HiiCCE GmbH – Privacy Policy
HiiCCE GmbH takes your personal data seriously. With this Privacy Policy, we aim to inform you as far as possible about the type and scope of personal data we collect, and about our purpose for collecting and using it on the website of HiiCCE GmbH.
Should this Privacy Policy not answer all your questions regarding the processing of your data, we recommend contacting the company Privacy Policy Officer. The contact information can be found in the Privacy Policy under point B.
Thank you for your trust.
Your HiiCCE GmbH
A. Name and address of the data controller
The data controller in terms of the EU GDPR is:
HiiCCE GmbH, c/o Stadtreinigung Hamburg, Bullerdeich 19, 20537 Hamburg, Germany
B. Name and address of Privacy Policy Officer
You can reach the Privacy Policy Officer of HiiCCE GmbH at:
HiiCCE GmbH, Privacy Policy Officer, c/o Stadtreinigung Hamburg, Bullerdeich 19, 20537 Hamburg, Germany
Tel.: +49 40 2576 3872
Email: datenschutz@hiicce.hamburg
Website: www.hiicce.com
C. General information about the processing of data
I. Scope of the personal data to be processed
We collect and process personal data we receive from you only in terms of being able to offer a functional website and applications on mobile end devices, as well as is required by other content and services we offer. Furthermore, the collection and processing of your personal data only takes place upon your explicit permission or due to a legitimate interest, which is explained in more detail in this Privacy Policy.
II. Legal framework for the processing of personal data
Article 6, paragraph 1a of the GDPR serves as the legal basis, insofar as you have given your consent to the processing of your personal data.
Article 6, paragraph 1b of the GDPR serves as the legal basis for the processing of personal data needed to perform pre-contractual measures and to fulfil the contract with you.
Article 6, paragraph 1c of the GDPR serves as the legal basis insofar as a processing of personal data is required to meet legal obligations that our company is subject to.
Article 6, paragraph 1f of the GDPR serves as the legal basis insofar as the processing is required to safeguard a legitimate interest of our company or a third party, and your interests, basic rights and fundamental freedoms do not outweigh this interest.
III. Data transmission to third parties
Insofar as a transmission to third parties takes place, the following points will be referred to. As a rule of thumb, your data is generally not transmitted to third parties.
IV. Data erasure and storage period
Your personal data is basically deleted as soon as the purpose for collecting and processing this data has been fulfilled. Storage beyond this time period can take place if this is required due to special laws. Your personal data will then be deleted after this period.
D. Provision of the website and generation of log files
The collection and processing of your personal data is absolutely required in order to enable you to use this website. When you visit our website, each time our system automatically collects data and information about the computer accessing the website. Storage of this data together with other personal data from you does not take place. Absolutely required in terms of technology is the processing of data, such as the IP address of the computer accessing the website, for the period of time the IP address of the computer accessing the website visits the website. The storage of log files takes place in order to ensure the functionality of the website. Furthermore, the data serves to optimise the website and to ensure the security of our information technology systems. An analysis of the log files for marketing purposes does not take place. Article 6, paragraph 1f of the GDPR serves as the legal basis for the process of data and the corresponding log files. Our legitimate interest in the processing of data lies within the above-mentioned purposes.
The data is deleted when the visit has ended. Log files are deleted after seven calendar days at the latest. We may process log files for a longer period of time, but anonymise your personal data so that no connection can be made between you and your data.
E. Use of cookies
Our website uses cookies. Cookies are text files which are stored and processed on your computer system. A cookie contains an individual sequence of characters which enable a clear identification of the browser used to visit the website in every instance. We use these cookies to design a user-friendlier website. Some elements of our website require that the visiting computer can be identified even after switching pages.
In addition, we use cookies to enable an analysis of the surfing behaviour of users. Cookies are stored by you on your computer and transferred from the computer to our website. This means you have full control over the use of cookies. By changing the settings of your Internet browser, you can deactivate or limit the transfer of cookies. Cookies already stored can be deleted at any time. This can take place automatically. If cookies are deactivated for our website, not all functions of this website may be able to be used in their entirety.
