Privacy

Data protection in the Umweltgerechte Kraftanlagen (UKA) Group

The protection of your personal data is an important concern of ours that we take into account in our business processes. We treat your personal data confidentially and in accordance with all relevant legal requirements. Accordingly, you will find information on this page regarding what data we collect from you when you visit our website, what we need this data for and how you can object to data collection. Transparency, self-determination and information security form an integral part of our corporate policy.

 

Party responsible for data processing

UKA Umweltgerechte Kraftanlagen GmbH & Co. KG
Dr.-Eberle-Platz 1
D-01662 Meißen

Phone: +49 (0)3521 72806-0
Fax: +49 (0)3521 72806410
info~.~uka-group.SPAMPROTECTION.com
www.uka-gruppe.de

Contacting our data protection officer

You can contact our data protection officer using the details below:

UKA Umweltgerechte Kraftanlagen GmbH & Co. KG
- Datenschutzbeauftragter (Data Protection Officer) -
Dr.-Eberle-Platz 1
D-01662 Meißen
Phone: +49 (0)3521 72806-0
datenschutz~.~uka-gruppe.SPAMPROTECTION.de

Personal data that is processed independently or by third parties when visiting this website includes access data (server log files) as well as usage data (e.g. visited websites, access times) and meta/communication data (e.g. IP addresses).

It is also possible to use this website without disclosing personal data. Further storage of your personal data therefore only takes place if you provide this information voluntarily when visiting our website (e.g. via the Area Testing contact form, subscription to the press newsletter).This particularly includes your master and contact data (e.g. name, address, email, telephone numbers) as well as the data that you provide when contacting us (e.g. text entries, document uploads).

Your personal data is processed for the purpose of providing our website, including its functionality and content. This includes responding to contact requests and communicating with visitors to our website, as well as website analysis for marketing purposes. The visitors and users of our website are affected by the aforementioned processing activities.

Each time you visit our website, we or our hosting provider collect and store the following information:

• IP address
• Browser used
• Time and date and the site visitor’s operating system

We only store anonymized IP addresses of visitors to this website. At web server level, this is achieved by saving an IP address in the form 123.123.123.XXX as standard in the log file instead of the visitor’s actual IP address, where XXX is a random value between 1 and 254. This makes it impossible to relate the IP address to a specific individual.

This data is evaluated by us or our hosting provider for statistical and security purposes, as well as to optimise our website. The processing carried out by our hosting provider takes place in the scope of order processing under Art. 28 GDPR. The following retention periods apply:

• Server log files: 7 days
• Backups: 14 days in encrypted form

The legal basis for data processing is Art. 6(1)(f) GDPR, which permits processing on the basis of our legitimate interest in the efficient and secure provision of our website. You can object to the pseudonymous use of your data at any time (for more information on your rights in connection with the processing of your personal data, please refer to Section 4: Your rights in connection with your personal data).

Our Group’s website uses so-called ‘cookies’. Cookies are small text files that are stored on your end device (PC, tablet, smartphone, etc.). Cookies contain a unique ID number (a so-called ‘cookie ID’) that consists of a unique character string. Servers and websites can be allocated to the specific internet browser in which the cookie is stored. A specific internet browser can be recognized and identified based on this unique cookie ID. Among other things, cookies store website settings that boost a website’s user-friendliness and effectiveness.

1.2.1 Google Analytics

Our website uses features of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called ‘cookies’ (text files stored on your computer) to analyze your use of this website. The information generated by these cookies about your use of this website is generally transmitted to a Google server in the USA and stored there. We have concluded a data processing agreement with Google and fully implement the requirements of the German data protection authorities for the use of Google Analytics. Google will use this information on our behalf to analyze your use of the website, compile reports on website activity and provide additional services related to the use of the website and the internet. You will find more information on Google’s terms of service and privacy policy at http://www.google.com/analytics/terms/gb.html and https://policies.google.com/?hl=en.

