Privacy Notice for Blohm+Voss B.V. & Co. KG
This privacy notice serves fulfil the requirements of Art. 13 and 14 of the General Data Protection Regulation (GDPR) (duties to provide information) in respect of the website of Blohm+Voss B.V. & Co. KG. In this respect, it is expressly limited to the data processing operations associated with a visit to this website.
We are very pleased that you are interested in our company. Data protection is a matter of particular importance to us. In principle, it is possible to use our websites without having to provide any personal data. However, for the best possible experience of using our website, temporary system-side processing of personal data, such as the IP address of the requesting system, will need to take place. In this regard, the processing serves to safeguard the security of our systems and optimise our services for you.
First of all, we would like to provide some important definitions for your guidance:
“Personal data” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction”;
“Consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
You can find further definitions on linguistic usage in the General Data Protection Regulation under Article 4 of the General Data Protection Regulation.
Information to be provided in accordance with Article 13 (1) of the GDPR
1. Name and contact details of the controller and the company data protection officer
This privacy notice applies to data processing by the controller:
Blohm+Voss B.V. & Co. KG [a limited partnership]
General partner: LBG 3-Kommanditgesellschaft, statutory seat (registered office) Bremen, Local court commercial register no: HRA 27854
General partner: Global 2 Shipyard B.V., statutory seat (registered office) Groningen, Kamer van Koophandel 68821581, directors (Geschäftsführer) Dr Ralph Petersen, Thorsten Quade
You can contact the company data protection officer of Blohm+Voss B.V. & Co. KG at the above address, FAO: Mr Bernd Kamlah, or using the following contact information:
2. Purpose and legal bases of processing
a) During a visit to our website
The browser running on your end-device will automatically send information to the server for our website, www.blohmvoss.com. These data will be stored temporarily in a log file. In this respect, the following information is collected, without any involvement on your part, and stored until automatically deleted:
- The IP address of the requesting computer,
- The date and time of access,
- The name and URL of the requested file,
- The website from which the access was initiated (Referrer URL),
- The browser being used and, where applicable, your computer’s operating system, as well as the name of your access provider.
We will process the specified data for the following purposes:
- Ensuring that the website has a seamless connection set-up,
- Ensuring easy use of our website,
- Assessing system security and stability, and
- other administrative purposes.
The legal basis of processing is Art. 6(1), sentence 1, letter (f) of the GDPR. Our legitimate interest is based on the above-listed purposes for data collection. We will not, under any circumstances, use the collected data to draw conclusions about you as an individual. In addition, we also deploy cookies during a visit to our website. You can find additional explanations on this under section 2 (d) of this privacy notice.
b) Use of our e-mail address
If you have any questions, of any kind, you can contact us via the communications channels provided on our website. When doing so, it will usually be necessary to specify a valid email address; this enables us to know who sent the query, as well as to provide an answer. Additional information can be provided voluntarily. Data processing for the purposes of establishing contact with us is, in accordance with Art. 6(1), sentence 1, letter (a) of the GDPR, carried out on the basis of your voluntarily given consent. The personal data we collect to process your queries will be erased once your query has been resolved, provided that the purpose of processing has thereby been concluded and there are no statutory retention periods that require us to store the correspondence.
c) Applications and processing during the applications process
Blohm+Voss B.V. & Co. KG collects and processes the personal data of applicants for the purposes of handling the application process. This processing may also be carried out by electronic means. This applies in particular if an applicant submits the corresponding application documents by electronic channels, for example by email or via our application portal. If an employment contract is concluded with an applicant, the submitted data will be stored for the purposes of handling the employment relationship, in compliance with the statutory provisions. If an employment contract is not concluded with the applicant, the application documents will be erased 6 months after notification of the rejection decision, provided that there are no other legitimate interests militating against such erasure. In this sense, another legitimate interests means, by way of example, a duty to provide proof in proceedings under the German General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz, AGG).
Information that is generated in connection with the specific end-device being used in each case is stored in the cookie. However, this does not mean that we will immediately acquire knowledge of your identify.
In addition, we also use temporary cookies, which are stored on your end-device for a specific, fixed period of time, in order to optimise user-friendliness. If you visit our website again to make use of our services, the system will automatically detect that you have already visited us and identify the information you entered and the settings you specified, so that you will not have to re-enter these.
