We are welcome you on our web page www.Hanse-Survey.de (“website”) and thank you for your interest in our company and our services. The purpose of this data privacy statement is to inform you about how we handle your personal data, in special sight regarding General Data Protection Regulation (“GDPR”) It applies to the process of visiting and communication through this website and outside the website.
Our data protection declaration is based on the GDPR and should be easy to read and understand. To ensure this, we explain the terms used in advance:
1. Personal Data
‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; (Art. 4 )
2. Data subject
Data subject is any identified or identifiable natural person, whose personal data is processed from the person responsible for the behavior.
‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction; (Art. 4 ).
4. Restriction of processing
‘restriction of processing’ means the marking of stored personal data with the aim of limiting their processing in the future (Art. 4 )
‘profiling’ means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements;
‘pseudonymisation’ means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;
‘controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law; (Art. 4  )
‘processor’ means a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller; (Art. 4 )
‘recipient’ means a natural or legal person, public authority, agency, or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing; (Art. 4 )
10. Third party
‘third party’ means a natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data; (Art. 4 ).
‘consent’ of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her; (Art. 4 )
Hanse-Survey processes your data as a controller. The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:
Haye van Hove
III. Visiting the website
For security reasons and to protect the transmission of confidential content, such as orders or inquiries via our contact form, which you send to us as the website operator, this site uses an SSL or. TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http: //” to “https: //” and by the lock symbol in your browser line.
If you visit our website without directly contacting us, we will only process the personal data which will be automatically transmitted by your browser. Our webserver will safe your access log file temporarily for a period of seven days. The following data will be collected in the log file:
- Anonymized IP-Adress of your client,
- website from which our website is accessed,
- date and time of access,
- name and URL of file accessed,
- pages visited,
- data volume transmitted,
- massage as to whether access was successful,
- playback of video/audio files,
- clicks on individual links, search terms or phrases,
- detection of browser an operating system used and
- name of your internet access provider.
The process of your data serves the optimal and safe rendering of the website from a technical point of view. There will be no analysis of personal data. The legal basis for the temporary storage of the data is Art. 6  f.) GDPR.
The temporary storage of the IP address by the system is necessary to enable the website to bedelivered to the user’s computer. To do this, the user’s IP address must be saved for the duration of the session. Our legitimate interest lies in these purposes according to Art. 6  f.) GDPR.
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In case of the collection of data for the provision of the website, this is when the respective session has ended.
The collection of data for the provision of the website is absolutely necessary for the operation of the website, so there is no possibility for the user to object.
Most of the browser are configured so that the accept cookies automatically. In your browser option you can disable cookies or that you will be asked for the use. When you disable cookies your experience at our website will be probably limited due to functional and design restrictions.
We process your personal data, which we require for your visit and the technical availability, based on the following legal basis:
• Fulfillment of a contract or performance in in advance (precontractual measures) reg. Art. 6  b) GDPR
• Art. 6  f) for protection of our legitimate Interests to make the website technically available to you. Our interests consist in a technical and optical optimized website experience without a cyber threat.
On this website, Google Analytics has been expanded to include the code “grt._anonymizeIP ();” to ensure that IP addresses are recorded anonymously.
By activating the IP anonymization on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases.
Google will use this information to evaluate your use of the website, to compile reports on website activity for the website operator and to provide other services related to the use of the internet and the use of the internet. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google. Under no circumstances will Google associate your IP address with other Google data. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
3. The purpose of using the web analysis services and cookies from Google is to increase the efficiency of our website through a perfected analysis of user behavior in order to take full account of the interests and needs of our users. This is also our legitimate interest in data processing according to Art. 6 f) GDPR.
4. You can prevent Google from storing cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the use of Google Analytics, i.e. the collection of the data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by doing this under the the following link (http://tools.google.com/dlpage/gaoptout?hl=de) download and install available browser plugins.
