Data Protection Statement


Hamburg, May 2018

1. This data protection statement explains the collection and processing of personal data on the company's website.

1.1. Personal data are all data with which you can be personally identified.

1.2. The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Valentinskamp 18
20354 Hamburg
Telepfone: +49 (0) 40 35903 - 0
Fax: +49 (0) 40 35903 - 245

2. Data collection - scope and purpose of the processing of personal data

2.1. When you access our website, if you do not contact us, data is automatically sent to the server of our website by the Internet browser that you use as a visitor, and stored in a log file for a limited period of time. Until automatic deletion, the following data will be stored without further input by the visitor:

■ IP address of the visitor's terminal device,
■ date and time of access by the visitor,
■ name and URL of the page accessed by the visitor,
■ website from which the visitor accesses the company website (so-called reference URL),
■ the browser and operating system of the visitor's terminal device, and the name of the access provider used by the visitor.

The processing is carried out in accordance with Art. 6 para. 1 clause 1 f) of the GDPR on the basis of our legitimate interest in improving the stability and functionality of our website, and in order to be able to guarantee the security and administration of the website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

2.2. Contact form
Visitors can use an online contact form on the website to submit messages to C. ILLIES & Co. Handelsgesellschaft mbH. In order to receive a reply, a valid e-mail address, first and last name are required. All further data may be voluntarily provided by the inquiring person. By sending the message via the contact form, the visitor consents to the processing of the transmitted personal data. The data is used exclusively for the purpose of processing and responding to enquiries via the contact form. This is done on the basis of voluntary consent pursuant to Art. 6 para. 1 clause 1 a) GDPR. The personal data collected for the use of the contact form are automatically deleted as soon as the enquiry is completed and there are no reasons for further storage (e.g. subsequent commissioning of our company).

3. Disclosure, correction, blocking and deletion

Personal data will only be collected, processed, used, and stored where it is inaccessible to third parties for the purpose of responding to inquiries, handling contracts, and technical administration, unless you have explicitly instructed us to do so and you have consented to such use. The data will only be disclosed to third parties for the purpose of contract processing or with your consent. Personal data will not be disclosed or sold. You may withdraw your consent to the use of your data at any time. You may obtain information at any time about the stored data or the following information:

■ purpose of such processing,
■ categories of your personal data that we process,
■ recipients or categories of recipients to whom your personal data is disclosed, in particular recipients in third countries,
■ if possible, the planned duration for the storage of your personal data; if this is not possible, the criteria for determining the duration of storage,
■ the existence of a right to rectification, deletion, or limitation of the processing of your personal data, or the right to object to such processing,
■ the existence of a right of appeal to a data protection supervisory authority,
■ if the personal data have not been collected from you as the data subject, the available information on the origin of the data,
■ the existence of automated decision making, including profiling and significant information on the logic involved, as well as the scope and intended effects of automated decision making,
■ in the case of transfers to recipients in third countries if no decision of the EU Commission on the adequacy of the level of protection pursuant to Art. 45 para. 3 GDPR is available, information on the appropriate guarantees provided for the protection of personal data pursuant to Art. 46 para. 2 GDPR.

All enquiries, requests for information, or objections to data processing should be sent by e-mail to or to the address indicated under "Contact".

4. Cookies

This website uses Google Analytics, a web analysis service of Google Inc. "("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, Google will shorten your IP address within Member States of the European Union or in other states that are party to the Agreement on the European Economic Area. Google Ireland Limited is legally responsible for EEA and Swiss users’ information. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide the website operator with other services relating to website and Internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent Google from collecting data generated by the cookie and relating to your use of the website (including your IP address) as well as the processing of this data by Google by clicking on the following link ( , download and install available browser plugins.
On this website, Google Analytics has been extended by the code "anonymizeIp", which deletes the last 8 digits of your IP addresses and consequently makes them anonymous.
If you do not wish Google Analytics to collect your data, please click on the following link to unsubscribe. This sets an opt-out cookie that prevents future collection of your data when you visit this website: Disable Google Analytics
Information on terms of use and data protection can be found under: and

You can also view the website without cookies. If you do not want your computer to be recognized, you can prevent cookies from being stored on your hard drive by selecting "do not accept cookies" in your browser settings. You will find instructions on the website of the respective browser provider:

Internet Explorer

Please note that the functionality of our website may be limited if cookies are not accepted.

5. Analytics services

On our website we use the Google Analytics website analysis service.
The legal basis for the use of the analysis tools is Art. 6 para. 1 clause 1 f) GDPR. The website analysis is within the legitimate interest of our company, and serves the statistical documentation of the use of the website for the continuous improvement of our company homepage and the offer of our services.

