Privacy Policy Website and Services of Gunvor Raffinerie Ingolstadt GmbH
Status: 31.05.2022
Inhalt
- About us
- Why we process your data
- What data we collect and process from you
- Wer Zugriff auf Ihre Daten hat und an wen wir Ihre Daten übermitteln
- Retention periods
- Your Rights
- Use of our website - profiling, cookies and web tracking
- Supplementary notes and provisions for individual services
- Company presences ('fan pages') in social networks
a. Youtube
b. Xing and Kununu
c. LinkedIn
d. Instagram
1. About us
Gunvor Raffinerie Ingolstadt GmbH, is responsible for the collection, processing and storage of your data. You can find details about us in our imprint.
The careful handling of your personal data is our higest priority. We process your personal data in compliance with applicable law including. the General Data Protection Regulation (GDPR) and the respective national provisions.
This privacy policy applies to all of our company's websites that can be accessed under our domain https://gunvor-raffinerie-ingolstadt.de as well as our pages in the social networks (YouTube, Xing, Kununu, LinkedIn, Instagram). If you switch to websites of other operators within the scope of our offer, their own policies apply, for the content of which the respective operators of these websites are responsible.
As we would like to give you a comprehensive overview of the processing of personal data in our company. You will find below an overview of all our services in the context of which we collect and process personal data.
If separate or additional conditions apply to individual services or we ask you for your consent, we will point this out to you separately before using the respective service.
We also maintain various security measures to protect your personal data. For example, transmission between your web browser and our servers is always transport encrypted; in addition, we maintain a variety of technical and organizational measures to always protect your data.
2. Why we process your data
You can use our website without disclosing your identity. If you would like to register for one of our personalised services, register for events or contact us, we will ask you for your name and other personal information. It is your free decision whether you provide this (extended) data. Data that we absolutely need from you to provide our services are indicated as such.
Your personal data is collected and processed for the following purposes on the basis of the following legal bases:
- Contract initiation pursuant to Art. 6 I lit. b) and c), f) GDPR
- Communication and data exchange pursuant to Art. 6 I lit. a), b), c), f) GDPR
- Advertising and advertising pursuant to Art. 6 I lit. f) GDPR
- Implementation of declarations of consent pursuant to Art. 6 I lit. a) GDPR
- Ensuring the proper operation of a data processing system in accordance with Art. 6 I lit. c) and f) GDPR
- Applicant selection procedures within the framework of personnel and resource management based on Art. 6 I lit. a), b) GDPR in conjunction with. § 26 BDSG
3. What data we collect and process from you
We collect different categories of personal data from you. Personal data is all information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by assignment to an identifier such as a name. Personal data includes, for example, information such as your name, address, telephone number and date of birth (if provided). Statistical information that cannot be directly or indirectly associated with you - such as the popularity of individual web pages of our website or the number of users of a page - is not personal data. Data is collected directly and indirectly. In both cases, data will only be collected to the extent necessary; the data is processed exclusively for the purposes stated under point 2. It is up to you to decide whether you wish to provide us data that optimizes the use of our services for you but is not necessary for this purpose. Corresponding data fields are marked as 'voluntary'.
The personal data we collect directly from you include:
- Your e-mail address in the context of an online enquiry as well as voluntary information that you provide in the context of the enquiry.
- Surname, first name, nationality and e-mail address, date of birth, pension insurance number as part of the partner management.
In addition, data about you is collected indirectly when you use our services:
- Technical connection data, e.g. the page called up on your website, your IP address, shortened by the last three digits, date and time of access, end the device you used.
- Data collected as part of website tracking.
Minors:
Our Website is not intended for minors under the age of 16 and we do not knowingly collect personal data from minors. If persons under the age of 16 transmit personal data to us, this is only permitted if the parent/guardian has consented or has consented to the consent of the minor. For this purpose, the contact data of the legal guardian must be communicated to us in accordance with Art. 8 II GDPR in order to convince us of the consent or the consent of the legal guardian. These data as well as the data of the minor will then be processed in accordance with this data protection declaration. If we determine that a minor under the age of 16 has sent us personal.
4. Who has access to your data and to whom we transfer your data
a) Access
Access to your personal data stored by us is limited to our employees and the service providers commissioned by us, who have to handle this personal data due to their tasks.
If third parties gain access to your data, we have obtained your permission or there is a legal basis for this.
We also use service providers to provide services and process your data (including for hosting, sending emails, partner management, securing our web servers or website tracking). Insofar as special provisions apply to these, we have detailed these for you below in the respective service. The service providers process the data exclusively on our instructions and have been obliged to comply with the applicable data protection regulations. All processors have been carefully selected and are only given access to your data to the extent and for the period required to provide the services or to the extent that you have consented to the processing and use of the data..
b) Data exchange within the group of companies
Data exchange within the group of companies to which we belong takes place exclusively within the EU/EEA and serves only internal administrative purposes. By group of companies we mean affiliated companies within the meaning of Art. 4 No. 19 GDPR.
c) Transfer to third countries and legal basis
Companies in the United States and other countries outside the European Union are subject to data protection laws that do not generally protect personal data to the same extent as they do in the European Union. If your data is processed in a country that does not have a recognised high level of data protection like the European Union, we will ensure that your personal data is adequately protected by contractual regulations or other recognised instruments. We expressly point this out to you again in the context of the individual services.
Insofar as personal data is transferred to third countries, this is done on the basis of the EU standard contractual clauses pursuant to Art. 46 II lit. c GDPR or on the basis of your consent pursuant to Art. 49 I lit. a) GDPR.
d) Transmission to law enforcement and criminal investigation authorities
In exceptional cases, we transmit personal data to law enforcement and criminal investigation authorities. This is done on the basis of corresponding legal obligations, e.g. from the Code of Criminal Procedure, the Fiscal Code, the Money Laundering Act or state police laws or international laws as they may apply.
5. Retention periods
We store personal data within the framework of legal regulations or your consent.
We use the following criteria to determine the applicable retention period:
We store the personal data until the purposes for which they were collected cease to apply (e.g. at the end of a contractual relationship or through the last activity if there is no continuing obligation, or in the event of a revocation of your consent for the specific data processing).
