Imprint / Data Privacy

Imprint

Geothermie Rupertiwinkel GmbH

Marcel-Breuer-Straße 15
80807 Munich, Germany

Telephone: +49 89 59081291
Email: Infogtr@marubeni-edg.com

Local court (Amtsgericht): Amtsgericht Traunstein, HRB 27390
Tax identification number: DE 815 809 321

Managing directors Dr. Michael Brandauer und Yasuhiko Nagasaki
Marcel-Breuer-Straße 15
80807 Munich, Germany

Bergamt Südbayern
Regierung von Oberbayern
Maximilianstraße 39
80538 München

Telefon +49 (0)89 2176-2116
Fax +49 (0)89 2176-402116
bergamt@reg-ob.bayern.de

Responsible according to Paragraph 55 para. 2 of the German Interstate Broadcasting Agreement (Rundfunkstaatsvertrag)

Dr. Michel Brandauer
Marcel-Breuer-Straße 15
80807 Munich, Germany

Data Privacy Statement

Geothermie Rupertiwinkel GmbH, Marcel-Breuer-Straße 15, 80807 Munich, Germany (hereinafter “GTR” or “we”) takes the security and protection of your data very seriously and processes your data solely in compliance with the applicable legal provisions, in particular the provisions of the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and the Telemedia Act (TMG).

In the following, we would like to inform you which data we process when you use our website (“WebSite”) available at http://georupertiwinkel.de/, for what purpose and on what legal basis this is done and to whom we pass it on.

1. Controller

Responsible for the processing and controller within the meaning of the GDPR and other data protection laws applicable in Member States of the European Union is

Geothermie Rupertiwinkel GmbH
Marcel-Breuer-Straße 15
80807 Munich
Germany

Local Court (Amtsgericht) Traunstein, HRB 27390
Email: Infogtr@marubeni-edg.com

2. General information on data processing

Generally, we only collect and use your personal data to the extent necessary to provide our services. Apart from that, we only process that personal data which you actively provide to us, e.g. by sending emails or other inquiries to us.

We solely use the personal information provided by you for processing your inquiries. For other purposes, such as consulting, advertising and market analysis, we only use your personal data after having obtained your prior consent or if we are entitled or obliged to do so pursuant to applicable law.

3. Processing of data and logfiles technically necessary when using the WebSite

The WebSite is hosted by hellmedia GmbH, Am Moosfeld 10, 73417 Kirchanschöring, Germany, Telephone: +49 (0) 8685-778910, Fax: +49 (0) 8685-7789118, email: office@hellmedia.de.

When the WebSite is used for informational purposes only (i.e. no data for the carrying out of charging processes is provided), we only collect the personal data that is technically necessary to enable you to visit the WebSite and to ensure stability and security (the legal basis is Article 6 para. 1 sentence 1 lit. f of the GDPR):

• Date and time of the access
• Name of the Internet access provider
• Browser type/version and language
• The operating system used
• Access status/HTTP status code
• The quantity of data transferred
• Device (PC, tablet PC or smartphone)
• Our pages visited including visit time
• The last website you visited

There will be no person-based analysis of this data. Temporary storage of your IP address is necessary to enable your terminal device to access the WebSite. This requires the IP address of the user to be saved for the duration of the session. In addition, the data is used to optimise the WebSite and to ensure the security of our information technology systems. These purposes also constitute our legitimate interest in data processing pursuant to Article 6 para. 1 sentence 1 lit. f of the GDPR.

The data is deleted as soon as it is no longer required for the aforementioned purposes. If an IP address is stored, it will be deleted or made anonymous after 7 days at the latest.

4. Cookies

We may use cookies to enhance the functionality of the WebSite and in order to improve your user experience (Article 6 para. 1 sentence 1 lit. f of the GDPR). Cookies are small text files, which are placed on your device when you visit a website. Cookies are unable to execute programs or introduce viruses to the user’s device.

If you do not want us to recognise your device, please set your browser so that it deletes cookies from your device, blocks all cookies or warns you before a cookie is stored. However, you may not be able to use the full functionality of the WebSite in this case.

We use the following types of cookies for our WebSite (the legal basis for the processing of personal data by using cookies in each case is Article 6 para. 1 sentence 1 lit. f of the GDPR):

Session cookies or functional cookies (e.g. to keep navigation elements open or for help texts). These store a so-called session ID, with which different requests of your browser can be assigned to the common session. This will allow your device to be recognised when you visit the WebSite again.

