Hapag-Lloyd AG is a global container shipping line which provides logistics services across the globe. The business purpose of the company is domestic and non-domestic container transport and the operation of all transactions and facilities connected to the shipment of containers.

In order to facilitate the work of the Hapag-Lloyd, the company has established branch offices and/or legal entities both domestically and abroad. The company is participating in networks and alliances, it may acquire and/or establish legal entities. It may cede its operations wholly or partially to other legal entities as required to provide services to the customers of the Hapag-Lloyd.

Data is collected, processed, and used for the purposes mentioned in these privacy terms. Inter alias, the following purposes are explicitly covered by these privacy terms:

• Human Resources (Administration and Development)
• Suppliers (Administration, Purchasing, Sub-Contracting)
• Shareholders (Administration and Support)
• Customers (Shipments, Customer Service, Marketing, Value-Added-Services,Customer Relationship Management)
• Head Office and management functions

We will process your personal data to the extent necessary for the initiation, implementation or termination of a pre-contractual or contractual relationship. Likewise, we will process data you voluntarily provided us with, for example, when you ask us for information regarding Hapag-Lloyd and its services.

Further information regarding the data processing during the recruiting you will find in Section 3.

Furthermore, we will process personal data if you consented or if we are legally authorized or obliged to collect and further process personal data relating to you. If we process data solely based on your informed consent, we will only use the data for the purposes stated in the consent procedure and within the scope outlined. For example, we will only inform you about our services after you have properly consented or indicated by other means that you would like to receive promotional information from Hapag-Lloyd.

You may revoke or withdraw your consent at any time with immediate effect for the future. Upon receipt of your message, we will delete your data unless we are legally obliged or authorized to retain personal data relating to you. Please send your revocation notice to the address indicated in Section 16 of these Privacy Terms. In case we process personal data based on your consent we may no longer be able to provide the respective service to you if you revoke your consent.

We may also process your data for the purposes of our legitimate interests pursuant to Art. 6 (1), Subparagraph f) GDPR, e.g. for the purpose of preventing fraud, investigating and reporting criminal offences, to enforce legal claims, including debt collection and defense in the event of legal disputes, for auditing purposes, to safeguard the companies IT security and operations, to communicate with you, to the extent that an ongoing business relationship with you or your employer already exists, in particular if you are a party to a shipment but not our direct contractual partner (consignee).
Personal data on consignees, employees of consignees or other third parties involved in a shipment are often provided by the shipper/ contract party to Hapag-Lloyd; it is the responsibility of the shipper / contract party to ensure that the provision of data is compliant with applicable data protection laws. Hapag-Lloyd further processes such data as a controller in compliance with the GDPR and other applicable data protection laws.

For its core applications, Hapag-Lloyd uses a so-called “data lake” that caters for a range of processing activities across various business sectors. Personal data stored in the data lake is fully encrypted and pseudonymized. Hapag-Lloyd has implemented a strict access control, based on a need-to-know principle and maintains control systems regarding the permitted processing activities and their purposes.

We may share personal data, as instructed by the shipper / contract party, in order to facilitate the provision of our services or in order to provide such information to portals / information service providers that are used in international logistics to facilitate the exchange of information locally (e.g. port community systems) or internationally (e.g. INTTRA or GSBN).

Hapag-Lloyd itself may also process personal data pursuant to Art. 6 (1), Subparagraph f) GDPR, without such instruction of the shipper / contract party, to the extent we exchange information with third parties, such as portals / information service providers, that facilitate the exchange of information in logistics and that serve as data brokers to ancillary services. If we do so, we make a detailed assessment in order to identify the legitimate interest, we determine that the processing is necessary to achieve it, and we balance it against the individual’s interests, rights and freedoms.

Due to the global nature of our business, we may have to transfer personal data internationally, including to countries that may not have the same data protections standards as the country you are legally residing in. For further details on the international transfer, please see below sections 2 and 9.

The provision of Hapag-Lloyd´s services often require the processing of personal data. The processing of personal data may be necessary both prior to the conclusion of a contractual agreement (e.g., in order to provide you with a quotation) and during the implementation of a contract with you (e.g., shipping details). Notably, and as stated above, we often process personal data that does not relate to our direct (pre-) contractual partner, but to a third person (such as a consignee, an employee of a consignee or a notified party). Regarding the legal base for such processing, please consult the previous section.

Personal data, which is processed to provide you or another third party with our services, may include but is not limited to:

• Individual and business-contact information (such as name, company name, physical address, email address, and telephone or fax number)
• Shipping information (such as (i) shipping-related contact details like the shipper's and consignee's name, physical address, email address and telephone number, (ii) signature for proof of delivery, (iii) account number, and (iv) information given to us that helps us access locations to which we provide service) and information provided to us regarding the content of certain shipments, but only to the extent an identifiable person can be linked to such content
• Information that enables us to verify an individual's identity (incl. passport data or drivers licenses)
• Names, email addresses, identity information and telephone numbers of third persons to whom we are asked to send information or shipments
• Payment information and financial information (such as bank-account numbers)
• Tax-identification number in circumstances in which you request services for which this information is required
• Other personal information that may be provided to us to obtain a Hapag-Lloyd service
  When you provide data to Hapag-Lloyd, please ensure that data is relevant, accurate and necessary for the business relationship. In particular when you are providing us with data relating to a third person, bear in mind the common data protection principles that apply.

