Our use of your data and your rights – Information in accordance with Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)
This Data Privacy Statement applies to the collection, processing and use of your personal data when you use our website www.haidach.gazprom-germania.at.
The issue of data protection has a high priority at GAZPROM Germania GmbH, Austria Branch (hereinafter referred to as “we” or “GAZPROM Germania”). We therefore want to let you know how we implement data protection at our company, as well as about the information we record whenever you visit our website, how it is used, and what rights you have. Please note that your personal data will be used exclusively for the purposes described below and will not be processed otherwise or elsewhere without your consent.
The controller responsible for processing your personal data is:
GAZPROM Germania GmbH, Markgrafenstraße 23, 10117 Berlin, Phone +49 (0)30 20195-0, Fax +49 (0)30 20195-313, Email: firstname.lastname@example.org
2. Data Protection Officer
You can contact our Data Protection Officer at:
WINGAS GmbH, Data Protection Officer, Königstor 20, 34117 Kassel; Phone: +49 561 99858 0; Fax: +49 561 99858 1798; E-Mail: email@example.com
3. What data do we process and from what sources?
We process personal data you provide voluntarily or is gathered as part of use of our website.
The data is supplies on a voluntary basis. However, various processes will be delayed or may even become impossible, if you do not provide your personal data.
You can find more information on this subject in Section II “Processing of personal data.”
4. For what purpose do we process your data and what is the legal basis for that?
We process your personal data in compliance with the relevant data protection regulations, in particular the General Data Protection Regulation (GDPR) and Data Protection Act (DSG), for various purposes. In principle, the purposes for which we process your data are: to perform contractual obligations (Article 6 paragraph 1 point (b) GDPR), to safeguard legitimate interests (Article 6 paragraph 1 point (f) GDPR), for processing subject to your prior consent (Article 6 paragraph 1 point (a) GDPR) and/or to comply with statutory obligations (Article 6 paragraph 1 point (c) GDPR).
You can find more information on this subject in Section II “Processing of personal data.”
5. Who obtains my data?
Service providers whom we engage to work on our behalf (termed “processors”; cf. Article 4 No. 8 GDPR) may obtain personal data. We use the following processors or processor categories:
- IT service providers
In principle, we do not pass on personal data to third parties who process personal data under their own responsibility (termed “controllers”; cf. Article 4 No. 7 GDPR). We pass on your data to controllers only if you explicitly request that by selecting an external recipient using our contact form. In such a case, we pass on the relevant personal data to the selected GAZPROM Germania company.
You can find more details on this subject in Section II “Processing of personal data.”
GAZPROM Germania can transfer personal data to affiliated companies inside the European Economic Area to a permissible extent, provided there are legitimate interests for doing so and statutory regulations are complied with. Those companies are: WINGAS GmbH, Wingas Sales GmbH, Wingas Holding GmbH and Gazprom Marketing & Trading Ltd. Personal data is transferred to OOO Gazprom Export in Russia or PAO Gazprom in Russia as affiliated companies outside the European Economic Area (third country) on the basis of a standard data protection clause within the meaning of Article 46 GDPR. You can obtain a copy of that to inspect. To do so, please contact the controller or your Data Protection Officer specified in Section I, No. 1 and 2.
6. Data retention
We process your personal data only for as long as required to fulfill the purpose for which it is processed.
Moreover, we are subject to various retention and documentation obligations under legislation such as the Commercial code and tax provisions. The retention periods under the law may be up to 10 years.
Finally, the storage duration is also governed by the statutory limitation periods, which may be up to thirty years with the standard limitation period being three years.
7. Your rights
Every data subject has the right to access personal data and obtain information (Article 15 GDPR), the right to rectification of data (Article 16 GDPR), the right to erasure of data (Article 17 GDPR), the right to restriction of processing (Article 18 GDPR), and the right to data portability (Article 20 GDPR). You can get in touch with us under the contact data specified in Section I “General information”, No. 1 and No. 2, to exercise the aforementioned rights.
If you have given us consent to process your data, you can revoke it at any time without using a special form. Revocation has no impact on the lawfulness of processing of data which took place earlier based on your consent. Where possible, notice of revocation should be sent to us using the contact data specified in Section I “General information”, No. 1 or No. 2.
Furthermore, you have a right to issue a complaint with a data protection supervisory authority (Article 77 GDPR). The supervisory authority responsible for GAZPROM Germania is:
Austrian Data Protection Authority (DSB)
You also have a right to object to the processing of your data, as explained in more detail at the end of this Data Privacy Statement.
8. Links to other websites
As the provider of this website, we are responsible for its content. However, we have no influence on whether the sites linked to our website comply with the applicable data protection regulations. We assume no liability for the content of external websites. We are responsible for our own content only. This content may differentiate from links to content provided by other providers, for which we cannot accept responsibility and do not present as our own content. The provider of the external website in question holds sole liability for damages caused by incorrect or illegal content on their website.
You can set your browser so that you are notified when cookies are placed and can decide whether to accept them on a case-by-case basis or to exclude acceptance of cookies for specific cases or in general. You can delete cookies that have already been placed. If you do not accept cookies, the features of our website may be restricted.
Personal data is processed using cookies on the basis of Article 6 paragraph 1 point (f) GDPR. The purpose of processing your data and our legitimate interests are to enhance the features of our website.
2. Automatic collection of access data/server log files
Whenever you visit our website, the following data record is stored each time the site or a page is called:
- The name of the user’s Internet service provider
- The name of the user’s Internet browser
- The time and date of the visit
- The amount of data transferred
- The user’s IP address
- A description of the user’s Internet browser- The name of the accessed file
- Referrer-URL (the previous webpage)
- The operating system
- Notification of a successful data access, errors or unauthorized access
Personal data in log files is processed on the basis of Article 6 paragraph 1 point (f) GDPR. The purpose of processing your data and our legitimate interests are to simplify administration of our website and to enable us to detect and prosecute hacking. The information is ultimately analyzed in anonymized form.
3. Contacting us
Our Internet site contains a form that you can use to contact us electronically. You may also contact us using the e-mail addresses provided. If you contact us using one of these channels, the personal data you enter and send are automatically processed.
The personal data processed comprises the master data you enter in the contact form if you use it (name, first name, title, company, email address; street, city, zip code) and possibly further personal data you enter in the “Your message” box.
If you contact us directly by e-mail, we record your e-mail address and, if applicable, any personal data from the e-mail’s text.
If your contract request is addressed to a GAZPROM Germania company other than GAZPROM Germania, we pass on your request to that GAZPROM Germania company, which will then deal with it.
Data is processed on the basis of Article 6 paragraph 1 point (f) GDPR. The purpose of processing your data and our legitimate interests are to provide customer care and support, as well as to be able to answer messages and mails sent to us.
Information on your right to object to processing span>
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6 paragraph 1 point (f) GDPR (data processing based on a weighing of interests), including any profiling based on those provisions within the meaning of Article 4 No. 4 GDPR.
If you object, we will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
Your objection can be submitted without using a special form and, where possible, should be sent using the contact data specified in Section I “General information”, No. 1 and No. 2, of this Data Privacy Statement.
Ongoing development of the Internet means that we will need to amend this Data Privacy Statement from time to time. We reserve the right to make such changes at any time.