Data Protection

Responsible for data processing on these websites:
HeidelbergCement AG (in the following „we“)
Represented by:

Dr. Dominik von Achten, Chairman
René Aldach
Kevin Gluskie
Hakan Gurdal
Ernest Jelito
Dr. Nicola Kimm
Dennis Lentz
Jon Morrish
Chris Ward

Berliner Straße 6
69120 Heidelberg
Germany

Phone: +49 6221-481-0
Fax: +49 6221-481-13217
E-Mail:  info@heidelbergmaterials.com

Data Protection Officer:

Berliner Straße 6
69120 Heidelberg
Germany

E-Mail: data.protection@heidelbergcement.com
Phone: +49 6221-481-39603

1. Collection and processing of data

We collect and process personal data if you provide it to us by filling an entry form on our website or by other means, e.g. by e-mail. In addition, we collect and process data arising from your use of our website. Our data will be processed in accordance with the provisions of the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) and the German Telecommunication – Telemedia-Data Protection Act (Telekommunikation-Telemedien-Datenschutzgesetz (“TTDSG”)). Personal data is all information relating to an identified or identifiable natural person. In the following we explain in detail how we collect which data on which legal basis. In addition, we will explain to you what rights you have and how long your data will be stored.

2. Processing of Data via Cookies and Logfiles

Information on the use of cookies on our website can be found in our cookie policy

In accordance with Art. 6 para. 1 sent. 1 b) and Art. 6 para. 1 sent. 1 f) GDPR, our website also uses so-called log files, in which access data are stored each time a page is accessed. The data record saved contains the following details:

  • Your IP address, the date, the time, to which the file was accessed, the status, the request made by your browser to the server, the amount of data transmitted and the webpage from which you accessed the requested page (referrer) as well as
  • The product and version information of the browser used, your operating system and your country of origin.

The log data are routinely deleted after 14 days. In other words, all data contained therein is irretrievably deleted. The usage of the log-files and its temporary storage is used to ensure a proper technical performance of the websites and to protect our websites against attacks and misuse. We do not use the log data for any other purposes.

3. External links

Our website contains links to external websites. Social plugins such as the Facebook "Like" button are not used. The website protects your privacy by not directly integrating the external content into the website in these cases, but only by linking. Data can only be transmitted to the operator of the respective website when the link is activated. We are not responsible for the websites of other operators. In these cases, the data protection regulations of the other operator apply.

4. Third party providers

4.1 Cookie consent management

Our website uses the cookie consent technology of the provider 2b Advice GmbH, Joseph-Schumpeter-Allee 25, 53227 Bonn, to obtain your consent to the storage of certain cookies on your device and to document them in compliance with data protection regulations or to manage your cookie settings.

When you use our website, no connection is made to the provider's servers, as the system is hosted by us. We use the technology to obtain your consent and other declarations on the use of cookies. We then save a cookie in your browser in order to be able to assign you the consent given or the revocation thereof. The data collected in this way will be stored until you change your settings, remove the cookie or the purpose for data storage no longer applies. Mandatory statutory retention requirements remain unaffected.

We use the technology to obtain the legally required consent for the use of cookies. The legal basis for this is Article 6 para. 1 sent. 1 c) GDPR. In addition, § 25 para. 2 no. 2 TTDSG applies.

4.2 etracker

We use the services of etracker GmbH from Hamburg to analyze usage data. By default, we do not use cookies for web analysis. The data generated with etracker are processed and stored by etracker exclusively in Germany on behalf of the provider of this website and are therefore subject to the strict German and European data protection laws and standards. In this regard, etracker has been independently checked, certified and awarded the data protection seal of approval https://www.eprivacy.eu/kunden/vergebene-siegel/firma/etracker-gmbh/.

Legal Basis for the processing is Art. 6 para. 1 sent. 1 f) GDPR.

Our legitimate interest is based on optimizing our online offer and our website. Since the privacy of our visitors is important to us, the data that may allow a reference to an individual person, such as the IP address, login or device ID, is anonymized or pseudonymized as soon as possible. It will not be used for any other purpose, combined with other data or passed on to third parties.

You can object to the data processing described above with effect for the future at any time. Your objection has no disadvantageous consequences.

 

 

Further information on data protection with etracker can be found here.

