Privacy and Data protection Policy


 

Data Protection is of high concern to the management of MACS Maritime Carrier Shipping GmbH & Co. (“MACS”). Please read this Privacy and Data Protection Policy carefully to get a clear under-standing of how MACS collects, processes, stores, protects and deletes personal data in compliance with applicable data protection laws (in particular the EU General Data Protection Regulation (“GDPR”)).

 

Contact details of MACS
MACS Maritime Carrier Shipping GmbH & Co.
Grosse Elbstr. 138
22767 Hamburg
Germany
Phone: +49403767301
E-mail: hamburg@macship.com
Website: www.macship.com

Name and address of Data Protection Officer
Ms Katherina Düver (DPO)
MACS Maritime Carrier Shipping GmbH & Co.
Grosse Elbstr. 138
22767 Hamburg
Germany
Phone: +49403767301
E-mail: data-protection@macship.com
Website: www.macship.com

1. When, why and what personal data does MACS collect from the people that visit the web-site and on which legal basis?

a) Cookies

Like many other websites, the MACS website uses so-called "cookies". Cookies are small text files that are transferred from a website server to your computer when visiting the MACS web-site. The MACS website can also be visited without cookies by adjusting the settings of your browser. We distinguish between functional cookies and optional cookies.

aa) Functional cookies

Functional cookies are technically necessary cookies that are absolutely necessary to enable the basic functions of the website. The website will not run as intended without these cookies. You can block or delete such functional cookies by changing your browser settings. The placement of technically necessary cookies cannot be blocked via the cookie banner because in this case the proper use of the website could no longer be guaranteed.

The legal basis for the use of necessary cookies is Sec. 25 para. 2 sentence 2 Telecommunications-Telemedia Data Protection Act ("TTDSG"). The legal basis for subsequent processing of your personal data is our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR. We have an overriding interest in being able to offer a technically functioning service. We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. The storage period is indicated in the cookie banner. Functional cookies that are only stored for the respective session are deleted when you leave our website and close your browser. Most web browsers automatically accept cookies, but you can disable this function so that your browser will not accept cookies. Please be aware that disabling the automatic acceptance of cookies may impact your use and enjoyment of this website.

MACS’ website uses the following functional cookies:

Cookie Name Purpose Maximum retention Period
RequestVerificationToken Anti-forgery cookie designed to stop Cross-Site Request Forgery. It holds no information about the user. Session
Language Used to store the current language - the browser default language. Session
.ASPXANONYMOUS Configures anonymous identification for application authorization. This is required to identify entities that are not authenticated when authorization is required. 69 days, 10 hours and 40 minutes
Dnn_IsMobile A cookie used to determine if the Visitor is browsing from a Mobile Device. Session
cookieconsent Used to save the cookie decision. 1 year

ab) Optional cookies

MACS’ website also uses optional cookies. These are cookies that are not technically necessary. We use them to understand your behaviour on our website, to improve our website and to measure and track our reach.

Optional cookies are used only after you have given your consent via our cookie banner. When accessing the website, you as the user are informed about the use of cookies for these purposes and you consent to the processing of personal data used in this context is obtained via the cookie banner. In this context, a reference to this privacy policy is also made. The legal basis for the use of optional cookies is Sec. 25 para. 1 sentence 1 TTDSG. You can change your privacy settings or withdraw your consent at any time by clicking on Cookie Settings on our website. The legal basis for subsequent processing of your personal data depends on the providers used and the respective purpose. We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. The storage period of personal data depends on the providers used. The legal basis for subsequent processing and the storage period is indicated in the cookie banner. Session cookies will be deleted right after you close your browser window. For more information about the cookies set on this website and how to revoke or give your consent, please visit our “Cookie Settings” webpage.

You may refuse the use of all cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of the MACS website.

b) Server log-files

For technical reasons MACS collects information data from you when you access the website or enter information on the site. This data, transmitted by your browser, is stored in so-called server log-files. In detail this includes the name of your provider, your IP address, your browser type and version, browser language, your operating system, the page where the request comes from and the time of the server enquiry, time zone difference to Greenwich Mean Time (GMT), access status/http status, amount of data transmitted in each case, name of requested files and session cookies.

