Privacy Policy

The person responsible within the meaning of the EU General Data Protection Regulation, the Hessian Data Protection and Freedom of Information Act (HDSIG) and other national data protection laws of the member states as well as other data protection regulations is:


Hessen Trade & Invest GmbH

Konradinerallee 9
65189 Wiesbaden, Germany
Phone: +49 611 95017 80
E-mail: info@htai.de
www.htai.de

Managing Director: Dr. Rainer Waldschmidt
You can contact the controller's data protection officer as follows:
Phone: +49 611 95017 8286
Fax: +49 611 95017 8415
E-mail: datenschutzbeauftragter@hessen-agentur.de


Personal data

Personal data is all information that relates to an identified or identifiable natural person. A natural person is regarded as identifiable who can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online identifier or one or more special features that express the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.

We describe below how we process your personal data.


1. Storage of personal data in our customer relationship management system

Description and scope of data processing: If you contact us on business, we may save your personal data in our customer relationship management system and, if necessary, inform you at irregular intervals about current topics from our field of activity and events (no newsletter).

The provision of personal data by you is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide us with personal data.

Legal basis for data processing: The legal basis for data processing is the public contract assigned to us by economic development in the State of Hessen (Art. 6 Para. 1 lit. e GDPR).

Purpose of data processing: The processing of personal data serves the organisation of our business contacts and the sending of information within the scope of the fulfillment of the public contract assigned to us by the economic development in Hessen.

Duration of storage: The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. We check regularly, at the latest every three years, whether further storage of the data is necessary. This does not apply if the deletion is contrary to legal or contractual obligations, in particular retention periods.

2. Provision of the website and creation of log files

You can visit our website at any time without having to register or provide any personal information. Every time our website is called up, however, our system automatically collects data and information from the computer system of the calling computer.

Description and scope of data processing: The following data is automatically collected when a page is accessed:

  1. Browser type and version,
  2. operating system used,
  3. Website from which you are visiting us (referrer URL),
  4. Website you visit
  5. Date and time of your access,
  6. Your Internet Protocol (IP) address.

The collection of the data for the provision of the website and the storage of the data in log files is essential for the operation of the website.

Legal basis for data processing: The legal basis for the temporary storage of data and log files is Article 6 (1) (f) of the EU General Data Protection Regulation (GDPR).

Purpose of data processing: The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. To do this, the user's IP address must be stored for the duration of the session. The purpose of storing in log files is to ensure the functionality and stability of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. Our legitimate interest in data processing according to Art. 6 Para. 1 lit. f GDPR lies in these purposes.

Duration of storage: The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. The data stored in log files will be deleted after a period of seven days at the latest.

3. Contact by e-mail

Description and scope of data processing: If you contact us via the e-mail address provided, the personal data transmitted with the email will be saved.

Legal basis for the data processing: The legal basis for the processing of the data that is transmitted in the course of sending an e-mail is Article 6 Paragraph 1 lit.f GDPR. Our legitimate interest lies in answering the sender's contact request. If the aim of the e-mail contact is to conclude a contract, the additional legal basis for processing is Article 6 (1) (b) GDPR.

Purpose of data processing: We only process the personal data from an e-mail to process the contact request.

Duration of storage: The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been finally clarified. This does not apply if the deletion is contrary to legal or contractual obligations, in particular retention periods.

4. Contact form and e-mail contact

Description and scope of data processing: By sending a contact request via our contact form, the data entered in the input mask will be transmitted to us and saved. At the time the message is sent, the user's IP address and the date and time the message was sent are also saved. For the processing of the data, your consent is obtained as part of the sending process and reference is made to this data protection declaration.

The provision of personal data by you is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide us with personal data. If personal data is not provided, as far as this is mandatory information, it will not be possible to contact you via the contact form.

Alternatively, you can contact us using the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be saved.

Legal basis for data processing: The legal basis for processing the data transmitted via the contact form is your consent (Art. 6 Para. 1 lit. a GDPR). The legal basis for the processing of the data that is transmitted in the course of sending an e-mail is Article 6 (1) (f) GDPR. Our legitimate interest lies in answering the sender's contact request. If the aim of the email contact is to conclude a contract, the additional legal basis for processing is Article 6 (1) (b) GDPR.

Purpose of data processing: The processing of personal data from the input mask or an e-mail is only used to process the contact request.

Duration of storage: The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those that were sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been finally clarified.

This does not apply if the deletion is contrary to legal or contractual obligations, in particular retention periods. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5. Registration for events

Description and scope of data processing: By submitting a registration via a registration form, the data entered in the input mask will be transmitted to us and saved. At the time the registration is sent, the user's IP address and the date and time of registration are also saved. For the processing of the data, your consent is obtained as part of the sending process and reference is made to this data protection declaration.

