Privacy Policy

1. An Overview of Data Protection

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information on data protection can be found in our privacy policy below.

Data recording on this website

Who is responsible for data collection on this website?
Data processed on this website is processed by the website operator. The operator’s contact details can be found under “Controller” below and in our Imprint.

How do we collect your data?
Some data is collected when you provide it to us — for example, data you enter into our contact form. Other data is collected automatically by our hosting infrastructure when you visit the website, primarily technical data (e.g. internet browser, operating system, or time of page access).

What do we use your data for?
Part of the data is collected to ensure the website is provided without errors. We use contact-form data exclusively to respond to your inquiry.

What rights do you have regarding your data?
You have the right to obtain information about the source, recipients, and purpose of your archived personal data at any time, free of charge. You also have the right to request the correction, blocking, or deletion of this data, to revoke any consent you have given, to request restriction of processing under certain circumstances, and to lodge a complaint with the competent supervisory authority. You can contact us at any time using the address in the Imprint if you have further questions about data protection.

2. Hosting

This website is operated through third-party hosting and infrastructure providers (“hosting provider”). Personal data collected on this website is stored on the servers of our hosting provider, which may include IP addresses, contact requests, metadata and communications, and the data described under “Server log files” below.

The hosting provider is used for the purpose of fulfilling our contract with prospective and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). Where required, we have entered into a data processing agreement with our hosting provider that obliges it to protect the data of our website visitors and to process it only in accordance with our instructions and the GDPR.

3. General Information and Mandatory Information

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

Controller

The controller responsible for data processing on this website is:

I.C.E. Ocean Consulting UG (haftungsbeschränkt)
Fachenfelder Weg 87
21220 Seevetal, Germany
Email: contact@ice-ocean.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses).

Storage duration

Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing it (e.g. statutory retention periods under tax or commercial law), in which case deletion takes place once those reasons cease to apply.

General information on the legal basis for data processing

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR (where special categories of data are processed). In the event that your personal data is necessary for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. If your data is required to fulfil a legal obligation, we process it on the basis of Art. 6(1)(c) GDPR. Processing may further be carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Recipients of personal data

In the course of our business activities, we work with various external parties. In some cases, this requires the transfer of personal data to these parties. We only disclose personal data to external parties where this is necessary for the performance of a contract, where we are legally obliged to do so, on the basis of our legitimate interest under Art. 6(1)(f) GDPR, or where we have another legal basis for the disclosure. Where we use third-party processors (e.g. for hosting), we do so on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You may revoke any consent you have already given at any time. An informal email to us is sufficient. The lawfulness of data processing carried out prior to the revocation remains unaffected.

Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)

If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the processing serves the assertion, exercise, or defence of legal claims.

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work, or the place of the alleged violation. The authority responsible for us is:

Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5, 30159 Hannover, Germany

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you require the direct transfer of data to another controller, this will only be done to the extent technically feasible.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. An encrypted connection can be recognised by the “https://” prefix and the lock symbol in your browser’s address bar.

Information, rectification, and erasure

Within the scope of the applicable statutory provisions, you have the right, at any time, to free information about your stored personal data, its origin and recipients, and the purpose of the data processing, and, where applicable, a right to rectification or erasure of this data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. This right exists, in particular, while we examine a dispute regarding the accuracy of your data, if processing is unlawful and you object to erasure, if we no longer need the data but you need it for the exercise or defence of legal claims, or while an objection pursuant to Art. 21(1) GDPR is pending.

4. Recording of Data on This Website

Cookies

This website uses one strictly necessary cookie required for the site itself to function; no consent is required for this under Art. 6(1)(f) GDPR / § 25(2) TTDSG, as the site cannot operate without it.

We may also use Google Analytics to understand how visitors use the site. This is optional and cookies for this purpose are only set if you actively consent via the cookie banner shown on your first visit (Art. 6(1)(a) GDPR). If enabled, Google Analytics processes data such as your (anonymised) IP address, browser and device information, and pages visited, on behalf of Google Ireland Limited, which may transfer data to the United States. You can withdraw your consent at any time, with effect for the future, via the “Cookie Settings” link in the footer of this website. If you decline or have not yet chosen, no analytics cookies are set and no data is sent to Google.

California residents: we do not sell or share personal data with third parties for cross-context behavioural advertising, and Google Analytics is only activated with your prior opt-in consent as described above (CCPA/CPRA).

Server log files

Our hosting provider automatically collects and stores information in so-called server log files, which your browser transmits to us automatically. These are: browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of the server request, and IP address. This data is not combined with other data sources. The collection of this data is based on Art. 6(1)(f) GDPR, our legitimate interest in the technically error-free presentation and optimisation of our website.

Contact form

If you send us inquiries via the contact form, the information you provide in the form — including your name, company (optional), email address, and message — is stored by us for the purpose of processing your inquiry and in case follow-up questions arise. We do not pass on this data without your consent. Processing of this data is based on Art. 6(1)(b) GDPR, where the inquiry relates to the performance of a contract or is necessary for pre-contractual measures, and otherwise on Art. 6(1)(f) GDPR (our legitimate interest in the effective handling of inquiries addressed to us) and, where applicable, Art. 6(1)(a) GDPR (your consent) if requested. We retain the data you submit through the contact form until you request its deletion, revoke your consent to its storage, or until the purpose for storing the data no longer applies (e.g. after we have concluded handling your inquiry). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

Request by email

If you contact us by email (contact@ice-ocean.com), your inquiry, including all resulting personal data (name, email address), is stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.