§1 Privacy Provisions

Seaports of Niedersachsen GmbH, hereafter abbreviated as SEAPORTS, welcomes you to this website. When you visit our website, certain data may be collected that we would like to inform you about hereafter.We process any personal data collected during a visit of our website in observance of the applicable data protection regulations.

§2 Data Controller

Seaports of Niedersachsen GmbH
Hindenburgstraße 28
26122 Oldenburg

+49 (0)441 361 888-8
+49 (0)441 361 888-89

info@seaports.de

Represented by the Managing Directors:

André Heim
Felix Jahn

§3 Data Protection Officer

Name: (intern/extern)

Anschrift:

Telefon:

E-Mail:

Fax:

PROCESSING OF YOUR PERSONAL DATA

§4 Data Collection and Processing on Each Visit to Our Website

You may generally use our website without divulging any of your personal data. Every time our website is visited,the following information (access data) is captured and saved on our provider’s server until automated deletion:

IP address of the requesting computer or device, date and time of access, name and URL of the retrieved data, the website, from which the access was made, name of the Internet service provider, the amount of transferred data, message, if the retrieval was successful, identifying data of the utilized browser and operating system.

These data are stored in such a manner that a direct correlation with a person cannot be made. After termination of the connection, these data are deleted or anonymized. These data are collected for technical reasons and do not correlate to any person. They are utilized exclusively for statistical purposes and to improve our offering, without reference to any person or user. The legal basis for a temporary storage of the data is the legitimate interest pursuant to article 6, sec. 1, letter f of the GDPR, so that we can even offer our website.

§5 Matomo

We use Matomo (formerly Piwik) for web analysis, a service provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, NZBN 6106769, (“Matomo”) using cookie technology. The protection of your data is important to us, which is why we have also configured Matomo in such a way that your IP address is only recorded in abbreviated form. We therefore process your personal usage data anonymously. It is not possible for us to draw any conclusions about your person. Further information on the Matomo terms of use and the data protection regulations can be found at: https://matomo.org/privacy/ https://matomo.org/privacy/

§6 Obligation to Provide Data

It is generally up to you, if you want to provide us with personal data on this site, and you are generally neither obligated to so by law, nor on a contractual basis. In case you are, as an exemption/on a rare occasion, be statutorily or contractually obligated to do so, we will inform you about it in regard to the respective data processing through special correspondence.

There are generally no disadvantages for you, if you do not share your personal data with us. The same applies, when you deny data collection through cookies. However, it is possible in this case that not all functionality of the website is completely available to you. When you are trying to contact our company, we may need your data at least to such extent that you want to use such functionality (please find additional information regarding this in the respective subsections of this Privacy Policy).

§7 Contact

When you send us inquiries by e-mail, your message must include your first and last name, your e-mail address, and a subject line. When you contact us by phone, you must – together with your request or concern – also state your first and last names and you phone number. In addition, the date and time of your contact inquiry will be stored.

PURPOSE OF THE DATA PROCESSING:

The data provided by you help us to answer your inquiry, and in case that there are follow-up questions.

LEGAL BASIS:

Data processing occurs upon contacting us by phone and upon contact inquiry by e-mail on the basis of article 6, sec. 1, letter f of the GDPR, namely in our legitimate interest in being able to reply to your e-mail, or to call you back to clarify your issue and answer your inquiry, if need be. If your inquiry is aimed at the conclusion of a contract, then article 6, sec. 1, letter b of the GDPR will serve as additional legal basis for data processing.

DURATION OF STORAGE:

The data transmitted to us will be stored for the duration of the communication with you. After the final conclusion of the communication, the data are deleted, unless statutory retention periods exist.

RECIPIENT OR CATEGORY OF RECEPIENTS:

Your message is transmitted via and stored at the e-mail provider we use. To safeguard your rights, we have concluded a data processing contract with the recipient.

TRANSMISSION TO A THIRD COUNTRY OR TO AN INTERNATIONAL ORGANIZATION:

We will not transmit the personal data supplied by you within the scope of using the contact form to a third country or to an international organization.

§8 Cookies

For the improvement of our website, we deploy so-called “cookies”. Cookies are text information files that are stored locally on your computer by your web browser when you access our website. Many cookies contain an identification number that helps us assign the cookie to your exact Internet browser. This way, we are able to distinguish you and your browser from others.

