Privacy Policy
Data is classified as personal data if it can be assigned to a natural person. Virtually all natural persons will come into contact with administrative services at one point or the other. Their personal data will need to be processed as a result.
When administrative authorities process personal data, this means that they collect, store, use and transmit personal data, make it available for retrieval or delete it, along with other actions. In principle, personal data is solely processed for the purpose for which it was collected. Any processing in pursuit of a different purpose only takes place where permitted by law or where the data subject has consented hereto.
You are currently on the Hamburg service portal website. and can access many online services provided by the City of Hamburg from this site. You can also set up a service account required to use several online services with your own login credentials on this website. The online service provides electronic access to administrative services.
In addition to setting up your own user account on the Hamburg service portal, you can also log in with your BundID to use the online services. BundID is a user account pursuant to the Online Access Act and also enables you to verify your identity (authentication). BundID accounts are set up and activated on a one-time basis. You can also use your BundID to authenticate your identity with other authorities. Once you have signed in with your Bundied on the corresponding external website, you will be redirected back to the service portal. Please read and acknowledge the BundID Privacy Policy, which can be accessed by clicking on the link below: Privacy Policy | BundID
The German Federal Ministry of the Interior, which can be contacted using the contact information below, is responsible for the operation of BundID and for the data saved in your BundID user account in accordance with data protection legislation.
Bundesministerium des Inneren und für Heimat
Alt-Moabit 140, 10557 Berlin
Phone number: 030 18681-0, email address: poststelle@bmi.bund.de
Organisations are able to log onto the Hamburg service portal using a Mein Unternehmenskonto user account. Mein Unternehmenskonto is a digital user account in accordance with the Online Access Act (Onlinezugangsgesetz, OZG). When you sign in using Mein Unternehmenskonto, you can gain access to digital administrative services on the Hamburg service portal. The user account is used to verify your identity and authenticate you. Read the Main Unternehmenskonto Privacy Policy to learn more about the processing of your data when you set up and use your account: Mein Unternehmenskonto Privacy Policy (mein-unternehmenskonto.de)
The Bavarian State Ministry for Digital Affairs is responsible for operating Mein Unternehmenskonto and can be contacted at the address below:
Bayerische Staatsministerium für Digitales
Oskar-von-Miller-Ring 35, 80333 München
Phone number 089/453549-0, email address: Poststelle@stmd.bayern.de or datenschutz-beauftragter@stmd.bayern.de
In accordance with the Online Access Act, you can used online services offered by the Federal Government or other Federal States on the Hamburg service portal. If you use online services provided by authorities outside the Free and Hanseatic City of Hamburg, we will forward your data to these authorities.
hamburg.de GmbH, which can be contacted using the contact details below, is responsible for operating the websites hamburg.de and hamburg.de/service under data protection legislation.
hamburg.de GmbH
Rothenbaumchaussee 80b, 20148 Hamburg
Phone number: +49 40 68 87 57 600, email address: info-office@hamburg.de
In the following, you can find out which personal data we collect, what we do with the data we have collected and who we forward it to. You can also learn about your rights as a data subject pursuant to the GDPR and who you can contact to assert them.
Who are we and what personal data do we process?
We are the Department for IT and Digitalisation of the Free and Hanseatic City of Hamburg and we operate the Hamburg service portal. The service portal gives you access to online services provided by the city. On the portal you can:
- Search for and find online services
- Register and log in to use online services
- Receive and respond to messages from the authorities in your mailbox
We require personal data to provide many of our services. We solely process this data in relation to your case and only use it in line with the following statutory provisions:
- Article 6(1)(e) of the EU General Data Protection Regulation (GDPR)
- Section 8 of the Online Access Act (OZG).
- Section 4 of the Hamburg Data Protection Act (Hamburgisches Datenschutzgesetz, HmbDSG)
- Section 25 of the Telecommunication Telemedia Data Protection Act (Telekommunikation-Telemedien-Datenschutz-Gesetz, TDDDG)
- and pertinent sectoral legislation.
You can enter your data voluntarily on the portal. If you would prefer not to enter your data, you can visit one of the city’s customer service centres in person or write a letter.
Who can you contact with queries?
If you have any questions relating to data, please contact the following authorities:
Data controller:
Senat der Freien und Hansestadt Hamburg
Senatskanzlei/Amt für IT und Digitalisierung
Rathausmarkt 1, 20095 Hamburg
Data protection officer:
Email address: itd-dsb@sk.hamburg.de
If you have any questions related to registration or logging in, or any suggestions or remarks on the service portal, please send an email to meinserviceportal@dataport.de.
