Privacy policy
How we handle personal data when you visit this website or get in touch with us, and which rights you have under the General Data Protection Regulation (GDPR).
Last updated: 5 October 2026
Controller
The controller responsible for processing personal data on this website within the meaning of the GDPR is:
HSO Investment GmbH
Carl-Hopp-Straße 4b
18069 Rostock, Germany
Represented by the managing director Sven-Thorsten Osmers
Email: hsoinvestgmbh@inbox.eu
Phone: +49 163 6887394
We have not appointed a data protection officer, as there is no legal obligation to do so. For all questions about data protection, please contact us using the details above.
Overview
You can use this website without telling us who you are. We do not use analytics tools, advertising networks, social media plugins, embedded maps or videos, or any other tracking technology. Personal data is only processed to the extent described in this policy: when the website is delivered to your browser, and when you contact us.
Hosting and server log files
This website is hosted by an external service provider. When you visit it, the provider’s server automatically records information that your browser transmits, in so-called server log files:
- IP address of the requesting device
- date and time of the request
- the page or file requested and the amount of data transferred
- the website from which you were referred (referrer URL)
- browser type, browser version and operating system
This data is required to deliver the website, to ensure its security and stability, and to detect and defend against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and error-free provision of the website. The log data is not merged with other data sources and is deleted as soon as it is no longer needed for these purposes. Where the hosting provider processes data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.
Contacting us
If you contact us by email or phone, we process the data you provide (for example your name, email address, phone number, company and the content of your message) in order to handle your enquiry and any follow-up questions.
The contact form on this website does not transmit any data to our server. When you choose Prepare email, your own email program opens with a pre-filled message. The data is only sent to us when you send this email yourself.
The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or to pre-contractual measures, and Art. 6(1)(f) GDPR in all other cases; our legitimate interest lies in answering enquiries addressed to us. Where you have given consent, Art. 6(1)(a) GDPR also applies.
We delete your data once your enquiry has been dealt with and no further communication is expected, unless statutory retention obligations apply. Business letters are subject to retention periods of six years and accounting-related documents to periods of up to ten years under German commercial and tax law (§ 257 HGB, § 147 AO).
Fonts and scripts
All fonts and scripts used on this website are hosted on our own web space. When you load a page, no connection is made to servers of Google Fonts, content delivery networks or other third parties.
External links
This website contains links to other websites, for example to OpenStreetMap on our contact page. Data is only transmitted to the operator of the linked website once you click on such a link. We have no influence on how the operators of external websites process personal data; their own privacy policies apply.
Recipients and transfers to third countries
We only pass on personal data where this is necessary for the purposes described above, for example to our hosting provider and to IT service providers who support us as processors under Art. 28 GDPR, or where we are legally obliged to do so. We do not intend to transfer personal data to countries outside the European Union or the European Economic Area.
Your rights
Under the GDPR you have the following rights with regard to your personal data:
- the right of access (Art. 15 GDPR)
- the right to rectification (Art. 16 GDPR)
- the right to erasure (Art. 17 GDPR)
- the right to restriction of processing (Art. 18 GDPR)
- the right to data portability (Art. 20 GDPR)
- the right to withdraw any consent you have given, with effect for the future (Art. 7(3) GDPR)
Right to object (Art. 21 GDPR): where we process your data on the basis of Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
To exercise your rights, a short message to hsoinvestgmbh@inbox.eu is enough.
Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Mecklenburg-Western Pomerania (Der Landesbeauftragte für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern) in Schwerin.
Data security
We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, including encrypted transmission (TLS) of this website. Please note that ordinary email is not end-to-end encrypted. If you want to send us confidential documents, let us know first and we will agree on a secure way of exchanging them.
Automated decision-making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
Changes to this policy
We may update this privacy policy when our website or the legal requirements change. The current version is always available on this page. The date of the last update is shown at the top.