Cookies are divided into so-called transient cookies and persistent cookies:

• Temporary/transient cookies, which includes among other things the session cookies, are automatically deleted when you close your browser. During their lifespan, session cookies will store a so-called session ID. This allows various queries of your browser to be matched up with the session, and your computer or device can be recognized, once you return to the website.
• Persistent cookies, on the other hand, are automatically deleted after a specified time. The storage duration depends on the cookie itself. In addition, deletion of these persistent cookies can also be accomplished by you via the security settings of your browser.

PURPOSE OF THE DATA PROCESSING:

We deploy the following cookies on our website:

Technically necessary cookies

• Log-In Information
• Cookies that help display the correct site/page
• Cookies that indicate if additional cookies are permitted

Technically non-necessary cookies

• Borlabs cookies that can automatically recognize and block iFrames from YouTube and Google Maps and only load the contents after a click from the user.

The use of the data gained through the cookies occurs only for the purposes of better functionality and user-friendliness of our site.

LEGAL BASIS:

Legal basis for the processing of the personal data collected by the cookies is our legitimate interest pursuant to article 6, sec. 1, letter f of the GDPR. In this case, our legitimate interest is vested in the user-friendly and attractive design of our website.

DURATION OF STORAGE:

The session cookies we use are deleted as soon as you have left our site. The persistent cookies we use are automatically deleted after a specified duration that may vary from cookie to cookie. You can delete cookies from your browser settings at any time.

RIGHT TO OBJECTION:

You may object to the collection of data through cookies on our website at any time. You can adjust the settings of your browser in such way that it informs you of the placement of cookies, and then you can decide about the acceptance on a case-by-case basis, about the acceptance of cookies in general, or for specific instances. You may also delete stored cookies at any time. You can find instructions on how to accomplish this for your individual browser under:

• For Google Chrome: https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDesktop&hl=de
• For Mozilla Firefox: https://support.mozilla.org/de/kb/Cookies-blockieren
• For Microsoft Internet Explorer / Edge: https://support.microsoft.com/de-de/topic/l%C3%B6schen-undverwalten-von-cookies-168dab11-0753-043d-7c16-ede5947fc64d
• For Apple Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
• For Opera: https://help.opera.com/de/faq/#history

or on the respective relevant support page of your Internet browser.

§ 9 Microsoft Forms
Im Rahmen unserer Veranstaltungen und Firmenevents sowie zum Zwecke der Anmeldung zu solchen nutzen wir das Tool Microsoft Forms. Microsoft Forms ist ein Tool, welches zur Erstellung und Auswertung von Umfragen genutzt werden kann. Es wird im Rahmen des von Seaports verwendeten Softwarepakets Microsoft 365 zur Verfügung gestellt wird und ist ein Dienst der Microsoft Ireland Oprerations Limited, South County Business Park, Leopardstown, Dublin 18, Irland.
Durch die Verwendung von Microsoft Forms ist es uns möglich, Evaluierungen von Veranstaltungen sowie Anmeldungen zu Veranstaltungen und Events zu ermöglichen. Die Evaluierung dient uns, das Angebot stetig zu verbessern. Als Verwendung zur Anmeldung von Veranstaltung bietet das Tool die Möglichkeit,
dass Termine besser gefunden und Anmeldungen einfacher durchgeführt werden können. Außerdem können wir dadurch eine Teilnehmerzahl ermitteln und das Event entsprechend planen.
Im Zuge der Nutzung von „Microsoft Forms“ werden verschiedene
personenbezogene Daten verarbeitet. Folgende personenbezogene Daten werden im Zusammenhang mit Umfragen sowie der Option der Anmeldungsabfrage verarbeitet:
– Anrede
– Name, Vorname
– Unternehmen
– E-Mailadresse
– Datum und Uhrzeit der Öffnung des Fragebogens
– Datum und Uhrzeit der Absendung der Antwort
– Abgegebene Antwort, bspw. Teilnahmezu- oder -absage

Wenn Sie an einer anonymen Umfrage teilnehmen, werden neben Ihrer Antwort keine auf Ihre Identität zurückführbare Daten verarbeitet.

PURPOSE OF THE DATA PROCESSING:
Die Verwendung von Microsoft Forms dient der Durchführung von Umfragen und Anmeldung zu Firmenveranstaltungen, sowie deren Auswertung und damit einhergehende Planung und Verbesserung von Veranstaltungen.

