Privacy Statement

Privacy Statement

We are very pleased about your interest in our company. Data protection is of high importance for the management of our company. A use of the websites of the company is generally possible without stating any Personal Data. Insofar as a Data Subject intends to use specific services of our company via the website, a processing of Personal Data may be required. If the processing of Personal Data is required and if no legal basis exists for such a processing, we will generally obtain the consent of the Data Subject.

The processing of Personal Data, such as name, address, email address or phone number of a Data Subject will always be in accordance with the General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection regulations applicable to the company. This Privacy Statement is used by the company to inform the public about the nature, scope and purpose of the Personal Data collected, used and processed by us. Furthermore, the Data Subject will be informed by way of this Privacy Statement about their respective rights.

The company has implemented various different technical and organizational measures to ensure a protection of the Personal Data processed via this website as complete as possible. Nevertheless, web-based data transfer may generally have security loopholes, so that an absolute protection cannot be guaranteed. For this reason each Data Subject will be free to submit to us Personal Data  in other ways, such as by phone.

The use of our website is generally possible without stating Personal Data. Insofar as Personal Data (such as name, address, or email addresses) will be collected on our sites, this will always be made, if possible, on a voluntary basis. These data will not be passed on to third parties without your express consent.

1. Definition of Terms

The Privacy Statement of the company is based on the terminology used by the European Authorities for Directives and Regulations when enacting the General Data Protection Regulation (GDPR). Our Privacy Statement shall be easily readable and understandable by the public as well as by our customers and business partners. In order to ensure this, we would like to explain before the terms used.

We use the following terms in this Privacy Statement:

·         a) Personal Data

"Personal Data" means any information relating to an identified or identifiable natural person (hereinafter called "Data Subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.        

·         b) Data Subject

"Data Subject" is each identified or identifiable natural person, whose Personal Data are processed by the controller.

·         c) Processing

"Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.       

·         d) Restriction of processing

"Restriction of processing" is the marking of stored Personal Data  aimed at restricting their future processing.

·         e) Profiling

"Profiling" means any form of automated processing of Personal Data consisting of the use of Personal Data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or changes of location.

·         f) Pseudonymisation

"Pseudonymisation" means the processing of Personal Data in such a manner that the Personal Data can no longer be attributed to a specific Data Subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the Personal Data are not attributed to an identified or identifiable natural person.

·         g) Controller or controller for the processing

"Controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.        

·         h) Processor

"Processor’ means a natural or legal person, public authority, agency or other body which processes Personal Data on behalf of the Controller·        

·         i) Recipient

"Recipient" means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive Personal Data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.

·         j) Third party

"Third party" means a natural or legal person, public authority, agency or body other than the Data Subject, Controller, Processor and persons who, under the direct authority of the Controller or Processor, are authorised to process Personal Data.

·         k) Consent

"Consent" of the Data Subject means any freely given, specific, informed and unambiguous indication of the Data Subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of Personal Data relating to him or her.

2. Name and address of Controller for Processing

Controller in accordance with the General Data Protection Regulation, with other data protection laws valid in the Member States of the European Union and with other regulations of a data protection nature is the:

Carl Büttner GmbH & Co. KG
Carl Büttner Shipmanagement GmbH
Herrlichkeit 2
28199 Bremen / Deutschland

Phone: ++49-421-69165-0
Email: mail@carlbuettner.de
Website: http://www.carlbuettner.de

2.1. Name and address of Data Protection Officer

The Data Protection Officer of the Controller is:

Mr. Alexander Borggreve
Carl Büttner Shipmanagement GmbH
Herrlichkeit 2
28199 Bremen / Deutschland

Phone: ++49-421-69165-22
Email: a.borggreve@carlbuettner.de
Website: http://www.carlbuettner.de

In case of any questions and suggestions with respect to data protection, each Data Subject may directly contact the Data Protection Officer.

