Data Privacy Statement

I. Name and address of the person in charge (data controller)

The data controller as defined by the General Data Protection Regulation and other national data protection laws of the member states, along with other provisions under data protection laws, is:

Heavylift Terminal Duisburg GmbH
Alte Ruhrorter Str. 42-52
47119 Duisburg
Telephone: +49 203 803-4437
E-mail: operations@heavyliftterminal.de

II. Name and address of the data protection officer

The data protection officer of the data controller is:
Klaus Keukert
S&L ITcompliance GmbH
Florinstraße 18
56218 Mülheim-Kärlich
Telephone: +49 261 92736-155
E-mail: datenschutz@duisport.de

III. General information about data processing

1. Extent to which personal data is processed
In general, we only collect and use the personal data of our users to the extent that this is necessary to provide a functioning website along with our contents and services. The personal data of our users is only collected and used after the users have provided their consent. An exception applies in cases in which consent could not be obtained ahead of time for actual reasons, and if statutory provisions allow for the processing of this data.

2. Legal basis for processing personal data
Art. 6 para. 1 a of the EU General Data Protection Regulation (GDPR) (EU-Datenschutzgrundverordnung (DSGVO)) serves as the legal basis with regard to obtaining the consent of the data subject for the processing of personal data.
Art. 6 para. 1 b GDPR serves as the legal basis for the processing of personal data that is required to implement a contract to which the data subject is a party. This also applies to processing activities that are required to implement pre-contractual measures.
Art. 6 para. 1 c GDPR serves as the legal basis to the extent that personal data must be processed in order to comply with a legal obligation that applies to our company.
Art. 6 para. 1 d GDPR serves as the legal basis in the event that the vital interests of the data subject or another natural person require the processing of personal data.
Art. 6 para. 1 f GDPR serves as the legal basis for processing if this is required to protect a justified interest of our company or a third party, and where the interests, basic rights and basic freedoms of the affected party do not outweigh the former interests.

3. Data erasure and retention period
The personal data of the data subject is erased or blocked as soon as the purpose for the storage no longer applies. Data may be stored for longer periods if this is required by the European or national legislator in EU regulations, laws or other provisions that apply to the data controller. Data will also be blocked or erased if a retention period specified by the aforementioned standards expires, unless the data must continue to be stored for the closing or implementation of a contract.

IV. Provision of the website and creation of log files

1. Description and scope of data processing
Every time someone accesses our web page, our system automatically recognizes the data and information from the system of the accessing computer.
The following data is collected in this context:
* Information about the browser type and the version used
* The user’s operating system
* The user’s Internet service provider
* The user’s IP address (anonymized)
* Date and time of access
* Websites from which the user’s system accesses our web page
* Websites that are accessed by the user’s system via our website

This data is also stored in the log files of our system. It is not stored together with other personal details about the user.

2. Legal basis for data processing
Art. 6 para. 1 f GDPR forms the legal basis for the temporary storage of the data and the log files.

3. Purpose of data processing
The system must store the IP address on a temporary basis so it can make the website available to the user’s computer. To this end, the user’s IP address must be stored for the duration of the session.
The data is stored in log files to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our IT systems. In this context, data is not analyzed for marketing purposes.
These purposes also give rise to our justified interest in data processing pursuant to Art. 6 para. 1 f GDPR.

4. Duration of storage
The data will be erased when it is no longer required to achieve the purpose for which it was collected. In instances where data was collected to make the website available, this will be the case once the respective session has ended.
The same applies after a maximum period of seven days for data stored in log files. It is possible that data is stored for longer periods. In that case, the IP addresses of the users will be erased or changed so that the accessing client can no longer be assigned.

5. Option to object / Removal option
The collection of the data for making available the website and for storing the data in log files is an absolute requirement for the operation of the web page. As a result, the user does not have the option to object in this regard.

V. Use of cookies

1. Description and scope of data processing
Our website uses cookies. Cookies are text files that are saved in / by the Internet browser on the user’s computer system. A cookie can be placed on the user’s operating system when a user accesses a website. This cookie contains a distinctive series of characters that makes it possible to clearly identify the browser when the website is accessed again later on.

