Data pro­tec­tion policy

1. Data pro­tec­tion at a glance

Gen­er­al information

The fol­low­ing infor­ma­tion pro­vides a brief sum­ma­ry of what hap­pens to your per­son­al data when you vis­it our web­site. Per­son­al data are all data by which you can per­son­al­ly be iden­ti­fied. Detailed infor­ma­tion about data pro­tec­tion is con­tained in our data pro­tec­tion pol­i­cy stat­ed below.

Data col­lec­tion on our website

Who is respon­si­ble for data col­lec­tion on this website?
Data pro­cess­ing on this web­site is per­formed by the web­site oper­a­tor, whose con­tact details are stat­ed in the web­site legal notice.

How do we col­lect your data?
One way in which we col­lect your data is when you share infor­ma­tion with us. This may be the data you enter in a con­tact form, for example.

Oth­er data are auto­mat­i­cal­ly col­lect­ed by our IT sys­tems when you vis­it the web­site. These are pri­mar­i­ly tech­ni­cal data (e.g. inter­net brows­er, oper­at­ing sys­tem or time of vis­it). These data are record­ed auto­mat­i­cal­ly as soon as you access our website.

How do we use your data?
Some of the data is col­lect­ed to ensure per­fect web­site func­tion­al­i­ty. Addi­tion­al data can be used to analyse user behaviour.

What rights do you have con­cern­ing your data?
You have the right, at any time and free of charge, to receive infor­ma­tion about your stored per­son­al data, its source and recip­i­ents, as well as the pur­pose for which it is stored. You also have the right to demand that your data be rec­ti­fied, blocked or erased. Please do not hes­i­tate to con­tact us at any time using the address stat­ed in the legal notice if you have any ques­tions about this or any oth­er mat­ters con­cern­ing data pro­tec­tion. You are fur­ther enti­tled to lodge a com­plaint with the com­pe­tent super­vi­so­ry authority.

More­over, in cer­tain cir­cum­stances, you have the right to demand that pro­cess­ing of your per­son­al data is restrict­ed. Details about this are con­tained in the data pro­tec­tion pol­i­cy under “Right to restric­tion of processing”.

Analy­sis tools and tools of third-par­ty providers

When you vis­it our web­site, your surf­ing behav­iour may be eval­u­at­ed for sta­tis­ti­cal pur­pos­es. This is done using cook­ies and with analy­sis pro­grams. As a rule, your surf­ing behav­iour is analysed anony­mous­ly; your surf­ing behav­iour can­not be traced back to you.

You have the pos­si­bil­i­ty of object­ing to this analy­sis or pre­vent­ing it by not using cer­tain tools. This data pro­tec­tion pol­i­cy con­tains detailed infor­ma­tion about these tools and the ways in which you can object to their use.

2. Gen­er­al remarks and manda­to­ry information

Data pro­tec­tion

The oper­a­tors of this web­site take the pro­tec­tion of your per­son­al data very seri­ous­ly. We treat your per­son­al data in con­fi­dence and in line with statu­to­ry data pro­tec­tion reg­u­la­tions as well as this data pro­tec­tion policy.

When you use this web­site, dif­fer­ent types of per­son­al data are col­lect­ed. Per­son­al data are data by which you can per­son­al­ly be iden­ti­fied. This data pro­tec­tion pol­i­cy explains which data we col­lect and what we use them for. It also out­lines how and for what pur­pose this is done.

Please be aware that inter­net-based data trans­mis­sion (e.g. when com­mu­ni­cat­ing by e‑mail) may have secu­ri­ty gaps. Absolute pro­tec­tion of data against access by third par­ties is not possible.

Infor­ma­tion about the controller

The con­troller respon­si­ble for data pro­cess­ing on this web­site is:

Raf­finer­ie Hei­de GmbH
Post­fach 1440
25734 Heide
Germany

Tele­phone: +49 481 6930
E‑mail: info@heiderefinery.com

The con­troller is the nat­ur­al or legal per­son that, alone or joint­ly with oth­ers, deter­mines the pur­pos­es and means of pro­cess­ing per­son­al data (e.g. names, e‑mail address­es, etc.).