When we pick up or deliver a shipment or provide other services, we may obtain physical location data. This includes, for example, data identifying the actual location of a physical address using information such as GPS data, geocodes, latitude and longitude information, and images of the various locations.

Certain areas of the Hapag-Lloyd website require registration, in particular areas related to e-business applications. Information obtained from users of these areas may also be used for Hapag-Lloyd´s marketing activities, within the limits of the applicable law and these terms.

Certain shipment-related data will be provided to the authorities of the country of transit or destination for customs and tax clearance or for security screening, as required by the laws of the respective country.

The information provided would usually include but may not be limited to: shipper’s name and address, receiver’s name and address, description of the goods, number of pieces, weight and value of shipment. Certain jurisdictions also require a proof of the identity of a person, e.g. passport data or a driver’s license.

We may transfer the personal information we process regarding you to countries other than the country in which the information originally was obtained. Primarily, in order to provide you with our services, the data will be transferred to other companies within the Hapag-Lloyd Group but may also be transferred to agents operating on behalf of Hapag-Lloyd, and other affiliated entities.

Please be aware that Hapag-Lloyd works with a number of partners to provide you with the best possible service (e.g., sub-contractors such as trucking companies, terminals, and depots). This may require, within the boundaries set by law, the transfer of personal data to these partners and service providers.

Please be also aware that we may not be able, for regulatory reasons, to provide you with our services if you partly or fully disagree with the processing of personal data relating to you.

The countries to which data are transferred may not have the same data-protection standards as the country in which you initially provided the information. When we transfer your information to other countries, we will protect that information as described in these terms and in accordance with applicable law.

In case of cross-border data transfer between different jurisdictions, we will follow the stricter legal provisions. We use contractual protections for the transfer of personal information among various jurisdictions (including, for example, the European Commission's standard contractual clauses) and we regularly work with our partners and service providers on measures to ensure the full compliance with the applicable data protection laws, including but not limited to the full compliance with the GDPR or the Cybersecurity Law of the People´s Republic of China. Before transferring data to countries outside the EU/EEA (third countries), we document an impact assessment for the transfer in order to always protect the interests of the data subjects unless such third country provides an adequate level of data protection as determined by the European Commission.

Further information is available in the respective section of these Privacy Terms regarding the data processed in relation to the use of our website and app.

For your rights to access and control personal data relating to you, please consult the respective section in these Privacy Terms.
 

For the purpose of carrying out the application process as well as the initiation of an employment relationship, we process your data required.

You can provide the following information as part of your application to us:

• Contact details (address, telephone number)
  
• CV data.
  
  • school education
  • vocational training
  • professional experience
  • language skills
• Social profiles (e.g. XING, LinkedIn, Facebook)
• Documents related to applications (application photos, cover letters, certificates, work certificates, work samples, etc.)

Legal basis for data processing
The legal basis for processing for the purpose of carrying out the application procedure and the initiation of an employment relationship is Section 26 (1) of the German Data Code (BDSG) in connection with Art. 6 (1) lit b) GDPR or the applicable national law. In addition, the use of the applicant management system by the controller is in the legitimate interest in accordance with Art. 6 (1) lit. f) GDPR or Art. 6 (1) lit a) GDPR (consent). Also eligible are processing activities which involve a legal obligation to process or a public interest, Article 6 (1) lit.c) and (e) GDPR, such as in the context of law enforcement or the investigation of public authorities.

CV-Parsing with Textkernel
We process and analyze documents you have uploaded in order to extract CV-data and convert them into a structured form (so-called "CV parsing").

Subscribing to notifications of new vacancies
On the Careers Board, there is an option for you to subscribe to being automatically informed about new vacancies at Hapag Lloyd. You will be notified either by an e-mail newsletter or via an RSS feed. In setting this up, the target groups, types of job and location can be entered in order to provide more specific detail for your subscription. You can, however, also subscribe to being sent information on new vacancies without giving any further details.

If you want to be informed about new vacancies via our e-mail newsletter, we will need your e-mail address. The legal basis for this is your consent to being sent the newsletter in accordance with Art. 6 (1) lit a) of the GDPR. You may revoke your consent to being sent the newsletter at any time via the link to unsubscribe which can be found in the newsletter.

No personal data is processed in order to provide information on vacancies via the RSS feed.

Social Share buttons
It is possible to share the job ads on different social networks. For this, different buttons are offered per network. After clicking on one of those buttons, you will be directed to the respective networks and will be there on their registration pages. These buttons are not plug-ins and do not transfer personally identifiable information directly to the social network operators. Currently, you can share job advertisements on the following social networks:

• Facebook ( https://de-de.facebook.com/privacy/explanation )
• Twitter ( https://twitter.com/de/privacy )
• LinkedIn ( https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-join-privacy-policy )
• Xing ( https://privacy.xing.com/de/datenschutzerklaerung )

You can also find out how the mentioned social networks deal with your personal data under the given links.

Referral Manager
There is the possibility over the recruiting platform to recommend potential applicants. If you should apply for a job because of such a recommendation, the person who recommended you will get the information about your application. Your profile photo as well as your name and the job you have applied for will be displayed. If you do not want this information to be transmitted, you can choose to have your data displayed only without direct personal reference before completing your application. The person who recommended you will then only receive the information that someone has applied based on the recommendation, but will not see which person this is.