Language or regional settings cookies. These allow us to save the country, currency or language settings with which the WebSite is to be accessed. Some functions of the WebSite cannot be offered without the use of these cookies. For these functions it is necessary that the browser is recognised. The user data collected by technically necessary cookies is not used to create user profiles. This purpose also constitutes our legitimate interests for the processing of personal data pursuant to Article 6 para. 1 sentence 1 lit. f of the GDPR.

Session cookies are automatically deleted when you close your browser. The remaining cookies are automatically deleted after a specified period, which can vary in length depending on the cookies. You can delete the cookies we have set in the security settings of your browser at any time.

5. Categories of recipients

We treat your data confidentially.

Personal data will only be transmitted by us to third parties if this is necessary for the above-mentioned purposes and legally permitted or if you have given your prior consent.

6. Data security

We deploy technical and organizational security measures to protect your personal data from being manipulated unintentionally or intentionally, lost, destroyed or accessed by unauthorized persons. Our technical and organizational measures are continuously reviewed and revised in line with the latest state of technology.

7. Your rights

To the extent we process any personal data related to you, you are entitled to the following rights in accordance with the GDPR:

7.1 Right of access to information

You have the right to request a confirmation from us whether we process personal data related to you.

If this is the case, you are entitled to request the following information from us:

(a)  The purposes of the processing

(b)  The categories of personal data that are processed

(c)  The recipients or categories of recipients to whom the personal data has been disclosed or is still being disclosed

(d)  Where possible, the intended period for which the personal data is stored or, if not possible, the criteria for the establishment of this period

(e)  The existence of the right to rectify or delete personal data of the data subject or the right to limit the processing by the controller or a right of objection against this processing

(f)  The existence of a right of repeal with a regulatory authority

(g)  Where the personal data are not collected from the data subject, any available information as to their source.

Furthermore, you are entitled to a right of access to information about whether your personal data have been sent to a third country or an international organisation. Insofar as this is the case, you also have the right to receive information about the appropriate guarantees in connection to the transfer of the data pursuant to Article 46 of the GDPR.

7.3 Right to rectification

You have the right to request from us the immediate rectification of any inaccurate personal data as well as the completion of any incomplete personal data relating to you. In this case, we will immediately rectify your personal data.

7.4 Right to restriction of processing

You have the right to request from us the limitation of your personal data if one of the following requirements is given:

(a)  You have challenged the accuracy of your personal data, and this is for a period that enables the us to verify the accuracy of your personal data.

(b)  The processing is illegal, and you decline the deletion of your personal data and instead request limiting its use.

(c)  We no longer require your personal data for the purposes of the processing, you, however, require the data for the assertion, exercise or defence of legal claims.

(d)  You have filed an objection to the processing in accordance to Article 21 para. 1 of the GDPR, and it is still undetermined whether our legitimate reasons as controller outweigh yours as the data subject.

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If the processing of your personal data has been restricted in accordance with the above requirements, we will immediately notify you before the restriction is lifted.

7.5 Right to erasure

Deletion obligation

You have the right to request from us that your personal data is promptly deleted provided one of the following reasons pertains and if the processing is not necessary:

(a)  Your personal data is recorded for such purposes or processed in another manner for which it is no longer necessary.

(b)  In case the processing of the personal data is based on Article 6 para. 1 sentence 1 lit. a of the GDPR, you revoke your consent on which the processing is based.

(c)  You file an objection against the processing in accordance with Article 21 para. 1 of the GDPR, and there are no predominant legitimate reasons for the processing, or you file an objection against the processing in accordance with Article 21 para. 2 of the GDPR.

(d)  Your personal data was unlawfully processed.

(e)  The deletion of your personal data is necessary for the fulfilment of a legal obligation.

Exceptions

A right to deletion does not exist, if the processing is necessary

(a)  for exercising the right of freedom of expression and information;

(b)  for compliance with a legal obligation which requires processing by law or for the performance of a task carried out in the public interest or in the exercise;

(c)  for the establishment, exercise or defence of legal claims.

7.6 Right to lodge a complaint with a supervisory authority

Without prejudice to any other remedy, you have the right of appeal to a competent supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

8. Withdrawal of consent

To the extent that the processing of personal data is based on your consent in accordance with Article 6 para. 1 of the GDPR, you may withdraw your consent at any time effective for the future by sending an email to Infogtr@marubeni-edg.com.

9. Contact data

All inquiries, requests and declarations as to the use of personal data can be send via email to Infogtr@marubeni-edg.com.

or by post to

Geothermie Rupertiwinkel GmbH
Marcel-Breuer-Straße 15
80807 Munich
Germany

April 2020