GDPR
Data Protection
Responsible for data processing on these websites:
Heidelberg Materials Devnya JSC (in the following „we“)
Represented by:
Mihail Polendakov, Managing Director
Devnya 9160,
Industrial zone,
Bulgaria
E-Mail: communication@heidelbergmaterials.com
Data Protection Coordinator:
Devnya 9160,
Industrial zone,
Bulgaria
gdpr-bg@heidelbergmaterials.com
Phone: +359 888 816 519
1. Collection and processing of data
We collect and process personal data if you provide it to us by filling an entry form on our website or by other means, e.g. by e-mail. In addition, we collect and process data arising from your use of our website. Our data will be processed in accordance with the provisions of the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) and the German Telemedia Act (Telemediengesetz – TMG). Personal data is all information relating to an identified or identifiable natural person. In the following we explain in detail how we collect which data on which legal basis. In addition, we will explain to you what rights you have and how long your data will be stored.
2. Processing of Data via Cookies and Logfiles
Information on the use of cookies on our website can be found in our cookie policy.
In accordance with Art. 6 para. 1 sent. 1 f) GDPR, our website also uses so-called log files, in which access data are stored each time a page is accessed. The data record saved contains the following details:
- Your IP address, the date, the time, to which the file was accessed, the status, the request made by your browser to the server, the amount of data transmitted and the webpage from which you accessed the requested page (referrer) as well as
- The product and version information of the browser used, your operating system and your country of origin.
The log data are routinely deleted after 14 days. In other words, all data contained therein is irretrievably deleted. This temporary storage is only used to protect our websites against attacks and misuse. This is also our legitimate interest for the storage. We do not use the log data for any other purposes.
3. Google Products
This website uses Google Charts, YouTube and Google Analytics of Google Ireland Limited a company organized and existing under Irish law (register number: 368047) having its seat at Gordon House, Barrow Street, Dublin 4, Irland (“Google”).
Key figures can be visualized with Google Charts, YouTube allows videos to be played and Google Analytics is a service which enables us to analyze the user behavior on our website.
The browser you are using must establish a connection to the Google servers for these purposes. This gives Google knowledge that our website has been accessed via your IP address.
In the event that IP anonymization is activated on this website, Google will shorten the IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area prior to transmission to the USA. Only in exceptional cases, the full IP address is sent to a Google server in the USA and shortened there. IP anonymization is active on this website.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to us as website operators, e.g. to support us in the uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 f) GDPR.
It is not excluded, that your data will be processed by Google also in the USA. The Commission Implementing Decision (EU) 2016/1250 of 12 July 2016 allows the transfer of data from a controller or processor in the European Union to organizations in the US that have committed themselves to the EU-US Privacy Shield and its additional principles through self-certification by the U.S. Department of Commerce. Google LLC having its seat in the USA and its wholly-owned U.S. subsidiaries have committed to these principles through self-certification with the U.S. Department of Commerce.
Further general information on data protection at Google can be found at: https://www.google.de/intl/en/policies/privacy/ (external link to Google).
Further information about Google Charts can be found at https://developers.google.com/chart/interactive/faq (external link to Google) and about the purpose and scope of data collection and the further processing and use of the data by Google in Google's privacy policy: https://www.google.com/policies/privacy (external link to Google).
4. Processing of usage data by integration of fonts
To display texts and fonts on our websites we use font.com from Monotype Imaging Holdings Inc. based in the USA (hereinafter: Monotype). This service is subject to a fee and is paid according to page views by users. For this purpose, a so-called Javascript is active on our websites, which enables Monotype to count the page views of the users. In this context no personal data are processed. The IP-address, from which a page request takes place, is stored in anonymous form, i.e. the processing of your data is carried out only in anonymous form and therefore outside the scope of the GDPR (Recital 26 GDPR).
5. Processing of personal data by contacting us
If you provide us with personal data by contacting us, e.g. by email or by entering your data in our contact form, we process your data in accordance with Art. 6 para.1 sent. 1 b) GDPR for the for the purpose of fulfilling the contract or for the implementation of pre-contractual measures which take place on your request or in accordance with Art. 6 para. 1 f) GDPR on the basis of our legitimate interest in answering your request. We process your data only for the purpose of processing your specific request. This may also include forwarding to an affiliated company if this is necessary to respond to your request. We do not use your data beyond theses purposes. You can also assert the rights listed in Section 11 of this data protection declaration. Requests that we have answered or forwarded and for which there is no further legal basis for storage are automatically deleted from our systems after 12 (in words: twelve) months. Further information on the deletion of your data can also be found in section 11 of this data protection declaration.
6. Encryption
Data you insert on our website is transmitted using SSL encryption. We protect our website and other systems by technical and organizational measures against loss, destruction, access, modification or dissemination of your data by unauthorized persons.
7. Categories of recipients of personal data; data transfer to a third country
Service providers and auxiliary agents used by us in connection with the website, e.g. host providers, agencies and IT service providers may have access to your personal data. If these service providers and auxiliary agents process data on our behalf, they only act in accordance with our instructions and are contractually bound by us accordingly. This also applies to service providers which have their legal seat in a third country (outside the EU or the EEA).
8. Your rights
According to Art. 15 GDPR you have the right to receive information free of charge upon request about the personal data that has been stored about you. You also have the right to have incorrect data corrected and your personal data disabled and deleted in accordance with Art. 16, 17 and 18 GDPR.
Subject to conditions laid down in Art. 20 GDPR, you are also entitled to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and the right to transmit this data to another controller without hindrance.
In addition, you are entitled pursuant to Art. 21 para. 1 GDPR to object to the processing of your personal data on the basis of Article 6 para. 1 sent. 1 (e) or (f) GDPR including profiling, from reasons arising from your particular situation. We will fulfill your aforementioned rights, as far as the legal requirements for the assertion of the rights are given. If personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such advertising, including profiling, in so far as it is related to such direct marketing, pursuant to according to Art. 21 para. 2 GDPR.
Please direct any request regarding your personal data to our contact details mentioned at the beginning of this privacy policy or in the imprint of our website.
Every data subject has the right to lodge a complaint with a supervisory authority regarding the alleged infringement
9. Duration of data storage and routine deletion
Unless explicitly stated above we process and store personal data only for the period, which is required to achieve the processing purpose or as long and to the extent as statutory laws require us to process and/or store such data.
If the purpose of processing no longer applies or if the applicable statutory retention requirement expires, we will as a matter of routine erase data or restrict the processing of data in accordance with the applicable statutory laws.