Privacy policy
Privacy Policy for Deckma Hamburg GmbH
PREFACE: We take the protection of your private data seriously. Paying special attention to privacy when processing personal data is very important to us. The operators of this website are committed to confidentiality. These websites may contain links to other providers’ websites, which are not covered by this privacy policy.
The responsible party within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Deckma Hamburg GmbH
Kieler Str. 316
22525 Hamburg
DE-Germany
Phone: +49 40 5488760
E-Mail:
Web: www.deckma.com
Name and address of the Data Protection Officer
Name and address of the Data Protection Officer
Anke Schulze
E-Mail:
We adhere to the principles of data minimization according to Art. 5(1)(c) GDPR and storage limitation according to Art. 5(1)(e) GDPR. We store your personal data only as long as necessary to achieve the purposes stated here or as required by the statutory retention periods. Once the respective purpose has been fulfilled or these retention periods have expired, the corresponding data will be deleted as quickly as possible.
Our website also includes tools from companies based in third countries (notably the USA). If these tools are active, your personal data may be transmitted to the servers of the respective companies. The level of data protection in third countries generally does not correspond to EU data protection law. Therefore, there is a risk that your data may be disclosed to authorities in these countries. We have no influence over these processing activities.
This website may contain links to third-party websites or other websites under our responsibility. If you follow a link to a website outside our responsibility, please note that these websites have their own privacy policies. We assume no responsibility or liability for these external websites and their privacy notices. Before using these websites, please check whether you agree with their privacy policies.
External links can be recognized either by their color being slightly different from the rest of the text or by being underlined. Your cursor indicates external links when you hover over them. Only when you click on an external link will your personal data be transmitted to the destination of the link. In this process, the operator of the other website will receive, in particular, your IP address, the time you clicked the link, the page from which you clicked the link, and other information, which you can find in the privacy notice of the respective provider.
Please also note that some links may result in data being transferred outside the European Economic Area. This could allow foreign authorities to access your data. You may not have legal remedies against such data access. If you do not want your personal data to be transmitted to the link destination or exposed to access by foreign authorities, please do not click on the links.
As a data subject under the GDPR, you have the right to exercise various rights. The rights arising from the GDPR include the right of access (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to object (Article 21), the right to lodge a complaint with a supervisory authority, and the right to data portability (Article 20).
Right of Withdrawal:
Some data processing may only be carried out with your explicit consent. You may revoke your consent at any time. The lawfulness of processing up to the point of withdrawal is not affected by the withdrawal.
Right to Object:
If the processing is based on Art. 6(1)(e) or (f) GDPR, you may, as a data subject, object at any time to the processing of your personal data for reasons arising from your particular situation. This right also applies to profiling based on these provisions pursuant to Art. 4(4) GDPR. If we cannot demonstrate a legitimate interest that outweighs your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims, we will cease processing your data after your objection.
If the processing of personal data is for direct marketing purposes, you also have the right to object at any time. The same applies to profiling in connection with direct marketing. In this case, we will no longer process personal data once you object.
Right to Lodge a Complaint with a Supervisory Authority:
If you believe that the processing of your personal data violates the GDPR, you have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority, particularly in the EU member state of your residence, workplace, or the place of the alleged infringement.
Right to Data Portability:
If your data is processed automatically based on consent or the performance of a contract, you have the right to receive this data in a structured, commonly used, and machine-readable format. You also have the right to request the transfer and provision of the data to another controller, insofar as this is technically feasible.
Right to Access, Rectification, and Erasure:
You have the right to obtain information about your processed personal data regarding the purpose of processing, categories, recipients, and storage duration. For questions on this topic or other issues regarding personal data, you can contact us using the contact information provided in the legal notice.
Right to Restriction of Processing:
You may request the restriction of processing of your personal data at any time if one of the following conditions applies:
-
You contest the accuracy of the personal data. For the duration of the verification of accuracy, you have the right to request a restriction of processing.
-
If processing is unlawful, you may request the restriction of use as an alternative to erasure.
-
If we no longer need your personal data for the purposes of processing, but you require it for the assertion, exercise, or defense of legal claims, you may request a restriction of processing as an alternative to erasure.
-
If you object to processing under Art. 21(1) GDPR, a balancing of your interests and ours will be carried out. Until this balancing is completed, you have the right to request restriction of processing.
Restriction of processing means that personal data may only be processed, apart from storage, with your consent or for the assertion, exercise, or defense of legal claims, to protect the rights of another natural or legal person, or for important public interest reasons of the Union or a member state.
When you access our website, we automatically collect and store information in so-called server log files. This information is automatically transmitted by your browser to our server or to the server of our hosting provider.
