1 Introduction
The protection of your personal data is an important concern for us. It goes without saying that we comply with all statutory provisions on data protection and data security, in particular the German Federal Data Protection Act (BDSG) and the EU General Data Protection Regulation (EU-DSGVO) as well as the Telecommunications Telemedia Data Protection Act (TTDSG).
In this privacy policy we would like to inform you how we process your personal data.
2 Responsible person / contact
Uniper SE, Holzstraße 6, 40221 Düsseldorf, Germany ("we", "us" or "Uniper") is responsible for the data processing described in this privacy policy.
Please note that Vimeo (Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA) is solely responsible as the platform operator for data processing in terms of data protection law.
Insofar as links are provided to other websites or online content, the respective data protection notices apply.
You can reach our data protection officer by post at:
Uniper SE
- for the attention of the data protection officer -
Holzstraße 6
40221 Dusseldorf
or by e-mail to: dataprotection@uniper.energy
3 Processing activities
3.1 Processing by Vimeo
During a visit to Vimeo, Vimeo as the responsible party collects personal data of the users, for example, through the use of cookies. Such data collection by Vimeo may also occur for visitors to the Vimeo site who are not logged in or registered with Vimeo. Information about the data collection and its purpose, the further data processing and use by Vimeo through Vimeo, as well as your rights in this regard and setting options to protect your privacy can be found in the privacy policy of Vimeo.
We would like to point out that we are not responsible for the data processing carried out by Vimeo and that we cannot influence this.
We cannot track which user data Vimeo collects. Nor do we have full access to the data collected or your profile data. We can only see the public information.
When calling up the page of the platform operator Vimeo, information is automatically sent to the server of the platform operator by the browser used on your end device or by the app. This information is temporarily stored by the platform operator in a so-called log file. However, this data is only available to the platform operator Vimeo. It is not possible for us to access this data.
3.2 Data processing by us
Only plugins from Vimeo are integrated on our websites. When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of Vimeo. The content of the plugin is transmitted by Vimeo directly to your browser and integrated into the page. Through this integration, Vimeo receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information (including your IP address) is transmitted by your browser directly to a Vimeo server in the USA and stored there.
If you are logged in to Vimeo, Vimeo can directly assign your visit to our website to your Vimeo account. If you interact with the plugins (such as pressing the start button of a video), this information is also transmitted directly to a Vimeo server and stored there.
This tool is only used on the basis of your consent pursuant to Art. 6 (1) sentence 1 a) DSGVO. The given consent can be revoked at any time by a message to us with effect for the future.
If you do not want Vimeo to assign the data collected via our website directly to your Vimeo account, you must log out of Vimeo before visiting our website.
For videos from Vimeo that are embedded on our site, the tracking tool Google Analytics is automatically integrated. This is Vimeo's own tracking, to which we have no access and which cannot be influenced by our site. Google Analytics uses so-called "cookies" for tracking, which are text files that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. You can find more information about Google Analytics in our privacy policy.
We do not collect any personal data about you. However, it is possible to obtain pseudonymized data in the form of statistics about the users of our site over a certain period of time. The software for analyzing user statistics is usually provided by the platform operator itself, but in some cases it is also possible to integrate third-party software (e.g. Google Analytics). Here, data about the users of the site can be collected, such as age, gender, country of origin, browser used and interests.
However, this data is always pseudonymized and it is not possible for us to make statements about individual users based on this data alone. We use this data exclusively to optimize the content we offer and its marketing and to adapt it to the respective user interests. This is a legitimate interest pursuant to Art. 6 para. 1 p. 1 f) DSGVO.
We only receive personally identifiable information through Vimeo if you actively provide it to us by interacting with our account.
We use your data (e.g. first name, last name) to respond to your request or to exchange information with you. The legal basis is based on your consent according to Art. 6 para. 1 sentence 1 a) or our legitimate interest in responding to messages and comments according to Art. 6 para. 1 sentence 1 f) DSGVO.
We use this data exclusively to optimize the content we offer and its marketing and to adapt it to the respective user interests. This is a legitimate interest pursuant to Art. 6 para. 1 p. 1 f) DSGVO. Our legitimate interest follows from the above-mentioned reason of optimizing the content provided by us on our profile. Furthermore, the collected data is information that is only made available to us through an interaction by you with our profile. This establishes a relevant and appropriate relationship between you and our profile.
If deletion by us is possible, personal data will be deleted by us after the end of the purpose, i.e. when the communication has been completed, unless there is a legal basis for further processing beyond this period.
3.2.1 Competitions
We occasionally offer competitions. If you wish to participate in this, we request identification data and contact information from you (e.g. name, date of birth, address, e-mail address, etc., as well as any other information required for participation in the competitions, such as answers to prize questions, photos of you or other persons, or results of online games). We use this information for the proper execution of the competitions as well as for abuse detection and legal defense.
Further details are contained in the respective conditions of participation for the competitions. If you have consented to this in the context of participation, we will also use the information for the purposes stated in the declaration of consent.
These processing operations are carried out on the basis of statutory provisions that allow us to process personal data insofar as it is necessary for the implementation of the competitions (e.g. Art. 6 (1) sentence 1 b) DSGVO), or because you have given us your consent to do so (Art. 6 (1) sentence 1 a) DSGVO), or in order to pursue our legitimate interests in the prevention of fraud and, where applicable, effective legal defense (Art. 6 (1) sentence 1 f) DSGVO).
