DATA. PROTECTION INFORMATION

I. Information on the processing of your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR)

1. Controller and data protection officer

The controller for the website is:

WTE Wassertechnik GmbH Ruhrallee 185
D-45136 Essen

Email: info@wte.de
Tel.: +49 201 8968-571
Fax: +49 201 8968-555

You can reach the data protection officer by email at datenschutz@wte.de

2. Website, general

a. What data are processed for what purposes?

Every time website content is accessed, data are temporarily saved that may enable identification. The following data are collected:

  • IP address of the accessing computer,
  • time and date of the access,
  • name and URL of the accessed file,
  • website from which the access is made (referrer URL),
  • the browser used and possibly the operating system of your computer and the name of your access provider (user agent).

The temporary saving of data is required for the website visit to be implemented and to enable the website to be made available. Further saving is performed in the event of forwarding and accessing of error pages in order to ensure the functionality of the website and the security of information systems. These purposes also include our legitimate interest in the data processing.

b. Ensuring that our website is used as intended.

When our website is used, a cookie is set with the name ‘pll_language’. The purpose of the cookie is to save the website language you have selected. The processing is necessary in order to ensure that our website is used correctly.
Furthermore, the consent banner saves information on the consent of your terminal device. The saving of this information is necessary in order to ensure that our website is used correctly.

c. What is the legal basis for the processing of these data?

The data are processed on the basis of Art. 6(1) (f) GDPR.

d. In addition to the controller, are there any other recipients of the personal data?

The website is hosted by Koch Essen Kommunikation + Design GmbH, Alfredstraße 61, 45130 Essen. The hosting provider receives the above-mentioned data as a processor.

e. How long are the data saved for?

The data are erased once they are no longer needed to achieve the purpose for which they were collected. In the case of provision of the website, this is the case when the individual session is ended. In the case of forwarding and accessing of error pages, the data are stored for one month and two months respectively and they can be accessed exclusively by administrators. They are then permanently erased. The storage period for the cookie and the information regarding consent is one year.

3. Contact form

a. What data are processed for what purposes?

In connection with use of our online contact form, certain personal data are collected; the scope of these data is shown in the contact form’s input screen.
At the moment when the message is sent, the following data are also saved:

  • the IP address of the access,
  • data and time of the access,
  • the requested URL,
  • the most recently accessed document (‘referrer’),
  • the title of the browser (‘user agent’).

Alternatively, contact can be made via the email address provided. In this case, the user’s personal data that are transferred with the email are saved.
The data are not disclosed to third parties. The data are saved and used exclusively for the purpose of responding to your enquiry or to make contact with you and for the related technical administration.

b. Session cookie

In connection with the use of the contact form, a session cookie with the name ‘PHPSESSID’ is used and saved on your operating system. This cookie makes it possible to identify the browser when the website is accessed. An identifier is saved in the cookie to identify your session and transferred. The purpose of this cookie is to prevent misuse of the contact form. The user data collected by this cookie are not used to create user profiles.

c. What is the basis for the processing of these data?

The data are processed on the basis of Art. 6(1) (f) GDPR. If contact is being made with the aim of concluding a contract, an additional legal basis for the processing is Art. 6(1) (b) GDPR. The legal bases for the processing of data in connection with the cookie are, if user consent has been given, Art. 6(1) (a) GDPR and section 25 (1) of the German Telecommunications Telemedia Data Protection Act (TTDSG) .

d. How long are the data saved for?

Your data are erased once the processing of your request has been completed. This is the case when it can be inferred from the circumstances that the relevant matter has been clarified conclusively and if no conflicting statutory retention obligations apply. The cookie is erased when the session is ended.

4. Email contact (applications)

a. What data are processed for what purposes?

Contact can be made via the email address provided for the purposes of applying for a position. In this case, the user’s personal data that are transferred with the email are saved.
The data are not disclosed to third parties. The data are saved and used exclusively for the purpose of responding to your enquiry or to make contact with you and for the related technical administration.

b. What is the basis for the processing of these data?

The data are processed on the basis of Art. 6(1) (f) GDPR. If contact is being made with the aim of concluding a contract, an additional legal basis for the processing is Art. 6(1) (b) GDPR.

c. How long are the data saved for?

After a period of four months following conclusion of the application process, the data are erased.