3. Responsible supervisory authority for a Data Breach is:

In the case of violations of data protection law, the person concerned has the right of appeal to the competent supervisory authority. Complaints regarding the handling of your data by us can be directed to this supervisory authority:

Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen:

Arndtstraße 1, 27570 Bremerhaven
Tel.: +49 471 596 2010 oder +49 421 361 2010
Fax: +49 421 496 18495
E-Mail: office@datenschutz.bremen.de

4. Cookies

The websites of the company use cookies. Cooking are text files, which are filed and stored via an internet browser on a computer system.

Many websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is an unambiguous identification of cookies. It consists of a string, by which websites and servers can be assigned to the concrete internet browser, in which the cookie was stored. This enables the websites and servers visited to distinguish the individual browser of the Data Subject from other internet browsers containing other cookies. A specific internet browser can be recognized again and identified via the unambiguous cookie ID.

The use of cookies enables the company to provide our website user-friendly, which would be impossible without setting the cookie.

A cookie is used to optimize the information and offers on our website in accordance with the requirements of the user. Cookies enable us, as mentioned above, to recognize the user of our website. The purpose of this recognition is a facilitation of the use of our website for the user. The user of a website using cookies will not be required, for example, to again enter his/her access data with each visit of the website, because this will be made by the website and by the cookie filed on the computer system of the user. A further example is the cookie of a shopping basket in an online shop. The online shop will note the article, which has been placed by a customer into the virtual shopping basket via a cookie.

The Data Subject can prevent at any time the setting of a cookie through our website by means of a respective setting of the internet browser used and can thus permanently object to the setting of cookies. Furthermore, any cookies already set can be deleted at any time via an internet browser or another software program. This is possible in all commonly used internet browsers. If the Data Subject will deactivate the setting of cookies in the internet browser used, it might be possible that not all of the functions of our website will be fully usable.

5. Collection of general data and information

The website of the company will collect a number of general data and information with each call of the website through a Data Subject or an automated system. These general data and information will be stored in the logfiles of the server. The following data and information may be collected: (1) the browser types and versions used, (2) the operating system of the accessing system, (3) the website, from which an accessing system has access to our website (so-called Referrer), (4) the sub-sites, which will be called from our website via an accessing system, (5) the date and time of the access onto the website, (6) an Internet Protocol Address (IP Address), (7) the internet service provider of the accessing system and (8) other similar data and information designed as an emergency response in case of attacks onto our information technology systems.

When using these general data and information, the company will not draw any conclusion on the Data Subject. This information is rather required (1) to correctly deliver the contents of our website, (2) to optimize the contents of our website as well as the advertising for the website, (3) to ensure the permanent  functioning of our information technology systems and of the engineering of our website, (4) to provide the information to law enforcement agencies required for prosecution in case of cyber attacks. These anonymously collected data and information will be analysed by the company, on the one hand, for statistical purposes and, on the other hand, to increase data protection and data security in our company, in order to finally ensure an optimum protection level with respect to the Personal Data processed by us. The anonymous data of the server logfiles will be stored separately from all Personal Data stated by a Data Subject.

6. Contact options via our website

The website of the company contains data due to statutory regulations enabling a fast electronic contacting of our company as well as a direct communication with us, which also covers a general address of the so-called electronic post (email address). Where a Data Subject will contact the controller via email or via a contact form, the Personal Data submitted by the Data Subject will be automatically stored. Those Personal Data submitted by the Data Subject on a voluntary basis to the controller will be stored for the purpose of processing or contacting with respect to the Data Subject. These Personal Data will not be passed on to third parties.

7. Routine erasure and blocking of Personal Data

The controller will process and store the Personal Data of the Data Subject only for the period of time, which is necessary to achieve the purpose of such storage or insofar as this is provided for in laws or regulations of the European Legislators and Regulators or of a another legislator, to which the controller is subject.

If the purpose for storage will lapse or if a period of storage defined  by the European Legislators and Regulators or by another competent legislator will expire, the Personal Data will be erased or blocked as a routine measure or in accordance with statutory regulations.