If you have any questions related to BundID or your Mein Unternehmenskonto account, please complete and send the correct contact form:
Contact form for queries regarding Mein Unternehmenskonto accounts
Contact form for queries regarding BundID
Which purposes do we process your personal data for?
Online services provide electronic access to administrative tasks. To provide these services, we need to store data under certain circumstances and forward it to other parties (purpose of processing).
Service account:
A service account is required to use many of the available online services. When you create a service account, you will need to enter and save your data.
Mailbox:
Each service account has its own dedicated mailbox. The relevant authorities can use the mailbox to send you messages when necessary.
Online services provided by/in Hamburg:
If you use Hamburg online services on your service account, we will send your personal data to the Hamburg authorities responsible for handling your case.
Online services according to the one for all principle (EfA):
The Online Access Act stipulates that certain online services must be provided by certain Federal States. These online services can be used throughout Germany.
In other words, you can use your Hamburg service account to use an online service provided by another Federal State. Your data will be collected and sent to the relevant authority. This only happens when you have already consented to this transmission by clicking SEND.
Support queries:
If you require assistance or would like to report an issue and your query cannot be immediately solved on the phone, we will instead save your query, your contact information and all other documents you have sent, and then forward them when necessary.
What data do we process?
We process the server IP address used to access the service portal in technical logfiles.
We also process the following personal data:
Service account for natural persons (Service Account)
- First name
- Surname
- Email address
- Address (optional)
Service account for natural persons with verified ID (Service Account Plus)
- First name
- Surname
- Address
- Date of birth
- Name at birth
- Place of birth
- Email address
If you sign up for an account using the eID function of your ID card, data fields 1-6 on your ID card will be read and saved, if you have provided your consent to this processing.
The pseudonym or card identification of your ID card will also be stored if you have activated the ‘Log in with online ID’ function in your service account.
Additional data you can enter
You can also save other data in your account. This data is used for certain online services to prefill fields in forms to save you the time required to fill them out manually. If you have a basic Service Account, you can optionally fill out the data required for a Service Account Plus (see above).
The following data can also be entered:
- Title
- Academic title
- Additional address information
- Phone number
- Mobile phone number
If you have logged in using your BundID or Mein Unternehmenskonto account, the data required for the online service may be sourced from these accounts and forwarded directly to the online service. More information on this data sharing can be found in the respective privacy policy.
Service account for companies and other organisations (Business Service Account)
Service accounts for companies, authorities or other organisations (hereinafter jointly organisations) contain personal data belonging to
- administrators and
Administrators
Administrators for a Business Service Account refer to users within an organisation who have been granted extra admin permissions for a Business Service Account. As a result, in addition to being able to edit their own data, they can also edit data on the organisation. Administrators can also manage the data of other users in the organisation. This involves setting up, deleting and editing user data and granting users technical permissions to use online services. The following data is saved on administrators:
- First name
- Surname
- Email address
- Phone number
Users
The following data is saved on users:
- First name
- Surname
- Email address
Voluntary additional data for Business Service Accounts
You can also save other data in your Business Service Account. By saving this data, certain fields of forms will be prefilled in the future.
- Title
- Academic title
- Fax number
- Phone number
- Mobile phone number
Service account mailbox
A personal mailbox is created for you when you use a service account. The data from your service account listed below is saved in the mailbox system to facilitate use thereof:
- First name
- Surname
- Email address
- Phone number
Correspondence between yourself and the authorities is also saved in the service account mailbox. The messages may contain personal data.
Support queries:
- First name
- Surname
- Email address and/or phone number
- All other personal data and attached documents that you send in relation to your query
Session cookies are set and read.
How do we process your data?
The above personal data is saved. If you are logged into your service account, the data from your account is used to prefill fields of forms for certain online services, meaning you do not need to enter data anew each time you use an online service.
We will only send your data as part of an administrative procedure when you click Send in the online service.
We have implemented technical and organisational security measures to safeguard data against unlawful use.
Who are the recipients of your data?
If you use an online service offered by the City of Hamburg in the service portal, your data will be sent to the responsible authority in Hamburg when you click Send.
Online service provided by other Federal States:
Your data is forwarded to the relevant authority. In this scenario, we will inform you of the disclosure of your data before forwarding it and obtain your explicit consent.
