Data Protection and Declaration of Consent
The issue of data protection has a very high priority in the Wintershall Dea group. In the following we would therefore like to inform you about the principles that apply when we collect, process and use personal data from you within the framework of investor relations management, what rights you have with regard to the data processing carried out and who is to be regarded as the person responsible within the meaning of data protection law.
1. Data processing
If you are supported by Wintershall Dea as part of Investor Relations Management, we will collect and process the following personal data from you.
- Names and company names
- Contact details (email)
2. Purpose, scope and legal basis
Newsletter: Insofar as we use your data to organise the newsletter, we process your data on the basis of your declared declaration of consent in accordance with Art. 6 Para. 1 S. 1 lit. a) DSGVO. You can revoke your declaration of consent at any time with effect for the future, for example by clicking on the unsubscribe link contained in every newsletter or by sending us an e-mail via your specified e-mail address at ir(at)wintershall.com.
Fulfilment of legal obligations: Insofar as we process data to fulfil legal obligations, this processing is based on Art. 6 para. 1 lit. c) DSGVO.
Legal claims: Insofar as we process your data to assert, exercise or defend legal claims, this processing is based on our legitimate interests pursuant to Art. 6 Para. 1 S. 1 lit. f) DSGVO.
The data will be processed for as long as is necessary to fulfil the specified purposes. A storage of your data beyond the two processing purposes mentioned above will only take place for the implementation of legal storage periods.
3. To whom do we pass on your personal data?
The personal data will be partially passed on to contracted data processors within the European Union; in accordance with Art. 28 DSGVO processors are working on our behalf and according to our instructions. We will not transfer your personal information to a third country.
4. How do we secure your personal data?
Wintershall Dea has implemented technical and organizational security measures to protect your personal data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously revised in line with technological developments.
5. What rights do you have?
Right to be informed: The right to information about your personal data processed by us and about certain other information (such as those given in this privacy policy);
Right for rectification:
If your personal data is incorrect or incomplete, you have the right to have it corrected;
Right for deletion: On the basis of the so-called "right to be forgotten" you can demand the deletion of your personal data, unless there is a storage obligation. The right to deletion is not a right without exception. For example, we have the right to continue to process your personal data if such processing is necessary to meet our legal obligations or to assert, exercise or defend legal claims;
Right to limitate the processing: This right includes the limitation of use or the manner of use. This right is limited to certain cases and exists in particular when: (a) the data is inaccurate; (b) the processing is unlawful and you refuse to delete the data; (c) we no longer need the data but you need the data to assert, exercise or defend legal claims. If processing is restricted, we may continue to store the data, but may not use it. We maintain a list of those persons who have exercised the right to restrict the processing in order to ensure that this restriction applies;
Right for data transfer: This right includes that we transfer your personal data, if technically possible, in a structured, common and machine-readable format for your own purposes;
Right of objection: You may object to the processing of your personal data if, in your opinion, it has been processed in an unauthorised manner or to an unauthorised extent;
Right to information: You have the right to be informed, in clear and easily understandable language, of how we process your personal data; and
Right to revoke your consent: If you have given us your consent for processing, you have the right to revoke your consent at any time. Such a revocation shall not affect the lawfulness of the processing carried out on the basis of the consent up to the revocation.
Exercise of your rights
The exercise of these rights is free of charge for you. However, you must prove your identity with two factors. We will use reasonable efforts, in accordance with our legal obligations, to transfer, correct or delete your personal information in our file systems.
To unsubscribe from our newsletter, please use the link at the end of each newsletter sent to you. Alternatively, please use the address ir(at)wintershalldea.com to unsubscribe or for other inquiries.
To file a complaint, please contact us by email at privacy(at)wintershalldea.com. If we receive a complaint, we will contact the person who filed the complaint to investigate the complaint. If we are unable to resolve a complaint immediately, we will cooperate with the relevant authorities, in particular the data protection authorities, as necessary. If you are not satisfied with the handling of a complaint regarding your personal data, you can submit your complaint to the appropriate data protection authority.
6. Competent supervisory authority
They may lodge a complaint with a supervisory authority, in particular in the Member State in which they are staying, at their place of work or at the place where the alleged infringement was committed. You can also contact
Der Hessische Beauftragte für Datenschutz und In-formationsfreiheit (The Hessian Commissioner for Data Protection and Freedom of Information)
Gustav-Stresemann-Ring 1, 65189 Wiesbaden
poststelle(at)datenschutz.hessen.de
https://datenschutz-hessen.de
7. Responsible office, data protection officer
Unless otherwise specified in the individual case, the person responsible within the meaning of the DSGVO is
Wintershall Dea AG,
Friedrich-Ebert-Str. 160, 34119 Kassel
You can reach the data protection officers of the Wintershall Dea Group by e-mail at
Datenschutz(at)wintershalldea.com
