Mandatory Information to be Provided Pursuant to Art. 12 et seq. EU GDPR
Your contact, who is the data controller as defined in the European General Data Protection Regulation (“EU GDPR”) and in other domestic data privacy legislation of the member states or any other data privacy law related provisions is:
Drews Marine GmbH
Billbrookdeich 151
22113 Hamburg
Germany
Telephone: +49 (0)40 - 731 68 – 0
Email: info@drewsmarine.com
(hereinafter referred to as “we,” “us” or “our”).
The protection of your personal data is important to us. To underscore this importance, we have commissioned a consulting firm specializing in data protection and security to handle these central matters. Our data protection officer is a member of this highly experienced group of experts.
Our consulting firm is:
Magellan Compliance GmbH, Nördliche MünchnerStraße 27A, 82031 Grünwald / www.magellan-datenschutz.de
If you have any data protection and data security related questions associated with our company, please contact our data protection officer directly. Email: datenschutz_drews_marine@magellan-compliance.de/ Telephone: +49 (0)40 - 731 68 - 0
Principally, we will only process your personal data if this is necessary in order for us to provide you with a functional version of our website and of our content as well as services.
If we have obtained your consent to the processing of your personal data, the legal basis for such processing is Art. 6 Sect. 1 S. 1 lit. a) EU GDPR.
If we process your personal data with the aim of meeting contractual mandates or in conjunction with the negotiation of a contractual relationship, the legal basis for the processing of such data is Art. 6 Sect. 1 S. 1 lit. b) EU GDPR.
If the processing of personal data is necessary in order for us to meet any legal obligations, the legal basis for the processing of such data is Art. 6 Sect. 1 S. 1 lit. c) EU GDPR.
If we process your personal data to protect our or any third party’s legitimate interests, provided your interestsor fundamental rights and freedoms do not outweigh the preceding interests, the legal basis for the processing of such data is Art. 6 Sect. 1 S. 1 lit. f) EU GDPR.
Your personal data shall be deleted as soon as the purpose of its retention no longer exists or, if you have a right to object to the processing, you have withdrawn your consent. It is possible that your data will be stored longer if this has been defined in the respective European or domestic legislation, in Union-law provisions, acts or any other provisions we are subject to. In these cases, your personal data shall, however, be blocked.
If we provide links to external websites, this Privacy Policy shall not apply to the processing of your personal data by the data controller of the linked website. Hence, we recommend that you review the data privacy policies on external websites you visit. If such a linkage should require a legal basis for the resulting processing of your personal data, it shall be your consent pursuant to Art. 6 Sect. 1 S. 1 lit. a) EU GDPR, which you shall grant by clicking on the respective link.
As a rule, the clicking on any such links (hyperlinks) will result in the processing of your following personal data:
In conjunction with offering our website we will process your personal data to ensure the error free presentation of our website on your PC or mobile device. Because of that, we have to store some of your personal data for the duration of the session.
Furthermore, we will store your personal data temporarily in logfiles, to guarantee that our website will work properly and the operation of our IT systems is secure. Any other processing of your personal data in logfiles will not occur.
The following personal data will be processed for the provision of the website and for the generation of logfiles:
Legitimate interest, Art. 6 Sect. 1 S. 1 lit. f) EU GDPR.
The purpose of this data processing is to provide the website, ensure its functionality, and the security of the IT systems used for this.
The purpose simultaneously establishes our legitimate interest.
Your personal data will be stored in logfiles for 7 days. Moreover, your personal data will be stored in conjunction with the provision of the website, but only for the duration of the session.
The processing and storage of your personal data in logfiles is absolutely mandatory for the provision of the website, to guarantee its functionality and to guarantee the security of the utilized IT systems. Consequently, you do not have an option to object.
When it comes to technically necessary cookies, we will process your personal data since many functions and services of our website that facilitate the use of the website for you or that are essential to make its use even possible will not work properly in the absence of using cookies (“technically necessary cookies”).
In these technically necessary cookies, we store, in some cases, personal data of yours that will, however, only be used to use these functions and services. Any other processing of your personal data shall not occur.
A list of the technically necessary cookies we use, as well as their purpose, retention period and other information is available at: <cookie banner>
The following personal data will be processed in conjunction with the use of technically necessary cookies:
Legitimate interest, § 25 Sect. 2 TTDSG in combination with Art. 6 Sect. 1 S. 1 lit. f) EU GDPR.
The purpose of this data processing is the provision of the website functions and services.
The purpose simultaneously establishes our legitimate interest.
As a rule, for the duration of the respective session, unless otherwise specified in the list of the technically necessary cookies we use.
Technically necessary cookies will be stored on your PC or mobile device and will be sent by the former to our website. Hence, you are in complete control over the use of technically necessary cookies.
You have the option to deactivate or restrict the transmission of cookies by changing your browser settings. Cookies that have already been stored can be deleted by you at any time. This may also be done automatically. If cookies for our website are deactivated, you may no longer be able to fully use the functions of our website.