Integrating the e-sourcing platform (NEWTRON GmbH, Berliner Straße 3, 01067 Dresden)

We have integrated access to the e-sourcing platform.

Any processing of your personal data in connection with use of the e-sourcing platform is performed by Newtron GmbH directly.
Information on the data processing performed by Newtron GmbH is available in the data privacy statement of Newtron GmbH under https://www.newtron.de/en/privacy-notice/.

6. Data subject rights

a. Right to access

Pursuant to Art. 15 GDPR, you have the right to obtain information on your personal data that we process.

b. Right to object

You have a right to object for particular reasons (see item II).

c. Right to rectification

If the information relating to you is not applicable (or no longer applicable), you have the right to rectification in accordance with Art. 16 GDPR. If your data are incomplete, you have the right to have the data completed.

d. Right to erasure

Pursuant to Art. 17 GDPR, you have the right to obtain the erasure of personal data concerning you.

e. Right to restriction of processing

According to Art. 18 GDPR, you have the right to have the processing of personal data concerning you restricted.

f. Right to lodge a complaint

If you believe that the processing of personal data concerning you breaches data protection law, you have the right to lodge a complaint with a supervisory data protection authority of your choosing in accordance with Art. 77(1) GDPR. This includes the supervisory data protection authority responsible for the controller: State official for privacy protection and freedom of information, North Rhine-Westphalia, https://www.ldi.nrw.de/kontakt/ihre-beschwerde.

g. Right to data portability

In the event of the conditions of Art. 20(1) GDPR applying, you have the right to have data that we process in an automated process on the basis of your consent or in fulfilment of a contract handed over to you or to a third party. The collection of data for provision of the website and the saving of log files are absolutely necessary for the operation of the website. They are thus not based on consent pursuant to Art. 6(1) (a) GDPR or on a contract pursuant to Art. 6(1) (b) GDPR; they are justified on the basis of Art. 6(1) (f) GDPR. The conditions of Art. 20(1) GDPR are accordingly not fulfilled.

II. Right to object pursuant to Art. 21(1) GDPR

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6(1) (f) GDPR. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims. The collection of data for provision of the website and the saving of log files are absolutely necessary for the operation of the website.

DATA PROTECTION INFORMATION of WTE Wassertechnik GmbH

We, WTE Wassertechnik GmbH, are aware of the high value placed on your personal data.  We take the protection of your personal data very seriously and observe the data protection regulations strictly. More detailed information on how we process your data is provided below.

We reserve the right to alter this data protection statement on the basis of legal or technical developments from time to time. The version published on www.wte.de applies at all times. 

Controller and data protection officer
The controller for the data processing is:
WTE Wassertechnik GmbH
Ruhrallee 185
D-45136 Essen
Email: info@wte.de
Tel.: +49 201 8968-571
Fax: +49 201 8968-555

You can reach the data protection officer by email at:

datenschutz@wte.de

 

What data are processed and what sources do these data come from?
We process personal data that we receive from our customers, suppliers or other third parties in connection with a business relationship or that we generate in order to fulfil contractual obligations. In addition, where this is necessary for the provision of our services, we also process personal data that we lawfully obtain from publicly accessible sources (e.g. excerpts from the commercial register, land register, media) or that have been lawfully transferred to us by other companies in the WTE Group or other third parties. ‘Personal data’ refers to any information that relates to natural persons, either directly or indirectly.

Relevant personal data includes master data (e.g. name, address, contact details of contacts of customers, suppliers or other third parties). Furthermore, we process order data (e.g. orders or payment information), data from the fulfilment of our contractual obligations, information on the financial situation (e.g. credit reports), advertising data (e.g. product offers), documentation data (e.g. memos and email correspondence), marketing-specific group membership and analysis data and data for fulfilling legal obligations.

For what purposes and on what legal bases are your data processed?
We process your personal data for the following purposes and on the basis of the following legal grounds:

  • In connection with your consent (Art. 6(1) (a) GDPR):

If you have given us your consent to the processing of personal data concerning you, processing will be performed only for the purposes specified and in the agreed scope in the declaration of consent. You may withdraw your consent at any time at no charge with effect for the future. Withdrawing your consent does not affect the lawfulness of the processing performed on the basis of your consent up until the withdrawal.

