The protection of your personal data is an important concern of ours that we take into account in our business processes. We treat your personal data confidentially and in accordance with all relevant legal requirements. Accordingly, you will find information on this page regarding what data we collect from you when you visit our website, what we need this data for and how you can object to data collection. Transparency, self-determination and information security form an integral part of our corporate policy.
Party responsible for data processing
Entered in the Commercial Register under: District Court of Dresden, HRB 33555
Managing Director: Thorsten Wiegers
VAT identification number in accordance with section 27a of the German Value-Added Tax Act: DE 266879068
Person(s) responsible for content in accordance with section 55(2) of the German Interstate Broadcasting Agreement: UKB Umweltgerechte Kraftanlagen Betriebsführung GmbH / Thorsten Wiegers (address as above)
Contacting our data protection officer
You can contact our data protection officer using the details below:
UKB Umweltgerechte Kraftanlagen Betriebsführung GmbH
– Data Protection Officer –
1 Collection of personal data
Personal data that is processed independently or by third parties when visiting this website includes access data (server log files) as well as usage data (e.g. visited websites, access times) and meta/communication data (e.g. IP addresses).
It is also possible to use this website without disclosing personal data. Further storage of your personal data therefore only takes place if you provide this information voluntarily when visiting our website. This particularly includes your master and contact data (e.g. name, address, email, telephone numbers) as well as the data that you provide when contacting us (e.g. text entries, document uploads).
Your personal data is processed for the purpose of providing our website, including its functionality and content. This includes responding to contact requests and communicating with visitors to our website, as well as website analysis for marketing purposes. The visitors and users of our website are affected by the aforementioned processing activities.
1.1 Server log files
Each time you visit our website, we or our hosting provider collect and store the following information:
- IP address
- Browser used
- Time and date and the site visitor’s operating system
We only store the anonymised IP addresses of visitors to this website. At web server level, this is achieved by saving an IP address in the form 123.123.123.XXX as standard in the log file instead of the visitor’s actual IP address, where XXX is a random value between 1 and 254. This makes it impossible to relate the IP address to a specific individual.
This data is evaluated by us or our hosting provider for statistical and security purposes, as well as to optimise our website. The processing carried out by our hosting provider takes place in the scope of order processing under Art. 28 GDPR. The following retention periods apply:
- Server log files: 7 days
- Backups: 14 days in encrypted form
The legal basis for data processing is Art. 6(1)(f) GDPR, which permits processing on the basis of our legitimate interest in the efficient and secure provision of our website. You can object to the pseudonymous use of your data at any time (for more information on your rights in connection with the processing of your personal data, please refer to Section 4: Your rights in connection with your personal data).
Our company’s website uses so-called ‘cookies’. Cookies are small text files that are stored on your end device (PC, tablet, smartphone, etc.). Cookies contain a unique ID number (a so-called ‘cookie ID’) that consists of a unique character string. Servers and websites can be allocated to the specific internet browser in which the cookie is stored. A specific internet browser can be recognised and identified based on this unique cookie ID. Among other things, cookies store website settings that boost a website’s user-friendliness and effectiveness.
Use of Matomo (former Piwik)
Our website uses features of the web analytics service Matomo. The provider is InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand. Matomo is an open-source-software used for website optimisation. It uses so-called ‘cookies’ (text files stored on your computer) to analyse your use of this website. The user activity is collected anonymously. The following data categories are evaluated:
- Your browsertype and –version
- Your operating system
- Your country
- Date and time of the website request
- Number of visits
- Duration of the visits
- Activated external links
- Anonymised IP-address
Pseudonym user profiles may be created from the data. The cookies are saved for 13 months. The data gathered by your use of this website are only stored on our server and is not transferred to third parties.
The legal basis for the use of Matomo is your consent pursuant to Art. 6(1) sentence 1(a) GDPR, provided that you have consented to the use of Matomo via the cookie notice when accessing the website (opt-in). Tracking is only activated after you have given your consent and not before.
