Our use of your data and your rights – Information in accordance with Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)
This Data Privacy Statement applies to the collection, processing and use of your personal data when you use our website www.gazprom-germania.de and the respective subpages https://www.gazprom-germania.de/abenteuer-energie/).
The issue of data protection has a high priority at GAZPROM Germania GmbH (hereinafter referred to as “we” or “GAZPROM Germania”) and we take the protection of your personal data very seriously. We have taken a variety of technical and organizational measures to ensure that we comply with the applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR) and German Data Protection Act (BDSG). Complying with statutory data protection requirements concerning data about the users of our website is a key step in ensuring that your personal data is protected.
–
I. General information
1. Controller
The controller responsible for processing your personal data is:
GAZPROM Germania GmbH
Markgrafenstraße 23
10117 Berlin
E-mail: dataprivacy@gazprom-germania.de
–
2. Data Protection Officer
You can contact our Data Protection Officer at:
GAZPROM Germania GmbH
Data Protection Officer
Markgrafenstr. 23
10117 Berlin
E-mail: dataprivacy@gazprom-germania.de
–
3. What data do we process and from what sources?
We process personal data you provide voluntarily or is gathered as part of use of our website.
You can find more information on this subject in Section II “Processing of personal data.”
–
4. For what purpose do we process your data and what is the legal basis for that?
We process your personal data in compliance with the relevant data protection regulations, in particular the General Data Protection Regulation (GDPR) and German Data Protection Act (BDSG), for various purposes. In principle, the purposes for which we process your data are: to perform contractual obligations (Article 6 paragraph 1 point (b) GDPR), to safeguard legitimate interests (Article 6 paragraph 1 point (f) GDPR), for processing subject to your prior consent (Article 6 paragraph 1 point (a) GDPR) and/or to comply with statutory obligations (Article 6 paragraph 1 point (c) GDPR).
You can find more information on this subject in Section II “Processing of personal data.”
–
5. Who obtains my data?
Service providers whom we engage to work on our behalf (termed “processors”; cf. Article 4 No. 8 GDPR) may obtain personal data. We use the following processors or processor categories:
In principle, we do not pass on personal data to third parties who process personal data under their own responsibility (termed “controllers”; cf. Article 4 No. 7 GDPR).
GAZPROM Germania can transfer personal data to affiliated companies within the meaning of Section 15 of the German Stock Corporation Act (AktG) inside the European Economic Area to a permissible extent, provided there are legitimate interests for doing so and statutory regulations are complied with. Those companies are: WINGAS GmbH, Wingas Sales GmbH, Wingas Holding GmbH and Gazprom Marketing & Trading Ltd. Personal data is transferred to OOO Gazprom Export in Russia or PAO Gazprom in Russia as affiliated companies within the meaning of Section 15 of the German Stock Corporation Act (AktG) outside the European Economic Area (third country) on the basis of a standard data protection clause within the meaning of Article 46 GDPR. You can obtain a copy of that to inspect. To do so, please contact the controller or your Data Protection Officer specified in Section I, No. 1 and 2.
–
6. Data retention
We process your personal data only for as long as required to fulfill the purpose for which it is processed.
Moreover, we are subject to various retention and documentation obligations under legislation such as the German Commercial Code (HGB) or the German Fiscal Code (AO). The retention periods under the law may be up to 10 years.
Finally, the storage duration is also governed by the statutory limitation periods, which may be up to thirty years under Sections 195 et seq. of the German Civil Code (BGB), for example, with the standard limitation period being three years.
–
7. Your rights
Every data subject has the right to access personal data and obtain information (Article 15 GDPR), the right to rectification of data (Article 16 GDPR), the right to erasure of data (Article 17 GDPR), the right to restriction of processing (Article 18 GDPR), and the right to data portability (Article 20 GDPR). You can get in touch with us under the contact data specified in Section I “General information”, No. 1 and No. 2, to exercise the aforementioned rights.
If you have given us consent to process your data, you can revoke it at any time without using a special form. Where possible, notice of revocation should be sent to us using the contact data specified in Section I “General information”, No. 1 or No. 2.
Furthermore, you have a right to issue a complaint with a data protection supervisory authority (Article 77 GDPR). The supervisory authority responsible for GAZPROM Germania is:
- Berlin Commissioner for Data Protection and Freedom of Information
You also have a right to object to the processing of your data, as explained in more detail at the end of this Data Privacy Statement.