IP anonymization

We have activated IP anonymization on our website. Within the member states of the European Union or in other countries party to the Agreement on the European Economic Area, your IP address will therefore be shortened by Google before it is transmitted to the USA. Only in exceptional cases will your full IP address be transmitted to a Google server in the USA and shortened there. Google will under no circumstances link the IP address transmitted by your browser to any other data held about you.

Transfer to third countries

The personal data will be transferred to the USA under the EU-US Privacy Shield on the basis of the European Commission's adequacy decision. This means that Google guarantees compliance with European data protection laws. The certificate can be viewed at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI.

Duration of data retention

The data sent by us and linked with cookies, user IDs or advertising IDs is automatically deleted after 14 months. Data that reaches the end of its retention period is automatically deleted once a month.

Legal grounds

The legal basis for the use of Google Analytics is your consent pursuant to Art. 6(1) sentence 1(a) GDPR, provided that you have consented to the use of Google Analytics via the cookie notice when accessing the website (opt-in). Tracking is only activated after you have given your consent and not before.

Rights of the data subject

You may revoke your consent at any time with effect for the future by preventing the storage of cookies for the future. To do this, you have the following options:

Browser settings / browser plugin:

 

You can prevent cookies from being stored by adjusting the relevant settings in your browser or by installing a suitable browser extension (plugin), however, this may restrict your use of the site’s features. You can prevent Google from collecting and processing the data generated by cookies regarding your use of the website (including your IP address) by downloading and installing the browser plugin available on the following website: https://tools.google.com/dlpage/gaoptout?hl=en-GB

 

 

Objection to data collection:

 

Objecting to data collection will not affect the lawfulness of data processing based on consent before its withdrawal. You will find more information on your rights relating to the processing of your personal data under Section 4: Your rights in connection with your personal data. More information about the handling of user data in Google Analytics can be found in Google’s data privacy policy: support.google.com/analytics/answer/6004245

 

If you contact us via the Area Testing contact form, your request will be stored on our Group’s servers, including the text entered into the contact form (master and contact data, content data and uploads) for the purpose of processing your request and in the event of follow-up questions and their processing. Your data will not be transferred to third parties without your consent.

The processing of data entered into the contact form occurs exclusively on the basis of your consent under Art. 6(1)(a) GDPR. You may revoke this consent at any time. To do this, it is sufficient to send an informal notification by email to datenschutz~.~uka-gruppe.SPAMPROTECTION.de. Revoking your consent will not affect the lawfulness of data processing based on consent before its withdrawal.

If we are not subject to any statutory archiving and/or retention obligations, we delete your personal data if the purpose for data storage has ceased to apply, if you have revoked your consent to storage, or if you have requested that we delete it. We check the need to do this every 12 months.

If you would like to subscribe to the press newsletter offered on the website, we will save your subscription, including any information entered into the subscription form (master and contact data, content data), on our Group’s servers for the purpose of processing your subscription and in the event of follow-up questions and your future desire to unsubscribe. No reach measurement or verification of your reading behavior takes place. Likewise, your data will not be transferred to third parties without your consent.

Subscription to our press newsletter is based on a so-called ‘double opt-in’ process. This means that after subscription, you will receive an email in which you are asked to confirm your subscription. This confirmation is needed to ensure that no one can log in with a third-party email address.

The processing of the data entered into the subscription form and delivery of the press newsletter therefore occur exclusively on the basis of your consent under Art. 6(1)(a) GDPR in the meaning of Paragraph 7(2) No. 3 of the German Act Against Unfair Competition (Gesetz gegen den unlauteren Wettbewerb, UWG). You may revoke this consent at any time. To do this, it is sufficient to send an informal notification by email to press~.~uka-group.SPAMPROTECTION.com. You will find an unsubscribe link at the bottom of each press newsletter. Revoking your consent will not affect the lawfulness of data processing based on consent before its withdrawal.

