HanseBau

Privacy policy

Dear visitor,
with the following information, we would like to inform you about how we handle your data that is collected when you use our website. This privacy policy applies to the website www.hansebau.group and also explains the processing of your personal data on our Facebook and Instragram company profiles.

A. Responsible

I. Name and address of the controller and data protection officer

Hanse Bau & Solar GmbH
Am Stadtpark 2A
27711 Osterholz-Scharmbeck
T. +49 (0)421 25 757 298
F. +49 (0)421 25 757 299
info@hansebau.group
www.hansebau.group

represented by the managing director: Kamil Piotr Burda

II Joint responsibility for corporate social media profiles

We also operate a Facebook and Instagram company profile. Facebook and Instagram are offered in Europe by Facebook Ireland Ltd. With regard to Instagram and Facebook Insights data, we are joint controllers together with Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland (“Facebook”). The corresponding data processing is carried out on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR, which you can access here.

You can contact Facebook's data protection officer using this form. The data protection authority responsible for Facebook is the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland, www.dataprotection.ie.

B. Processing of data by the controller

I. Use of the website

You can visit our website without having to provide any personal details. However, information about your visit to the site is collected as standard without any action on your part.

1. provision of the website, log files

Each time our website is accessed, the following data (access data) is recorded and stored in a log file on our provider's server until it is automatically deleted:

  •  the IP address of the requesting computer;
  •  Date and time of access;
  •  Name and URL of the retrieved data;
  •  Website from which the access was made;
  •  Name of the Internet service provider;
  •  amount of data transferred;
  •  Message whether the retrieval was successful;
  •  Recognition data of the browser and operating system used.

The temporary processing of the IP address by the system is necessary to enable the website to be delivered to your computer. For this purpose, your IP address must remain stored for the duration of the session. The data is also processed for technical reasons so that you can access the content and display the website. Our legitimate interest in data processing pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR also lies in the purposes described above. The log files are deleted after 7 days and used exclusively for the purpose of ensuring the general functionality of the website, in particular to track abusive access. You can object to the storage of log files. You can find more information about your right to object in section F.

2. Cookies

When you visit our website, cookies are stored on your computer. You will be informed by an info banner about the use of cookies for analysis purposes and referred to this privacy policy. Cookies are small text files that are stored in the cache of your Internet browser for the duration of your browser session (so-called session cookies) or for a fixed period (so-called permanent cookies) on your hard disk. Cookies make it possible to recognize your Internet browser so that you can be provided with content tailored to your needs and wishes more quickly and in a more targeted manner on future visits to our website. We therefore use cookies in order to be able to offer our legitimate interest in providing a website tailored to the wishes of visitors. The cookies do not store any personal data.

We only use session cookies, which are automatically deleted at the end of the session or when the browser is closed. We do not store any data from these cookies. The PHP session cookie is used to reproduce your last search or selection in the lawyer search as a convenience function. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. The legitimate interest lies in facilitating data entry in the search forms on our website.

As a rule, you have the option of preventing the storage of cookies by making the appropriate setting in the Internet browser you are using and thereby exercising your right to object. You can find more information about your right to object in section E. However, this may limit the use of our website.

3. Google-Maps

The Google Maps service is integrated into our website to illustrate and display the contact address. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The processing of your IP address by Google LLC is required to display the Google Maps map.

Google LLC is Privacy Shield certified. The cooperation with Google LLC in terms of data protection law is based on a concluded contract on joint responsibility in accordance with Art. 26 GDPR, available at https://privacy.google.com/intl/de/businesses/mapscontrollerterms/.

Furthermore, by using Google Maps, the user enters into a direct user relationship with Google. During use, Google collects and processes data about the use of the map function by the user. Further information on data processing can be found in Google's privacy policy (https://policies.google.com/privacy?hl=de).

The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. The legitimate interest is to make it easier to find our law firm locations. We do not process any personal data ourselves when providing Google Maps. You must exercise your right to object directly with Google LLC. You can find more information about your right to object in section F.

4. Matomo (Piwik)

This website uses the free web analysis tool Matomo, an open source software for the statistical evaluation of visitor access, which enables us to analyze visitor behavior and, based on this, to optimize our website. Matomo uses “cookies”.

For this purpose, the usage information generated by the cookie, such as in particular the pages you have accessed, the browser you are using, your computer's operating system, the referrer URL (previously accessed website) and an anonymized (shortened) part of your IP address, is transmitted to our server and stored for usage analysis purposes. Your IP address is anonymized immediately during this process, i.e. after processing and before it is stored, so that you as a user remain anonymous to us. This prevents the individual page views from being assigned to an identifiable person. The information generated by the cookie about your use of our website is also not transferred to other servers or passed on to third parties.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

In addition, you can object to the storage and use of this data from your visit at any time if you do not agree to it being stored and analyzed by Matomo. In this case, you can prevent a web analysis cookie from being stored in your browser by clicking in the field below this paragraph. For this purpose, a so-called opt-out cookie is stored in your browser, which means that Matomo does not collect any session data. Please note: If you delete your cookies, the opt-out cookie will also be deleted and may have to be reactivated by you if you wish to (continue to) prevent data collection by Matomo.

