Privacy policy

1. General information

This privacy policy describes the processing of personal data when using the www.hnholding.de website. You will also be informed about the options to contact us and to assert your rights.

2. Personal data

Personal or person-related data is information relating to a natural identifiable person (subsequently “data subject”). A natural person is identifiable if they can be identified directly or indirectly, in particular by being assigned to one or more categories of data.

3. Data controller and data protection officer

The data controller within the meaning of the General Data Protection Regulation, other applicable data protection laws and other data protection provisions is:

HN Holding GmbH
Johannes-Stelling-Straße 19
19053 Schwerin

The following person is designated as data protection officer:
Jörg Schulz
QuMaKom – Organisationsentwicklung
Am Packhof 7
19053 Schwerin

Contact
Data controller: immobilien@hnholding.de
Data protection officer: datenschutz@qumakom.de

4. Collection of data and information

The collection, processing and use of your personal data by HN Holding GmbH / www.hnholding.de only takes place if there is a legal basis, you have given consent or in conjunction with pre-contractual measures (point (b) of Article 6) GDPR).

When you visit our website, the following data is collected:

The type of browser and version used,
The operating system used,
The website from where an accessing system reaches our website (known as referrer),
The subpages accessed on our website via the accessing system,
The date and time of access to the website,
The anonymised Internet Protocol (IP) address,
Data and information to protect our IT systems

5. Disclosure of data to third parties

The purpose of the use of your personal data lies exclusively with its use by HN Holding GmbH. Your data will only be disclosed to third parties in connection with consent. If we are obliged to do so by law or by a court order, we will transfer your data to authorised parties.

6. Your rights as a data subject

With the application of the GDPR, any data subject can assert their rights against the data controller under certain provisions.

You have the right to request from us access to your data stored by us in accordance with Article 15 GDPR (restrictions, if applicable, according to Article 34 BDSG, which is the German Federal Data Protection Act).
You have the right to obtain the rectification of inaccurate data stored about you (Article 16 GDPR).
You have the right to obtain the erasure of your data (Article 17 GDPR), provided that other statutory regulations (e.g. statutory storage obligations or the restrictions according to Article 35 BDSG) or an overriding interest on our part (e.g. to defend our rights and claims) do not prevent this.
You have the right to obtain the restriction of processing of your data, taking Article 18 GDPR into account.
You have the right to object to the processing of your data in accordance with Article 21 GDPR. This right of objection only applies in the case of special circumstances in your personal situation, whereby our company’s rights may possibly preclude your right of objection.
You have the right to receive your data in a structured, commonly used and machine-readable format or to transmit it to a third party under the provisions of Article 20 GDPR.
You have the right to withdraw consent given to the processing of personal data with effect for the future (see point 4.3).
You have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR). We recommend that you always lodge a complaint with us first.

Applications to exercise your rights shall be addressed in writing to the data controller indicated above.

7. Contact form and email

In order to facilitate quick accessible contact and direct communication with us, we have a contact form on our website. If a data subject contacts a data controller by email or using a contact form, the personal data transmitted by the data subject will be processed. This data is sent to us on a voluntary basis and stored for the purpose of contacting us.

8. Duration of storage

The duration of the storage of personal data is regulated by the respective statutory retention period. Once this period has expired, the corresponding data will be routinely erased, unless there is a legal or contractual obligation to store it.

9. SSL encryption

This website uses SSL (Secure Socket Layer) encryption for the transmission of data from your browser to our server and to servers that provide files that we integrate on our website. With SSL, data is transmitted in encrypted form. The data cannot be changed and the sender can be identified. You can recognise the presence of SSL encryption by the text “https” in front of the address of the website you are visiting in the browser.

10. References to third-party websites

References to third-party websites are offered on this website in the form of links. Data will only be transferred to the link destination if you click such a link. This is technically necessary. The specific data transmitted will be: your IP address, the time you clicked on the link, the page where you clicked on the link, information about your Internet browser. If you do not want this data to be transferred to the link destination, do not click the link.

11. Links to other websites

Our website / app may from time to time contain links to third-party websites or to our other websites. If you follow a link to any of these websites, we advise you that these websites have their own privacy policies and that we do not assume any responsibility or liability for these policies. Please review their privacy policy before you disclose any personal information to these websites.

12. Automated decision making

We do not use automated decision-making procedures (profiling) in accordance with Article 22 GDPR. If we want to use such procedures, we will inform you about them here.

13. Security

We protect our website and other IT systems against loss, destruction, unauthorised access, unauthorised modification or unauthorised dissemination of your data by means of appropriate technical and organisational measures. However, complete protection against all dangers is not always possible in practice despite all the care taken. Since we cannot guarantee complete data security when communicating by email, we recommend sending confidential information by post.

14. Amendment of this privacy policy

We reserve the right to amend this privacy policy if the legal situation or this online offer or the type of data collection changes. However, this only applies to statements concerning data processing. If the user’s consent is necessary or if this privacy policy contains a regulation on the contractual relationship with users, the privacy policy is only amended after the user’s consent.

Information on data processing in connection with Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If this website’s data controller is located outside the European Economic Area or Switzerland, Google Analytics data processing is carried out by Google LLC. Google LLC and Google Ireland Limited are subsequently referred to as “Google”.

Google Analytics uses so-called “cookies”, text files which are stored on the website visitor’s computer and which enable analysis of the use of the website by the website visitor. The information generated by the cookie about the use of this website by the website visitor (including the abbreviated IP address) is usually transmitted to a Google server and stored there.

Google Analytics is only used on this website with the extension “_anonymizeIp()”. This extension ensures anonymisation of the IP address by shortening it and excludes the possibility of personal identification. This extension means that the IP address is abbreviated beforehand by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address which Google Analytics transmits from the corresponding browser will not be combined with other data from Google.

Google will use the information generated on behalf of the website operator to evaluate the use of the website, to compile reports on website activities and to provide other services related to website use and Internet use to the website operator (point (f) of Article 6(1) GDPR). The legitimate interest in data processing lies in optimising this website, analysing the use of the website and adapting the content. The users’ interests are sufficiently protected by pseudonymisation.

Google LLC offers safeguards based on the standard contractual clauses to maintain an adequate level of data protection. The data sent and linked to cookies, user identifiers (e.g. user ID) or advertising IDs will be automatically erased after 50 months. Once the retention period has ended, data will be erased automatically once a month.

The collection by Google Analytics can be prevented by the website visitor adjusting the cookie settings for this website. The collection and storage of the IP address and the data generated by cookies can also be objected to at any time with effect for the future. The corresponding browser plugin can be downloaded and installed at the following link: https://tools.google.com/dlpage/gaoptout.

The website visitor can prevent collection by Google Analytics on this website by clicking the following link. An opt-out cookie is set which prevents the future collection of data when visiting this website.

You can find more information about how Google uses data in this context, as well as your options as regards settings and objections, in Google’s data privacy notice (https://policies.google.com/privacy), as well as in the settings for the way in which advertising is presented by Google (https://adssettings.google.com/authenticated).