Privacy policy

Thank you for visiting our website https://h2-saarland.de/ and for the interest you have shown in it. With the aim of offering you the highest possible degree of transparency, we inform you below about the type, scope and purpose of the collection, processing and use of personal data that arise in the context of the use of our website. The General Data Protection Regulation (hereinafter referred to as “GDPR”) can be accessed here as a complete document.

 

Contents

1. definitions of terms

2. controller pursuant to Article 4 No. 7 GDPR

3. data protection officer

4. legal basis of the processing

5. storage of data / deletion of data

6. disclosure of personal data

7. collection of personal data

7.1 Use of our website for information purposes only

7.2 Contact by e-mail

7.3 Contact form

7.4 Needs assessment form

7.5 Registration form

8 Hosting

9. your rights

10. right to object

11. data security

 

1. definitions of terms

 

The following terms that we use in our privacy policy are defined in Art. 4 GDPR. This is only an excerpt from Art. 4 GDPR. All definitions can be found in the GDPR (available here).

  • Personal data (Art. 4 No. 1 GDPR)

Personal data means any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

  • Processing (Art. 4 No. 2 GDPR)

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

  • Pseudonymization (Art. 4 No. 5 GDPR)

Pseudonymization means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

  • Controller (Art. 4 No. 7 GDPR)

The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law

where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law

  • Processor (Art. 4 No. 8 GDPR)

A processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

  • Third party (Art. 4 No. 10 GDPR)

A third party is a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or processor, are authorized to process the personal data.

  • Consent (Art. 4 No. 11 GDPR)

Consent of the data subject is any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

  • Company (Art. 4 No. 18 GDPR)

An enterprise is a natural or legal person engaged in an economic activity, irrespective of its legal form, including associations or partnerships regularly carrying out an economic activity (Art. 4 No. 18 GDPR).

 

2. controller pursuant to Art. 4 No. 7 GDPR

 

Saarland Hydrogen Agency GmbH

Balthasar-Goldstein-Straße 31

66131 Saarbrücken

Telephone: +49 / 6893 9899 600

E-mail: info@h2-saarland.de

You can download our complete imprint here:

https://h2-potenzial-saar.de/impressum/

 

3. data protection officer

 

You can reach our data protection officer by post:

LEG Service GmbH

With the addition

“For the attention of the Data Protection Officer of Saarländische Wasserstoffagentur GmbH”

Balthasar-Goldstein-Straße 31

66131 Saarbrücken

Tel: 0681-9899-600

and by e-mail at: info@strukturholding.de

 

4 Legal bases of the processing

 

For each processing operation described in our privacy policy, we will inform you of the legal basis on which the processing is carried out. A distinction is made between the following groups of cases in which processing is lawful:

  • You have given us your consent to the processing of personal data concerning you for one or more specific purposes (Art. 6 para. 1 sentence 1 lit. a GDPR).
  • There is a contract between you and us for the performance of which the processing is necessary or the processing is necessary for the performance of pre-contractual measures taken at your request (Art. 6 para. 1 sentence 1 lit. b GDPR).
  • The fulfillment of a legal obligation to which we are subject requires processing (Art. 6 para. 1 sentence 1 lit. c GDPR).
  • The protection of vital interests of you or another natural person requires processing (Art. 6 para. 1 sentence 1 lit. d GDPR).
  • Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us (Art. 6 para. 1 sentence 1 lit. e GDPR).
  • Processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data (Art. 6 para. 1 sentence 1 lit. f GDPR).

 

5. storage of data / deletion of data

 

Within the processing described in our privacy policy, we will inform you of the corresponding storage period or the times of deletion or blocking of data. If no explicit storage period is defined, the data will be deleted or blocked as soon as the purpose or legal basis for storage no longer applies.

Data may be stored beyond the defined periods if statutory provisions to which we are subject (e.g. Section 147 AO, Section 247 HGB) provide for a different storage period.

Following the storage period, the personal data will be deleted or blocked unless further storage is required by us on a legal basis. In addition, storage beyond the specified period is possible in the event of a (possible) legal dispute with you or other legal proceedings.

 

6 Disclosure of personal data

If your personal data is transferred, you will be informed accordingly at the relevant point in our privacy policy. If your personal data is transferred outside the European Economic Area and thus to so-called third countries, you will be informed accordingly at the relevant point in our privacy policy. In principle, we only transfer personal data to third countries where the EU Commission has confirmed an adequate level of protection or where we can guarantee the careful handling of personal data on the basis of contractual agreements or other suitable guarantees.