LEGAL BASIS:
Die Teilnahme an unseren Umfragen ist grundsätzlich freiwillig.
Bei der Teilnahme an der Umfrage wird durch Sie die Einwilligung in die Einwilligung erteilt. Demnach ist die Rechtsgrundlage für die Verwendung von Microsoft Forms Art. 6 Abs. 1 lit. a DSGVO.
Soweit es sich um Umfragen im Rahmen des Beschäftigungsverhältnisses handelt und die Umfrage für die Durchführung des Beschäftigungsverhältnisses erforderlich
ist, ergibt sich die Rechtsgrundlage zudem aus § 26 BDSG.
Erfolgt die Umfrage zur Anbahnung und/oder Erfüllung von Verträgen liegt als Rechtsgrundlage Art. 6 Abs. 1lit. b DSGVO vor.
Auch außerhalb einer Vertragsbeziehung erfolgen die Umfragen zum Teil zur Wahrung unserer berechtigten Interessen an einer effektiven Planung und Durchführung von Projekten und Prozessen, sodass als Rechtsgrundlage Art. 6 Abs. 1 lit. f DSGVO in Betracht kommt.

DURATION OF STORAGE:
Die Daten aus den mittels Microsoft Forms abgefragten Umfragen werden in der Microsoft Cloud gespeichert und von dort durch uns abgerufen. Die Angaben werden binnen eines Jahres nach dem Wegfall des Zwecks gelöscht, soweit keine betriebliche Notwendigkeit, gesetzliche Verpflichtung oder ein besonderes betriebliches Interesse an einer dauerhaften Speicherung besteht.
Bei der Teilnahme an Veranstaltungen erfolgt die Löschung der
personenbezogenen Daten unmittelbar nach Zweckerfüllung, sofern die personenbezogenen Daten nicht zu Abrechnungszwecken benötigt werden oder gesetzliche Aufbewahrungspflichten bestehen.

RECIPIENT OR CATEGORY OF RECEPIENTS:
Wir und unsere Mitarbeiter haben Zugang zu Microsoft Forms und können Umfragen direkt erstellen und verteilen. Wir sind auch die alleinigen Empfänger der Antworten. Die Antworten werden durch das Tool in Microsoft Forms grafisch dargestellt, um eine Auswertung vornehmen zu können. Diese Daten sind nur für
uns verfügbar. Microsoft ist Auftragsverarbeiter und kann als solcher Kenntnis von den erlangten Daten erhalten. Microsoft ist für die Datenverarbeitung auf deren Websites sowie bzw. durch Microsoft Forms verantwortlich. Für die Erbringung des Dienstes
Microsoft Forms werden von Microsoft auf der Umfrageseite Cookies eingesetzt.
Weitere Informationen zum Datenschutz bei Microsoft unter
https://privacy.microsoft.com/de-de/privacystatement.

TRANSMISSION TO A THIRD COUNTRY OR TO AN INTERNATIONAL ORGANIZATION:
Die Verarbeitung der erlangten personenbezogenen Daten von Nutzern aus der Europäischen Union erfolgt in Rechenzentren innerhalb des Europäischen Wirtschaftsraumes (EWR). Für die Erbringung des Dienstes von Microsoft Forms oder auch im Rahmen des Supportangebots kann es erforderlich sein, dass die
erlangten personenbezogenen Daten am Hauptsitz von Microsoft Inc. in den USA verarbeitet werden. Hierzu haben wir mit Microsoft einen Auftragsverarbeitungsvertrag geschlossen, der im Rahmen der „Online-Service-Terms“ (OST) vereinbart wurde. Der Auftragsverarbeitungsvertrag entspricht den Anforderungen von Art. 28 DSGVO und zudem haben wir die EU Standardvertragsklauseln für die Datenübermittlungen in Drittländer vertraglich vereinbart. Durch diese EU-Standardvertragsklauseln (SCC) kann eine Garantie für
ein angemessenes EU-Datenschutzniveau im Sinne von Art. 46 Abs. 2 lit. c DSGVO gegeben werden. Wir möchten darauf hinweisen, dass die USA derzeit nach der ständigen Rechtsprechung des EuGH kein sicheres Drittland im Sinne der DSGVO darstellen. Dies liegt vor allem daran, dass in den US-Dienstleister entsprechend der nationalen Überwachungsgesetze verpflichtet werden können, personenbezogene Daten an Sicherheitsbehörden herauszugeben, ohne dass dem Betroffenen die Möglichkeit gegeben wird, einen Rechtsbehelf hiergegen einzulegen. Somit können wir nicht ausschließen, dass US-Behörden, wie Geheimdienste, Ihre auf Servern von Microsoft in den USA befindlichen Daten zu Überwachungszwecken verarbeiten, auswerten und dauerhaft speichern werden. Auf solche Verarbeitungstätigkeiten haben wir keinen Einfluss.
Zur Wahrung des EU-Datenschutzes hat Microsoft zusätzliche technische und organisatorische Maßnahmen (TOM) zum Schutz Ihrer personenbezogenen Daten ergriffen. So werden insbesondere die personenbezogenen Daten, die über Microsoft Forms erlangt werden, nur verschlüsselt übertragen. Zudem hat sich Microsoft verpflichtet, die Herausgabe von personenbezogenen Daten an US Behörden soweit wie möglich gerichtlich abzuwehren. Somit kann grundsätzlich von einem angemessenen Schutzniveau bei der Verarbeitung personenbezogener Daten durch Microsoft ausgegangen werden.