Further data will only be stored if legal storage
- obligations (e.g. according to AO and HGB) exist;
- the data is still needed to assert and exercise legal claims or defend against legal claims, e.g. due to technological and forensic requirements to defend against attacks on our web servers and their prosecution;
- the deletion would be contrary to the legitimate interest of the data subjects; or
- another exception pursuant to Article 17 III GDPR.
6. Your Rights
You are entitled to a number of legal rights, which we would like to point out to you. In addition, our data protection officer is, of course, also available to answer any questions you may have about the personal data we have collected and processed about you at the contact details given below.
a) Right of access and data portability
You have the right to obtain information about the personal data we process about you.
Insofar as the data processing is based on your consent or, pursuant to Art. 6 I b) GDPR, on a contract, you may also request to receive the personal data stored about you in a structured, common and machine-readable format pursuant to Art. 20 I GDPR. At your request, we will forward the data directly to the recipient you have specified.
b) Right to rectification, restriction and deletion
Furthermore, in accordance with Art. 16 to 18 GDPR, you can demand that we correct, restrict (block) or delete your personal data if we have processed the data incorrectly, if there is a reason for restricting further data processing, or if the data processing has become illegal for various reasons, or if its storage is inadmissible for other legal reasons. We would like to point out that your right to deletion
may be restricted by legal retention periods.
c) Rights of objection
If our data processing is based exclusively on our legitimate interest pursuant to Art. 6 I f) GDPR, you may object to this processing pursuant to Art. 21 I GDPR. Then we will stop processing your data unless we can demonstrate legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend a legal claim. Furthermore, you always have the right to object to the use of your data for the purpose of direct advertising with effect for the future pursuant with Art. 21 II GDPR.
d) Right of revocation
If you have allowed us to process your personal data by giving your consent, you have a right of revocation with effect for the future pursuant to Art. 7 (3) GDPR.
e) Right to appeal to the supervisory authority
You are free to complain to a supervisory authority if you believe that our processing of your personal data violates the GDPR or other national and international data protection laws.
The contact details of the supervisory authority responsible for us are:
Bavarian State Office for Data Protection (BayLDA)
Promenade 27
91522 Ansbach
Phone: +49 (0) 981 53 1300
poststelle@lda.bayern.de
f) Contact details
To exercise your rights, you can send us an informal message to the contact details below. Likewise, please address the revocation of your consent, specifying which consent form you wish to revoke, to the contact details below:
Responsible:
Gunvor Refinery Ingolstadt GmbH
Esso Road 1
85092 Kösching
Managing Directors: Ralf Seid, Marcel Mazenauer
Data Protection Officer:
Contact details: datenschutz@gunvor-deutschland.de
7. Use of our website - profiling, cookies and web tracking
a) Basic information on cookies and opt-out options
We use so-called cookies in some areas of our website, e.g. to recognize visitors' preferences and to be able to optimally design the website accordingly. This facilitates navigation and a high degree of user-friendliness of a website. Cookies also help us to identify particularly popular areas of our website. Cookies are small files that are stored on a visitor's hard drive. They allow information to be retained for a certain period of time and identify the visitor's computer.
We only use so-called session cookies, which are automatically deleted when you close your browser. You can set your browser to inform you about the placement of cookies. This makes the use of cookies transparent for you. The legal bases are Art. 6 I lit. c) in conjunction with. Art. 32 and Art. 6 I lit. f) GDPR. Our legitimate interest is to secure our web server, for example to defend against attacks, and to ensure the functionality of our services.
We do not set cookies that are not technically necessary.
The following cookies are used by us for the purpose described in more detail:
Name of Cookie | Purpose | Storage duration | Technically necessary | Revokation of consent (if cookie is not technically necessary) |
S-ITServ | Presentation of the website | Session | Yes | not applicable |
erp_mark_list_document | Identification of the user session | Session | Yes | not applicable |
erp_merklist_shopping_basket | Identification of the user session | Session | Yes | not applicable |
In addition, as part of our website analysis, we naturally respect your 'Do not Track' preference as you have set it in your browser.
Please remember that deleting the cookies in your web browser also deletes the opt-out cookie. In this case, you can set them again at any time by clicking on the opt-out link again.
8. Supplementary notes and provisions for individual services
a) Contact form
Data that you transmit us via our contact form is processed for the purpose of communication and data exchange, i.e. to respond to your specific enquiry. These data is stored as long as there processing is necessary for these purposes or until the expiry of any subsequent retention periods.
b) Online application process
We offer you the opportunity to apply to us online. The data you enter and the file attachments you send are transmitted via a transport-secured connection. Your electronic application data will be received by the personnel department responsible in each case and will only be forwarded to the specialist department responsible for the respective position or to the persons entrusted with the processing. All parties involved will treat your application documents with due care and absolute confidentiality.
After completion of the applicant selection process, we will keep your application documents for another 6 months and then delete them or destroy any copies, unless we have concluded an employment contract with you. Should we wish to include your application documents in our pool of applicants, we will contact you. In the notification, you can actively consent to the further storage of your documents.
Please note that applications sent to us by e-mail are transmitted to us unencrypted. We therefore recommend using the online application portal.
c) Partner management
Within the framework of partner management, our partners can log into our protected partner area. With the conclusion of a contract/order, the relevant partner company receives the login data.
In the protected partner area, further services can be used via various links. In this case, you will be forwarded to the websites of our service providers, among others, and their data protection declarations will apply accordingly. Insofar as personal data is forwarded to the service providers before you leave our website, this takes place either on the basis of commissioned data processing or on the basis of our legitimate interest in accordance with Art. 6 I lit f) GDPR or on the basis of legal obligation in accordance with Art. 6 I lit c), as we are legally obliged to ensure the proper operation of our refinery.
The data collected in the partner area will be stored for as long as the partner relationship exists and then deleted after expiry of the statutory retention obligations.
d) Citizen telephone
When you contact us via the citizens' telephone, we record the data that you voluntarily provide to us during the telephone call and that are required for processing your specific enquiry. This data is stored for as long as its processing is required for these purposes or until the expiry of any subsequent retention periods.
e) Registration for events
On our homepage you can register for various events. You will be asked to provide personal data for the registration. The provision of data is voluntary (with the exception of your surname, first name, e-mail address and company) but is necessary in order to plan and implement the events.
