Thank you for visiting our website and for your interest in Hamburgische Schiffbau Versuchsanstalt GmbH and our services. To ensure that you feel safe and comfortable when visiting our website, we take the protection of your personal data and its confidential treatment very seriously.

With these notes on data protection, we would therefore like to inform you about when we store which data and for what purpose we use it - naturally in compliance with the applicable data protection regulations.

Should you have any further questions regarding the handling of your personal data, please feel free to contact our data protection officer, whose contact details can be found below.

Constant technological development, changes to our services or the legal situation, and other reasons may require adjustments to our data protection notice. We therefore reserve the right to change this privacy policy at any time and ask you to regularly inform yourself about the current status.

1. Person responsible and data protection officer

1.1. Contact details of the responsible person:

HSVA Hamburg Shipbuilding Research Institute GmbH
Bramfelder Street 164
22305 Hamburg
Germany

E-mail: info@hsva.de

Legal representative:
Dr. Janou Hennig, Managing Director

1.2. Data Protection Officer:

Personal/ Confidential
You can reach the data protection officer appointed by HSVA Hamburg Shipbuilding Research Institute GmbH through the following contact details:

Data Protection Officer

Herting Oberbeck Datenschutz GmbH
Hallerstr. 76
20146 Hamburg
Germany

Email: dsb@hsva.de

https://www.datenschutzkanzlei.de

2. Basic information

Unless otherwise stated in the following sections, no personal data is collected, processed or used when using our websites.

When you access our Internet pages, our web servers automatically collect information of a general nature. This includes the type of web browser, the operating system used, the domain name of the Internet service provider, the IP address of the computer used, the website from which you visit us, the pages you visit on our site and the date and duration of the visit.

This data cannot be used by us to identify the individual user. The information is only statistically evaluated by us and used exclusively to improve the attractiveness, content and functionality of our websites.

3. Concept of personal data

In Art. 4 No. 11 of the EU General Data Protection Regulation (GDPR), which came into force in May 2018, personal data are defined as follows:

Any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Accordingly, this is individual information about personal or factual circumstances of a specific or identifiable natural person. This includes, for example, your civil name, your address, your telephone number or your date of birth.

4. Legal basis for the collection and processing of personal data

Insofar as we obtain your consent for processing operations of personal data, Art. 6 para. 1 lit. a DSGVO serves as the legal basis for the processing of your personal data.

When processing your personal data to fulfill a contract between you and Hamburgische Schiffbau Versuchsanstalt GmbH, Art. 6 (1) lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

Insofar as the processing of personal data is necessary for the fulfillment of a legal obligation to which our company is subject, Art. 6 (1) lit. c DSGVO serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) lit. f DSGVO serves as the legal basis for the processing.

5. Data processing during website visit

During the mere informational use of the website, i.e., if you do not register or otherwise transmit information to us (e.g., via a contact form), we collect the following technical information (log file data):

• Operating system of the end device with which you visit our website
• Browser (type, version & language settings)
• The amount of data retrieved
• the current IP address of the terminal device with which you visit our website
• Date and time of access
• the URL of the previously visited website (referrer)
• the URL of the (sub)page you are accessing on the website
• the Internet service provider of the accessing system

The collection of this data is technically necessary to display our website to you and to ensure stability and security. We (and our service provider) are regularly unaware of who is behind an IP address. We do not combine the data listed above with other data.

The legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO. Since the collection of data for the provision of the website and the storage in log files are absolutely necessary for the operation of the website and to protect against misuse, our legitimate interest in data processing prevails at this point.

6. Cookies

Cookies are data that are stored on your computer by a website you visit and allow your browser to be reassigned. Cookies transmit information to the entity that sets the cookie. Cookies can store various information, such as your language setting, the duration of your visit to our website or the entries you have made there. This avoids, for example, that you have to re-enter required form data each time you use the site. The information stored in cookies can also be used to recognize preferences and to tailor content according to areas of interest.

There are different types of cookies: We use session cookies when you visit our website. These are sets of data that are only temporarily held in memory and are deleted when you close your browser. 

First-party cookies are set by the website you are currently visiting. Only that website is allowed to read information from these cookies. Third-party cookies are set by organizations that are not operators of the website you are visiting. For example, these cookies are used by marketing companies.

The legal basis for possible processing of personal data by means of cookies and their storage period may vary. Insofar as you have given us your consent, the legal basis is Art. 6 para.1 p.1 lit. a DSGVO. Insofar as the data processing is based on our overriding legitimate interests, the legal basis is Art. 6 para.1 p.1 lit.f DSGVO. The stated purpose then corresponds to our legitimate interest.

We use cookies to ensure the proper operation of the website, to provide basic functionality, to measure reach and - with your consent - to tailor our services to preferred areas of interest.

You can delete cookies already stored on your end device at any time. If you want to prevent cookies from being stored, you can do this via the settings in your internet browser. You can find instructions for common browsers here: Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Google Chrome mobile, Microsoft Edge browser, Safari, Safari mobile. Alternatively, you can also install so-called ad blockers. Please note that individual functions of our website may not work if you have disabled the use of cookies.