The provision of personal data by you is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide us with personal data. Failure to provide personal data, insofar as this is mandatory information, means that registration for an event is not possible.

Legal basis for data processing: The legal basis for processing the data is your consent (Art. 6 Para. 1 lit. a GDPR).

Purpose of the data processing: The processing of personal data serves exclusively to carry out the registration and the event.

Duration of storage: The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. The personal data collected during registration will be deleted no later than one month after the end of the event, unless you have consented to further use or processing (e.g. consent to receive invitations for future events).

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

6. Registration for partnering at events

Description and scope of data processing: In the run-up to certain events, visitors have the opportunity to register for so-called partnering and to save partnering profiles. By submitting the registration for partnering and the partnering profile, the data given in the input masks will be transmitted to us and saved. At the time the registration is sent, the user's IP address and the date and time of registration are also saved. For the processing of the data, your consent is obtained as part of the sending process and reference is made to this data protection declaration.

The provision of personal data by you is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide us with personal data. Failure to provide personal data, insofar as this is mandatory information, means that participation in partnering is not possible.

All participants who have registered for partnering will have access to the profiles of other participants before the event and can individually arrange 10-minute exchange talks for the event.

Legal basis for data processing: The legal basis for processing the data is your consent (Art. 6 Para. 1 lit. a GDPR).

Purpose of data processing: The processing of personal data serves exclusively to register for and carry out partnering.

Duration of storage: The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. The personal data collected as part of the registration for partnering in the partnering profile will be deleted no later than one month after the end of the event

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

7. Taking and publishing of photos

Description and scope of data processing: As part of the special public mandate to operate and (further) develop economic development in the State of Hessen, it is incumbent on Hessen Trade & Invest GmbH to inform the public about events in suitable publications in words and pictures. For this purpose, photos may be taken at events and published in print media, in the Internet offers of Hessen Trade & Invest GmbH and / or appearances of Hessen Trade & Invest GmbH in social media (e.g. Facebook, Twitter, Instagram).

The provision of personal data by you is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide us with personal data.

Legal basis for the data processing: The legal basis for the processing of the data is the public contract assigned to us by the economic development agency in Hesse (Art. 6 Para. 1 lit. e GDPR). If you have given your consent to the publication of photos showing you on the social media channels of [HA Hessen Agentur GmbH // Hessen Trade & Invest GmbH], this is the legal basis for data processing (Art. 6 Para. 1 lit. a GDPR).

Purpose of data processing: The purpose of the publication of photos is the special public mandate of [HA Hessen Agentur GmbH // Hessen Trade & Invest GmbH] to operate and (further) develop economic development in the State of Hessen and therefore to inform the interested public through events to inform.

Duration of storage: The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. If photos are not published, they will be deleted no later than one month after the end of the event. Published photos are saved as long as the respective publications are available or retrievable.

Recipients and data transfer to third countries: For publication in print media, the photos taken are sent to daily newspapers and publishing houses in particular. If the person concerned has consented to the publication of photos showing them in social media when registering, the data will be transmitted to the operators of these social networks. As part of the consent, the person concerned is informed that some of the operators of social media are based outside the EU and the European Economic Area (EEA), in particular in the USA, and that these countries do not have an adequate level of data protection. A transmission is possible in particular to the following operators of social media:

  • Facebook
    The service provider is Facebook Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland). Further information on data protection can be found at https://www.facebook.com/policy.php.
  • Instagram
    The service provider is Facebook Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland). Further information on data protection can be found in the Instagram data protection policy at https://help.instagram.com/155833707900388.
  • XING
    The service provider is New Work SE (Dammtorstraße 30, 20354 Hamburg). Further information on data protection can be found in XING's data protection declaration at https://privacy.xing.com/de/datenschutzerklaerung.
  • LinkedIn
    The service provider is the LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland). Further information on data protection can be found in LinkedIn's data protection declaration https://www.linkedin.com/legal/privacy-policy and in the cookie policy at https://www.linkedin.com/legal/cookie-policy.
  • Google+
    The service provider is Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043 USA).
    Further information on data protection can be found in Google's data protection declaration at https://policies.google.com/privacy/update?hl=de&gl=de. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield.
  • Twitter
    The service provider is the Twitter International Company (One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland). Further information on data protection can be found in Twitter's data protection declaration at https://twitter.com/de/privacy.
  • YouTube
    The service provider is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Further information on data protection can be found in Google's data protection declaration at https://policies.google.com/privacy?hl=de.
  • Vimeo
    The service provider is Vimeo, Inc. (555 West 18th Street, New York, New York 10011, USA). Further information on data protection can be found in Vimeo's privacy policy at https://vimeo.com/privacy. Vimeo processes personal data in the USA and has submitted to the EU-US Privacy Shield.
  •  Pinterest
    The service provider is Pinterest Europe Ltd. (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland). Further information on data protection can be found in Pinterest's data protection declaration at https://policy.pinterest.com/de/privacy-policy

We cannot rule out that, even if social media operators are based in the EU, the personal data will also be transmitted to group companies in the USA or another country outside the EU or the EEA and / or on servers in the USA or in another country outside the EU or the EEA. 