Data processed by cookies are necessary for the specified purposes to protect our legitimate interests and those of third parties in accordance with Art. 6(1), sentence 1, letter (f) of the GDPR. Most browsers will accept cookies automatically. However, you can adjust your browser settings so that no cookies can be stored on your computer, or so that a notification will always be displayed before a new cookies is placed on your device. Completely deactivating cookies may mean, however, that you will be unable to use all of our website’s functionalities.
e) Analysis tools
I) Tracking tools
We use the following tracking tools on the basis of point (f) of Article 6(1) sentence 1 GDPR. We use the tracking tools to ensure that our website is user friendly and to optimise it continuously. We also use the tracking tools to collect statistics relating to how our website is used and evaluate them for the purpose of optimising the website. These interests are considered legitimate in the sense of the General Data Protection Regulation.
The purposes and data categories are described for each tracking tool.
II) Google Analytics
We use Google Analytics, a web analytics service provided by Google Ireland Limited (https://www.google.com/?hl=about) (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; ‘Google’), to ensure that our website is user friendly and to optimise it continuously. Pseudonymised usage profiles are generated and cookies are used (see section on cookies) in this context. The information generated by the cookie concerning your use of this website, such as
- your browser type and version,
- your operating system,
- the referrer URL (the previously visited page),
- the host name of your computer (IP address),
- the date and time of the server request,
is sent to a Google server in the USA and stored there. The information is used to evaluate how you use the website, compile reports on website activity and provide other services relating to website activity and Internet usage for the purposes of market research and ensuring that this website is user friendly. Additionally, this information can be transmitted to third parties where prescribed by law or if the third parties process data as processors. Under no circumstances will your IP address be associated with other data held by Google. Your IP address will be anonymised so that it cannot be associated with any other data (this is known as IP masking).
Additionally, you can prevent Google from collecting or processing the data generated by the cookie concerning your use of our website (including your IP address) by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=us).
Instead of the browser add-on, you can prevent the collection of data by Google Analytics by clicking on this link, especially if your browser is on a mobile device. An opt-out cookie that prevents the collection of your data when you visit this website in future will be installed. The opt-out cookie only applies to this browser and our website and will be stored on your device. If you delete the cookies in this browser, you will have to download the opt-out cookie again.
You can find more information on data protection in connection with Google Analytics in the Google Analytics support section (https://support.google.com/analytics/answer/6004245?hl=us).
III) Google Ads conversion tracking
We also use Google conversion tracking to collect statistics relating to how our website is used and to evaluate them for the purpose of optimising the website. Google Ads sets a cookie (see section on cookies) on your computer if you visit our website by clicking on a Google advertisement.
These cookies expire after 30 days and cannot be used to identify you personally. If a user visits certain pages on the website of an Ads customer and the cookie has not yet expired, Google and the customer can see that the user has clicked on the advert and was referred to this page.
Every Google Ads customer receives a different cookie. Cookies can therefore not be tracked across the websites of Ads customers. The information collected by the conversion cookie is used to generate conversion statistics for Ads customers who have activated conversion tracking. The Google Ads customers learn the total number of users who have clicked on their advertisement and been redirected to a page with an embedded conversion tracking tag. However, they do not gain access to any information that can be used to identify users personally.
We use the open-source software Matomo to analyse and statistically evaluate how our website is used. Cookies are used for this purpose (see section on cookies). The information generated by the cookie relating to how you use the website is sent to our servers and compiled into pseudonymised usage profiles. The information is used to evaluate how you use the website and ensure that our website is user friendly. The information is not shared with third parties.
Under no circumstances will your IP address be associated with other data concerning you. Your IP address will be anonymised so that it cannot be associated with any other data (this is known as IP masking).
Your visit to this website is currently being logged by Matomo. Click here (https://matamo.org/docs/privacy/) to prevent your visit from being logged.
3. Categories of recipients and transfer of data
Your personal data will not be transferred to third parties for purposes other than those listed. We will transfer your personal data to third parties only if:
- You have given your express consent to this in accordance with Art. 6(1), section 1, letter (a) of the GDPR,
- It is lawfully permissible to do so and this is necessary, in accordance with Art. 6(1), sentence 1, letter (b) of the GDPR, in order to process pre-contractual matters and contractual relationships,
- There is a legal obligation to do so under Art. 6(1), sentence 1, letter (c) of the GDPR, and
- The transfer is necessary under Art. 6(1), sentence 1, letter (f) of the GDPR in order to establish, exercise or defend against legal claims and there are no grounds for assuming that you have an overriding legitimate interest in the prevention of your data from being transferred.