For registration for the event, we process the following types of data: title, name, e-mail address, telephone number, mobile number, company affiliation, function, company address and, if applicable, your private address if you wish to be picked up for the event. After the end of the event or after expiry of the subsequent retention periods, we will delete your data if we no longer need it for the assertion, exercise or defence of legal claims.
9. Company presences ('fan pages') in social networks
a) YouTube
Social network: youtube.com
We would like to point out that YouTube is merely another of various options for contacting us or receiving information from us. Alternatively, the information offered via our fan page can also be accessed on our website at https://gunvor-raffinerie-ingolstadt.de, for example.
Person responsible with whom the Fanpage is jointly operated ('platform operator'):
Google LLC
1600 Amphitheatre Pkwy
Mountain View
CA, 94043 USA
Data controller for individuals living within the European Union/EEA and Switzerland:
Google Ireland Ltd.
Gordon House, Barrow Street,
Dublin 4
Irland
Contact details for data protection:
The contact details for data protection can be found in our data protection declaration or the data protection officer of the platform operator can be contacted using the following web form:
https://support.google.com/policies/contact/general_privacy_form
Categories of persons concerned:
Both registered and non-registered visitors to our fan page on the social network.
We point out to the data subjects that they use YouTube and its functions on their own responsibility. This applies in particular to the use of the interactive functions (e.g. sharing, rating).
Categories of personal data:
Data that we process from registered visitors to our fan page:
User ID under which you have registered, released profile data (e.g. name details, profession, addresses, contact details, possibly also special categories of personal data such as religious affiliation, health data, etc.), data that arise when sharing content, exchanging messages and communicating, data that are required as part of contract processing at the request of registered visitors.), data that arise when sharing content, exchanging messages and communicating, data that are required in the context of processing a contract at the request of registered visitors;
otherwise, we only process pseudonymised data such as statistics and insights into how people interact with our fan page, the posts, pages, videos and other content provided via it (page activities, page views, "like" votes, reach, general demographic, location and interest-related information on age, gender, country, city, language), evaluations on the success and background of our advertisements, other analyses and measurements on recruiting and information campaigns.
The pseudonymised data cannot be merged by us with the corresponding assignment feature (e.g. name details). This means that it is not possible for us to identify individual visitors, who therefore remain anonymous for us.
Data we process from non-registered visitors to our Fanpage:
Pseudonymised data such as statistics and insights into how people interact with our fan page, the posts, pages, videos and other content provided via it (page activity, page views, "likes", reach, general demographic, location and interest-related information on age, gender, country, city, language), evaluations of the success and background of our advertisements, other analyses and measurements for recruiting and information campaigns.
The pseudonymised data cannot be merged by us with the corresponding assignment feature (e.g. name details). This means that it is not possible for us to identify individual visitors, who therefore remain anonymous for us.
Data that the platform operator processes about registered and non-registered visitors to our fan page can be found in the following link:
https://policies.google.com/privacy/update?hl=de&gl=de
The platform operator may use various analysis tools for evaluation.
We have no influence on the use of such tools by the platform operator and have not been informed about such potential use. If tools of this kind are used by the platform operator for our fan page, we have neither commissioned nor approved this nor supported it in any other way. We are also not provided with the data obtained during the analysis. Moreover, we have no possibility to prevent or stop the use of such tools on our fan page, nor do we have any other effective control options.
Origin of the data
We receive the data from the data subjects directly or from the platform operator.
Where the platform operator obtains the data of the data subjects can be found in the following link: https://policies.google.com/privacy/update?hl=de&gl=de
Legal basis of the data processing
We process the data on the following legal basis:
- Art. 6 I lit. a) GDPR: Consent of the data subjects
- If applicable, Art. 6 I lit. b) GDPR: Fulfilment of a contract with the data subject or implementation of pre-contractual measures at the request of the data subject.
- Art. 6 I lit. f) GDPR legitimate interest
- Simplification of communication and data exchange, in the existing communication channels, such as the website, press releases, print products and events, are usefully supplemented by the fan page.
- Promoting sales of our products and services or demand, as well as recruiting young talent through transparent conduct and regular contributions to
- Optimisation of our Fanpage
We process special categories of personal data, if at all, only on the basis of the following legal grounds:
- Art. 9 II lit. a) GDPR: Consent of the data subject
- Art. 9 II lit. e) GDPR: The data subject has manifestly made the personal data public
The legal bases on which the platform operator bases the data processing can be found in the following link:
https://policies.google.com/privacy/update?hl=de&gl=de
If the data subjects are tracked by collecting their data, whether through the use of cookies or comparable techniques or by storing the IP address, the platform operator will obtain the consent of the data subjects in advance.
In particular, the platform operator is obliged to inform the data subjects for what purposes and on what legal basis the initial call-up of a fan page also generates entries in the so-called local storage for non-registered visitors and whether personal data of non-registered visitors (e.g. IP address or other data that condense into personal data) are also used to create profiles.
Purposes of data processing
The data will be processed for the following purposes:
- External presentation and advertising
- Communication and data exchange
- Event Management
- If necessary, contract initiation and execution
Information on the purposes for which the platform operator processes the data can be found in the following link:
https://policies.google.com/privacy/update?hl=de&gl=de
Storage period
The storage and deletion of the data is the duty of the platform operator. The information on this can be found in the following link:
https://policies.google.com/privacy/update?hl=de&gl=de
Recipient categories
Only our employees and service providers who manage our fan page and require the data for the above-mentioned purposes have access to the data we process. If the data subjects post their data publicly on our fan page, it can be accessed by other registered and possibly also non-registered visitors.
The categories of recipients to whom the platform operator discloses the data or enables registered visitors to disclose their data, as well as information on intra-group data exchange, can be found in the following link:
https://policies.google.com/privacy/update?hl=de&gl=de
Data transfers to third countries
If the data subjects post their data publicly on our fan page, it can be accessed worldwide by other registered and possibly also non-registered visitors.
The legal basis for the transfer are the EU standard contractual clauses pursuant to Art. 46 II lit. c GDPR. Additional measures to ensure a higher level of protection of personal data and effective legal protection for data subjects are currently in preparation.
