Data Privacy
Data Privacy Information
DATA PRIVACY INFORMATION FOR USERS OF OUR WEBSITE AND FOR GENERAL DATA PROCESSING ACTIVITIES OUTSIDE OF THIS WEBSITE ACCORDING TO THE EU GENERAL DATA PROTECTION REGULATION ("GDPR")
Last Updated: 01/01/2024
Welcome to this information page on data privacy for users of our website and on general data processing activities outside of this website conducted by AREAM Group SE and all of its affiliated companies in terms of § 15 of the German Stock Corporation Act (Aktiengesetz) (hereinafter “AREAM”, “us” or “we”).
The protection of your personal data is of great importance to us. We would like to inform you in this data privacy information about the personal data being processed by us or on our behalf and your choices and options in that matter. It applies to the processing of personal data within the use of the websites under www.aream-group.com ("Website") and outside of this Website.
I. Who is responsible for the processing of personal data? Who should I contact If I have any queries regarding data privacy at AREAM?
Controller:
AREAM Group SE
Kaistraße 2
40221 Düsseldorf
Legal representative: Markus Voigt (Managing Director)
Data Protection Contact:
AREAM Group SE
c/o data protection'.
Kaistraße 2
40221 Düsseldorf
Tel. 0211 - 30 20 60 4-2
Email: datenschutz@aream.de
II. How we handle your personal data
In the following we wish to provide you with information on how we handle your personal data.
1. When using our Website
a. Webhoster
The web hosting for our Website is provided for by designverign GmbH, with its registered office in Düsseldorf, Germany ("Webhoster"). The privacy policy of our web host can be viewed here: https://www.designverign.de/datenschutz
When you visit our Website, the web server automatically records temporarily the data that your browser transmits when you are accessing our server (so-called server log files). This usually includes the address and name of the web pages and files, date and time of the request, the amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), the IP address and the requesting provider. The data is also stored in the log files of our system.
The data is used for the operation of our Website as well as to ensure IT security, in particular to defend against attempted attacks on our web server.
Personal data is kept for a maximum of 60 days and then deleted.
The legal basis for the handling of your personal data is Art. 6 (1) (f) GDPR. The legitimate interest results from our interest in the technical administration and provision of our Website.
b. Cookies
Our Website uses cookies. Cookies are small text files that can be stored in the browser of the device that is used to access a website. With the help of the cookie certain information is passed to the site that sets the cookie (here us).
aa. Session cookies
We use session cookies on this Website. Session cookies store a so-called session ID, which can be used to assign various requests from your browser to the shared session. This allows your computer to be recognized when you return to our Website.
Session cookies are used to make our Website more user-friendly and effective.
The session cookies are deleted when you close the browser.
You can set your browser according to your wishes and, for example, refuse to accept third-party cookies or all cookies. Please note that if you do, you may then not be able to use all the functions of this Website.
The legal basis for the data processing is Art. 6 (1) (f) GDPR. Our legitimate interest results from our interest in providing our Website in an effectively and a user-friendly manner.
bb. Further cookies
Certain services we use for our Website, such as Google Analytics (see section II. 1. e of our data privacy information), require the use of further cookies. Information on these further cookies is provided for in the respective chapters describing the services below.
c. When you contact us via our Website
You can contact us directly via a contact form available on our Website.
When you use our contact form, we process the data you provide us with (your name, your e-mail address and optionally your telephone number).
The processing of this data serves the purpose of being able to answer your specific request in the way you want (by email or by telephone) and to be able to address you by your name.
Your personal data will be deleted if the circumstances show that your request has been answered or, if storage is required under commercial or tax law, after the expiry of the storage period required by law.
The processing of your personal data is based on Art. 6 (1) (f) GDPR. Our legitimate interest in processing the data results from communicating with you in the desired way and being able to process your request.
d. Newsletter
For sending you our newsletter, we are using a technical service provider, CleverReach GmbH & Co. KG ("CleverReach") with its registered office in Rastede, Germany. You can view the CleverReach privacy policy here: https://www.cleverreach.com/de/datenschutz/.
Based on your prior consent, we will are collecting and using the email address that you provided when subscribing to our newsletter for sending you interesting information about our products and renewable energies.