 

 

If we use analysis and optimization cookies, we will obtain your explicit consent separately in advance via our cookie banner. If this is the case and you agree, cookies are used that enable a statistical range analysis of this website, a measurement of the success of our online marketing measures and test procedures, e.g. to test and optimize different versions of our online offer or its components. Legal basis for such a processing and setting of cookies is Art. 6 para 1 sent. 1 a) GDPR in conjunction with § 25 para 1 TTDSG. etracker cookies do not contain any information that would allow a user to be identified.

If you have given your consent, you have the right to revoke it at any time without affecting the legality of the processing carried out on the basis of the consent up to the time of revocation.

You can revoke this consent at any time by calling up our cookie banner again and changing your settings for the cookies.

Further information on data protection with etracker can be found here.

4.3 Google Analytics

This website uses the service Google Analytics of the third party provider Google Ireland Limited a company organized and existing under Irish law (register number: 368047) having its seat at Gordon House, Barrow Street, Dublin 4, Irland (“Google”). 

You can increase the protection of your privacy if you log out of any existing user accounts of the Google Group while you are using our website. This prevents your surfing behavior on our website from being directly assigned to your personal profile. If you use our website while logged in, Google will assign your user behavior to your profile.

You can find more general information on data protection at Google at

https://www.google.de/intl/de/policies/ (external link to Google) and
https://www.google.com/policies/privacy (external link to Google).

Google Analytics is a service that enables us to analyze user behavior on our website. Google Analytics uses cookies for this.

If you have agreed to the setting of cookies, the information generated by these cookies about the use of this website (type and version of the browser you are using, which operating system you are using, the URL of the requested page, the date and time of your page view, the screen resolution that you use, as well as your IP address), to the best of our knowledge, are also transmitted to and stored by Google on servers in third countries, including the United States.

We would like to point out that we have added the code “anonymizeIp” to Google Analytics on this website. By using the code extension “anonymizeIp”, the last 8 bits of the IP addresses are deleted and thus anonymized (so-called IP masking). At our request, Google only records your IP address in abbreviated form, which ensures anonymization and does not allow any conclusions to be drawn about your identity. However, due to the activation of the IP anonymization, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. According to information from Google, only in exceptional cases the full IP address is transmitted to a Google server in a third country (including the USA) and shortened there.

On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us as the website operator with other services related to website activity and internet usage, e.g. support us with the uniform and appealing presentation of our online-support offers.

Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.

The processing of your personal data (IP address, cookies, device IDs) takes place on the basis of § 25 para. 1 TTDSG in conjunction with (Art. 6 para. 1 sent. 1 a) GDPR (consent), provided that you have given this via our cookie banner. You can revoke this consent at any time by calling up our cookie banner again and changing your settings for the cookies.

In addition you can prevent the storage of cookies by setting your browser software accordingly or you can prevent the collection and transfer of data generated through cookies in the course of the usage of our website (inclusive your IP address) to Google and the processing of such data by Google, by downloading and installing the browser plugin available under the following Link http://tools.google.com/dlpage/gaoptout?hl=de (external link to Google).

4.4 Investis Digital

We use the services of the provider Investis Limited, Counting House, 53 Tooley Street, London, SE1 2QN for displaying share price information on our website. Legal Basis for processing of your personal data (IP address and geolocation) is Art. 6 para. 1 sent. 1 f) GDPR. Our legitimate interest is based on optimizing our online offer and our website. 

5. Processing of personal data by contacting us

If you provide us with personal data by contacting us, e.g. by email or by entering your data in  one of our input forms, we process your data in accordance with Art. 6 para.1 sent. 1 b) GDPR for the for the purpose of fulfilling the contract or for the implementation of pre-contractual measures which take place on your request or in accordance with Art. 6 para. 1 sent. 1 f) GDPR on the basis of our legitimate interest in answering your request. We process your data only for the purpose of processing your specific request. This may also include forwarding to an affiliated company if this is necessary to respond to your request. We do not use your data beyond theses purposes.

After each filling out and submitting an input form available on our website - with the exception of forms from third-party providers - you will receive an email that gives you an overview of which data we are processing from you, i.e. the content of the respective form, any consent or other declarations of intent. 

You can also assert the rights listed in Section 10 of this data protection declaration. Requests that we have answered or forwarded and for which there is no further legal basis for storage are automatically deleted from our systems after 2 (in words: two) months. Further information on the deletion of your data can also be found in section 11 of this data protection declaration.

