Privacy Statement
1. Data Privacy Notice
We, HamburgerQuartiere GmbH, Stephansplatz 6, 20354 Hamburg, Germany, are the website operator and the controller responsible for processing personal data of website users. Our contact information is available in the imprint of the website, and contact persons available to answer questions related to the processing of personal data are listed directly in this Privacy Statement. We take the protection of your privacy and your private data very seriously.
We collect, store, and use your personal data only in accordance with the content of this Data Privacy Declaration as well as applicable data protection law regulations, in particular the European General Data Protection Regulation (GDPR) and national data protection provisions. The purpose of this Data Privacy Declaration is to inform you of the scope of personal data that is processed in conjunction with your use of the website, as well as the purposes of that processing.
2. General information
2.1 Personal data
Personal data is information about an identifiable or identified natural person. This includes all information related to your identity, such as your name, your e-mail address, or your mailing address. Information that cannot be associated with your identity – such as statistical information, for instance the number of website users – is not considered personal data.
You can generally use our website without disclosing your identity and without providing any personal data. In this case, we will only collect general information regarding your visit to our website. However, personal data will be collected from you in order to carry out some of the services we offer. We will then generally only process this data for the purpose of using this website, in particular to provide you with the desired information. When personal data is collected, only data that is absolutely necessary must be provided. You may have the opportunity to provide further information, but this will then be done on a voluntary basis. In each case, we will indicate whether the fields are mandatory or voluntary information. We will then provide further information on the concrete details in the relevant section of this Data Privacy Declaration.
No automated decision-making is carried out based on your personal data in conjunction with the use of our website.
2.2 Processing of personal data
We store your information on specially protected servers within the European Union. These are protected via technical and organisational measures against loss, destruction, access, modification, or processing of your personal data by unauthorised personnel. Access to your data is granted to only a few, authorised individuals. These individuals are responsible for technical, commercial, or editorial servicing of the servers. Despite regular controls, however, it is not possible to provide complete protection against all hazards.
Your personal data is transmitted over the internet in an encrypted format. We use SSL/TLS encrypted (SSL certificate) for data transmission.
2.3 Transmission of personal data to third parties
Generally, we use your personal data only in order to perform services that you request. If we use external service providers in order to provide our services, then they are likewise permitted to access the data only for the purpose of performing the services. We use technical and organisational measures to ensure compliance with data protection law regulations, and we likewise obligate our external service providers to take similar measures.
Furthermore, we do not transmit your data to third parties without your express consent, in particular not for advertising purposes. Your personal data is disclosed only if you have personally consented to this when you provide the data, or if we are entitled or obligated to disclose the data under the law and/or official or court order. This may include, in particular, providing information for the purposes of criminal prosecution, to avoid danger, or to exercise intellectual property rights.
If we transmit your personal data ourselves or via service providers to states outside of the European Union, we comply with the special provisions of Art. 44 et seqq. GDPR in doing so, and likewise obligate our service providers to comply with these regulations. Therefore, we will only transmit your data to states outside of the European Union if the level of protection granted under the GDPR can be ensured. This level of protection is ensured, in particular, through an adequacy decision of the EU Commission or suitable guarantees according to Art. 46 GDPR.
2.4 Legal bases of data processing
If we obtain consent for the processing of your personal data, then Art. 6 para. 1 lit. a) GDPR serves as the legal basis for data processing.
If we process your personal data because this is necessary to fulfil a contract or in the course of a relationship that is similar to a contract with you, then Art. 6 para. 1 lit. b) GDPR serves as the legal basis for data processing.
If we process your personal data in order to fulfil a legal obligation, Art. 6 para. 1 lit. c) GDPR serves as the legal basis for data processing.
Furthermore, Art. 6 para. 1 lit. f) GDPR can serve as the legal basis for data processing if the processing of your personal data is necessary in order to safeguard a legitimate interest of our company or that of a third party, and if your interests, basic rights and basic freedoms do not require that the personal data be protected.
In the course of this Data Privacy Declaration, we will always note the legal basis for the processing of your personal data.
2.5 Data deletion and storage term
In general, we always delete or block your personal data when the purpose for which it was stored no longer applies. However, data may continue to be stored if this is provided under laws to which we are subject, for instance with respect to statutory retention and documentary obligations. In such cases, we will delete or block your personal data after the end of relevant regulated terms.
3 Use of our website
3.1 Information about your computer
Each time you access our website, we collect the following information about your computer, regardless of whether you are registered or not: the IP address of your computer, your browser request, and the time of this request. In addition, the status and quantity of data transmitted will be collected as part of this request. We also collect product and version information on the browser and operating system used on your computer. Furthermore, we collect information on the website from which you accessed our website. The IP address of your computer is stored only while you are using the website, and then deleted or truncated in order to anonymise it. The other data is stored for 12 months.