The processing of this data serves the purpose of enabling the distribution of our newsletter. We are using the so-called double opt-in procedure when you register for our newsletter via our Website. This means that you will receive an e-mail from us with a link that you can use to confirm that you, as the owner of the corresponding e-mail address, wish to receive our newsletter in future. The confirmation serves as your consent in accordance with Art. 6 (1) (a) GDPR that we may use your personal data for the purpose of sending our newsletter to you.
We are keeping your e-mail address as long as you want to receive our newsletter. If you have unsubscribed from our newsletter, your e-mail address will be automatically deleted after one month. The same applies to unconfirmed e-mail addresses, i.e. from all recipients who have started the double opt-in procedure but not completed it.
You may at any time with future effect revoke your consent to receive our newsletter. To declare that you wish to unsubscribe, you may use the respective link included in all newsletters, or refer to the contacts indicated in this data privacy information.
The legal basis for this data processing is your consent in accordance with Art. 6 (1) (a) GDPR.
e. Use of Google Analytics
This Website uses Google Analytics, a web analytic service provided by Google Ireland Ltd, with registered office in Dublin, Ireland. You can find more information on the terms of use and data protection of Google Ireland Ltd. at https://www.google.com/analytics/terms/de.html or at https://policies.google.com/.
Google Analytics uses cookies. The information generated by the cookie enables an analysis of the usage of our Website. We would like you to enjoy using our Website and take advantage of our products and services. To help you find the products that interest you and to enable us to design our Website in a user-friendly manner, we use Google Analytics to analyze and regularly improve the use of our Website. We can use the statistics obtained to improve our Website and make it more interesting for you as a user.
The information generated by the cookie about your usage of this Website is usually transferred to a Google server in the USA and stored there. This Website uses Google Analytics with IP anonymization, so-called IP masking. This means that IP addresses within member states of the European Union are shortened and then further processed, thus excluding any possibility of personal identification. If the data collected about you contains a personal reference, this is immediately excluded and the personal data is therefore deleted immediately.
You can prevent the storage of cookies by setting your browser software accordingly; in this case you may not be able to use all functions of this Website to their full extent.
You can also prevent the processing of data generated by the cookie and related to your use of the Website (including your IP address) by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
To prevent Google Analytics from collecting data across multiple devices, you must opt out on all systems in use.
The data linked to cookies is automatically deleted after 14 months.
The legal basis for processing the data is Art. 6 (1) (f) GDPR. Our legitimate interest results from our interest in the optimization of our Website.
f. Use of Google Maps
On this Website, we are using Google Maps API, a web mapping service provided by Google Inc. with registered office in Mountain View, California, U.S.A. For more information about Google's privacy policy and additional terms of use for Google Maps, please visit https://policies.google.com/privacy?hl=de
We are using Google Maps to display interactive maps, locations and for route planning. By embedding Google Maps on our Website, we are able to display interactive maps directly on the Website and allow you to use the map function conveniently.
The legal basis of the data processing is derived from Art 6 (1) (a)/ Art. 6 (1) (f) GDPR. Our interest results from presenting our location to you and providing a comfortable use of a route description/ navigation.
By visiting the Website, Google Inc. receives the information that you have visited the corresponding subpage of our Website and the server log files are transmitted.
In the browsers of most Google users there is a setting cookie called "NID". The cookie is contained in requests that browsers send to Google sites. The NID cookie contains a unique ID that Google uses to store your preferred settings and other information, including your preferred language (e.g. English), how many search results you want displayed per page (e.g., 10 or 20), and whether you want Google SafeSearch Filter enabled.
This is done regardless of whether Google Inc. provides a user account that you are logged in with or whether there is no user account. If you are logged in to Google, your information is directly associated with your account. If you don't want your profile to be associated with Google, you have to log out before activating the button.
Google Inc. stores your data as user profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its Website. Such an evaluation is carried out in particular (even for users who are not logged in) for the purpose of providing needs-based advertising and to inform other users of the social network about your activities on our Website. You have a right to object to the creation of these user profiles, whereby you must contact Google Inc. to exercise this right.
2. How we handle your personal data outside of this Website
For all different types of contracts that we conclude with you, we process the personal data that is necessary for the establishment, amendment and content of our contract with you. These are, for example, your title, your first name, surname, academic title, date of birth, if applicable, e-mail addresses, address, telephone number (landline and/or mobile), fax number, property data, payment data, your function in the company/authority.