You do not need to set up an additional service account for another Federal State or with the Federal Government. More information is available here.
Data is also transferred to third parties in relation to e-payments. The name of the account holder is forwarded. Depending on the online service in question, certain personal data may be transmitted in the payment reference.
Hamburg uses the payment service ePayBL. ePayBL is hosted by Staatsbetrieb Sächsische Informatik Dienste. The payment provider is PAYONE S Public Services. The payment provider is subject to banking regulations and the associated security standards.
Support queries:
Any data disclosed by you in relation to your support query is forwarded to all relevant authorities and service providers involved in handling your support ticket.
Feedback:
If you provide feedback on the service portal, any data included in your feedback will automatically be forwarded to the Federal Government (Federal Ministry of the Interior). This is facilitated by the National Feedback Component (NFK). Before your data is forwarded, it is not accessible to the Free and Hanseatic City of Hamburg. The Federal Ministry of the Interior (BMI) is responsible for the data under data protection legislation. Further information can be found in the BMI Privacy Policy on the National Feedback Component, Link to the NFK
How long do we store your data?
We save technical logfiles for a maximum period of 90 days.
Service account
We save the data in your service account as long as your account remains active. Your service account will be automatically deleted after being inactive for two years. If you have a Service Account Plus or a Business Service Account, your account will be deleted once it has been inactive for five years. Before your account is deleted, you will receive an email notifying you that your service account, including your mailbox and all correspondence, will be deleted if you do not log in before the end of the set period.
Service account mailbox
Messages in your mailbox are stored until you delete them. Messages are only automatically deleted when your entire service account is deleted.
Online services
As a rule, data used for online services will be deleted immediately once your correspondence has been sent. You will be informed by an online service if it can save your data.
Support queries:
Personal data and content are erased at the latest 30 days after your ticket has been fully processed.
What rights are you entitled to?
You are granted various rights under the EU General Data Protection Regulation (GDPR). More information on these rights can be found in Articles 15 to 18 and Article 21 of the EU GDPR in particular, which are outlined below. You are entitled to assert these rights against the data controller (see above ‘Who are we?’).
Right of access
You have the right to obtain information on your personal data processed by us. When you submit a request for access, please specify the data in question to make it easier for us to compile the data you have requested.
Right to rectification
If disclosed information concerning you is not (or no longer) correct, you can request it is rectified. If your data is incomplete, you can ask for its completion.
Right to erasure
You can delete your service account at any time. To do so, log onto the service portal and go to ‘My section’. From this section, select ‘Delete service account’ under the ‘Account’ icon. Your service account will then be deleted along with all data and mailbox messages associated with it. You are also entitled to demand the erasure of your personal data.
Right to restriction of processing
You reserve the right to demand that we restrict the processing of your personal data.
Right to object
You are entitled to object to the processing of your data without stating grounds at any time. Please note that objections only apply to future processing.
Right to lodge a complaint
If you believe that we have failed to respond to your query, or failed to provide a satisfactory response, you can lodge a complaint with the data supervisory authority responsible for us:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Straße 22, 7. OG, 20459 Hamburg
Phone number: (040) 4 28 54 - 40 40
E-fax: (040) 4 279 – 11811
Email address: mailbox@datenschutz.hamburg.de
General information on your rights as a data subject
We respond to all requests received within a month of their receipt. If we require more than one month to conclusively clarify your enquiry, we will get in touch with an update.
We will let you know if there are any reasons for which we are unable to handle your query. Either way, you will receive a response from us.
Information on cookies and analysis methods when you use the Hamburg service portal
Cookies
Cookies are small blocks of data stored on your system by a website. We use technically necessary session cookies. The cookies are erased when you log out.
Most browsers can be configured to notify you when you receive cookies. You can then decide whether to accept or reject cookies. Session cookies need to be accepted in order to use the Hamburg service portal.
Matomo
We use the web analysis service provided by Matomo on the Hamburg service portal. Use of this service allows us to improve our services and make them more helpful for you, the user.
We use a version of Matomo that does not require cookies. In order to analyse use of the service portal, we collect:
- Your IP address (shortened version of your IP address; see section below),
- Information such as timestamps, the pages you visited and your language settings.
We use Matomo with IP anonymisation enabled. IP addresses are therefore further processed in truncated form, making it impossible to directly trace the address back to you. We do not merge this truncated IP address with any other data we collect.
Accordingly, no personal data is collected in the process. Data collected for these purposes is saved on our server.
Version 2.6
2 May 2025