We use this data in order to operate our website, in particular to identify and remove errors, in order to assess usage rates for the website and to make adjustments or improvements. We have a legitimate interest to process data for these purposes in the sense of Art. 6 para. 1 lit. f) GDPR.
3.2 Use of cookies
Like many other websites, our website uses cookies. Cookies are small text files stored on your computer that save certain settings as well as data regarding the exchange with our website via your browser. A cookie generally contains the name of the domain from which the cookie file was sent, as well as information on the age of the cookie and an alphanumeric identification code.
Cookies allow us to recognise your computer and make any default settings available immediately. The cookies we use are so-called session cookies whenever possible. These are deleted automatically after the end of the browser session. In some cases, cookies with a longer storage term may be used so that your default settings and preferences can be taken into consideration the next time you visit our website.
Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser so that you are notified once cookies are sent. It is also possible to manually delete previously stored cookies via your browser settings. Please note that, in some circumstances, you may only be able to use our website on a restricted basis, or may not be able to use it at all if you reject the storage of cookies or delete necessary cookies.
If cookies are not necessary for our website, we will ask you to consent to the use of cookies the first time you access the site. With respect to non-necessary cookies from third-party providers, the following section provides a more complete description of the services of these third-party providers that we use. The legal basis for the associated data processing, including any data transmission, is your consent in each case in the sense of Art. 6 para. 1 lit. a) GDPR. Once you have granted your consent, it may be revoked at any time with future effect, in particular through changing your selected settings.
The legal basis for using necessary cookies is our legitimate interest in properly providing our website in the sense of Art. 6 para. 1 lit. f) GDPR, as well as performing a contract – if contracts are concluded or performed via our website – in the sense of Art. 6 para. 1 lit. b) GDPR.
4 Integration of services from third-party providers
We use the services of third-party providers to provide some functions of our website. These services are primarily optional functions which you must explicitly accept or use. We have concluded contractual agreements for the provision or integration of services with these providers, and we do everything within our power to ensure that the third-party providers give transparent information regarding the scope of personal data that is processed, and that they comply with data protection law regulations.
4.1 Retargeting and remarketing
Retargeting and remarketing are technologies which make it possible to display relevant advertisements to users who have previously visited a certain website even after they leave the website. To do so, it is necessary to continue recognising the web users beyond our own website; cookies from a relevant service provider are used for this purpose, and the previous usage relationship is also taken into consideration. If a user views certain products, for instance, this product or similar products can then be shown to them as an advertisement on other websites. These are personalised advertisements adapted to the needs of individual users. It is not necessary for the user to be identified beyond the recognition function in order to display these personalised advertisements. Because of this, we do not combine the data used for retargeting or remarketing with any other data.
We use such technologies to display advertisements online. We use third-party service providers to display the advertisements. We use the services of Google and Facebook, among others, which allow us to automatically display products of interest to the website user. These functions are implemented using cookies. It is possible that data may be transmitted to the USA during this process, and that US security authorities may gain access to the relevant data.
Should we use cookies for the aforementioned purpose, this will only be done on the basis of your consent and thus on the legal basis of Art. 1 para. 1 lit. a) GDPR.
4.2 YouTube
YouTube videos are integrated into our website; we use a plug-in from the service YouTube (hereinafter referred to as: “YouTube”) operated by Google in order to play these videos. The operator of the service is Google.
We use the YouTube service in extended data protection mode, in order to provide as much protection for your privacy as possible. When you access a page of our website on which a YouTube video is integrated, Google initially receives only the information necessary to complete the integration, and no cookies are set to analyse usage behaviour. Google only receives further information if you play the integrated video; Google may also set cookies to analyse your user behaviour in this context. This data processing by Google is technically necessary to play YouTube videos, and is specified by YouTube. We have no influence over this data processing, and we recommend taking this into consideration when you play a YouTube video on our website. When videos are played, for instance, Google’s YouTube servers are informed of the page of our website from which you are playing the video.
If you are logged into your Google account, you allow Google or YouTube to directly associate your surfing behaviour with your personal Google profile. Therefore, we recommend only playing integrated YouTube videos if you consent to have the associated data processing carried out by Google. You can prevent the data from being associated with your Google profile by logging out of your YouTube account. Further information on how user data is handled is available in the Google Data Privacy Declaration at https://www.google.de/intl/de/policies/privacy/, which also applies to YouTube.
We use YouTube to show you videos and thereby to better inform you about us and our services. The legal basis for integrating the videos is our legitimate interest in the sense of Art. 6 para. 1 lit. f) GDPR; videos are played and further data processing is carried out, however, only based on your consent in the sense of Art. 6 para. 1 lit. a) GDPR.
5 Applicant portal
You can apply to work with us and submit all necessary information and documents via the applicant portal. Use of the applicant portal is voluntary; you can also send your application to us in another way, for instance via e-mail or regular mail.