Links to social networks
The logos of social networks are also displayed on our website. . These logos or icons act as an external link so that no personal information is transmitted to one of these providers without clicking on one of the icons. If the user clicks on one of the logos, he will be redirected to the website of the respective provider. Information on the processing of personal data by the respective providers can be found in their data protection declarations.
Facebook-Plugins (Like & Share-Button)
We reserve the right to integrate plugins from the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, on our pages. You can recognize the Facebook plugins by the Facebook logo or the “Like” button. You can find an overview of the Facebook plugins here: https://developers.facebook.com/docs/plugins/.
When you visit our website, a direct connection is established between your browser and the Facebook server via the plug-in. Facebook receives the information that you have visited our site with your IP address. If you click the Facebook “Like” button while you are logged into your Facebook account, you can link the content of our pages to your Facebook profile. This enables Facebook to assign your visit to our website to your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the data transmitted or its use by Facebook. You can find more information on this in Facebook’s data protection declaration at: https://de-de.facebook.com/policyphp.
If you do not want Facebook to be able to assign your visit to our website to your Facebook user account, please log out of your Facebook user account. However, we are currently not using a Facebook plugin.
Embedded YouTube Videos
Our website may use plugins from YouTube, operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
If you visit one of our pages equipped with a YouTube plug-in, a connection to the YouTube servers will be established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used in the interest of an appealing presentation of our online offers. The purpose of data processing is to be able to call up high-quality videos directly on the website and to increase user-friendliness through quick availability. This also includes our legitimate interests according to Art. 6 Para. 1 lit. f GDPR.
YouTube provides information itself in this context. You can see this in Google’s current data protection declaration, available at https://policies.google.com/privacy?hl=de&gl=de.
Contact by E-Mail
Our website provides email addresses that can be used to contact us electronically. If the user contacts us via email, the personal data transmitted with the email will be saved by us. In this context, there will be no transfer of data to third parties. The data will only be used to process the conversation. For further information, see the section on processing of personal data if you contact us below in the data protection declaration.
IV. Processing of personal data if you contact us
a) Contact and sending of information material
We collect personal data – data which can be attributed to your person – only if you provide us with and you directly contact us. E.g., if you enter your data in a form on our website or send us an e-mail.
Using the contact-form on our website we collect following data from you:
- First name/surname
- contact data (mail, phone, mobile phone)
- message content
Your personal data will be used only for communication with you, or for the purpose you provide us with and will be deleted after. We process your personal data for responding to contact requests on legal basis:
- Art. 6  f GDPR / Protection of our legitimate interests in responding to contact requests
- Art. 6  b GDPR / Fulfillment of a contract or performance in in advance (precontractual measures)
If applicable, your postal- and e-mail-address will also be used to provide you with information about our services and events. We will do so only if you explicit allow us to reg. Art. 6 a) GDPR. You can revoke your consent at any time for the future by writing to:
or mailing directly to email@example.com.
If we have received your postal- and e-mail-address in connection with a service and do not contradict, we reserve the right to send you offers for our services and information to events by post- and e-mail-service regarding Art. 6  f) of GDPR or Section 7  of the German Act Against Unfair Competition.
This serves to safe our overriding legitimate interests in advertising appeals to our customers in the setting of a weighing of interests. You may contradict from continued storage and use of your personal data at any time without any additional fees for you.
Please contact directly to firstname.lastname@example.org via e-mail or postal to
In case of withdrawing your approval, we will erase your data immediately if no other legal basis or overriding legitimate reasons exists. If the withdraw objects any request, this can no longer be processed.
b) Job Application
You can apply for jobs at our company directly by e-mail to email@example.com or postal to our address. Your information will be used only for the process of your application and deletion takes place in accordance with the law.
When applying by e-mail, please be aware that an unencrypted e-mail is not access-protected and that we will not be responsible for any risk or consequences arising of. Therefore, we strongly recommend sending your application documents by encrypted e-mail.