8. Rights of Data Subject

·         a) Right of confirmation

Each Data Subject has the right granted by the European Legislators and Regulators to request a confirmation from the controller, whether the Personal Data referring to the Data Subject are processed. If a Data Subject intends to exercise this right of confirmation, the Data Subject may contact our Data Protection Officer or another employee of the controller at any time.

·         b) Right of information

Each Data Subject has the right granted by the European Legislators and Regulators to obtain  from the controller a cost-free information about the Personal Data stored with respect to his/her person and to obtain a copy of this information. Furthermore, the European Legislators and Regulators have granted to the Data Subject the right to be informed about the following data:

 

o          the purposes of the processing

o          the categories of Personal Data processed

o          the recipients or categories of recipient to whom the Personal Data have been or will      be disclosed, in particular recipients in third countries or international organisations

o.         where possible, the envisaged period for which the Personal Data will be stored, or, if     not possible, the criteria used to determine that period

o.         the existence of the right to request from the controller rectification or erasure of             Personal Data or restriction of processing of Personal Data concerning the Data Subject or to object to such processing

o.         the right to lodge a complaint with a supervisory authority

o.         where the Personal Data are not collected from the data subject, any available     information as to their source

o.         the existence of automated decision-making, including profiling, referred to in Article    22, paras. 1 and 4 GDPR and, at least in those cases, meaningful information about     the logic involved, as well as the significance and the envisaged consequences of such          processing for the Data Subject.

 

In addition, the Data Subject has the right of information, whether Personal Data have been transmitted to a third country or to an international organization. Insofar as this is the case, the Data Subject also has the right to obtain information about the suitable guarantees in connection with the transmission.

If a Data Subject intends to exercise this right of information, he/she may contact our Data Protection Officer or any other employee of the controller at any time for this purpose.

·         c) Right to correction

Each Data Subject, of which Personal Data are processed, has the right granted by the European Legislators and Regulators to request the immediate correction of incorrect Personal Data referring to him/her. Furthermore, the Data Subject has the right to have incomplete Personal Data completed - also by means of a supplemental statement - taking into account the purposes of the processing.

If a Data Subject intends to exercise this right to correction, he/she may contact our Data Protection Officer or any other employee of the controller at any time for this purpose.

·         d) Right to erasure ("Right to be forgotten")

Each Data Subject, of which Personal Data are processed, has the right granted by the European Legislators and Regulators to request from the controller, that the Personal Data referring to him/her shall be immediately erased, if one of the following reasons will apply and insofar as the processing is not required:

o.         the Personal Data are no longer necessary in relation to the purposes for which they        were collected or otherwise processed

o.         the Data Subject withdraws consent on which the processing is based according to          Article 6, para. 1, lit. a GDPR or Art. 9, para. 2, lit. a GDPR and where there is no   other legal ground for the processing

o.         the Data Subject objects to the processing pursuant to Art. 21, para. 1 GDPR and there   are no             overriding legitimate grounds for the processing, or the Data Subject objects to   the processing pursuant to Art. 21, para. 2 GDPR

o.         the Personal Data have been unlawfully processed

o.         the Personal Data have to be erased for compliance with a legal obligation in Union or   Member State law to which the controller is subject

o.         the Personal Data have been collected in relation to the offer of information society        services referred to in  Article 8, para. 1 GDPR.

 

If any of the above reasons applies and if a Data Subject intends to have the Personal Data stored at the company erased, the Data Subject can contact our Data Protection Officer or any other employee of the controller at any time. The Data Protection Officer or another employee will initiate that the request for erasure will be fulfilled without delay.

If the controller has made the Personal Data public and if our company is obliged to the erasure of the Personal Data as controller pursuant to Art. 17, para. 1 GDPR, the company will take adequate measures - taking into account the technology available and the costs of implementation, also of a technical nature -  to inform others responsible for the processing  the published Personal Data, that the Data Subject has requested from these other controllers the erasure of any links to such Personal Data or of copies or replications of such Personal Data, insofar as the processing is not required. The Data Protection Officer or another employee will arrange for the required measures in the individual case.

