Privacy Policy

  1. General information and contact persons

Welcome to our Internet pages! Data protection is not only a legal necessity for us, but a matter of course. With the following information we would like to inform you and also in accordance with the legal regulations about what happens with your personal data on the occasion of your visit to our website. Personal data are all data that can be assigned to you as an identified or identifiable person. Responsible for the processing of personal data in connection with your visit to these web pages is:

Yachtwerft Hamburg GmbH

Osterbrooksweg 29

22869 Schenefeld

Phone: +49 (0)40 51 90 15 58


This data protection declaration applies to those Internet pages via which it is made available for retrieval. Please note that different information may apply to our other websites, which you can access there.

  1. processing of your data

When you use our website, various personal data are processed:

  1. provision of the website and creation of log files Each time our
    website is called up, our system automatically collects data and information from the calling computer:
  • Information about the browser type and version used
  • The operating system of the user
  • The HTTP response code
  • The number of bytes transferred
  • The IP address of the user
  • Date and time of access
  • Websites from which the user’s system accesses our website
  • Websites that are called up by the user’s system via our website

The temporary storage of the IP address is necessary to enable delivery of the website to the user’s computer. For this purpose, the IP address of the user must remain stored for the duration of the session.

The storage in log files serves the functionality of the website. In addition, the data serves us to optimize these Internet offers and to ensure the security of our information technology. An evaluation of the data for marketing purposes does not take place in this context.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case at the end of the usage process. In the case of storage of data in log files, this is the case after fourteen days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f GDPR, whereby our legitimate interest is the proper provision of the functions of this website, the evaluation of access information with the aim of eliminating and preventing technical faults and the prevention and tracking of security incidents.

In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored. If our service providers or partners are located in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.

This website uses cookies and similar technologies. Cookies are small text files that are stored by the Internet browser on the user’s terminal device. A cookie usually contains a characteristic string of characters that allows the browser to be uniquely identified when the website is accessed again. Cookies are used to make the website more user-friendly, to optimize the functions and services of the website and to provide you with content tailored to your needs.

The purpose of using technically necessary cookies is to enable the use of the website, to ensure the security of the website and to simplify its use. Some functions of this website cannot be offered without the use of cookies.

The user data collected through technically necessary cookies are not used to create user profiles. In addition, with your separate consent, cookies may be used for the provision of external media such as films and maps, as well as for the analysis of the use of the website.

The user data collected in this way is pseudonymized by technical precautions. Therefore, an assignment of the data to the calling user is no longer possible. The data is not merged with other personal data of the users.

By changing the settings in your Internet browser, you can disable or restrict the use of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for the website, it may no longer be possible to use all functions of the website in full.

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) lit. f GDPR, whereby the legitimate interest of the controller is the secure, stable, efficient provision of the functions of the website and the information that can be accessed via it. If the controller fulfills a contractual obligation to you with the respective function, for example participation in a digital event booked by you, the legal basis is Art. 6 (1) lit. b GDPR. If we use cookies for the provision of functions or for other purposes that are not technically necessary, the legal basis of the processing of personal data in connection with these cookies is Art. 6 (1) lit. a GDPR in conjunction with your consent. If we use cookies to fulfill our legal obligations, for example to manage your consents, the legal basis of the management of personal data in this respect is Art. 6 (1) lit. c GDPR in conjunction with Section 25 TTDSG.

  1. plugins and tools


Our website contains links to third-party websites. The respective data protection declarations and data protection notices of the respective operators of the linked websites apply. We point out that we are not responsible for the data processing practices on third-party platforms outside our own sphere of influence.

  1. orders / other functions


In addition to the purely informative use of our offers, you can send or provide us with questions, messages and orders. For this purpose, you will usually have to provide further personal data, which we process to process your request, to answer your inquiries, to fulfill contracts concluded with you as well as to process any further tasks arising from this, such as the handling of warranty cases, to assert and realize our claims and, if applicable, to respond to your evaluation, and to which the aforementioned data processing principles apply. In addition, we use personal data insofar as we have to in order to fulfill our legal obligations, for example to comply with our documentation and retention obligations under tax or commercial law.

A transfer of data to third parties takes place only if and to the extent that this is necessary for the fulfillment of our contractual obligations to you (Art. 6 para. 1 p. 1 lit. b GDPR), for example, the transmission of your address as a delivery address to a logistics partner or a shipping company, so that they can send or deliver the goods ordered by you. In addition, we pass on personal data if this is necessary for the processing of payments. 

If consent has been given, the legal basis for processing your data is Art. 6 (1) lit. a GDPR. If the processing serves the fulfillment of a contract to which the data subject is a party or the implementation of pre-contractual measures, the legal basis for the processing of the data is Art. 6 (1) lit. b GDPR. If we process personal data in order to handle non-contract-related requests or inquiries or to respond appropriately to evaluations, we do so for the purpose of optimal and efficient communication with you as well as for the appropriate evaluation and commenting on evaluations and for the improvement of our customer service, for the optimization and needs-based design of our offers, for the maintenance of the customer relationship and furthermore for the clarification and elimination of technical problems. In the aforementioned purposes, there are our legitimate interests within the meaning of the legal basis of Art. 6 para. 1 lit. f GDPR. If we fulfill a legal obligation incumbent upon us by processing your personal data, the legal basis is Art. 6 para. 1 lit. c GDPR.

In addition, we reserve the right in individual cases to process personal data if this is necessary, for example, for the purpose of prosecuting abusive or fraudulent acts, for tracking and remedying functional or security problems. The above purposes then represent our legitimate interest within the meaning of the legal basis of Art. 6 (1) lit. f GDPR.