With­draw­al of your con­sent to data processing

Many data pro­cess­ing oper­a­tions are per­mit­ted only with your express con­sent. You can with­draw any con­sent you have pre­vi­ous­ly giv­en at any time. To do so, all you have to do is send us an infor­mal noti­fi­ca­tion by e‑mail. The with­draw­al of con­sent shall not affect the law­ful­ness of data pro­cess­ing occur­ring before con­sent was withdrawn.

Right to object to data col­lec­tion in par­tic­u­lar cas­es and right to object to direct mar­ket­ing (Arti­cle 21 GDPR)

If per­son­al data are being processed on the basis of Arti­cle 6(1) point e or f GDPR, you have the right, at any time, to object to the pro­cess­ing of your per­son­al data on grounds relat­ing to your par­tic­u­lar sit­u­a­tion; this also includes any pro­fil­ing based on these pro­vi­sions. The rel­e­vant legal basis of any pro­cess­ing is out­lined in this data pro­tec­tion pol­i­cy. If you raise an objec­tion, we will no longer process your per­son­al data unless we can demon­strate com­pelling legit­i­mate grounds for the pro­cess­ing which over­ride your inter­ests, rights and free­doms or the pro­cess­ing serves the estab­lish­ment, exer­cise or defence of legal claims (objec­tion pur­suant to Arti­cle 21(1) GDPR).

Where per­son­al data are processed for direct mar­ket­ing pur­pos­es, you have the right, at any time, to object to pro­cess­ing of per­son­al data con­cern­ing you for such mar­ket­ing; this also includes pro­fil­ing to the extent that it is relat­ed to such direct mar­ket­ing. Should you object, your per­son­al data will there­after no longer be processed for direct mar­ket­ing pur­pos­es (objec­tion pur­suant to Arti­cle 21(2) GDPR).

Right to lodge a com­plaint with the com­pe­tent super­vi­so­ry authority

In the event of infringe­ments of the GDPR, those affect­ed have the right to lodge a com­plaint with a super­vi­so­ry author­i­ty, in par­tic­u­lar in the Mem­ber State of their habit­u­al res­i­dence, place of work or place of the alleged infringe­ment. The right to lodge a com­plaint shall exist with­out prej­u­dice to any oth­er admin­is­tra­tive or judi­cial remedy.

Right to data portability

You have the right to have data that we have processed by auto­mat­ed means on the basis of your con­sent or in per­for­mance of a con­tract deliv­ered to you or to a third par­ty in a com­mon­ly used and machine-read­able for­mat. Should you request that the data are trans­mit­ted direct­ly to anoth­er con­troller, this will be done only where tech­ni­cal­ly feasible.

SSL and TLS encryption

This site uses SSL and/or TLS encryp­tion for secu­ri­ty rea­sons and to safe­guard the trans­mis­sion of con­fi­den­tial con­tent, such as pur­chase orders and inquiries, that you send to us in our capac­i­ty as the site oper­a­tor. The address in the brows­er address bar changes from http:// to https:// and the brows­er dis­plays a closed pad­lock sym­bol when data are being trans­mit­ted in an encrypt­ed format.

When SSL or TLS encryp­tion is acti­vat­ed, the data you trans­mit to us can­not be read by third parties.

Access to, block­ing, era­sure and rec­ti­fi­ca­tion of data

With­in the scope of the applic­a­ble statu­to­ry pro­vi­sions, you have the right, at any time and free of charge, to receive infor­ma­tion about your stored per­son­al data, its source and recip­i­ents as well as the pur­pose for which your data is being processed. You may also have the right to have your data rec­ti­fied, blocked or erased. Please do not hes­i­tate to con­tact us at any time using the address stat­ed in the legal notice if you have any ques­tions about this or any oth­er mat­ters con­cern­ing your per­son­al data.

