• EN

    • The following information applies to our presence on the following social media channels and is supplementary to our general Privacy Statement:

    We attach great importance to protecting personal data. Therefore, we process your data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the other applicable statutory provisions on the protection of personal data and data security.

    It provides you with an overview of what personal data we collect from you through our website, and for what purposes and in what way we use such data. In addition, we provide you with information about the rights you have in relation to your personal data.

    1. CONTROLLER UNDER DATA PROTECTION LAW

    STEAG Energy Services GmbH
    Rüttenscheider Str. 1-3
    Germany

    energyservices@steag.com 
    www.steag-energyservices.com 
     

    2. CONTACT DETAILS OF OUR DATA PROTECTION OFFICER

    STEAG GmbH
    Group Data Protection Officer
    Rüttenscheider Straße 1-3
    45128 Essen
    Germany

    datenschutz@steag.com 
     

    3. PROCESSING OF YOUR DATA

    The processing of data will be carried out generally within a member state of the European Union (EU) or within a member state of the European Economic Area (EEA). Transfer of personal data to a third country or access to such data from a third country shall only take place if the special requirements of Art. 44 ff. GDPR are satisfied (e.g., by agreement of Standard Contractual Clauses or if the recipient acts on a legal basis adopted by the European Commission pursuant to Art. 45 (1) GDPR (so-called “adequacy decision”)).

    However, certain particularities apply to the use of social media channels. We would like to point out that we are not able to identify all processing steps on the social media channels. Depending on the provider, data processing may be carried out by the operators of the social media channels over which we have no control and of which we gain no knowledge and, in particular, no data from you. For details, please refer to the terms of use and data protection policies of the respective social media channels. These can be found under Legal basis and consent withdrawal option at the end of this section.

    Insofar as we have control over the processing of your data, we ensure that the applicable data protection provisions are complied with as described.


    Joint responsibility according to Art. 26 DSGVO:
    According to the European Court of Justice (ECJ), we and the provider of the respective social media channel are jointly responsible for the processing of your personal data. To the extent that the social media channels process personal data based on our instructions, the social media channels process your personal data as our processors and under our responsibility. The addresses of our processors can be found under “Recipients of the data”.

    You use these channels and their functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating). Please note that your data may be processed outside the European Union. Unfortunately, this is currently not possible in a data protection compliant manner.

    Note: Transfer of data to the USA
    We would like to point out that in its ruling of July 16, 2020 (Case C-311/18), the ECJ held the EU-US Privacy Shield agreement on the permissible transfer of data between the EU and the USA to be inadmissible and that personal data cannot currently be transferred to the USA in a data protection-compliant manner. The reason for this is existing legislation in the USA, which gives the security authorities far-reaching powers to monitor "foreign communications". We hereby expressly draw your attention to this risk.


    Scope of processing
    If you use the options for contacting us on these social media channels, we process the data and information you provide in order to process your request, the reason for your contact, and to answer your questions. In particular, this involves your identification data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. entries made in online forms), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).

    The social media channels provide our company with statistical data, so-called “page insights”, which give us information about user activities on our company websites.


    Purposes of processing
    Through the aforementioned portals, we offer you the opportunity to inform yourself about our company and our products and to contact us. In addition, we use the social media channels to ensure the broadest possible presence on the Internet.


    Recipient
    The recipient of the data is the respective social media channel as processor:

    • Instagram (Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA)
    • Kununu (NEW WORK AUSTRIA, XING kununu Prescreen GmbH, Schottenring 2-6, A - 1010 Wien)
    • Linkedin (Linkedln Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)
    • Twitter (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland)
    • Youtube (ein Dienst der Google Ireland Limited Gordon House, Barrow Street Dublin 4 Irland)

    Depending on the recipient, processing of personal data in countries outside the European Union, in particular in the USA, cannot be ruled out. Under certain circumstances, this may entail the risk for the individual user that it will be more difficult to enforce his or her rights.


    Storage period
    The personal data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for storing it no longer applies, you request us to delete it, or you withdraw your consent to its storage. Stored cookies remain on your terminal device until you delete them.

    We have no influence on the storage period of your data that is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, the links to which can be found at the end of this section).


    Legal basis, withdrawal of consent
    We process your personal data on the basis of our legitimate interests in informing you about our company and providing you with an understanding of our products and services, as well as opening up communication with us for this purpose (GDPR Art. 6 para 1 sentence 1 lit. f). The analysis processes initiated by the social media channels may be based on different legal grounds, which are to be specified by the operators of the social media channels (e.g. consent within the meaning of GDPR Art. 6 para 1 sentence 1 lit. a).

    For a detailed description of the respective processing and the opt-out possibilities for the aforementioned services, please refer to the privacy policies of:

    Since we do not have complete access to your personal data, you should contact the providers of the social media channels directly when asserting your rights (see section “Your rights”), as they have access to the personal data of their users in each case and can take appropriate measures and provide information.

    If you still need help, we will of course endeavor to support you. Please contact datenschutz@steag.com.

    4. YOUR RIGHTS

    You have a right of access, i.e. you may request that we disclose to you all your personal information that we have collected and hold for a certain period of time (Art. 15 GDPR). Furthermore, you may also request rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR) and have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG).

    Where we process your personal data on the basis of your consent, you can withdraw this consent at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent prior to your withdrawal of consent, but prevents future processing.

    Notices of withdrawal of consent and other requests can be addressed to our Group Data Protection Officer.

    We take your inquiries and concerns very seriously and always endeavor to address them.

    Furthermore, you have the right to lodge a complaint with a data protection supervisory authority pursuant to Article 77 GDPR in conjunction with Section 19 BDSG. In North Rhine-Westphalia, the competent data protection supervisory authority is: Landesbeauftragte für Datenschutz und Informationsfreiheit (State Commissioner for Data Protection and Freedom of Information), North Rhine-Westphalia Kavalleriestr. 2 – 4, 40213 Düsseldorf, Germany.

     

    Last updated: January 2022