We use cookies to make our website more user friendly. Some elements of our web page require that the accessing browser can also be identified after the user moves to another page. The following data is stored and transferred in the cookies:
* Consent to the use of cookies

On our website, we also use cookies that can be used to analyze the user’s surfing behavior. The following data may be transmitted in this manner:
* Date of first visit, frequency of visits, last visit
* Time stamp of page access and exit
* Websites from which the user accesses our web page

The data of users collected in this manner is assigned a pseudonym through technical precautions. This makes it impossible to link the data to the accessing user. The data is not stored together with other personal details of the users.
When accessing our website, users are informed about the use of cookies for analysis purposes with an info banner, and are referred to this Data Privacy Statement. In this context, they also receive information about how the storage of cookies can be prevented in the browser settings.

2. Legal basis for data processing
Art. 6 para. 1 f GDPR forms the legal basis for the processing of personal data using cookies.

3. Purpose of data processing
The purpose of technically required cookies is to make it easier for users to use websites. Some functions of our web page cannot be offered without the use of cookies. They require that the browser can also be recognized after the user visits another page/website?. We require cookies for the following applications:
* Cookie banners for the consent to use cookies

The user data that is collected by the technically required cookies is not used to create user profiles.

The analysis cookies are used to improve the quality of our website and its contents. Analysis cookies tell us how the website is used, which enables us to continuously optimize our product. We require cookies for the following applications:
* Differentiation between website visitors, creation of tracker objects and website optimization with Google Analytics (see also item VIII.)

These purpose also give rise to our justified interest in processing personal data according to Art. 6 para. 1 f GDPR.

4. Duration of storage, option to object / removal option
Cookies are stored on the user’s computer and are transmitted from the same to our site. Therefore you as the user also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Already stored cookies can be erased at any time. This can also be done automatically. If cookies for our website are deactivated, you may no longer be able to use all of the functions of the website.

Change Privacy Preferences

VI. E-mail contact

1. Description and scope of data processing
You can use our web page to contact us using the e-mail address provided. In that case, the user’s personal data that is transmitted with the e-mail will be stored.
In this context, no data will be forwarded to third parties. The data is only used to process the conversation.

2. Legal basis for data processing
Art. 6 para. 1 f GDPR forms the legal basis for the processing of data that is transmitted in the course of sending an e-mail. If the e-mail contact concerns the closing of a contract, Art. 6 para. 1 b GDPR also forms an additional legal basis for processing purposes.

3. Purpose of data processing
The personal data from a contact inquiry by e-mail is only processed for the purpose of handling the contact inquiry.

4. Duration of storage
The data will be erased when it is no longer required to achieve the purpose for which it was collected. With regard to the personal data transmitted by e-mail, that is the case if the respective conversation with the user has ended. A conversation has ended if it is evident, based on the circumstances, that the relevant matter has been conclusively settled.

5. Option to object / Removal option
The user can withdraw his or her consent to the processing of personal data at any time. Users who contact us by e-mail can object to the storage of their personal data at any time. In this case, the conversation cannot be continued.
A withdrawal of consent and an objection to storage can be sent by e-mail to: operations@heavyliftterminal.de. In that case, all personal data that was stored during the course of the contact process will be erased.

VII. Rights of the data subject

If your personal data is processed, you are deemed an affected person (data subject) in terms of GDPR, and you are entitled to the following rights vis-a-vis the data controller:

1. Right to access
You can ask the data controller to confirm whether your personal data is processed by us.
If that is the case, you can request the following information from the data controller:
* the purposes for which the personal data is processed;
* the categories of personal data that are processed;
* the recipients or categories of recipients to which your personal data has been or will be disclosed;
* • the amount of time your personal data will be stored, or, if concrete information cannot be provided in this context, the criteria for determining the duration of the storage;
* the existence of a right to correct or erase your personal data, a right to restrict processing by the data controller, or a right to object to this processing;
* the existence of a right to complain to the supervisory authority;
* all available information about the origin of the data, if the personal data is not collected from the data subject;
* the existence of an automated decision-making process (including profiling) pursuant to Art. 22 para. 1 and 4 GDPR and – at least in these cases – meaningful information about the logic involved as well as the consequences and intended effects of such processing for the data subject.
* You have the right to demand information about whether your personal data is transmitted to a third country or an international organization. In this context, you can request to be informed of the appropriate guarantees pursuant to Art. 46 GDPR in the context of the transmission.