V. Hanse Survey on Social Networks
We maintain an online presence within social networks and platforms to be able to communicate with the customers, interested parties and users active there and to inform them about our services. We would like to point out that user data can be processed outside of the European Union. This can result in risks for the user, because e.g. the enforcement of user rights could be made more difficult.
In addition, user data is usually processed for market research and advertising purposes. E.g. usage profiles are created from the usage behavior and the resulting interests of the users. The usage profiles can in turn be used to e.g., place advertisements inside and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users’ computers, in which the usage behavior and the interests of the users are stored. Furthermore, data can be stored in the usage profiles regardless of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).
The processing of the personal data of the users takes place based on our legitimate interests in an effective information of the users and communication with the users acc. Art. 6  f.) GDPR. If the users are asked by the respective providers of the platforms for consent to the data processing described above, the legal basis for processing is Art. 6  a)., Art. 7 GDPR.
For a detailed description of the respective processing and the possibilities of objection (opt-out), we refer to the information provided by the providers linked below. In the case of requests for information and the assertion of user rights, we point out that these can be most effectively asserted with the providers. Only the providers have access to the data of the users and can take appropriate measures and provide information. If you still need help, you can contact us.
- Facebook, -pages, -group, (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland) based on an agreement on joint processing of personal data – data privacy statement: https://www.facebook.com/about/privacy/, especial for pages: https://www.facebook.com/legal/terms/information_about_page_insights_data , Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com,
- Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – data privacy statement: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated
- Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – data privacy statement / Opt-Out: https://www.instagram.com/about/legal/privacy/.
- LinkedIn (LinkedIn Ireland Unlimited Company (Irland/EU – „LinkedIn“) Further information on the processing of personal data by LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.
VI. Data processing outside of this website
Outside of the website we will process personal data, if you contact us by post, telephone or e-mail with a request and provide us with your personal data or if we are in contracted relationship or if the data processing is required for any reason. This is especially the case as a customer, business partner or interested party or if you work as a service provider for us or take part in one of our events.
The processing takes place, depending on the context, on different legal bases within the meaning of Art. 6 GDPR; depending on the context, this is in particular:
- Your consent
- for pre-contractual measures,
- a contractual relationship (e.g. order for load securing and stowage)
- a legal obligation to process data or
- an overriding legitimate corporate interest (e.g. to assert legal claims).
VII. Recipients or recipient categories
Hanse Survey process data in internal departments e.g., marketing, communication, purchasing, distribution, accounting, administration and human resourcement.
The legal basis for this is the predominant legitimate corporate interest in internal administrative purpose reg. Art. 6  f) GDRP. This can be for economic, administrative, or other internal business purposes. This only applies if not your interests or fundamental rights at protection of personal data outweigh them. We only pass on personal data to other third parties, e.g., Authorities or banks or service providers used to fulfill the contract, if and to the extent that it is necessary due to the respective business relationship or a legal requirement.
Service providers used by us, e.g. For IT and printing services that act as processors for us are contractually obliged to process personal data exclusively in the context of their order.
Below we name the categories of recipients of your personal data:
- IT service provider for the administration and hosting of our website
- IT service provider for the administration and operation of the company’s own database
- If necessary other categories of recipients who need this data to fulfill out contractual and legal obligations or based on our legitimate interests.
VIII. Third Countries
Hanse-Survey is a global marine surveyor company. Here we must state that, if necessary, data for contract fulfillment outside the EU or the EEA or international organizations will be passed on, expressly only if it is legally necessary or expressly necessary for the fulfillment of the contract.
IX. Storage period
Your personal data will be kept for as long as is necessary for the respective purposes (e.g. the fulfillment of the contract, until you withdraw your consent), and then, taking into account the statutory retention periods, deleted or after the purpose has been achieved (e.g. the mutual fulfillment of the contract) for a necessary Retention period blocked or limited in processing and then deleted. In addition, we then store your personal data until the statute of limitations for any legal claims arising from the relationship with you, to use them as evidence if necessary. The limitation period is usually between 12 and 36 months but can also be up to 30 years. When the statute of limitations commences, we will delete your personal data, unless there is a statutory retention obligation, for example for tax reasons, the commercial code or the tax code. These retention requirements can be up to ten years.