6. Consent to receive our newsletter

If you register for our newsletter, we process the data you provide in the registration form exclusively for the purpose of sending and personalising the newsletter you have subscribed for. In addition, we process your IP address in order to be able to prove your consent. After submitting your email address you receive a confirmation email in which you have to click on a link in order to receive the newsletter. This confirmation email is necessary so that we can verify you as the owner of the entered email address. Only after clicking on this link your newsletter subscription becomes effective.

With our newsletter we inform you by email about new press releases und ad hoc announcements. To send the newsletter we use a newsletter administration tool from a third party service provider. We have carefully chosen this service provider and have made data protection related agreements with him to retain the sovereignty over your data. We evaluate the click and opening rates of our newsletters. However, we do this without any reference to individual users and is therefore completely anonymous.

At the bottom of each email newsletter you will find a hyperlink which you can use at any time to unsubscribe from the newsletter. You may also unsubscribe from receiving our newsletter at any time by contacting us by email at groupnewsletter@heidelbergcement.com or at the above contact details. 

You can also unsubscribe on the registration page for the newsletter. The link to unsubscribe is available at:

https://www.heidelbergmaterials.com/en/newsletter

The revocation of your consent by cancelling the newsletter has no effect on the legality of data processing until the time of the revocation. If you cancel the newsletter, the data stored by us for the purpose of sending the newsletter will be deleted, unless the deletion contradicts statutory data retention obligations. Information on the deletion of your data can be found in section 11 of this privacy policy.

If you have given your consent, the legal basis for processing your data after registering for this service is Art. 6 Paragraph 1 Clause 1 a) GDPR.

7. Open Street Map

Our website includes maps from the OpenStreetMap Foundation, St. John's Innovation Center, Cowley Road, Cambridge, CB4 0WS, United Kingdom (OSMF for short). If you use our website, no connection is established to the servers of this provider, as the maps are only saved as a copy on a server of our processor Ueberbit GmbH, Rheinvorlandstraße 7, 68159 Mannheim, and a connection is only established to this server. On this occasion, your IP address will be transmitted to the processor.

The maps are displayed on the basis of Art. 6 para. 1 sent. 1 f) GDPR due to our legitimate interest in making it easier to find the locations indicated on the website and thus making our website more attractive for visitors.

8. Encryption

Data you insert on our website is transmitted using SSL encryption. We protect our website and other systems by technical and organizational measures against loss, destruction, access, modification or dissemination of your data by unauthorized persons.

9. Categories of recipients of personal data; data transfer to a third country

Service providers and auxiliary agents used by us in connection with the website, e.g. host providers, agencies and IT service providers may have access to your personal data. If these service providers and auxiliary agents process data on our behalf, they only act in accordance with our instructions and are contractually bound by us accordingly. This also applies to service providers which have their legal seat in a third country (outside the EU or the EEA). 

In third countries, the same level of data protection may not be guaranteed as in the European Economic Area. If data is transferred to a third country, we ensure that this transfer only takes place in accordance with the statutory provisions (Chapter V GDPR). In this respect, we always orientate ourselves on the current case law and follow the applicable recommendations of authorities in order to be able to ensure that your data is protected at the same level as the GDPR.

10. Your rights

According to Art. 15 GDPR you have the right to receive information free of charge upon request about the personal data that has been stored about you. You also have the right to have incorrect data corrected and your personal data disabled and deleted in accordance with Art. 16, 17 and 18 GDPR.

Subject to conditions laid down in Art. 20 GDPR, you are also entitled to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and the right to transmit this data to another controller without hindrance.

In addition, you are entitled pursuant to Art. 21 para. 1 GDPR to object to the processing of your personal data on the basis of Article 6 para. 1 sent. 1 (e) or (f) GDPR including profiling, from reasons arising from your particular situation. We will fulfill your aforementioned rights, as far as the legal requirements for the assertion of the rights are given. If personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such advertising, including profiling, in so far as it is related to such direct marketing, pursuant to according to Art. 21 para. 2 GDPR.

Please direct any request regarding your personal data to our contact details mentioned at the beginning of this privacy policy or in the imprint of our website.
Every data subject has the right to lodge a complaint with a supervisory authority regarding the alleged infringement.

11. Duration of data storage and routine deletion

Unless explicitly stated above we process and store personal data only for the period, which is required to achieve the processing purpose or as long and to the extent as statutory laws require us to process and/or store such data.

If the purpose of processing no longer applies or if the applicable statutory retention requirement expires, we will as a matter of routine erase data or restrict the processing of data in accordance with the applicable statutory laws.

© HeidelbergCement AG, Heidelberg. All rights reserved.