We at NSB GROUP take data protection very seriously. Therefore, this data protection declaration serves to inform you about the type, the extent and the purpose of processing of your personal data when using our website.
Personal data is information that relates to an identified person or at least makes identification possible. In any case, we treat such information confidentially and in accordance with the statutory provisions. The statutory provisions can be found both in the General Data Protection Regulation (“GDPR”) and in the Federal Data Protection Act. In this context, however, we would like to point out as a precaution that data transmission on the internet (e.g. when communicating by e-mail) is generally subject to security risks and cannot be completely protected against access by third parties.
The Controller for the data processing as described below is stated in the imprint.
I. Personal data and purposes of data processing
When using our website and/or in the context of the initiation or execution of a contract we process your personal data in the extent and for the purposes as described below.
1. Use of our website
a. Server log files
We collect data about the access to our website and store this data as so-called “server log files” on our server. This includes
• your IP address,
• your operating system in use,
• your browser,
• the website visited,
• the website from which you accessed our website,
• the date and time of server inquiry as well as
• the amount of data sent in byte.
These data will not be stored together with other personal data on your part. Nevertheless, it is possible to assign the aforementioned data to your person through the storage of server log files. These data are collected and assigned in order to guarantee the security of our IT systems and to analyse any problems (cyber security). In addition, we use this data for the statistical evaluation of the use of our websites.
The legal basis for this data processing is art. 6 sec. 1 p. 1 lit. f) GDPR.
2. Data processing by other means
Otherwise, we will only process your personal data if we are authorised or obliged to do so for legal reasons or if you have given your prior and voluntary consent to data processing. This applies, for example, in the event that you voluntarily contact us and provide us with personal data, such as when you ask us for information.
II. Right of withdrawal
You can withdraw any consent to data processing at any time with future effect. Unless we are entitled to process data for another legal reason, we will delete your personal data after receipt of your withdrawal. We will receive your withdrawal at the following address:
NSB GROUP (NSB Niederelbe Schiffahrtsgesellschaft mbh & Co. KG)
Harburger Straße 47-51
We only use so-called TYPO-3 cookies. These are “permanent cookies” which enable us to identify recurring visitors to our website. These cookies remain in place beyond your visit to the website until you delete them from your browser.
If you do not wish to accept cookies from the outset, you can change your browser settings accordingly. The deactivation of cookies has no influence on the use of our website.
IV. Google Analytics
We would also like to point out that on this website Google Analytics has been extended by the code “gat._anonymizeIp();” in order to guarantee an anonymous collection of IP address-es. This activation of IP anonymization will cause Google to shorten your IP address within European Union member states or other treaty states of the European Economic Area Agreement before it is transferred to the United States. Only in exceptional cases will the full IP address be transferred to a Google server in the United States and shortened there. A personal reference can thus be excluded.
V. Google Maps
To display our address and your directions to our company, we use Google Maps on our website. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When you visit our website, Google receives information that you have accessed the relevant subpage of our website. In addition, the data mentioned under I.1.a. of this data protection declaration will be transmitted. This occurs regardless of whether Google provides an user account that you are logged in to or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your profile to be associated with Google, you must log out before activating the but-ton. Google stores your data as usage profiles and uses them for advertising, market re-search and/or needs-based design of its website. Such evaluation is carried out in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. You are required to contact Google to exercise this right.
VI. Processing of your personal data by third parties
The processing of your personal data is carried out by ourselves, by other members of NSB Group or by third parties commissioned by us or authorised by law. In the case of data processing by third parties, the third parties are also obliged to comply with the statutory rules and the data protection provisions laid down in this declaration. Apart from that, we will not transfer your personal data to third parties; in particular we will not sell them to others.
A transfer of personal data to a recipient in a country outside the European Union and the European Economic Area (“third countries”) will only take place if it is ensured that the third country or recipient offers an adequate level of data protection. This is guaranteed in particular if the EU Commission has granted such a level of protection to the third country by means of an adequacy decision. Otherwise, we will only transfer the personal data to the third country if other suitable guarantees exist and if you have enforceable rights and effective legal remedies in the event of a breach of data protection law.
VII. Your rights to information, rectification, limitation and erasure
In connection with the data processing described above, you are entitled to the rights described under a. to e. below, which you can assert at the address stated in the imprint. We will make it as easy as possible for you to exercise these rights.
a. Right to information
You have the right to ask us to confirm whether we process any personal data concerning you. If this is the case, you also have the right to request information from us about the data processed, including the purposes for which the data is processed, the recipients of the data and, if possible, the planned duration of the data processing. We will provide you with this in-formation as precisely and transparently as possible and at the same time in a comprehensible and easily accessible form.
b. Right to rectification
If we have processed incorrect or incomplete personal data on your part, you have the right to demand that we rectify or complete this data immediately.
c. Right to be forgotten
Unless we are legally entitled or obliged to store or otherwise process your personal data, you have the right to demand the immediate erasure of your personal data from us (“right to be forgotten”).
d. Right to restriction of data processing
Under the legal requirements (article 18 GDPR), you also have the right to demand the re-striction of the processing of your personal data. With the restriction, your data will not be de-leted, but will not be processed otherwise.
e. Right to data portability
You have the right to receive the personal data concerning you from us in a structured, common and machine-readable format and to transfer this data to a third party (“right to data portability”).
VIII. Automated decisions
We do not subject you to any potentially adverse decisions based solely on automated processing of your personal data. This includes in particular so-called profiling.
IX. Duration of data storage
Irrespective of the data deletion regulated under sections II. and VII., we will delete your personal data as soon as the purpose pursued by the data processing has ceased to exist or has been fulfilled and we are also not obliged to store the data due to statutory regulations.
X. Right to lodge a complaint at supervisory authorities
If you believe that the processing of your personal data is illegal, you have the right to lodge a complaint with a supervisory authority. The complaint can be filed informally with any supervisory authority. In addition to the supervisory authority of your place of residence or your workplace, the supervisory authority of the state of Lower Saxony responsible for NSB GROUP may in particular be considered. You can reach them under the following contact details:
The State Commissioner for Data Protection Lower Saxony
Telephone: +49 (0511) 120 45 00
Facsimile: +49 (0511) 120 45 99
XI. Data Protection Officer
To guarantee your data protection rights in our consortium, we have appointed a data protec-tion officer. His contact details are as follows:
Sachverständigenbüro Mülot GmbH
Grüner Weg 80
Telephone: +49 2571-5402-0
Sachverständigenbüro Mülot GmbH is available to answer any questions you may have regarding the processing of your personal data and in connection with this data protection declaration.