DATA PRIVACY STATEMENT

DATA PRIVACY STATEMENT

General information

We are very delighted that you have shown interest in our enterprise. Data protection is of a particularly high priority for us.
The use of our Website is possible without any indication of personal data; however, if a data subject wants to use special enterprise services via our website, processing of personal data could become necessary. If the processing of personal data is necessary and there is no statutory basis for such processing, we generally obtain consent from the data subject.

The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations. By means of this data protection declaration, our enterprise would like to inform the general public of the nature, scope, and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed, by means of this privacy policy, of the rights to which they are entitled.

Data security

We also make use of appropriate technical and organizational security measures to protect your data from accidental or deliberate manipulation, partial or complete loss, destruction and access by unauthorized third parties. We continuously improve our security measures in line with the latest technological developments.

All the data you submit to us will be transferred and encrypted using the customary and secure TLS (Transport Layer Security) standard. A secure TLS connection is indicated by the addition of the letter “s” to “http” (i.e. “https://...”) in your browser address bar or a lock symbol at the bottom of your browser.

Name and Address of the Controller

This privacy statement applies to the processing of data on the www.wkv-ag.com by the following data controller:

Wasserkraft Volk Aktiengesellschaft
Am Stollen 13
D-79261 Gutach

Vorstand: Franziskus Rettenbacher / CEO
Aufsichtsrat: Manfred Volk (Vorsitzender)

Tel.: +49 7685-9106-0
Fax: +49 7685-9106-10
E-Mail: sales(at)wkv-ag.com
Web: www.wkv-ag.com

Personal data processing and processing purposes

When you visit our website

You can visit the website www.wkv-ag.com without being required to disclose information about your identity. Only the information needed to establish a connection to our website will be automatically sent to our website’s server from your device’s browser.

Each time a user connects to our website, our website will collect a series of general pieces of data and information. This general data and information will be stored in our server’s log files. The following details may be collected:

  • (a) the browser types and versions used,
  • (b) the operating system of the device accessing our website,
  • (c) the webpage from which a system is accessing our website (known as the referrer),
  • (d) the subpages on our website being accessed by the system,
  • (e) the dates and times of when our website has been accessed,
  • (f) the Internet Protocol address (IP address),
  • (g) the internet service provider of the system accessing our website,
  • (h) any other similar pieces of data and information that can be used to protect our services in the event of an attack on our information technology systems.

We do not draw any conclusions about users when using this general data and information. Instead, we use this information to:

  • (a) ensure that the content on our website is displayed correctly,
  • (b) optimize our web content and the advertising for our website,
  • (c) ensure that our information technology systems and our website’s technology remain in full working order, and
  • (d) provide law-enforcement authorities with the information needed to prosecute offenders in the event of a cyberattack.

We therefore evaluate this anonymously collected data and information firstly for statistical purposes and secondly in order to provide better data protection and data security with the ultimate aim of ensuring an optimum level of protection for the personal data we process. The anonymous data saved in the server log files is stored separately from all the personal data provided by a data subject.

Data is deleted as soon as we no longer need it to fulfill the purpose for which it was collected. In the case of data collected to enable operation of the website, this deletion occurs when the user’s browsing session comes to an end.

IP addresses are processed for technical and administrative purposes so that we can establish a stable connection, keep our website secure and in full working order, and — if necessary — trace any unlawful attacks on our website.

The legal basis for processing IP addresses is Article 6 Paragraph 1 Sentence 1 (f) GDPR. Our legitimate interest results from the aforementioned security requirements and the necessity to provide a fully functional website.

In processing your IP address and other information in the log files, we are unable to draw any direct conclusions about your identity.

When you contact us through email or contact form

Our website includes a contact form, which you can use to contact us electronically. Should you choose to use this option, the data you enter into the contact form will be transferred to us and stored. When completing this form, you will be asked to provide your consent for us to process this data and you will be referred to this privacy statement. Alternatively, you can contact us at the email address provided. In this case, we will store the personal data provided to us in the email. This data will not be transferred to third parties and will exclusively be used for the processing of any communication.

We only process the personal data entered into the contact form in order to handle your inquiry. Your choosing to contact us via email also constitutes the necessary legitimate interest on our part to process your data.

The other personal data we process during this procedure is used to prevent the contact form from being misused and to keep our information technology systems secure.

We process your personal data upon your submission of an inquiry. This data processing is based on our legitimate interests within the scope of responding to an inquiry in accordance with Article 6 Paragraph 1 Sentence 1 (f) GDPR. Data is deleted as soon as we no longer need it to fulfill the purpose for which it was collected. Personal data entered into our contact form and for data sent by email will be deleted as soon as we have finished communicating with you about your inquiry. This communication is deemed to be finished when it is apparent from the circumstances that the matter being discussed has been completely resolved.

You may withdraw your consent to the processing of your personal data at any time. In such cases, we will no longer be able to continue communicating with you. All personal data stored as a result of your inquiry will be deleted. For more information, please see the section on Rights of data subjects.

When you subscribe to our newsletter

You have various opportunities to subscribe to our newsletter on our website.

Provided that you have given your express consent in accordance with Article 6 Paragraph 1 Sentence 1 (a) GDPR, we will use your email address to send you information in line with your preferences at regular intervals. To receive this information, all you need to do is provide us with your email address and select your desired language version.

You may be given the opportunity to enter additional optional personal data (e.g. name, address and telephone number). We will use this data to contact you by phone or post. After registering, you will receive an email asking you to confirm your subscription so that you can be sent the newsletter. This is known as the double opt-in process. This provides us with proof that the registration process was initiated by you.

You can unsubscribe at any time, e.g. by clicking on the link at the end of each press newsletter. Alternatively, you can inform us at any time of your wish to unsubscribe by sending an email to sales(at)wkv-ag.com.

Your email address will be deleted as soon as you withdraw your consent to receive our newsletter. For more information, please see the section on Rights of data subjects.

Legal Basis for Data Processing

The legal basis for the processing of personal data is your consent pursuant to Art. 6 (1) (a) GDPR. You are then able to provide further personal data voluntarily or to permit third parties to transfer these to us and to store these with us for use in the context of using our services, in particular where you provide consent to the transfer of such personal data to third parties for the purpose of registering with third parties or the administration of your legal relationship to these third parties.

The basis for data processing is further Art. 6 (1) (b) GDPR, which allows us the processing of data to fulfill a contract or for measures preliminary to a contract. In the context of our agreement with you, we also process personal data in order to show you use that has already taken place in the recent past and to make corresponding suggestions for further use. The legal basis for the processing of such Data is Art. 6 (1) (b) GDPR, since such processing is necessary for the performance of the agreement entered into between you and us.

Finally, the basis for data processing in case of a justified interest is Art. 6 (1) (f) GDPR. We have a legitimate interest in analyzing user behavior to optimize both its website and its advertising. The website operator has a legitimate interest in analyzing anonymous user behavior for promotional purposes. We also process personal data in your and our interest in order to ensure the integrity, trustworthiness and availability of the data processing systems, i.e. in particular the security and availability of your personal data. The legal basis for the processing of such personal data is Art. 6 (1) (f) GDPR; our legitimate interest is the maintenance and the secure provision of our services.

Transfer of personal data to third parties

Except for in the cases specified above (subscription to our newsletter), we only transfer your personal data to third parties if: - you have given your express consent to this in accordance with Article 6 Paragraph 1 Sentence 1 (a) GDPR, - this is necessary for the performance of a contract to which you are party in accordance with Article 6 Paragraph 1 Sentence 1 (b) GDPR, - if we have a legal obligation to transfer the data in accordance with Article 6 Paragraph 1 Sentence 1 (c) GDPR.

Transfer of data to third countries

Insofar as we process data in a third country (i.e. outside of the European Union (EU), the European Economic Area (EEA) or the Swiss Confederation) or if this takes place as a result of us making use of third-party services or disclosing or transferring data to other individuals or companies, we ensure that we only do so in order to perform a contract or take steps prior to entering into a contract, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual authorization, we only process data or arrange to have data processed in a third country when the legal requirements are met. This means, for example, that the processing takes place on the basis of special guarantees, such as the officially recognized determination that the level of data protection is equivalent to that which is provided in the EU, or in compliance with officially recognized special contractual obligations.

Deletion and Term of Storage

We process and store your personal data only for the time necessary to achieve the stated purpose (unless otherwise stated in this Privacy Policy) and as permitted under the applicable laws or regulations. As soon as the purpose for data storage is achieved, or the appropriate term of storage provided for by any applicable laws or regulations expires, your personal data will be deleted unless your personal data are required for the formation of or performance under a contract.

Cookies

Our website uses cookies. Cookies are text files which are placed and stored on a computer system via a web browser.

Cookies are used on lots of websites and servers. Many cookies contain a unique identifier called a cookie ID. This consists of a string of characters which links webpages and servers to the specific web browser on which the cookie is stored. This enables the webpages and servers visited to differentiate between the data subject’s browser and other web browsers on which other cookies are stored. A specific web browser can be recognized and identified using the unique cookie ID.

Cookies enable us to provide visitors to our site with more user-friendly features, which we would not be able to offer without the use of cookies. We use cookies to optimize the information and services on our website in line with the user’s requirements. As mentioned above, cookies allow us to recognize our website’s users. The purpose of this recognition is to make our website easier to use. For example, visitors to a website which uses cookies do not have to re-enter their login data each time they visit the website because this is automatically taken from the cookie stored on the user’s computer system and entered into the website.

Some of the cookies we use are deleted as soon as the browser session comes to an end, i.e. when the user closes their browser. These cookies are known as session cookies. Other cookies remain on the user’s device and enable us or our partner companies to recognize the user’s browser the next time the user visits our website. These cookies are known as persistent cookies.

Data subjects can, at any time, prevent our website from placing cookies on their device by changing the settings in their web browser, permanently objecting to the placement of cookies. Furthermore, cookies which have already been placed on a device can be deleted at any time via a web browser or other software program. This is possible in all commonly used web browsers. If the data subject disables the placement of cookies in their web browser, they may not be able to make full use of all our website’s features.

Web analysis and advertising

Google Analytics

Wir haben auf unserer Webseite die Komponente Google Analytics (mit Anonymisierungsfunktion) integriert. Google Analytics ist ein Web-Analyse-Dienst. Web-Analyse ist die Erhebung, Sammlung und Auswertung von Daten über das Verhalten von Besuchern von Internetseiten. Ein Web-Analyse-Dienst erfasst unter Anderem Daten darüber, von welcher Internetseite eine betroffene Person auf eine Internetseite gekommen ist (sogenannte Referrer), auf welche Unterseiten der Internetseite zugegriffen oder wie oft und für welche Verweildauer eine Unterseite betrachtet wurde. Eine Web-Analyse wird überwiegend zur Optimierung einer Internetseite und zur Kosten-Nutzen-Analyse von Internetwerbung eingesetzt.

The operator of Google Analytics is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

We use Google Analytics to analyze our website with the extension “_gat._anonymizeIp”. When our website is accessed from a Member State of the European Union or another state party to the Agreement on the European Economic Area, Google uses this extension to abbreviate and anonymize the IP address allocated to the data subject’s internet connection. The purpose of using the Google Analytics service is to analyze the flow of visitors on our website. Google uses the data and information collected to analyze how our website is used, to compile online reports on our behalf about activities performed on our website and to provide other services concerning the use of our website.

Google Analytics places a cookie on the data subject’s information technology system. Please see above for a definition of cookies. The placement of this cookie enables Google to analyze how our website is used. Each time that a connection is made to one of the individual pages on this website, which is operated by us and into which Google Analytics has been integrated, Google Analytics will trigger the web browser on the data subject’s information technology system to transfer data to Google for the purpose of the online analysis. During this technical process, Google acquires knowledge of personal data, such as the data subject’s IP address, which, for example, allows Google to trace the origin of visitors and clicks and subsequently account for a commission. The cookie is used to store personal information, such as the access time, the location from which the website was accessed and the frequency of visits to our website by the data subject. Each time our website is visited, this personal data, including the IP address of the data subject’s internet connection, is transferred to Google in the United States of America. This personal data is stored by Google in the USA. Google may pass the personal data collected through this technical process to third parties.

As described above, data subjects can, at any time, prevent our website from placing cookies on their device at any time by changing the settings in their web browser and permanently objecting to the placement of cookies. By adjusting their web browser in this way, data subjects can also prevent Google from placing a cookie on their information technology system. Furthermore, a cookie which has already been placed on a device by Google Analytics can be deleted at any time via the web browser or another software program.

The data subject can also object to and prevent data which is generated by Google Analytics and relates to the use of this website from being collected and processed by Google. To do this, the data subject must download and install a browser add-on available at tools.google.com/dlpage/gaoptout. This browser add-on uses JavaScript to inform Google Analytics that it is forbidden to transfer data and information about visits to websites to Google Analytics.

Google will consider the installation of the browser add-on as an objection to the use of Google Analytics. If the data subject’s information technology system is subsequently deleted, formatted or reinstalled, the data subject must reinstall the browser add-on to disable Google Analytics. If the browser add-on is uninstalled or disabled by the data subject or another person who has control over it, it is possible to reinstall or reactivate the browser add-on.

For further information and to view Google’s privacy policy, please visit policies.google.com/privacy and www.google.com/analytics/terms/us.html

Please see marketingplatform.google.com/about/ to find out more about Google Analytics.

As an alternative to installing the browser add-on or if you are using a mobile web browser, please click on the following link to place an opt-out cookie which will prevent Google Analytics from collecting data on this website in future. This opt-out cookie only works in this browser and for this domain. If you delete the cookies in this browser, you will need to click on the link again: Disable Google Analytics for this website.

Facebook-Pixel

Wir setzen auf unserer Webseite die Funktion „Facebook-Pixel“ des Unternehmens Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland ein. Mit dem Facebook-Pixel können wir die Besucher unserer Webseite in bestimmte Zielgruppen einordnen, um Ihnen auf Facebook entsprechende Werbung anzeigen („Ads“) lassen zu können.

Die erfassten Daten (z.B. IP-Adressen, Informationen zum Webbrowser) sind für uns selbst nicht einsehbar, sondern nur im Rahmen der Anzeige bestimmter Werbeanzeigen nutzbar. Im Rahmen des Einsatzes des Facebook-Pixel-Codes werden auch sogenannte Cookies gesetzt. Informationen zur Datenverarbeitung durch Facebook finden Sie auf https://www.facebook.com/policy.php und https://www.facebook.com/about/privacy.

Wir setzten diese Funktionen ein, um Ihnen passende Werbeangebote unterbreiten zu können. Wir holen zuvor Ihre Einwilligung beim Aufruf unserer Webseiten über das Cookie-Constent-Tool ein, Art. 6 Abs. 1 lit. a DSGVO. Daten werden von Facebook werden auch in die USA übermittelt und dort verarbeitet.

Plugins and tools

YouTube

Our website uses plugins from YouTube, which is operated by Google. The operator of the pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. Here the YouTube server is informed about which of our pages you have visited.

If you’re logged in to your YouTube account, YouTube allows you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used to help make our website appealing. This constitutes a justified interest pursuant to Article 6 Paragraph 1 Sentence 1 (f) GDPR.

Further information about handling user data, can be found in the data protection declaration of YouTube under www.google.de/intl/de/policies/privacy.

Vimeo

Our website uses features provided by the Vimeo video portal. This service is provided by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

If you visit one of our pages featuring a Vimeo plugin, a connection to the Vimeo servers is established. Here the Vimeo server is informed about which of our pages you have visited. In addition, Vimeo will receive your IP address. This also applies if you are not logged in to Vimeo when you visit our website or do not have a Vimeo account. The information is transmitted to a Vimeo server in the US, where it is stored.

If you are logged in to your Vimeo account, Vimeo allows you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your Vimeo account. For more information on how to handle user data, please refer to the Vimeo Privacy Policy at: vimeo.com/privacy.

Social Media Presence

We have a presence on several social media platforms, for example through fan pages. This allows us to provide information about us and to get in touch with you. Please note that we have no influence over how your personal data is used on these platforms. Only the operator of each platform has full knowledge of the content of the transmitted data and its use.

As a rule, cookies are stored in your browser when you visit a social media platform.

This can occur even if you are not a member of that particular platform. We have no knowledge of whether your data is transferred outside the European Economic Area.

Any processing of personal data carried out by us on social media platforms is on the basis of Article 6 Paragraph 1 Sentence 1 (f) GDPR. Our legitimate interest is based on presenting us to the outside world in a variety of ways and using the opportunity to communicate with our customers as effectively as possible.

The legal basis may also constitute your consent to data processing pursuant to Article 6 Paragraph 1 Sentence 1 (a) GDPR if you have previously given this to the operator of the social media platform.

The privacy policies of the respective operators provide detailed information about how they process your data, how you can object to the processing of your data, your rights with regard to your data, and other specific information:

Facebook
Supplier: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Privacy policy: https://www.facebook.com/about/privacy/
Cookie information: www.facebook.com/policies/cookies/

Specific information about Facebook fan pages: When you visit our Facebook fan page, Facebook processes your personal data (Facebook Insights). This data is transmitted to us anonymously by Facebook as part of Facebook Insights. This anonymous data comprises statistical data about our fan page subscribers. In addition, Facebook provides us with profile information when you interact with us or our page, such as linking or commenting on posts, writing to us via Facebook, or following our page.

LinkedIn
Supplier: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Privacy policy: www.linkedin.com/legal/privacy-policy
Opt-Out: www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Specific information about LinkedIn company pages: When you visit our LinkedIn business page, LinkedIn processes your personal data. This data is transmitted to us anonymously by LinkedIn as part of LinkedIn Analytics. This anonymous data comprises statistical data on our followers. In addition, LinkedIn provides us with your profile name when you interact with us or our page, such as linking or commenting on posts or following our page.

Twitter
Supplier: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland
Privacy policy: twitter.com/privacy
Opt-Out: twitter.com/personalization

Specific information about Twitter business profile: When you visit our Twitter business profile, Twitter collects your personal data. This data is transmitted to us anonymously by Twitter as part of Twitter Analytics. This anonymous data comprises statistical data on our followers. In addition, Twitter shares your profile name with us when you interact with us, our profile, or our tweets, for example by linking, retweeting, replying to, or following our page.

Xing
Supplier: XING SE, Dammtorstrasse 30, 20354 Hamburg, Germany
Privacy policy: privacy.xing.com/de/datenschutzerklaerung

Specific information about Xing’s business profile: When you visit our Xing business profile, Xing collects your personal data. In addition, Xing shares your profile name with us when you interact with us or our profile, such as linking or commenting on posts or following our page.

YouTube
Supplier: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Privacy policy: policies.google.com/privacy
Cookie information: policies.google.com/technologies/ads
Opt-Out: adssettings.google.com/anonymous

Specific information about YouTube accounts or channels: When you visit our YouTube channel, YouTube collects your personal data. This data is transmitted to us anonymously by YouTube as part of YouTube STUDIO usage. This anonymous data comprises statistical data about our channel subscribers. In addition, YouTube shares the username of your profile with us when you interact with us or our channel, such as linking or commenting on videos or subscribing to our channel.

Rights of data subjects

You have the right:

- to withdraw your previously given consent at any time pursuant to Article 7 Paragraph 3 GDPR. This means that we may no longer continue processing the data which we were processing on the basis of this consent;

- to obtain information about your personal data which we have processed pursuant to Article 15 GDPR. In particular, you have the right to access information about the purposes of processing; the category of personal data; the categories of recipient to whom your data has been or will be disclosed; the envisaged storage period; the existence of a right to rectification, erasure, restriction of or objection to processing, and the lodging of a complaint; the source of your data if we did not collect it; and the existence of automated decision-making, including profiling, and, if applicable, meaningful information about this process;

- to obtain without undue delay the rectification of inaccurate personal data concerning you and stored by us or the completion of such data pursuant to Article 16 GDPR;

- to obtain the erasure of personal data concerning you and stored by us pursuant to Article 17 GDPR, unless processing is necessary for exercising the right of freedom of expression and information, for complying with a legal obligation, for reasons of public interest or for establishing, exercising or defending legal claims;

- to obtain the restriction of processing of your personal data in accordance with Article 18 GDPR if the accuracy of the personal data is contested by you, the processing is unlawful but you do not wish for your data to be deleted, we no longer need the data but you require it for the establishment, exercise or defense of legal claims, or you have objected to the processing pursuant to Article 21 GDPR;

- to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit this data to another controller pursuant to Article 20 GDPR;

- to object, pursuant to Article 21 GDPR, on grounds relating to your particular situation and at any time to processing of your personal data which is based on Article 6 Paragraph 1 (e) GDPR (data processing in the public interest) and Article 6 Paragraph 1 (f) GDPR (data processing on the basis of the consideration of interests); this also applies to profiling based on these provisions as defined in Article 4 (4) GDPR. If you make an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing is taking place for the establishment, exercise or defense of legal claims. If you object to processing for direct marketing purposes, we will stop processing your data immediately. In such cases, no particular situation needs to be indicated. This also applies to profiling to the extent that it is related to such direct marketing. If you would like to exercise your right to object, please simply send an email to sales(at)wkv-ag.com;

- to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR. As a general rule, you can lodge a complaint with the supervisory authority in your habitual place of residence, your place of work or our registered office.

Updates and amendments to this privacy statement

This privacy statement is up to date and was last amended in May2021.

We may need to amend this privacy statement following updates to our website and offers or due to changes in the law or official requirements. You can always view and print the latest version of our privacy statement on our website at