The purpose of the use of technically required cookies is to ensure the necessary basic functionality such as page navigation and status storage and to simplify the use of the website for you. For some functions of our website, it is also necessary that your computer is recognised again after switching pages, for example the storage of the chosen font size takes place so that you can use your selected font size on every page.
The use of analysis cookies takes place for the purpose of improving the quality of our website and its content. Thanks to analysis cookies, we are able to determine how the website is used and thus continually optimise our offers.
Your personal data collected by technically required cookies is not used to generate user profiles. Your personal data collected by analysis cookies is anonymised by the use of technical measures. This makes a connection of the data to you impossible.
The legal basis for the processing of technically required cookies is article 6, paragraph 1f of the GDPR. Our legitimate interest is to enable you to use our website, which is possible with the help of these cookies. The legal basis for the processing of all other cookies is article 1, paragraph 1a of the GDPR – insofar as you have given your consent – and possibly article 1, paragraph 1f of the GDPR. Our legitimate interest for the use of these cookies is to adapt our offers to your needs and the needs of other users as best as possible.
F. Contact form and email contact
A contact form is included on our website which can be used for contacting us electronically. If you use this option, we process the data you provided, to a large extent voluntarily.
To process the data, we ask for your consent during the sending processing of your message and refer to this Privacy Policy.
Alternatively, you can contact us using the email address provided. In this case, we store the personal data provided with the email.
In this context, the data is not transmitted to third parties. The purpose of the processing of your personal data is to process your contact with us.
The other personal data processed when you send us a message serves to prevent abuse of the contact form and ensure the safety of our information technology systems.
If you have given your consent, the legal basis for this is article 6, paragraph 1a of the GDPR.
The legal basis for the processing of data, which is provided over the course of sending an email, is article 6, paragraph 1f of the GDPR.
The data is deleted when the respective communication with you has ended, i.e. when it can be inferred from the circumstances that the situation in question has been concluded.
The additional personal data collected during the process of sending the message is deleted after the retention period of seven days at the latest.
You have the option to revoke your consent for the processing of your personal data. You can contact us via email and revoke your consent to store your personal data at any time. In such a case, the communication is stopped.
You can revoke your consent and assert your rights by sending an email to datenschutz@hiicce.com.
All personal data stored over the course of your contact with us will be deleted in this case.
G. Rights of the affected person / obligation to provide information
If your personal data is processed, you as the affected person under the GDPR have the following rights:
I. Right to information
You can request to receive information about your personal data that we process.
If we have processed your personal data, you can request to receive disclosure about the following information:
(1) the purpose for which the personal data is processed (see the respective points above);
(2) the categories of personal data which are processed;
(3) the recipient or the category of recipient who has received or will receive your personal data;
(4) the planned duration of storage of your personal data or, if concrete information on this is not possible, criteria for the definition of the storage period; and
(5) all information available about the origin of the personal data if the personal data was not provided by you.
You have the right to request information about the provision of your personal data to a third country or an international organisation. In this context, you can request to be informed about the suitable guarantees according to article 46 of the GDPR in connection with the transmission. All other rights to disclosure are fulfilled by this Privacy Policy.
VI. Right to correction
You have the right to correction and/or completion towards us, insofar as the personal data processed affecting you is not correct or not complete. We have the duty to correct this immediately.
VII. Right to restriction of processing
Under the following circumstances, you can request to a restriction of the processing of your personal data:
(1) if you dispute the correctness of your personal data for a period of time which enables the data controller to review the correctness of the personal data;
(2) the processing is wrongful and you reject the deletion of the personal data and instead request the restriction of the use of the personal data;
(3) the data controller no longer needs the personal data for the purpose of processing, yet you need the personal data for the enforcement, practice or defence of legal claims; or
(4) if you revoke your consent to the processing according to article 21, paragraph 1 of the GDPR and it has yet to be determined if the legitimate reasons of the data controller outweigh your reasons.