Subscriptions to the newsletter are logged in order to verify the subscription process in accordance with the relevant legal requirements. This includes storing the time of subscription and the time of confirmation, as well as the IP address. The aforementioned information will be stored for up to three years after revocation of consent before it is finally deleted. The logging and storing of the subscription process occurs on the basis of our legitimate interest in accordance with Art. 6(1)(f) GDPR, and particularly serves to verify consent to receipt of the newsletter in the event of legal disputes. Prior deletion is possible, provided that you confirm the former existence of consent in writing.

Our Group has implemented a number of security measures to protect your personal data processed by us against tampering, loss, destruction, unauthorized third-party access and unauthorized disclosure. Our security measures are continually updated to reflect the latest technological developments. In addition, all necessary technical and organizational measures are guaranteed in compliance with data protection requirements.

SSL encryption

For security reasons and to protect the transmission of confidential content such as the enquiries you send via our Area Testing contact form, this website uses SSL encryption. You can identify an encrypted connection by the address bar of the browser switching from ‘http://’ to ‘https://’ and by the lock symbol in your browser bar.

If SSL encryption is activated, the data you send us cannot be read by third parties.

We do not automatically process your personal data with the aim of evaluating certain aspects of your person (so-called profiling, Art. 4 No. 4 GDPR).

If you would like to exercise your legal rights, please contact our data protection officer at

datenschutz~.~uka-gruppe.SPAMPROTECTION.de or

UKA Umweltgerechte Kraftanlagen GmbH & Co. KG,
- Datenschutzbeauftragter (Data Protection Officer) -
Dr.-Eberle-Platz 1
D-01662 Meißen

Phone: +49 (0)3521 728060

 

You have the following rights in connection with the processing of your personal data:

Right to access and confirmation of personal data (Art. 15 GDPR)

You have the right to receive from us free access to and confirmation of the personal data stored about you, as well as a copy of this information, at any time.

Right to rectification (Art. 16 GDPR)

You have the right to request the immediate rectification of incorrect personal data held about you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to erasure (Art. 17 GDPR)

You have the right to have your personal data deleted immediately, provided that one of the following reasons applies and insofar as the processing of this data is not necessary

• The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
• You withdraw consent on which the processing is based and where there is no other legal ground for the processing.
• You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
• The personal data have been unlawfully processed.
• The personal data have to be erased for compliance with a legal obligation in Union or Member State law to which we are subject.
• The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

Right to restriction of processing (Art. 18 GDPR)

You have the right to obtain restriction of processing where one of the following applies:

• The accuracy of the personal data is contested by you for a period enabling us to verify the accuracy of the personal data.
• The processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead.
• We no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims.
• You have objected to processing pursuant to Article 21(1) GDPR pending the verification of whether our legitimate grounds override yours.

Right to revoke data privacy consent (Art. 7(3) GDPR / Paragraph 51 of the German Data Protection Act - BDSG)

You have the right to revoke consent once granted in accordance with Art. 7(3) GDPR with effect for the future. Objecting to data collection will not affect the lawfulness of data processing based on consent before its withdrawal.

Right to object to processing (Art. 21 GDPR)

You have the right to object at any time to the processing of personal data held about you based on Art. 6(1)(e) or (f) GDPR, for reasons arising from your particular situation. In the event of an objection, we will no longer process the personal data unless we can prove compelling reasons for the processing that are worthy of protection and outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims. You have the right to object at any time to the processing of your personal data for profiling or direct marketing purposes.

Right to data portability (Art. 20 GDPR)

You have the right to receive the personal data that has been provided to us about you in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without our interference, provided that the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR and the processing is carried out using automated procedures, provided that the processing is not necessary for the performance of a task in the public interest or in the exercise of public authority which was transferred to controller. In exercising your right to data portability pursuant to Art. 20(1) GDPR, you also have the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided that this does not affect the rights and freedoms of other persons.

Right to lodge a complaint with the supervisory authority (Art. 77 GDPR)

 

You have the right to contact a supervisory authority in the member state where you reside or work or where you suspect that the processing of personal data held about you violates the EU’s General Data Protection Regulation at any time.

Last updated: May 2018