The server log files are stored for a limited period of time (maximum 1 week). Thereafter, the log files are deleted or anonymized. The legal basis for the processing (in particular: collection and use) of the server log-files is Art. 6 para. 1 sentence 1 lit. f) GDPR, since it is necessary in order to enable the use of the website and for data security purposes.
MACS uses no tools and generally has no means to attribute the aforementioned data to specific individuals, insofar ruling out the possibility of personal identification.

c) Contact Form, Rate Request Form, Tools
In case you contact MACS to send certain requests, MACS collects the following details as far as provided by you:

  • rate request: contact data such as company, name, phone and e-mail; requested shipping details such as precarriage, port of loading, port of discharge, oncarriage; cargo details such as commodity, weight, number of packages, container type, hazardous goods (yes/no), remarks on harbor and direction of travel
  • VGM submission: booking reference ,TAN, IP-Address, verified gross mass, name of the shipper and the person signing the VGM submission as well as any further information voluntarily provided by you if you so choose
  • tracking & tracing request: B/L number and container number
  • request on services and terminals: starting harbor, destination and line
  • quick contacts: your name, your e-mail and you message, selected office

If your request takes place in the context of an agreement to which you are a party or in order to take steps at your request prior to entering into a contract, the legal basis of the collection of the aforementioned data is Art. 6 para. 1 sentence 1 lit. b) GDPR. In other cases, namely requests in the context of a service provided for free, the legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR. If you contact us via the MACS website contact form, the legal basis for the use of your name, e-mail address and the selected office as well as the content of your message including voluntarily given information such as address and telephone is Art. 6 para. 1 sentence 1 lit. f) GDPR.

Storage of the IP-Address alongside the VGM data is based on your consent, Art. 6 para. 1 sentence 1 lit. a) GDPR.

All data mentioned above will be processed only for the purpose of fulfilling your request. Thus, MACS temporarily stores such data for the required duration necessary to achieve the purpose of your request (e.g. order processing). VGM data will be stored for 6 months after the relevant container has been delivered. Data will be stored longer if legally required (e.g. tax purposes in which case the storage period will usually be 10 years) and/or if we enter into a business relationship for which the data is relevant.

d) Schedules Subscription

On the MACS website, we offer you the opportunity to subscribe to receive regular updates on timetables via e-mail ("Schedules Subscription"). This service is offered free of charge. When you register for the Schedules Subscription, you enter the e-mail address to which you want the timetable information to be sent. You will then receive an e-mail asking you to confirm your subscription ("Double-Opt-In-Mail"). In addition, the following data is collected during the subscription process: IP address of the accessing computer, date and time the "Subscribe now" button is clicked, date and time of sending the Double-Opt-In-Mail to you and date and time the subscriber's confirmation email is received by us.

The data will be deleted as soon as it is no longer necessary for the purposes for which it was collected. Accordingly, your e-mail address will be kept for as long as the Schedules Subscription is active. You can terminate the Schedules Subscription at any time. For this purpose, a corresponding unsubscribe link can be found in every e-mail sent in connection with the Schedules Subscription.

For the processing of the data, your consent is obtained during the subscription process and reference is made to this Privacy and Data protection Policy. The legal basis for the processing of the data collected in connection with the Schedules Subscription is Art. 6 para. 1 sentence 1 lit. a) GDPR.

All data mentioned in this section will only be processed for the purpose of providing the requested Schedules Subscription. Your data will not be transferred to third parties except to our service provider Microsoft as further described in the next paragraph.

Your e-mail address will be stored in an Azure storage account in Germany provided by [Microsoft] . We use this service provider to process personal data on our behalf as a processor (Art. 28 GDPR). The service provider will only process data according to our instructions and under our control and exclusively for the purposes stated in this section of the data protection information. Further information on data protection in connection with Azure storage account can be found under the following link: https://azure.microsoft.com/en-gb/explore/global-infrastructure/data-residency

2. Third Party Disclosure

a) Google Analytics

The MACS website uses Google Analytics, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), to collect information about your use of the website. This includes your browser type/version, operating system used, referrer URL (the previously visited page), host name of the accessing computer (IP address) and time of the server request. The data used for this purpose will be deleted after 26 months. The legal basis for processing of your personal data is your consent according to Art. 6 para. 1 sentence 1 lit a) GDPR.