When accessing our website, all users of our website are also informed by an information banner about our use of cookies and referred to this data protection notice. As a user, you will also be asked for your consent to the use of certain cookies, in particular for the personalization of services and for marketing measures. Once you have given your consent, you can withdraw it at any time with future effect by changing your consent under "Company" and "Change Consent" in the footer of the website.

7. Google Maps Plug-In

This site uses the mapping service Google Maps. Google Maps is a mapping service provided by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

In order to use the functions of Google Maps, information, including the IP address as well as the address, which is entered within the scope of the route function, can be transmitted to the provider's servers. This information is usually transferred to a Google server in the USA and stored there. When visiting a website that contains Google Maps, your browser establishes a direct connection with Google's servers, whereby the map content is sent to your browser and integrated by it. The provider of this site has no influence on this data transmission. According to current knowledge, this includes the following data:

• Date and time of the visit to the website in question
• Internet address or URL of the accessed web page
• IP address, (start) address entered during route planning

Google Maps is used in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. If you do not wish Google to process data via this service, you can deactivate the use of JavaScript in your browser settings. Please note that in this case the interactive map function of Google Maps cannot be used.

Insofar as data is processed outside the European Economic Area / the EU, where there is no level of data protection equivalent to the European standard, Google states that it uses standard contractual clauses.

More information on the handling of user data can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/. 

The data collection and storage only takes place after explicit consent according to Art. 6 para. 1 p. 1 lit. a) DSGVO. This can be withdrawed at any time with effect for the future.

8. Google Web Fonts

This page uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly. We have opted for the offline variant, in which the Google Fonts are stored locally on our web server. The management of the fonts is then possible - using CSS - as with any other font family. A transmission of the IP address and other data to Google does not take place.

Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers with regard to efficiency and cost-saving considerations. This represents a legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO. If your browser does not support web fonts, a standard font will be used by your computer.

For more information about Google Web Fonts, please visit https://developers.google.com/fonts/faq and read Google's privacy policy: https://www.google.com/policies/privacy/ 

9. YouTube

We use services from YouTube, LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA, a subsidiary of Google Inc, Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website. For users who are habitually resident in the European Economic Area or Switzerland, Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland is the controller of your data.

Here, we use a two-click solution to protect your personal data. When you call up a page in which a YouTube video is embedded, a connection to the YouTube servers is only established when you click on the "Yes, only once" or "Yes, for the whole website" button. In this case, YouTube will set cookies and use your visit data for its own purposes. If you are logged in to YouTube at this time, the information about the videos you have viewed will be assigned to your member account with YouTube. You can prevent this by logging out of your member account before visiting our website. Insofar as data is processed outside the European Economic Area / the EU, where there is no level of data protection that corresponds to the European standard, Google states that it uses standard contractual clauses.

Further information on YouTube privacy is provided by Google at the following link: https://www.google.de/intl/de/policies/privacy/

10. Social Bookmarks

No social bookmarks are used on our website.

11. Data deletion and storage duration

The personal data of the data subject shall be deleted or blocked as soon as the purpose of storage ceases to apply. In addition, storage may take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the person responsible is subject (e.g. tax retention obligations). Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.

12. Contact

You have the option of contacting us via our e-mail address or the contact form. We will, of course, use the personal data provided to us in this way exclusively for the purpose for which you provide it when contacting us.

Insofar as we request information via our contact form that is necessary for contacting us, we have always marked this information as mandatory. Unmarked information is optional information that is only collected or processed if you provide it voluntarily. This information is used to specify your request and to improve the processing of your request. Any communication of this information is expressly on a voluntary basis and with your consent. Insofar as this involves information on communication channels (for example, e-mail address, telephone number), you also consent to us contacting you via this communication channel, if necessary, in order to respond to your request.

Your data, which we have received in the course of contacting you, will be deleted as soon as it is no longer required to achieve the purpose for which it was collected, your request has been fully processed and no further communication with you is necessary or desired by you.

As the controller, our company has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. Nevertheless, internet-based data transmissions can always have security gaps. Absolute protection cannot be guaranteed; in any case, sending unencrypted e-mails is not secure. We therefore ask you not to send sensitive data by unencrypted e-mail, but to use either encrypted communication channels (e.g. our contact form) or the postal service.

Of course, you can withdraw this consent at any time for the future. To do so, please contact our data protection officer, whose contact details can be found above under "Data protection officer".

Your data is encrypted before transmission and processing to protect it from access by unauthorized persons. Please note that unencrypted e-mails are not transmitted with access protection.

13. Applications

You can apply to our company electronically, e.g. via e-mail. Please note that unencrypted e-mails will not be transmitted without access protection. 

