With this Privacy Policy, we inform you about which of your personal data we process when you use our website, our products, and the processes described below.
Personal data (hereinafter referred to as "data") is all information that can be related to you personally, e.g. your name, your email address and your use of our offers.
The “controller“ within the meaning of the General Data Protection Regulation (GDPR) (responsible person) is Hanko GmbH, Ringstraße 19, 24114 Kiel, info@hanko.io.
You can contact our data protection officer at privacy@hanko.io or by post to our address, with the addition "the Data Protection Officer".
When you visit our website the server on which our website is hosted automatically collects the following data which is transmitted by your browser:
This data is necessary for us to display our website and ensure the stability and security of our website.
The IP address of your device is only stored for the time you use the website and is then immediately deleted or anonymized.
The legal basis is Art. 6(1), subparagraph 1(f) GDPR.
We use cookies to facilitate your use of our website.
Cookies are small text files that are sent to your browser by our web server when you visit our website and are stored on your computer for later retrieval. Cookies enable us to identify your internet browser.
We use cookies to access your preferences, enter your personal data into the input mask in future interactions with our website, or validate your authorization.
Session cookies are automatically deleted when you close the browser. Other cookies are automatically deleted after a preset period, which may vary depending on the cookie. You can find the exact storage period in your browser settings.
You can configure your browser settings according to your requirements, for example, you may refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all of the functions of this website if you do so.
You may delete the cookies in the security settings of your browser at any time.
The legal basis is Art. 6(1), subparagraph 1(f) GDPR.
We provide various methods for contacting us, e.g. our address, our e-mail address, our telephone number, chat systems, online-appointments, social media and our contact form.
When you contact us, we use the information which you provide, such as your email address, your name and the content of your enquiry, in order to process your request.
We delete the data that is collected in this process when it is no longer necessary, or we restrict processing if there are legal storage obligations to do so.
The legal basis is Art. 6(1), subparagraph 1(b) GDPR.
When you register with us for the use of particular features, we request certain information during the registration process in order to create your account.
Necessary mandatory information is indicated. Other information is voluntary.
If you want to book a paid package, we or our payment service providers ask for your name, contact details and payment information in order to process your order.
Mandatory information required for the order is indicated. Other information is voluntary.
The payment service providers process customer data which is necessary to carry out the transaction (including name, email address, IP address and financial transaction data such as account data or credit card number). However, we only receive information on whether a payment has been successfully made. The terms and conditions and data protection notices of the respective payment service providers apply to payment transactions.
According to commercial and tax law, we are obliged to store your order data for ten years. However, we restrict processing after two years, i.e. your data is only used in order to comply with legal obligations.
The legal basis is Art. 6(1), subparagraph 1(b) GDPR.
If you become a customer, we may use your email address to offer you advertisements for similar goods or services.
You can object to this advertising at any time, in particular by informing us via the contact details given in the Legal Notice. If we do not send you any advertisements for a period of two years, we will bar your email address from receiving advertising. The commercial and tax law provisions relating to your purchase from us apply to the storage of your email address accordingly.
The legal basis is Art. 6(1), subparagraph 1(f) GDPR in conjunction with § 7(3) UWG (German Act Against Unfair Competition).
We would like to occasionally send you interesting news and information about our company or our offers in the form of an email.
For this purpose, we require your consent according to data protection law, and at least the e-mail address to which the advertising email is to be sent. Mandatory information is indicated. Other details are voluntary, e.g. to address you personally, or to individualize the emails.
We intend to continuously optimize our advertising emails in order to offer suitable content to our readers. For this purpose, we measure the performance of our advertising emails. We must therefore inform you that we also evaluate your opening and clicking behavior.
For evaluation purposes, our advertising emails contain pictures, which are stored on our web server. When the advertising email is opened, these pictures are loaded from our web server and information about the e-mail recipient, such as the time of the visit and the recipient’s IP address is transmitted to us.
Although there are technical options for further analysis, we are only interested in receiving aggregated data, i.e. statistical evaluations without profiling, which refer to the opening rate of the advertising e-mail and the opening of individual links.