  1. storage period
    Unless otherwise stated in the respective individual information, we process personal data in accordance with the statutory provisions only for the purposes presented here in each case and only for as long as personal identification of the data subject is required for the respective purpose. Subsequently, the data is deleted or neutralized/anonymized in accordance with data protection.
  1. SSL or TLS encryption
    In the case of unencrypted data transmissions on the Internet (e.g. unencrypted communication by e-mail), the confidentiality of the transmitted data cannot be fully guaranteed. For security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator, this site uses SSL or TLS encryption.

You can recognize an encrypted connection by the fact that the browser address bar changes from “http://” to “https://” and by the lock symbol in your browser bar.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

  1. newsletter and email messages

With your consent, you can subscribe to our newsletter (if offered), with which we inform you about our current interesting offers. The advertised services and benefits are named in the declaration of consent.

For the registration to our newsletter we use the so-called double-opt-in procedure. This means that after your registration, we will send you an email to the email address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your respective IP addresses used and times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.

The only mandatory data for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and will be used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending the newsletter. The legal basis is Art. 6 para. 1 p. 1 lit. a GDPR.

Our newsletters contain so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in such emails that are sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of newsletter campaigns. Based on the embedded tracking pixel, we can see if and when an e-mail was opened by a data subject, and which links in the e-mail were called up by the data subject.

Such personal data collected via the tracking pixels contained in the newsletters are stored and analyzed by the controller in order to optimize the newsletter dispatch and to better adapt the content of future newsletters to the interests of the data subject. We automatically interpret a withdrawal from the receipt of the newsletter as a revocation. After a revocation, this personal data will be deleted by the controller.

You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter e-mail or by sending a message to the contact details provided in the imprint.

Use of the e-mail address for sending direct advertising

We use your e-mail address, which we have received in the context of the sale of a good or service, for the electronic sending of advertising for our own goods or services that are similar to those that you have already purchased from us, unless you have objected to this use. The provision of the e-mail address is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded. The processing is based on Art. 6 (1) lit. f GDPR from the legitimate interest in direct advertising.

The legal basis for the use of your e-mail address for advertising our own similar products is Section 7 (3) UWG. You can object to the use of your e-mail address at any time by notifying our contact details above or by using the unsubscribe function provided in every advertising e-mail from us.

This will not incur any costs other than the transmission costs according to the prime rates of the respective means of communication used by you.

III. social networks


This section applies to our processing of personal data via our Facebook presence: Meta Platforms Ireland Limited Facebook Ireland Limited (“Facebook”) is generally responsible for the collection and further processing of personal user data on Facebook websites. Please note that Facebook collects and processes certain information about your visit to our Facebook page even if you do not have a Facebook user account or are not logged in to Facebook. For information on the processing of personal data by Facebook, please refer to Facebook’s data policy (Privacy Policy): 

For us as the operator of this Facebook page, only your public profile on Facebook is visible. Which information is visible here depends on your settings in your profile. In addition, we process your personal data (such as your name and the content of your messages, inquiries or other contributions to us) when you contact us via our Facebook page or when you publish content via our Facebook presence, e.g. in the form of a comment. We then process this data for the purpose of processing your contributions accordingly and, if necessary, responding to them. These purposes also include our legitimate interests within the meaning of the legal basis of Art. 6 (1) f) of the European Data Protection Regulation (GDPR).

We store your personal data on our systems, i.e. outside of Facebook, if and as long as it is required for the purposes of collection or if there are legal retention obligations.

In the Facebook Data Policy you will also find information on how to exercise your rights of access, rectification, portability and erasure against Facebook. Under this point you will also find information about your right to object to certain processing of personal data. You can find more information about your control options here: In the Data Policy, you will also find information about the duration for which personal data is stored and information about the criteria regarding the determination of this duration and the possibility of blocking or deleting Instagram accounts. The Data Policy refers to Facebook/Instagram’s intention to transfer data to third countries, if applicable. Please note that if personal data is processed in the United States of America, the level of protection for your data may be lower than if it is processed within the EU.

  1. Your rights

You have the right at any time

  • to revoke your consent given to us for the processing of your personal data at any time or to object to the processing of your data.
  • to receive information about your data stored by us.
  • that incorrect data about you is corrected with us.
  • that data about you that is no longer required will be deleted from us.
  • that under certain conditions the processing of your data is restricted; this may be the case, for example, if deletion is not possible but the data may not be further processed.
  • that your data is transferable; this right applies in particular if you have given your consent to the processing of your data or if the processing of the data is necessary to fulfill a contract. The right to data portability does not exist insofar as your data is not processed automatically.

To exercise your rights, please contact us using the contact details provided in the introduction to this Privacy Policy.

If you believe that the processing of your data violates the legal requirements, you can also complain to the supervisory authority responsible for us.

We would like to point out that in certain cases we may request additional information from you in order to establish your identity. This is the only way we can ensure, for example, when providing information, that information is not released to unauthorized persons.

  1. Data protection during applications and the application process

We process the personal data of applicants for the purpose of handling the application process. The processing may also take place electronically. This is particularly the case if an applicant submits corresponding application documents to us electronically, for example by e-mail or via a web form located on the website. If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If we do not conclude an employment contract with the applicant, the application documents will be automatically deleted four months after notification of the rejection decision, provided that no other legitimate interests of the controller conflict with such deletion. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG). The legal basis for the processing of personal data of applicants is Section 26 of the Federal Data Protection Act (BDSG) in conjunction with Art. 6 para. 1 lit. b, 88 GDPR, furthermore, insofar as the processing is carried out to meet legal requirements, Art. 6. para. 1 lit. c GDPR and, insofar as consent of the data subject is the basis of the processing, Art. 6 para. 1 lit. a GDPR in conjunction with Section 26 BDSG.