Privacy Policy

Effective date: April 3, 2023

I. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:

shipzero GmbH
St. Annenufer 2
20457 Hamburg
Germany
info@shipzero.com
https://www.shipzero.com/

II. Contact details of the data protection officer

The data protection officer of the controller is:

DataCo GmbH
Sandstrasse 33
80335 München
Germany
Phone: +49 89 452459 900
Email: datenschutz@dataguard.de
Website: www.dataguard.de

III. General information on data processing

Scope of the processing of personal data
As a matter of principle, we only process personal data insofar as this is necessary for the provision of a functional website as well as our contents and services. Processing is generally carried out only with the user’s consent unless legally permitted otherwise.

Legal grounds for the processing of personal data

  • Consent of the data subject
    Processing is based on Art. 6 para. 1 lit. a GDPR where consent has been obtained.
  • Performance of a contract or pre-contractual measures
    Processing is based on Art. 6 para. 1 lit. b GDPR.
  • Legal obligation
    Processing is based on Art. 6 para. 1 lit. c GDPR.
  • Vital interests
    Processing is based on Art. 6 para. 1 lit. d GDPR.
  • Legitimate interests
    Processing is based on Art. 6 para. 1 lit. f GDPR, provided the interests of the data subject do not override those interests.

Data deletion and storage period
Personal data shall be deleted or blocked as soon as the purpose of storage ceases to apply, unless statutory retention obligations apply.

IV. Rights of the data subject

If your personal data is processed, you have the following rights:

Right of access (Art. 15 GDPR)
You may request confirmation as to whether personal data concerning you is being processed and obtain access to:

  • The purposes of processing
  • The categories of personal data concerned
  • Recipients or categories of recipients
  • The intended storage period
  • The existence of rights to rectification, erasure, restriction, or objection
  • The right to lodge a complaint with a supervisory authority
  • The origin of the data, if collected from a third party
  • The existence of automated decision-making, including profiling
  • The transfer of personal data to third countries, if applicable

Right to rectification (Art. 16 GDPR)
You have the right to request correction or completion of inaccurate or incomplete personal data.

Right to restriction of processing (Art. 18 GDPR)
You have the right to request restriction if one of the following applies:

  • You dispute the accuracy of your personal data for a period of time
    that allows us to verify the accuracy of the personal data.
  • In the context of unlawful processing, you object to the erasure of personal data
    and request instead the restriction of its use.
  • We no longer need the personal data for processing purposes,
    but you require it to assert, exercise, or defend legal claims.
  • You have objected to the processing,
    pending verification of whether our legitimate grounds override yours.

Right to erasure (“right to be forgotten”) (Art. 17 GDPR)
You may request deletion if one of the following applies:

  • The personal data is no longer necessary for the purposes for which it was collected.
  • You withdraw consent and no other legal basis exists.
  • You object to the processing and no overriding legitimate grounds exist.
  • The personal data was processed unlawfully.
  • Deletion is required to comply with a legal obligation.
  • The data was collected in relation to information society services offered to minors.

This right does not apply where processing is necessary:

  • For freedom of expression and information
  • For compliance with legal obligations
  • For public interest reasons
  • For archival, research, or statistical purposes
  • For legal claims

Right to data portability (Art. 20 GDPR)
You may request your personal data in a structured, commonly used, and machine-readable format.

Right to object (Art. 21 GDPR)
You may object at any time to processing based on legitimate interests, including profiling.

Right to lodge a complaint
You may lodge a complaint with a supervisory authority. A list of German authorities can be found at:
https://www.bfdi.bund.de

V. Provision of the website and creation of log files

Description and scope
Each time the website is accessed, the following data is collected:

  • IP address of the user
  • Date and time of access

Purpose of processing
This data is required to deliver the website and ensure system security.

Legal basis
Processing is based on Art. 6 para. 1 lit. f GDPR.

Duration of storage
Log data is deleted after seven days unless extended storage is required for security purposes.

VI. Use of cookies

Description and scope
Cookies are stored on your device to ensure website functionality and usability.

The following data may be processed:

  • Time of access
  • IP address
  • Session ID
  • Search terms
  • Page view frequency
  • Use of website functions

Legal basis

  • Technically necessary cookies
    Based on § 25 para. 2 no. 2 TTDSG.
  • Non-essential cookies
    Based on consent under § 25 para. 1 TTDSG and Art. 6 para. 1 lit. a GDPR.

Revocation
Consent can be revoked at any time via browser settings or cookie preferences.

SalesViewer®
This website uses SalesViewer® technology for marketing and optimisation purposes. Data is pseudonymised and can be opted out at:
https://www.salesviewer.com/opt-out

VII. E-mail contact

Scope
Personal data transmitted via email is stored solely to process the enquiry.

Legal basis
Processing is based on Art. 6 para. 1 lit. f GDPR or lit. b GDPR if contract-related.

Duration of storage
Data is deleted once the conversation ends.

Objection
You may object at any time by emailing privacy@shipzero.com.

VIII. Contact form

Data collected

  • E-mail address
  • First and last name
  • Telephone number
  • IP address
  • Date and time
  • Position

Purpose
Processing is limited to handling the enquiry.

Legal basis
Art. 6 para. 1 lit. f GDPR or lit. b GDPR where applicable.

IX. Application by e-mail

Data collected

  • Contact details
  • CV and certificates
  • Education and language skills
  • Salary expectations
  • Photograph, if provided

Legal basis

  • Application processing
    Art. 6 para. 1 lit. b GDPR and § 26 BDSG.
  • Applicant pool
    Art. 6 para. 1 lit. a GDPR (consent).

Storage period
Up to six months after completion of the application process.

X. Use of company presences in job-oriented networks

We maintain a company presence on:

Processing is based on Art. 6 para. 1 lit. f GDPR.

XI. Hosting

The website is hosted by Cloudways.

The following data is collected via server log files:

  • Browser type and version
  • Operating system
  • Referrer URL
  • Host name
  • Date and time
  • IP address

Processing is based on Art. 6 para. 1 lit. f GDPR. Servers are located in the EU/EEA.

XII. Registration

Data collected

  • Name
  • E-mail address
  • Telephone number
  • Date and time of registration

Purpose

  • Booking meetings
  • Access to services

Revocation
Registration may be cancelled at any time via privacy@shipzero.com.