24|7  HOTLINE  

040 / 725 88 323

Data Protection Policy

1. Data protection at a glance

General notes

The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data is all data with which you can be personally identified. Detailed information on the subject of data protection can be found in our data protection declaration listed under this text.

Data collection on this website

Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find its contact details in the section “Notice on the responsible body” in this data protection declaration.

How do we collect your data?
On the one hand, your data is collected when you communicate it to us. This can be e.g. data that you enter into a contact form. Other data is collected automatically or with your consent by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of the page view). This data is collected automatically as soon as you enter this website.

What do we use your data for?
Part of the data is collected to ensure that the website is provided without errors. Other data can be used to analyze your user behavior.

What rights do you have regarding your data?
You are entitled to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request that the processing of your personal data is restricted. You also have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time if you have any further questions on the subject of data protection.

2. Hosting

External Hosting

This website is hosted externally. The personal data collected on this website is stored on the hoster’s servers. This can in particular be IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access and other data generated via a website.

The external hosting takes place for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 Para. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 Para. 1 lit. f GDPR). If a corresponding consent was requested, the processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a DSGVO and § 25 Para 1TTDSG, insofar as your consent also includes the storage of cookies or access to information in the user’s end device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

Our host(s) will only process your data to the extent necessary to fulfill their performance obligations and follow our instructions in relation to this data.

3. General notes and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

If you use this website, various personal data will be collected. Personal data is data with which you can be personally identified. This data protection declaration explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

We would like to point out that data transmission by Internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of the data against access by third parties is not possible.

Note on the responsible body

Responsible body for data processing on this website is:

MTH Marine Technik Hamburg GmbH & Co. KG
Tycho-Brahe-Kehre 13
22844 Norderstedt

Telefon: 040 / 500 164 20
E-Mail: Mail@MTHamburg.de

Responsible body is the natural or legal person who, alone or together with others, decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

Duration of storage

Unless a specific storage period has been specified in this data protection declaration, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, the data will be deleted once these reasons have ceased to exist.

General information on the legal basis for data processing on this website

If you have consented to the data processing, we will process your personal data on the basis of Article 6 Paragraph 1 Letter a GDPR or Article 9 Paragraph 2 Letter a GDPR, if special data categories according to Article 9 Paragraph 1 GDPR are processed. In the event of express consent to the transfer of personal data to third countries, data processing is also based on Article 49 (1) (a) GDPR. If you have consented to the storage of cookies or access to information on your end device (e.g. via device fingerprinting), data processing is also based on Section 25 (1) TTDSG. The consent can be revoked at any time. If your data is required to fulfill the contract or to carry out pre-contractual measures, we process your data on the basis of Article 6 (1) (b) GDPR. Furthermore, we process your data if they are required to fulfill a legal obligation on the basis of Article 6 (1) (c) GDPR. Data processing can also take place on the basis of our legitimate interest in accordance with Art. 6 Para. 1 lit. f GDPR. The following paragraphs of this data protection declaration provide information on the relevant legal bases in each individual case.

Note on data transfer to the USA and other third countries

Among other things, our website uses tools from companies based in the USA or other third countries that are not secure under data protection law. If these tools are active, your personal data can be transferred to these third countries and processed there. We would like to point out that in these countries no level of data protection comparable to that of the EU can be guaranteed. For example, US companies are obliged to release personal data to security authorities without you as the person concerned being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. secret services) will process, evaluate and permanently store your data on US servers for monitoring purposes. We have no influence on these processing activities.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke consent that you have already given at any time. The legality of the data processing that took place until the revocation remains unaffected by the revocation.

Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6 ABS. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH A PROCESSING IS BASED CAN BE FOUND IN THIS DATA PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR CONCERNED PERSONAL DATA UNLESS WE CAN PROVE COMPREHENSIVE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOM OR THE PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS (OBJECTION ACCORDING TO ARTICLE 21 (1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING PURPOSES; THIS ALSO APPLIES TO PROFILING TO THE EXTENT RELATED TO SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION ACCORDING TO ART. 21 (2) GDPR).

Right of appeal to the competent supervisory authority

In the event of violations of the GDPR, those affected have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged violation. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

Right to Data Portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another person responsible, this will only be done to the extent that it is technically feasible.

Information, deletion and correction

Within the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if necessary, a right to correction or deletion of this data at any time. You can contact us at any time if you have any further questions on the subject of personal data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us for this at any time. The right to restriction of processing exists in the following cases:

  • If you dispute the accuracy of your personal data stored by us, we usually need time to check this. For the duration of the examination, you have the right to request that the processing of your personal data be restricted.
  • If the processing of your personal data happened/is happening unlawfully, you can request the restriction of data processing instead of deletion.
  • If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to demand that the processing of your personal data be restricted instead of being deleted.
  • If you have lodged an objection in accordance with Art. 21 Para. 1 GDPR, your interests and ours must be weighed up. As long as it has not yet been determined whose interests prevail, you have the right to demand that the processing of your personal data be restricted.

If you have restricted the processing of your personal data, this data – apart from its storage – may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State are processed.

