Privacy Policy

Privacy Policy and Information for Data Subjects pursuant to Articles 13 and 14 of the EU General Data Protection Regulation (GDPR)

1. General Information

Information about the Controller:

Company:
Hamburg Green Hydrogen GmbH & Co. KG

Address:
Moorburger Schanze 2, 21079 Hamburg, Germany

Commercial Register:
Local Court of Hamburg, HRB 179897

VAT ID No.:
DE364793152

Management (of the general partner GmbH): Christoph Cosler, Holger Matthiesen

Email: presse@hghh.eu

‍

Contact details of the Data Protection Officer:
IT Manager / IT Security Manager / Data Protection Coordinator
Luxcara on behalf of
Hamburg Green Hydrogen GmbH & Co. KG
Mobile: +49 172 969 1169
Email: datenschutz@hghh.eu

2. General Information on Data Processing

This website (www.hghh.eu) is a purely informational website. Personal data is only collected if you provide it to us yourself, for example when you contact us by email. In addition, only the technical data described under Section 3 (Server Logfiles) is processed. Any further processing of your personal data takes place solely on the basis of your explicit consent.

3. Specific Information Regarding the Website

3.1 Server Logfiles

When you visit our website, your browser automatically transmits certain data to the web server for technical reasons. During an active connection between your internet browser and the web server, the following data is collected:

  • Date and time of the request
  • Name of the requested file
  • Page from which the file was requested
  • Access status (file transferred, file not found, etc.)
  • Type and version of the browser and operating system used
  • Full IP address of the requesting device
  • Amount of data transferred

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the technical security and stability of the website). Storage period: 7 days. In the event of security incidents, storage may be extended for evidence preservation (Art. 6(1)(f) GDPR).

3.2 Hosting and Content Delivery Networks (CDN)

We host the content of our website with the following provider:

Webflow Provider: Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (“Webflow”). When you visit our website, Webflow collects various logfiles, including your IP address.

Webflow is a tool for creating and hosting websites. Webflow stores cookies or other recognition technologies that are necessary for displaying the website, providing certain website functions, and ensuring security (necessary cookies).

For details, please refer to Webflow’s privacy policy: https://webflow.com/legal/eu-privacy-policy

The use of Webflow is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable presentation of our website possible. If consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.

Data transfers to the USA are based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://webflow.com/legal/eu-privacy-policy

The company is certified under the EUUS Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Any company certified under the DPF commits to complying with these standards. Further information is available here: https://www.dataprivacyframework.gov/participant/5666

Data Processing Agreement We have concluded a Data Processing Agreement (DPA) for the use of the above-mentioned service. This legally required agreement ensures that the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

Further information on Webflow and GDPR: https://discourse.webflow.com/t/guide-how-to-use-webflow-in-the-gdpr-space-wie-du-webflow-im-rahmen-der-dsgvo-nutzen-kannst/158846

3.3 Cookies

This website uses services provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare sets a cookie to distinguish individual visitors who share an IP address (e.g., users behind a shared network router). The cookie is only set when the ratelimiting function is active and serves solely for access control and website security. It is a session cookie that is deleted when the browser is closed.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the security and availability of the website).

4. Contact by Email

If you contact us by email (e.g., via presse@hghh.eu or kontakt@hghh.eu), the data you provide (in particular your email address, your name, and the content of your message) will be processed for the purpose of handling your inquiry and for any followup questions.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries) or, where applicable, Art. 6(1)(b) GDPR (precontractual measures). Storage period: 2 years after the last correspondence. For inquiries with contractual relevance or tax/commercial law significance, storage may be required for up to 10 years under statutory retention obligations (§ 147 AO, § 257 HGB).

5. Categories of Recipients

Personal data may be transferred to the following categories of recipients:

  • Hosting and IT service providers (Webflow Inc.; additional providers as needed)
  • Public authorities where a legal obligation to disclose exists
  • Other external parties where the data subject has consented or where the transfer is legally permissible

6. Rights of Data Subjects

You have the following rights regarding the processing of your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR)
  • Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)

To exercise your rights, please contact us using the details provided in Section 1 or contact our Data Protection Officer directly.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent supervisory authority for the controller is:

Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI) LudwigErhardStraße 22, 20459 Hamburg, Germany Website: https://datenschutz-hamburg.de

7. Version of this Privacy Policy

Version: 01.10.2026 We reserve the right to update this privacy policy in the event of changes to our processing activities or legal requirements. The current version is available at www.hghh.eu.

‍