You can withdraw your consent on our website at any time according to no. 4. Please note that the withdrawal does not affect the lawfulness of processing based on consent before the withdrawal.

On behalf of the operator of this website, Google will process this information as a processor to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and Internet use. MACS has activated IP anonymization on its website so that Google will reduce your IP address within Member States of the European Union or in another state that is party to the Agreement on the European Economic Area. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

MACS uses Google Analytics including the functions of Universal Analytics. Universal Analytics allows MACS to analyze the activities on the pages across devices (e.g. for access via laptop and later via a tablet). This is made possible by the pseudonymous assignment of a user ID to a user. Even if Universal Analytics adds additional features to Google Analytics, this does not mean that it restricts privacy measures such as IP masking or the browser add-on.

b) YouTube

MACS uses the video sharing platform YouTube, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. YouTube is a platform that enables the playback of audio and video files.

When you access a page of the MACS website on which a YouTube-Plugin is embedded, YouTube's affiliate player will connect to YouTube to ensure a technical transmission of the vid-eo or audio file. We have embedded the videos hosted by YouTube in a way that ensures data is only transferred to YouTube when you click on the video to view it. When you connect to YouTube, data is transferred to YouTube. This includes information about the individual webpages you have visited on our website.

If you are logged in in to Google, this information will be assigned to your personal account. You can prevent this assignment to your personal account by logging out of your personal Google-account and other personal accounts of the companies of Google. For embedded videos, MACS uses YouTube‘s extended data protection mode, which prevents YouTube from analyzing the user behavior for the purpose of personalization.

If you choose to view the video on the YouTube-website by clicking the "View on YouTube"-link, then YouTube-cookies are stored in your browser according to the data protection policy of YouTube. YouTube will display respective data protection information and ask for your consent when you click the "View on YouTube"-link unless you have been informed and have given your consent in a different context. We have no influence on the storage period of the data by Google.

The purpose and scope of the data collection, the processing and use of the data by YouTube as well as the related rights and setting options to protect the privacy of the customer, can be found in the privacy policy of Google which also covers YouTube: https://policies.google.com/privacy

c) Other recipients of personal data

MACS will not sell or otherwise market your personal data to third parties. MACS does however use other companies to process personal data on our behalf. For example, MACS transfers data to website hosting partners and other parties who assist MACS in operating the website, conducting our business, or servicing you. Such service providers only process the data on our behalf as so-called processors (Art. 28 GDPR).

In case you make a request and it emerges that this request relates to an associated company (namely MACS Cross Trading GmbH & Co. KG, MACS Linienagentur GmbH, MACS Benelux B.V., MCPAS – Agência de Navegação, S.A.), MACS may forward your request to this company on the basis of Art. 6 para. 1 sentence 1 lit. f) GDPR in order to respond to your request. MACS may also release your information when believed release is appropriate to comply with the law, to enforce MACS’ site policies, or protect MACS’ or others' rights, property, or safety. MACS does not allow any other third party to conduct behavioral tracking.

d) Hyperlinks

The MACS website may contain hyperlinks, e.g. electronic cross-references giving access to the web pages of other companies. This Privacy and Data Protection Policy does not apply to these pages.

3. Transfers to third countries

In some cases, we use service providers that are based in a third country, i.e., outside the European Union. We only transfer data to a third country with an adequate level of data protection or where appropriate safeguards pursuant to Art. 44-49 GDPR have been established. You have the right to request a copy of the appropriate safeguards we have put in place. For this purpose, please send an email to our Data Protection Officer (to the email address mentioned in this privacy policy).

