Privacy Policy

The organisation responsible for data processing

The organisation responsible, as specified by the General Data Protection Regulation (GDPR), for using your data collected by this website is:

HIW Hamburg Invest Wirtschaftsförderungsgesellschaft mbH
Wexstraße 7
20355 Hamburg

I. General information on data processing

1. What are personal data?

The term ‘personal data’ is defined in the General Data Protection Regulation (hereinafter referred to as the "GDPR"). According to this definition, ‘personal data’ means any information relating to an identified or identifiable natural person. This includes details like your name, address, telephone number and date of birth. Information on how you use this website may also be categorised as personal data if it can be used to derive your identity.

2. Scope of the processing of personal data

As a general rule, we process our users’ personal data only if this is required in order to be able to provide a functional website as well as our content and services. Our users’ personal data are regularly processed only after the users have expressed their consent or if processing is permitted by legal provisions.

a) Legal basis for processing personal data

Provided we acquire the consent of the data subject for processing their personal data, the legal basis is defined by Art. 6 para. 1 sentence 1 lit. a of the GDPR.

Art. 6 para. 1 sentence 1 lit. b of the GDPR forms the legal basis for the processing of personal data that is necessary for the performance of a contract to which the data subject is party. This also applies to processing operations that are necessary prior to entering into a contract.

Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, the legal basis is defined by Art. 6 para. 1 sentence 1 lit. c of the GDPR.

Art. 6 para. 1 sentence 1 lit. d of the GDPR forms the legal basis in the event that the processing of personal data is necessary in order to protect the vital interests of the data subject or of another natural person.

If processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, the legal basis is defined by Art. 6 para. 1 sentence 1 lit. f of the GDPR.

b) Data erasure and retention period

The data subject’s personal data shall be erased or blocked if the purpose for which they were stored no longer applies. The data may be stored beyond this time if this was stipulated by European or national legislators in Union regulations, laws or other provisions to which the controller is subject. The data shall also be blocked or erased if a retention period stipulated by the stated standards expires, unless it is necessary to continue storing the data for a contract conclusion or contract performance.

II. Business contact

a) Enquiries submitted by potential customers

1. Description and extent of data processing
In response to enquiries that we receive by telephone (whether directly or via callback requests), by email, in person or by similar means, we will provide information or offer free services in accordance with our mission. In order to manage and carry out these dealings, we process the company contact details of the potential customers’ representatives, such as email address, telephone number, position at the company, company name and address. If required to fulfil the customer’s instructions, we may pass on the data to other bodies involved, such as Senate and specialist agencies, district authorities, representative bodies, and property companies.

2. Legal basis for data processing
The legal basis for the processing of personal data in relation to our services is Article 6 para. 1 sentence 1 (1b) or (1f) of the GDPR.

3. Purpose of data processing
By recording our dealings in relation to our services, we meet our contractual obligation towards the customer. We store data in order to clearly assign dealings to the client concerned and to perform the contract accordingly.
Personal data is processed to enable us to render our services to the customer. We document our services in order to present them in anonymised form to our funding bodies and Supervisory Board for statistical purposes. These purposes also constitute our legitimate interest in the processing of personal data pursuant to Article 6 para. 1 sentence 1 (1f) of the GDPR.

4. Retention period
Personal data processed on the basis of Article 6 para. 1 sentence 1 (1b) of the GDPR will be erased as soon as it is no longer required to meet the aforementioned purposes.
Personal data processed on the basis of Article 6  para. 1 sentence 1 (1f) of the GDPR will be erased as soon as it is no longer required to meet the aforementioned purposes or as soon as an objection to processing is lodged and the requirements set out in Article 17 para. 1 sentence 1 (1c) of the GDPR apply.
A longer Retention period will only come into effect if a reason pursuant to I. b applies.