·         e) Right to restriction of processing

Each Data Subject, of which Personal Data are processed, has the right granted by the European Legislators and Regulators to request from the controller the restriction of processing, if any of the following conditions is met:

o.         The accuracy of the personal data is contested by the Data Subject, namely for a period enabling the controller to verify the accuracy of the personal data.

o.         The processing is unlawful and the Data Subject opposes the erasure of the personal       data and requests the restriction of their use instead.

o.         The controller no longer needs the personal data for the purposes of the processing,        but they are required by the Data Subject for the establishment, exercise or defence of            legal claims;

o.         The Data Subject has objected to processing pursuant to Art. 21, para. 1 GDPR   pending the verification whether the legitimate grounds of the controller override those          of the Data Subject.

If any of the above conditions is met and if a Data Subject intends to request the restriction of Personal Data stored at the company, the Data Subject may contact our Data Protection Officer or another employee of the controller at any time. The Data Protection Officer of the company or another employee will arrange for the restriction of the processing.

·         f) Right to data portability

Each Data Subject, of which Personal Data are processed, has the right granted by the European Legislators and Regulators to receive the Personal Data referring to him/her, which the Data Subject has made available to the controller, in a structured, commonly used and machine-readable format. The Data Subject also has the right to transfer such data to another controller without hindrance from the controller, to which the Personal Data have been provided, where the processing is based on consent pursuant to Art. 6, para. 1, lit. a GDPR or Art. 9, para. 2, lit. a GDPR or is based on a contract pursuant to Art. 6, para. 1, lit. b GDPR and if the processing is carried out by automated means, unless such processing will be required to perform a task in the public interest or in exercising public authority vested in the controller.

Furthermore, the Data Subject has the right when exercising his/her right to data portability according to Art. 20, para. 1 GDPR to enforce that the Personal Data will be directly transferred from one controller to another controller, insofar as this is technical feasible and unless the rights and freedoms of other persons will be affected.

In order to enforce the right to data portability, the Data Subject may contact the Data Protection Officer appointed by the company or another employee.

·         g) Right to object

Each Data Subject, of which Personal Data are processed, has the right granted by the European Legislators and Regulators to object to the processing of the Personal Data referring to the Data Subject on grounds relating to the particular situation of the Data Subject carried out on the basis of Art. 6, para. 1, lit. e or f GDPR, including profiling based on those provisions.

The company shall no longer process the Personal Data in case of an objection, unless we will be able to demonstrate compelling legitimate grounds for the processing overriding the interests, rights and freedoms of the Data Subject or the processing is used for the establishment, exercise or defence of legal claims.

If the company processes Personal Data for direct marking purposes, the Data Subject will have the right to object at any time to the processing of Personal Data for the purpose of direct marketing, which includes profiling, to the extent that it is related to such direct marketing. If the Data Subject will object towards the company to the processing for the purpose of direct marketing, the company shall no longer process the Personal Data for such purposes.

Where Personal Data are processed at the company for scientific or historical research purposes or statistical purposes pursuant to Art. 89, para. 1 GDPR, the Data Subject, on grounds relating to his/her particular situation, will have the right to object to the processing of the Personal Data referring to him/her, unless such a processing is necessary for the performance of a task carried out for reasons of public interest.

In order to exercise the right to object, the Data Subject may directly contact the Data Protection Officer or another employee of the company. Furthermore, the Data Subject will be free to exercise the right to object to the use of information society services, notwithstanding the Directive 2002/58/EG, by way of automated processes, for which technical specifications are used.

·         h) Automated individual decision-making, including profiling

Each Data Subject, of which Personal Data are processed, has the right granted by the European Legislators and Regulators not to be subjected to a decision solely based on automated processing, including profiling, which produces legal effects concerning or significantly affects the Data Subject. This shall not apply if the decision (1) is necessary for entering into or performance of a contract between the Data Subject and the controller, (2) is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the rights, freedoms and legitimate interests of the Data Subject or (3) is based on the explicit consent of the Data Subject.