These include:
-
IP address of the visitor’s device
-
Device used
-
Hostname of the accessing computer
-
Visitor’s operating system
-
Browser type and version
-
Name of the accessed file
-
Time of the server request
-
Amount of data transferred
-
Information whether the data transfer was successful
These data are not merged with other data sources.
The legal basis for processing this data is Art. 6(1)(f) GDPR. Our legitimate interest is the technically error-free display and optimization of this website.
Instead of operating this website on our own server, we may also host it on the server of an external service provider (hosting company). In this case, the personal data collected on this website will be stored on the hosting company’s servers. In addition to the data mentioned above, this may include, for example, contact inquiries, contact details, names, website access data, meta and communication data, contract data, and other data generated through a website.
Another legal basis is the purpose of pre-contractual or contractual obligations toward the data subject (Art. 6(1)(b) GDPR). In the event that we have commissioned a hosting company, a contract on data processing on behalf of the controller exists with this service provider.
Our website uses “cookies.” Cookies are pieces of information that a web server (a server providing web content) stores on your device to identify it. They are either temporary for the duration of a session (session cookies) and deleted after you leave a website, or permanent (persistent cookies) and stored on your device until you delete them yourself or they are automatically deleted by your web browser.
Cookies can also be stored on your device by third-party companies when you visit our site (third-party requests). This allows us, as operators, and you, as a visitor of this website, to use certain services provided by third parties installed on this website. Examples include cookies for processing payment services or cookies for displaying videos.
Cookies have a variety of uses. They can improve the functionality of a website, manage shopping cart functions, increase the security and convenience of website use, and conduct analyses of visitor flows and behavior. Depending on their function, cookies fall under different data protection categories. They are necessary for operating the website and providing certain functions (e.g., shopping cart function) or serve to optimize the website (e.g., cookies to measure visitor behavior); in these cases, their use is based on Art. 6(1)(f) GDPR. As website operators, we have a legitimate interest in storing cookies to provide our services in a technically error-free and optimized manner. In all other cases, cookies are stored only with your explicit consent (Art. 6(1)(a) GDPR).
Where cookies are used by third parties or for analysis purposes, we inform you separately in this privacy notice. Your required consent is requested and can be revoked at any time.
Our website uses external services. External services are services from third-party providers that are used on our website. This can be done for various reasons, such as embedding videos or for website security. When using these services, personal data may also be transmitted to the respective providers of these external services. If we do not have a legitimate interest in using these services, we obtain your consent as a visitor to our website before use, which can be revoked at any time (Art. 6(1)(a) GDPR).
To analyze user behavior, we process personal data of website visitors. By evaluating the collected data, we can compile information about the use of individual components of our website. This enables us to improve the user-friendliness of our website. Using the analysis tools, user profiles could, for example, be created for displaying targeted or interest-based advertising messages, website visitors could be recognized on their next visit, their click/scroll behavior and downloads measured, heatmaps generated, page views recorded, visit duration or bounce rates measured, and the origin of website visitors (city, country, from which site the visitor came) traced. These analysis tools help improve our market research and marketing activities.
The processing of data is based on the legal basis of consent (Art. 6(1)(a) GDPR). As a website visitor, you have agreed to the processing of your personal data with your voluntary, explicit, and prior consent. Without separate consent, the personal data will not be processed in the manner described above, provided there is no other legal basis under Art. 6(1) GDPR on which we rely for processing. The same applies if you revoke your consent. The lawfulness of the processing carried out up to the point of revocation remains unaffected.
We use the Google Analytics service on our website. The provider of the service is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.
The use of this service may result in data being transferred to a third country (USA).
Further information can be found in the provider’s privacy policy at the following URL: https://policies.google.com/privacy.
To comply with data protection requirements, we use a consent management tool on our website. This tool obtains the necessary consents for setting cookies or using external services. The consents are stored.
The processing is necessary to fulfill a legal obligation to which the controller (website operator) is subject. The legal basis for this processing is therefore Art. 6(1)(c) GDPR.
We use the DataReporter service on our website. The provider of the service is DataReporter GmbH, 4600 Wels, Zeileisstraße 6, Austria.
Since this service is hosted locally on the web server, no data is transferred to third parties.
We use a Content Delivery Network (CDN) to optimize the performance and availability of our website. For this purpose, the service provider operating this network processes your IP address and information about when you visited our website. Further information on data processing by this provider can be found in its privacy policy.
We base this processing on a legitimate interest (Art. 6(1)(f) GDPR).
Our legitimate interest in using a Content Delivery Network is to ensure that our website can be displayed as quickly, securely, and reliably as possible.