You may revoke your consent to receive the advertising emails at any time and unsubscribe from the advertising emails. You can revoke your consent by clicking on the link provided in the advertising e-mail or by sending us a direct message. If we do not send you any advertisements for a period of two years, we will remove your email address from our advertising email distribution list. We will delete your expired declaration of consent after the expiration of the limitation periods under competition and personal rights legislation.
The legal basis is Art. 6(1), subparagraph 1(a and f) GDPR.
We use third-party services to optimise our offers.
A direct connection to the servers of the third-party provider may be established when you visit an offer that contains such a service. The third-party provider therefore receives information that you or your IP address have accessed the corresponding page of our offer.
If you are logged in to the service provider, the third-party provider can assign the visit to our offer to your account. If you interact with the services, for example by clicking a button, this will be transmitted directly from your end device to the third-party provider. If you do not wish for collection of your personal data by a third-party provider with whom you have an account, you must log out of the respective account before visiting our offers.
In some cases, identification and recognition procedures are used, which are stored on your device and/or are generated from automatically transmitted information. These may include cookies or fingerprint procedures. If necessary, we can provide a tool with which you can control the use of these procedures.
Please refer to the data protection declarations of the respective provider for the scope of collection and use of your data as well as your rights and setting options for protection of your privacy by the third party provider.
Embedded services:
We embed third-party services to make our offers more informative by the provision of additional services.
Specifically, we embed services from the following providers on our website:
Analysis services:
We use analysis services to record and statistically evaluate the user behaviour of visitors to our offers and to use the results to improve our offers and make them more interesting to you as a user.
In detail, we use the following analysis tools on our website:
If we request your consent for use of the services, the legal basis is Art. 6(1), subparagraph 1(a) GDPR. Otherwise, the legal basis is Art. 6(1), subparagraph 1(f) GDPR.
We publish job advertisements for recruitment purposes.
To process your application, we need certain data from you.
In addition to your name and contact details, we also need and process your other applicant data, e.g. your application letter, CV, certificates or interview notes.
We delete the data collected during the application process when the data is no longer needed for the purpose of the application. This is the case after a maximum of six months subsequent to the completion of the application process if the applicant has not been appointed. This does not apply if legal regulations do not permit deletion, if the data is required for the provision of evidence, or if you have expressively agreed to a longer storage period.
If we request your consent, e.g. to store your data for a longer period of time, the legal basis is Art. 6(1), subparagraph 1(a) GDPR, § 26(2) BDSG (German Data Protection Act). Otherwise, the legal basis is Art. 6(1), subparagraph 1(b) GDPR, § 26 BDSG.
We have concluded corresponding contracts with service providers who cooperate with us for processing in accordance with Art. 28 GDPR.
If we utilise service providers in so-called third countries outside the European Union or the European Economic Area, on the basis of special guarantees such as contractual obligations, your data will only be processed in third countries with a level of data protection which is approved according to the standard data protection clauses of the EU Commission.
We will be glad to provide you with more detailed information on request.
We make presentations on social media to communicate with our customers, interested parties and users and inform them about our services. In general, cookies are stored on the users' computers. Cookies are small text files which are stored on the hard drive, from which the site which sets the cookie (in this case the social network) can obtain certain information.
Cookies enable the creation of statistics on the use of a presentation on the social network. For this reason, we have concluded an agreement on the joint control of the processing of personal data. In addition, user data is also regularly used for advertising purposes by creating user profiles (especially of registered users) for usage behaviour. User data is also used to place suitable advertisements.
The legal basis is Art. 6(1), subparagraph 1(f) GDPR. Our legitimate interest is the comprehensive and optimised information of users. We wish like to point out that only the relevant social network has access to the full data and therefore any demand for information should be made directly to the social network.
We have concluded a joint controller addendum with Facebook Ireland. For information, including the nature, scope and purposes of processing and exercise of your rights, please visit https://www.facebook.com/about/privacy and the Terms of Use for "Applicable Products" at https://de-de.facebook.com/legal/commercial_terms.
You have the following rights with respect to your data:
If you have granted us permission to process your data, you may revoke this permission at any time with effect for the future.
You can object to direct mail at any time. If your particular circumstances require, you can also object to processing at any time on the basis of Art. 6(1), subparagraph 1(f) GDPR.