If the decision (1) is necessary for the conclusion or the fulfilment of a contract between the Data Subject and the controller or (2) is made upon the explicit consent of the Data Subject, the company will take adequate measures to safeguard the rights and freedoms and legitimate interests of the Data Subject, at least the right to obtain human intervention on the part of the controller to express his or her point of view and to contest the decision.

If the Data Subject intends to exercise his/her rights with respect to automated decisions, the Data Subject may contact our Data Protection Officer or another employee of the controller.

·         i) Right to revoke a data protection consent

Each Data Subject, of which Personal Data are processed, has the right granted by the European Legislators and Regulators to revoke the consent for the processing of Personal Data.

If the Data Subject intends to exercise his/her right to revoke a consent, the Data Subject may contact our Data Protection Officer or another employee of the controller at any time.

9. Data protection for job applications and during job application procedure

The controller collects and processes the Personal Data of applicants for the purpose of handling the application procedure. The processing may be done by electronic means. This, in particular, the case if an applicant has submitted to the controller the relevant application documents by electronic means, e.g. by email or via a web form available on the website. If the controller will conclude an employment contract with an applicant, the data submitted for the purpose of the processing of the employment will be stored taking into account the applicable statutory regulations. If the controller will not conclude an employment contract with the applicant, the application documents will be automatically deleted two months after the notification of the cancellation, unless no other legitimate interest of the controller will be in contradiction thereto. Another legitimate interest would be, inter alia, an obligation of providing evidence in proceedings in accordance with the AGG (German Act of Equal Treatment).

10. Data protection regulations on the use and application of Google AdSense

The controller has integrated Google AdSense into this website. Google AdSense is an online service, via which a mediation of advertising on third-party websites will be enabled. Google AdSense is based on an algorithm selecting the advertising shown on third-party websites matching the contents of the relevant third-party website. Google AdSense allows an interest-related targeting of the internet user implemented through a generation of individual user profiles.

The company operating the Google AdSense component is Alphabet Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of the Google AdSense component is the integration of advertising on our website. Google AdSense will set a cookie on the information technology system of the Data Subject. We have already explained above the function of cookies. Upon the setting of a cookie, the Alphabet Inc. will be enabled to perform an analysis of the use of our website. With each call of one of the individual pages of this website, which is operated by the controller and into which the Google AdSense component had been integrated, the internet browser of the information technology system of the Data Subject will be automatically instructed by the respective Google AdSense component to transfer data to the Alphabet Inc. for the purposes of online advertising and for accounting purposes of commissions. Within the scope of this technical procedure, the Alphabet Inc. will obtain knowledge about Personal Data, such as the IP address of the Data Subject, which will allow to the Alphabet Inc., inter alia, to trace the origin of the users and clicks and to enable the subsequent commission settlements.

The Data Subject may, as explained above, prevent the setting of cookies through our website at any time by way of a relevant setting of the internet browser used and may thus permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent, that the Alphabet Inc. would set a cookie onto the information technology system of the Data Subject. In addition, any cookie already set by the Alphabet Inc. can be deleted at any time via the internet browser or another software program.

Google AdSense also uses tracking pixels. A tracking pixel is a miniature graph embedded into websites to enable a log file recording and a log file analysis enabling a statistical analysis. Alphabet Inc. will be able to detect by way of the embedded tracking pixels, whether and when a website has been opened by a Data Subject and which links have been clicked onto by the Data Subject. Tracking pixels are used, inter alia, to analyse the user flow of a website.

Personal Data and information will be transferred via Google AdSense to the Alphabet Inc. in the United States of America, also covering the IP address and required for the collection and settlement for the advertising displayed. These Personal Data will be stored and processed in the United States of America. Under certain circumstances, the Alphabet Inc. will pass on the Personal Data collected via the technical process to third parties.