 

7 Collection of personal data

In the following, we will inform you about the collection of personal data (such as name, e-mail address, address or user behavior). The provision of data is neither legally nor contractually required. You are neither legally nor contractually obliged to provide the data. Please note, however, that it is not possible to use our website without providing the data specified in section 6.1. Automated decision-making, including profiling in accordance with Art. 22 (1) and (4) GDPR, does not take place on our website.

 

7.1 Use of our website for information purposes only

 

If you do not register on our website (e.g. in the form of a newsletter) or transmit data to us in any other way (e.g. by using a contact form), only the personal data transmitted by your browser to our server will be collected. This is data that is technically necessary for us to make the website available to you for viewing while ensuring a secure and stable display. This is the following information, which is derived from a log file line:

    • Internet Protocol address (IP address)
    • Time and date of the respective access
    • Time zone difference to Greenwich Mean Time (GMT)
    • The specific page accessed
    • Status of the access / Hypertext Transfer Protocol (http)
    • Amount of data that was transferred in each case
    • Website from which our website was accessed (referrer URL)
    • Internet browser used (incl. language and version)
    • Operating system used

The legal basis for the collection of the listed data results from Art. 6 para. 1 sentence 1 lit. f GDPR. We have a legitimate interest in ensuring an error-free connection setup and convenient use of our website as well as analyzing system stability and security and using the data for other administrative purposes.

 

7.2 Making contact by e-mail

If you contact us via the e-mail address provided in section 2 or other e-mail addresses of our company that are published on our website, we will store your e-mail address and other contact details provided in your e-mail (e.g. your name or telephone number) in order to process your request. This data will be deleted immediately as soon as further storage is no longer necessary. If statutory retention periods apply to the data, the processing of the data will be restricted accordingly instead of being deleted. Depending on the reason for sending the email, the legal basis for processing the data results from Art. 6 para. 1 sentence 1 lit. b GDPR or from Art. 6 para. 1 sentence 1 lit. f GDPR, i.e. either for processing the contract concluded with you and for fulfilling our (pre)contractual obligations or is based on our legitimate interest in contacting people interested in our services.

 

7.3 Contact form

If you contact us using the contact form on our website, the contact data you provide will be stored and processed by us in order to process your request. Depending on the reason for contacting us, the legal basis for processing the data results from Art. 6 para. 1 sentence 1 lit. b GDPR or from Art. 6 para. 1 sentence 1 lit. f GDPR, i.e. either for processing the contract concluded with you and for fulfilling our (pre)contractual obligations or is based on our legitimate interest in contacting interested parties for our services.

 

7.4 Demand assessment form

You can use the demand assessment form for hydrogen energy to precisely record and communicate your individual demand for hydrogen energy. The aim of the form is to offer you a customized solution. Please note that this is an indicative notification and not a binding order. On the last page of the form, you decide for yourself

    • whether we may contact you regarding queries/open points;
    • you agree to the anonymized and aggregated publication of the data you have provided;
    • Your data may be used for evaluation purposes by employees of Saarländische Wasserstoffagentur GmbH and Saarland University of Applied Sciences (HTW). This includes the transfer of data to the Google Calc Sheet application. This is an application of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, imprint: https://www.google.de/intl/de/contact/impressum.html. The parent company of this Irish-based company is: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”). Google’s privacy policy can be found here: https://policies.google.com/privacy?hl=de. Data processing within the USA is possible in this respect. The USA is a so-called third country within the meaning of the GDPR. The data transfer to this third country is justified in the present case in accordance with Art. 44 and 45 GDPR, as Google is an active participant in the Data Privacy Framework. This is a data protection agreement between the EU and the USA in which the level of data protection for certified companies in the USA is declared appropriate (“adequacy decision”)

The legal basis for processing the data, unless based on your selection and thus active consent (then Art. 6 para. 1 sentence 1 lit. a GDPR), results from Art. 6 para. 1 sentence 1 lit. f GDPR, i.e. is based on our legitimate interest in contacting those interested in our services.