The legal basis for the processing of your data on the basis of a recommendation is Art. 6 (1) lit f) GDPR (legitimate interests). Our legitimate interest is to give our employees the opportunity to recommend persons known to you for open positions. This gives us the chance to make our applicant selection process more efficient.

The information about the recommendation will be deleted as soon as the corresponding application on the recruiting platform is deleted as well.

Talent Pool
Following an unsuccessful application or by clicking the Contact Us button, you may be invited into our talent pool. We can contact you if a similar or otherwise suitable job is available. The inclusion in the talent pool is voluntary on the basis of the use of an opt-in link. The legal basis for this is the consent of the data subject in the inclusion in the talent pool within the meaning of Art. 6 (1) lit. a) GDPR. You can withdraw this consent for inclusion in the pool at any time.

When you sign up for the talent pool using the Contact Us button, we need the following information from you:

• Salutation, academic title (optional)
• First name, last name, e-mail address
• Job fields of interest
• Current career level
• Preferred location(s)
• XING profile or resume

The legal basis for this is the consent of the data subject in the inclusion in the talent pool within the meaning of Art. 6 (1) lit. a) GDPR. You can withdraw this consent for inclusion in the pool at any time.

Deletion and use of data
Your data will be stored for the duration of the application process and in accordance with legitimate retention periods after completion of the application process. In case of a cancellation, the data will be kept for 6 months. After the retention period has expired, the data is completely anonymized. The processing of anonymized data records is not subject to the material scope of data protection regulations, so that anonymized data may be processed for statistical and analytical purposes, for the preparation of market studies or for product development.

Use of the recruiting-website
For operational and maintenance purposes and in accordance with the provisions of telemedia law, interactions ("system logs") that are necessary for the operation of the Website or processed for system security purposes are recorded for example to analyse attack patterns or unlawful usage behavior ("evidence function").

Your Internet browser automatically transmits the following data as part of your access to the career portal:

• date and time of access,
• browser type and version,
• operating system used,
• Quantity of data sent.
• IP address of access

This data is not used for immediate assignment within the framework of applicant management and will be deleted in a timely manner in accordance with the legitimate retention periods, provided that no longer retention is required for legal or factual reasons, e.g. for evidence purposes. In individual cases, storage for the aforementioned purposes is considered. The legal basis is Art. 6 (1) lit. f) GDPR and/or the applicable tele media law.

Session-Cookies
We store so-called "cookies" in order to offer you a comprehensive range of functions and to make the use of our websites more convenient. "Cookies" are small files that are stored on your computer with the help of your internet browser. If you do not wish to use "cookies", you can prevent the storage of "cookies" on your computer by adjusting the settings of your internet browser. Please note that the functionality and functionality of our offer may be limited as a result.

We use the cookie JSESSIONID on the career page as a technically necessary session cookie. This saves a so-called session ID, with which various requests of your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. This session cookie is deleted when you log out or close the browser.
 

Using our website may lead to an automatic processing of personal data relating to you. Data processed may include in particular the name of your provider, your IP address, browser type, and system software, as well as the websites visited before, including keywords used for searches and the sites from which you have been transferred to our site (e.g., search engine or linked content). In all the aforementioned cases, processing is carried out in a way which does allow your identification, as we are potentially able to link between such metadata and data directly relating to you (= identifiable data). Such linkage is solely carried out in order to monitor the technical performance, reliability and security of our system.

If you subscribe to our newsletter, we will, due to technical reasons, automatically track whether you opened our newsletter, and whether you have accessed from the newsletter content which had been linked in our newsletter (both internal and external links).

If you use our website, small text files will be used which are stored on your computer (so-called "cookies"). We use cookies to facilitate and to improve the use of our website. We distinguish between “necessary cookies” that are technically required to provide you with our online services, and other cookies that may either improve your user experience on our websites, or that may help Hapag-Lloyd to provide you with more personalized content and to understand your behavior, both on our website and on third-party websites, better. We use “necessary cookies” without your explicit informed consent, all other cookies are only placed on your computer if you have consented to it.

We have summarized relevant information related to our use of cookies in a dedicated section of this website. You may obtain additional information by reviewing this cookie information under: Cookie Policy
We also provide details on our cookies in the consent management window that is automatically opened once you enter the sections of our website that use cookies.
 

Through our website and other channels, you have access to the Hapag-Lloyd app. Due to providing the app on the website, Hapag-Lloyd AG is subject to the provisions of the GDPR and the German Telecommunication Telemedia Dataprotection Act (TTDSG), and specifically to the relevant data protection provisions of §§ 19 to 26 TTDSG.
Please also note that specific regulatory restrictions may apply based on the legislation in the country you are residing in.
In case you are using the Google Play App Store of Google Inc., the Windows App Store of Microsoft Inc., or the iTunes App Store of Apple Inc. for the download, please carefully read the data protection terms of these app stores.

Further details can be found in the document "Hapag-Lloyd App Privacy Terms", which is accessible on our website under Mobile App and in the app stores.

By using our mobile app, you may be subject to similar analytics techniques as described for the use of cookies on computers (see above under Section 5) if you consent to such use.

After the launch of our app, technical installation and technical performance data from our iOS, Android and Windows apps is collected.