The platform operator will transfer the data to the United States, Ireland and any other country in which Google does business and store and otherwise process it there, regardless of the residence of the data subjects. Associated data transfers to third countries are secured by an adequacy decision of the EU Commission pursuant to Art. 45 of the GDPR or by appropriate safeguards pursuant to Art. 46 of the GDPR:
https://policies.google.com/privacy/update?hl=de&gl=de
Involved logic and scope of profiling or automated individual decision-making based on the collected data
If the data subjects are tracked through the collection of their data, whether through the use of cookies or comparable techniques or through the storage of the IP address, the platform operator is obliged to inform them of this in accordance with the agreement within the meaning of Art. 26 (1) GDPR. In particular, the platform operator is obliged to inform the data subjects of the purposes and legal basis, after calling up a sub-page within our fan page, session cookies with different lifetimes, among other things, are stored.
The information on this can be found in the following link:
https://policies.google.com/privacy/update?hl=de&gl=de
The platform operator may use various analysis tools for evaluation.
We have no influence on the use of such tools by the platform operator and have not been informed about such potential use. If tools of this kind are used by the platform operator for our fan page, we have neither commissioned nor approved this nor supported it in any other way. We are also not provided with the data obtained during the analysis. Moreover, we have no possibility to prevent or stop the use of such tools on our fan page, nor do we have any other effective control options. .
Rights of the data subjects
Joint controllers must grant data subjects various rights regarding the processing of their data, which they can assert directly against the platform operator:
https://support.google.com/policies/troubleshooter/7575787?visit_id=636832497483186206-2169122297&hl=de&rd=2
Data subjects have a right to information, correction or deletion of personal data concerning them or a right to restriction of data processing by the controller if certain conditions are met in accordance with Art. 15 to Art. 18 of the GDPR. Data subjects also have the right to revoke their consent to the processing of their personal data at any time with effect for the future (Art. 7(3) GDPR). They may also object to the further processing of their data, which is based exclusively on the legitimate interest of the controller pursuant to Art. 6 (1) (f) GDPR (Art. 21 (1) GDPR), insofar as interests worthy of protection in the exclusion of data processing arise from their particular personal situation and there are no longer any compelling reasons worthy of protection for the controller to continue processing the data. Insofar as personal data are processed for the purpose of advertising, data subjects have the right to object to this processing at any time with effect for the future (Art. 21 (2) GDPR). If the data processing is based on the consent of the data subject pursuant to Art. 6 (1) (a), Art. 9 (1) (a) of the GDPR or pursuant to Art. 6 (1) (b) of the GDPR on a contract with the data subject, and is carried out with the aid of automated processes, the data subjects may, pursuant to Art. 20 (1) of the GDPR, request to receive the personal data stored about them in a structured, common and machine-readable format, or to have it transferred to a third party designated by the data subject.
In principle, data subjects have the right not to be subject to automated individual decision-making pursuant to Art. 22(1) GDPR. If such an automated individual decision is permissible pursuant to Art. 22(2)(a) to (c) GDPR, data subjects are granted the following rights pursuant to Art. 22(3) GDPR: right to express one's point of view, right to object to an individual's intervention by the controller, right to challenge the automated individual decision (right of appeal).
Further information on this social network as well as other social networks and how data subjects can protect their data can also be found here: https://www.youngdata.de/
Furthermore, data subjects have the right to lodge a complaint with a supervisory authority if they believe that the processing of their personal data violates the General Data Protection Regulation, Art. 77 GDPR. The competent supervisory authority for the platform operator is:
Data Protection Commission
21 Fitzwilliam Square, Dublin 2
D02 RD28, Ireland
Web address: https://www.dataprotection.ie/en/contact/how-contact-us
b) Xing and Kununu
Social netzwork: Xing: https://www.xing.com / Kununu: https://www.kununu.com/
We would like to point out that Xing / Kununu is merely another of various options for contacting us or receiving information from us. Alternatively, the information offered via our Xing account can also be accessed on our website at https://gunvor-raffinerie-ingolstadt.de, for example.
Person responsible with whom the Fanpage is jointly operated ('platform operator'):
New Work SE, Am Strandkai 1, 20457 Hamburg, Deutschland
In an agreement pursuant to Art. 26 (1) of the GDPR, it was determined between the joint controllers who fulfils which obligation pursuant to the GDPR.
We have no influence on whether or how the platform operator actually uses data (purpose, storage, deletion, disclosure, transmission, profiling). We also have no effective control options in this respect.
Contact details for data protection:
The platform operator's data protection officer can be contacted at the following web form https://www.xing.com/support/contact or at the following address:
New Work SE
Am Strandkai 1
20457 Hamburg
Deutschland Tel.: +49 40 419 131-0
Fax: +49 40 419 131-11
E-Mail: datenschutzbeauftragter@xing.com
Categories of persons concerned:
Visitors to our fan page who are registered on the social network as well as those who are not registered.
We point out to the data subjects that they use Xing / Kununu and its functions on their own responsibility. This applies in particular to the use of the interactive functions (e.g. sharing, rating).
Categories of personal data:
Data that we process from registered visitors to our fan page:
User ID or user name under which the data subjects have registered, released profile data (name, e-mail address, telephone number), ProFinder profile data, education, work experience, salary expectations, photo, location data, knowledge and knowledge confirmations, professional achievements (e.g. granting of patents, professional recognition, projects), possibly also special categories of personal data such as religious affiliation, health data etc., data arising from the sharing of content, exchange of messages and communication, data required for the initiation or execution of a contract at the request of registered visitors, other data and content freely published, provided, disseminated, posted or uploaded by the data subjects on Xing or via their Xing account.
Otherwise, we only process pseudonymised data such as statistics and insights into how people interact with our fan page, the posts, pages, videos and other content provided via it (page activities, page views, "like" votes, reach, general demographic, location and interest-related information on age, gender, country, city, language), evaluations of the success and background of our advertisements, other analyses and measurements relating to recruiting and information campaigns.
The pseudonymised data cannot be merged by us with the corresponding assignment feature (e.g. name details). This means that it is not possible for us to identify individual visitors, who therefore remain anonymous for us.
Data we process from non-registered visitors to our Fanpage:
Pseudonymised data such as statistics and insights into how people interact with our fan page, the posts, pages, videos and other content provided via it (page activity, page views, "likes", reach, general demographic, location and interest-related information on age, gender, country, city, language), evaluations of the success and background of our advertisements, other analyses and measurements for recruiting and information campaigns.
The pseudonymised data cannot be merged by us with the corresponding assignment feature (e.g. name details). This means that it is not possible for us to identify individual visitors, who therefore remain anonymous for us.