4. Your rights as a data subject within the meaning of Art. 4 No. 1 GDPR

As a data subject within the meaning of Art. 4 No. 1 GDPR, you have numerous rights towards MACS, about which MACS would like to inform you below:

 

  • Right to information: You have the right to obtain information from MACS as to whether and which data MACS processes about you. In addition, MACS can provide you with a copy of this data.
  • Right to rectification: You have the right that MACS immediately rectifies information about you that is incorrect or no longer applicable. You may also request that your incomplete personal data be completed. If this is required by law, MACS will also inform third parties about this correction if your data was passed on to them.
  • Right of deletion: You have the right to request MACS to delete your personal data immediately if one of the following reasons apply:
    • your data is no longer necessary for the purposes for which it was collected or otherwise processed, or the purpose has been achieved;
    • you revoke your consent and there is no other legal basis for the processing;
    • you object to the processing and there are no overriding legitimate grounds for processing;
    • your personal data has been processed unlawfully;
    • the deletion of your personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which MACS is subject.

     

    Please note that your right to cancellation may be restricted by law. These include in particular the restrictions listed in Art. 17 GDPR and § 35 Bundesdatenschutzgesetz (in the version applicable from 25 May 2018).

  • Right to restrict processing (blocking): You have the right to request MACS to restrict the processing of your personal data if one of the following conditions is met:
    • You deny the accuracy of your personal data for a period of time that enables MACS to verify the accuracy of the personal data;
    • the processing is unlawful and you refuse to delete the personal data and instead request to restrict the use of your personal data;
    • MACS no longer needs your personal data for the purposes of processing, but you do need it to assert, exercise or defend legal claims, or
    • you have filed an objection against the processing as long as it is not yet clear whether MACS’ justified reasons outweigh yours.

     

    If you have obtained a restriction on processing as set out above, MACS will notify you before the restriction is lifted.

  • Right of objection: If MACS processes your data on the basis of legitimate interests, legitimate interests of third parties or in the public interest, you have the right to object to the processing of your data. Furthermore you have the right to object to processing of your personal data by MACS at any time on grounds relating to your particular situation.
  • Right to revoke consents: You can revoke your consent given to MACS at any time with effect for the future. This revocation can take place in the form of an informal notification to the above contact addresses. This also applies to consents that you have given MACS before the validity of the GDPR (before 25 May 2018). You can revoke your consent to optional cookies in the Cookie Settings. If you revoke your consent, the legality of the data processing carried out up to then will not be affected. As a rule, the consequence of a revocation is that you can no longer or not use in full the services covered by consent.
  • Right to data transferability: You have the right to receive personal data concerning you that you have provided to MACS in a structured, common and machine-readable format and to transmit this data to others. Details and restrictions can be found in Art. 20 GDPR. Exercising this right does not affect your right to erasure ("right to be forgotten").
  • Right of complain to the supervisory authority: If you believe that the processing of your data by MACS violates applicable data protection law, you have the right of appeal to one of the competent supervisory authorities, e.g. the State Office for Data Protection Supervision (Hamburg) or the respective supervisory authority in the member state of your place of residence, your workplace or the place of presumed data protection violation.

Reference to your right of objection under Art. 21 GDPR

As mentioned in this privacy and data protection policy, we in some cases base the processing of your data on the fact that it is necessary to protect our legitimate interests or those of a third party without your interests or fundamental rights and freedoms prevailing (Article 6(1)(1)(f) GDPR). In these cases, you have the right to object to the processing of your data at any time for reasons arising from your particular situation.

You also have the right to object to the processing of your data at any time, if we process your personal data for direct advertising (e.g. in the context of our newsletter).

 

Details of your rights can also be found in Articles 15 to 21 of the GDPR and Sections 32 to 37 BDSG (in the version applicable from 25 May 2018).

To assert your rights, please contact MACS (by e-mail, postal mail or even informally) under above contact details.

5. Data security

MACS takes technical and organizational actions to protect your stored and processed data against manipulation, loss of confidentiality, destruction and against access by unauthorized persons. MACS’ security measures are continuously improved in accordance with technological developments.

6. Changes to this Privacy Policy

Given the fast pace of development on the web and the continuing development of case law, MACS reserves the right to adapt this privacy policy at any time to meet both technical and legal requirements.


Last Edited on 2023-06-02