We use the CloudFlare service on our website. The provider of the service is Cloudflare Ltd., 2nd Floor, 25 Lavington Street, London SE1 0NZ, United Kingdom.
Using this service may result in data being transferred to a third country (USA).
Further information can be found in the provider’s privacy policy at the following URL: https://www.cloudflare.com/de-de/privacypolicy/.
To make content on our website easier to find, a search engine has been implemented.
The processing of data is based on the legal basis of consent (Art. 6(1)(a) GDPR). As a website visitor, you have agreed to the processing of your personal data with your voluntary, explicit, and prior consent. Without separate consent, personal data will not be processed in the manner described above, provided there is no other legal basis under Art. 6(1) GDPR on which we rely. The same applies if you revoke your consent. The lawfulness of processing carried out up to the point of revocation remains unaffected.
We use the Google service on our website. The provider of the service is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.
Using this service may result in data being transferred to a third country (USA).
Further information can be found in the provider’s privacy policy at the following URL: https://policies.google.com/privacy.
Our website uses tools that facilitate or enable the placement of advertising and the evaluation of the success of displayed ads. Advertising represents a source of revenue for our website. Personal data is processed in this context, particularly IP addresses, access times, and device information.
The processing of data is based on the legal basis of consent (Art. 6(1)(a) GDPR). As a website visitor, you have agreed to the processing of your personal data with your voluntary, explicit, and prior consent. Without separate consent, personal data will not be processed in the manner described above, provided there is no other legal basis under Art. 6(1) GDPR on which we rely. The same applies if you revoke your consent. The lawfulness of processing carried out up to the point of revocation remains unaffected.
We use the Google DoubleClick service on our website. The provider of the service is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.
Using this service may result in data being transferred to a third country (USA).
Further information can be found in the provider’s privacy policy at the following URL: https://policies.google.com/privacy.
Our website provides the possibility to contact us via a contact form. For contacting us through this form, your contact information is required in particular.
The legal basis for this is the processing for the purpose of fulfilling a contract or pre-contractual measures in accordance with Art. 6(1)(b) GDPR. Additionally, a legitimate interest may exist to maintain business relationships or to respond to your inquiry for other reasons.
In this case, the legal basis for processing your data would be Art. 6(1)(f) GDPR.
The data will be deleted once your inquiry has been fully answered and no other retention obligations prevent deletion.
In accordance with legal requirements, we have provided a telephone number and email address on our website. The data transmitted via these channels is automatically stored by us to process inquiries or to contact the person making the inquiry. This data will not be shared with third parties without your consent.
If contact is made by telephone or email for pre-contractual or contractual purposes, the processing of personal data is based on the legal basis of Art. 6(1)(b) GDPR. For all other types of contact, the processing of personal data by us is based on our legitimate interest in accordance with Art. 6(1)(f) GDPR.
It is possible to submit an application to us (e.g., by post, online application form, or email). The personal data obtained in this way is stored and processed by us for the application process.
The legal basis for processing is Art. 6(1)(b) GDPR as well as Art. 6(1)(a) GDPR, provided consent has been given. If German law applies, in particular § 26 BDSG is used as the legal basis for processing. You may revoke your consent at any time. The lawfulness of processing carried out up to the point of revocation remains unaffected.
If an employment relationship results from the application, the data collected will be stored for the purpose of managing the employment relationship based on Art. 6(1)(b) GDPR. If no employment relationship is established, the data will be stored on the basis of Art. 6(1)(f) GDPR for the duration of statutory claims, particularly those arising from discrimination in the application process. This is necessary to defend against potential lawsuits or allegations. If consent has been given, the data will be stored longer based on Art. 6(1)(a) GDPR. You may revoke your consent at any time. The lawfulness of processing carried out up to the point of revocation remains unaffected.
If no employment relationship is established, the applicant may be added to our applicant pool. All information from the application will be stored to contact the person regarding suitable job openings.
Storage of data in the applicant pool occurs exclusively with granted consent based on Art. 6(1)(a) GDPR. This consent can be revoked at any time, after which the corresponding data will be deleted unless legal retention obligations exist. Deletion will occur automatically no later than two years after consent is granted. The lawfulness of processing carried out up to the point of revocation remains unaffected.
If no employment relationship is established, the applicant may be added to our applicant pool. All information from the application will be stored to contact the person regarding suitable job openings.
Storage of data in the applicant pool occurs only with granted consent based on Art. 6(1)(a) GDPR. This consent can be revoked at any time, after which the corresponding data will be deleted unless legal retention obligations exist. Deletion will occur no later than two years after consent is granted. The lawfulness of processing carried out up to the point of revocation remains unaffected.