Data Protection

Wintershall Dea is delighted that you have visited our website and thanks you for your interest in our company.

Data protection is a top priority at Wintershall Dea. We would therefore like to inform you in detail about the following Privacy Policy aspects:

  • Which information is collected by Wintershall Dea when you visit our website
  • For what purposes is this information processed
  • What is the legal basis for processing personal data
  • Which recipients receive the personal data
  • When and how we use Matomo
  • How we incorporate YouTube videos
  • How long is the personal data stored
  • Whether you are required to provide us with personal data

In addition, we would like to inform you about:

  • Your rights regarding the data processing carried out
  • Who is responsible in accordance with data protection law and, if available, the contact details of our Data Protection Officer.

1. Which information is collected by Wintershall Dea when you visit this website?

(1)  If you visit our website for informative purposes (i.e. not by registering or contacting us), the following information will automatically be transmitted from your browser to our server:

  • IP address of your computer
  • Information about your browser
  • Name of the website from which you visit us
  • Name of the visited landing page address (URL) or the accessed file
  • Date and time of your visit
  • Transferred data volumes
  • Status information such as error messages

(2)  If you contact us by email, we will receive the following information:

  • Your email address and other information which you submit to us in your email or via fields in a contact form
  • Date and time of your contact

2. To what extent does Wintershall Dea process the aforementioned data and for what purposes

(1)  If you visit the Wintershall Dea website, we will use the IP address and the other data transmitted automatically from your browser to our server in accordance with Section 1 (1) in order to:

a)     provide you with the requested content. We store the full IP address only as long as this is technically necessary to show you the requested page.

b)    protect us from attacks and to ensure the proper operation of our website. We store the aforementioned data temporarily and access-protected for a maximum of 7 days.

Wintershall Dea will only attempt to find out who is behind an IP address in cases of unlawful attacks.

(2)   We save the IP address of your computer after we have truncated it by the last sextet – in other words, anonymised – in order to analyse the usage behaviour of visitors to our website and hence improve our website. The aforementioned truncation of the IP address for this purpose is carried out immediately after it has been captured. We therefore do not collect any personal information about your usage behaviour on our website.

(3)  If you contact us via a contact form on our website or by email, we will use the personal data referred to in Section 1 (2) in order to reply to and accord with your request as far as is possible. This personal data will be stored for as long as is necessary to answer and respond to your request.

3. Are you obligated to provide us with this data? Can you object to its use?

When visiting our website, the information referred to in Section 1 (1) will be transmitted automatically from your browser to our server. The transmission of this information is voluntary. Without the provision of this personal data we cannot show you the requested page. 

You are not obligated to allow us to use your anonymised data for web analysis. Nor are you obligated to allow us to compare your IP address with your company data. You are not obligated to watch YouTube videos.

If you wish to contact us and send us an email or use our contact form, the transmission of the information according to Section 1 (2) will be voluntary. If a contact form contains mandatory fields, these will be marked as such. Without the provision of personal data required in individual cases, we may not be able to answer your request in the best possible way.

4. What is the legal basis for processing your personal data?

The legal basis for processing your personal data as set out in Section 2 is Article 6 (1), first sentence, (f) of the General Data Protection Regulation. Wintershall Dea’s legitimate interest in these processing activities derives from the purposes set out in Section 2 above.

5. With whom do we share your personal data?

The personal data referred to in Section 1 is passed on to processors based in the European Union for the purposes set out in Section 2. The processing takes place on our behalf and according to our instructions. We do not intend to transfer your personal data to a third country.

6. When and how do we use Matomo for data analysis?

Provided that you have consented to the use of web analytics with Matomo on our website, we use cookies that generate information according to Section 1 (1) of this Privacy Policy to enable us to analyse the use of the website by you. These cookies help us to recognise recurring users and analyse their behaviour on our website (for example, which pages the users come from or which pages they have accessed) in order to improve our website. The web analytics service software Matomo ( is used. This is a service provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, (“Matomo”). The data is collected and saved based for optimisation and marketing purposes. This data can be used for the same purpose to produce and analyse anonymised usage profiles. Cookies can be used for this purpose. Cookies are small text files that are stored locally in the visitor’s Internet browser cache. The cookies also enable the Internet browser to be identified again. The data collected using the Matomo technology (including your anonymised IP address) are processed on our servers. The information generated by the cookie in the anonymous user profile is not used to personally identify the visitor to this website and not merged with personal data about the bearer.   