If you disagree with the processing of personal data as outlined in the Privacy Terms for the app, please do not install our app, or uninstall it if you did so. Please also consider the regulatory restrictions that may apply in your jurisdiction.
 

Our website contains hyperlinks to social media (so called "social plugins") operated by third parties. The functionality of these social plugins, in particular the transfer of information and user data is not activated by visiting our website, but only by clicking the hyperlinks (social plugins). Once you click on any of these links, the plugin of the respective social media tool will be activated and your browser will establish a direct connection with the server of this social media tool. To the extent that such plugins qualify as cookies, please review our dedicated Section 5 on cookies. Third-party cookies that are not necessary to the performance of our website and services, are subject to your explicit, prior informed consent.

If you click on the social plugin while you are visiting our website, a transfer of your user data to the respective social media network and the processing of your data through the social media network may occur. If you activate any of the social media plugins on our website while you are at the same time simultaneously logged into the respective social media tool with your personal account for that social media tool, the information that you have visited our website and that you have clicked the plugin on our website may be transferred to the social media tool and may be processed and stored in relation to your account with this social media tool.

To prevent such processing in relation to your account with the respective social media tool, you need to log out of your account before clicking the plugin link. You may also prevent the activation of social media plugins by adjusting the add-on settings of your browser, for example, by installing a so-called script-blocker such as „NoScript“ (http://noscript.net/).

To learn more about the purpose and scope of data processing by social media tools, and to receive further information about the processing and use of data relating to you, as well as your rights and detailed instructions how to protect your privacy, please refer to the privacy terms of the respective social media tool.

To enable you to obtain more detailed information on the privacy terms of social media tools, we would like to reference to the social media tools currently embedded into our website.

On our website, we currently use social plugins of the social media tools Facebook (Facebook Pixel) and LinkedIn, as well as the micro-blogging service Twitter.

These services are offered by the respective third parties and subject to the terms and conditions applicable to them. Prior to activating such plugins you may carefully assess the data protection settings that apply to the country in which you are legally residing.

Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. Detailed information regarding plugins used by Facebook is available at: https://developers.facebook.com/docs/plugins

LinkedIn is operated by LinkedIn Inc., 2029 Stierlin Court, Mountain View, CA 94043, USA. Detailed information regarding plugins used by LinkedIn is available at: https://www.linkedin.com/legal/cookie-policy

Twitter is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA. Detailed information regarding plugins used by Twitter is available at: https://twitter.com/about/resources/buttons

Instagram is operated by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. Detailed information regarding plugins used by Instagram is available at https://help.instagram.com/1896641480634370

YouTube is operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. Detailed information regarding plugins used by YouTube is available at https://policies.google.com/technologies/product-privacy and https://www.google.de/intl/de/policies/privacy

WeChat is operated by Tencent Holdings Ltd, Tencent Binhai Building, No 33 Haitian Second Road, Nanshan Shenzhen, 518054 ChinaDetailed information regarding plugins used by WeChat is available at https://www.wechat.com/en/privacy_policy.html

Due to the integration of the social media plugins into our website, the respective social media tools may obtain personal data relating to you if you activate the plugin, even if you do not have an account with the social medial tool or if you are not logged into your account of the respective social media tool.

Such information (including your IP address) may be directly transferred from your browser to a server of the social media tool provider and will be processed there. The social media tool providers Facebook, LinkedIn and Twitter, Instagram, YouTube and WeChat process personal data relating to users from EU/EEA countries, according to information that has been made available publicly, within the EU. Data relating to users who reside in a country outside the EU/EEA may be processed in the United States of America or another third country.

In case data relating to you, which have been obtained within the EU/EEA, is transferred by the third-party provider to servers outside the EU/EEA, you shall be aware that Hapag-Lloyd has no legal or technical influence thereon. Equivalent restrictions on the cross-border transfer of personal data may also apply based on the regulatory framework of the country you are residing in. Hapag-Lloyd and its affiliates aim to ensure full compliance with all applicable regulatory frameworks, e.g. the PR China Cybersecurity Law or the PR China Personal Information Protection Law.

Personalized Information
Our websites make use of so-called re-targeting technologies. We use these technologies to make our internet offers more interesting for you. This technique allows us to provide internet users who have already shown an interest in our services with tailored information on the websites of our partners and other third parties. The use of this marketing approach by our partners is undertaken on the basis of a cookie technology and an analysis of previous user behavior. Notably, we only use these techniques if you have consented to the application of such cookies via our cookie consent management tool. For more details on the consent management, please see above section 4.
If you would like to opt out the use of your data for retargeting, online-behavioral advertising or interest-based advertising, Hapag-Lloyd will honor any such opt-outs without any undue delay. You can change your cookie settings at any time in our Privacy Preference Center with immediate effect for the future. Furthermore, you may block cookies, change the settings of your browser add-ons, or contact us via the contact details provided in Section 16 for further guidance and help.