Data we process from our website visitors:
By integrating the Xing button (pure link) on our website, no IP addresses of our website visitors are transmitted to the platform operator.
Data that the platform operator processes about registered and non-registered visitors to our fan page can be found in the following link:
https://privacy.xing.com/de/datenschutzerklaerung
The platform operator may use various analysis tools for evaluation.
We have no influence on the use of such tools by the platform operator and have not been informed about such potential use. If tools of this kind are used by the platform operator for our fan page, we have neither commissioned nor approved this nor supported it in any other way. We are also not provided with the data obtained during the analysis. Moreover, we have no possibility to prevent or stop the use of such tools on our fan page, nor do we have any other effective control options.
Origin of the data
We receive the data from the data subjects directly or from the platform operator.
Where the platform operator obtains the data of the data subjects can be found in the following link: https://privacy.xing.com/de/datenschutzerklaerung
Legal basis of the data processing
We process the data on the following legal basis:
- Art. 6 I lit. a) GDPR: Consent of the data subjects
- If applicable, Art. 6 I lit. b) GDPR: Fulfilment of a contract with the data subject or implementation of pre-contractual measures at the request of the data subject.
- Art. 6 I lit. f) GDPR legitimate interest
- Simplification of communication and data exchange, in the existing communication channels, such as the website, press releases, print products and events, are usefully supplemented by the fan page.
- Promoting the sale of our products and services or demand as well as recruiting young talent through transparent conduct and regular contributions
- Optimisation of our Fanpage
We process special categories of personal data, if at all, only on the basis of the following legal grounds:
- Art. 9 II lit. a) GDPR: Consent of the data subject
- Art. 9 II lit. e) GDPR: The data subject has manifestly made the personal data public
The legal bases on which the platform operator bases the data processing can be found in the following link:
https://privacy.xing.com/de/datenschutzerklaerung
Purposes of data processing
We process the data for the following purposes:
- External presentation and advertising
- Communication and data exchange
- Event Management
- If necessary, contract initiation and execution
Information on the purposes for which the platform operator processes the data can be found in the following link: https://privacy.xing.com/de/datenschutzerklaerung
Storage period
The storage and deletion of the data is the duty of the platform operator. The information on this can be found in the following link: https://privacy.xing.com/de/datenschutzerklaerung
Recipient categories
Only our employees who manage our fan page and need the data for the above-mentioned purposes have access to the data we process. If the data subjects post their data publicly on our fan page, it can be accessed by other registered and possibly also non-registered visitors.
The categories of recipients to whom the platform operator discloses the data or enables registered visitors to disclose their data, as well as information on intra-group data exchange, can be found in the following link: https://privacy.xing.com/de/datenschutzerklaerung
Data transfers to third countries
If the data subjects post their data publicly on our fan page, it can be accessed worldwide by other registered and possibly also non-registered visitors.
Involved logic and scope of profiling or automated individual decision-making based on the collected data
If the data subjects are tracked through the collection of their data, whether through the use of cookies or comparable techniques or through the storage of the IP address, the platform operator is obliged to inform them of this. The information on this can be found in the following link:
https://privacy.xing.com/de/datenschutzerklaerung
The platform operator may use various analysis tools for evaluation.
We have no influence on the use of such tools by the platform operator and have not been informed about such potential use. If tools of this kind are used by the platform operator for our fan page, we have neither commissioned nor approved this nor supported it in any other way. We are also not provided with the data obtained during the analysis. Moreover, we have no possibility to prevent or stop the use of such tools on our fan page, nor do we have any other effective control options.
Rights of the data subjects
Joint controllers must grant data subjects various rights regarding the processing of their data, which they can assert directly against the platform operator:
Data subjects have a right to information, correction or deletion of personal data concerning them or a right to restriction of data processing by the controller if certain conditions are met in accordance with Art. 15 to Art. 18 of the GDPR. Data subjects also have the right to revoke their consent to the processing of their personal data at any time with effect for the future (Art. 7(3) GDPR). They may also object to the further processing of their data, which is based exclusively on the legitimate interest of the controller pursuant to Art. 6 (1) (f) GDPR (Art. 21 (1) GDPR), insofar as interests worthy of protection in the exclusion of data processing arise from their particular personal situation and there are no longer any compelling reasons worthy of protection for the controller to continue processing the data. Insofar as personal data are processed for the purpose of advertising, data subjects have the right to object to this processing at any time with effect for the future (Art. 21 (2) GDPR). If the data processing is based on the consent of the data subject pursuant to Art. 6 (1) (a), Art. 9 (1) (a) of the GDPR or pursuant to Art. 6 (1) (b) of the GDPR on a contract with the data subject, and is carried out with the aid of automated processes, the data subjects may, pursuant to Art. 20 (1) of the GDPR, request to receive the personal data stored about them in a structured, common and machine-readable format, or to have it transferred to a third party designated by the data subject.
In principle, data subjects have the right not to be subject to automated individual decision-making pursuant to Article 22(1) of the GDPR. If such an automated individual decision is permissible pursuant to Art. 22(2)(a) to (c) GDPR, data subjects are granted the following rights pursuant to Art. 22(3) GDPR: right to express one's point of view, right to object to an individual's intervention by the controller, right to challenge the automated individual decision (right of appeal).
Furthermore, data subjects have the right to lodge a complaint with a supervisory authority if they believe that the processing of their personal data violates the General Data Protection Regulation, Art. 77 GDPR. The competent supervisory authority for the platform operator is:
The Hamburg Commissioner for Data Protection and Freedom of Information:
Ludwig-Erhard-Str 22, 7. OG
20459 Hamburg
Tel.: 040 / 428 54 - 4040
Fax: 040 / 428 54 - 4000
E-Mail: mailbox@datenschutz.hamburg.de
c) LinkedIn
Social network: LinkedIn: https://de.linkedin.com/
We would like to point out that LinkedIn is merely another of various options for contacting us or receiving information from us. Alternatively, the information offered via our LinkedIn account can also be accessed on our website at https://gunvor-raffinerie-ingolstadt.de, for example.