In the event of participation in a competition, we store personal data of the winners for a period of 3 years after the end of the respective competition; we store personal data of other participants for a period of 3 months after the end of the respective competition.
3.2.2 Event invitations / event photos
We occasionally announce events for which you must register. When you register for an event, we process the personal data you provided during registration, such as name and address, as well as contact and communication data, such as telephone number and e-mail address, and, if applicable, the other information you provided in order to hold the respective event (for example, to create the guest list, accreditation and admission control, room and staff planning, and catering planning), as well as to send you your invitation and notifications about the respective event; we also use this information for abuse detection and legal defense.
The legal basis for this data processing is Art. 6 (1) sentence 1 b) DSGVO (for the fulfillment of a contract or a pre-contractual measure) or because we have a legitimate interest in the prevention of crime and, if necessary, effective legal defense (Art. 6 (1) sentence 1 f) DSGVO).
In the case of registration for an event, we delete your registration data with a period of three months after the end of the event.
At events for which you have registered, photos and video recordings (possibly by a photographer commissioned by us) may be made under certain circumstances, on which you may also be depicted.
If you are the central subject of a photograph ("single image"), the photographer will ask you whether you agree before taking the picture. In such a case, you grant us the right to reproduce, distribute or make publicly available this photograph and, if applicable, your spoken contribution, and in particular to use it for advertising purposes. In this context, we will provide a consent form at the event. The legal basis for data processing in this case is Art. 6 (1) sentence 1 a) DSGVO (consent).
Otherwise, we use recordings to publish impressions of the respective event for the purpose of visualized reporting as well as for advertising purposes on our social media channels and websites ("impressions"). The legal basis for this data processing is our legitimate interest in enabling visualized reporting on our event without this being opposed by an overriding interest of the participants (Art. 6 (1) sentence 1 f) DSGVO).
We delete recordings when the photos are no longer used for advertising purposes, but individual images after three years at the latest and impressions after five years. The period begins in each case with the end of the respective calendar year of the event.
3.2.3 Passing on data
A transfer of your personal data takes place in the following cases:
- If it is necessary to clarify an illegal use of our services or for legal prosecution, personal data will be passed on to the law enforcement authorities. However, this only happens if there are concrete indications of unlawful or abusive behavior. The transfer of this data is based on our legitimate interest in combating abuse, prosecuting criminal acts and securing, asserting and enforcing claims (Art. 6 para. 1 sentence 1 f) DSGVO).
- We may also disclose the data to aggrieved third parties. The disclosure of this data is based on the legitimate interest of the aggrieved third parties in combating abuse, prosecuting criminal acts and securing, asserting and enforcing claims (Art. 6 para. 1 sentence 1 f) DSGVO).
- We are also required by law to provide information to certain public authorities upon request. These are law enforcement authorities, authorities that prosecute administrative offenses subject to fines and the tax authorities. The legal basis for this is the law obligating us in each case in conjunction with Art. 6 para. 1 sentence 1 c) DSGVO.
- We rely on contractually affiliated third-party companies and external service providers ("processors") to provide the Services. Categories of such service providers are agencies, fulfillment service providers and IT service providers. In such cases, personal data is disclosed to these Order Processors to enable them to continue processing. These processors are carefully selected and regularly reviewed by us to ensure that your privacy is protected. The processors may only use the data for the purposes specified by us and are also contractually obligated by us to treat your data exclusively in accordance with this privacy policy and the German and European data protection laws. Due to the aforementioned transfers, the service providers bound by instructions may process the data in countries outside the EU ("third countries"). The legal basis for the transfer to service providers is the legal basis stated above for the respective processing purpose.
- As our business evolves, we may change our legal form by changing our legal form, establishing, buying or selling subsidiaries, divisions or components. In such transactions, customer information is transferred along with the part of the business being transferred. In any transfer of personal information to third parties to the extent described above, we will ensure that it is done in accordance with this Privacy Policy and relevant data protection laws. Such transfer of personal data is justified by the fact that we have a legitimate interest in adapting our corporate form to the economic and legal circumstances as necessary (Art. 6 para. 1 sentence 1 f) DSGVO).
Any transfer of data to a third country takes place in compliance with the applicable data protection law. Insofar as the existence of an adequate level of protection has not been established for a third country by the European Commission, we provide appropriate safeguards to ensure adequate protection of your data. This can be done, for example, by concluding data processing contracts that contain EU standard data protection clauses and provide adequate safeguards in the opinion of the European Commission or other safeguards provided for in Art. 46 et seq. DSGVO, take place.
4. Your rights as a data subject
You have a right of access to your processed data, a right to rectification and to deletion of your personal data, a right to have the processing of your personal data restricted and, if applicable, a right to the portability of your personal data. Furthermore, you have the right to lodge a complaint with a supervisory authority.
In cases where the data processing is based on Art. 6 (1) sentence 1 e) or f) DSGVO or is carried out for the purpose of direct marketing, you have the right to object to the processing.
If you have given us consent, you can revoke this at any time with effect for the future. Processing until the revocation takes effect remains lawful and is not affected by the revocation.
As far as the data processing by Vimeo itself as a data controller is concerned, Vimeo also acts as the responsible contact point and processes all requests for the assertion of the aforementioned rights.
5. Changes to this privacy policy
The status of this privacy policy is June 2022.
The further development of our social media presence may also affect the handling of personal data. We may therefore amend this data protection declaration in the future within the framework of the applicable data protection laws and adapt it to changed data processing realities. We therefore recommend that you visit our social media presence from time to time to take note of any updates to our data protection declaration.