§10 Google Maps

This website uses Google Maps, a map service of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) for the display of an interactive map.

By embedding Google Maps, no data are stored or processed by the Data Controller of this website. Google Maps is embedded as its own site of Google within our website (= iFrame).

Upon each access of the website, a direct connection between your browser and one of Google’s servers in the USA is established. During the access, information about your visit and your IP address are collected there and stored, without first coming to us.

Through the use of Google Maps, information about your usage of this website (including your IP address) can be transmitted to one of Google’s servers in the USA and stored there.

Google has undertaken to comply with the Privacy Shield Framework between the EU and the USA that is published by the US Ministry of Trade and covers the collection, use, and storage of personal data from the member states of the EU and accordingly, Google provides a Privacy Shield Certificate.

PURPOSE OF THE DATA PROCESSING:

The use of Google Maps on this site pursues the purpose to offer you the opportunity to display our location with the help of the map service “Google Maps”.

LEGAL BASIS:

The implementation of Google Maps pursues our legitimate interest within the spirit of article 6, sec. 1, letter f of the GDPR. Our legitimate interest lies in our intention to design our website in a user-friendly fashion, by making your travel to our location easier and by making our location clearer.

RIGHT TO OBJECTION:

For additional information about the purpose and extent of the data collection by Google and information about the further processing and the storage duration of data and your rights in reference thereto, as well as (browser) setting options for the protection of your privacy, please refer to Google’s Privacy Policy: http://www.google.com/intl/de/+/policy/

Nähere Informationen über Zweck und Umfang der Datenerhebung durch Google und Informationen über die weitere Verarbeitung und die Speicherdauer der Daten sowie Ihre diesbezüglichen Rechte und Einstellungsmöglichkeiten zum Schutz Ihrer Privatsphäre entnehmen Sie bitte den Datenschutzhinweisen von Google: http://www.google.com/intl/de/+/policy/

§11 Google Fonts

Auf unserer Internetseite nutzen wir Google Web Fonts, ein Angebot der Google Inc., für den Europäischen Raum ist es Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Irland).
Durch die Einbindung von Web Fonts können Schriftarten einheitlich dargestellt werden. Die Schriften sind lokal auf unserer Website eingebunden, sodass bei Besuchen unserer Website keine Verbindung zu Google aufgebaut wird und keine
Daten an Google übermittelt werden.

PURPOSE OF THE DATA PROCESSING:
Die Einbindung der Web Fonts von Google erfolgt zum Zweck der einheitlichen Darstellung der Schriftarten auf dieser Website.

LEGAL BASIS:
Die Rechtsgrundlage für die Einbindung von Web Fonts stellt bei uns das berechtigte Interesse gem. Art. 6 Abs. 1 lit. f) DSGVO dar, Ihnen ein einheitliches Schriftbild auf unserer Internetseite präsentieren zu können, um dadurch die Attraktivität unserer Internetseite zu verbessern.
Es werden jedoch zu keiner Zeit diesbezüglich Daten von der verantwortlichen Stelle dieser Webseite verarbeitet.

§12 Social-Media Button

We use a social media button that is linked to the social network LinkedIn on our website. However, this does not transmit any data to the individual operator of the site, nor are personal data processed in any other way.

In order to afford you increased protection when you visit our website, this button is not unrestricted, but only embedded into the web page through the use of an HTML link. This embedding ensures that when you access a page of our website that contains such plugins, no connection to servers of the provider of such social network is established yet. When you click the button, a new window opens in your browser and calls up the website of the service provider, which allows you (potentially after input of your login credentials) to use the Like or Share button or gives you access to other functions of such service provider. You can find the purpose and scope of the data collection and the further processing and use of data by that service provider and your rights in reference thereto, as well as (browser) setting options for the protection of your privacy, on the service provider’s privacy policy:

• https://de.linkedin.com/legal/privacy-policy?trk=homepagebasic_footer-privacy-policy

§13 YouTube

This website contains contents of the video platform “YouTube”. YouTube is operated by YouTube LLC, 901 Cherry Ave. in San Bruno, CA 94066, USA. YouTube, in turn, is represented by Google LLC (“Google”), 1600 Amphitheatre Parkway in Mountain View, CA 94042, USA. Videos of YouTube are integrated into our website through the extended data protection mode. This means that none of your information is collected and stored by YouTube, unless you are playing the commensurate video. In that case, YouTube or Google will collect you IP address and capture the websites you visit. If you have your own YouTube account and you are logged in to that account, this will also be associated with your account. To this effect however, not data processing takes place by the data controller of this website. This occurs exclusively through the external operator of the video platform YouTube itself, as soon as you play the video in question.