5. Objection and removal options
No objection may be lodged in respect of the processing of data pursuant to Article 6 para. 1 sentence 1 (1b) of the GDPR, as this data is required for the purpose of contractual performance.
Data stored due to a legitimate interest pursuant to Article 6 para. 1 sentence 1 (1f) of the GDPR will no longer be processed if an objection is lodged to processing due to our legitimate interest and the requirements of Article 21 of the GDPR apply.

b)  Customer surveys, mailings sent by us or our partners

1. Description and extent of data processing
We conduct annual surveys of certain groups of customers by email. To enable these surveys to be carried out, the email addresses of our contacts will be forwarded to our IT service provider. The statutory requirements in respect of contracted processing are observed in this regard. In addition to the first names, surnames and email addresses of our customers, we may, if applicable, process further information that specifically arises from the customer survey concerned. However, this information is not usually of a personal nature. Further, we will send information on events and news connected with business development in Hamburg by email on an ad hoc basis.
In some cases, we will pass on the contact details (usually the email address) of our customers to Senate and specialist agencies if this may foster the business development of our customers.

2. Legal basis for data processing
The legal basis for the processing of personal data to send emails is either the provisions of Article 6 para. 1 sentence 1 (1f) of the GDPR if we have a legitimate interest in sending the emails or consent granted in accordance with Article 6 para. 1 sentence 1 (1a) of the GDPR. This is generally the case in respect of our existing customers. Our legitimate interest is the improvement of our services for our customers.
The passing on of email addresses to our partners is done either on the basis of consent granted in accordance with Article 6 para. 1 sentence 1 (1a) of the GDPR or pursuant to the provisions of Article 6 para. 1 sentence 1 (1b) of the GDPR if it is necessary to pass on the email addresses to render our services to customers.  

3. Purpose of data processing
Data is processed for the purpose of informing our customers about important events and news connected with business development in Hamburg, improving our service and offers on the basis of customer feedback and connecting customers with partners who can foster their business development.

4. Storage period
The data will be erased as soon as the customer revokes their consent or if the data is no longer required for the purpose for which it was originally collected. A longer storage period will only come into effect if a reason pursuant to I. b applies.

5. Objection and removal options
The customer may, at any time, revoke their consent to the processing of their personal data with effect for the future. Every email sent contains a link enabling customers to revoke their consent.

III. Provision of website and creation of log files

1. Description and scope of data processing

The following information is documented when accessing our website:

• Browser type/browser version
• Operating system
• Referrer URL (previously visited website), as well as the pages accessed on our website
• IP address
• Date and time of the server request
• Internet service provider

The data are also stored in our system’s log files. However, these data are not stored together with other personal data from the user.

2. Legal basis of data processing

The legal basis for storing the data and the log files is Art. 6 para. 1 sentence 1 lit. f of the GDPR.

3. Purpose of data processing

The system’s temporary storage of the IP address is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must be stored for the duration of the session. The data are stored in log files to ensure that the website functions. In addition, the data help us to optimise the website and ensure the security of our information technology systems. The data are not evaluated in this context for marketing purposes. Our legitimate interest in data processing also lies in these purposes, in accordance with Art. 6 para. 1 sentence 1 lit. f of the GDPR.

4. Retention period

The data we store shall be erased as soon as they are no longer required for achieving the purpose of their collection. This is the case after no more than seven days. The data may also be stored beyond this period. In this case, the user’s IP address shall be erased or distorted so that the client can no longer be classified.

5. Possibility to object and opt out

Collecting the stated data is essential to be able to operate the website. For this reason, the user shall have no possibility to object.

IV. Use of cookies

1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on his or her operating system. This cookie contains a characteristic string of characters that enable the browser to be unambiguously identified the next time the website is accessed.

We use cookies in order to make our website more user-friendly. Some elements on our website also require the calling browser to be identified after changing pages.

The following data are stored and transmitted in the cookies:

1. Language settings
2. Log-in information

On our website, we also use cookies that enable an analysis of the user’s surfing behaviour.

The following data, among others, may be transmitted in this way:

1. The search terms entered
2. The frequency of page views
3. The use of website features

User data collected in this way are pseudonymised by technical means. It is, therefore, no longer possible to assign the data to the respective user. The data are not stored together with other personal data from the user.

When accessing our website, users are informed by an information banner about the use of cookies and can then choose to accept or reject cookies.  

2. Legal basis for data processing

The legal basis for processing personal data using cookies for analytical purposes is the data subject’s consent in accordance with Art. 6 para. 1 sentence 1 lit. a of the GDPR.

