Data Protection

Wintershall Dea is delighted that you have visited our website and thanks you for your interest in our company.

Data protection is a top priority at Wintershall Dea. We would therefore like to inform you in detail about the following Privacy Policy aspects:

  • Which information is collected by Wintershall Dea when you visit our website
  • For what purposes is this information processed
  • What is the legal basis for processing personal data
  • Which recipients receive the personal data
  • When and how we use Matomo
  • How long is the personal data stored
  • Whether you are required to provide us with personal data

In addition, we would like to inform you about:

  • Your rights regarding the data processing carried out
  • Who is responsible in accordance with data protection law and, if available, the contact details of our Data Protection Officer.

1. Which information is collected by Wintershall Dea when you visit this website?

(1)  If you visit our website for informative purposes (i.e. not by registering or contacting us), the following information will automatically be transmitted from your browser to our server:

  • IP address of your computer
  • Information about your browser
  • Name of the website from which you visit us
  • Name of the visited landing page address (URL) or the accessed file
  • Date and time of your visit
  • Transferred data volumes
  • Status information such as error messages

(2)  If you contact us by email, we will receive the following information:

  • Your email address and other information which you submit to us in your email or via fields in a contact form
  • Date and time of your contact

2. To what extent does Wintershall Dea process the aforementioned data and for what purposes

(1)  If you visit the Wintershall Dea website, we will use the IP address and the other data transmitted automatically from your browser to our server in accordance with Section 1 (1) in order to:

a)     provide you with the requested content. We store the full IP address only as long as this is technically necessary to show you the requested page.

b)    protect us from attacks and to ensure the proper operation of our website. We store the aforementioned data temporarily and access-protected for a maximum of 7 days.

Wintershall Dea will only attempt to find out who is behind an IP address in cases of unlawful attacks.

(2)   We save the IP address of your computer after we have truncated it by the last sextet – in other words, anonymised – in order to analyse the usage behaviour of visitors to our website and hence improve our website. The aforementioned truncation of the IP address for this purpose is carried out immediately after it has been captured. We therefore do not collect any personal information about your usage behaviour on our website.

(2)  If you contact us via a contact form on our website or by email, we will use the personal data referred to in Section 1 (2) in order to reply to and accord with your request as far as is possible. This personal data will be stored for as long as is necessary to answer and respond to your request.

3. Are you obligated to provide us with this data? Can you object to its use?

When visiting our website, the information referred to in Section 1 (1) will be transmitted automatically from your browser to our server. The transmission of this information is voluntary. Without the provision of this personal data we cannot show you the requested page. 

You are not obligated to allow us to use your anonymised data for web analysis. Nor are you obligated to allow us to compare your IP address with your company data.

If you wish to contact us and send us an email or use our contact form, the transmission of the information according to Section 1 (2) will be voluntary. If a contact form contains mandatory fields, these will be marked as such. Without the provision of personal data required in individual cases, we may not be able to answer your request in the best possible way.

4. What is the legal basis for processing your personal data?

The legal basis for processing your personal data as set out in Section 2 is Article 6 (1), first sentence, (f) of the General Data Protection Regulation. Wintershall Dea’s legitimate interest in these processing activities derives from the purposes set out in Section 2 above.

5. With whom do we share your personal data?

The personal data referred to in Section 1 is passed on to processors based in the European Union for the purposes set out in Section 2. The processing takes place on our behalf and according to our instructions. We do not intend to transfer your personal data to a third country.

6. When and how do we use Matomo for data analysis?

Provided that you have consented to the use of web analytics with Matomo on our website, we use cookies that generate information according to Section 1 (1) of this Privacy Policy to enable us to analyse the use of the website by you. These cookies help us to recognise recurring users and analyse their behaviour on our website (for example, which pages the users come from or which pages they have accessed) in order to improve our website. The web analytics service software Matomo (www.matomo.org) is used. This is a service provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, (“Matomo”). The data is collected and saved based on our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes pursuant to Article 6 (1) (f) of the GDPR. This data can be used for the same purpose to produce and analyse anonymised usage profiles. Cookies can be used for this purpose. Cookies are small text files that are stored locally in the visitor’s Internet browser cache. The cookies also enable the Internet browser to be identified again. The data collected using the Matomo technology (including your anonymised IP address) are processed on our servers. The information generated by the cookie in the anonymous user profile is not used to personally identify the visitor to this website and not merged with personal data about the bearer.   

The IP address of your computer will not be saved until it has been truncated by the last sextet immediately after being captured, i.e. anonymised. Only then will the information generated by the cookies as part of Matomo be transmitted to a Matomo server in New Zealand and stored there. We therefore do not collect any personal information about your usage behaviour on our website. Your IP address will not be merged with other Matomo data.

The legal basis for the data processing is Article 6 (1), first sentence, subparagraph (a) of the General Data Protection Regulation. You provide consent for the web analysis by Matomo by clicking on “OK” on our website in our cookie banner. Without this consent, no web analytics cookies will be set by Matomo.

The transfer of your information to New Zealand is covered by an adequacy decision adopted by the European Commission pursuant to Article 45 of the General Data Protection Regulation. Matomo is committed to adhering to the principles of the EU-US Privacy Shield and acts as a processor pursuant to Article 28 of the Data Protection Regulation.

More information about data privacy at Matomo can be found at https://matomo.org/docs/gdpr/.

