DATA PROTECTION

Status: March 2021

These instructions provide you with an overview of the processing of your personal data by the responsible party and your rights as a data subject under data protection law. Which of your data is specifically processed and in what way depends on the services requested or agreed in each case. This information also applies to the current and future authorized representatives and beneficial owners and the possible contractually agreed contact persons of legal entities. We ask you to pass this information on to these persons.

1. Who is responsible for data processing?

Responsible in terms of data protection law is:

HSC Nord GmbH
Heideweg 18
21220 Seevetal

Maik Bergmann (Managing Director)
Telephone: +49 40 22 616 35-0

If you have any questions about the processing procedures at the data controller or wish to assert your rights under data protection law, please address your request to the aforementioned address.
You can reach the data protection officer of HSC Nord GmbH at the e-mail address: privacy@hsc-nord.de.

2. Which sources and data do we use?

We process personal data that we receive from our customers in the course of our business relationship. In addition, to the extent necessary for the provision of our services, we process personal data that we have permissibly received from other companies (e.g. for the fulfillment of contracts, for the execution of orders or on the basis of consent given by you). On the other hand, we process personal data from publicly accessible sources (e.g. press, media, Internet, etc.), insofar as we were permitted to collect such data or were legitimately provided with such data by third parties.

In our procedures, we process relevant personal data of natural persons of interested parties, customers and all other natural persons who are or come into contact with us directly or indirectly, so for example also of employees of legal entities, but also of visitors to our websites and apps and, if applicable, applicants.

Relevant personal data in this context are essentially: Name, address and other contact data, data from the fulfillment of our contractual obligations, documentation data, data on the use of our telemedia (websites and apps, newsletters) and other data comparable to the aforementioned categories. Processing within the meaning of the GDPR means, in principle, any operation related to personal data, i.e., in particular, the collection, storage, use, transmission or deletion of personal data.
Verarbeitung im Sinne der DSGVO bedeutet prinzipiell jeder Vorgang, der im Zusammenhang mit personenbezogenen Daten steht, also insbesondere das Erheben, Speichern, Nutzen, Übermitteln oder Löschen personenbezogener Daten.

3. For what and on what legal basis do we process your data?

We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG):

3.1 FOR THE FULFILLMENT OF CONTRACTUAL OBLIGATIONS (ART. 6 PARA. 1 LIT. B DSGVO).
The processing of personal data is carried out for the provision of services in the context of the performance of our contracts with our customers and our suppliers and service providers or for the performance of pre-contractual measures that take place at your request (e.g. from interested parties).

The purpose of the data processing depends specifically on the respective product and may include, among other things, needs analyses and consulting services. Further details on the purpose of data processing can be found in the respective contract documents and terms and conditions of use.

Der Zweck der Datenverarbeitung richtet sich konkret nach dem jeweiligen Produkt und kann unter anderem Bedarfsanalysen und Beratungsleistungen umfassen. Die weiteren Einzelheiten zum Zweck der Datenverarbeitung können sie den jeweiligen Vertragsunterlagen und Geschäfts- und Nutzungsbedingungen entnehmen.

3.2 WITHIN THE FRAMEWORK OF THE BALANCING OF INTERESTS (ART. 6 PARA. 1 LIT. F DSGVO)
We process data beyond the actual fulfillment of the contract to protect the legitimate interests of us or third parties, unless your interests in the protection of your personal data outweigh this (e.g. for direct advertising ).

3.3 BASED ON YOUR CONSENT (ART. 6 PARA. 1 LIT. A DSGVO).
Insofar as you have given us consent to process personal data for certain purposes (e.g. sharing of data in the group, evaluation of usage behavior), the lawfulness of the processing is based on your consent.
Consent given can be revoked at any time. This also applies to declarations of consent given to us before the DSGVO came into force, i.e. before 25 Mail 2018. The revocation of consent does not affect the lawfulness of the processing activities carried out by us until the revocation.

3.4 DUE TO LEGAL REQUIREMENTS (ART. 6 PARA. 1 LIT. C DSGVO).
Legal obligations arise for us directly from the law, in particular from tax law. The resulting storage obligations for invoice-related documents and commercial letters entitle us to store personal data for up to 10 years, or up to 30 years in the case of legally established claims, claims arising from enforceable settlements or enforceable documents, etc.

4. Who receives your data?

We will only disclose your data to third parties if the disclosure is necessary to fulfill our contractual and legal obligations. Thus, service providers and vicarious agents commissioned by us may also receive data for these purposes if they comply with data secrecy and the data protection instructions they have received from us.Further data recipients may be those bodies for which you have given us your consent to the transfer of data. In individual cases, there may be further recipients of your data due to the special nature of the subject matter of the contract with you. These are then named separately in the contract documents and the terms and conditions for the specific transaction.

4.1 Google Analytics

Our Internet pages use so-called cookies in several places. Cookies are small text files that are stored on your computer and saved by your browser. They serve to make our offer more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognize your browser and offer you services. Cookies do not contain any personal data.

This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link [ https://tools.google.com/dlpage/gaoptout?hl=de ].