Our privacy policy
Subject of this privacy policy
We are delighted that you are interested in our company. Data protection is a matter of particular importance to the management of SeaRenergy Offshore Holding GmbH (hereinafter referred to as „we“ or „us“). We therefore wish to provide you with detailed information about the data collected when you visit our websites (www.searenergy.com and www.searenergygroup.com) (hereinafter referred to as „Our Website“) and use the services offered there, and how this data is processed by us.Definitions
In this information, we use terms from the General Data Protection Regulation (GDPR). To make these terms easier to understand, we would like to explain them briefly as follows.- Personal data
- According to Art. 4 No. 1 GDPR, „personal data“ is any information relating to an identified or identifiable natural person. A natural person is identifiable if the person can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. For the sake of simplicity and clarity, we will only use the terms „data“ or „your data“ below, except in this section.
- Processing
- According to Art. 4 No. 2 GDPR, „processing“ means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
- Controller
- According to Art. 4 No. 7 GDPR, „controller“ is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
- Processor
- According to Art. 4 No. 8 GDPR, „processor“ is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.
Controller / Service Provider
Controller within the meaning of the GDPR and at the same time the service provider within the meaning of the Digital Services Act (DDG) is:Controller
SeaRenergy Offshore Holding GmbH Alsterufer 26 20354 Hamburg Germany Represented by the managing directors Jan B. Steffens and Dr Benjamin Vordemfelde. Hamburg Local Court HRB 182674 Phone: +49 40 808 172 100 Email: info@searenergy.comData Protection Officer
Mauß Datenschutz GmbH Neuer Wall 10 20354 Hamburg Germany Phone: 040 / 999 99 52-0 Email: datenschutz@datenschutzbeauftragter-hamburg.deCollection and use of your data
The scope and type of processing of your data differs depending on whether you visit Our Website only to retrieve information or use the functions offered there, e.g. writing to us or submitting an application to us.Informational use
For the purely informational use of Our Website, it is generally not necessary for you to provide any data. In this case, we only process the data that your internet browser automatically transmits to us, such as:- IP address
- Date and time of the request
- Page accessed / name of the file accessed
- Amount of data transferred
- Notification of whether the access / retrieval was successful
- Internet address from which the page or file was accessed or the desired function was initiated
- Web browser used
Application
You can also apply for a vacant position using the functions offered on Our Website. Separate data protection information applies in this case, which you can view here: Information on data protection for applicants.Other enquiries via the contact details on Our Website
If you contact us using the contact form on Our Website or the contact details provided there, we will process the information you provide exclusively for the purpose of processing your specific request. Contacting us is, of course, voluntary and you decide which data you disclose to us. However, if you use our email contact form, your email address will be transmitted in any case. The processing of the data relating to the respective request is carried out on the legal basis of Art. 6 para. 1 lit. a) and b) GDPR.Use of third-party providers
Furthermore, your data is also processed by third-party providers, as explained in more detail in section “Use of cookies or similar technologies”.General information on the duration of storage
In principle, data that is stored solely on the basis of consent pursuant to Art. 6 para. 1 lit. a) GDPR will be deleted if you revoke your consent, unless statutory retention obligations prevent this or another legal basis permits or requires further storage. Other data will only be stored for as long as they are necessary for the purpose for which they were collected, unless statutory retention periods prevent this or a legal basis permits or requires further storage. Insofar as statutory retention obligations permit further storage, the legal basis for this is Art. 6 para. 1 lit. c) GDPR.Recipients of your data
Internally, those employees who need your data to perform the tasks assigned to them will have access to it, e.g. IT staff or, in the case of job applications, the human resources department. As a matter of principle, we do not pass on your data to third parties. However, we use service providers as processors who support us in processing the data. They process your data on the basis of a contract concluded with us in accordance with the provisions of Art. 28 GDPR and on our instructions. The legal basis for this is Art. 28 and 29 GDPR. Such service providers or their sub-service providers may also be located in countries outside the European Union or the European Economic Area, so-called third countries. The European Commission has certified certain third countries as having data protection standards comparable to those in the European Union or the European Economic Area through so-called adequacy decisions (a list of these countries and a copy of the adequacy decisions can be found here: adequacy decisions of the European Commission). However, in other third countries to which data may be transferred, there may not be a consistently high level of data protection due to a lack of legal provisions. In such cases, we use the standard contractual clauses issued by the European Commission, which, in accordance with Art. 44 GDPR, provide appropriate guarantees that an adequate level of data protection exists for the data. You can access the standard contractual clauses of the European Commission here: Standard Contractual Clauses.Use of cookies or similar technologies
We use cookies and other technologies (hereinafter referred to as „Technologies„) on Our Website that are either stored on your end device or access information stored there. We only use these Technologies if you have expressly consented to them, unless these Technologies are absolutely necessary for visiting Our Website.Consent Tool
We use a tool on Our Website (hereinafter referred to as the „Consent Tool„) that allows you to give your consent in a separately opening window to the use of Technologies and to revoke this consent. This Consent Tool uses a cookie to store whether you have given your consent to the Technologies used or whether you have revoked your consent thereafter. For this reason, this cookie is absolutely necessary for visiting Our Website and is therefore set even without your consent. This cookie is stored for a period of 1 year. The legal basis for the processing of your data related to the consent or the revocation of your consent is Art. 6 para. 1 lit. c) GDPR.Cookie Preferences
Google Analytics
