Privacy policy
The following information applies to our presence on the following social media channels and is supplementary to our general privacy policy:
- LinkedIn: https://www.linkedin.com/company/steag/
- YouTube: https://www.youtube.com/@STEAGGmbH
- XING: https://www.xing.com/pages/steaggmbh
The protection of personal data is an important concern for us. Therefore, we process your data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and other applicable legislation on the protection of personal data and data security.
They provide you with an overview of which personal data we collect from you via our website as well as for what purposes and in what way we use it. In addition, we inform you about the rights you have with regard to your personal data.
1. Responsible body in the sense of data protection law
STEAG GmbH
Rüttenscheider Str. 1-3
45128 Essen
2. Contact details of our data protection officer
STEAG GmbH
Corporate Privacy Officer
Rüttenscheider Straße 1-3
45128 Essen
3. Processing your data
The processing of your personal data generally takes place in a member state of the European Union or in another state party to the Agreement on the European Economic Area. A transfer of personal data to a third country or access to this data from a third country will only take place if the special requirements of Art. 44 et seq. DSGVO are fulfilled (e.g. by agreeing on standard contractual clauses or if the recipient acts on the basis of a legal basis decided by the European Commission pursuant to Art. 45 (1) DSGVO (so-called adequacy decision)).
However, special features apply to the use of social media channels. We would like to point out that we are not able to track all processing operations on the social media channels. Depending on the provider, processing operations may be carried out by the operators of the social media channels over which we have no influence and of which we gain no knowledge, in particular no data from you. For details, please refer to the terms of use and data protection provisions of the respective social media channels. You can find these under Legal basis and revocation option at the end of this chapter.
To the extent that we have control over the processing of your data, we will ensure that the applicable data protection regulations are complied with as described.
joint responsibility according to Art. 26 GDPR:
According to the European Court of Justice (ECJ), we are jointly responsible for the processing of your personal data with the provider of the respective social media channel. Insofar as the social media channels process personal data based on our instructions, the social media channels process your personal data under our responsibility as our processors. You can find the addresses of our processors under "Recipients of the data".
You use these channels and their functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating). Please note that your data may be processed outside the European Union. Unfortunately, this is not currently possible in accordance with data protection regulations.
Note: Data transfer to the USA
We would like to point out that in its ruling of 16.07.2020 (Case C-311/18), the ECJ declared the EU-US Privacy Shield agreement on the permissible transfer of data between the EU and the USA to be inadmissible and that personal data cannot currently be transferred to the USA in accordance with data protection law. The reason for this is existing laws in the USA that give security authorities far-reaching powers to monitor "foreign communications". We hereby expressly draw your attention to this risk.
Scope of processing
If you use the contact options to us on these social media channels, we process the data and information you provide in order to process your request, the reason for your contact and to answer your questions. In particular, this concerns your inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. entries in online forms), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
The social media channels provide our company with statistical data, so-called "page insights," which give us information about user activity on our company websites.
Processing purposes
Via the aforementioned portals, we offer you the opportunity to inform yourself about our company and our products and to contact us. In addition, we use the social media channels to ensure the broadest possible presence on the Internet.
Receiver
The recipient of the data is the respective social media channel as processor:
- Linkedin (Linkedln Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)
- Youtube (ein Dienst der Google Ireland Limited Gordon House, Barrow Street Dublin 4 Irland)
- XING (XING ist ein Dienst der New Work SE, Am Strandkai 1, 20457 Hamburg)
Depending on the recipient, the processing of personal data in countries outside the European Union, in particular in the USA, cannot be ruled out. Under certain circumstances, this may be associated with the risk of more difficult legal enforcement, which represents a risk for the individual user.to the USA.
Storage duration
The personal data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for storing it no longer applies, you request us to delete it, or you revoke your consent to its storage. Stored cookies remain on your terminal device until you delete them.
We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details on this, please contact the operators of the social networks directly (e.g. in their privacy policy, the links to which can be found at the end of this chapter).
Legal basis and revocation option
The processing of your personal data by us is based on our legitimate interests to inform you about our company and to bring you closer to our products and services, as well as to open up communication with us for this purpose (Art. 6 para. 1 sentence 1 lit. f DSGVO). The analysis processes initiated by the social media channels may be based on different legal grounds, which are to be specified by the operators of the social media channels (e.g. consent within the meaning of Art. 6 (1) sentence 1 lit. a DSGVO).
For a detailed description of the respective processing and the opt-out options for the aforementioned services, please refer to the data protection declarations of:
- LinkedIn: de.linkedin.com/legal/privacy-policy?
- YouTube: policies.google.com/privacy
- XING: https://privacy.xing.com/de/datenschutzerklaerung
Since we do not have complete access to your personal data, you should contact the providers of the social media channels directly when asserting your rights (see section "Your rights"), as they each have access to the personal data of their users and can take appropriate measures and provide information.
If you still need help, we will of course try to support you. Please contact datenschutz@steag.com.
4. YOUR RIGHTS
You have a right of access, i.e. you can demand that we disclose all the personal information we have collected and hold on time (Art. 15 DSGVO). In addition, you may also request rectification (Art. 16 DSGVO) or erasure (Art. 17 DSGVO) or restriction of processing (Art. 18 DSGVO) and have a right of appeal to a data protection supervisory authority (Art. 77 DSGVO in conjunction with Section 19 BDSG). If we process your personal data on the basis of your consent, you can revoke this consent at any time with effect for the future. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation, but the processing shall cease for the future.
Revocation and other requests can be addressed to our Group Privacy Officer.
We take your inquiries and concerns very seriously and always strive to address them.
Furthermore, there is the right to complain to a data protection supervisory authority in accordance with Article 77 DSGVO in conjunction with Section 19 BDSG. In North Rhine-Westphalia, the competent supervisory authority is: State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia Kavalleriestr. 2 - 4, 40213 Düsseldorf.
Stand: January 2023