6. Social networking plugins (Social Plugins)

Our company website includes plugins from the following social networks: LinkedIn, YouTube.
The legal basis for the use of social plug-ins is Art. 6 para. 1 clause 1 f) GDPR. A legitimate interest of our company and the purpose of using plugins for social networks is to make our offer known to a wide audience. The social networks are responsible for the data protection-compliant handling of their users' data:

7. Encrypted transmission

All data entered by visitors to our company website are transmitted to us in encrypted form so that they are protected from being accessed by third parties. We use state-of-the-art encryption technologies.

8. Disclosure of data

Personal data will be transmitted to third parties if

■ it has been expressly consented to by the data subject pursuant to Art. 6 para. 1 clause 1 a) GDPR,
■ the disclosure pursuant to Art. 6 para. 1 clause 1 f) GDPR is necessary to assert, exercise, or defend legal claims, and there is no reason to assume that the data subject has an overriding interest that is worthy of protection by not disclosing his or her data,
■ für die Datenübermittlung nach Art. 6 Abs. 1 Satz 1c) a legal obligation exists for data transmission in accordance with Art. 6 para. 1 clause 1c) GDPR, and/or
■ this is necessary according to Art. 6 para. 1 clause 1 b) GDPR for the fulfillment of a contractual relationship with the data subject.

In other cases, personal data will not be passed on to third parties.

9. Rights of the parties concerned

9.1. Right to confirmation: Every individual concerned shall have the right conferred by the European legislator of directives and regulations to require the responsible data processor to confirm whether personal data concerning him or her are being processed. If the data subject wishes to exercise this right of confirmation, he or she may contact an employee of the responsible data processor at any time.

9.2. Right of access: In particular, you have a right of access regarding your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right of correction, deletion, restriction of processing, objection to processing, a complaint to a supervisory authority, the source of your data if these were not collected by us from you, the existence of automated decision-making including profiling and, where applicable, the existence of an automated decision-making process and, if applicable, meaningful information on the logic involved and the scope and intended effects of such processing, as well as your right to be informed of the guarantees provided for in Art. 46 of the GDPR for the transfer of your data to third countries.

9.3. Right to rectification: You have the right to immediately rectify any inaccurate data concerning you and/or to complete your incomplete data stored by us.

9.4. Right of erasure: You have the right to request the erasure of your personal data pursuant to Art. 17 para. 1 GDPR, in particular if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, if you have withdrawn your consent and no other legal basis for processing exists, if you have objected to the processing, if the processing was unlawful, or if the erasure of the personal data is necessary to fulfill a legal obligation. However, this right shall not apply in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise, or defend legal claims.

9.5. Right to restriction of processing: You have the right to request that the processing of your personal data be restricted as long as the accuracy of your data is verified, if you refuse to have your data deleted because of inadmissible data processing and instead request that your data be restricted, if you need your data to assert, exercise, or defend legal claims, after we no longer need this data once the purpose has been achieved or if you have filed an objection for reasons of your particular situation, as long as it is not yet clear whether our legitimate reasons predominate.

9.6. Right of notification: If you have exercised your right to have the processing corrected, deleted, or restricted, the controller must notify all recipients to whom the personal data concerning you have been disclosed of such correction, deletion, or restriction of the processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of these recipients.

9.7. Right to data portability: You have the right to receive the personal data you have provided to us in a structured, conventional, and machine-readable format, or to request its transfer to another responsible party if this is technically feasible.

9.8. Right to withdraw consent (Art. 7 para. 3 GDPR): You have the right to withdraw consent once given for the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the legality of the processing carried out on the basis of the consent until withdrawal.

9.9. Right to lodge a complaint: If you believe that the processing of personal data concerning you infringes on the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State where you are located, at your place of work, or at the place where the suspected infringement is presumed, without prejudice to any other administrative or judicial remedy.

9.10. Right to object: If we process your personal data within the framework of a weighing of interests on the basis of our overriding legitimate interest, you have the right at any time to object to this processing with future effect for reasons arising from your particular situation.
If you exercise your right to object, we will stop processing the data concerned. However, we reserve the right to further processing if we can prove compelling reasons worthy of protection for the processing which outweigh your interests, fundamental rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. You can exercise the objection as described above.

If you exercise your right to object, we will stop processing the data concerned for direct advertising purposes.

10. Duration of storage of personal data

The duration of the storage of personal data is determined by the respective legal retention period. After expiry of this period, the corresponding data will be routinely deleted, provided that they are no longer necessary for the performance or initiation of the contract and/or there is no longer any legitimate interest on our part in the further storage.

11. Status and validity of updates

This data protection statement is valid as of May 25, 2018, and we reserve the right to update this data protection statement, especially if this becomes necessary due to technical developments or changes in legislation or jurisdiction.