If cookies that are not technically necessary should be used in conjunction with the use of our functions and services on our website, you will find a list of these cookies, their purpose, retention period and other information here: <cookie banner>
To display video content, we integrate YouTube videos into our website. As a result, we are in a position to show content we would like to present for your use in an attractive, uniform and device independent manner on our website. YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
In conjunction with the integration of YouTube videos, the following personal data will be processed:
When you play the video, additional personal data may be processed by YouTube. Related information is available at https://policies.google.com/privacy?hl=de#whycollect
Consent, Art. 6 Sect. 1 S. 1 lit. a) EU GDPR.
The purpose of processing this data is to integrate video content in an attractive, uniform and device independent manner.
We will process your personal data only until you complete your visit to our website (expanded data protection mode). We do not have any control over the deletion of your personal data from YouTube. More information is available at https://policies.google.com/privacy?hl=de&gl=de#inforetaining
You have the option to revoke your consent at any time. You can exercise this revocation option in particular by closing the application and/or by reloading the website.
We do not have any control over the deletion of your personal data from YouTube. More information can be reviewed at https://policies.google.com/privacy?hl=de
The following personal data will be processed along with the contact form and any interactions via email:
Legitimate interest, Art. 6 Sect. 1 S. 1 lit. f) EU GDPR.
The data processing purpose is the processing of your inquiry.
Your personal data will be stored until the respective purpose no longer exists. As a rule, this will happen as soon as your inquiry is processed, unless longer retention periods are in effect.
You may object to the processing of your personal data in conjunction with the initiation of contacts at any time, which will affect any future transactions. However, in this case, we will not be able to continue to process your inquiry. All personal data that has been stored over the course of the initiation of contact will be deleted in this instance, unless the statutory retention periods are in conflict with the deletion of your data. In this case, your personal data will be blocked until the statutory retention periods have expired.
1. Description and scope
In conjunction with the management of the rights of data subjects, we will process your personal data. To that end, we will process any contact information you have shared in this context only to process and respond to your message and to subsequently document that the processing was in compliance with the applicable laws within the scope of our accountability obligations.
The following personal data will be processed in conjunction with the management of data subject rights:
2. Legel basis
Legal obligation, Art. 6 Sect. 1 S. 1 lit. c) in combination with Art. 12 et seq. EU GDPR.
Legitimate interest in the subsequent documentation, Art. 6 Sect. 1 S. 1 lit. f) EU GDPR.
3. Purpose
Managing your data subject rights in compliance with the law.
4. Retention period
Data must be archived for 3 years after the processing of the respective transaction has concluded, § 41 BDSG in combination with § 31 Sect. 2 Nr. 1 OWIG.
5. Objection and removal option
You have the option to object to the processing of your personal data in conjunction with the management of your data subject rights, which will affect all future transactions. However, in this case we will not be able to further manage your data subject rights.
The documentation of the compliant handling of your rights as the data subject is mandatory. Consequently, you do not have the option to object.
1. Description and scope
Your personal data will be processed by us if you file legal claims targeting us or if we file claims and enforce rights targeting you.
2. Legal basis
Legitimate interest, Art. 6 Sect. 1 S. 1 lit. f) EU GDPR.
3. Purpose
The data processing purpose is to raise a defense against illegitimate claims and the legal enforcement of claims and rights.
This also constitutes our legitimate interest.
4. Retention period
Your personal data will be stored until the processing purpose no longer exists. As a rule, this will be the case once the respective ruling becomes legally effective.
5. Objection and removal option
The processing of your personal data within the scope of the legal defense and enforcement of the law is mandatory for us to ensure that we raise a legal defense or can enforce the applicable laws. Hence, you do not have any option to object.
We will process your personal data in conjunction with the operation of our LinkedIn Page to reach out to and interact with users and visitors of the social network “LinkedIn”. We will also publish information about our company on this channel.
In the event that you directly interact with our LinkedIn Page (e.g., by sending us a message) we will process the data you have shared with us only for the recording and the submission of a response to your enquiry.
Moreover, we can generate statistics on LinkedIn Page visits. This information will be compiled by LinkedIn (“Page Insights”) and enables us to approach the marketing of our activities more effectively and in a more targeted manner.
For LinkedIn Page Insights data, we and LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, are jointly responsible for the processing of data. For this purpose, we have executive a contract with LinkedIn Ireland Unlimited Company to define which of the two companies will process which obligations pursuant to the EU GDPR.
The most significant content of this contract can be reviewed at https://legal.linkedin.com/pages-joint-controller-addendum
Information on the data LinkedIn uses to conduct usage analyses related to our LinkedIn Page and which information LinkedIn provides for the purpose of data processing linked to the Page Insights function is available here https://www.linkedin.com/help/linkedin/answer/a547077/linkedin-page-analytics-overview?lang=de
For more information on the processing of your personal data by LinkedIn Ireland Unlimited Company, please visit https://de.linkedin.com/legal/privacy-policy
Legitimate interest, Art. 6 Sect. 1 S. 1 lit. f) EU GDPR.