Responsible party with whom our LinkedIn account ('Fanpage') is jointly operated ('Platform Operator'):
LinkedIn Corporation, 1000 W. Maude Avenue Sunnyvale, CA 94085 USA
Data controller for individuals living in the European Union (EU) and the European Economic Area (EEA) and Switzerland:
LinkedIn Ireland Unlimited Company
Wilton Place
Dublin 2
Ireland
In an agreement pursuant to Art. 26 (1) of the GDPR, it was determined between the joint controllers who fulfils which obligation pursuant to the GDPR.
The platform operator shall make the essential contents of this agreement available to the data subjects: https://legal.linkedin.com/pages-joint-controller-addendum
We have no influence on whether or how the platform operator actually uses data (purpose, storage, deletion, disclosure, transmission, profiling). We also have no effective control options in this respect.
Contact details for data protection:
The contact details for data protection can be found in our privacy policy.
You can contact the platform operator's data protection officer using the following web form https://www.linkedin.com/help/linkedin/ask/TSO-DPO.
Categories of persons concerned:
Both registered and unregistered visitors to our fan page on the social network.
We point out to the data subjects that they use LinkedIn and its functions on their own responsibility. This applies in particular to the use of the interactive functions (e.g. sharing, rating).
Categories of personal data:
Data that we process from registered visitors to our fan page:
User ID or user name under which the data subjects have registered, released profile data (name, e-mail address, telephone number), ProFinder profile data, education, work experience, salary expectations, photo, location data, knowledge and knowledge confirmations, professional achievements (e.g. granting of patents, professional recognition, projects), possibly also special categories of personal data such as religious affiliation, health data etc., data arising from content sharing, messaging and communication, data required in the context of contract initiation, execution at the request of registered visitors, other data and content freely published, provided, disseminated, posted or uploaded by data subjects on LinkedIn or via their LinkedIn account.
Otherwise, we only process pseudonymised data such as statistics and insights into how people interact with our fan page, the posts, pages, videos and other content provided via it (page activities, page views, "like" votes, reach, general demographic, location and interest-related information on age, gender, country, city, language), evaluations of the success and background of our advertisements, other analyses and measurements relating to recruiting and information campaigns.
The pseudonymised data cannot be merged by us with the corresponding assignment feature (e.g. name details). This means that it is not possible for us to identify individual visitors, who therefore remain anonymous for us.
Data we process from non-registered visitors to our Fanpage:
Pseudonymised data such as statistics and insights into how people interact with our fan page, the posts, pages, videos and other content provided via it (page activity, page views, "likes", reach, general demographic, location and interest-related information on age, gender, country, city, language), evaluations of the success and background of our advertisements, other analyses and measurements for recruiting and information campaigns.
The pseudonymised data cannot be merged by us with the corresponding assignment feature (e.g. name details). This means that it is not possible for us to identify individual visitors, who therefore remain anonymous for us.
Data we process from our website visitors:
By integrating the LinkedIn button (pure link) on our website, no IP addresses of our website visitors are transmitted to the platform operator.
Data that the platform operator processes about registered and non-registered visitors to our fan page can be found in the following link:
https://www.linkedin.com/legal/privacy-policy
The platform operator may use various analysis tools for evaluation.
We have no influence on the use of such tools by the platform operator and have not been informed about such potential use. If tools of this kind are used by the platform operator for our fan page, we have neither commissioned nor approved this nor supported it in any other way. We are also not provided with the data obtained during the analysis. Moreover, we have no possibility to prevent or stop the use of such tools on our fan page, nor do we have any other effective control options.
Origin of the data
We receive the data from the data subjects directly or from the platform operator.
Where the platform operator obtains the data of the data subjects can be found in the following link: https://www.linkedin.com/legal/privacy-policy.
Legal basis of the data processing
We process the data on the following legal basis:
- Art. 6 I lit. a) GDPR: Consent of the data subjects
- If applicable, Art. 6 I lit. b) GDPR: Fulfilment of a contract with the data subject or implementation of pre-contractual measures at the request of the data subject.
- Art. 6 I lit. f) GDPR legitimate interest
- Simplification of communication and data exchange, in the existing communication channels, such as the website, press releases, print products and events, are usefully supplemented by the fan page.
- Promoting the sale of our products and services or demand as well as recruiting young talent through transparent conduct and regular contributions
- Optimisation of our Fanpage
We process special categories of personal data, if at all, only on the basis of the following legal grounds:
- Art. 9 II lit. a) GDPR: Consent of the data subject
- Art. 9 II lit. e) GDPR: The data subject has manifestly made the personal data public
The legal bases on which the platform operator bases the data processing can be found in the following link:
https://www.linkedin.com/legal/privacy-policy
We have no influence or effective means of control over whether the data processing by the platform operator is permissible.
Purposes of data processing
We process the data for the following purposes:
- External presentation and advertising
- Communication and data exchange
- Event Management
- If necessary, contract initiation and execution
Information on the purposes for which the platform operator processes the data can be found in the following link: https://www.linkedin.com/legal/privacy-policy
Storage period
The storage and deletion of the data is the duty of the platform operator. The information on this can be found in the following link: https://www.linkedin.com/legal/privacy-policy.
Recipient categories
Only our employees who manage our fan page and need the data for the above-mentioned purposes have access to the data we process. If the data subjects post their data publicly on our fan page, it can be accessed by other registered and possibly also non-registered visitors.
The categories of recipients to whom the platform operator discloses the data or enables registered visitors to disclose their data, as well as information on intra-group data exchange, can be found in the following link: https://www.linkedin.com/legal/privacy-policy.
Data transfers to third countries
If the data subjects post their data publicly on our fan page, it can be accessed worldwide by other registered and possibly also non-registered visitors.
The legal basis for the transfer are the EU standard contractual clauses pursuant to Art. 46 (2) lit. c GDPR. Additional measures to ensure a higher level of protection of personal data and effective legal protection for data subjects are currently in preparation.
The platform operator will transfer the data to the United States, Ireland and any other country in which the platform operator does business and store and otherwise process the data there, regardless of the residence of the data subjects.
Associated data transfers to third countries are secured by an adequacy decision of the EU Commission pursuant to Article 45 of the GDPR or by appropriate safeguards pursuant to Article 46 of the GDPR:
https://www.linkedin.com/help/linkedin/answer/62533?trk=microsites-frontend_legal_privacy-policy&lang=de
Involved logic and scope of profiling or automated individual decision-making based on the collected data
If the data subjects are tracked through the collection of their data, whether through the use of cookies or comparable techniques or through the storage of the IP address, the platform operator is obliged to inform them of this. The information on this can be found in the following links:
https://www.linkedin.com/legal/privacy-policy
https://www.linkedin.com/help/linkedin/answer/3566?trk=microsites-frontend_legal_privacy-policy&lang=de
The platform operator may use various analysis tools for evaluation.