In addition, we are processing - insofar as this is necessary within the framework of the contractual relationship and/or our other cooperation with you - personal data which we permissibly obtain from publicly accessible sources (e.g. public registers, press, Internet) or which are legitimately transmitted by other third parties.
The processing serves the purpose of initiating, entering into, processing and handling contractual relationships.
The legal basis for this is derived from Art. 6 (1) (b) GDPR.
III. How long do we store your personal data?
We will store your personal data according to the relevant retention periods required by law (e.g. commercial law and tax law), unless we have explicitly referred to a duration of storage in the description of the respective data processing in this privacy policy. After expiry of the respective period, the corresponding data is routinely deleted. If data is required for the fulfilment or initiation of a contract, or if we have a legitimate interest in further storage, the data will be deleted if it is no longer required for these purposes or if you exercise your right of revocation or objection.
IV. Transfer of Personal Data
1. Processors
We pass on your data to processors, i.e. companies which we commission to process data within the scope of the law, Art. 28 GDPR (service providers, agents). AREAM remains responsible for the protection of your data. We commission companies in particular in the following areas: IT, sales, marketing, finance, consulting, customer service, human resources, logistics, printing.
2. Legal Obligation
We pass on your data due to legal obligation: In certain cases we are legally obliged to transmit certain data to the requesting governmental authority.
3. With Your Consent
We will pass on your data if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR.
V. Place of Data Processing
Your data will be processed in Germany and other European countries. If, in exceptional cases, your data is also processed in countries outside the European Union (i.e. so-called third countries), this will take place if you have expressly consented to this or if it is necessary for us to provide you with our services or if it is required by law (Art. 49 GDPR). In addition, your data will only be processed in third countries if certain measures ensure that an appropriate level of data protection is in place (e.g. adequacy decision of the EU Commission or so-called suitable guarantees, Art. 44 DPA).
VI. Information Regarding your Rights
1. Right to obtain information about your personal data stored by us
In accordance with Art. 15 GDPR, you can request information about your personal data stored by us. In particular, you may request information on the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, erasure, restriction of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of automated decision making including profiling and, if applicable, information on relevant details thereof.
2. Right to request correction
In accordance with Art. 16 GDPR, you can request the correction of incorrect personal data or the correction of your personal data stored with us.
3. Right to object to a processing
In accordance with Art. 17 GDPR, you can object to a processing unless we are able to proof that compelling, warranted reasons superseding your interests, rights and freedom exist, or that such processing is done for purposes of the assertion, exercise or defense of legal claims.
4. Right to restricted processing
In accordance with Art. 18 GDPR, you can demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, if the processing is unlawful but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or if you have lodged an objection to the processing in accordance with Art. 21 GDPR.
5. Right to revoke your consent
You may at any time with future effect revoke your consent to the procession of your personal data according to Art. 7 (3) GDPR. This also applies if your consent was given to us prior when the GDPR came into force, i.e. before 25.05.2018. Revoking your consent has the consequence that we may no longer continue with the processing of your personal date based on this consent for the future.
6. Right to file a complaint with a supervisory authority for data protection
In accordance with Art. 77 GDPR, you can file a complaint with a supervisory authority for data protection.
The supervisory authority responsible for our company is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2-4, 40213 Düsseldorf, Tel: 0211 38424 - 0, E-Mail: poststelle(@)ldi.nrw.de.
Please take special notice of your right to object:
VII. OBJECTION TO THE PROCESSING OF PERSONAL DATA
1. In General
If your personal data is processed on the basis of our legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object to the processing of your personal data at any time pursuant to Art. 21 GDPR, provided that there are reasons for doing so arising from your particular situation. This also applies to profiling based on the provisions of the GDPR.
If you object, we will no longer process the personal data concerning you unless we can prove compelling reasons for processing which are worthy of protection and which outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
2. Direct Advertising
Where personal data concerning you is processed by us for the purpose of direct marketing, you have the right to object to such processing at any time and without giving reasons, including to profiling, insofar as it is related to such direct marketing. If you object to processing for the purposes of direct marketing, the personal data concerning you will no longer be processed for those purposes.
If you wish to exercise your right to object, you can write to our postal address, or also simply an e-mail to datenschutz@aream.de.
We may update our data privacy information from time to time. Updates of our data privacy information will be published on our Website. Any amendments become effective upon publication on our Website. We therefore recommend that you regularly visit our Website to keep yourself informed on possible updates.