If you have given your consent, we use Google Analytics, an analysis tool provided by Google LLC, whereby the service is provided on Our Website by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“). The legal basis for the processing of data through Google Analytics is Art. 6 para. 1 lit. a) GDPR. Google Analytics uses Technologies that enable an analysis of your use of Our Website. The purpose of the Google Analytics component is to analyse traffic on Our Website. Google uses the collected data and information on our behalf, among other things, to evaluate the use of Our Website and to create online reports for us that show the activities on Our Website, and to provide us with further services relating to the use of Our Website. We have concluded a contract with Google in accordance with Art. 28 GDPR. We use the „anonymizeIP“ function (so-called IP masking). By activating IP anonymisation on Our Website, your IP address will be shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the US and shortened there. The IP address transmitted by your browser within the scope of Google Analytics will, according to Google, not be merged with other data from Google. During your visit to Our Website, information such as the time of access, the location from which access was made, and the frequency of visits to Our Website etc. are collected. The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, but the data is stored on a server in the US and Google LLC, based in California, US, or other companies belonging to the Google Group may access the data and, in certain cases, US authorities may also access the data in accordance with US law. For the US, there is an adequacy decision by the European Commission, with the special feature that this only applies to companies that are certified according to the adequacy decision. Google LLC is certified for this purpose. Further details can be found at: Data Privacy Framework Program Overview. It cannot be ruled out that Google may also process the data for its own purposes. Further information on the processing of data by Google can be found at: Google Privacy Policy. You can revoke your consent at any time in our Consent Tool without affecting the lawfulness of the processing carried out on the basis of your consent until revocation. The user data transmitted to Google through the use of Google Analytics is automatically deleted after 14 months. Data whose retention period has expired is automatically deleted once a month. Event data is deleted after 2 months. Event data is data for events specified by us that are important for Our Website. If you interact with such a specified event, this data is stored for 2 months.Google Maps
If you have given your consent, we use Google Maps, a tool provided by Google LLC, whereby the service is provided on Our Website by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“). The legal basis for the processing of your data via Google Maps is Art. 6 para. 1 lit. a) GDPR. We use Google Maps on Our Website to show you the location and addresses of our branches, which also gives you access to other Google Maps features, such as route planning, etc. We have concluded a contract with Google in accordance with Art. 28 GDPR for this purpose. When you use Google Maps, Google processes data such as your IP address, geo-data, data you enter to use the route planner, etc. The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, but the data is stored on a server in the US and Google LLC, based in California, US, or other companies belonging to the Google group may access the data and, in certain cases, US authorities may also access the data in accordance with US law. The EU Commission has issued an adequacy decision for the US, with the special feature that this only applies to companies that are certified. Google LLC is certified for this purpose. Further details can be found at: Data Privacy Framework Program Overview. It cannot be ruled out that Google may also process the data for its own purposes. Further information on the processing of data by Google can be found at: Google Privacy Policy. You can revoke your consent at any time in our Consent Tool without affecting the lawfulness of the processing carried out on the basis of your consent until revocation.Links to LinkedIn and Facebook
Our Website also uses buttons for the social networks LinkedIn and Facebook. The provider of the LinkedIn social network is LinkedIn Ireland Unlimited Company, based in Wilton Place, Dublin 2, Ireland, and the provider of the Facebook social network is Meta Platforms Ireland Ltd. (formerly Facebook Ireland Ltd.), based at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. If you click on the button for the respective network, you will leave Our Website and be taken directly to the websites of the respective social networks. The data protection information of LinkedIn or Facebook will then apply. Information on data processing by these social networks can be found for LinkedIn at: LinkedIn Privacy Policy and for Facebook at https://www.facebook.com/about/privacy.Your rights
Right to information
You have the right to request confirmation from us as to whether we are processing data relating to you and, if so, you have the right to information in accordance with Art. 15 GDPR.Rectification
Under the conditions of Art. 16 GDPR, you have the right to request that we correct your data immediately if it is incorrect.Deletion
Under the conditions of Art. 17 GDPR, you have the right to request the erasure of data concerning you. You are particularly entitled to the right to erasure if:- the data in question is no longer necessary for the purposes of collection or processing,
- the data storage period has expired,
- you have successfully objected to the processing, or
- the processing is unlawful.
Restriction of processing
Under the conditions set out in Art. 18 GDPR, you have the right to request that we restrict the processing of your data. You are particularly entitled to the right to restriction of processing if:- the accuracy of the data is disputed between you and us,
- the successful exercise of a right to object is still disputed between you and us, or
- you have a right to erasure and you request restricted processing instead of erasure.
Right to data portability
Under the conditions set out in Art. 20 GDPR, you have the right to request that we provide any data concerning you that you have provided to us and that we process on the basis of your consent or for the fulfilment of the usage agreement of Our Website or for the implementation of pre-contractual measures at your request, in a structured, commonly used and machine-readable format. You may also request, to the extent technically feasible, that we make this data available to other controllers.Right of withdrawal and objection
In accordance with Art. 7 para. 3 GDPR, you have the right to revoke your consent to the processing of your data at any time. As a result, we will no longer be permitted to continue processing the data based on this consent in the future. Your revocation of consent does not affect the lawfulness of the processing carried out on the basis of your consent until revocation. Under the conditions of Art. 21 GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of data concerning you, provided that this processing is based on our legitimate interest (Art. 6 para. 1 lit. f) GDPR). We will then cease processing your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is carried out by us for the establishment, exercise or defence of legal claims.Exercising your rights
If you wish to exercise any of your rights as described above, you can contact us informally using the contact details provided in the section „Controller / Service Provider“.Complaints
You also have the right to lodge a complaint with the competent supervisory authority regarding the collection and processing of your data in accordance with Article 77 of the GDPR. The supervisory authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information. You can contact the authority at the following address:
Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str. 22
20495 Hamburg
Germany
Email: mailbox@datenschutz.hamburg.de