The legal basis for processing personal data using cookies that are required for the operation of the website is defined by our legitimate interest in providing users with a functioning website in accordance with Art. 6 para. 1 lit f of the GDPR.

3. Purpose of data processing

The purpose of using technically necessary cookies is to make it easier for users to use websites. Some features of our website could not be provided without the use of cookies.

We need cookies for the following applications, among others:

1. Applying language Settings
2. Remembering search Terms

The user data collected by the technically necessary cookies are not used to create user profiles.

The use of analysis cookies serves the purpose of improving the quality of our website and its content. The analysis cookies enable us to find out how the website is used so that we can continuously optimise our services.

4. Retention period, and possibility to object and opt out

Cookies are stored on the user’s computer and transmitted from the computer to our website. As the user, you therefore have full control of the use of cookies. By changing the settings in your internet browser, you can deactivate or limit the transmission of cookies. Cookies already stored can be erased at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all the website’s features.

Further information on the types of cookies we use as well as instructions on how to update your cookie settings are available here.

V. Google Analytics

1. Description and scope of data processing

This website uses Google Analytics, a web analytics service provided by Google LLC, (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). For users based in the EU/European Economic Area and Switzerland, Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, is the responsible party. The use includes the "Universal Analytics" operating mode. This facilitates the assignment of data, sessions and interactions across several devices to a pseudonymous user ID and thus the analysis of a user’s activities across devices. At this point in time, cross-device tracking is disabled.

Google Analytics uses "cookies", which are text files placed on your computer, to allow the website operator to analyse how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. IP anonymisation has been activated on this website. Thus, prior to being transferred to the USA, your IP address will be truncated by Google within Member States of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. Sessions and campaigns are terminated after a certain period of time. By default, sessions are closed after 30 minutes without activity and campaigns after six months. The time limit for campaigns may not exceed two years. For more information on terms of use and data protection, please visit https://www.google.com/analytics/terms/gb.html or https://policies.google.com/?hl=en.

2. Legal basis for data processing

The legal basis for processing the user’s personal data is Art. 6 para. 1 sentence 1 lit. a of the GDPR.

3. Purpose of data processing

Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet use.

4. Retention period

For more information on the retention period, please visit www.google.com/analytics/terms/gb.html or https://policies.google.com/?hl=en.

5. Possibility to object and opt out

By changing the settings of your internet browser, you can disable or restrict the transmission of cookies. You can also delete any previously saved cookies at any time. In this case, however, you may no longer be able to make full use of all of the website’s features.

In addition, you can withdraw your consent at any time by adjusting the cookie settings and thus prevent Google from collecting the data generated by the cookie pertaining to your website usage (including your IP address) and from processing this data by downloading and installing the Opt Out Browser Add-On at https://tools.google.com/dlpage/gaoptout?hl=en.

To learn more about the Terms of Service of Google Analytics as well as Google's privacy policy, please visit https://marketingplatform.google.com/about/analytics/terms/us/ as well as https://policies.google.com/?hl=en.

VI. Google Ads

1. Description and scope of data processing

We use the service Google Ads. Google Ads is an online advertising program offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’).

Google Ads allows us to combine our ads with certain search terms. These ads may be displayed when you enter a search query on a website that is part of Google’s advertising network. We also use remarketing lists for search ads, which allows us to customise search ad campaigns for users who have previously visited our website. These features enable us to combine our ads with certain search terms or to serve ads to previous visitors, such as ads promoting services that visitors may have viewed on our website. When the user clicks on an ad or visits our website, a cookie is placed on the user’s computer by Google. The information entailed is used to facilitate the targeting of the user when he/she enters a search query at a later stage. To this end, a “DoubleClick” cookie may be sent to the browser when a user visits a website containing DoubleClick ads. Information on the DoubleClick cookie technology used is available at https://support.google.com/admanager/answer/2839090?hl=en. Further information can also be found in the Google Site Stats (https://services.google.com/sitestats/en.html) as well as in Google’s privacy policy (https://policies.google.com/privacy?gl=en).