“Session cookies” installed by us are usually deleted after leaving our website. “Permanent cookies” remain on your end device until they are no longer required to achieve their purpose and are deleted. You also have the option of deleting installed cookies yourself at any time.Further information can be found >> here << in the “Cookies” section of this declaration.
X. Your Rights
As affected person, according to the legal requirements you have the following rights which you can assert against us:
Right to information:
You are entitled at any time to request information from us within the framework of Art. 15 GDPR as to whether we are processing personal data relating to you. If we process your personal data, you also have the right to information about this personal data and certain additional information (including processing purposes, categories of personal data, categories of recipients, planned storage period, origin) within the framework of Art. 15 GDPR the data, the use of automated decision-making and, in the case of third-country transfers, the appropriate guarantees) and a copy of your data.
Right of rectification:
According to Art. 16 GDPR, you are entitled to demand that we correct the personal data stored about you if it is inaccurate or incorrect.
Right to erasure „right to be forgotten”:
Under the conditions of Art. 17 GDPR, you are entitled to demand that we delete personal data relating to you immediately. The right to erasure exists, among other things not if the processing of personal data is necessary for
- the exercise of the right to freedom of expression and information,
- to fulfill a legal obligation to which we are subject (e.g. statutory retention requirements) or
- for the establishment, exercise or defense of legal claims.
Right to restriction of processing:
Under the conditions of Art. 18 GDPR, you are entitled to demand that we restrict the processing of your personal data.
Right of data portability:
Under the conditions of Art. 20 GDPR, you are entitled to demand that we transfer the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format.
Right of withdrawal:
You have the right to revoke your consent to the processing of personal data at any time with effect for the future. Withdrawing your consent does not affect the legality of the processing carried out based on your consent up to the point of withdraw.
Right to object:
You are entitled to object to the processing of your personal data under the conditions of Art. 21 GDPR, so that we have to stop processing your personal data. The right of objection only exists within the limits set out in Art. 21 GDPR. In addition, our interests may conflict with the termination of the processing, so that we are entitled to process your personal data despite your objection.
Right to lodge a complaint with a supervisory authority:
You are entitled, under the conditions of Art. 77 GDPR, to report a complaint to a supervisory authority in the member state of your place of residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing of your personal data is being carried out violates the GDPR.
The right to lodge a complaint exists without prejudice to any other administrative or judicial remedy. The supervisory authority responsible for us is:
Die Landesbeauftragte für den Datenschutz Niedersachsen
Telefon: +49 (0511) 120 45 00
Telefax: +49 (0511) 120 45 99
However, we recommend that you always submit a complaint first to our management –
Mr. Haye Van Hove,
Herrn Haye van Hove,
If possible, your requests to exercise your rights should be addressed in written from to the above address or directly to us.
XI. Data security
We have taken extensive technical and operational protective measures to protect your data from accidental or deliberate manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly checked and adapted to technological progress.
If you use our contact form, you are also providing us with personal data about yourself. So that these do not fall into the wrong hands, we encrypt your personal data “end to end”. This is realized with a proven and very secure data transmission method based on the current state of the art on the Internet.
XII. Scope of your obligations to provide data
In principle, you are not obliged to provide us with your personal data. If you do not do this, however, we will not be able to make our website available to you, answer your inquiries to us, send you advertising, etc. or enter into a contract with you.
XIII. Automated decision making / profiling
We do not use automated decision-making or profiling (an automated analysis of your personal circumstances). If you have any further questions about the collection, processing and use of your personal data, you can of course send us an inquiry. We would be happy to discuss your concerns with you.
Please send us your request directly to firstname.lastname@example.org or contact us by phone at >>> + 49 (0) 49 21/99 93 15 <<<.