Right to restric­tion of processing

You have the right to demand that pro­cess­ing of your per­son­al data is restrict­ed. Please do not hes­i­tate to con­tact us at any time using the address stat­ed in the legal notice if you have any ques­tions about this. The right to restric­tion of pro­cess­ing exists in the fol­low­ing cases:

• If you con­test the accu­ra­cy of the per­son­al data we store about you, we gen­er­al­ly need time to inves­ti­gate this. Dur­ing the inves­ti­ga­tion peri­od, you have the right to demand that pro­cess­ing of your per­son­al data is restricted.
• If the pro­cess­ing of your per­son­al data was/is unlaw­ful, you can request that pro­cess­ing of your per­son­al data be restrict­ed rather than ask for the data to be erased.
• If we no longer need your per­son­al data, but you require them for the exer­cise, defence or estab­lish­ment of legal claims, you have the right to request that pro­cess­ing of your per­son­al data be restrict­ed rather than ask for the data to be erased.
• If you have raised an objec­tion pur­suant to Arti­cle 21(1) GDPR, due con­sid­er­a­tion must be giv­en to your inter­ests on the one hand and our inter­ests on the oth­er. Pend­ing the con­sid­er­a­tion of whose inter­ests shall pre­vail, you have the right to request that pro­cess­ing of your per­son­al data be restricted.

If you have restrict­ed pro­cess­ing of your per­son­al data, such data shall – with the excep­tion of stor­age – only be processed with your con­sent or for the estab­lish­ment, exer­cise or defence of legal claims or for the pro­tec­tion of the rights of anoth­er nat­ur­al or legal per­son or for rea­sons of impor­tant pub­lic inter­est of the Euro­pean Union or of a Mem­ber State.

3. Data col­lec­tion on our website

Cook­ies

Our web­site uses cook­ies in some instances. Cook­ies do not cause any dam­age to your com­put­er and do not con­tain any virus­es. The pur­pose of cook­ies is to make our inter­net offer­ing more user friend­ly, effec­tive and secure. Cook­ies are small text files that are placed on your com­put­er and stored by your browser.

Most of the cook­ies we use are known as ses­sion cook­ies. These are auto­mat­i­cal­ly delet­ed after you leave our site. Oth­er cook­ies will remain stored on your device until you delete them. These cook­ies enable us to recog­nise your brows­er the next time you vis­it our website.

You can adjust your brows­er set­tings to make sure that you are noti­fied every time cook­ies are placed on your device and to enable you to accept cook­ies only in spe­cif­ic cas­es or to exclude the accep­tance of cook­ies in spe­cif­ic sit­u­a­tions or in gen­er­al and to acti­vate the auto­mat­ic dele­tion of cook­ies when­ev­er you close your brows­er. Please note that the func­tions of this web­site may be lim­it­ed if you dis­able cookies.

Cook­ies that are required for elec­tron­ic com­mu­ni­ca­tion process­es or to pro­vide cer­tain func­tions that you want to use (e.g. the shop­ping bas­ket func­tion) are stored on the basis of Arti­cle 6(1) point f GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in stor­ing cook­ies to ensure that it can opti­mise its ser­vices and pro­vide them free from tech­ni­cal errors. Inso­far as oth­er cook­ies (e.g. cook­ies for the analy­sis of your brows­ing behav­iour) are stored, they are addressed sep­a­rate­ly in this data pro­tec­tion policy.

Con­tact form

If you sub­mit inquiries to us using our con­tact form, the infor­ma­tion and any con­tact details you enter in this form will be stored by us so that we can han­dle your inquiry and answer any fur­ther ques­tions you may have. We will not share this infor­ma­tion with­out your consent.

The pro­cess­ing of the data entered in the con­tact form there­fore occurs exclu­sive­ly on the basis of your con­sent (Arti­cle 6(1) point a GDPR). You can with­draw this con­sent at any time. To do so, all you have to do is send us an infor­mal noti­fi­ca­tion by e‑mail. The with­draw­al of con­sent shall not affect the law­ful­ness of any data pro­cess­ing oper­a­tions occur­ring before con­sent was withdrawn.

