Officer: Dr. Sebastian Kraska, IITR Datenschutz GmbH, email@iitr.de

General data processing information

Data concerned:

Personal data is only collected if you provide it to us voluntarily. No other personal data is collected. Any processing of your personal data that goes beyond the scope of the statutory permissions will only take place on the basis of your express consent.

Purpose of processing: Performance of the contract.
Categories of recipients: Public authorities where overriding legal provisions apply. External service providers or other contractors.
Other external bodies insofar as the data subject has given their consent or a transfer is permitted for reasons of overriding interest.
Third country transfers: Processors outside the European Union may also be used in the context of contract performance.
Duration of data storage: The duration of data storage depends on the statutory retention obligations and is generally 10 years.

Specific information about the website

Usage data

When you visit our website, you transmit data to our web server via your Internet browser (for technical reasons). The following data is recorded during an ongoing connection for communication between your internet browser and our web server:

– Date and time of the request
– Name of the requested file
– Page from which the file was requested
– Access status (file transferred, file not found, etc.)
– Web browser and operating system used
– Complete IP address of the requesting computer
– Amount of data transferred.

For reasons of technical security, in particular to defend against attempted attacks on our web server, this data is stored by us for a short time. It is not possible for us to draw conclusions about individual persons from this data. After a short time at the latest, the data is anonymized by shortening the IP address at domain level, so that it is no longer possible to establish a reference to the individual user. The data is also processed in anonymized form for statistical purposes; it is not compared with other databases or passed on to third parties, even in excerpts.

Social media cookie – YouTube with enhanced data protection

This website embeds videos from YouTube. Our social media cookies are marketing cookies. Marketing cookies are set after your active consent via the consent tool and can be revoked at any time via the same tool.

The operator of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. For example, YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video.

As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, YouTube can store various cookies on your end device after starting a video. With the help of these cookies, YouTube can obtain information about visitors to this website. This information is used, among other things, to record video statistics, improve user-friendliness and prevent fraud attempts. The cookies remain on your end device until you delete them. If necessary, further data processing operations may be triggered after the start of a YouTube video, over which we have no influence.

Further information on the handling of user data can be found in the privacy policy of
YouTube at: google.de/intl/en/policies.

Use of own “cookies” required for the website display

This website uses its own “cookies” to store settings required for the website display (“cookies” are data records that are sent from the web server to the user’s browser and stored there for later retrieval). No personal data is stored in our own “cookies”. You can generally prevent the use of “cookies” by prohibiting the storage of “cookies” in your browser.

Information on further data processing procedures

Specific information on the application procedure

Data concerned: Application details
Processing purpose: Carrying out the application process.
Categories of recipients: Public bodies if overriding legal provisions apply.
External service providers or other contractors, including for data processing and hosting.

Other external bodies insofar as the data subject has given their consent or transmission is permitted for reasons of overriding interest, including customers and interested parties in the context of order acquisition.

Third country transfers: Processors outside the European Union, including email providers, may also be used in the course of contract performance.

Duration of data storage: Application data will generally be deleted within four months of notification of the decision, unless consent has been given for longer data storage in the context of inclusion in the applicant pool.

Specific information on the processing of customer data/prospect data

Data concerned: Data provided for the performance of the contract; any additional data for processing on the basis of your express consent.

Purpose of processing: Contract execution, including offers, orders, sales and invoicing, quality assurance.
Categories of recipients: Public authorities in the event of overriding legal provisions
External service providers or other contractors, including for data processing and hosting, for shipping, transport and logistics, service providers for printing and sending information and call centers

Other external bodies insofar as the data subject has given their consent or transmission is permitted for reasons of overriding interest, e.g. for credit information in the case of purchases on account, for the electronic dispatch of information, for quality assurance purposes.

Third country transfers: Processors outside the European Union, including email providers, may also be used in the context of contract performance. Duration of data storage: The duration of data storage depends on the statutory retention obligations and is generally 10 years.

Specific information on the processing of employee data

Data concerned: Data provided for the performance of the contract; any additional data for processing on the basis of your express consent. Purpose of processing: Performance of the contract in the context of the employment relationship. Categories of recipients: Public bodies in the event of overriding legal provisions, including the tax office, social security institutions, employers’ liability insurance association.

External service providers or other contractors, e.g. for data processing and hosting, payroll accounting, travel expense accounting, insurance services, vehicle use. Other external bodies insofar as the data subject has given their consent or a transfer is permitted for reasons of overriding interest, e.g. for order acquisition, insurance services. Third country transfers: Processors outside the European Union, including email providers, may also be used in the performance of the contract. Duration of data storage: The duration of data storage depends on the statutory retention obligations and is generally 10 years.

Specific information on the processing of supplier data

Data concerned: Data provided for the performance of the contract; any additional data for processing on the basis of your express consent. Purpose of processing: Contract execution, including inquiries, purchasing, quality assurance. Categories of recipients: Public authorities in the event of overriding legal provisions, e.g. tax office, customs. External service providers or other contractors, e.g. for data processing and hosting, accounting, payment processing. Other external bodies if the data subject has given their consent or a transfer is permitted due to overriding interests. Third country transfers: Processors outside the European Union, including email providers, may also be used in the context of contract performance. Duration of data storage: The duration of data storage depends on the statutory retention obligations and is generally 10 years.

Specific information on the use of video conferencing/webinar software

Data concerned: Data provided for the use of the video conference software or the webinar software (in particular first name, surname, email address; optional: sound transmission; optional: image transmission; optional: questions when using chat functions); to the extent technically necessary, processing of data from your system to establish the connection with the provider of the conference software.

Purpose of processing: Conducting video conferences or webinars.
Categories of recipients: Public authorities in the event of overriding legal provisions. External service providers or other contractors, e.g. for data processing and hosting. Other external bodies if the data subject has given their consent or a transfer is permitted for reasons of overriding interest. Third country transfers: Processors outside the European Union are used (here: United States of America); standard contractual clauses have been concluded with the service provider accordingly. Duration of data storage: Video conferences are only recorded with the prior documented consent of the participants. The technical data is deleted as soon as it is no longer required. The duration of data storage is otherwise based on the statutory retention obligations and is generally 10 years.

Further information and contacts

In addition, you can assert your rights to information, rectification or erasure or to restriction of processing or the exercise of your right to object to processing as well as the right to data portability at any time. Here you can contact us by email at datenschutz@hafen-wismar.de or by letter [Imprint]. You also have the right to contact the competent data protection supervisory authority in the event of complaints.