 

7.5 Registration form

When you register for an event using the registration form on our website, the data you provide will be stored and processed by us in order to process your registration. The legal basis for processing the data is based on our legitimate interest in being able to plan the event, i.e. results from Art. 6 para. 1 sentence 1 lit. f GDPR.

 

8. hosting

Our website is hosted by the company SiteGround Spain S.L., Calle de Prim 19, 28004 Madrid (hereinafter referred to as “SiteGround”), legal notice: https://de.siteground.com/viewtos/impressum?lang=de_DE. When our website is accessed, the personal data specified in this privacy policy is transmitted to SiteGround for purely informational use of the website. We have concluded a corresponding data processing agreement with SiteGround for this purpose. The server location used by us is exclusively in Germany.

 

9. your rights

 

 

Below we inform you about your rights under the GDPR. You can access the GDPR as a complete document here.

    • Right to information in accordance with Art. 15 para. 1 GDPR

You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, in addition to the right to information about this personal data, you have the right to information about the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your personal data has been disclosed or will be disclosed in the future (in particular recipients in third countries or international organizations), the storage period or criteria for determining the storage period, and the recipients to whom the personal data has been or will be disclosed. the criteria used to determine the storage period, the existence of the right to request from us rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing, the existence of the right to lodge a complaint with a supervisory authority, any available information as to the source of the data (where the personal data are not collected by us), the existence of automated decision-making, including profiling and, where applicable, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing.

    • Right to rectification in accordance with Art. 16 GDPR

You have the right to obtain from us without undue delay the rectification of inaccurate personal data and the completion of incomplete personal data concerning you.

    • Right to erasure (“right to be forgotten”) pursuant to Art. 17 para. 1 GDPR

You have the right to demand that we erase the personal data concerning you without undue delay. However, this right does not exist in accordance with Art. 17 para. 3 GDPR if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest in the area of public health, for archiving purposes in the public interest or for the establishment, exercise or defense of legal claims.

    • Right to restriction of processing pursuant to Art. 18 para. 1 GDPR

You have the right to demand that we restrict the processing of your personal data if you dispute the accuracy of your personal data (the restriction applies for the period of time that enables us to verify the accuracy), the processing of your personal data is unlawful and you refuse to delete it, we no longer need your personal data for the processing purposes, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 para. 1 GDPR (the restriction applies as long as it is not yet clear whether our legitimate reasons outweigh yours).

    • Right to data portability in accordance with Art. 20 GDPR

You have the right to receive the personal data concerning you from us in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from us (or to have the data transmitted directly from us to another controller, where technically feasible), where the processing is based on consent or on a contract or is carried out by automated means.

    • Right to withdraw consent granted in accordance with Art. 7 para. 3 GDPR

You have the right to revoke your consent at any time with effect for the future, so that the data processing that was based on your consent can no longer be continued in the future, but the legality of the processing carried out until your revocation is not affected by this.

    • Right to lodge a complaint pursuant to Art. 77 GDPR

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or the place of the alleged infringement. Further information on this can be found on the website of the Federal Commissioner for Data Protection and Freedom of Information.

 

10. right to object

In addition to the aforementioned rights, you also have the right to object at any time to the processing of your personal data, which is carried out in the public interest or in the exercise of official authority (Art. 6 para. 1 sentence 1 lit. e GDPR) or to safeguard legitimate interests on our part (Art. 6 para. 1 sentence 1 lit. f GDPR), with effect for the future, provided that there are reasons for this arising from your particular situation. If you object, your personal data will no longer be processed unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims. If your personal data is processed for the purpose of direct marketing or profiling, insofar as there is a connection to direct marketing, you have a general right to object without the need for reasons arising from your particular situation. In the event of an objection, we will immediately cease processing the personal data for these purposes. To exercise your right of revocation or objection, simply send an e-mail to: info@h2-saarland.de

 

11. data security

The TLS 1.3 (Transport Layer Security) encryption and communication protocol is used on our website. The TLS certificate used by us and issued by a certification authority enables encrypted data exchange between the web browser and the web server, which means that sensitive data cannot be read by third parties. We use the process with the highest encryption level supported by your browser, which is usually 256-bit encryption. The higher the number of bits, the longer the key and the better the protection against third parties.

Your cookie settings

[borlabs-cookie type=”btn-cookie-preference” /]

Your cookie selection history

[borlabs-cookie type=”consent-history” /]