Rights of the data subject
You may revoke your consent at any time with effect for the future by preventing the storage of cookies for the future. To do this, you have the following options:
Browser settings / browser plugin:
You can prevent cookies from being stored by adjusting the relevant settings in your browser or by installing a suitable browser extension (plugin), however, this may restrict your use of the site’s features.
Objection to data collection:
Objecting to data collection will not affect the lawfulness of data processing based on consent before its withdrawal. You will find more information on your rights relating to the processing of your personal data under Section 4: Your rights in connection with your personal data.
Our Group has implemented a number of security measures to protect your personal data processed by us against tampering, loss, destruction, unauthorised third-party access and unauthorised disclosure. Our security measures are continually updated to reflect the latest technological developments. In addition, all necessary technical and organisational measures are guaranteed in compliance with data protection requirements.
This website uses TLS encryption for security reasons and to protect the transmission of confidential content. You can identify an encrypted connection by the address bar of the browser switching from “http://” to “https://” and by the lock symbol in your browser bar.
3. Existence of automated decision-making (profiling)
We do not automatically process your personal data with the aim of evaluating certain aspects of your person (so-called profiling, Art. 4 No. 4 GDPR).
4. Your rights in connection with the processing of your personal data
If you would like to exercise your rights, please contact our data protection officer at firstname.lastname@example.org or
UKB Umweltgerechte Kraftanlagen Betriebsführung GmbH
– Data Protection Officer –
Telephone: +49 3521 47677 0
You have the following rights in connection with the processing of your personal data:
Right to access and confirmation of personal data (Art. 15 GDPR)
You have the right to receive from us free access to and confirmation of the personal data stored about you, as well as a copy of this information, at any time.
Right to rectification (Art. 16 GDPR)
You have the right to request the immediate rectification of incorrect personal data held about you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right to erasure (Art. 17 GDPR)
You have the right to have your personal data deleted immediately, provided that one of the following reasons applies and insofar as the processing of this data is not necessary:
- The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
- You withdraw consent on which the processing is based and where there is no other legal ground for the processing.
- You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
- The personal data have been unlawfully processed.
- The personal data have to be erased for compliance with a legal obligation in Union or Member State law to which we are subject.
- The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.
Right to restriction of processing (Art. 18 GDPR)
You have the right to obtain restriction of processing where one of the following applies:
- The accuracy of the personal data is contested by you for a period enabling us to verify the accuracy of the personal data.
- The processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead.
- We no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims.
- You have objected to processing pursuant to Article 21(1) GDPR pending the verification of whether our legitimate grounds override yours.
Right to revoke data privacy consent (Art. 7(3) GDPR / Section 51 of the German Data Protection Act)
You have the right to revoke consent once granted in accordance with Art. 7(3) GDPR with effect for the future. Objecting to data collection will not affect the lawfulness of data processing based on consent before its withdrawal.
Right to object to processing (Art. 21 GDPR)
You have the right to object at any time to the processing of personal data held about you based on Art. 6(1)(e) or (f) GDPR, for reasons arising from your particular situation. In the event of an objection, we will no longer process personal data unless we can prove compelling reasons for processing that are worthy of protection and outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims. You have the right to object at any time to the processing of your personal data for profiling or direct marketing purposes.
Right to data portability (Art. 20 GDPR)
You have the right to receive the personal data that has been provided to us about you in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without our interference, provided that the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR and the processing is carried out using automated procedures, provided that the processing is not necessary for the performance of a task in the public interest or in the exercise of public authority which was transferred to controller.
In exercising your right to data portability pursuant to Art. 20(1) GDPR, you also have the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided that this does not affect the rights and freedoms of other persons.
Right to lodge a complaint with the supervisory authority (Art. 77 GDPR)
You have the right to contact a supervisory authority in the member state where you reside or work or where you suspect that the processing of personal data held about you violates the EU’s General Data Protection Regulation at any time.
5.Google Web Fonts
Our website uses the fonts (“Google Fonts”) of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, for a uniform representation of fonts. When you load a page of our website, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. If your browser does not support web fonts, a default font is used by your computer.
Last updated: February 2019