If the application is received via the applicant portal, your documents will be transmitted electronically to the responsible employees. If you have applied to an advertised position, your documents will be stored automatically for three months after the conclusion of the hiring process, as long as there are no other legitimate interests that would interfere with the deletion. Such legitimate interests in this sense include, for instance, verification obligations in proceedings under the General Equal Treatment Act (Allgemeinen Gleichbehandlungsgesetz (AGG)). If you submit an application that does not refer to an advertised position (prospective application), your application will be stored for as long as it could still be potentially of interest to the company. You may request that your application be deleted at any time before the end of the intended retention period. If your application is successful, the data you have provided will be stored for the purpose of carrying out the employment relationship, in accordance with applicable legal regulations. In all other cases, the legal basis for storing your applicant data is your consent according to Art. 6 para. 1 lit. a) GDPR.
6 Communication with us
You can contact us in various ways. In particular, you can contact us by e-mail. If you send us an e-mail, we collect the personal data you provide in the e-mail, in particular your name and e-mail address. We also store the IP address and the date and time of the enquiry. We process this data solely for the purpose of responding to your enquiry or request.
You can decide for yourself what information you send us in this respect. The legal basis for the processing of your data is your consent in accordance with Art. 6 Para. 1 lit. a) DSGVO.
After we have processed the matter, the data will initially be stored in case of any queries. Deletion of the data can be requested at any time, otherwise we will delete the data after the matter has been fully dealt with; statutory retention obligations remain unaffected in each case.
7 Social media
In addition to our online offer, we also use the social media channel LinkedIn for the transmission of information and communication, to which you will find links in our online offer or in which you will find links to our online offer. You can recognise the links by the provider’s logo.
Clicking on the links opens the corresponding social media page of LinkedIn, for which this data protection declaration does not apply. For the provisions and data protection regulations applicable in this respect, please refer to the corresponding data protection declaration of the provider; you will find this at:
No personal information is transmitted to the provider before the corresponding links are called up. Your access to the linked page is at the same time the basis for the data processing by the provider of LinkedIn.
8 Your rights and contact
We work to provide you with the most transparent explanations possible on how your personal data is processed and on the rights to which you are entitled. If you would like further information or would like to exercise your rights, you can contact us at any time so that we can respond to your request.
8.1 Rights of data subjects
You have a wide range of rights with respect to the processing of your personal data. Firstly, you have a comprehensive right to receive information, and you can also request the rectification and/or deletion or blockage of your personal data. You can also request that processing be restricted, and you have the right to object to processing as well. You also have a right to data portability with respect to the personal data you transmit to us.
If you would like to assert one of your rights and/or receive further information on these rights, please contact our customer service. Alternatively, you can also contact our Data Protection Officer.
8.2 Revocation of consent and objection
Once you have granted your consent, you are free to revoke it at any time with future effect. If you revoke your consent, this will not affect the legality of processing carried out based on the consent up to that point. Our customer service and Data Protection Officer also serve as your contact persons for doing so.
If your personal data is processed not based on your consent, but on another legal basis, you can object to this data processing. Your objection will result in the data processing being reviewed and ended if necessary. You will be informed of the results of the review, and will receive further information from us on why the data processing is permitted, if we intend to continue data processing.
8.3 Data Protection Officer and contact information
We have appointed an external Data Protection Officer to support us on data protection law matters; you can contact the Officer directly. If you have questions related to how we handle personal data or need further information on data protection law matters, our Data Protection Officer and their team will be happy to assist you:
Dr. Sebastian Meyer, LL.M.
BRANDI Rechtsanwälte Partnerschaft mbB
Adenauerplatz 1
33602 Bielefeld
Tel. +49 521 96535-812
Mail: sebastian.meyer@brandi.net
8.4 Complaints
If you believe that our processing of your personal data is in violation of this Data Privacy Declaration or the applicable data protection provisions, then you have the right to submit a complaint to the supervisory authority. You can also submit a complaint to our Data Protection Officer. The Data Protection Officer will then review the matter and inform you of the results of the review.
9 Further information and changes
9.1 Links to other websites
Our website may contain links to other websites. These links are generally marked as such. We have no influence over whether the linked websites conform to applicable data protection laws. Therefore, we recommend that you review the Data Privacy Declarations of other websites as well.
9.2 Amendments to this Data Privacy Declaration
The date (below) indicates the version of this Data Privacy Declaration. We reserve the right to amend this Data Privacy Declaration at any time with future effect. An amendment will be made, in particular, if we make technical changes to our website or if data protection law regulations change. The current version of the Data Privacy Declaration is always available directly via our website. We recommend that you regularly review the amendments to this Data Privacy Declaration.
Version date for this Data Privacy Declaration: 22.01.2025