The IP address of your computer will not be saved until it has been truncated by the last sextet immediately after being captured, i.e. anonymised. Only then will the information generated by the cookies as part of Matomo be transmitted to a Matomo server in New Zealand and stored there. We therefore do not collect any personal information about your usage behaviour on our website. Your IP address will not be merged with other Matomo data.

The legal basis for the data processing is Article 6 (1), first sentence, subparagraph (a) of the General Data Protection Regulation. You provide consent for the web analysis by Matomo by clicking on “OK” on our website in our cookie banner. Without this consent, no web analytics cookies will be set by Matomo.

The transfer of your information to New Zealand is covered by an adequacy decision adopted by the European Commission pursuant to Article 45 of the General Data Protection Regulation. Matomo is committed to adhering to the principles of the EU-US Privacy Shield and acts as a processor pursuant to Article 28 of the Data Protection Regulation.

More information about data privacy at Matomo can be found at

You are not obligated to allow us to use your anonymised data for web analysis. If you have consented to the use of the web analysis by Matomo on our website, you can revoke your consent and prevent the further use of your – already anonymised – data by Matomo by clicking on the button below. However, this only applies to the use of Matomo on our website. Cookies already set by Matomo will then be blocked and will remain until their expiration date (see Section 8) or until they are manually deleted by you from your personal browsing history. By clicking on the button below, no further information will be sent to Matomo. This has no consequences for you. You can continue to visit our website.

7. How are YouTube videos dealt with?

7.1. Data processing

We have integrated YouTube videos into our online offering, which are stored on the YouTube platform and can be played directly from our website. YouTube is a service of Google LLC, D / B / A YouTube. 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter referred to as “Google”). The videos are all embedded in the so-called “two-click solution”, which means that no data about you as a user is sent to Google if you do not activate the video function. Before the video function is activated, only a preview image loaded from our own web server will be displayed.

Data will only be sent to Google if you activate such video functions. Once activated, we have no influence on this data transfer. The data is transferred irrespective of whether Google provides a user account that you are logged into or no user account exists. If you are logged into Google, your data will be assigned directly to your account.

7.2 Purposes and legal basis

We use YouTube videos on our website to present them to you in an easy way.

The legal basis for processing your personal data is your consent according to Article 6 (1) sentence 1 a) of the GDPR. You grant this consent by activating the video function. If it is activated, your personal data will be sent to Google, as described above.

During the data transfer to Google, your personal data will be transferred to Google servers that may also be located in the USA. The USA is a country without a data protection level that is commensurate with EU standards. This means in particular that it is simple for the US authorities to access personal data and that there are only limited rights to such measures. If you activate the YouTube video function, you expressly consent to the transfer of data to Google and to the transfer of your personal data to servers in the USA.

If you have given your consent, you have the right to revoke it at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

By clicking on the button below, no further information will be sent to YouTube. This has no consequences for you. You can continue to visit our website.

7.3 Further information

Further information on data processing, in particular on the legal basis and storage period of Google, can be found in the provider’s privacy policy ( and in the privacy banner on the YouTube platform. Here you will also find further information on your rights and setting options to protect your privacy.

Google may also process your personal information in the USA, a third country without adequate data protection.

8. How do we secure your personal data?

Wintershall Dea uses technical and organizational security measures to protect your personal data from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security measures are continuously revised in line with technological developments.

9. Are cookies used on our website?

When you visit our website, we point out in our “Cookie Notice Banner” that we use cookies. By using our website, you agree to our use of cookies.

We would like to inform you about which cookies we use and how you can prevent the setting of our cookies.

