Data Protection Policy
HOCHTIEF PPP Solutions GmbH takes the protection of your personal data seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this Data Protection Information. This Data Protection Information provides you with information about the processing of your personal data in connection with your visit to the www.hochtief-pppsolutions.de website, as well as a summary of your rights under the European General Data Protection Regulation (hereinafter "GDPR"). Personal data is all data that can be used to personally identify you.
1. Name and address of the controller
This website is operated by HOCHTIEF PPP Solutions GmbH, Alfredstr. 236, 45133 Essen, info-ppp@hochtief.de (hereinafter "PPP Solutions" or "we"). This company is also the data controller for all data processing in connection with visits to the website within the meaning of Art. 4 No. 7 GDPR.
2. Contact details
For all questions regarding data protection, please contact the address of the controller at any time with the subject "Data Protection" or e-mail to info-ppp@hochtief.de.
3. Data processing when visiting the website
a) Personal data processed
When you visit our website, we collect so-called log data (hereinafter "log data"). This log data is automatically recorded by our IT systems when you visit the website. This is a data set (also called server log files) that is only temporarily stored by us.
If you consent to the use of analytics and performance cookies when visiting our website, additional data from your website usage will be processed (hereinafter "visit data"):
When you use the contact form, we collect the data you provide in the contact form (hereinafter "contact form data").
b) Purpose and legal basis of processing
Log data
Log data is processed for statistical purposes and to provide our services, in particular to ensure the stability and security of the connection and the error-free provision of the website, and thus serves compelling legitimate grounds in the form of our legitimate interest in the reliable and secure operation of the website (Art. 6 (1) (f) GDPR).
Visit data
Visitation data is processed to improve the quality of our services, in particular to analyze your user behavior based on your consent (Art. 6 (1) (a) GDPR).
Contact form data
The contact form data is processed and stored exclusively for the purpose of answering your inquiry or establishing contact. The legal basis for processing this data is your consent in accordance with Art. 6 (1) (a) GDPR.
c) Retention period
Unless a more specific retention period is specified in this privacy policy, all personal data will be deleted as soon as their processing is no longer necessary for the purpose for which they were collected. Where statutory retention periods apply, the data will be deleted after the respective retention period has expired.
d) Recipients of the data
Data will only be shared if necessary and in the cases listed below.
The services for hosting and displaying the website, as well as for contact and communication, are partly provided by service providers under a data processing agreement in accordance with Art. 28 GDPR.
Your data will be shared with authorities (e.g., the relevant data protection supervisory authority, public prosecutor's office, etc.) if we are subject to a legal obligation to do so. Otherwise, data will only be shared with other recipients if you have given us your prior express consent or if we have a legitimate interest in the transfer.
e) Newsletters and other promotional e-mails, downloading documents
We send newsletters and other promotional e-mails if you have given your consent in accordance with Art. 6 (1) (a) GDPR. Consent to receive our promotional e-mails includes the evaluation of usage and interaction behavior with the promotional e-mails (e.g., open and click rates) in order to provide you with personalized content tailored to your needs. If you subscribe to promotional emails or download documents provided on the website, we can link website visits to the personal data provided in order to provide individually relevant content.
For existing customers, we may send promotional e-mails by email in accordance with Section 7 (3) of the German Unfair Competition Act (UWG). You can opt out of receiving these e-mails at any time using the unsubscribe link in the promotional e-mail or by sending us a message.
Your name and e-mail address are required to subscribe to the newsletter and other promotional e-mails. Registration is done via a double opt-in process. Consent can be revoked at any time via the unsubscribe link or by sending us a message.
For traceability purposes, we store registrations for promotional e-mails in accordance with Art. 6 (1) (f) GDPR.
4. Transfer to third countries
We use tools from companies based in so-called third countries outside the EU or EEA, among others. If these tools are active, your personal data may be transferred to these third countries and processed there. We would like to point out that a level of data protection comparable to that in the EU may not be guaranteed in these countries. When selecting tools, we ensure that an adequacy decision by the Commission pursuant to Art. 45 GDPR or other guarantees pursuant to Art. 46 GDPR exist. We will be happy to provide a copy of the guarantees pursuant to Art. 45 and 46 GDPR upon request.
5. Your Rights
Under the GDPR, you have the following rights with regard to our processing of your personal data, provided the legal requirements are met:
Right to information
Right to rectification
Right to erasure (right to be forgotten)
Right to restriction of processing
Right to data portability
Right to object to processing
Right to withdraw your consent at any time with future effect
To exercise your aforementioned rights, you can contact us using the contact details above. You can also lodge a complaint with a supervisory authority regarding our processing of your personal data.
6. Consent Management Tool
For the purpose of consent management for cookies and similar technologies, we use a consent management tool (hereinafter "CMT"). When you visit our website, a CMT cookie is set, which stores the consent granted for the individual services and can be used to control the corresponding activation or deactivation of the respective functionalities.
Cookies and similar technologies are used to analyze usage data (so that the user remains logged in), to store settings, to provide services, to track website users, to monitor and analyze performance, functions, and effectiveness, to track marketing campaigns, for security reasons and to protect against fraud, as well as to detect and prevent cyberattacks.
The use of these cookies and similar technologies is in our legitimate interest (Art. 6 (1) (f) GDPR), provided they are necessary to operate our website and enable secure use.
Non-essential cookies and similar technologies (such as analytics and performance cookies) will only be used on the website if you have given your consent in the CMT (Art. 6 (1) (a) GDPR). Further information on the specific cookies used can be found in the CMT.
The CMT is used to obtain the necessary consents and to document them in accordance with our obligation to provide evidence under the GDPR and the Act on Data Protection and the Protection of Privacy in Telecommunications and Digital Services (hereinafter "TDDDG"). The legal basis for this is Art. 6 (1) (c) GDPR. Details on data processing by the CMT can be found in the tool's user interface.