If the processing of your personal data is limited, this data may – with the exception of its storage – only be processed with your consent or to enforce, practice or defend legal claims or to protect the right of another natural or legal person or for reasons of important public interest of the EU or a member state. If the restriction of processing is limited according to the above-mentioned requirements, we will inform you before any restriction is revoked.
VIII. Right to deletion
Obligation to erasure
You can request that we immediately delete your personal data, and we are obliged to delete this data immediately. Insofar as the following requirements are given, we will fulfil your request as quickly as possible:
(1) your personal data is no longer required for the purpose that it was collected for or processed in any other way;
(2) you revoke your consent on which the processing according to article 6, paragraph 1a or article 9, paragraph 2a of the GDPR is based and another legal basis for processing is not given;
(3) you object to the processing according to article 21, paragraph 1 of the GDPR and there is no major valid reasons for the processing or you object to processing according to article 21, paragraph 2 of the GDPR;
(4) your personal data has been processed unlawfully;
(5) the erasure of your personal data is required to fulfil a legal obligation according to EU law or the member state’s law, which the data controller is subject to; and
(6) your personal data was collected in terms of services offered regarding an information society according to article 8, paragraph 1 of the GDPR. The right to erasure is not given insofar as an individual statement of fact is provided according to article 17, paragraph 3 of the GDPR.
IX. Right to disclosure
If you have asserted your right to correction, erasure or restriction of the processing by us, we are obliged to report this correction, erasure of data or restriction of processing to all recipients who have received from us personal data affecting you, granted this is possible or does not lead to excessive effort. You also have the right to be informed of these recipients.
X. Right to data transmission
You have the right to receive your personal data which we have provided in a structured, standard and machine-readable format. Moreover, you have the right to transmit this data to another data controller without hindrance by the data controller who is provided the personal data, insofar as:
(1) the processing is based on your consent according to article 6, paragraph 1a of the GDPR or article 9, paragraph 2a of the GDPR, or based on a contract according to article 6, paragraph 1b of the GDPR, and
(2) the processing takes place with the assistance of an automated process.
By asserting this right, you also have the right to request that your personal data be directly transmitted to another data controller, insofar as this is technically possible. Liberties and rights of other persons may not be negatively impacted as a result.
The right to data transmission is only valid for the processing of personal data which is required to fulfil a task, which is of public interest or which follows from the exercise of public powers that have been transferred to us.
XI. Right to objection
You have the right to object to the processing of your personal data at any time, based on article 6, paragraph 1e or 1f of the GDPR. We will then no longer process your personal data, granted we can provide compelling and legitimate reasons for the processing, which outweigh your interests, rights and liberties or in the case that the processing serves to enforce, practice or defend legal claims.
XII. Right to revoke the declaration of consent under data protection law
You have the right to revoke your declaration of consent under data protection law at any time. By revoking your consent, the lawfulness of the processing upon consent and up to the revocation remains unaffected.
You have the right to not be subject to decisions based on a solely automated processing – including profiling – which has a legal impact towards you or hinders you significantly in a similar way. This is not the case when the decision:
(1) is required in order to close or fulfil a contract between you and the data controller;
(2) is based on legal regulations of the EU or member states to which the data controller is subject, is lawful and these legal regulations include suitable measures to safeguard your rights and liberties as well as your legitimate interest; or
(3) is based on your explicit consent.
However, these decisions from points XIII (1) to (3) may not be based on special categories of personal data according to article 9, paragraph 1 of the GDPR, insofar as article 9, paragraph 2a or 2g of the GDPR is not valid and suitable measures for the protection of rights and liberties as well as your legitimate interest have been affected.
In light of these cases mentioned under points XIII (1) and (3), we have taken suitable measures for safeguarding rights and liberties as well as your legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.
XIII. Right to complain to a supervisory authority
Furthermore, you have the right to make a complaint with the responsible supervisory authority if you are of the opinion that the processing of your personal data violates the GDPR.
The responsible supervisory authority is the Hamburg Data Protection Officer.
XIV. Assertion of your rights
If you would like to assert your rights towards us, please send an email to datenschutz@hiicce.com.