We will con­tin­ue to store the infor­ma­tion you have entered in the con­tact form until you ask us to erase the data or with­draw your con­sent to the stor­age of the data or until the pur­pose for which the data is being stored no longer exists (e.g. after we have fin­ished han­dling your inquiry). Any manda­to­ry legal pro­vi­sions – in par­tic­u­lar reten­tion peri­ods – will not be affect­ed by this.

Inquiries by e‑mail, tele­phone or fax

If you con­tact us by e‑mail, tele­phone or fax, your inquiry, includ­ing all the per­son­al data pro­vid­ed (name, nature of request), will be stored and processed by us for the pur­pose of han­dling your inquiry. We will not share this infor­ma­tion with­out your consent.

This data is processed on the basis of Arti­cle 6(1) point b GDPR, if your inquiry relates to the exe­cu­tion of a con­tract or is required to car­ry out pre-con­trac­tu­al activ­i­ties. In all oth­er cas­es, the pro­cess­ing is based on your con­sent (Arti­cle 6(1) point a GDPR) and/or on our legit­i­mate inter­ests (Arti­cle 6(1) point f GDPR), since we have a legit­i­mate inter­est in the effec­tive pro­cess­ing of inquiries addressed to us.

We will con­tin­ue to store the data you send to us when you con­tact us with an inquiry until you ask us to erase the data or with­draw your con­sent to the stor­age of the data or until the pur­pose for which the data is being stored no longer exists (e.g. after we have fin­ished han­dling your inquiry). Any manda­to­ry legal pro­vi­sions – in par­tic­u­lar statu­to­ry reten­tion peri­ods – will not be affect­ed by this.

4. Social media

Face­book plug-ins (Like & Share buttons)

On our web­site, we have inte­grat­ed plug-ins pro­vid­ed by the social net­work Face­book, pro­vid­ed by Face­book Inc., 1 Hack­er Way, Men­lo Park, Cal­i­for­nia 94025, USA.  You can recog­nise Face­book plug-ins from the Face­book logo or the “Like” but­ton on our web­site.. An overview of Face­book plug-ins is avail­able here: https://developers.facebook.com/docs/plugins/?locale=de_DE.

When­ev­er you vis­it our web­site, the plug-in will estab­lish a direct con­nec­tion between your brows­er and the Face­book serv­er. As a result, Face­book will be informed that you have vis­it­ed our web­site with your IP address. If you click the Face­book “Like” but­ton while you are logged into your Face­book account, you may link the con­tents of our web­site with your Face­book pro­file. Face­book will con­se­quent­ly be able to asso­ciate your vis­it to our web­site with your Face­book user account.  Please note that we, as the provider of this web­site, have no knowl­edge of which data is trans­ferred and how it is used by Face­book. For more detailed infor­ma­tion, please con­sult the Face­book pri­va­cy pol­i­cy at: https://de-de.facebook.com/privacy/explanation.

If you do not want Face­book to be able to asso­ciate your vis­it to our web­site with your Face­book user account, please log out of your Face­book account while you are on our website.

The use of Face­book plug-ins takes place on the basis of Arti­cle 6(1) point f GDPR. The oper­a­tor of this web­site has a legit­i­mate inter­est in being as vis­i­ble as pos­si­ble on social media.

Twit­ter plug-in

Our web­site incor­po­rates fea­tures pro­vid­ed by the social net­work­ing ser­vice Twit­ter. These fea­tures are pro­vid­ed by Twit­ter Inc., 1355 Mar­ket Street, Suite 900, San Fran­cis­co, CA 94103, USA.  When you use Twit­ter and the “Retweet” func­tion, web­sites you vis­it are linked to your Twit­ter account and dis­closed to oth­er users.  In the process, data is also trans­ferred to Twit­ter. Please note that we, as the provider of this web­site, have no knowl­edge of which data is trans­ferred and how it is used by Twit­ter. For more detailed infor­ma­tion, please con­sult the Twit­ter pri­va­cy pol­i­cy at: https://twitter.com/de/privacy.