With the help of this technology, Google and HIW as a client obtain information regarding the fact that a user has clicked on an ad and has proceeded to our web pages to contact us via the contact form. The information obtained is used exclusively for statistical purposes aimed at optimising our ads. We do not obtain any information that could be used to personally identify the user. The statistics provided to us by Google include the total number of users who clicked on one of our ads and, if applicable, whether users proceeded to a HIW web page equipped with a conversion tag. These statistics allow us to track which keywords prompted the most frequent clicks on our ad and which ads resulted in the user making contact via the contact form.

2. Legal basis for data processing

The legal basis for processing personal data with regard to the use of cookies is Art. 6 para. 1 sentence 1 lit. f of the GDPR. It is our legitimate interest to display you advertising that is of interest to you, to make our website more appealing to you and to achieve a fair calculation of advertising expenses.

3. Purpose of data processing

We display Google Ads and use Google conversion tracking in this context in order to draw attention to our latest projects and developments, planned activities and services. Within the Google advertising network, our adverts are distributed among topic-relevant search results and websites based on the keywords defined by us.

4. Retention period

The saved cookies expire after 90 days. Information on the retention period is available from the provider or at https://policies.google.com/privacy?hl=en&gl=de.

5. Possibility to object and opt out

Cookies are saved on the user’s computer and are transmitted from there. As a result, users have full control over the use of cookies. If you do not want your visit to our site to be used for statistical purposes, you can opt out of this by blocking the necessary cookies required for this technology via your browser settings, for example. You also have the ability to opt out of types of Google ads or deactivating targeted advertising on Google via the ad settings (https://adssettings.google.com/authenticated?hl=de). Alternatively, you can deactivate third-party cookies by visiting the Network advertising initiative deactivation tool (http://www.networkadvertising.org/choices/). We and Google still receive statistical information regarding how many users visited this site, and when. If you do not want to be included in these statistics, you may opt out with the aid of additional programs for your browser (e.g. with the Ghostery add-on (http://www.ghostery.com/)).

VII. Order form for ordering brochures

1. Description and scope of data processing

A contact form on our website can be used for ordering brochures. If users make use of this possibility, the data they enter will be transferred to us and stored.

The moment the message is sent, the following data will also be stored:

1. The user’s IP address
2. The date and time of registration

The data thus provided shall not be forwarded to third parties. Instead, the data will only be used to process the conversation.

2. Legal basis for data processing

The legal basis for processing your personal data within the scope of ordering brochures is Art. 6 para. 1 sentence 1 lit. b of the GDPR.

3. Purpose of data processing

Data are processed for the purpose of delivering the selected brochures to you.

4. Retention period

Your data will be deleted after completion of the order.  Legal retention periods remain unaffected.

5. Possibility to object and opt out

Ordering brochures is voluntary, and unless you order brochures, no other personal data relating to you will be processed. Once an order has been placed, it is no longer possible to object, since the data are mandatory for the delivery of the brochures.

VIII. Social Media Plugins

1. Description and scope of data processing

This website does not embed any social media plug-ins directly, thus preventing profile generation by third parties.

In order to nonetheless enable the sharing of our content via Facebook or Twitter, we use the “two-click solution”.

Data is only transferred to the provider of the social media service concerned when you decide to share a post by clicking on the relevant button.

We therefore recommend that you read the privacy policy of the social media service concerned beforehand to find out about the purpose and scope of data collection, the further processing and use of data, your rights in relation to this and your configuration options for protecting your privacy.

You will find this information here:

Facebook: https://www.facebook.com/about/privacy/

twitter: https://twitter.com/privacy

2. Legal basis for data processing

The legal basis for collecting and processing personal data of users is Art. 6 para. 1 sentence 1 lit. f of the GDPR. We have no influence on the processing of personal data by the service providers.

3. Purpose of data processing

We intend to provide you with the option of comfortably sharing content of our website via a social media platform of your choice.

4. Retention period

Information on how the individual service providers handle personal data of users can be found in the privacy policy of the respective service providers:

Facebook: https://www.facebook.com/about/privacy/

twitter: https://twitter.com/privacy

5. Right of withdrawal

By refreshing the web page, the 2-click solution is reset and the connection to the service provider’s servers is severed. No further data is transmitted until you reactivate the plug-ins with one click .