Facebook
Hapag-Lloyd makes use of the Facebook Pixelin case you consent to the use. The pixel is a tiny piece of Java script code that we have incorporated into each of our web pages. This piece of code provides a series of functions for transmitting application-specific events and user-defined data to Facebook. We use different pixel events to record information about the way visitors use our website. For this reason, each of our web pages contains a Custom Audience pixel, which is activated in case you consent to the use. This pixel records information about the user's browser session, which it sends to Facebook along with a hashed version of the Facebook ID and the URL viewed.
We do not use the Facebook pixel and the Custom Audiences based on it in a way that we would provide Facebook with any person identifiable information from our customer-relationship-management system or any other central database controlled by Hapag-Lloyd. As such, we do not transfer or disclose any personally identifiable information to Facebook or combine any information obtained in connection with these terms with personally identifiable information.
Further details on the collection and processing of data through Facebook are available in the privacy- policy section of Facebook Inc.: https://www.facebook.com/about/privacy/
You may also deactivate the remarketing-function of „Custom Audiences“ at https://www.facebook.com/settings/ . Please be aware that you must be logged in to Facebook in order to be able to adjust your settings.

LinkedIn Retargeting
Hapag-Lloyd uses the LinkedIn Insight-Tag provided by LinkedIn Inc. We have incorporated a simple piece of code to our website that places a cookie onto the browser of our website visitors. As such, the use of this cookie is subject to your prior explicit consent for the use of this cookie. Through LinkedIn's conversion tracking and website-demographic features, Hapag-Lloyd can understand what happens after a LinkedIn user clicks on our ad by using analytic methods and systems provided by LinkedIn that allow us to send data to LinkedIn and its affiliates about actions that people take on our websites or mobile applications ("Event Data"). We use this service to provide you with targeted information regarding services and events of Hapag-Lloyd.

LinkedIn and Hapag-Lloyd both adhere to the relevant EU data-protection law. Hapag-Lloyd does not receive any personally identifiable data from LinkedIn, but will only receive aggregated, fully de-identified information regarding our customers and users. Hapag-Lloyd does not provide LinkedIn with personally identifiable data from our central operational IT systems (such as CRM or CSV data).

For more details, please consult the specific terms and conditions on the LinkedIn website: https://www.linkedin.com/legal/conversion-tracking
For the general privacy policy of LinkedIn, please consult the website of LinkedIn: https://www.linkedin.com/legal/privacy-policy
For a more detailed information on the opt-out policy of LinkedIn, please consult the specific information provided on the website of LinkedIn:
https://www.linkedin.com/help/linkedin/answer/62931/manage-advertising-preferences?lang=en

Google Analytics
This website uses Google Analytics, a web-analytic service provided by Google, Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google")., , subject to your consent to the use of Google Analytics. Without your prior and explicit consent we will not use Google Analytics. Google Analytics uses "cookies", text files which are stored on your computer and which allow an analysis of your use of our website. The information generated by the cookie about your use of this website may be transferred to a Google server in the USA and stored there. However, in the case of the activation of the IP anonymisation on this website, your IP address will be previously abridged by Google within the member states of the European Union or in other states parties to the Agreement on the European Economic Area. Only in exceptional cases, will the full IP address be transferred to a Google server in the US and abbreviated there. IP anonymisation is active on this website.

On behalf of Hapag-Lloyd, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website usage and internet usage. We also measure our remarketing activities via Google Analytics information. The IP address provided by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the Google cookies from being saved by setting your browser settings accordingly.
Where users have chosen to enable Google to associate their web and app browsing history with their Google account and to use information from their Google account to personalize ads, Google will use data from its signed-in users together with your Google Analytics data to build audience lists for cross-device retargeting. In order to support this feature, two things will happen: First, for users on this site, Google Analytics will collect Google-authenticated identifiers associated with users’ Google Accounts (and therefore, personal information). Second, Google Analytics will temporarily join these identifiers to this site's Google Analytics data in order to support our audiences.
To learn more about Google Analytics, including how to opt out of it, please visit https://tools.google.com/dlpage/gaoptout

Google Tag Manager
This website uses the Google Tag Manager. This service is provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google"). This service allows website tags to be managed through an interface. The Google Tag Manager only implements tags. This means that no cookies are used and no personal data is collected. The Google Tag Manager triggers other tags, which in turn collect data if necessary. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains valid for all tracking tags if they are implemented with the Google Tag Manager.

Google Marketing Platform (including Floodlight)
This website uses Google Marketing Platform (“GMP”), an online advertising program of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google").
GMP places a cookie on your computer, with your express permission, to track your browsing behavior on various websites and to provide for an interest-based, personalized advertising experience. If you wish to permanently disable this, you can download a plug-in to disable the GMP cookie following this link: https://support.google.com/ads/answer/7395996?hl=en
Floodlight is an optional conversion and event tracking feature based on a HTML code snippet in Display & Video 360 that allows us to monitor, report and target conversions - the activity of visitors to a site after they have seen or interacted with an ad. This is done by adding users to lists based on specific actions on a website, which are then available for targeting in campaigns. Again, your express consent is a prerequisite for this case.

Google Ads Remarketing
Hapag-Lloyd uses the Google Ads retargeting function Google Ads Remarketing, provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google"). This allows us to provide internet users with targeted ads on google.com and third party websites based on their behavior on our website. This function is limited to a period of 18 months. Without your prior and explicit consent we will not use Google Ads Remarketing. In order to make use of Google Ads Remarketing, Google Ads uses "cookies", text files which are stored on your computer and which allow an analysis of your use of our website.
Ad personalization may be turned off by the use of this browser plugin: https://support.google.com/ads/answer/7395996?hl=en

Google Optimize
Hapag-Lloyd uses Google Optimize, provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google"). Google Optimize analyzes the use of different variants of the website, so that we are able to adjust the user experience to the behavior of the website users. Google Optimize is a tool integrated into Google Analytics and uses cookies.