Legal basis for the data processing: The legal basis for the processing of the data is the consent of the event visitors (Art. 6 Para. 1 lit. a GDPR). Otherwise, the legal basis is a legitimate interest of Hessen Trade & Invest GmbH as well as the special public contract assigned to it (Art. 6 Paragraph 1 lit. f GDPR) and Art. 6 Paragraph 1 lit. e GDPR). This results from the special public mandate shown to operate and (further) develop economic development in the State of Hessen. 

Purpose of data processing: The purpose of the publication of photos is the special public mandate of Hessen Trade & Invest GmbH to operate and (further) develop economic development in the State of Hessen and therefore to inform the interested public about events. 

Duration of storage: The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. If photos are not published, they will be deleted no later than one month after the end of the event. Published photos are saved as long as the respective publications are available or retrievable.

8. Transmission of personal data

Hessen Trade & Invest GmbH will not pass on your data to third parties unless you have given your express consent to such transfer or transfer is required or permitted by law. This does not apply to the service partners of Hessen Trade & Invest GmbH, who are required to process the contractual relationship and who have been commissioned by us to process personal data in accordance with our instructions as part of an order processing contract. If Hessen Trade & Invest GmbH has been commissioned by the State Chancellery of Hessen or a ministry of the State of Hessen as a processor or project manager with the supervision of a project or campaign, the data collected in the context of the respective project or campaign may also be transferred to the respective Made available to the client. If there is no order processing, the legal basis for this is a legitimate interest of Hessen Trade & Invest GmbH and the respective client (Art. 6 Para. 1 lit. f GDPR). The legitimate interest lies in evaluating the success of the respective project or campaign. Our employees are bound to secrecy and to comply with data protection regulations.

9. Use of technically necessary cookies

Description and scope of data processing: In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device.

You can set your browser so that you are informed about the setting of cookies and individually decide whether to accept them or to exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be restricted. The following links show you how the settings can be adjusted in the following popular browsers:

Chrome: https://support.google.com/chrome/answer/95647?hl=de
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Internet Explorer:  https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Safari: https://support.apple.com/kb/PH21411?viewlocale=de_DE&locale=de_DE

If you use different devices to visit our website (e.g. your computer, smartphone, tablet, etc.), you should ensure that the cookie settings you want are set in each browser and on each device.

Legal basis for data processing: If personal data is processed using technically necessary cookies, the legal basis is Art. 6 Paragraph 1 lit. f GDPR.

Purpose of data processing: The purpose of using technically necessary cookies is to make visiting our website attractive and to use certain functions, such as language selection, the storage of items in a shopping cart or the recognition of the browser after registration in the member area of ​​a Side to enable. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after changing pages. This is also our legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR.

The user data collected by cookies are not used to create user profiles.

Duration of storage: We use "session cookies". A session cookie is a cookie that is automatically deleted after the user has closed the browser.

10. Embedded Videos

YouTube videos and related data collection and use
You can watch videos on our website that are integrated using a "plug-in" from YouTube LLC (901 Cherry Avenue, San Bruno, CA 94066, USA; a company of Google LLC). YouTube uses cookies for data collection and statistical data analysis. YouTube uses cookies, among other things, to collect reliable video statistics, to avoid fraud and to improve user-friendliness. The website operator receives statistical values ​​through the YouTube cookies for the retrieval of individual videos embedded in the website without reference to the respective user. If you watch a video integrated in this way, this data may also be stored and further used by YouTube. In this case, if you are logged in to YouTube with your YouTube account at the same time, YouTube may be able to assign your surfing behavior to your YouTube user profile. You can prevent corresponding data processing by logging out of your YouTube account before visiting our website.

The "extended data protection mode" for YouTube videos is activated on our website. That means: YouTube does not store cookies for a user who displays a website with an embedded YouTube video player but does not click on the video to start playback. Before you call up a video, you will also be informed that by clicking on a video link you will be leaving the website of the person responsible and will be transferred to the website of the video portal YouTube, transferring the website you are currently accessing. If you accept this, YouTube may save cookies on the user's computer, but no personal cookie information will be saved for the playback of embedded videos.