Your information will be used for processing your application and deciding on the establishment of an employment relationship. The legal basis is Section 26 (1) in conjunction with. Abs. 8 S.2 BDSG. Furthermore, your personal data may be processed insofar as this should be necessary for the defense of asserted legal claims against us arising from the application process. The legal basis for this is Art. 6 para. 1 p.1 lit. f DSGVO. The stated purposes also constitute the legitimate interest in the processing.

Insofar as an employment relationship arises between you and us, we may, in accordance with Section 26 (1) of the German Federal Data Protection Act (BDSG), further process the personal data already received from you for the purposes of the employment relationship if this is necessary for the performance or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of the employee representative body resulting from a law or a collective agreement, a works agreement or a service agreement (collective agreement).

Your application data will not be processed beyond the described use.

Your personal data will be deleted after completion of the application process after 6 months at the latest, provided that no other legitimate interests on our part oppose deletion or you have not given us consent for longer storage. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

Your data is encrypted before transmission and processing to protect it from access by unauthorized persons. Please note that unencrypted e-mails are not transmitted with access protection.

14. Data transfer to external service providers

As a matter of principle, your personal data will not be transferred to third parties unless we are legally obligated to do so, or the transfer of data is necessary for the performance of the contractual relationship, or you have previously expressly consented to the transfer of your data.

External service providers and partner companies, such as the IT service provider for hosting the website and web design, receive your data only to the extent necessary to perform their activities. In these cases, however, the scope of the transmitted data is limited to the necessary minimum. Insofar as our service providers process your personal data on our behalf, we ensure within the framework of commissioned processing pursuant to Art. 28 DSGVO that they comply with the provisions of the data protection laws in the same manner. The respective service provider is responsible for the content of third-party services, whereby we check the services for compliance with the legal requirements within the scope of reasonableness.

We make a point of processing your data within the EU / EEA. However, we may use service providers that process data outside the EU / EEA. In these cases, we ensure that an appropriate level of data protection comparable to the standards within the EU is established at the recipient before transferring your personal data. This can be achieved, for example, via EU standard contracts or Binding Corporate Rules or special agreements to whose regulations the company may be subject.

15. Data security

Hamburgische Schiffbau Versuchsanstalt GmbH uses technical and organizational security measures in order to protect the data we have under our control against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. Our security measures are continuously improved in line with technological developments.

16. Rights of the data subjects

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller: 

16.1. General rights  

16.1.1. Right to information

You have the right to request confirmation from us as to whether personal data concerning you is being processed by us; if this is the case, you have a right to information about this personal data and to the information listed in detail in Art. 15 DSGVO.

16.1.2. Right to rectification

If the data we have collected from you is incorrect or incomplete, you may request that we correct it without delay in accordance with Art. 16 DSGVO.

16.1.3. Right to restriction of processing

Under the conditions of Art. 18 DSGVO, you may also, under certain circumstances, request the restriction of the processing of personal data concerning you.

After the restriction, your data may only be processed with your consent or for the establishment, exercise or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State. We will inform you before the restriction is lifted.

16.1.4. Right to deletion

If one of the reasons set out in Art. 17 (1) DSGVO applies, you may demand that we delete the personal data relating to you without delay, unless there is an exception to the obligation to delete pursuant to Art. 17 (3) DSGVO.

16.1.5. Right to information

If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to inform all recipients of your personal data of this in accordance with Art. 19 DSGVO, unless the notification is impossible or involves disproportionate effort. You also have the right to be informed about the recipients.

16.1.6.Right to data portability

In addition, you have the right under Article 20 of the GDPR to receive from us the personal data concerning you in a machine-readable format and to transfer the data to another controller without hindrance, provided that the conditions of Article 20(1)(a) of the GDPR are met, or to have your personal data transferred directly from us to another controller, insofar as this is technically feasible and no freedoms and rights of other persons are thereby impaired. This right does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or for the exercise of official authority.

16.1.7. Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your declaration of consent under data protection law at any time by means of a declaration to Hamburgische Schiffbau Versuchsanstalt GmbH. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

16.2. Right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f); this also applies to profiling based on these provisions. In this respect, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of you as the data subject, or for the assertion, exercise or defense of legal claims.

If personal data is processed for the purpose of direct marketing, you have the right to object at any time to processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.

16.3. Right to complain

You have the right to lodge a complaint with the competent supervisory authority if you believe that the processing of data violates the General Data Protection Regulation.

16.4. Exercise of the rights of data subjects

To exercise your above rights, please contact us by e-mail at datenschutz@hsva.de or by mail at HSVA Hamburgische Schiffbau-Versuchsanstalt GmbH, Bramfelder Straße 164, 22305 Hamburg Germany. The exercise of your above rights is free of charge for you.

Without prejudice to these rights and the possibility of seeking any other administrative or judicial remedy, you may at any time exercise your right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes data protection law (Article 77 GDPR).

The supervisory authority responsible for us is: 

The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Strasse 22
20459 Hamburg

17. Changes to the privacy policy

This privacy policy will be adapted continuously in the course of further development of the Internet or our offer. We will announce any changes on this page in good time. In order to be informed about the current status of our data usage regulations, this page should be called up regularly.