IX. reCaptcha

1. Description and scope of data processing

We use reCaptcha v2 on our websites. reCaptcha is a service provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and serves to prevent the misuse of automatic entries in online forms and thus serves to protect the host’s technical systems.

If you visit one of our pages that features reCaptcha, a connection is established with Google’s servers. A reCaptcha cookie is saved. Your IP address is transmitted to Google.

reCaptcha also records the following data via a method known as fingerprinting:

• Browser plug-ins used
• Cookies placed by Google in the past six months
• Number of mouse clicks and touches on this screen
• CSS information for the page visited
• JavaScript elements
• Date
• Browser language

Where personal data is transmitted to Google in the USA, this is done under the EU-US Privacy Shield on the basis of the adequacy agreement by the EU Commission. You can access the certificate here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI.

2. Legal basis for data processing

The legal basis for processing the user’s personal data by reCaptcha is Art. 6 para. 1 sentence 1 lit. f of the GDPR.

3. Purpose of data processing

The purpose of data processing is to prevent abusive automated entries in web forms and thus to protect the technical systems of the hosting company. This purpose also constitutes our legitimate interest in processing data.

4. Retention period

You can find the Google Data Privacy Policy and Terms and Conditions of Use here: https://www.google.com/policies/privacy/ and here: https://policies.google.com/terms.

5. Right of withdrawal

You can prevent fingerprinting and cookies being saved on your computer by adjusting the technical settings in your browser; however, we would like to point out that this may mean that you will not be able to use all the functions of this website.

X. Participation in webinars

In order to conduct webinars over the internet, we use a software solution provided by WebEx (WebEx Communications Deutschland GmbH, Hansaallee 249, c/o Cisco Systems GmbH, 40549 Düsseldorf, Germany) as well as a registration platform provided by Eventbrite (Eventbrite, Inc., Delaware, 155 5th Street, Floor 7, San Francisco, CA 94103, USA).

You can only participate in a webinar if you have previously registered at https://www.eventbrite.de/ for one of our online events or if you have received an invitation for a webinar from us or from one of our partners. We can provide you with a list of our partners upon request. As part of the registration process, the following personal data will be retrieved: first name, surname, company, e-mail address, and telephone number.

We use these data solely for the purpose of conducting the webinar. The legal basis for the processing of data in this context is Art. 6 para. 1 sentence 1 lit. b) of the GDPR, unless you have given your consent for us and/or the speaker of the seminar to use your data for dispatching a newsletter and sending you invitations to future events.

As part of the webinar, an encrypted connection between you and WebEx will be established. The audio or video information transmitted during the session will be recorded by us, as the webinar will be published on our website at a later stage. During and after the webinar we will collect statistical data. When you participate in a webinar, we will collect further data in addition to your registration details. This entails information on the duration of your participation, your interest in the webinar, as well as any questions asked and/or answers given by you. The collection of said data serves the purpose of providing continued customer service and enhancing the user experience.

By clicking "Teilnehmen (Join)" you confirm that you will not create any recordings or screenshots of this session.

In order to conduct the webinar, we will transfer your registration data to the Eventbrite and WebEx service providers, who, as our processors, may use your data solely for the purpose of conducting the webinar.

XI. Two-click solution for integrating Vimeo

1. Description and scope of data processing

On our website, we use components of Vimeo. Vimeo is an online video portal that allows video publishers to post video clips free of charge and users to view, rate and comment on videos, also free of charge. Since Vimeo allows all types of videos to be published, the portal includes complete film and television programmes as well as music videos, trailers and user-generated content.

The service is provided by Vimeo Inc. 555 West 18th Street, New York, New York 10011. Vimeo videos are not embedded in our website. Therefore, it is not possible for third parties to create profiles.

To be able to watch the videos displayed on our website, users are required to click on the preview image first, and only by clicking on the play button can the video be viewed. It is only then that the transmission of data starts. Further information on the above is available at vimeo.com/privacy.
The privacy policy provides insights into the collection, processing and use of personal data by Vimeo.

2. Legal basis for processing data

The legal basis for collecting and sharing personal data of users is Art. 6 para. 1 lit. f of the GDPR. Please note that we have no influence on the processing of your personal data by Vimeo.