Since this is the service of a third party, we have no influence on the processing of the corresponding data by YouTube. The purpose and scope of the data collection and the further processing and use of the data by YouTube or Google as well as your related rights and setting options to protect your privacy can be found in the corresponding information on data protection at https://policies.google.com/privacy/update?hl=de&gl=de. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield.

11. Embedded Maps

Use of Google Maps
Our website uses Google Maps from the provider Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043. This enables us to show you interactive maps directly on the website and enables you to conveniently use the map function.
If you have consented to the data transmission to Google by clicking the corresponding button, Google will receive the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under "Provision of the website and creation of log files" are transmitted. This happens regardless of whether Google provides a user account that you are logged in to or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be assigned to your profile on Google, you must log out before activating the button. Google saves your data as a usage profile and uses it for advertising, market research and / or needs-based design of its website. Such an evaluation takes place in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact Google to exercise this right.

Further information on the purpose and scope of data collection and its processing by Google can be found in Google's at https://policies.google.com/privacy/update?hl=de&gl=de. There you will also find further information on your rights in this regard and setting options to protect your privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield.

Use of Open Street Map
Map sections based on the OpenStreetMap (OSM) open data project are used on our website.
If you have consented to the data transmission, information about the use of the website (e.g. your IP address) will be transmitted to retrieve so-called tiles (map details). Depending on which tiles are called up for this purpose, data can also be transferred to countries outside Germany and the European Union or the European Economic Area, including the USA. Main servers and infrastructure are currently operated in London, UK.

This service is an open source offer over whose data collection and processing we have no influence. The information collected may be transferred to third parties, processed on behalf of third parties and the data may be merged with other data stored on the person of the user, for which we have no information.

You can deactivate the collection of data by using OpenStreetMap by not using the map display.

Further information on the use of personal data by OpenStreetMap is available at http://wiki.osmfoundation.org/wiki/Privacy_Policy.

12. Automated decision-making including profiling

There is no automated decision-making including profiling.

13. Rights of the data subject

If your personal data is processed, you are affected within the meaning of the GDPR and you have the following rights vis-à-vis the person responsible:

Right to information: According to Art. 15 GDPR, you have the right to request information about your personal data processed by us; In particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a Right to lodge a complaint, the origin of your data, if we have not collected it, as well as the existence of automated decision-making including profiling and, if necessary, meaningful information on their details

Right to correction: According to Art. 16 GDPR, you have the right to immediately request the correction of incorrect or incomplete personal data stored by us.

Right to deletion: In accordance with Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless processing to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of in the public interest or for the establishment, exercise or defense of legal claims.

Right to restriction: According to Art. 18 GDPR, you have the right to request that the processing of your personal data be restricted if you dispute the accuracy of the data, the processing is unlawful, but you refuse to delete it and we refuse the data you no longer need them, but you need them to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR.

Right to data portability: In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible.

Right to lodge a complaint: According to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our place of business. In the present case, the responsible supervisory authority is: The Hessian data protection officer, visitor address: Gustav-Stresemann-Ring 1, 65189 Wiesbaden, postal address: Postfach 3163, 65021 Wiesbaden, e-mail: Poststelle@datenschutz.hessen.de, Tel .: +49 611 1408 - 0, Fax: +49 611 1408 - 900.

Right of objection: You have the right, for reasons that arise from your particular situation, at any time to object to the processing of your personal data, which is based on Art. 6 Para. 1 lit. takes place to file an objection. If the personal data relating to you are processed in order to operate direct mail, you have the right to object at any time to the processing of the personal data relating to you for the purpose of such advertising.

Right of withdrawal: You have the right to withdraw your consent to the processing of your personal data at any time. Withdrawing your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of withdrawal. You can send a revocation to the e-mail address given when registering / ordering or in any case to info@htai.de ​​or by post using the address given above.

14. Data transmission security

In the case of data communication in open networks such as the Internet, the protection of the transmitted data cannot be comprehensively guaranteed according to the current state of the art and cannot be completely protected against access by third parties. Therefore, do not send us any confidential data via the Internet (e.g. using the contact form or e-mail) without adequate protection. However, all forms on this website that collect personal data have been encrypted using the TSL 1.2 protocol. We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

15. Changes to our data protection regulations

We reserve the right to adapt this data protection declaration from time to time so that it always complies with current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. The current data protection declaration applies when you visit our website again.

Status: August 2020

Vielen Dank fürs Teilen: