We, Stahlwerke Bochum GmbH (hereinafter ‘we’), appreciate your interest in our website.
The protection and security of your data is our top priority. Your personal data is processed exclusively within the framework of the statutory provisions of data protection law, in particular the European Data Protection Regulation (hereinafter ‘GDPR’).
1. Person responsible for data processing and data protection officer; contact
The person responsible for data processing within the meaning of the data protection laws is:
Stahlwerke Bochum GmbH
Castroper Str. 228
Tel.: +49 (0) 234-508-2
Fax: +49 (0) 234-508-51041
If you have any questions or suggestions regarding data protection, please do not hesitate to contact us.
You can reach our data protection officer as follows:
Rechtsanwalt Boris Reibach
Tel.: +49 (0) 228-227 226-0
Fax: +49 (0) 228-227 226-26
2. Subject of data protection: Personal data
Data protection includes the protection of personal data. This means any information relating to an identified or identifiable natural person (so-called data subject). This includes, for example, details such as name, address, telephone number or email address as well as information that is necessarily collected during the use of our website, such as details about the beginning, end and scope of use.
3. Purpose, nature, scope and legal basis of data processing when using our website
The use of our website is possible without registration. Nevertheless, personal data is processed when using our website without registration. In the following, we would like to give you an overview of the purpose, type and scope of the processing of your personal data as well as the respective legal basis on which we base the processing of your data.
When calling up and using our website, the following data in particular is processed:
- date and time of access
- duration of the visit
- type of terminal device
- browser type/version
- operating system used
- referrer URL (the previously visited page)
- the functions you use
- amount of data sent
- type of event
- host name of the accessing end device (IP address)
- domain name
- http status
- IP address of the user (anonymised)
The data is also stored as log information in the log files of our system. This does not affect the IP addresses of the users or other data that enable the data to be assigned to a user. This data is not stored together with other personal data of the user.
We process this data in order to make our website available for use and to ensure technical operation, as well as for the purpose of fault diagnosis and troubleshooting.
We have a legitimate interest in ensuring the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. The legal basis for the temporary storage of the data (and the log files) is Art. 6 para. 1 lit. f) GDPR.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. When data is collected to provide the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or defamiliarised so that an assignment of the calling client is no longer possible.
3.2.1 Necessary cookies
On the one hand, we use so-called “session cookies”. These are automatically deleted after the end of your browser session.
In addition, we also use long-term cookies, which are mainly used to provide you, as a user of our website, with permanently recurring settings and to enable us to individually adapt our website to your wishes. The language settings you have selected, for example, are stored in the cookies.
The processing of this data is necessary to enable the website to be displayed and to simplify the use of the website for visitors (e.g. by remembering the selected language). Our legitimate interest in data processing also lies in these purposes. The legal basis for the processing of this personal data is Art. 6 para. 1 lit. f GDPR as well as § 25 para. 2 no. 2 TTDSG.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the presentation of the website, this is the case when the respective session has ended.
3.2.2 Analysis cookies
The user data processed in this way are pseudonymised by technical precautions. The data is not stored together with other personal data of the users. Analysis cookies are used to improve the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimise our offer.
The legal basis for the processing of this personal data is your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 2 no. 2 TTDSG.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected or you have revoked your consent.
The user data processed in this way are pseudonymised by technical precautions. The data is not stored together with other personal data of the users.
We also share this information with our marketing partners. Our partners may combine this information with other data that you have provided to them or that they have collected in the course of your use of the services.
The legal basis for the processing of this personal data is your consent in accordance with Art. 6 para. 1 lit. a of the GDPR and Section 25 para. 2 no. 2 of the TTDSG.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected or you have revoked your consent.
3.2.4 Google Services
This website uses various Google services listed in the table below. If you are ordinarily resident in the European Economic Area or Switzerland, unless otherwise specified in any additional terms, the services are provided to you by Google Ireland Ltd (“Google”), a company registered and incorporated under the laws of Ireland (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland.
This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID.
You can prevent the installation of cookies by setting your browser software accordingly. However, we would like to point out that you may then not be able to use all the functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
The legal basis for the processing of your personal data is your consent in accordance with Art. 6 para. 1 lit. a) GDPR as well as § 25 para. 1 TTDSG.
The anonymised data stored by Google Analytics is automatically deleted after 26 months.
