Data protection
§ 1 Information about the collection of personal data
(1) In the following, we provide information about the processing of personal data when using our website. Personal data is any data that relates to you personally, such as name, address, e-mail addresses, user behavior.
(2) The person responsible in accordance with Article 4 (7) GDPR is:
Hamburg 13 GmbH
Mittelweg 10
20148 Hamburg
(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, possibly your name and telephone number) will be stored by us in order to answer your questions.
This data is processed on the basis of Article 6 (1) (b) GDPR, provided that your request is related to the fulfilment of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of inquiries addressed to us in accordance with Art. 6 para. 1 lit. f DSGVO or on your consent in accordance with Art. 6 para. 1 lit. a GDPR, if this has been requested.
The contact data will remain with us until you request us to delete it, withdraw your consent to storage or the purpose for storing the data no longer applies (e.g. after your request has been processed or a purchase contract has been concluded). Mandatory legal provisions — in particular retention periods — remain unaffected.
(4) We use service providers who work exclusively on our behalf and in accordance with instructions to provide the service offered, e.g. hosting our systems or operating our IT. These have been carefully selected by us and are regularly checked.
In principle, we only store your data for as long as it is required for the respective purposes underlying the processing. In addition, we only store data to the extent that we are legally obliged to do so, e.g. due to legal storage obligations.
§ 2 Your rights
(1) You have the following rights vis-à-vis a person responsible with regard to personal data concerning you:
— right to information,
— right to correction or deletion,
— the right to restrict processing,
— the right to object to processing,
— The right to data portability.
(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
The contact details of the data protection supervisory authorities can be found at the following link:
https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html
§ 3 Processing of personal data when visiting our website
When using the website for informational purposes, i.e. simply viewing it without registration and without you providing us with any other information, we process the personal data that your browser transmits to our server. The data described below is technically necessary for us to display our website to you and to ensure stability and security and must therefore be processed by us. The legal basis is Art. 6 para. 1 lit. f DSGVO:
— IP address
— date and time of the request
— Time zone difference to Greenwich Mean Time (GMT)
— Content of the request (page visited)
— Access status/HTTP status code
— amount of data transferred in each case — Browser — operating system — language and version of the browser software.
§ 4 Objection or revocation against the processing of your data
(1) If you have given your consent to process your data, you can do so at any time by post at Hamburg 13 GmbH, Mittelweg 10 D-20148 Hamburg or by e-mail at info@hh-13.de revoked. Such a withdrawal affects the lawfulness of processing your personal data after you have expressed it to us. The admissibility of processing your data up to the time of your withdrawal remains unaffected.
(2) Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if processing is in particular not necessary to fulfill a contract with you, which is described by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your objection, we will review the situation and will either stop or adjust data processing or show you our compelling legitimate reasons for continuing processing.
§ 5 Our appearances on social networks
(1) We maintain appearances on the following social media platforms:
Instagram: social network; service provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland;
Privacy Policy: https://privacycenter.instagram.com/policy
Information about Instagram Page Insights: https://www.facebook.com/legal/terms/information_about_page_insights_data
LinkedIn: social network; service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland;
Privacy Policy: https://www.linkedin.com/legal/privacy-policy
Standard contractual clauses: https://legal.linkedin.com/dpa
Opt-out option: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Order processing contract and information about Page Insights: https://legal.linkedin.com/pages-joint-controller-addendum
(2) For these information services, we use the technical platform and services of the respective providers. We would like to point out that you use our social media sites and their functions on your own responsibility. This applies in particular to interactions such as commenting, sharing or rating.
When you visit our pages, the platform operators collect, among other things, your IP address and other information stored on your device via cookies or similar technologies. This data is used to provide us with anonymized, statistical evaluations of the use of our accounts (“insights”).
(3) The data collected about you in this context is processed by the platforms and can also be transferred to countries outside the European Union — in particular the USA.
The European Court of Justice classifies the USA as a country with an inadequate level of data protection according to EU standards. This can pose risks for users, for example with regard to the enforceability of their own rights.
The providers claim to ensure an appropriate level of data protection, including by concluding standard data protection clauses. We do not know to what extent the social media platforms use data from your visit or interactions for their own purposes, how long it is stored or whether it is passed on to third parties.
If you are logged in to the respective platform, your usage behavior can be assigned to your profile. Integrated social plug-ins enable platforms to understand your behavior even outside of the respective social media account.
If you want to avoid this, you should log out before using our site, deactivate “stay logged in”, delete cookies stored on your device and restart your browser.
(4) As the operator of the respective social media site, we also only process personal data that you actively transmit to us and whose processing is necessary for interaction (e.g. in the case of direct messages or inquiries). In such cases, processing is carried out in accordance with the general principles of this privacy policy.
(5) To exercise your rights as a data subject, you can contact us as well as the respective platform provider directly. Depending on your jurisdiction, your request will be forwarded if one party depends on information from the other.
If you have any questions about data processing by Instagram or LinkedIn, please contact the respective provider directly. For concerns about the processing of your interactions with our account, please contact us using the information provided in section (1) or in the legal notice.
(6) For information on which data the social media platforms process and for what purposes, please refer to the data protection declarations of the respective providers. There you will also find information about contact options and individual settings, for example with regard to advertisements.
§ 6 Applications
The person responsible for processing collects and processes the personal data of applicants for the purpose of processing the application process. This data is processed on the basis of Section 26 (1) (BDSG) (decision on the establishment of an employment relationship).
If the person responsible for processing does not conclude an employment contract with the applicant, the application documents will be deleted five months after notification of the rejection, provided that deletion does not conflict with any other legitimate interests of the controller. Other legitimate interest under Article 6 (1) (f) GDPR may, for example, represent a duty of proof in proceedings under the General Equal Treatment Act (AGG). Please do not send us photos, marital status and other sensitive information. If your application is sent to us by e-mail without encryption, it cannot be ruled out that a third party could gain access to the content of your e-mail. If the email delivery method seems too uncertain for you, please send us your application documents by post.
§ 7 Timeliness
This privacy policy was last updated on 01.12.2025. However, we would like to point out that it may be necessary to revise this privacy policy from time to time due to actual or legal changes.
§8 Hosting and Content Delivery Networks (CDN)
We host our website with Webflow. The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter: Webflow). When you visit our website, Webflow collects various log files, including your IP addresses. Webflow is a tool for building and hosting websites. Webflow stores cookies or other recognition technologies that are necessary to display the page, to provide certain website functions and to ensure security (necessary cookies).
For details, see Webflow's privacy policy: https://webflow.com/legal/eu-privacy-policy 44.
Webflow is used on the basis of Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in presenting our website as reliably as possible. If a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be withdrawn at any time. Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://webflow.com/legal/eu-privacy-policy 44.