SSL- / TLS-Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties. If you apply for a job with us, the personal data you provide as part of your application (this can also be data pursuant to Art. 9 GDPR) will be used for the purpose of establishing contact and carrying out the application process and protecting our legitimate interests in potential AGG procedures are collected and stored. This applies equally to applications by post, e-mail or any other means, as well as when using the application form on our website. Your data will be made accessible to the employees involved in the application process and, if necessary, also to external consultants. After the application process has been completed by filling the position and the deadlines have expired in accordance with §§ 15 Para. 4 AGG, 61b ArbGG, they will be deleted unless you have expressly consented to further storage. The legal basis is Art. 6 Para. 1 f), 88 GDPR, § 26 BDSG. When using the application form on the website, please pay particular attention to Section 4 (3).

4. Data collection on this website

Cookies

Our website uses so-called “cookies”. Cookies are small data packages and do not damage your end device. They are stored on your end device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted after your visit. Permanent cookies remain stored on your end device until you delete them yourself or until they are automatically deleted by your web browser.

In some cases, cookies from third-party companies can also be stored on your end device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for processing payment services).

Cookies have different functions. Numerous cookies are technically necessary because certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to evaluate user behavior or to display advertising.

Cookies that are required to carry out the electronic communication process, to provide certain functions you want (e.g. for the shopping cart function) or to optimize the website (e.g. cookies for measuring web audience) (necessary cookies) are stored on the basis of Article 6 (1) (f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in the storage of necessary cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies and comparable recognition technologies was requested, processing takes place exclusively on the basis of this consent (Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TTDSG); the consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted.

If cookies are used by third-party companies or for analysis purposes, we will inform you of this separately in this data protection declaration and, if necessary, ask for your consent.

Consent with Usercentrics

This website uses Usercentrics’ consent technology to obtain your consent to the storage of certain cookies on your end device or to the use of certain technologies and to document this in compliance with data protection regulations. The provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, website: https://usercentrics.com/de/ (hereinafter “Usercentrics”).

When you enter our website, the following personal data is transferred to Usercentrics:

  • Your consent(s) or the revocation of your consent(s)
  • Your IP address
  • Information about your browser
  • Information about your device
  • the time of your visit to the website

Furthermore, Usercentrics stores a cookie in your browser in order to be able to allocate the given consent or its revocation to you. The data collected in this way is stored until you request us to delete it, delete the Usercentrics cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention requirements remain unaffected.

Usercentrics is used to obtain the legally required consent for the use of certain technologies. The legal basis for this is Article 6 (1) (c) GDPR.

Inquiry by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your inquiry including all resulting personal data (name, enquiry) will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.

This data is processed on the basis of Article 6 (1) (b) GDPR if your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6 Para. 1 lit. f GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR) if this was queried; the consent can be revoked at any time.

The data you sent to us via contact requests will remain with us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.

5. Plugins and Tools

YouTube with enhanced privacy

This website includes videos from the YouTube website. The website operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in the extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the extended data protection mode does not necessarily exclude the transfer of data to YouTube partners. This is how YouTube establishes a connection to the Google DoubleClick network, regardless of whether you are watching a video.

As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, YouTube can save various cookies on your end device after starting a video or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can receive information about visitors to this website. This information is used i.a. to collect video statistics, improve usability and prevent fraud attempts.

If necessary, after the start of a YouTube video, further data processing operations can be triggered over which we have no influence on.

YouTube is used in the interest of an attractive presentation of our online offers. This represents a legitimate interest within the meaning of Article 6 Paragraph 1 Letter f GDPR. If a corresponding consent has been requested, the processing takes place exclusively on the basis of Article 6 Paragraph 1 Letter a GDPR and Article 25 Paragraph 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

You can find more information about data protection on YouTube in their data protection declaration at: https://policies.google.com/privacy?hl=de.

6. Own services

Handling applicant data

We offer you the opportunity to apply to us (e.g. by e-mail, by post or via the online application form). In the following we will inform you about the scope, purpose and use of your personal data collected as part of the application process. We assure you that the collection, processing and use of your data takes place in accordance with the applicable data protection law and all other statutory provisions and that your data will be treated with the utmost confidentiality.

Scope and Purpose of Data Collection

If you send us an application, we will process your associated personal data (e.g. contact and communication data, application documents, notes from job interviews, etc.) insofar as this is necessary to make a decision on the establishment of an employment relationship. The legal basis for this is § 26 BDSG under German law (initiation of an employment relationship), Article 6 Paragraph 1 lit. b GDPR (general contract initiation) and – if you have given your consent – Article 6 Paragraph 1 lit. a GDPR. The consent can be revoked at any time. Within our company, your personal data will only be passed on to people who are involved in processing your application.
If the application is successful, the data you submit will be stored in our data processing systems on the basis of Section 26 BDSG and Article 6 Paragraph 1 lit. b GDPR for the purpose of carrying out the employment relationship.

Retention period of the data

If we are unable to make you a job offer, you reject a job offer or withdraw your application, we reserve the right to store the data you have transmitted on the basis of our legitimate interests (Art. 6 Para. 1 lit. f GDPR) for up to 6 months to be kept with us from the end of the application process (rejection or withdrawal of the application). The data will then be deleted and the physical application documents will be destroyed. The storage serves in particular as evidence in the event of a legal dispute. If it is apparent that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), it will only be deleted if the purpose for further storage no longer applies.

A longer storage can also take place if you have given your consent (Art. 6 Para. 1 lit. a GDPR) or if statutory storage obligations prevent the deletion.

Further Information for Customers and Business Partners

HANDLING OF YOUR PERSONAL DATA AND THE RIGHTS OF PERSONS CONCERNED – INFORMATION ACC. TO ART. 13, 14 AND 21 GDPR

With the following Information, we would like to give you an overview of the processing of your personal data or those of your employees by us and the resulting rights. Which data is processed in detail and used in what way mainly depends on our contractual relationship. Therefore, not all of the statements contained herein will apply to you.

In addition, this privacy information may be subject to change from time to time. The latest version can be found on our Website at: www.mthamburg.de

Responsible body is:
MTH Marine Technik Hamburg GmbH & Co. KG

Tycho-Brahe-Kehre 13

22844 Norderstedt

For any questions you can contact our company data protection officer at:
sabine.niebuhr@mthamburg.de

Type of personal data collected

As part of our contractual relationship, you are encouraged to provide us with personal data that is required to establish, implement and terminate the contractual relationship as well as to comply with the associated contractual obligations or which we are legally obliged to collect. Without this data, we will generally not be able to enter into or execute the contractual relationship with you.
We typically process the following personal data that we receive from your side as part of our business relationship:

  • Company name with legal form and address
  • Titles and names of employees, their position
  • Phone numbers, fax numbers, E-Mail-addresses
  • Bank Details
  • Order data, project details such as object address, data of technical plants/equipment, etc.
  • Other personal data you provide to us that is needed to conduct the business relationship

Purpose of data processing and legal basis

We collect and process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) for the following purposes:

  • To create an offer, to carry out our contractual relationship including billing. In order to fulfil contractual obligations and to maintain our business relationship (Article 6 (1) b. GDPR), it may also be passed on to third parties.
  • Due to commercial and tax or other legal requirements (Article 6 (1) c. GDPR); in this respect, the disclosure of personal data may be necessary in the context of official/court actions and, where appropriate, for the purpose of collecting evidence, prosecuting or enforcing civil claims.
  • As part of the weighing of interests (Article 6 (1) f. GDPR), where necessary, we process your data beyond the actual fulfilment of the contract in order to safeguard our or third party legitimate interests, e.g. to assert legal claims and for defense in legal disputes.

Recipients

In addition to our employees, data may also be passed on to service providers who work for us for the following purposes:

  • Support or Maintenance of IT or IT applications
  • external Accounting
  • Tax Advice, Auditing
  • Processing of Payment transactions
  • Data Destruction
  • Advisors

All Service Providers are contractually bound and, in particular, obliged to treat your data confidentially. Your data will only be processed within the European Union and States within the European Economic Area (EEA).

Duration of Data Storage

We process and store your personal data as long as this is necessary to comply with our contractual and legal obligations. If the data is no longer necessary for the fulfillment of contractual or legal obligations, they are deleted on a regular basis.

Exceptions may arise,

  • insofar as legal retention obligations are to be met, e.g. under the Commercial Code (HGB) and the Tax Code (AO). The time limits set there for storage or documentation usually last six to ten years;
  • to preserve evidence under statutory limitation periods. Under Section 195 ff of the Civil Code (BGB), these periods can be up to 30 years, with the regular statute of limitations being 3 years.

If the data processing is done in the legitimate interest of us or a third party, the personal data will be deleted as soon as this interest no longer exists. The mentioned exceptions apply.

Data protection rights of persons concerned

Persons concerned have the right to information under Article 15 GDPR, the right to rectify under Article 16 GDPR, the right to delete under Article 17 GDPR, the right to restrict processing under Article 18 GDPR, the right to contradiction from Article 21 GDPR and the right to data portability under Article 20 GDPR.

For the right of information and the right to delete, restrictions under Article 34 and 35 BDSG may apply.

In addition, there is a right to complain to a competent data protection regulator (Article 77 GDPR and Article 19 BDSG). The supervisory authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information, Kurt-Schumacher-Allee 4, 20097 Hamburg.

Information on the right to object under Article 21 GDPR

Individual right of objection

Subject to Article 6 (1) f. GDPR you are entitled to object, for reasons arising from your particular situation, at any time against the processing of your personal data.

If you object, we will no longer process your personal data unless we can prove compelling grounds for processing worthy of protection that outweigh your interests, rights and freedoms, or the processing serves the purpose of assertion, exercise or defence of legal claims.

Recipient of an objection

The objection can be made without form with the subject “objection” stating your name, address and date of birth and should be addressed to: mail@mthamburg.de or post to MTH Marine Technik Hamburg GmbH & Co. KG, Tycho-Brahe-Kehre 13, 22844 Norderstedt.