You are not obligated to allow us to use your anonymised data for web analysis. If you have consented to the use of the web analysis by Matomo on our website, you can revoke your consent and prevent the further use of your – already anonymised – data by Matomo by clicking on the button below. However, this only applies to the use of Matomo on our website. Cookies already set by Matomo will then be blocked and will remain until their expiration date (see Section 8) or until they are manually deleted by you from your personal browsing history. By clicking on the button below, no further information will be sent to Matomo. This has no consequences for you. You can continue to visit our website.

7. How do we secure your personal data?

Wintershall Dea uses technical and organizational security measures to protect your personal data from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security measures are continuously revised in line with technological developments.

8. Are cookies used on our website?

When you visit our website, we point out in our “Cookie Notice Banner” that we use cookies. By using our website, you agree to our use of cookies. If you have given your consent to the web analysis with Matomo on our website in our “Cookie Notice Banner”, we also use cookies to enable us to analyse the use of the website by you (for more details, see Section 6).

We would like to inform you about which cookies we use and how you can prevent the setting of our cookies.

(1)  The following cookies are important for the smooth operation and specific services of our website*:

_cookieagreed | This cookie stores information as to whether you agree with the use of cookies and Matomo on our website. In addition, information is saved as to whether you have revoked your consent to the use of Matomo. | It is deleted as soon as you clear your browser cache (or 180 days after your visit)

*Cookie | Purpose | End-of-life

(2) We use the following cookies to measure the use of our website if you have consented to the web analytics by Matomo on our website:

Cookie Purpose End-of-life
_pk_id.x.xxxx Is used to distinguish users. Is used to distinguish users.
_pk_ses.x.xxxx Is used to temporarily store data for the visit. Is deleted after 30 minutes.

You can configure your browser setting according to your wishes and decide which cookies you want to allow and which cookies you want to reject. Please note that if you do not allow the use of cookies referred to in Section 8 (1), you may not be able to use all the features of our website. For more information on how to enable and disable cookies set up for web analytics by Matomo, please refer to Section 8.1.

9. What are your rights?

You are granted specific rights under the General Data Protection Regulation:

9.1. Right of access:

You have a right to obtain information about your personal data processed by us and certain other information (such as those given in this Privacy Policy);

9.2 Right to rectification:

If your personal data is incorrect or incomplete, you have a right to have it rectified;

9.3 Right to erasure:

On the basis of the so-called “right to be forgotten”, you can demand the erasure of your personal data unless there is a duty of retention. The right to erasure is not an unqualified right. We are entitled, for example, to continue processing your personal data if such processing is required in order to comply with our legal obligations or to establish, exercise or defend legal claims;

9.4 Right to restriction of processing:

This right includes restricting the usage or the manner of the usage. This right is limited to specific cases and applies in particular when: (a) the data is incorrect; (b) the processing is unlawful and you oppose the erasure; (c) we no longer require the data but you need the data to establish, exercise or defend your rights. If processing is restricted, we may continue to store but not use the data. We keep a list of those who have exercised their right to restrict processing in order to ensure this restriction;

9.5 Right to data portability:

In accordance with this right we will, if technically possible, transmit your personal data in a structured, commonly used and machine-readable format for your own purposes;

9.6 Right to object:

You may object to the processing of your personal data if it is processed on the basis of legitimate interests, in particular for direct marketing purposes;

9.7 Right to be informed:

You have the right to be informed in a clear and easy-to-understand language about how we process your personal data;

9.8 Right to revoke your consent:

If you have given us your consent to processing, you have the right at any time to revoke your consent. Such a revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.

It does not cost you anything to exercise these rights. However, you must prove your identity with two factors. We will use reasonable efforts in accordance with our legal obligations to transfer, rectify or erase your personal data in our file systems.

In order to exercise your rights, file a complaint or submit any other request, please contact us by email or write to us. We will try to reply to you within 30 days. The contact details can be found in Section 11. In addition, you can revoke your consent to the web analysis by Matomo by clicking the button in Section 6.

If we receive a complaint, we will contact the person who filed the complaint to investigate the complaint. If we cannot resolve a complaint immediately, we will work with the authorities, especially the data protection authorities, as needed.

If you are not satisfied with the processing of a complaint regarding your personal data, you can submit your complaint to the relevant data protection authority.

10. Where can you complain?

You can file a complaint with the Data Protection Officer named in this Privacy Policy (contact details below) or with a supervisory authority, in particular in the member state where you are resident, have your place of work, or where the alleged infringement took place. You can also contact:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Hessen (Federal State Commissioner for Data Protection and Freedom of Information in Hesse)

Postfach 3163
65021 Wiesbaden
https://datenschutz.hessen.de/
Email:  poststelle@datenschutz.hessen.de
Phone: +49 611 1408 - 0
Fax: +49 611 1408 - 900 / 901

11. Who is responsible for data processing and who is our Data Protection Officer?

The person responsible for the data processing can be found here.

Our Data Protection Officer is:

Wintershall Dea
Fred Thielmann
Friedrich-Ebert-Strasse 160
34119 Kassel
Germany
+49 561 301 0
datenschutz[at]wintershalldea.com

12. Data protection for minors

This website is aimed at people who are at least 18 years old. We do not want to collect personal data from anyone under the age of 18.

Persons under the age of 18 should therefore not submit any personal data to or through this website. If such persons submit personal data through this website, we will erase the data and will not process it as soon as we become aware that they are minors.