Privacy Policy

Data protection information

This privacy policy explains how we handle your personal data. To make the processing of your data transparent, we provide an overview of the relevant processing activities and your rights under the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Karl Ludwig Projektentwicklungsgesellschaft mbH (hereinafter “we” or “us”) is responsible for data processing.

Contact 
If you have any questions or suggestions regarding this information, or if you wish to contact us to exercise your rights, please address your enquiry to:

Karl Ludwig Projektentwicklungsgesellschaft mbH 
Magdalenenstraße 11 
20148 Hamburg 

T (040) 60 77 90 510
E  info@klp-hh.de

Legal basis

“Personal data” means any information relating to an identified or identifiable natural person. We process personal data in compliance with applicable data protection laws, in particular the GDPR and the BDSG. We process personal data only where permitted by law, namely:

• with your consent (Art. 6(1)(a) GDPR),
• to perform a contract or take steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR),
• to comply with a legal obligation (Art. 6(1)(c) GDPR), or
• where processing is necessary for our legitimate interests or those of a third party, unless your interests or fundamental rights and freedoms prevail (Art. 6(1)(f) GDPR).

Storage duration

Unless stated otherwise below, we store data only as long as necessary to fulfil the processing purpose or to comply with contractual or legal obligations. Legal retention obligations may arise in particular under commercial or tax law.

Categories of recipients

We use processors to handle certain processing operations (e.g. hosting, IT maintenance/support, customer and order management, accounting and billing, marketing measures, and secure destruction of files and data carriers). Processors act on our behalf and are contractually required to implement appropriate technical and organisational measures.

We may also transfer personal data to recipients such as postal/delivery service providers, our bank, tax advisers/auditors, or tax authorities. If data is transferred to other recipients, we will inform you during the respective processing activity.

Processing when exercising your rights (Arts. 15–22 GDPR)

If you exercise your rights under Arts. 15 to 22 GDPR, we process the personal data provided for the purpose of implementing these rights and to be able to document compliance. We restrict processing in accordance with Art. 18 GDPR where applicable. The legal basis is Art. 6(1)(c) GDPR in conjunction with Arts. 15–22 GDPR and Section 34(2) BDSG.

Your rights

As a data subject, you have the following rights in particular:

• Right of access (Art. 15 GDPR; Section 34 BDSG)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR; Section 35 BDSG)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to withdraw consent at any time (Art. 7(3) GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Right to object

Where processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object on grounds relating to your particular situation (Art. 21(1) GDPR). If we process your personal data for direct marketing purposes, you may object at any time (Art. 21(2) and (3) GDPR).

Data protection officer

You may contact our data protection officer, IITR Datenschutz GmbH, Eschenrieder Str. 62c, 82194 Gröbenzell, via: info@klp-hh.de 

Data processing on our website

Server log files

When you use our website for informational purposes, the information your browser transmits to our server is stored automatically (i.e. without registration). This includes: browser type/version, operating system, accessed page, referrer URL, IP address, date/time of server request, and HTTP status code. Processing is carried out to protect our legitimate interests (Art. 6(1)(f) GDPR) and serves technical administration and security. Data is deleted after seven days unless there are concrete indications of unlawful use requiring further investigation. We cannot identify you as a data subject based on this information alone; Arts. 15–22 GDPR do not apply accordingly in such cases (Art. 11(2) GDPR), unless you provide additional information enabling identification.

Transfer to third countries

Visiting our website may involve the transfer of certain personal data to third countries (outside the scope of the GDPR). Transfers are permitted where an adequacy decision exists or appropriate safeguards are in place (Art. 46 GDPR), or where an exception under Art. 49 GDPR applies. Unless otherwise stated below, we use EU Standard Contractual Clauses as appropriate safeguards for transfers to processors in third countries.

Cookies 

We use cookies and similar technologies. Cookies are small text files stored by your browser when you visit a website. They allow the browser to be recognised by our web server.

Cookies necessary for electronic communication or the technically error-free operation of the website are stored on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in storing such cookies to provide our services technically reliably and in an optimised manner.

Cookies are stored on the user’s device for a period of up to two years. You can delete cookies at any time in your browser settings. You may also object to the use of cookies generally or in individual cases via your browser settings.

Cookies bearbeiten

Contact form

Our website provides a contact form for sending messages. Your data is transmitted in encrypted form (https). Mandatory fields are required to process your request; without them, we cannot process your enquiry. Providing additional information is voluntary. Alternatively, you may contact us via the email address provided. We process the data based on our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

Further data processing

Contacting us by email 
If you send us a message via the email address provided, we process the transmitted data to respond to your enquiry. The legal basis is our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).
Applications 
If we cannot offer you employment, we retain your data for up to six months after a rejection to respond to any queries related to the application and decision. This does not apply if legal provisions prevent deletion, if further storage is necessary for evidentiary purposes, or if you have expressly consented to longer storage. The legal basis is Section 26(1) sentence 1 BDSG. If we store your applicant data longer based on your consent, you may revoke that consent at any time (Art. 7(3) GDPR); the withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.