Privacy policy
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy
When you use this website, personal data may be collected. Personal data is data through which you can be personally identified. This privacy policy explains the type of data we collect and how and why your data is used.
Controller Responsible for Data Processing on this Website:
Gesellschaft für Maritimes Notfallmanagement mbH (GMN
Werderstraße 2
28199 Bremen
Phone: +49 (0)421/53707-0
Email: info@gmn-bremen.de
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).
Data Collection on this Website – Legal Bases
Contact Form: If you send us an enquiry via the contact form, your details from the form, including the contact information you provide, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not share this data without your consent.
The processing of this data is based on Art. 6(1)(b) GDPR if your request is related to the performance of a contract or if the processing of the data is necessary for steps that must be taken prior to entering into a contract. In all other cases, the processing of this data is based on our legitimate interest in effectively handling the enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if the use of your data has been requested by you.
The data you enter into the contact form will remain with us until you request its deletion, you revoke your consent to its storage, or the purpose for the data storage no longer applies (e.g., after your request has been processed). Mandatory legal provisions, especially retention periods, remain unaffected.
Enquiries by Email, Phone, or Fax
If you contact us by email, phone, or fax, your enquiry, including all personal data resulting from it (e.g., your name, the enquiry details), will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent.
The processing of this data is based on Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or if the processing of the data is necessary for steps that must be taken prior to entering into a contract. In all other cases, processing is based on our legitimate interest in effectively handling the enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if the use of your data has been requested by you.
The data you send us via contact enquiries will remain with us until you request its deletion, you revoke your consent to its storage, or the purpose for the data storage no longer applies (e.g., after your request has been processed). Mandatory statutory provisions, especially legal retention periods, remain unaffected.
Application for using the HEMSAA via Microsoft Forms: If you register to use our HEMSAA via our online form, we will process the personal data you provide (e.g. name, email address, project affiliation if applicable) in order to review your request and, if appropriate, grant access to the application. The data is processed on the basis of Art. 6 (1) (b) GDPR (contract initiation or performance at your request). We use Microsoft Forms, a service provided by Microsoft Corporation, to provide the form. The data processing takes place within the framework of a data processing agreement in accordance with Art. 28 GDPR. Data is stored in data centers located within the European Union. The data will not be passed on to third parties and will only be retained for as long as necessary for the purposes stated above. Further information on Microsoft’s privacy policy is available at: https://privacy.microsoft.com/en-us/privacystatement
Use of Tracking Technologies
Data Transfer to Third Countries With the service providers listed below, personal data may be transferred to third countries, specifically the USA, provided that you have given your consent. These countries may not guarantee data subject rights equivalent to those under the GDPR, which poses certain risks. Data transfer is only lawful on the basis of your consent.
Cookies and Analytics Services
Cookies are small files that are stored on a visitor’s hard drive. They make it possible to store information for a certain period of time and to recognize the visitor’s computer. For better user navigation and customized performance display, we use permanent and/or session cookies depending on how you consented to their placement via our cookie banner. You can configure your browser to notify you whenever cookies are placed. This makes the use of cookies transparent to you. In general, you can control the use of cookies through your browser settings.
The following information on tracking services applies if you have agreed to their use:
Google AdWords Conversion Tracking We use the online advertising program Google AdWords on our websites, which includes conversion tracking. The conversion tracking cookie is set when a user clicks on an ad placed by Google. These cookies expire after 30 days and are not used for personal identification. If a user visits specific pages of our website and the cookie has not yet expired, both we and Google can recognize that the user clicked on the ad and was redirected to the corresponding page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked across the websites of AdWords customers.
The information collected with the help of conversion cookies is used to compile conversion statistics. We learn the total number of users who clicked on an ad and were redirected to a page with a conversion tracking tag. However, we do not receive any information that can personally identify users. Users who do not wish to participate in tracking can easily deactivate the Google conversion tracking cookie in their browser settings. These users are not included in the conversion tracking statistics. For more information, please see Google’s Privacy Policy: https://policies.google.com/privacy?hl=en
Remarketing/Retargeting
GMN works with Google in the use of so-called retargeting technology. With this technology, cookies from partner companies (so-called third-party cookies) are also stored on your hard drive when you visit our website. These may be permanent or temporary cookies, which delete themselves automatically after a set period of time. The service providers analyze browsing behavior and can then display targeted recommendations as personalized advertising banners on other websites. In no case can this data be used to personally identify visitors to this website. The collected data is used solely to improve our offering. No other use or transfer to third parties takes place. The data collected does not contain any personal information.
If you do not wish to use Google’s remarketing function, you can generally deactivate it in your settings at www.google.com/settings/ads
Please note that this only blocks ads displayed by the specific service provider. You can object to personalized advertising altogether by disabling cookies in your browser.
Storage Duration
Unless a more specific retention period is stated in this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your personal data will be deleted unless we have other legally permissible reasons for storing it (e.g., tax or commercial law retention periods). In the latter case, deletion of the data will occur after these reasons no longer apply.
Your Rights as a Data Subject
Right of Access (Art. 15 GDPR)
You have the right to obtain confirmation as to whether personal data concerning you is being processed. If this is the case, you have the right to access this data and the information specified in Art. 15 GDPR.
Right to Rectification (Art. 16 GDPR)
You have the right to request the rectification of inaccurate personal data concerning you without undue delay and the completion of incomplete data where applicable.
Right to Erasure (Art. 17 GDPR)
You have the right to request the erasure of personal data concerning you without undue delay, provided that one of the reasons listed in Art. 17 GDPR applies.
Right to Restriction of Processing (Art. 18 GDPR)
You have the right to request the restriction of the processing of your data where one of the conditions set out in Art. 18 GDPR applies (e.g., if you have objected to the processing of the data) for the duration of the storage by the controller.
Right to Data Portability (Art. 20 GDPR)
In certain cases, as listed in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format or to request the transmission of this data to another controller.
Right to Withdraw Consent (Art. 7 GDPR)
If data processing is based on your consent, you have the right under Art. 7(3) GDPR to withdraw your consent at any time. Please note that the withdrawal applies only to future processing. Any processing that occurred before the withdrawal remains unaffected.
Right to Object (Art. 21 GDPR)
If data is processed on the basis of Art. 6(1)(f) GDPR (i.e., processing for the purpose of legitimate interests) or Art. 6(1)(e) GDPR (i.e., processing in the public interest or in the exercise of official authority), you have the right to object at any time to the processing of your personal data on grounds relating to your particular situation. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms or if the processing is for the establishment, exercise, or defence of legal claims.
Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)
You have the right under Art. 77 GDPR to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes data protection regulations. The right to lodge a complaint may be exercised in particular with a supervisory authority in the Member State of your habitual residence, your place of work, or the place of the alleged infringement. The competent authority for us is the State Commissioner for Data Protection and Freedom of Information of Bremen.
Exercising Your Rights
Unless otherwise described above, please contact the entity named in the legal notice (Imprint) to exercise your rights as a data subject.