Privacy policy

1. Controller

The controller responsible for data processing on this website is:

Hafenlogik Beratungsgesellschaft mbH Kanzlerstraße 18, 21079 Hamburg-Rönneburg, Germany Telephone: +49 40 5544 8210 Email: kontakt@hafenlogik.bizbrew.app

We have not appointed a data protection officer because the statutory thresholds in section 38 of the German Federal Data Protection Act do not apply to us. Please address data protection enquiries to the contact details above.

2. Hosting and server log files

This website is operated by a service provider in a data centre within the European Union. A data processing agreement pursuant to Art. 28 GDPR is in place with that provider.

When you access this website the server automatically records information in log files that your browser transmits: the address requested, the date and time of access, the volume of data transferred, the HTTP status code, the browser type and operating system used, and the IP address in truncated form. We cannot attribute this data to any particular user and we do not combine it with other data sources.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and trouble-free operation of the website. Log files are deleted after seven days.

3. Cookies and local storage

This website uses no analytics, advertising or tracking cookies. We embed no audience measurement tools and we build no usage profiles.

We store exactly one item in your browser's local storage: your decision on whether the map view on the contact page may be loaded. That item never leaves your device and we do not read it back. You can change it at any time using the “Cookie settings” button in the footer, or delete it in your browser. The legal basis is your consent under section 25(1) of the German Telecommunications Digital Services Data Protection Act, or its necessity under section 25(2) no. 2 where the entry serves only to record your refusal.

4. Map display (OpenStreetMap)

On the contact page we offer a map view provided by the OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. The map is not loaded automatically. You first see a preview with no connection to any third party and decide for yourself whether to load it.

Only when you click “Load the map” is a connection established to servers of the OpenStreetMap Foundation. Your IP address and technical details about your browser are transmitted in the process. We have no influence over any further processing by the OpenStreetMap Foundation. The legal basis is your consent under Art. 6(1)(a) GDPR and section 25(1) TDDG. You may withdraw that consent at any time with effect for the future by opening “Cookie settings” in the footer and declining the map again. An adequacy decision of the European Commission is in place for the United Kingdom.

5. Contact form and call requests

If you send us an enquiry using the form on the contact page, we process the details you provide: name, company, email address, telephone number where given, the practice area you select, your preferred means of contact and your description of the issue. Mandatory fields are marked as such.

Processing takes place in order to answer your enquiry and to prepare a possible contractual relationship. The legal basis is Art. 6(1)(b) GDPR where your enquiry is directed at concluding a contract, and otherwise Art. 6(1)(f) GDPR on the basis of our legitimate interest in answering enquiries.

We do not pass this data on to third parties. Enquiries that do not lead to an engagement are deleted after two years at the latest. If your enquiry does lead to an engagement, the commercial and tax retention periods of six and ten years respectively under section 257 of the German Commercial Code and section 147 of the German Fiscal Code apply.

6. Data received during engagements

During an engagement we routinely process operational data belonging to our clients, such as terminal operating system exports, gate logs or customs declaration data. As a rule this data contains no personal data. Where it does contain personal data — for example driver names in gate logs or clerk names in declaration records — we process it exclusively on our client's instructions. The basis is a data processing agreement under Art. 28 GDPR concluded before the engagement begins. In those cases our client remains the controller.

We pseudonymise personal fields as soon as they are not required for the analysis, and we delete or return the data provided to us no later than sixty days after the engagement ends.

7. Whitepapers

Our whitepapers are available as PDFs without registration. We collect no data for them, ask for no email address and use no tracking pixels. The file request appears only in the server log files described in section 2.

8. Recipients and transfers to third countries

Recipients of personal data are our hosting provider as a processor and, in the case of the map view and only after your consent, the OpenStreetMap Foundation. Beyond that we transfer personal data only where we are legally obliged to do so or where you have expressly consented. Apart from the case described above, no transfer takes place to countries outside the European Union and the European Economic Area.

9. Your rights

You have the right of access to the data stored about you (Art. 15 GDPR), to rectification of inaccurate data (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR).

Where we process your data on the basis of a legitimate interest, you have the right to object at any time on grounds relating to your particular situation (Art. 21 GDPR). You may withdraw consent you have given at any time with effect for the future; the lawfulness of processing carried out before withdrawal remains unaffected.

An informal message to kontakt@hafenlogik.bizbrew.app is sufficient to exercise your rights.

10. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. The authority responsible for us is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany

11. Whether providing data is required

Providing your data is neither required by law nor by contract. Without the details marked as mandatory, however, we cannot process your enquiry. No automated decision-making, including profiling, takes place.

12. Changes to this policy

We update this privacy policy when the legal position or our processing activities change. The version published on this page, bearing the date given above, applies.