Privacy Policy
This is an English translation provided for convenience. The German version is the legally binding one. Datenschutzerklärung (Deutsch)
Controller
The controller within the meaning of data protection law, in particular the EU General Data Protection Regulation (GDPR), is:
Orbit Shipping GmbH
Käkenflur 36
22419 Hamburg
Germany
Represented by the Managing Director: Hazem Hussein
Phone: +49 162 7646839
Email: info@orbitshipping.de
Your rights as a data subject
Using the contact details given above, you may exercise the following rights under the EU General Data Protection Regulation (GDPR) at any time:
- access to the data we hold about you and to information about how it is processed (Art. 15 GDPR),
- rectification of inaccurate personal data (Art. 16 GDPR),
- erasure of the data we hold about you (Art. 17 GDPR),
- restriction of processing, where we are not yet permitted to erase your data because of legal obligations (Art. 18 GDPR),
- objection to our processing of your data (Art. 21 GDPR), and
- data portability, where you have consented to the processing or have entered into a contract with us (Art. 20 GDPR).
Where you have given us consent, you may withdraw it at any time with effect for the future.
You may lodge a complaint with a supervisory authority at any time, for example with the authority responsible for the federal state in which you live, or with the authority responsible for us as the controller.
A list of the supervisory authorities (for the non-public sector), including their addresses, is available at: bfdi.bund.de.
Processing activities
General information collected when you visit our website
Nature and purpose of the processing
When you access our website, that is, when you do not register or otherwise submit information, general information is collected automatically. This information (server log files) includes such things as the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar data.
It is processed in particular for the following purposes:
- ensuring a trouble-free connection to the website
- ensuring smooth use of the website
- ensuring and evaluating system security and stability, in particular to detect misuse
- the technically faultless presentation and optimisation of the website
We do not use your data to draw conclusions about you as an individual. We do, however, reserve the right to review the server log files after the event should there be specific indications of unlawful use.
Legal basis and legitimate interest
The processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website and in ensuring system security and the detection of misuse.
Recipients
Our website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO GmbH processes the data described above on our behalf as a processor. A data processing agreement pursuant to Art. 28 GDPR is in place with them.
According to our processor, the processing generally takes place predominantly in a member state of the European Union or in another state party to the Agreement on the European Economic Area. Where a transfer to a third country is necessary in order to provide the service, it takes place on the basis of the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).
STRATO GmbH in turn engages further processors. An up-to-date overview of these sub-processors is made available by STRATO GmbH as part of the data processing agreement.
Retention period
Data is stored in server log files in a form that permits identification of the data subject for a maximum of six weeks, unless a security-related incident occurs (for example a DDoS attack).
In the event of such an incident, server log files are retained until the security-related incident has been resolved and fully investigated.
Whether provision is required by law or by contract
Provision of the personal data described above is required neither by law nor by contract. Without the IP address, however, the service and the functioning of our website cannot be guaranteed. In addition, individual services and functions may be unavailable or restricted.
Objection
Please see the information on your right to object under Art. 21 GDPR below.
Contacting us
Nature and purpose of the processing
There is a contact form on our website. This form transmits no data to us or to any third party. Your entries remain in your browser and, when you submit the form, are used solely to open a pre-filled message to us in your own email program. Nothing is stored on our website, nothing is transmitted to a form service provider, and your IP address is not recorded. You then decide for yourself whether to send the message.
If you do send the message, the same information applies as for an ordinary email to us.
You may also contact us using the email addresses provided. In that case, the personal data transmitted with the email is stored. This includes the date and time the email was sent, the email address, IP addresses and information about the servers involved in the email communication.
You may contact us using the telephone numbers provided. In doing so we collect log data comprising your telephone number and the duration of the call.
Whichever method of communication you choose, we collect the content of your enquiry. Your data is stored for the purpose of communicating with you individually.
Legal basis
The data is processed on the basis of a legitimate interest (Art. 6(1)(f) GDPR).
Our legitimate interest in processing your data is to make it straightforward to get in touch with us.
Where you contact us to request a quotation, the data is processed in order to take steps prior to entering into a contract (Art. 6(1)(b) GDPR).
Recipients
The recipient of the data is STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, as the provider of our hosting and our email mailboxes. Further details of the data processing agreement, the place of processing and transfers to third countries can be found above under “General information collected when you visit our website”.
Retention period
Data is erased no later than six months after your enquiry has been finally dealt with.
Where a contractual relationship arises, we are subject to the statutory retention periods. These are generally 6 or 10 years, for reasons of proper bookkeeping and tax law requirements.
Whether provision is required by law or by contract
Providing your personal data is voluntary. However, we can only deal with your enquiry if you give us the necessary data and the reason for your enquiry.
Objection
Please see the information on your right to object under Art. 21 GDPR below.
Contacting us via WhatsApp
Nature and purpose of the processing
Our website contains a button that takes you to a chat with us via the messenger service WhatsApp. This is a plain link: no WhatsApp content is loaded on our website, and simply visiting our website transmits no data to WhatsApp.
Only when you click the button and contact us via WhatsApp do we process your mobile telephone number and the content and metadata of your messages, for the purpose of communicating with you.
The service is provided by WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. We have no influence over WhatsApp’s processing of your data. Information about it can be found in WhatsApp’s privacy policy.
Legal basis
The processing is carried out on the basis of a legitimate interest (Art. 6(1)(f) GDPR) in making it straightforward to get in touch, and, for enquiries about a quotation, in order to take steps prior to entering into a contract (Art. 6(1)(b) GDPR).
If you would rather not use this route, the contact form, the email address and the telephone number are equally available to you.
Retention period
We delete chat histories no later than six months after your enquiry has been finally dealt with. Where a contractual relationship arises, the statutory retention periods apply.
Objection
Please see the information on your right to object under Art. 21 GDPR below.
Information about your right to object under Art. 21 GDPR
Right to object in specific cases
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(f) GDPR (processing on the basis of a balancing of interests); this also applies to profiling based on that provision within the meaning of Art. 4(4) GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Where to send an objection
Orbit Shipping GmbH
Käkenflur 36
22419 Hamburg
Germany
Phone: +49 162 7646839
Email: info@orbitshipping.de
Changes to this privacy policy
We reserve the right to amend this privacy policy so that it always complies with current legal requirements, or in order to reflect changes to our services, for example when new services are introduced. The new privacy policy will then apply to your next visit.
Questions about data protection
If you have any questions about data protection, please send an email to the controller named above.
Copyright notice
This privacy policy was produced with the help of activeMind AG, the experts for external data protection officers (version #2024-10-25).