2. Right to correction
You have a right to correction and/or completion vis-a-vis the data controller if your personal data that is processed is incorrect or incomplete. The data controller must promptly make the correction.

3. Right to restrict processing
* You can request the restricted processing of your personal data under the following conditions:
* if you dispute the correctness of your personal data for a time period that allows the data controller to check the correctness of the personal data;
* if the processing is unlawful and you decline the erasure of the personal data and instead demand the restricted use of the personal data;
* if the data controller no longer requires the personal data for the purpose of processing, but you require the data to assert, exercise or defend legal claims, or
* if you have objected to the processing pursuant to Art. 21 para. 1 GDPR and it has not yet been determined whether the justified concerns of the data controller outweigh your concerns.

If the processing of your personal data was restricted, this data – apart from the storage – may only be processed with your consent or for the purpose of asserting, exercising or defending legal claims or to protect the rights of another natural or legal person, or for reasons of an important public interest of the European Union or an EU member state.
If the restriction on processing was restricted according to the above requirements, you will be informed by the data controller before the restriction is lifted.

4. Right to erasure
a. Obligation to erase
You can ask the data controller that your personal data is erased immediately; the data controller is required to immediately erase this data insofar as one of the following reasons apply:
* Your personal data is no longer required for the purpose for which it was collected or otherwise processed.
* You withdraw your consent on which the processing pursuant to Art. 6 para. 1 a or Art. 9 para. 2 a GDPR was based, and no other legal basis for processing exists.
* You object to processing pursuant to Art. 21 para. 1 GDPR, and there are no overriding justified reasons for processing, or you object to the processing pursuant to Art. 21 para. 2 GDPR.
* Your personal data was processed unlawfully.
* The erasure of your personal data is required to fulfill a legal obligation according to EU law or the laws of the member states that apply to the data controller.
* Your personal data was collected in relation to services offered by the information company pursuant to Art. 8 para. 1 GDPR.

b. Information to third parties
If the data controller has publicly disclosed your personal data and is obliged to erase the same pursuant to Art. 17 para. 1 GDPR, he will take the appropriate (technical) measures, taking into account the available technology and implementation costs, to inform the persons in charge of data processing who are processing the personal data that you as the data subject have requested the erasure of all links to this personal data or copies or replicas of this personal data.

c. Exceptions
The right to erasure does not apply if the data must be processed
* to exercise the right to freedom of expression and information;
* to fulfill a legal obligation that requires processing according to the laws of the European Union or the member states that apply to the data controller, or to perform a task that is in the public interest or that is performed in the exercise of public authority, which was transferred to the data controller.
* for reasons of the public interest in the area of public health pursuant to Art. 9 para. 2 h and i, and Art. 9 para. 3 GDPR;
* to assert, exercise or defend legal claims.

5. Right to be informed
If you have asserted your right to correction, erasure or restriction of processing against the data controller, he is required to inform all recipients to whom your personal data was disclosed of this correction or erasure of the data or restriction to processing, unless this is not possible or is associated with unreasonable effort.
You have the right – vis-a-vis the data controller – to be informed of these recipients.

6. Right to data transferability
You have the right to receive your personal data, which you have provided to the data controller, in a structured, popular and machine-readable format. Furthermore, you have the right to transfer this data to another data controller without obstruction by the data controller to whom the personal data was provided, as long as
* the processing is based on a consent pursuant to Art. 6 para. 1 a GDPR or Art. 9 para. 2 a GDPR or on a contract pursuant to Art. 6 para. 1 b GDPR, and
* the data is processed using automated methods.