The use of the Twit­ter plug-in takes place on the basis of Arti­cle 6(1) point f GDPR. The oper­a­tor of this web­site has a legit­i­mate inter­est in being as vis­i­ble as pos­si­ble on social media.

You can change your data pro­tec­tion set­tings on Twit­ter in the account set­tings avail­able at https://twitter.com/account/settings.

LinkedIn plug-in

Our web­site uses fea­tures pro­vid­ed by the LinkedIn net­work. The provider is the LinkedIn Cor­po­ra­tion, 2029 Stier­lin Court, Moun­tain View, CA 94043, USA.

A con­nec­tion to LinkedIn’s servers is estab­lished when­ev­er you access one of our web pages that con­tains fea­tures pro­vid­ed by LinkedIn. This noti­fies LinkedIn that you have vis­it­ed our web pages with your IP address. If you click on LinkedIn’s “Rec­om­mend” but­ton and are logged into your LinkedIn account at the time, LinkedIn will be in a posi­tion to link your vis­it to our web­site to you and your user account. Please note that we, as the provider of this web­site, have no knowl­edge of which data is trans­ferred and how it is used by LInkedIn.

The use of the LinkedIn plug-in takes place on the basis of Arti­cle 6(1) point f GDPR. The oper­a­tor of this web­site has a legit­i­mate inter­est in being as vis­i­ble as pos­si­ble on social media.

For more detailed infor­ma­tion, please con­sult the LinkedIn pri­va­cy pol­i­cy at: https://www.linkedin.com/legal/privacy-policy.

XING plug-in

Our web­site uses fea­tures pro­vid­ed by the XING net­work. The provider is XING AG, Damm­torstrasse 29–32, 20354 Ham­burg, Germany.

A con­nec­tion to XING’s servers is estab­lished when­ev­er you access one of our web pages that con­tains fea­tures pro­vid­ed by XING. To the best of our knowl­edge, this does not result in any per­son­al data being stored. In par­tic­u­lar, the ser­vice does not store any IP address­es or analyse user behaviour.

The use of the XING plug-in takes place on the basis of Arti­cle 6(1) point f GDPR. The oper­a­tor of this web­site has a legit­i­mate inter­est in being as vis­i­ble as pos­si­ble on social media.

For more detailed infor­ma­tion on data pri­va­cy and the XING “Share” but­ton, please con­sult the XING data pro­tec­tion pol­i­cy at: https://www.xing.com/app/share?op=data_protection.

5. Analy­sis tools and advertising

Word­Press Stats

This web­site uses the Word­Press Stats tool to per­form sta­tis­ti­cal analy­ses of vis­i­tor traf­fic. The provider is Automat­tic Inc., 60 29th Street #343, San Fran­cis­co, CA 94110–4929, USA.

Word­Press Stats uses cook­ies that are stored on your com­put­er and allow the use of the web­site to be analysed. The infor­ma­tion gen­er­at­ed by the cook­ies relat­ing to your use of our web­site is stored on servers in the USA. Your IP address is anonymised after pro­cess­ing and before storage.

Word­Press Stats cook­ies will remain stored on your device until you delete them.

The stor­age of Word­Press Stats cook­ies and use of this analy­sis tool take place on the basis of Arti­cle 6(1) point f GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in the anonymised analy­sis of user behav­iour with a view to refin­ing both its online offer­ing and its advertising.

You can adjust your brows­er set­tings to make sure that you are noti­fied every time cook­ies are placed on your device and to enable you to accept cook­ies only in spe­cif­ic cas­es or to exclude the accep­tance of cook­ies in spe­cif­ic sit­u­a­tions or in gen­er­al and to acti­vate the auto­mat­ic dele­tion of cook­ies when­ev­er you close your brows­er. Please note that the func­tions of our web­site may be lim­it­ed if you dis­able cookies.

You can object to the col­lec­tion and use of your data with future effect by click­ing on this link and set­ting an opt-out cook­ie in your brows­er: https://www.quantcast.com/opt-out/.

If you delete the cook­ies on your com­put­er, you will have to set the opt-out cook­ie again.