Google-AdSense will be explained in detail under this link https://www.google.de/intl/de/adsense/start/ .

11. Data protection regulations on the use and application of Google Analytics (with anonymization function))

The controller has integrated on its website the component Google Analytics (with anonymization function). Google Analytics is a web analysis service. Web analysis is the collection, compiling and analysis of data on the behaviour of users of websites. A web analysis service collects data, inter alia, from which website a Data Subject had accessed a website (s-called Referrer), which sub-sites of the website have been accessed or how frequently and for which period of time a sub-site had been looked at. A web analysis is mainly used to optimize a website and for the cost-benefit analysis of internet advertising.

The company operating the Google AdSense component is Alphabet Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The controller uses the supplement "_gat._anonymizeIp" for the web analysis via Google Analytics. When using the supplement, the IP address of the internet connection of the Data Subject will be cut and anonymized, if the access is effected to our website from a Member State of the European Union or from another State as a member of the Treaty on the European Economic Area.

The purpose of the Google Analytics component is the analysis of the user flows on our website. Google uses, inter alia, the data and information collected to analyse the use of our website, to compile for us online reports showing the activities on our website and to render additional services in connection with the use of our website.

Google Analytics will set a cookie on the information technology system of the Data Subject. We have already explained above the nature of cookies. The setting of a cookie will enable Google to carry out an analysis of the use of our website. Any time the individual pages of this website are called, which is operated by the controller and on which a Google Analytics component had been integrated, the internet browser on the information technology system of the Data Subject will be automatically instructed by the Google Analytics component to transfer data for the purpose of an online analysis to Google. Within the scope of this technical procedure, Google will obtain knowledge about Personal Data, such as the IP address of the Data Subject, which will allow to Google, inter alia, to trace the origin of the users and clicks and to enable the subsequent commission settlements.

The cookies are used to store Personal Data and information, for example access time, place, from which the website has been accessed and the frequency of the visits of our website by the Data Subject. With each visit of our website, these Personal Data, including the IP address of the internet connection used by the Data Subject, will be transmitted to Google in the United States of America. These Personal Data will be stored by Google in the United States of America. Under certain circumstances, Google will pass on these Personal Data collected via technical procedures to third parties.

The Data Subject may, as explained above, prevent the setting of cookies through our website at any time by way of a relevant setting of the internet browser used and may thus permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent, that Google would set a cookie onto the information technology system of the Data Subject. In addition, any cookie already set by Google Analytics can be deleted at any time via the internet browser or another software program.

In addition, the Data Subject has the option to object to a collection of the data generated by Google Analytics with respect to the use of this website as well as to the processing of such data through Google and to prevent such processing. For this purpose, the Data Subject has to download and install a browser add-on under the link https://tools.google.com/dlpage/gaoptout. This browser add-on will inform Google Analytics via Java Script, that it is not allowed to transmit data and information to Google Analytics with respect to the visits of websites. The installation of the browser add-on is regarded by Google as an objection. If the information technology system of the Data Subject will be deleted, formatted or newly installed at a later date, the Data Subject has to install the browser add-ons again to deactivate Google Analytics. Insofar as the browser add-on will be deinstalled or deactivated by the Data Subject or by another person attributed to the sphere of influence of the Data Subject, it is possible to newly install or activate the browser add-ons.

Further information and the valid data protection regulations of Google can be called under https://www.google.de/intl/de/policies/privacy/ and under http://www.google.com/analytics/terms/de.html. Google Analytics will be explained in detail under this link https://www.google.com/intl/de_de/analytics/ .

12. Data protection regulations on the use and application of Google Remarketing

The controller has integrated on this website the services of Google Remarketing. Google Remarketing is a function of Google-AdWords enabling a company to have advertising displayed for those internet users, who have visited the website of the company before. The integration of Google Remarketing enables a company to create user-related advertising and to have thus interest-relevant advertising displayed to the internet user.

