Data Protection Agreement

1. Data Protection Declaration

Thank you for visiting our website. In this Policy, we would like to inform you about how we handle your data in accordance with Art. 13 of the General Data Protection Regulation.

This website (hereinafter “website”) is provided by HPC Hamburg Port Consulting GmbH, a member of HHLA Hamburger Hafen und Logistik AG group (hereinafter “us” or “we”). Further information on the provider of the website can be found in our legal notice.

A. Handling of personal data

The following provides information about how personal data is handled when using this website. Where not described otherwise in the following sections, the legal basis for handling your personal data arises from the necessity of handling it for the purpose of providing the functionalities requested by you on this website (Section 6 [1][b] of the General Data Protection Regulation [GDPR]).

I. Use of the website

1. Calling up the website

When you call up our website, your browser automatically transfers certain data to our web server in order to provide you with the information you have called up. In order to make your visit to our website possible, the following data is collected, briefly stored and used:

• IP address

• Date and time of the request

• Time zone difference from Greenwich Mean Time (GMT)

• Content of the request (specific page)

• Operating system and its access status / HTTP status code

• Data volume transferred

• Website from which the request comes

• Browser, language and version of the browser software

To safeguard our legitimate interests, we also store this data for a limited time to allow derivation of personal data in the case of unauthorised access or attempted access to local servers (Section 6 [1][f] GDPR).

2. Use of cookies

a) What cookies are

We use cookies on this website. Cookies are small text files that are stored in your device memory via your browser. Cookies store certain information (e.g. your preferred language or site settings), which can be returned to us by your browser when you visit the website again (depending on the life of the cookies).

b) What cookies do we use?

We differentiate between two categories of cookies: (1) functional cookies, without which the functionality of our website would be reduced, and (2) optional cookies used for website analysis and marketing purposes.

c) Subject to your consent

We only use optional cookies if we have obtained your prior consent (Art. 6(1)(a) General Data Protection Regulation). Upon your first access to our website, a banner will appear, asking you to give us your consent to the setting of optional cookies. If your consent is given, we will place a cookie on your computer and the banner will not appear again as long as the cookie is active. After expiration of the cookie’s lifespan, or if you actively delete the cookie, the banner will reappear upon your next visit to our website and again ask for your consent.

d) How you can limit the use of cookies

You can configure or entirely deactivate the use of cookies in your browser settings at any time. However, this may lead to a limitation in the functionality or user-friendliness of our website.

Data Security

We take technical and organizational measures to protect your data as comprehensively as possible from unwanted access. These measures include encryption procedures on our web pages. Your data is transferred from your computer to our server and vice versa via the internet using TLS encryption.

You can usually recognize this by the fact that the lock symbol in the status bar of your browser is closed and the address line begins with https://.

3. Website analysis

Google Analytics

We use the web analysis tool „Google Analytics“ to design our websites according to your needs.  Google Analytics creates user profiles based on pseudonyms. For this purpose, permanent cookies are stored on your end device and accessed out by us.  In this way we are able to recognize and measure returning visitors.  Google will analyse your use of our website on our behalf. To this purpose we use, among others, the cookies described above in more detail. The Google Analytics tool is provided by, Google Ireland Limited and Google LLC (USA) who support us as processors according to Art. 28 GDPR. The data processing can therefore also take place outside the EU or EEA. With regard to Google LLC (USA), no adequate level of data protection can be assumed due to the processing in the USA. The information collected by Google will then be made available to us in anonymised form. Your usage data will not be connected to your full IP address during this process. We have activated on our website the IP anonymising function offered by Google, which will delete the last 8 digits (type IPv4) or the last 80 bits (type IPv6) of your IP address.

There is a risk that authorities may access the data for security and surveilliance purposes without you being informed or having the right to appeal.

Please take this into account if you decide to give your consent to our use of Google Analytics.

The legal basis for this data processing is your consent in accordance with Art. 6 (1) (a) GDPR or § 15 (3) S. 1 German Telemedia Act (TMG), if you have given your consent via our consent banner.