–
8. Links to other websites
As the provider of this website, we are responsible for its content. However, we have no influence on whether the sites linked to our website comply with the applicable data protection regulations. We assume no liability for the content of external websites. We are responsible for our own content only. This content may differentiate from links to content provided by other providers, for which we cannot accept responsibility and do not present as our own content. The provider of the external website in question holds sole liability for damages caused by incorrect or illegal content on their website.
–
II. Processing of personal data
1. Cookies
We use cookies on various pages to make your visit to our website appealing and enable you to use certain functions. Cookies are small text files that are stored on your device. They can be sent to a page when it is accessed and thus allow identification of the user. Cookies help make Internet sites more user-friendly. Some of the cookies used are deleted when the browser session is over, i.e. when you close your browser. They are termed session cookies. Other cookies remain on your device and enable us to recognize your browser again the next time you visit the website. They are termed persistent cookies.
You can set your browser so that you are notified when cookies are placed and can decide whether to accept them on a case-by-case basis or to exclude acceptance of cookies for specific cases or in general. You can delete cookies that have already been placed. If you do not accept cookies, the features of our website may be restricted.
Personal data is processed using cookies on the basis of Article 6 paragraph 1 point (f) GDPR. The purpose of processing your data and our legitimate interests are to enhance the features of our website.
–
2. Automatic collection of access data/server log files
Whenever you visit our website, the following data record is stored each time the site or a page is called:
- The name of the user’s Internet service provider
- The name of the user’s Internet browser
- The time and date of the visit
- The amount of data transferred
- The user’s IP address
- A description of the user’s Internet browser
- The name of the accessed file
- The referrer URL (the previous webpage)
- The operating system
- Notification of a successful data access, errors or unauthorized access
Personal data in log files is processed on the basis of Article 6 paragraph 1 point (f) GDPR. The purpose of processing your data and our legitimate interests are to simplify administration of our website and to enable us to detect and prosecute hacking.
–
3. Social media plug-ins
We use the following social media plug-ins: Facebook. To that end we use the so-called two-click solution. This means that when you visit our site, initially no personal data are passed on to the providers of the plug-ins. The providers of the plug-in recognize you when you mark a box over the initial letters or the logo. In that way we give you the opportunity to communicate directly with the respective provider of the plug-in via the button. The provider of the plug-in will be notified that you have accessed the corresponding website of our online offering only if you click on and thus activate the marked field. In addition, collected access data will be automatically transmitted. These data include, for example, the name of the Internet provider, the name of the Internet browser you used, the date and time of the respective access, the amount of data transferred, and the IP address or description of the web browser that you used. By activating the plug-in you will therefore transmit your personal data to the respective provider of the plug-in and store them there (in the case of U.S. providers, in the U.S.). Since the providers of the plug-ins collect the data primarily using cookies, we recommend that before you click on the greyed-out box, you first delete all cookies via the security settings of your browser.
We have no influence on the collected data or the data processing operations, nor are we aware of the full extent of data collection, the purpose of the processing, and the retention periods. We also have no information about the deletion of the collected data by the providers of the plug-ins.
The providers of the plug-ins store the data collected about you in the form of user profiles. They use these profiles for advertising and market research, and/or to customize their website. They evaluate the data primarily (also for non-logged-in users) to display customized advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. To exercise this right, you must contact the respective provider of the plug-in.
The respective provider of the plug-in collects the data regardless of whether you have an account with it and are logged-in there. If you are logged-in to the provider of the plug-in, your collected data will be assigned directly to your existing account with the provider of the plug-in. If you press the activated button and, for example, link the page, the provider of the plug-in also stores this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this will prevent an assignment to your profile by the respective provider of the plug-in.
The plug-ins allow us to offer you the possibility to interact with social networks and other users. That helps us to improve our offering and make it more interesting for you as a user. The legal basis for the use of the plug-ins is set out in Article 6 paragraph 1 point (f) GDPR.
For more information about the purpose and scope of data collection and how the data are processed by the applicable plug-in provider, please see the data privacy policies listed below. Therein you will also find further information about your corresponding rights and the settings options for the protection of your privacy.
The address of the respective provider of the plug-ins and the link to the corresponding data privacy policies:
Facebook Inc. is subject to the EU-US Privacy Shield, which can be found at https://www.privacyshield.gov/EU-US-Framework.
–
