Skip to main content
SZ | HAMBURG – HafenCity Facility Logo
Crystal-clear. Like a diamond.

Legal

Privacy policy

This is an English translation for your convenience. The German version is the legally binding version.

§ 1 Controller

The controller responsible for data processing on this website is:

SZ | HAMBURG HafenCity Facility e. Kfr.
Owner: Sanela Zahirovic
Überseeboulevard 5
20457 Hamburg
Phone: 040 35966253
Email: [email protected]

§ 2 Principles of data processing

We only process personal data insofar as this is necessary to provide a functional website as well as our content and services. Personal data is generally only processed with the consent of the data subject. An exception applies in cases where obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by law.

§ 3 Hosting and Content Delivery Network (CDN)

This website is operated by an external service provider (host). The personal data collected on this website is stored on the host’s servers. The host processes this data exclusively to fulfil its contractual obligations and in accordance with our instructions. The use of the host is in the interest of a secure, fast and reliable provision of our online offering (Art. 6 (1) (f) GDPR). A data processing agreement in accordance with Art. 28 GDPR has been concluded with the host.

A Content Delivery Network (CDN) may be used for the secure and high-performance delivery of the website. Content is delivered via distributed servers; for technical reasons your IP address is processed in order to establish the connection and defend against attacks (Art. 6 (1) (f) GDPR). No separate analysis of your usage behaviour takes place.

§ 3a Database and file/image storage

Information submitted via forms is stored in a database operated as part of our hosting. Files uploaded by you (e.g. attachments from the contact form or application documents) as well as project images stored in the internal administration area are stored in external cloud storage (object storage). The processing is carried out to handle your enquiry or application (Art. 6 (1) (b) GDPR) and on the basis of data processing agreements pursuant to Art. 28 GDPR. Transfer to third countries cannot be ruled out; appropriate safeguards (e.g. EU standard contractual clauses) are used for this.

§ 4 Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

This data is not merged with other data sources. The collection of this data is based on Art. 6 (1) (f) GDPR.

§ 5 Cookies

This website does not use tracking or marketing cookies. Only technically necessary cookies that are required for the operation of the website are used. These are automatically deleted at the end of your browser session. No consent is required for technically necessary cookies pursuant to § 25 (2) TDDDG.

No analysis or tracking services (such as Google Analytics) and no social media plugins are used. The fonts used are hosted locally on the server and are not reloaded from external providers. For the embedded chat assistant and external links, see § 8 and § 9.

§ 6 Contact form and callback form

If you send us enquiries via the contact form or callback form, your details from the form, including the contact data you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions.

Data collected: customer type, name, company where applicable, email address, phone number, desired service area and service, property type, postcode, town/district, approximate floor area, desired cleaning interval, desired start, preferred method of contact, your message and, optionally, files uploaded by you (e.g. PDF or images).

Purpose: preparing a quote and getting in touch

Legal basis: Art. 6 (1) (b) GDPR (initiation of a contract)

Storage period: Your data will be deleted after your enquiry has been finally processed, unless statutory retention obligations prevent this.

§ 7 Application form

If you apply to us via our application form, we process your personal data for the purpose of carrying out the application procedure.

Data collected: name, email address, phone number, desired position, information on your professional experience, possible working hours, availability (earliest possible start), your message and, optionally, a CV uploaded by you in PDF format.

Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures) in conjunction with § 26 BDSG

Storage period: Application data will be deleted no later than 6 months after completion of the application procedure, provided no employment relationship is established and you have not consented to longer storage.

§ 8 Chat assistant

A chat assistant provided via the platform of Abacus.AI, Inc. is embedded on our website. For this purpose, a script from the provider is loaded and your chat entries are transmitted to and processed on its servers in order to generate the responses. Please do not enter any sensitive personal data in the chat. The use serves to provide you with quick and straightforward information about our services (Art. 6 (1) (f) GDPR). Transfer to third countries cannot be ruled out; the provider uses appropriate safeguards for this.

§ 9 External links, social media and map service

Our website contains links to external social media profiles (e.g. Facebook, Instagram). These are simple links – no social media plugins are embedded that would already transfer data to the providers when our pages load. Only when you click on such a link are you forwarded to the respective provider’s page, where its data protection provisions apply.

On our location page we embed a Google Maps map – but not automatically when the page is loaded. The map is only loaded after you have actively clicked the “Load map” button (two-click solution). As long as you do not consent, no connection to Google is established and no data is transferred to Google. Only with your active consent is the map loaded as a Google Maps iframe; in doing so, your IP address may be transmitted to Google and Google’s data protection provisions apply. In addition, we provide a clickable link to Google Maps for route planning; here too you are only forwarded to Google after clicking. The legal basis is your consent (Art. 6 (1) (a) GDPR).

§ 9a Customer reviews

On our website we display selected customer reviews as text quotations. These are an integral part of our page and are delivered from our own database; as a result, no data is transferred to review portals (e.g. Google) when our website is accessed. Only if you follow any link to an external review profile do the data protection provisions of the respective provider apply.

§ 10 Rights of the data subject

You have the right:

  • pursuant to Art. 15 GDPR to request information about your processed personal data
  • pursuant to Art. 16 GDPR to request the correction of incorrect data
  • pursuant to Art. 17 GDPR to request the deletion of your stored data
  • pursuant to Art. 18 GDPR to request the restriction of processing
  • pursuant to Art. 20 GDPR to receive your data in a structured, commonly used and machine-readable format (data portability)
  • pursuant to Art. 21 GDPR to object to the processing
  • pursuant to Art. 7 (3) GDPR to revoke consent given at any time

§ 11 Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

Competent supervisory authority:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
(The Hamburg Commissioner for Data Protection and Freedom of Information)
Ludwig-Erhard-Str. 22, 20459 Hamburg

§ 12 Validity and changes to this privacy policy

This privacy policy is currently valid and dated August 2026.

As our website and offerings develop further, or due to changed legal or regulatory requirements, it may become necessary to amend this privacy policy.