The transfer to a third country takes place on the basis of Art. 49 (1) (a) GDPR. 

You may revoke your consent to the use of web analysis at any time. Please follow this link and make the appropriate settings via our banner.

Further information on Google Analytics is available in the Google Analytics Terms of Use, the Privacy and Data Protection Guidelines of Google Analytics and in the Google Privacy Policy.

Deactivate Google Analytics

4. Use of contact forms

You can contact us directly using the contact forms provided in the footer of the website. They allow you to share the following information in particular:

• Name

• Email address

• Telephone number

• Your message / request

We collect, process and use the information you have shared with us using the contact forms exclusively for processing your specific concern.The legal basis for this processing is Art. 6 (1) (f) GDPR, being our legitimate interest to respond to your request. We delete your data if they are no longer required and there are no legal obligations to retain them.

Where the processing of your data is based on legitimate interest in accordance with Art. 6 (1) (f) GDPR, you have the right to object to that processing at any time. To do so, please use the email address provided in the legal notice.

5. Embedded Videos

On our websites, we embed videos that are not hosted on our servers. In order to ensure that accessing our websites containing embedded videos does not automatically lead to the download of third-party content, we only show locally hosted preview images of the videos as a first step. As a result, the third-party provider does not receive any information.

Only after you click on the preview image, is content from the third-party provider downloaded. This provides the third party with information that you have accessed our site and with the usage data technically required for this purpose. Furthermore, the third party provider is then able to implement tracking technologies. We have no influence on the further data processing by the third-party provider. By clicking on the preview image, you give us your consent to download content from the third-party provider.

The embedding is based on your consent in accordance with Art. 6 (1) (a) GDPR, provided that you have given your consent by clicking on the preview image. Please note that the embedding of many videos leads to your data being processed outside the EU or EEA. In some countries, there is a risk that authorities may access the data for security and surveillance purposes without informing you or allowing you to take legal action. Where we use providers in third countries without an adequate level of protection and you give your consent, the transfer to this third country is based on Art. 49 (1) (a) GDPR.

Third party Provider Adequate level of data protection Withdrawal of consent
YouTube / Google (USA) No adequate level of data protection. The data is transmitted on the basis of Art. 49 (1) (a) GDPR. If you click on a preview image, the content of the third-party provider is immediately downloaded. To avoid this downloading on other sites, please do not click on the preview image.

6. Transfer of data for processing on our behalf

We use specialised service providers to process some of your data. We carefully select and regularly monitor our service providers. They process personal data via order processing exclusively on our behalf and strictly in accordance with our instructions on the basis of corresponding agreements.

If data is transferred outside the EU or the EEA, we will also provide information on the adequate level of data protection.

7. Information about your rights

You have the following rights based on the applicable data protection laws:

• Right to information about the data we have stored about you;

• Right to rectification, deletion or limitation of the processing of your personal data;

Right to object to processing that serves our legitimate interests, a public interest or profiling, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the enforcement, exercise or defence of legal claims;

• Right to data portability;

• Right to complain to a supervisory authority. This right may be asserted in particular with a supervisory authority in the Member State of your habitual residence, your place of work or the place of the suspected infringement.;

• You can revoke the consent you gave for the collection, processing and use of your personal data at any time with future effect. More detailed information relating to this can be found in the respective sections above, which describe data processing based on your consent.

Should you wish to exercise your rights, please direct your concerns to the contact person named below.


For matters relating to data protection please use our contact form or contact our Group data protection officer at the following address:

Hamburger Hafen und Logistik Aktiengesellschaft
Group data protection officer
Dr John Maurer
Bei St. Annen 1
20457 Hamburg

Amending the data protection declaration

We reserve the right to update this data protection declaration from time to time. Updates to this data protection declaration will be published on our website. Changes apply from the date of their publication on our website. We therefore recommend that you regularly visit our website and take note of any possible updates.

Dated: 1st April 2021