The IP address received in this way is anonymized immediately after processing. In exceptional cases, the full IP address is transmitted to a Google server in the USA and encrypted there. The transmitted IP address is not merged with other data from Google.

You can prevent the storage of cookies by setting your browser accordingly.

However, we would like to point out that in this case not all functions of our website can be used to their full extent. You can also prevent the collection of data generated by cookies and related to your use of the website by Google, as well as the processing of this data by Google, To learn more about Google Analytics, including how to opt out of it, please visit https://tools.google.com/dlpage/gaoptout.

Microsoft Advertising Universal Event Tracking (UET)

We use this service provided by Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521) for marketing purposes as it allows us to provide internet users with targeted ads on bing.com and third-party websites based on their behavior on our website. We have incorporated a simple piece of code to our website that places a cookie onto the browser of our website visitors. As such, the use of this cookie is subject to your prior explicit consent for the use of this cookie. This cookie allows to track your browsing behavior on our website and to uniquely identify your web browser but not any personally identifiable data.

Transfers to third countries are possible. As an appropriate safeguard standard contractual clauses pursuant to Art. 46 GDPR were concluded. For third countries/companies which fall under an adequacy decision, the adequacy decision also applies. More information on this topic is published here: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/rules-international-data-transfers_en.

For more details on Microsoft Advertising and how to opt-out of it, please consult the specific terms and conditions on the Microsoft website: https://privacy.microsoft.com/en-US/privacystatement,
https://account.microsoft.com/privacy/ad-settings/signedout
 

Newsletter
If you subscribe to one of our newsletters we offer you the option to define in a preference center what you are most interested in. Registering for the newsletter is by means of a so-called “double opt-in”. Once you register, we send you an email to the email address you specified, asking you to confirm that you want to receive the newsletter from Hapag-Lloyd. If you do not confirm your registration by clicking the link in the email, the link we sent you will be deactivated and your data deleted.

You can unsubscribe to the newsletter at any time using the dedicated consent revocation process. We process your data in line with Article 6, Paragraph 1, Sentence 1, Letter a) of the GDPR.

We use Marketo both in the course of newsletter registration, and to send you content information. Marketo helps us to collect information about how you use our website and communication activities to optimize our services/products accordingly and to conduct marketing and sales activities. You will find more details on Marketo, the use of cookies by Marketo and the way we process data in Marketo, in the dedicated consent process for the newsletter registration and in the Cookie Policy.
You may also contact our Corporate Data Protection Office (for contact information please see below in Section 16) for further information and assistance.
 

The collection, processing and use of personal data is carried out by us and by other companies of the Hapag-Lloyd Group, or external data processors who process data on behalf of us and who are contractually and legally obliged to comply with applicable data protection standards. In the latter two cases, we will ensure that Hapag-Lloyd Group companies and external service providers comply with the relevant legal data protection rules and the obligations arising from these Privacy Terms.

We adhere to the legal requirements stipulated in the EU General Data Protection Regulation (and if applicable, relevant national law), unless more stringent legal requirements are applicable, which supersede the EU legal framework.

Third parties may also have access to personal data in case you decide to obtain added-value services, such as insurance coverage, as these services may be offered to you in collaboration with a third party. In this case, we will explicitly refer you to the applicable data protection terms of the third party.

In case of an administrative request or a legal obligation, we may be forced to transfer your personal data to the competent authority exercising such a request. The same applies in case of a court order regarding the transfer/disclosure of data relating to you.

In case of an administrative, legal or judicial request for data transfer, we will assess in each individual case whether the transfer is compliant with the principles enshrined in the EU General Data Protection Regulation. If deemed necessary, we may take legal actions against such order or request.

In case data relating to you, which have been obtained within the EU/EEA, is transferred by the third-party provider to servers outside the EU/EEA, you shall be aware that Hapag-Lloyd has no legal or technical influence thereon. Equivalent restrictions on the cross-border transfer of personal data may also apply based on the regulatory framework of the country you are residing in. Hapag-Lloyd and its affiliates aim to ensure full compliance with all applicable regulatory frameworks, e.g. the PR China Cybersecurity Law or the PR China Personal Information Protection Law.
 

We have taken technical and organizational measures to protect your personal data against loss, alteration, theft or access by unauthorized third parties. Our processes are compliant with Art 32 ff. of the EU General Data Protection Regulation, and/or with the applicable national laws and standards. Hapag-Lloyd AG has a ISO 27001/ ISO 27701 certification.

For the protection of personal data in the core systems of Hapag-Lloyd, we either use state of the art encryption practices for data at rest and data in transit, or other access control and data breach prevention tools that ensure the security of personal data in these systems. We use encryption in transit to product the exchange of information, unless such encryption is not permitted for regulatory reasons.

Specific IT security and encryption process apply to the extent we process data in the context of so-called US Flag shipments (compliant with the NIST Cybersecurity Framework), or subject to other national IT security frameworks that require the full encryption of personal data.

We use encrypted drives in case we process particularly sensitive information, e.g. in case of our HR systems or taxation information.

Furthermore we encourage partners and contractors to communicate with us in an encrypted way, in case these partners and contractors have the technical capabilities to do so.