In addition, the website features a button to the website YouTube. And even here, no data are transferred to the respective operator of the site, nor are personal data processed in any way. In order to afford you increased protection when you visit our website, this button is not unrestricted, but only embedded into the web page through the use of an HTML link. This embedding ensures that when you access a page of our website that contains such plugins, no connection to servers of the provider of YouTube is established yet. Once you click on the button, a new window opens in your browser and calls up the website of the service provider, where you (potentially after input of your login credentials) may then use the functions of such service provider. You can find additional information on the utilization of your personal data by YouTube on their corporate privacy policy:

• https://policies.google.com/privacy?hl=de

§14 Links zu Drittanbietern, E-Mail- Adressen und Telefonnummern von Drittanbietern

In the categories “Cargo”, “Locations” (Sites), “Career”, and “Events”, our website contains linked buttons that you can click. When you click these linked buttons, you will be forwarded to the websites of the respective company. These linked buttons do not serve the purpose of divulging your personal data from us to third parties, i.e., to those companies, whose website can be clicked. We would like to point out, however, that the provider of the commensurate website can or will potentially collect your personal data directly from you, as soon as you click one of the linked buttons. We encourage you to read the privacy policy of the respective provider of the commensurate website before clicking on the linked buttons, which will get you forwarded on to the websites of those companies.

In addition, our website also contains phone numbers and e-mail addresses or third-party companies within the referenced categories. When you use the e-mail addresses and phone numbers, SEAPORTS will not collect any personal data from you. Also, none of the data will be forwarded to the respective companies. However, when you send an e-mail or make a phone call, such company will directly collect your personal data. So please read the privacy policy of the respective company first, before writing to the provided e-mail or before making a phone call with the help of these provided phone numbers.

DATA SUBJECT RIGHTS

To Exercise the Rights You Have Vis-A-Vis Us, Please Contact Us Via:

[INFORMATION AS ABOVE UNDER § DATA CONTROLLER]

§15 Ihre Rechte als Betroffene/r

Concerning the personal data relating to you, you may exercise the following rights on us:

• The Right to Information pursuant to article 15 GDPR
• The Right to Correction and/or Completion of the data pursuant to article 16 GDPR
• The Right to Deletion of the personal data pursuant to article 17 GDPR
• The Right to Limitation of Processing pursuant to article 18 GDPR
• The Right to Data Portability pursuant to article 20 GDPR

In addition, you have the Right to Appeal before a data protection regulatory authority regarding the processing of your personal by us/at our company.

§16 Widerrufsrecht bei zuvor erteilter Einwilligung

If you had previously given us your consent for the processing of your data, you may revoke such consent at any time, without any influence on the legality of the processing that occurred up to the point of such revocation, based on the previously given consent.

§17 Widerspruchsrecht bei der Verarbeitung aufgrund berechtigter Interessen

In addition, you also have the right, for reasons arising from your special situation, to object at any time to the processing of personal data concerning you that occurs based on article 6, sec. 1, letters e or f; this even applies to profiling based on these regulations. In that case, we will seize to process those personal data, unless there are provable compelling reasons for the processing that need to be protected, which outweigh your interests, rights and freedoms, or if the processing is performed to assert, exercise or defend any legal rights/claims.

§18 Beschwerderecht bei der Aufsichtsbehörde

Pursuant to article 77 of the GDPR you also have the right to appeal before a regulatory authority, including, but not limited to one in the Member State of your place of residence, or in the place of the alleged violation, if you are of the opinion that the processing of the personal data concerning you violates the GDPR.

§19 Datensicherheit

We have put technical and organizational measures in place to protect your personal data against unlawful access, destruction, loss, and alteration by third parties.

§20 Änderungsvorbehalt

We reserve the right to amend or change this privacy policy at any time, effective henceforth. This may be necessary due to the ongoing development of our website or in compliance with the statutory regulations. We therefore advise you to re-read this privacy policy in regular intervals.

Stand: Februar 2023