The data processing purpose is the analysis of our achievements with our LinkedIn Page as well as the organization of our LinkedIn Page with the aim of matching your interests and processing enquiries.
Information about the retention period of your personal data with LinkedIn Ireland Unlimited Company is available at https://www.linkedin.com/legal/privacy-policy
If you do not want your personal data to be collected in conjunction with the operation of our LinkedIn Page, you have the option to object at any time to the processing of your personal data within the scope of the operation of our LinkedIn Page, which will subsequently apply to all future operations. In this case, we will forward your revocation request to LinkedInIreland Unlimited.
Information concerning the processing of your personal data by LinkedIn can be reviewed at https://de.linkedin.com/legal/privacy-policy
On our website, we publish job vacancies at our company. By submitting your application via email, we will process the personal data you provide to us in conjunction with your application during the selection process.
Consent, Art. 6 Sect. 1 S. 1 lit. a) EU GDPR, Art. 88 Sect. 1 EU GDPR in combination with § 26 Sect. 2 BDSG, or
When processing special categories of personal data: Consent, Art. 9 Sect. 2 lit. a) EU GDPR.
Establishment of an employment relationship, Art. 6 Sect. 1 S. 1 lit. b) EU GDPR, Art. 88 Sect. 1 EU GDPR in combination with § 26 Sect. 1 BDSG.
The purpose of data processing is the completion of the application process and the initiation of an employment relationship.
Your personal data will be deleted or blocked as soon as the processing purpose no longer exists.
If we do not enter into an employment contract with you upon completion of the application process, we will store your data – in a manner that protects it from any other access – for a period of up to 6 months after the conclusion of the application process in order to meet the burden of proof we have with regard to the prevention of discrimination, §§ 21 Sect. 5, 22 AGG (Allgemeines Gleichbehandlungsgesetz = German General Equal Treatment Act).
If we conclude an employment contract with you upon termination of the application process and thus establish an employment relationship with you, we will store the personal data you have provided in conjunction with the application process until the employment relationship is terminated.
Your personal data may be stored for an extended period of time if this is mandated by European or German legislation, European Union provisions, laws or other mandates we are subject to.
While the application process is ongoing, you have the option to revoke your consent at any time. In this case, your personal data will be deleted. However, once it has been deleted, we will no longer be able to consider your application.
If we conclude an employment contract with you and thus establish an employment relationship, the processing of your personal data will be absolutely mandatory in order to fulfill the employment contract. Consequently, you do not have the option to object to this processing of your data.
Within our company, we will share your personal data with those positions and departments that need them for all the above-mentioned purposes. In addition, we will, in some cases, use the services of different providers and will share your personal data with these other trustworthy recipients. These may, for instance, include the following:
In conjunction with the processing of your personal data, it is possible that we share your personal data with trustworthy service providers in non-EU and non-EEA countries. These countries are nations that are not within the European Union (EU) or the European Economic Area (EEA).
In this context, we cooperate only with such service providers who are in a position to give us qualified guarantees aiming at the protection of your personal data and who are in a position to warrant that your personal data will be processed in compliance with the stringent European Data Protection Standards. A copy of these qualified guarantees may be reviewed at our business.
If we share any personal data with recipients in non-EU and non-EEA countries, this will be done on the basis of a so-called adequacy decision of the European Commission, or, if such a decision is not available, on the basis of so-called standard contractual clauses, which also have been passed by the European Commission.
You are entitled to the following rights you may exercise in your relationship with us:
You have the right to receive information as to whether and which personal data of yours we process. In this case, we will provide additional information on
You are entitled to have your data corrected and/or completed if the personal data processed by us is incorrect or incomplete.
You are entitled to the restriction of the processing of your data if
You are entitled to having your data deleted if
If you have exercised your right to have data corrected, deleted or restricted in terms of processing, we will notify all recipients of your personal data, to correct, delete or restrict the processing of such data.
You have the right to receive any personal data you have provided to us based on consent or to perform a contract in a structured, commonly used and machine-readable format and to have same transferred to another data controller. If this is technically feasible, you have the right to instruct us to send this data directly to another data controller.
In the event that special grounds apply, you have the right to object to the processing of your personal data. In this case, we will no longer process your personal data, unless we are in a position to raise mandatory protection worthy grounds for continued processing.
If your personal data is being processed for the purpose of direct marketing you do, at any time, have the option to object.
You have the right to revoke any consent you have given us at any time. The revocation of consent does not affect the legitimacy of any prior processing on the basis of consent.
Any other administrative or court enforced legal remedies notwithstanding, you shall have the right to file a complaint with the competent supervisory authority, if you are of the opinion that the processing of your personal data by us is in violation of the EU GDPR.
The competent supervisory authority for our company is:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22
20459 Hamburg
Tel.: 040 / 428 58 – 4040
Email: mailbox@datenschutz.hamburg.de
