Wintershall Dea is delighted that you have visited our website and thanks you for your interest in our company.
- Which information is collected by Wintershall Dea when you visit our website
- For what purposes is this information processed
- What is the legal basis for processing personal data
- Which recipients receive the personal data
- When and how do we use Google Analytics
- How long is the personal data stored
- Whether you are required to provide us with personal data
In addition, we would like to inform you about:
- Your rights regarding the data processing carried out
- Who is responsible in accordance with data protection law and, if available, the contact details of our Data Protection Officer
1. Which information is collected by Wintershall Dea when you visit this website?
(1) If you visit our website for informative purposes (i.e., not by registering or contacting us), the following information will automatically be transmitted from your browser to our server:
- IP address of your computer
- Information about your browser
- Name of the website from which you visit us
- Name of the visited landing page address (URL) or the accessed file
- Date and time of your visit
- Transferred data volumes
- Status information such as error messages
(2) If you contact us by email, we will receive the following information:
- Your email address and other information which you submit to us in your email
- Date and time of your contact
2. To what extent does Wintershall Dea process the aforementioned data and for what purposes?
(1) If you visit the Wintershall Dea website, we will use the IP address and the other data transmitted automatically from your browser to our server in accordance with Section 1 (1) in order to:
a) provide you with the requested content. We store the full IP address only as long as this is technically necessary to show you the requested page.
b) protect us from attacks and to ensure the proper operation of our website. We store the aforementioned data temporarily and access-protected for a maximum of 7 days.
Wintershall Dea will only attempt to find out who is behind an IP address in cases of unlawful attacks.
(2) If you contact us by email, we will use the personal data referred to in Section 1 (2) in order to reply to and accord with your request as far as is possible. This personal data will be stored for as long as is necessary to answer and respond to your request.
3. Are you obligated to provide us with this data? Can you object to its use?
When visiting our website, the information referred to in Section 1 (1) will be transmitted automatically from your browser to our server. The transmission of this information is voluntary. Without the provision of this personal data we cannot show you the requested page.
If you wish to contact us and send us an email, the transmission of the information according to Section 1 (2) will be voluntary. Without the provision of personal data required in individual cases, we may not be able to answer your request in the best possible way.
4. What is the legal basis for processing your personal data?
The legal basis for processing your personal data as set out in Section 2 is Article 6 (1), first sentence, (f) of the General Data Protection Regulation. Wintershall Dea's legitimate interest in these processing activities derives from the purposes set out in Section 2 above.
5. With whom do we share your personal data?
The personal data referred to in Section 1 is passed on to processors based in the European Union for the purposes set out in Section 2. The processing takes place on our behalf and according to our instructions. We do not intend to transfer your personal data to a third country.
6. When and how do we use Google Analytics?
The legal basis for the data processing is Article 6 (1), first sentence, subparagraph (a) of the General Data Protection Regulation. You provide consent for the web analysis by Google Analytics by clicking on "OK" on our website in our cookie banner. Without this consent, no web analytics cookies will be set by Google Analytics.
The transfer of your information to the United States is covered by an adequacy decision adopted by the European Commission pursuant to Article 45 of the General Data Protection Regulation. Google is committed to adhering to the principles of the EU-US Privacy Shield and acts as a processor pursuant to Article 28 of the Data Protection Regulation.
Additional privacy information on Google Analytics can be found at the Google Analytics Help Center at https://support.google.com/analytics/answer/6004245?hl=de.
You are not obligated to allow us to use your anonymised data for web analysis. If you have consented to the use of the web analysis by Google Analytics on our website, you can revoke your consent and prevent the further use of your – already anonymised – data by Google Analytics by clicking on the button below. However, this only applies to the use of Google Analytics on our website. Cookies already set by Google Analytics will then be blocked and will remain until their expiration date (see Section 8) or until they are manually deleted by you from your personal browsing history. By clicking on the button below, no further information will be sent to Google. This has no consequences for you. You can continue to visit our website.
7. How do we secure your personal data?
Wintershall Dea uses technical and organisational security measures to protect your personal data from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security measures are continuously revised in line with technological developments.
