1. WHO IS RESPONSIBLE AND WHO IS OUR DATA PROTECTION OFFICER?
Responsible for the data processing is:
Wintershall Dea AG
34119 Kassel, Germany
Phone +49 561 301-034119
Fax +49 561 301-1702
Am Lohsepark 8
20457 Hamburg, Germany
Phone +49 40 6375-0
Fax +49 40 6375-3162
The contact details of our Data Protection Officer are:
The contact details can also be found here.
2. WHAT DATA DO WE COLLECT WHEN YOU VISIT THIS WEBSITE AND HOW?
(1) If you visit our website, the following information will automatically be transmitted from your browser to our server:
- IP address of your computer
- Information about your browser
- Name of the website from which you visit us
- Name of the visited landing page address (URL) or the accessed file
- Date and time of your visit
- Transferred data volumes
- Status information such as error messages
(2) If you contact us by email, we will receive the following information:
- Your email address and other information which you submit to us in your email
- Date and time of your contact
3. WHAT ARE THE PURPOSES OF THE PROCESSING AND WHAT IS THE LEGAL BASIS?
(1) If you visit the Wintershall Dea website:
- We use the IP address and the other data transmitted automatically from your browser to our server in order to:
a) provide you with the requested content. We store the full IP address only as long as this is technically necessary to show you the requested page.
b) protect us from attacks and to ensure the proper operation of our website. We store the aforementioned data temporarily and access-protected for a maximum of 7 days.
c) attempt to find out who is behind an IP address only in cases of unlawful attacks
- After anonymizing your IP-address according to the current state of technology, we save it in order to analyse the usage behaviour of visitors to our website and hence improve our website. We therefore do not collect any personal information about your usage behaviour on our website.
(2) If you contact us by email, we will use the provided personal data in order to reply to and accord with your request as far as possible. This personal data will be stored for as long as it is necessary to answer and respond to your request.
(3) The legal basis for processing your personal data is preserving our legitimate interests according to Article 6 para. 1 f) of the General Data Protection Regulation (GDPR). Wintershall Dea’s legitimate interest in these processing activities derives from the purposes set out above.
The legal basis for the use of not necessary cookies (see Section 7) is your consent according to Article 6 para. 1 a) GDPR.
4. ARE YOU OBLIGATED TO PROVIDE THE DATA?
5. WITH WHOM DO WE SHARE PERSONAL DATA?
6. WILL YOUR DATA GET TRASFERRED TO A THIRD COUNTRY?
In case we transfer your personal data to companies within the Wintershall Dea group or other service providers, which are located outside of the European Union or the European Economic Area (EEA) (third country), it will only be performed if the EU Commission has confirmed an adequate data protection level for the third country or if another data protection guarantee (such as binding corporate rules or EU standard contractual clauses) applies.
7. HOW DO WE SECURE YOUR PERSONAL DATA?
Wintershall Dea uses technical and organizational security measures to protect your personal data from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security measures are continuously revised in line with technological developments.
8. ARE COOKIES USED ON OUR WEBSITE?
(1) We use three categories of cookies on our website:
- Necessary Cookies:
These cookies are technically necessary for the operation, smooth functioning and certain services of our website. These cookies can only be deactivated by changing your browser settings.
- Analytical Cookies:
These cookies help us to recognise recurring users and analyse their behaviour on our website (for example, which pages the users come from or which pages they have accessed) in order to improve our website.
- Marketing & Social Media Cookies:
Marketing cookies help us provide you with personalised and relevant services or advertising, and track the effectiveness of our digital marketing activities. Social media cookies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies you may not be able to use or see these sharing tools.
9. WHAT ARE YOUR RIGHTS?
You are granted specific rights under the General Data Protection Regulation:
(1) Right of access, Art. 15 GDPR
(2) Right to rectification, Art. 16 GDPR
If your personal data is incorrect or incomplete, you have a right to have it rectified;
(3) Right to erasure, Art. 17 GDPR
On the basis of the so-called “right to be forgotten”, you can in specific cases demand the erasure of your personal data. We are entitled, for example, to continue processing your personal data if such processing is required in order to comply with our legal obligations or to establish, exercise or defend legal claims;
(4) Right to restriction of processing, Art. 18 GDPR
This right includes restricting the usage or the manner of the usage. This right is limited to specific cases and applies in particular when: (a) the data is incorrect; (b) the processing is unlawful and you oppose the erasure; (c) we no longer require the data but you need the data to establish, exercise or defend your rights. If processing is restricted, we may continue to store but not use the data. We keep a list of those who have exercised their right to restrict processing in order to ensure this restriction;
(5) Right to data portability, Art. 20 GDPR
In accordance with this right we will, if technically possible, transmit your personal data in a structured, commonly used and machine-readable format for your own purposes;
(6) Right to revoke your consent, Art. 7 GDPR
If the processing of your data is based on your consent, you have the right to object to the processing of your personal data at any time.
(7) Right to object, Art. 21 GDPR
If we process your data for the safeguarding of our legitimate interests, you may object to this processing on grounds arising from your specific situation. We will then cease to process your personal data unless we can prove grounds for the processing worthy of protection which prevail over your interests, rights and freedom or the purpose of the processing is the assertion, exercise or defense of a legal claim.
Exercising these rights is free of charge and can be submitted using the contact details under Section 1. It requires an authetification with two factors. We will try to reply to you within 30 days.
10. WHERE CAN YOU COMPLAIN?
11. DO WE PROCESS PERSONAL DATA OF MINORS?
Our website is generally not aimed for and are not marketed to people under the age of 18 or such other age designated by applicable law (“minors”). We generally do not collect personal data of minors. If such persons submit personal data through this website, we will erase the data and will not process it as soon as we become aware that they are minors. If you are a minor, please do not send us your personal information unrequested. We only process the data of minors on the basis of a consent from a legal guardian and only to the extent and purposes that consent has been given. Legal Guardians can contact us by the contact details under Section 1.
12. DATA PROTECTION FOR APPLICANTS
This website does not serve as our application portal, therefore no application data is intended to be processed during the visit. Instead, by clicking on an “Apply” button, you will be redirected to Wintershall Dea’s actual portal for applicants. Please use that portal exclusively to apply or provide personal data in this regard.