We work with a number of external partners and have taken contractual steps to ensure that all external service providers comply with the relevant IT security standards, including but not limited to the requirements of the GDPR or the Cybersecurity Law of the People´s Republic of China.
 

Hapag-Lloyd will process personal data in accordance with the rights of data subjects under relevant national or international law. As the Hapag-Lloyd is based in the European Union, it adheres primarily to the rights of data subjects under the EU General Data Protection Regulation but will also follow stricter national laws and regulations as they apply to the data processing. When a person makes a data subject request, the requester must provide Hapag-Lloyd with such information as it may reasonably require enabling it to confirm the identity of the data subject (this is very important in avoiding claims from the real data subject in the case of requests that are not bona fide).

a) Hapag-Lloyd AG provides ‘fair processing information’, typically through this privacy statement or other legally binding documents used by Hapag-Lloyd (e.g., contractual documents relating to a shipment).

b) We try to be as open and transparent as we can be in terms of giving you access to your personal data. You are entitled to be aware of and be able to check the lawfulness of any processing of personal data relating to you.

c) You are entitled to have your personal data rectified if it is inaccurate or incomplete. If Hapag-Lloyd or one of its affiliates has disclosed such data to third parties, we will inform you.

d) You have a legal and personal “right of erasure” which is also known as the “right to be forgotten”. Upon your request, Hapag-Lloyd will close your account/registration and remove your personal data as soon as reasonably possible from all of our records unless a lawful reason exists for us to retain some or all of it.

e) You have a right to ‘block’ or ‘suppress’ the processing of your personal data by Hapag-Lloyd under certain circumstances, but we are still entitled to store just enough of your personal data to ensure that the restriction is respected in future.

f) You are entitled to obtain (in a commonly used and machine-readable form) and reuse your personal data that you have provided to us (via consent or contract performance) and which we process by automated means for your own purposes across different services and free of charge. Hapag-Lloyd will respond to a request without undue delay, and within one month whether or not we decide to action your request. Where we decide not to, Hapag-Lloyd inform you of your further rights.

g) Subject to any relevant GDPR exceptions, Hapag-Lloyd shall not take any potentially damaging decision concerning you as a result of using automated processing operations without human intervention. Hapag-Lloyd will ensure that you have the opportunity to obtain human intervention, express your point of view, and obtain an explanation of the decision, and challenge it.

To exercise your rights as a data subject, please contact our Data Protection Officer (for contact information please see below in Section 16). Alternatively, you may also get in touch with any other organization within the Hapag-Lloyd Group you have been in contact with. Please be aware that exercising your right as a data subject may have an impact on the service we can provide to you, in particular if you ask us to erase or block your data, or if you revoke/withdraw a consent in case we process personal data based on your consent.

You will not have to pay a fee when you exercise your rights as a data subject under the GDPR. We may however charge a reasonable fee if your request is clearly unfounded or excessive.

We may need to request specific information from you to help us confirm your identity and ensure your right to exercise any of your rights under the GDPR. This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

We do not process personal data relating to children and minors under the age of 16 years, unless we are legally obliged to do so. If we become aware that data were transferred to us or collected by us relating to children and minors under the age of 16 years without the informed consent of a parent or legal guardian, we will delete such personal data without any undue delay.

We delete personal data relating to you if the business purpose for which data have been processed ceases to apply, or if applicable data protection rules require us to delete personal data relating to you. In case the data processing was solely based on the informed consent obtained from you, we will delete data relating to you after you have revoked or withdrawn your consent (see also Section 2), unless we are legally authorized or obliged to retain data relating to you.

Due to the business activities of Hapag-Lloyd we are subject to various statutory requirements which stipulate obligations to process and retain personal data. Due to the international nature of our business activities, such obligations may derive from the law of the European Union, a Member State of the European Union and from the laws of third countries. We adhere to the statutory data retention periods and proactively delete data no longer required by law. In case no statutory retention period applies, we will regularly assess whether personal data are still required to administrate the business relationship between you and Hapag-Lloyd. If we believe such personal data is no longer needed, we will delete data relating to you. For the handling of data retention periods the Hapag-Lloyd has set up its own, internal statutory framework; if you would like to obtain more information on our data retention periods, please contact our Corporate Data Protection Office (for contact information please see below in Section 15).

At your request, we will block personal data relating to you fully or partly, unless there is a preponderant, overriding legal interest of Hapag-Lloyd in the continuation of the data processing. In order to facilitate the exercise of your data protection rights, please let us know in detail to what extent and for what duration which data shall be blocked. If technically feasible, you will be able to stop the processing and the use of data relating to you for specific areas and purposes by doing so.

In our Online Business (subject to registration), you may be required to provide payment data and you may be able to use payment methods, such as credit card or online payment systems. When Hapag-Lloyd uses a third-party payment processor, we do not store credit-card details or other payment information which might qualify as personal data under the GDPR, but instead rely on the third-party service provider to process personal data in order to provide these services. Primarily we cooperate with the service provider Computop which is based in Germany and processes personal data in compliance with the GDPR. Computop meets the strict security requirements of leading credit card providers, in accordance with the Payment Card Industry Data Security Standard (PCI DSS) and the PCI Point-to-Point Encryption (P2PE) standard for secure POS and mPOS solutions. In line with the requirements of Art 28 ff. GDPR, Computop and Hapag-Lloyd have entered into a third party processing agreement.

