Hessische Landgesellschaft mbH ("HLG", "we", "us", "our") takes the protection of your personal data very seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website hlg.it.com and use our services.
1. Data Controller
The data controller responsible for the processing of your personal data is:
Hessische Landgesellschaft mbH
Wilhelmshöher Allee 157-159
34121 Kassel, Deutschland
Email: [email protected]
Phone: +49 561 30850
BaFin-ID: 10108393 | Bak Nr.: 108393
2. Data We Collect
We may collect the following types of personal data:
- Contact Information: Name, email address, phone number, organisation or municipality, postal address
- Project Inquiry Data: Type of service requested (building-land development, land banking and management, agricultural consulting, nature conservation, renewable-energy siting, etc.), location and parcel details, project description, communication preferences
- Technical Data: IP address, browser type and version, time zone setting, operating system, and other technology on the devices you use to access this website
- Usage Data: Information about how you use our website and services
3. How We Use Your Data
We process your personal data for the following purposes:
- Service Provision: To respond to your inquiries, provide consultation, and deliver our land development and related trustee services
- Communication: To send you information about our services, project updates, and newsletters (with your consent)
- Business Operations: To manage client and municipality relationships, process trustee settlements, and maintain accurate records
- Legal Compliance: To comply with applicable laws and regulations, including BaFin regulatory requirements for financial institutions
- Website Improvement: To analyze website usage and improve user experience
4. Legal Basis for Processing
We process your personal data based on:
- Your Consent: When you provide explicit consent (e.g., subscribing to newsletters, submitting contact forms)
- Contract Performance: When processing is necessary to fulfill our contractual obligations or take pre-contractual steps
- Legitimate Interests: When processing is necessary for our legitimate business interests (e.g., improving services, fraud prevention)
- Legal Obligations: When processing is required to comply with legal and regulatory requirements, including BaFin supervision
5. Data Sharing and Disclosure
We may share your personal data with:
- Public Partners & Authorities: Where required to fulfil our public land-management mandate, we may share relevant information with the State of Hesse, municipalities and competent authorities
- Service Providers: Third-party companies that assist us with website hosting, email delivery, and IT services
- Regulatory Authorities: BaFin and other regulatory bodies when required by law
- Legal Compliance: When required to comply with legal obligations, court orders, or to protect our rights and safety
We do not sell your personal data to third parties.
6. Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law. Specifically:
- Inquiry Data: Retained for up to 3 years after the last contact
- Client Relationship Data: Retained for the duration of the business relationship and up to 10 years thereafter for legal and tax compliance
- Newsletter Subscriptions: Retained until you unsubscribe
- Financial Transaction Records: Retained for up to 10 years in compliance with German commercial and tax law (HGB, AO) and BaFin requirements
7. Your Rights
Under the GDPR and German data protection law, you have the following rights:
- Right of Access: Request a copy of your personal data we hold
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your data under certain circumstances
- Right to Restriction: Request limitation of processing in certain situations
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or for direct marketing
- Right to Withdraw Consent: Withdraw your consent at any time (without affecting prior processing)
To exercise these rights, contact us at [email protected].
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. As a BaFin-regulated institution, we maintain strict security standards for client, land-management and financial-settlement data. However, no internet transmission is completely secure, and we cannot guarantee absolute security.
9. Cookies and Tracking
Our website uses essential cookies to ensure proper functionality (language preference storage). We do not use third-party tracking or advertising cookies. You can control cookie settings through your browser preferences.
10. International Data Transfers
Your personal data is primarily processed within Germany and the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place in accordance with GDPR requirements.
11. Children's Privacy
Our services are directed to municipalities, landowners, farmers and businesses. We do not knowingly collect personal data from individuals under 18 years of age.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page with the effective date indicated at the top. We encourage you to review this policy periodically.
13. Contact and Complaints
If you have questions about this Privacy Policy or wish to exercise your data protection rights, contact us:
Hessische Landgesellschaft mbH
Wilhelmshöher Allee 157-159
34121 Kassel, Deutschland
Email: [email protected]
Phone: +49 561 30850
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the competent supervisory authority:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI)
Gustav-Stresemann-Ring 1, 65189 Wiesbaden
Website: datenschutz.hessen.de