The company operating Google Remarketing is the Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google Remarketing is the display of interest-relevant advertising. Google Remarketing enables us to display advertising via the Google advertising network or to have such advertising displayed on other websites, which is  tuned to the individual requirements and interests of internet users.

Google Remarketing will set a cookie on the information technology system of the Data Subject. We have already explained the nature of cookies. The setting of a cookie will enable Google to recognize the visitors of our website, if this user will subsequently call websites, which are also members of the Google advertising network. With each call of a website, in which the service of Google Remarketing had been integrated, the internet browser of the Data Subject will automatically identify itself at Google. Within the scope of this technical procedure, Google will obtain knowledge about Personal Data, such as the IP address or the surfing behaviour of the user, which will be used by Google to display interest-relevant advertising.

The cookies are used to store Personal Data, e.g. the websites visited by the Data Subject. With each visit of our websites, Personal Data, including the IP address of the internet connection used by the Data Subject will thus be transmitted to Google in the United States of America. These Personal Data will be stored by Google in the United States of America. Under certain circumstances, Google will pass on these Personal Data collected via technical procedures to third parties.

The Data Subject may, as explained above, prevent the setting of cookies through our website at any time by way of a relevant setting of the internet browser used and may thus permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent, that Google would set a cookie onto the information technology system of the Data Subject. In addition, any cookie already set by Google Remarketing can be deleted at any time via the internet browser or another software program.

In addition, the Data Subject has the option to object to the interest-relevant advertising through Google. For this purpose, the Data Subject has to call the link www.google.de/settings/ads from each internet browser used by the Data Subject and shall carry out the settings required.

Further information and the valid data protection regulations of Google may be called under https://www.google.de/intl/de/policies/privacy/.

13. Data protection regulations on the use and application of Google-AdWords

The controller has integrated Google AdWords on this website. Google AdWords is a service for internet advertising allowing advertisers to place advertisements in the search engine results of Google as well as in the Google advertising network. Google AdWords allows to an advertiser to previously define specific key words, through which an advertising will be exclusively displayed in the search machine results of Google, if the user will call with the search engine a key-word-relevant search result. The Google advertising network will distribute the advertisements onto subject-relevant websites by way of an automatic algorithm and taking into account the previously defined keywords.

The company operating the services of Google AdWords is the Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google AdWords is the advertising of our website through displaying interest-relevant advertisements on the websites of third-party companies and in the search engine results of Google and the display of third-party advertising on our website.

If a Data Subject will be directed to our website via a Google advertisement, a so-called conversion cookie will be stored by Google on the information technology system of the Data Subject. We have already explained the nature of cookies. A conversion cookie will become invalid after thirty days and does not serve the purpose of identifying the Data Subject. The conversion cookie is used, unless it is expired, to track whether certain sub-sites, e.g. the shopping basket of an online shop system, has been called on our website. The conversion cookie will allow Google and also us to track, whether a Data Subject, which accessed our website through an AdWords advertisement, had generated or stopped a turnover, thus a purchasing of goods.

The data and information collected through the use of the conversion cookie will be used by Google to prepare visit statistics for our website. We, on the other hand, use such visit statistics to determine the total number of visitors, which had been mediated to us via AdWords advertisements, thus to determine the success or failure of the relevant AdWords advertisement, and to optimize our AdWords advertisements for the future. Neither our company, nor other advertising customers of Google AdWords will receive any information from Google, by which the Data Subject could be identified.

The conversion cookies are used to store Personal Data, e.g. the websites visited by the Data Subject. With each visit of our websites, Personal Data, including the IP address of the internet connection used by the Data Subject, will thus be transmitted to Google in the United States of America. These Personal Data will be stored by Google in the United States of America.  Under certain circumstances, Google will pass on these Personal Data collected via technical procedures to third parties.