We have no influence on the use of such tools by the platform operator and have not been informed about such potential use. If tools of this kind are used by the platform operator for our fan page, we have neither commissioned nor approved this nor supported it in any other way. We are also not provided with the data obtained during the analysis. Moreover, we have no possibility to prevent or stop the use of such tools on our fan page, nor do we have any other effective control options.
Rights of the data subjects
Joint controllers must grant data subjects various rights regarding the processing of their data, which they can assert directly against the platform operator:
Data subjects have a right to information, correction or deletion of personal data concerning them or a right to restriction of data processing by the controller if certain conditions are met in accordance with Art. 15 to Art. 18 of the GDPR. Data subjects also have the right to revoke their consent to the processing of their personal data at any time with effect for the future (Art. 7(3) GDPR). They may also object to the further processing of their data, which is based exclusively on the legitimate interest of the controller pursuant to Art. 6 (1) (f) GDPR (Art. 21 (1) GDPR), insofar as interests worthy of protection in the exclusion of data processing arise from their particular personal situation and there are no longer compelling reasons worthy of protection for the controller to continue processing the data. Insofar as personal data are processed for the purpose of advertising, data subjects have the right to object to this processing at any time with effect for the future (Art. 21 (2) GDPR). If the data processing is based on the consent of the data subject pursuant to Art. 6 (1) (a), Art. 9 (1) (a) of the GDPR or pursuant to Art. 6 (1) (b) of the GDPR on a contract with the data subject, and is carried out with the aid of automated processes, the data subjects may, pursuant to Art. 20 (1) of the GDPR, request to receive the personal data stored about them in a structured, common and machine-readable format, or to have it transferred to a third party designated by the data subject.
In principle, data subjects have the right not to be subject to automated individual decision-making pursuant to Article 22(1) of the GDPR. If such an automated individual decision is permissible pursuant to Art. 22(2)(a) to (c) GDPR, data subjects are granted the following rights pursuant to Art. 22(3) GDPR: right to express one's point of view, right to object to an individual's intervention by the controller, right to challenge the automated individual decision (right of appeal).
- Data subjects can find information on the available personalization and data protection setting options here (with further references):
https://privacy.linkedin.com/de-de/faq - Further information on this social network as well as other social networks and how data subjects can protect their data can also be found here: https://www.youngdata.de/.
Furthermore, data subjects have the right to lodge a complaint with a supervisory authority if they believe that the processing of their personal data violates the General Data Protection Regulation, Art. 77 GDPR. The competent supervisory authority for the platform operator is:
Data Protection Commission
21 Fitzwilliam Square, Dublin 2
D02 RD28, Ireland
Webadresse: https://www.dataprotection.ie/en/contact/how-contact-us
d) Instagram
Social network: instagram.com
We would like to point out that Instagram is merely another of various options for contacting us or receiving information from us. Alternatively, the information offered via our fan page can also be accessed on our website, for example.
Person responsible with whom the Fanpage is jointly operated ('platform operator'):
Meta Platforms Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour
Dublin 2 Ireland
In an agreement pursuant to Art. 26 (1) of the GDPR, it was determined between the joint controllers who fulfils which obligation pursuant to the GDPR
The agreement within the meaning of Article 26 (1) of the GDPR can be found at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The platform operator shall make the essential contents of this agreement available to the data subjects.
We have no influence on whether or how the platform operator actually uses data (purpose, storage, deletion, disclosure, transmission, profiling). We also have no effective control options in this respect.
Contact details for data protection:
The contact details for data protection can be found in our data protection declaration or the data protection officer of the platform operator can be contacted using the following web form:
https://www.facebook.com/help/contact/540977946302970
Categories of persons concerned:
Both registered and unregistered visitors to our fan page on the social network
We point out to the data subjects that they use Instagram and its functions on their own responsibility. This applies in particular to the use of the interactive functions (e.g. sharing, rating).
Categories of personal data:
Data that we process from registered visitors to our fan page:
User ID under which you have registered, released profile data (e.g. name details, profession, addresses, contact details, possibly also special categories of personal data such as religious affiliation, health data, etc.), data that arise when sharing content, exchanging messages and communicating, data that are required as part of contract processing at the request of registered visitors.), data that arise when sharing content, exchanging messages and communicating, data that are required in the context of processing a contract at the request of registered visitors; otherwise, we only process pseudonymised data such as statistics and insights into how people interact with our fan page, the posts, pages, videos and other content provided via it (page activities, page views, "like" votes, reach, general demographic, location and interest-related information on age, gender, country, city, language), evaluations on the success and background of our advertisements, other analyses and measurements on recruiting and information campaigns.
The pseudonymised data cannot be merged by us with the corresponding assignment feature (e.g. name details). This means that it is not possible for us to identify individual visitors, who therefore remain anonymous for us.
Data we process from non-registered visitors to our Fanpage:
Pseudonymised data such as statistics and insights into how people interact with our fan page, the posts, pages, videos and other content provided via it (page activity, page views, "likes", reach, general demographic, location and interest-related information on age, gender, country, city, language), evaluations of the success and background of our advertisements, other analyses and measurements for recruiting and information campaigns.
The pseudonymised data cannot be merged by us with the corresponding assignment feature (e.g. name details). This means that it is not possible for us to identify individual visitors, who therefore remain anonymous for us.
Data that the platform operator processes about registered and non-registered visitors to our fan page can be found in the following link:
https://www.facebook.com/privacy/explanation
https://help.instagram.com/519522125107875
The platform operator may use various analysis tools for evaluation.
We have no influence on the use of such tools by the platform operator and have not been informed about such potential use. If tools of this kind are used by the platform operator for our fan page, we have neither commissioned nor approved this nor supported it in any other way. We are also not provided with the data obtained during the analysis. Moreover, we have no possibility to prevent or stop the use of such tools on our fan page, nor do we have any other effective control options.
Origin of the data
We receive the data from the data subjects directly or from the platform operator.