(1)  The following cookies are important for the smooth operation and specific services of our website*:

_cookieagreed & _cookie-agreed-categories | This cookie stores information as to whether you agree with the use of cookies and Matomo and/or YouTube on our website. In addition, information is saved as to whether you have revoked your consent to the use of Matomo and/or YouTube. | It is deleted as soon as you clear your browser cache (or seven days after your visit)

*Cookie | Purpose | End-of-life

(2) We use the following cookies to measure the use of our website if you have consented to the web analytics by Matomo on our website:

(3) YouTube sets the following cookies when you watch YouTube videos:

YSC | Used to distinguish users in order to obtain statistics on the YouTube videos that the user has watched. | session

You can configure your browser setting according to your wishes and decide which cookies you want to allow and which cookies you want to reject. Please note that if you do not allow the use of cookies referred to in Section 9 (1), you may not be able to use all the features of our website.

10. What are your rights?

You are granted specific rights under the General Data Protection Regulation:

10.1. Right of access:

You have a right to obtain information about your personal data processed by us and certain other information (such as those given in this Privacy Policy);

10.2 Right to rectification:

If your personal data is incorrect or incomplete, you have a right to have it rectified;

10.3 Right to erasure:

On the basis of the so-called “right to be forgotten”, you can demand the erasure of your personal data unless there is a duty of retention. The right to erasure is not an unqualified right. We are entitled, for example, to continue processing your personal data if such processing is required in order to comply with our legal obligations or to establish, exercise or defend legal claims;

10.4 Right to restriction of processing:

This right includes restricting the usage or the manner of the usage. This right is limited to specific cases and applies in particular when: (a) the data is incorrect; (b) the processing is unlawful and you oppose the erasure; (c) we no longer require the data but you need the data to establish, exercise or defend your rights. If processing is restricted, we may continue to store but not use the data. We keep a list of those who have exercised their right to restrict processing in order to ensure this restriction;

10.5 Right to data portability:

In accordance with this right we will, if technically possible, transmit your personal data in a structured, commonly used and machine-readable format for your own purposes;

10.6 Right to object:

You may object to the processing of your personal data if it is processed on the basis of legitimate interests, in particular for direct marketing purposes;

10.7 Right to be informed:

You have the right to be informed in a clear and easy-to-understand language about how we process your personal data;

10.8 Right to revoke your consent:

If you have given us your consent to processing, you have the right at any time to revoke your consent. Such a revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.

It does not cost you anything to exercise these rights. However, you must prove your identity with two factors. We will use reasonable efforts in accordance with our legal obligations to transfer, rectify or erase your personal data in our file systems.

In order to exercise your rights, file a complaint or submit any other request, please contact us by email or write to us. We will try to reply to you within 30 days. The contact details can be found in Section 11. In addition, you can revoke your consent to the web analysis by Matomo by clicking the button in Section 6.

If we receive a complaint, we will contact the person who filed the complaint to investigate the complaint. If we cannot resolve a complaint immediately, we will work with the authorities, especially the data protection authorities, as needed.

If you are not satisfied with the processing of a complaint regarding your personal data, you can submit your complaint to the relevant data protection authority.

11. Where can you complain?

You can file a complaint with the Data Protection Officer named in this Privacy Policy (contact details below) or with a supervisory authority, in particular in the member state where you are resident, have your place of work, or where the alleged infringement took place. You can also contact:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Hessen (Federal State Commissioner for Data Protection and Freedom of Information in Hesse)

Postfach 3163
65021 Wiesbaden
Phone: +49 611 1408 - 0
Fax: +49 611 1408 - 900 / 901

12. Who is responsible for data processing and who is our Data Protection Officer?

The person responsible for the data processing can be found here.

The contact details of our Data Protection Officer are:

Wintershall Dea
Data Protection Officer
Friedrich-Ebert-Strasse 160
34119 Kassel, Germany

+49 561 301 0

13. Data protection for minors

This website is aimed at people who are at least 18 years old. We do not want to collect personal data from anyone under the age of 18.

Persons under the age of 18 should therefore not submit any personal data to or through this website. If such persons submit personal data through this website, we will erase the data and will not process it as soon as we become aware that they are minors.

Office Visits

We are conducting video surveillance at our premises for security and monitoring purposes. The legal basis for this, is the balancing of interests according to GDPR article 6 no 1 letter f and that we have a legitimate interest to secure and monitor our premises. Film and images from the surveillance will be kept for seven days and will thereafter automatically be deleted. If incidents occur, film or image documentation can be kept up to 30 days, before they are deleted automatically (unless they are used in a criminal case or otherwise processed for other lawful purposes).