Data Privacy Statement
1. Responsibility for data processing and contact data
The controller responsible for processing your personal data is:
GAZPROM Schweiz AG, Poststrasse 2, 6300 Zug, Switzerland
You can contact our Data Protection Team at:
GAZPROM Germania GmbH, Datenschutzbeauftragter (Data Protection Officer), Markgrafenstr. 24, 10117 Berlin, E-mail: dataprivacy@gazprom-germania.de
2. Type of data processed
We process the following personal data and categories of personal data we obtain from our business partners and their employees:
- Master data (e.g. surname, first name, title, function/post at the company, business phone number, business mobile phone number, business fax number, business e-mail address) or data you provide us through your business card.
- Communications data (e.g. content of contact requests, records of conversations)
- Technical usage data in the case of communication by e-mail and phone
- Documentation of business transactions
- Voice recordings of calls/customer transactions
- Travel data and other preferences e.g. with regard to food as part of events
- Further data in the context of events we invite you toDeclarations relating to data protection (consent to processing of personal data, exercise of rights to obtain access to and information on personal data, rectification, deletion and restriction of processing of it, and data portability under data protection law, including information you send us in this connection)
3. Length of data storage
In general, we process personal data only for as long as required to fulfill the specific purpose defined in the following.
Moreover, we are subject to various retention and documentation obligations, which derive from national statutory provisions, especially from tax, labour and company law regulations. Finally, the storage duration is also governed by national statutory limitation periods.
4. Purposes of data processing and legal foundation
We process your personal data in compliance with the relevant data protection regulations, in particular the General Data Protection Regulation (GDPR) and national data protection law, for various purposes. In principle, the purposes for which we process your data are: Processing
- to perform contractual obligations or steps prior to entering into a contract (Article 6 paragraph 1 lit. (b) GDPR),
- to safeguard legitimate interests (Article 6 paragraph 1 lit. (f) GDPR),
- subject to your prior consent (Article 6 paragraph 1 lit. (a) GDPR) and/or
- to comply with statutory obligations (Article 6 paragraph 1 lit. (c) GDPR).
Specifically, we process your personal data for the following purposes and subject to the stated legal basis:
|
Purpose/legitimate interests |
Processed data or categories of data |
Legal basis |
|
Administration of business partners and contact persons at business partners for the purpose of communication and initiating and conducting a business relationship (customer support, lead generation) |
Master data; documentation of business transactions; communications data (e.g. content of contact requests, records of conversations)
|
Article 6 paragraph 1 points (b) and (f) GDPR |
|
Direct marketing and direct advertising (e.g. to inform our customers of our products and services by newsletter) |
Master data |
Article 6 paragraph 1 points (a) and (f) GDPR |
|
Events for and with customers (e.g. trade fairs) |
Master data, travel data and preferences with regard to food as part of events |
Article 6 paragraph 1 points (a), (b) and (f) GDPR |
|
Quality assurance and documentation of business deals |
Voice recordings of calls/customer transactions
|
Article 6 paragraph 1 points (a) and (f) GDPR |
|
Prosecution, establishment or defense of legal claims |
Master data; all data or categories of data of relevance to the claim in question. |
Article 6 paragraph 1 lit. (f) GDPR |
|
Administration of consents and objections (administration of declarations of consent and revocation, as well as objections to data processing) |
Master data, declarations of the data subjects |
Article 6 paragraph 1 lit. (c) GDPR |
|
Administration of claims made by data subjects (establishment of claims by data persons to obtain access to and information on their data, rectification and deletion of it, restriction of data processing and data portability) |
Master data, declarations of the data subjects, all data or categories of data that are the subject of the request. |
Article 6 paragraph 1 lit. (c) GDPR |
5. Recipients and categories of recipient
Personal data can be passed on to the following recipients and categories of recipient:
5.1 Processors
We use service providers who process personal data on our behalf (termed “processors”; cf. Article 4 No. 8 and Article 28 GDPR). They include IT and telecommunications service providers.
5.2 Passing on to third parties
If we are authorized pursuant to contractual or statutory provisions or a declaration of consent, we also pass on the above data to other companies, which process the data under their own responsibility, as part of the business relationship with the client (Article 4 No. 7 GDPR):
- WINGAS GmbH
- WINGAS Sales GmbH
- WINGAS Holding GmbH
- astora GmbH
- Gazprom Marketing & Trading Ltd
- Gazprom NGV Europe GmbH
- Other companies affiliated to GAZPROM Germania GmbH in terms of Article 15 of the German Stock Corporation Act
6. Transfer of personal data to a third country or international organization
We transfer the above personal data to the following third countries (countries outside the European Economic Area (EEA)) or international organizations:
- GAZPROM Germania GmbH, St. Petersburg branch (Russian Federation)
- Gazprom Marketing & Trading Limited, St. Petersburg branch (Russian Federation)
- PAO Gazprom (Russian Federation)
- OOO Gazprom export (Russian Federation)
- OOO Gazprom inform (Russian Federation)
It is transferred only if an adequate level of protection for the data is guaranteed in the third country in question (Article 45 GDPR), there are appropriate safeguards (cf. Article 46 GDPR) or transfer is otherwise permitted by law (cf. Article 49 GDPR).
7. Obligation to provide data
As part of our business relationship, you must only provide personal data that is required to initiate and conduct a business relationship or that we are obliged to collect by law. If we are not given this data, we will usually have to refuse to conclude a contract or perform an order or will no longer be able to continue performing, or will possibly have to terminate, a contract.
8. Automated decision-making and profiling
We do not use your personal data for automated decision-making, including profiling.
9. Rights of data subjects
9.1 Access to and information on, rectification and deletion of data, restriction of processing, and data portability
Every data subject has the right to access personal data and obtain information on it (Article 15 GDPR), the right to rectification of data (Article 16 GDPR), the right to deletion of data (Article 17 GDPR), the right to restriction of processing (Article 18 GDPR), and the right to data portability (Article 20 GDPR). You can get in touch with us using the contact data specified in Section 1 “Responsibility for data processing and contact data” to exercise the above rights.
9.2 Right to object to processing in accordance with Article 21 of the General Data Protection Regulation (GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6 paragraph 1 point (f) GDPR (data processing based on a weighing of legitimate interests), including any profiling based on those provisions within the meaning of Article 4 No. 4 GDPR. If you object, we will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for such purposes.
Your objection can be submitted without using a special form and should be sent to us using the contact data specified in Section 1 “Responsibility for data processing and contact data”. You will not incur any costs other than the basic costs of transmission for that.
9.3 Revocation of consent
If you have given us your consent to process your personal data, you can revoke such consent at any time. As a consequence we shall not process your data on basis of the aforementioned consent. The withdrawal of consent shall not affect the lawfulness of processing based on your consent before you withdrew it.
Please send your revocation to us using the contact data specified in Section 1 “Responsibility for data processing and contact data”.
10. Right to lodge complaints with the supervisory authority
Under Article 77 paragraph 1 GDPR, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the law, in particular the General Data Protection Regulation (GDPR). In this case you have the right to turn to the supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. Irrespective of your aforementioned rights please feel free to contact us directly regarding your concerns (for contact details see Section 1 “Responsibility for data processing and contact data”).