5. Forwarding to other websites

Our website may contain links to the websites of other providers. When you use these links, i.e. click on them, you will be redirected to these websites of other providers. Other data protection regulations may apply on these websites, over which we have no influence. Please refer to the data protection provisions of these websites for information on how they handle your personal data.

II E-mail contact

For questions of any kind, we offer you the opportunity to contact us by e-mail via a link provided on the website. It is necessary to provide a valid e-mail address so that we know who sent the request and can answer it. Further information can be provided voluntarily.

Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily given consent.

The personal data collected by us when you use the link will be deleted after your inquiry has been dealt with. If your request results in a contractual relationship, our separate data protection information applies.

III Use of your personal data in our social media channels

We currently have a Facebook and Instagram company profile.

Facebook processes your personal data

In particular, we would like to point out that

  • Facebook can assign your activities on our Facebook and Instagram company profiles to your social media profile if you are logged in and also uses them for its own business purposes in accordance with the Facebook and Instagram privacy policy. You can only avoid this if you are logged out and visit our Facebook or Instagram company profile in the private mode of your browser or contact us via other communication channels.
  • User data on Facebook and Instagram may also be transmitted by Facebook to a server in a third country and therefore processed outside the European Union. Facebook uses standard contractual clauses for this or relies on the adequacy decisions issued by the European Commission with regard to certain countries.

Processing purposes

Legal basis

Insofar as we process your personal data on Instagram (for example, when we share your posts on our profile, respond to your posts or carry out other social media actions provided for on Facebook Instagram), this is done exclusively for the purpose of presenting our law firm to users on Instagram and introducing it to a broad public via Instagram.

Art. 6 para. 1 sentence 1 lit. f GDPR (legitimate interest: public relations, company presentation)

We use the “Page Insights” tool provided by Facebook for Facebook and “Page Insights” for Instagram to find out more about our subscribers, how our posts were received and how users interacted with them. You can find out which statistics Facebook provides us with and what data they are based on here.  

Art. 6 para. 1 sentence 1 lit. f GDPR (legitimate interest: Optimization of posts on our Facebook and Instagram company profiles, improvement of communication with customers and interested parties)

C. Disclosure of data

Apart from the circumstances described above, your personal data collected via the website will not be transferred to third parties. We only pass on your personal data to third parties if

  • you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
  • the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
  • there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR
  • has another data protection authorization for the disclosure of your personal data.

D. Data security

We use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser when you visit our website. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

E. Rights of data subjects

You have the right to

  • § in accordance with Art. 15 GDPR to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling in accordance with Art. 22 (1) and (4) GDPR and, if applicable, meaningful information about its details. You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization; in this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer;
  • in accordance with Art. 16 GDPR, to demand the immediate rectification of incorrect or incomplete personal data stored by us;
  • to demand the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, for the establishment, exercise or defense of legal claims or for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Art. 89 (1) GDPR, insofar as the aforementioned right is likely to render impossible or seriously impair the achievement of the objectives of that processing;
  • pursuant to Art. 18 GDPR to obtain restriction of processing of your personal data where the accuracy of the data is contested by you, the processing is unlawful but you oppose the erasure of the data and we no longer need the data but you require it for the establishment, exercise or defense of legal claims or you have objected to processing pursuant to Art. 21 GDPR; if the processing of personal data concerning you has been restricted, such data may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State and you will be informed by the controller before the restriction is lifted;
  • in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller, provided that this does not adversely affect the freedoms and rights of others. This right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • pursuant to Art. 22 GDPR not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless the decision is necessary for entering into, or the performance of, a contract between you and us, is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests or is based on your explicit consent. These decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests;
  • pursuant to Art. 77 GDPR to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office. The supervisory authority with which the complaint has been lodged will inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

F. Right to object

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. e or f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

If you wish to exercise your right of revocation or objection, simply send an e-mail to info@hansebau.group (Data Protection Officer).

G. Right of withdrawal

If your personal data is processed on the basis of consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, you can revoke your consent to us at any time in accordance with Art. 7 para. 3 GDPR. As a result, we may no longer continue the data processing that was based on this consent in the future;

H. Up-to-dateness and amendment of this privacy policy

This privacy policy is currently valid and was last updated in January 2025.

It may become necessary to amend this privacy policy as a result of the further development of our website and offers on it or due to changes in legal or official requirements. The current privacy policy can be viewed at any time on the website at https://hansebau.group/en/privacy-policy/.

I. Online applications

It is possible to apply for our currently advertised vacancies via our website. Applications can be sent by post or e-mail to the respective location offering the position. If you use the e-mail address, you can also attach application documents.

The provision of these e-mail addresses for applications serves our legitimate interests in creating another way of sending applications and addressing a wider range of potential applicants. Alternatively, you can also send us your application in writing by post. The data collected is stored solely for the purpose of carrying out the application process. The storage period is a maximum of 6 months from the end of the application process. The data will only be passed on to third parties as described under C. Unsolicited applications received electronically (by e-mail) are regularly deleted immediately after receipt. However, we reserve the right to store application documents for a possible contact for up to 12 months if our legitimate interests indicate that a position for the specific application will be considered within this period. By sending the unsolicited application, you also declare your consent to this storage. You are entitled to revoke your consent to storage at any time at the e-mail address of the location concerned.Dear visitor,