Please check the service provider for the relevant privacy terms and the compliance with the applicable laws and standards. You find the relevant details for Computop at https://computop.com/uk/data-protection

Within the respective section of the Hapag-Lloyd Online Business your data will be forwarded to the Computop service (an IFrame is opening on the Hapag-Lloyd page). Neither Computop nor Hapag-Lloyd AG have access to the personal data processed at the other page. Hapag-Lloyd AG will only be informed that a payment has been made.

If you have questions regarding our use of payment-service providers, please get in touch with us, or directly with the service provider. Contact details for the Hapag-Lloyd AG Corporate Data Protection office are provided in Section 16.
 

The website of Hapag-Lloyd may contain hyperlinks, which refer you to content provided on websites operated by third parties. As Hapag-Lloyd is not legally responsible for the content and the data protection compliance of such third-party-operated websites, we kindly ask you to closely pay attention to the respective privacy terms of these third-party-operated websites.

For questions regarding the collection, processing or use of personal data relating to you; or in case of a withdrawal of an informed consent regarding the disclosure, correction, blocking or deletion of data, please contact us at:

E-Mail:  [email protected] 


or

Postal Address:

Hapag-Lloyd Aktiengesellschaft
Corporate Data Protection
Ballindamm 25
20095 Hamburg
Germany

In addition to the internal Hapag-Lloyd data protection supervision by the Data Protection Officer, the GDPR and the German Federal Data Protection Act provide supervisory bodies, which help you to enforce your rights. For Hapag-Lloyd AG, the competent authority of the Free and Hanseatic City of Hamburg is responsible, which can be contacted at:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit

Ludwig-Erhard-Str 22, 7.OG, 20459 Hamburg, Germany

Tel.: +49 (40) 4 28 54 - 40 40
E-Fax: +49 (40) 4 279 - 11811
E-Mail:   [email protected]

In the following, we list the contacts of our local Data Protection Officers that are based at affiliates of Hapag-Lloyd AG. Please be aware that some jurisdictions may use a different terminology for the data protection function. Such nomenclature may include, inter alias: Data Information Officer; Information Officer, Information Security Officer, Privacy Officer, Grievance Officer etc.

Further countries please check the local pages:

Canada
Columbia
China
UAE
European Union / European Economic Area / UK/ Russia:
Egypt
India
Mauritius
Mexico
Singapore
Türkiye
 

In the Privacy Terms above we provide all data subjects with a comprehensive overview regarding the processing of personal data at Hapag-Lloyd Group. Nonetheless, we know and appreciate that many customers are also concerned about the information that does not qualify as personal data, in particular as such information may be important to the operations of our customers.

Digitization initiatives

Logistics is currently undergoing several waves of digitization, and this process is about to further accelerate over the months and years to come. Insofar, the operations processes and the exchange of information are changing rapidly with a clear tendency towards the expansion of data exchange between all stakeholders in the logistics supply chain.

Within the boundaries set by law, such as customs regulations or competition law, just to name a few examples, we also exchange substantially more transport service related information with third parties than we did before. Partially, this increase is even triggered by changes in the operations of public authorities, such as customs authorities.

As a guiding principle we exchange information with third parties involved in the logistics supply chain on a need-to-know basis, that means we share operational and production data to the extent this is necessary to provide the service. Examples are trucking companies, authorities, port terminals, feeder operators or other service related external partners.

To the same extent we also receive such operational or production data from stakeholders, primarily to synchronize such data with our internal data sets, to update the transport plan or for other general purposes of providing our service to you.

Most of the data provided and obtained relates to the physical move of the box, but such data sets may, depending on the stakeholders involved, also contain cargo related information such as cargo descriptions or the HS-Code.

We trust that our customers appreciate that Hapag-Lloyd, with new services like Quick Quotes or LIVE, is at the forefront of the digitization in the shipping industry, and that customers appreciate the value of new, disruptive digital platforms, which aim to increase the real-time data exchange of operations data in the entire ecosystem.

We are committed to remain one of the leaders in this field, and to increase transparency for all players in the ecosystem that are contributing to an individual shipment without compromising the security of information and operations.

Logistic chain platforms

Substantive parts of our customers are using existing platforms, such as INTTRA, and we expect that even more customers will try to harvest the advantages of emerging platforms such as GSBN.

Participating in such platforms comes at a “cost”, and that is the need for further standardization of data types, including operational and customer-related data. Partly triggered through new standards proposed by the Digital Container Shipping Association, as well as platform services, this standardization limits the capability of all stakeholders in the ecosystem to provide customer-specific services, or to contribute to customer run stand-alone systems.

Some of the new data-driven platforms and services imply the processing of vast amounts of operational data and trade documents, incl. the aggregated or de-identified use for secondary purposes, e.g. for the improvement of the quality of service providers or the promotion of ancillary services, to name just a few examples.

As a member to such platforms, Hapag-Lloyd is following the relevant data provisioning and data sharing requirements of the platform operators, and integrates the technology of such platforms into the Hapag-Lloyd services.
As such, terms and conditions of a platform may imply that we share data related to a shipment with that platform beyond the need-to-know principle, even if you are not a customer to that platform.

Regardless of the platform or service we collaborate with, we will not compromise our IT security standards, and whenever mixed data sets contain personal data, e.g. in trade documents, we will continue to adhere to the EU GDPR and/or other applicable data protection laws.