“Recipient” means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not.
However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with European Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
In connection with the processing operations, access to your data may, in certain circumstances, be provided to service providers that we have commissioned. In such case, special contractual agreements will be concluded that correspond to our security requirements and guarantee proper handling in accordance with data protection law.
In addition, your data may be transferred to various specialist departments within our company in order to process your request.
4. Transfer of data to third countries
Your personal data will not be transferred to agencies or institutions in a third country.
Further information to be provided, in accordance with Art 13 (2) of the GDPR, in order to ensure fair and transparent processing:
5. Duration of storage
In principle, personal data will be erased immediately once the purpose for which they were collected has ceased to apply and the purpose of processing has been accomplished.
Due to various statutory retention periods, the data may, depending on the purpose of processing, be stored on our systems for a longer period.
We will be pleased to provide you with more specific information concerning the individual storage period for your data upon request.
6. Rights of data subjects
You have the right:
- Under Art. 15 of the GDPR, to demand information concerning your personal data that we are processing. In particular, you can demand information about the purposes of processing, the categories of personal data, the categories of recipient to whom the personal data have been or will be disclosed, the planned storage period, the existence of the right to rectification, erasure, restriction of processing or the right to object, the existence of the right to lodge a complaint, the source of your data, if those data have not been collected by us, as well as the existence of automated decision-making, including profiling and, if applicable, meaningful information concerning the specific details involved;
- Under Art. 16 of the GDPR, to demand the immediate rectification or completion of inaccurate personal data stored by us.
- Under Art. 17 of the GDPR, to demand the erasure of your personal data that we are storing, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
- Under Art. 18 of the GDPR, to demand restriction of processing of your personal data in cases where you contest the accuracy of the data, the processing is unlawful but you oppose their erasure or we no longer require the data but they are required by you for the establishment, exercise or defence of legal claims, or you have objected to processing in accordance with Article 21(1) of the GDPR;
- Under Art. 20 of the GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to demand transmission to another controller;
- Under Art. 7(3) of the GDPR, you may withdraw your consent that you have given to us at any time. Withdrawing your consent will mean that, in future, we will no longer be able to continue to process the data to which the consent applies, and
- Under Art. 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority. As a general rule, you can lodge a complaint with the supervisory authority for your habitual place of residence, or for our company (Hamburgische Beauftragte für Datenschutz und Informationsfreiheit [Hamburg Commissioner for Data Proection and Freedom of Information] – firstname.lastname@example.org).
7. Right to object
If your personal data are being processed on the basis of a legitimate interest under Art. 6(1), sentence 1, letter (f) of the GDPR, you have the right, under Art. 21 of the GDPR to lodge an objection to the processing of your personal data on grounds relating to your particular situation or if the data are being processed for direct marketing.
In the latter case, you have a general right to object, which we will comply with without any requirement for you to claim a special situation. If you wish to exercise your right to withdraw consent or to object, it will be sufficient to send an email to:
8. Compulsory provision of data and consequences or refusal
We would like to point out to you that in some cases the provision of personal data is prescribed by law, necessary for the purposes of contract initiation, or required under the terms of a contract.
If you do not provide your personal data, this may mean that only a limited visit to the website is possible and certain functionalities will be unavailable. In some circumstances, it may not be possible to conclude a contract with the data subject.
Our data processing officer will be pleased, upon request, to clarify for you, in relation to the specific case, whether the provision of personal data is required by law or under a contract, or necessary in order to conclude the contract, or if there is an obligation to provide the personal data, as well as the consequences that would result for you if you were to choose not to provide the personal data.
9. Data security
We take appropriate technical and organisational security measures in order to protect your data against accidental or intentional manipulations, or partial or total loss or destruction, as well as from unauthorised access by third parties. Our security measures are continuously improved in line with technological progress.
10. Current validity of and amendments to this privacy notice
This privacy notice is currently valid and was last updated in October 2018. It may be necessary to amend this privacy notice due to further developments to our website and offerings, or due to modifications to statutory or official regulations. You can access and print out the latest current version on our website at: http://www.blohmvoss.com/en/corporate/data-privacy.
11. Contact the data protection officer for Blohm+Voss B.V. & Co. KG
- ReviSEC – Information Security Management
Dipl.-Volksw. [economics graduate] Bernd Kamlah
Certified Information Security Manager (CISM) / Data Protection Officer
27299 Langwedel · Germany
Phone: +49 4232 / 94 50-644
Version of: 10/2018