In exercising this right, you are also entitled to bring about the transfer of your personal data from one data controller to another, insofar as this is technically possible. This action may not impair the freedoms and rights of other persons.
The right to data transferability does not apply to the processing of personal data that is required for the performance of a task that is in the public interest or that is performed in the exercise of public authority, which was assigned to the data controller.

7. Right to object
You have the right to object at any time to the processing of your personal data on the basis of Art. 6 para. 1 e or f GDPR for reasons that arise from your special situation; this also applies with regard to profiling based on these provisions.
The data controller will no longer process your personal data unless he is able to submit compelling reasons worthy of protection as to why this data must be processed, which take precedence over your interests, rights and freedoms, or if the data is processed for the purpose of asserting, exercising or defending legal claims.
Where your personal data is processed for direct advertising purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct advertising.
If you object to the processing of your data for direct advertising purposes, your personal data will no longer be processed for these purposes.
In the context of the use of services offered by the information company, you have the option – notwithstanding Directive 2002/58/EC – to exercise your right of objection by means of automated methods in which technical specifications are used.

8. Right to withdraw consent under data protection laws
You have the right to withdraw your consent under the protection laws. The withdrawal of consent does not affect the legitimacy of the processing activities that took place until the time consent was withdrawn.

9. Automated decision in an individual case, including profiling
You have the right to not be subjected to a decision that is solely based on automated processing – including profiling – which results in legal consequences for you personally or that significantly comprises your person in a similar fashion. This does not apply if
* the decision is required to conclude or implement a contract between you and the data controller,
* the decision is admissible based on regulations of the European Union or the member states that apply to the data controller, and these regulations contain appropriate measures to protect your rights and freedoms as well as your justified interests, or
* the decision is made with your explicit consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 a or g GDPR applies and appropriate measures have been taken to protect the rights and freedoms and your justified interests.
With regard to the first and last-mentioned cases, the data controller will take appropriate measures to protect the rights and freedoms and your justified interests, which includes at minimum the right to bring about an intervention by an individual at the data controller, the right to present one’s own point of view and the right to challenge the decision.

10. Right to complain to a supervisory authority
Without prejudice to other legal remedies under administrative law or legal redress through the courts, you have the right to complain to a supervisory authority, especially in the member state of your place of residence, your workplace or the suspected location of the breach, if you are of the opinion that your personal data is processed in contravention of the GDPR.
The supervisory authority to which you have submitted the complaint will inform the complainant of the status and results of the complaint, including the option to seek legal redress through the courts pursuant to Art. 78 GDPR.

VIII. Other data privacy statements for plugins

Google Analytics
For the website https://www.heavyliftterminalduisburg.de/, Heavylift Terminal Duisburg GmbH uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files which are stored on your computer and which make it possible to analyze your use of the website. The information generated by the cookie about your use of this website is usually transmitted to and stored on a Google server in the United States. In the event IP anonymization is activated on this website, Google will however shorten your IP address beforehand within the member states of the European Union or other contracting states of the Treaty on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the US and shortened in that location. On the order of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, to compile reports on website activities, and to provide other services relating to the use of the website and the Internet to the website operator. The IP address transmitted by your browser in the context of Google Analytics will not be combined with other Google data. You may prevent the storage of cookies by selecting the appropriate settings on your browser; however, please note that if you do this, you may not be able to use all of the functions of this website.

You can also prevent the data (including your IP address) created by the cookie relating to your use of the website from being collected and processed by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout

You can also prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: Disable Google Analytics.

In different locations of the website https://www.heavyliftterminalduisburg.de/, Heavylift Terminal Duisburg GmbH uses several cookies designed to make the product of Heavylift Terminal Duisburg GmbH more user friendly. Users are free to prevent the installation of such cookies by making the corresponding settings in their browser. However, Heavylift Terminal Duisburg GmbH advises that in that case users will not be able to use all functions on the website https://www.heavyliftterminalduisburg.de/.