3.2.5 Overview of all cookies used
Below you will find an overview of all cookies used by us and third parties:
4. Contact via email
It is possible to contact us via the email addresses provided on our website. In this case, the data transmitted by you will be stored together with your email address. The data will not be passed on to third parties.
The data will be used exclusively for the processing of the conversation and the final fulfilment of your contact request.
The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 lit. f) GDPR. Our legitimate interests lie in responding to your enquiry.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected and there are no legal retention periods that prevent deletion. For personal data sent by email, this is the case when the respective conversation with you has ended. This is to be assumed if it can be inferred from the circumstances that the facts concerned have been conclusively clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
5. Recipients of personal data
5.1 Internal recipients: Within our company, only the following groups of people have access to your personal data:
- Employees of the IT department
- Employees of the marketing department
5.2 External recipients: We only pass on your personal data to external recipients outside Stahlwerke Bochum if this is necessary for processing or handling your enquiry, if there is other legal permission or if we have your consent to do so. External recipients may be:
- Processors: Processors are service providers that we use to provide services, for example in the areas of technical infrastructure and maintenance for our offering or the provision of content. These processors are carefully selected and regularly reviewed by us to ensure that the legal requirements of data protection law are also complied with by these service providers. The service providers may only use the data for the purposes specified by us.
- Public authorities: Public bodies include authorities and state institutions such as public prosecutors’ offices, courts or tax authorities to which we may have to transfer personal data in individual cases for legally compelling reasons.
Other bodies: Under certain circumstances, other bodies may also have access to your personal data within the framework of data protection requirements. In this respect, the confidentiality required by law is guaranteed.
6. Transfer of data to third countries
In some cases, your data will be transferred to recipients whose registered office or place of data processing is not located in a member state of the European Union or in another state party to the Agreement on the European Economic Area (EEA). If there is no adequacy decision by the European Commission for the third country, we work towards an adequate level of data protection for the transfer of personal data outside the EEA by concluding appropriate agreements with the recipients, which are regularly based on the EU standard contractual clauses, before the data is transferred.
You can obtain from us an overview of all recipients in third countries and a copy of the specifically agreed arrangements to ensure the appropriate level of data protection. Please use the contact details given under point 1 for this purpose.
7. Storage period
Please refer to the respective chapter on data processing for the storage period of personal data. In addition, the following applies in general: We only store your personal data as long as this is necessary for the fulfilment of the purposes or – in the case of consent – as long as you have not revoked your consent. If the purpose ceases to apply or your consent is revoked, we will delete your personal data unless its further processing is permitted under the relevant statutory provisions. We will also delete your personal data if we are obliged to do so for legal reasons.
8. Rights of data subjects
As a data subject, there are many rights available to you. In detail:
Right to information
You have the right to obtain information about the data we have stored about you.
Right of correction and deletion:
You can demand that we correct incorrect data and – insofar as the legal requirements are met – delete your data.
Restriction of processing:
You can request us – provided the legal requirements are met – to restrict the processing of your data.
If you have provided us with data on the basis of a contract or consent, you may, if the legal requirements are met, request that you receive the data you have provided in a structured, common and machine-readable format or that we transfer it to another responsible party.
Right of objection
Individual right of objection
You have the right to object to data processing by us at any time for reasons arising from your particular situation, insofar as this is based on the legal basis of ‘legitimate interest’. If you exercise your right to object, we will stop processing your data unless we can demonstrate compelling legitimate reasons for further processing that override your rights, in accordance with the law.
Revocation of consent:
If you have given us consent to process your data, you can revoke this consent at any time with effect for the future. The lawfulness of the processing of your data until the revocation remains unaffected.
Right of complaint to the supervisory authority:
You can lodge a complaint with the competent supervisory authority if you believe that the processing of your data violates applicable law. You can contact the data protection authority responsible for your place of residence or your country or the data protection authority responsible for us.
Your contact to us:
Furthermore, you can contact us free of charge if you have any questions about the processing of your personal data, your data subject rights and any consent you may have given. To exercise any of your aforementioned rights, please contact us at firstname.lastname@example.org or by post at the address given in section 1 above. Please ensure that we are able to clearly identify you.
9. Links to third party offers
Websites as well as services of other providers linked to from this website were and are designed and provided by third parties. We have no influence on the design, content and function of these third-party services. We expressly distance ourselves from all content of all linked third-party services. Please note that the third-party offers linked from this website may install their own cookies on your terminal device or collect personal data. We have no influence on this. If necessary, please contact the providers of these linked third-party offers directly for information.