3. Purpose of data processing

The purpose of processing data is to provide users with a broad range of content across different media.

4. Retention period

Information on retention periods can be found in Vimeo’s privacy policy at vimeo.com/privacy

5. Possibility to object and opt out

If you do not want Vimeo to process data via this service, you can deactivate the use of JavaScript in your browser settings. Please note that in this case any Vimeo videos displayed on our website can no longer be viewed.

XII. YouTube

1. Description and scope of data processing

It is in our interest to provide you with a wide range of information across different media channels. Therefore, we integrate videos from YouTube (YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA) on our website. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. YouTube is an online video portal that allows publishers to freely place video clips and allows users to view, rate and comment on videos free of charge. YouTube allows the publication of all types of videos. Both full film and television broadcasts as well as music videos, trailers and user-generated videos are available via the online portal.

To watch our videos, users are required to first click on the preview image. The video can only be watched after dismissing the notice appearing on the screen or by logging in, respectively.

The integration of YouTube videos is performed in the extended privacy mode and according to a “no cookies policy”, i.e. only when the video starts playing does YouTube set cookies and pixel tags aimed at customising advertisements as well as search results.

When a YouTube video is played, the following data are transmitted to Google, the operating company of YouTube:

• the IP address
• the specific URL of the page viewed on our website
• the transmitted identification of the browser
• system date and system time of the page view
• existing cookies allowing to unambiguously identify your browser.

Google, as the operating company of YouTube, is solely responsible for this data processing. Further information is available at https://policies.google.com/privacy?hl=en.

Please note that Google may obtain additional data via cookies previously stored by you. The extent to which these are used by Google is beyond our control.

The privacy policy of Google is available at https://policies.google.com/privacy?hl=en.

2. Legal basis of data processing

The legal basis for the collection and transfer of personal data of users is Art. 6 para. 1 sentence 1 lit. f of the GDPR. We have no influence on the processing of personal data by Google.

3. Purpose of data processing

The purpose of data processing is to provide a wide range of information across different media channels.

4. Retention period

Information regarding the retention period can be found in the privacy policy of YouTube: https://policies.google.com/privacy?hl=en.

5. Objection

If you do not want Google to process data via this service, you can disable the use of JavaScript in your browser settings. Please note that in this case any videos integrated on our website via YouTube can no longer be viewed.

XIII. Data security

We take technical and organisational security measures to protect your data from accidental or intentional manipulation, loss, destruction or unauthorised access. Our security measures are continuously improved in line with technological developments.

Whenever your personal data are processed, you are a data subject within the meaning of the GDPR, and in relation to the party responsible you shall be entitled to the following rights:

We will be happy to provide you with information as to whether or not personal data concerning you are being processed by us, and, where that is the case, for which purposes such data are being processed (Art. 15 GDPR). Furthermore, subject to the respective legal requirements, you are entitled to the right to rectification (Art. 16 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to erasure (Art. 17 GDPR) and the right to data portability (Art. 20 GDPR).

Pursuant to statutory requirements, you have the right to object to the processing of data (Art. 21 GDPR).

To exercise your above rights, please contact us by sending an e-mail to KRammo@intersoft-consulting.de or by mailing a letter to Hamburg Invest. You can exercise the aforementioned rights free of charge.

Without prejudice to these rights and any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes any privacy regulations (Art. 77 GDPR).

The supervisory authority competent for our place of business is:
The Hamburg Representative for Data Protection and Freedom of Information
(Der Hamburgische Beauftragte für Datenschutz und Informationssicherheit)

XIV. Amendments to the privacy policy

This privacy policy shall be regularly updated in the context of the further development of the internet or of our services. We shall communicate any amendments in good time. To stay informed of the latest status of our data protection provisions, we recommend visiting this site on a regular basis.

XV. Contact details for the Data Protection Officer

Ms Katrin Rammo
intersoft consulting services AG
Beim Strohhause 17
20097 Hamburg

Phone: +49 40 790 235 - 235
Mobile: +49 175 261 724 2
E-mail: KRammo@intersoft-consulting.de