8. Are cookies used on our website?
We would like to inform you about which cookies we use and how you can prevent the setting of our cookies.
(1) The following cookies are important for the smooth operation and specific services of our website*:
(2) We use the following cookies to measure the use of our website if you have consented to the web analytics by Google Analytics on our website*:
_gali | Is used to map links. | Is deleted after 1 minute
_ga | Used to distinguish users. | Will be erased 24 months after your visit
_gat | This cookie is used to throttle the request rate. | Is deleted after 1 minute
_gid | Used to distinguish users. | Will be erased 24 hours after your visit
*Cookie | Purpose | End-of-life
9. What are your rights?
You are granted specific rights under the General Data Protection Regulation:
9.1. Right of access:
9.2 Right to rectification:
If your personal data is incorrect or incomplete, you have a right to have it rectified;
9.3 Right to erasure:
On the basis of the so-called "right to be forgotten", you can demand the erasure of your personal data unless there is a duty of retention. The right to erasure is not an unqualified right. We are entitled, for example, to continue processing your personal data if such processing is required in order to comply with our legal obligations or to establish, exercise or defend legal claims;
9.4 Right to restriction of processing:
This right includes restricting the usage or the manner of the usage. This right is limited to specific cases and applies in particular when: (a) the data is incorrect; (b) the processing is unlawful and you oppose the erasure; (c) we no longer require the data but you need the data to establish, exercise or defend your rights. If processing is restricted, we may continue to store but not use the data. We keep a list of those who have exercised their right to restrict processing in order to ensure this restriction;
9.5 Right to data portability:
In accordance with this right we will, if technically possible, transmit your personal data in a structured, commonly used and machine-readable format for your own purposes;
9.6 Right to object:
You may object to the processing of your personal data if it is processed on the basis of legitimate interests, in particular for direct marketing purposes;
9.7 Right to be informed:
You have the right to be informed in a clear and easy-to-understand language about how we process your personal data;
9.8 Right to revoke your consent:
If you have given us your consent to processing, you have the right at any time to revoke your consent. Such a revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.
It does not cost you anything to exercise these rights. However, you must prove your identity with two factors. We will use reasonable efforts in accordance with our legal obligations to transfer, rectify or erase your personal data in our file systems.
In order to exercise your rights, file a complaint or submit any other request, please contact us by email or write to us. We will try to reply to you within 30 days. The contact details can be found in Section 11. In addition, you can revoke your consent to the web analysis by Google Analytics by clicking the button in Section
If we receive a complaint, we will contact the person who filed the complaint to investigate the complaint. If we cannot resolve a complaint immediately, we will work with the authorities, especially the data protection authorities, as needed.
If you are not satisfied with the processing of a complaint regarding your personal data, you can submit your complaint to the relevant data protection authority.
10. Where can you complain?
You have the right to lodge a complaint with the Controller (for contact details see Section 11 below) or with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, which in Norway will be:
Or, you can contact the leading supervisory authority for the BASF group:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Hintere Bleiche 34
11. Who is Controller?
You can find the Controller in the meaning of data protection laws here (https://wintershalldea.com/en/data-protection).
Please use the address of the Controller above, or the following address to contact our Data Protection Co-Ordinator:
Data Protection Co-ordinator in Wintershall Norge AS
Jåttaflaten 27, 4020 Stavanger, Norway
+ 47 98 22 21 03
12. Data protection for minors
This website is aimed at people who are at least 18 years old. We do not want to collect personal data from anyone under the age of 18.
Persons under the age of 18 should therefore not submit any personal data to or through this website. If such persons submit personal data through this website, we will erase the data and will not process it as soon as we become aware that they are minors.
We are conducting video surveillance at our premises for security and monitoring purposes. The legal basis for this, is the balancing of interests according to GDPR article 6 no 1 letter f and that we have a legitimate interest to secure and monitor our premises. Film and images from the surveillance will be kept for seven days and will thereafter automatically be deleted. If incidents occur, film or image documentation can be kept up to 30 days, before they are deleted automatically (unless they are used in a criminal case or otherwise processed for other lawful purposes).