  • To fulfil contractual obligations (Art. 6(1) (b) GDPR):

The processing of your data is necessary to fulfil a contract that has been concluded with you or to carry out steps prior to entering into a contract. The purposes of the data processing are primarily based on the specific product. Details on the purpose of the data processing are given in the relevant contractual documents and general terms and conditions.

  • To fulfil legal obligations (Art. 6(1) (c) GDPR) or in the public interest (Art. 6(1) (e) GDPR):

We are subject to statutory obligations that may make it necessary to process personal data (e.g. tax laws, money laundering laws). The purposes of processing include, but are not limited to, assessing creditworthiness, verifying identity, preventing fraud and money laundering and assessing and controlling risk within the WTE Group.

  • For the purposes of legitimate interests (Art. 6(1) (f) GDPR):

We process your data for reasons of our legitimate interests for the following purposes:

  • Marketing in connection with our own products and services
  • Categorising customers into groups for marketing purposes (incl. development of new products and services)
  • Making contact and exchanging data and use of data from commercially licensed credit bureaus to assess creditworthiness and risk of default
  • Processing and making contact for the purpose of quality assurance and improving our offers and services
  • Creating photos and videos at public events
  • Assessing and controlling the risks of the WTE Group
  • Ensuring IT security and the IT operations of the company
  • Measures to secure buildings and plants (e.g. physical access control)
  • Prevention and investigation of criminal offences
  • International projects

You can object to data processing under the conditions of Art. 21 GDPR. Further information can be found under ‘your rights’.

Who are your data disclosed to?
We disclose your personal data to third parties only where this is necessary for the fulfilment of (pre)contractual or legal obligations, justified for the protection of our legitimate interests or permitted in connection with consent that has been given. Your data are disclosed to the following recipients:

  • Other companies or companies within the Group that we transfer personal data to for the purpose of conducting the business relationship
  • Other companies within the Group to control risks on the basis of statutory and governmental obligations
  • Where legally necessary, public authorities and public bodies (e.g. financial authorities, law enforcement agencies)
  • Service providers commissioned with data processing (e.g. logistics, service providers for postal deliveries, IT services, printing services, telecommunication, advice and consulting)
  • Other companies or companies in the Group in accordance with consent that has been given

In all cases in which we disclose your data to recipients inside and outside of our company, we always take care to ensure that this is only done on the basis of legal foundations and that your data remain protected.

If your data are transferred to a country outside of the EU (a third country), we ensure an appropriate level of data protection contractually or in some other way, in particular by means of appropriate guarantees (e.g. standard data protection clauses adopted by the Commission or the supervisory authority in a particular process).

How long are your data saved for?
In principle we retain your data for the duration of our business relationship with you. Furthermore, we are subject to various obligations to retain information and accordingly have to retain data relating to your personal details, third parties, your business transactions and your contractual relationship even after it has ended or after your business matter has been concluded. We also retain your data for a long enough period that we can exercise legal claims arising from our contractual and performance relationship with you or for as long as permitted for the purposes of our legitimate interests pursuant to Art. 6(1) (f) GDPR.

Are you obliged to provide data?
The provision of your personal data and any third parties designated by you is necessary for establishing our contractual relationship and to process your business matters. If you fail to provide us with these data to the extent required, we may not be able to establish the contractual relationship or process your business matter as desired. Please note that this would not be deemed non-fulfilment of contractual duties on our part.

Your rights

What data protection rights do you have?

Every data subject has the right to access pursuant to Article 15 GDPR, the right to rectification pursuant to Article 16 GDPR, the right to erasure pursuant to Article 17 GDPR, the right to restrict processing pursuant to Article 18 GDPR, the right to object pursuant to Article 21 GDPR and the right to data portability pursuant to Article 20 GDPR. With regard to the right to access and the right to erasure, the restrictions pursuant to sections 34 and 35 BDSG (the German Data Protection Act) apply.

 

If you have given us your consent to process personal data, you can withdraw it from us at any time. Please note that this withdrawal is only effective for the future. Any processing performed by us before the withdrawal is not affected.

Even if the data relating to you are accurate and complete and is processed by us lawfully, you can object to the processing of these data in specific individual cases if you provide reasons for this. Equally, you can object if you receive direct marketing from us and you would prefer not to receive any more in the future.

If you object, your personal data will no longer be processed unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

Furthermore, you have the right to lodge a complaint with a responsible data protection authority.