Where the platform operator obtains the data of the data subjects can be found in the following link:
https://www.facebook.com/privacy/explanation
https://help.instagram.com/519522125107875
Legal basis of the data processing
We process the data on the following legal basis:
- Art. 6 I lit. a) GDPR: Consent of the data subjects
- Art. 6 I lit. f) GDPR legitimate interest
- Simplification of communication and data exchange, in the existing communication channels, such as website, press releases, print products and events, are usefully supplemented by the fan page.
- Promoting sales of our products and services or demand, as well as recruiting young talent through transparent conduct and regular contributions to
- Optimisation of our Fanpage
We process special categories of personal data, if at all, only on the basis of the following legal grounds:
- - Art. 9 II lit. a) GDPR: Consent of the data subject
- Art. 9 II lit. e) GDPR: The data subject has manifestly made the personal data public
The legal bases on which the platform operator bases the data processing can be found in the following link:
https://www.facebook.com/about/privacy/legal_bases
https://help.instagram.com/519522125107875
If the data subjects are tracked by collecting their data, whether through the use of cookies or comparable techniques or by storing the IP address, the platform operator will obtain the consent of the data subjects in advance.
In particular, the platform operator is obliged to inform the data subjects for what purposes and on what legal basis the initial call-up of a fan page also generates entries in the so-called local storage for non-registered visitors and whether personal data of non-registered visitors (e.g. IP address or other data that condense into personal data) are also used to create profiles.
Purposes of data processing
The data will be processed for the following purposes:
- External presentation and advertising
- Communication and data exchange
- Event Management
Information on the purposes for which the platform operator processes the data can be found in the following link:
https://www.facebook.com/privacy/explanation
https://help.instagram.com/519522125107875
Storage period
The storage and deletion of the data is the duty of the platform operator in accordance with the agreement within the meaning of Art. 26 (1) GDPR. The information on this can be found in the following link:
https://www.facebook.com/privacy/explanation
https://help.instagram.com/519522125107875
Recipient categories
Only our employees who manage our fan page and need the data for the above-mentioned purposes have access to the data we process. If the data subjects post their data publicly on our fan page, it can be accessed by other registered and possibly also non-registered visitors.
The categories of recipients to whom the platform operator discloses the data or enables registered visitors to disclose their data, as well as information on intra-group data exchange, can be found in the following link:
https://www.facebook.com/privacy/explanation
https://help.instagram.com/519522125107875
Data transfers to third countries
If the data subjects post their data publicly on our fan page, it can be accessed worldwide by other registered and possibly also non-registered visitors.
The platform operator will transfer and store and otherwise process the data in the United States, Ireland and any other country where Facebook does business, regardless of the data subjects' residence.
Associated data transfers to third countries are secured by an adequacy decision of the EU Commission pursuant to Article 45 of the GDPR or by appropriate safeguards pursuant to Article 46 of the GDPR:
https://www.facebook.com/privacy/explanation
https://help.instagram.com/519522125107875
Involved logic and scope of profiling or automated individual decision-making based on the collected data
If the data subjects are tracked through the collection of their data, whether through the use of cookies or comparable techniques or through the storage of the IP address, the platform operator is obliged to inform them of this in accordance with the agreement within the meaning of Art. 26 (1) GDPR. In particular, the platform operator is obliged to inform the data subjects of the purposes and legal basis, after calling up a sub-page within our fan page, a session cookie and three cookies with lifetimes of between four months and two years are stored.
The information on this can be found in the following link:
https://www.facebook.com/privacy/explanation
https://www.facebook.com/policies/cookies/
https://help.instagram.com/519522125107875
The platform operator may use various analysis tools for evaluation.
We have no influence on the use of such tools by the platform operator and have not been informed about such potential use. If tools of this kind are used by the platform operator for our fan page, we have neither commissioned nor approved this nor supported it in any other way. We are also not provided with the data obtained during the analysis. Moreover, we have no possibility to prevent or stop the use of such tools on our fan page, nor do we have any other effective control options.
Rights of the data subjects
The joint controllers must grant the data subjects various rights with regard to the processing of their data, which they can assert directly against the platform operator on the basis of the agreement within the meaning of Article 26 (1) of the GDPR:
https://www.facebook.com/help/contact/540977946302970
Data subjects have a right to information, correction or deletion of personal data concerning them or a right to restriction of data processing by the controller if certain conditions are met in accordance with Art. 15 to Art. 18 of the GDPR. Data subjects also have the right to revoke their consent to the processing of their personal data at any time with effect for the future (Art. 7(3) GDPR). They may also object to the further processing of their data, which is based exclusively on the legitimate interest of the controller pursuant to Art. 6 (1) (f) GDPR (Art. 21 (1) GDPR), insofar as interests worthy of protection in the exclusion of data processing arise from their particular personal situation and there are no longer any compelling reasons worthy of protection for the controller to continue processing the data. Insofar as personal data are processed for the purpose of advertising, data subjects have the right to object to this processing at any time with effect for the future (Art. 21 (2) GDPR). If the data processing is based on the consent of the data subject pursuant to Art. 6 (1) (a), Art. 9 (1) (a) of the GDPR or pursuant to Art. 6 (1) (b) of the GDPR on a contract with the data subject, and is carried out with the aid of automated processes, the data subjects may, pursuant to Art. 20 (1) of the GDPR, request to receive the personal data stored about them in a structured, common and machine-readable format, or to have it transferred to a third party designated by the data subject.
In principle, data subjects have the right not to be subject to automated individual decision-making pursuant to Article 22(1) of the GDPR. If such an automated individual decision is permissible pursuant to Art. 22(2)(a) to (c) GDPR, data subjects are granted the following rights pursuant to Art. 22(3) GDPR: right to express one's point of view, right to object to an individual's intervention by the controller, right to challenge the automated individual decision (right of appeal).
- Further information on this social network as well as other social networks and how data subjects can protect their data can also be found here: https://www.youngdata.de/
Furthermore, data subjects have the right to lodge a complaint with a supervisory authority if they believe that the processing of their personal data violates the General Data Protection Regulation, Art. 77 GDPR. The competent supervisory authority for the platform operator is:
Data Protection Commission
21 Fitzwilliam Square, Dublin 2
D02 RD28, Ireland
Web address: https://www.dataprotection.ie/en/contact/how-contact-us