PRIVACY POLICY

Responsible for the data processing is:

Wintershall Dea GmbH
Friedrich-Ebert-Straße 160
34119 Kassel, Germany
Phone +49 561 301-034119
Fax +49 561 301-1702

Am Lohsepark 8
20457 Hamburg, Germany
Phone +49 40 6375-0
Fax +49 40 6375-3162

The contact details of our Data Protection Officer are:

Wintershall Dea GmbH
Data Protection Officer 
Friedrich-Ebert-Strasse 160
34119 Kassel, Germany
+49 561 301 0
datenschutz@wintershalldea.com or
dataprivacy@wintershalldea.com

The contact details can also be found here.

(1) If you visit our website, the following information will automatically be transmitted from your browser to our server:

• IP address of your computer
• Information about your browser
• Name of the website from which you visit us
• Name of the visited landing page address (URL) or the accessed file
• Date and time of your visit
• Transferred data volumes
• Status information such as error messages

(2) If you contact us by email, we will receive the following information:

• Your email address and other information which you submit to us in your email
• Date and time of your contact

(1) If you visit the Wintershall Dea website:

• We use the IP address and the other data transmitted automatically from your browser to our server in order to:

a) provide you with the requested content. We store the full IP address only as long as this is technically necessary to show you the requested page.
b) protect us from attacks and to ensure the proper operation of our website. We store the aforementioned data temporarily and access-protected for a maximum of 7 days.
c) attempt to find out who is behind an IP address only in cases of unlawful attacks

• After anonymizing your IP-address according to the current state of technology, we save it in order to analyse the usage behaviour of visitors to our website and hence improve our website. We therefore do not collect any personal information about your usage behaviour on our website.

(2) If you contact us by email, we will use the provided personal data in order to reply to and accord with your request as far as possible. This personal data will be stored for as long as it is necessary to answer and respond to your request.

(3) The legal basis for processing your personal data is preserving our legitimate interests according to Article 6 para. 1 f) of the General Data Protection Regulation (GDPR). Wintershall Dea’s legitimate interest in these processing activities derives from the purposes set out above.

The legal basis for the use of not necessary cookies (see Section 7) is your consent according to Article 6 para. 1 a) GDPR.

In order to visit and show our website, the technically necessary personal data referred to in Section 2 (1) of this Privacy Policy is automatically processed. Any other personal data is voluntary based on your given cookie settings (see Section 7) or for purposes of contact.

Within our company, access to your personal data will only be granted to those persons and departments where this is necessary for the purposes under Section 3 of this Privacy Policy.

We might employ external service providers for the processing of your personal data for the purposes under Section 3 of this Privacy Policy. They process your personal data on our behalf and only on our instructions in accordance with Art. 28 GDPR. An independent processing of your personal data by the service providers have been contractually excluded.

In case we transfer your personal data to companies within the Wintershall Dea group or other service providers, which are located outside of the European Union or the European Economic Area (EEA) (third country), it will only be performed if the EU Commission has confirmed an adequate data protection level for the third country or if another data protection guarantee (such as binding corporate rules or EU standard contractual clauses) applies.

Wintershall Dea uses technical and organizational security measures to protect your personal data from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security measures are continuously revised in line with technological developments.

When you visit our website, we point out in our “Cookie Notice Banner” that we use cookies. Cookies are small text files that are stored locally in the visitor’s Internet browser cache. By using our website, you agree to our use of cookies. We would like to inform you about which cookies we use and how you can prevent the setting of our cookies.

(1) We use three categories of cookies on our website:

• Necessary Cookies:
  These cookies are technically necessary for the operation, smooth functioning and certain services of our website. These cookies can only be deactivated by changing your browser settings.
• Analytical Cookies:
  These cookies help us to recognise recurring users and analyse their behaviour on our website (for example, which pages the users come from or which pages they have accessed) in order to improve our website.
• Marketing & Social Media Cookies:
  Marketing cookies help us provide you with personalised and relevant services or advertising, and track the effectiveness of our digital marketing activities. Social media cookies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies you may not be able to use or see these sharing tools.

(2) The following section explains the type, purpose and duration of the cookies on our website. You can configure your browser setting according to your wishes and decide which cookies you want to allow and which cookies you want to reject. Please note that if you do not allow the use of cookies referred to in Section 7 (1), you may not be able to use all the features of our website.

You are granted specific rights under the General Data Protection Regulation:

(1) Right of access, Art. 15 GDPR
You have a right to obtain information about your personal data processed by us and certain other information (such as those given in this Privacy Policy);

(2) Right to rectification, Art. 16 GDPR
If your personal data is incorrect or incomplete, you have a right to have it rectified;

(3) Right to erasure, Art. 17 GDPR
On the basis of the so-called “right to be forgotten”, you can in specific cases demand the erasure of your personal data. We are entitled, for example, to continue processing your personal data if such processing is required in order to comply with our legal obligations or to establish, exercise or defend legal claims;

(4) Right to restriction of processing, Art. 18 GDPR
This right includes restricting the usage or the manner of the usage. This right is limited to specific cases and applies in particular when: (a) the data is incorrect; (b) the processing is unlawful and you oppose the erasure; (c) we no longer require the data but you need the data to establish, exercise or defend your rights. If processing is restricted, we may continue to store but not use the data. We keep a list of those who have exercised their right to restrict processing in order to ensure this restriction;

(5) Right to data portability, Art. 20 GDPR
In accordance with this right we will, if technically possible, transmit your personal data in a structured, commonly used and machine-readable format for your own purposes;

(6) Right to revoke your consent, Art. 7 GDPR
If the processing of your data is based on your consent, you have the right to object to the processing of your personal data at any time.

(7) Right to object, Art. 21 GDPR
If we process your data for the safeguarding of our legitimate interests, you may object to this processing on grounds arising from your specific situation. We will then cease to process your personal data unless we can prove grounds for the processing worthy of protection which prevail over your interests, rights and freedom or the purpose of the processing is the assertion, exercise or defense of a legal claim.

Exercising these rights is free of charge and can be submitted using the contact details under Section 1. It requires an authetification with two factors. We will try to reply to you within 30 days.

You can contact the Data Protection Officer named in Section 1 of this Privacy Policy or file a complaint with a supervisory authority according to Art. 78 GDPR, in particular in the member state where you are resident, have your place of work, or where the alleged infringement took place.

Our website is generally not aimed for and are not marketed to people under the age of 18 or such other age designated by applicable law (“minors”). We generally do not collect personal data of minors. If such persons submit personal data through this website, we will erase the data and will not process it as soon as we become aware that they are minors. If you are a minor, please do not send us your personal information unrequested. We only process the data of minors on the basis of a consent from a legal guardian and only to the extent and purposes that consent has been given. Legal Guardians can contact us by the contact details under Section 1.

This website does not serve as our application portal, therefore no application data is intended to be processed during the visit. Instead, by clicking on an “Apply” button, you will be redirected to Wintershall Dea’s actual portal for applicants. Please use that portal exclusively to apply or provide personal data in this regard.

For further information, the Privacy Policy concerning data protection for applicants can be found here