The Data Subject may, as explained above, prevent the setting of cookies through our website at any time by way of a relevant setting of the internet browser used and may thus permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent, that Google would set a cookie onto the information technology system of the Data Subject. In addition, any cookie already set by Google AdWords can be deleted at any time via the internet browser or another software program.

In addition, the Data Subject has the option to object to the interest-relevant advertising through Google. For this purpose, the Data Subject has to call the link www.google.de/settings/ads from each internet browser used by the Data Subject and shall carry out the settings required.

Further information and the valid data protection regulations of Google may be called under https://www.google.de/intl/de/policies/privacy/ .

14. Legal basis of processing

Art. 6 I lit. a GDPR is used by our company as the legal basis for processing procedures, for which we obtain a consent for a specific purpose of processing. If the processing of Personal Data is required to fulfil a contract, where the Data Subject is a party to the contract, such as for processing procedures required for the delivery of goods or the rendering of another performance or counter-performance, such processing will be based on Art. 6 I lit. b GDPR. The same is applicable for those processing procedures required to perform pre-contractual measures, such as in case of inquiries for our products or services. If our company is subject to a legal obligation requiring the processing of Personal Data, such as for the fulfilment of tax obligations, the processing will be based on Art. 6 I lit. c GDPR. In rare cases, the processing of Personal Data may be necessary to protect the vital interests of the Data Subject or of another natural person. This would be the case, for example, if a visitor would be injured on our premises and if name, age, health insurance data or other vitally important information would have to be submitted to a doctor, a hospital or other third parties. In such a case, the processing would be based on Art. 6 I lit. d GDPR. Finally, processing procedures may be based on Art. 6 I lit. f GDPR. Any processing procedures not covered by any of the legal bases mentioned above, if the processing will be required to protect a legitimate interest of our company or of a third party, unless the interests, basic rights and basic freedoms of the Data Subject will override such interest. Such processing procedures are, in particular, allowed to us, because these have been particularly mentioned by the European Legislator. The legislator has expressed the opinion, that a legitimate interest could be assumed, if the Data Subject is a customer of the controller (Recital 47, sent. 2 GDPR).

15. Legitimate interests in the processing pursued by controller or by a third party

If the processing of Personal Data is based on Art. 6 I lit. f GDPR, our legitimate interest is the performance of our business activities to the benefit of the well-being of all of our employees and our shareholders.

16. Duration of retention of Personal Data

The criterion for the duration of the retention of Personal Data is the relevant statutory period of retention. Upon the expiration of the period, the respective data will be routinely deleted, unless such data are required for the contract fulfilment or contract initiation.

17. Statutory or contractual regulations for the provision of Personal Data; requirement for the contract conclusion; obligation of the Data Subject to provide Personal Data; possible consequences of failure to provide data

We would like to advise you, that the provision of Personal Data is sometimes obligatory (e.g. tax regulations) or may result from contractual provisions (e.g. data on contractual partner). In some cases, it may be necessary to conclude a contract, that a Data Subject will provide to us Personal Data, which have to be subsequently processed by us. The Data Subject is, for example, obliged to provide Personal Data to us, if our company is going to conclude a contract with such Data Subject. The failure to provide Personal Data would have the consequence, that it would not be possible to conclude the contract with the Data Subject. Before providing Personal Data through the Data Subject, the Data Subject shall contact our Data Protection Officer. Our Data Protection Officer will advise the Data Subject in the individual case, whether the provision of Personal Data is required by law or under the contract or required for the conclusion of the contract, whether an obligation exists to provide the Personal Data and which consequences the failure to provide the Personal Data would have.

18. Existence of an automated decision-making

As a responsible company, we refrain from an automatic decision-making or a profiling.

Contact


Carl Büttner GmbH & Co. KG

P.O. Box 10 68 23
D-28068 Bremen

Herrlichkeit 2
D-28199 Bremen
 

Carl Büttner Shipmanagement GmbH

P.O. Box 10 68 23
D-28068 Bremen

Herrlichkeit 2
D-28199 Bremen

ISO 14001