Privacy Policy of the Müllheizkraftwerk Rothensee GmbH

1. The scope of the processing of personal data

We generally only collect and use the personal data of our users insofar as this is required in order to provide a fully functioning website together with our content and services. The collection and use of the personal data of our users only takes place on a regular basis after consent has been granted by the user. Exceptions to this rule only apply in cases in which we are unable to obtain consent in advance for factual reasons or the processing of the data is permitted by legal provisions.

2. The legal basis for the processing of personal data

When we obtain the consent of a data subject to process their personal data, Article 6 paragraph 1 lit. an of the GDPR (European General Data Protection Regulation) forms the legal basis.
When we process personal data that is required in order to fulfil a contract in which the data subject is the contracting party, Article 6 paragraph 1 lit. b GDPR is the legal basis. This also applies to processing activities required for the completion of pre-contractual measures.
If we need to process personal data in order to fulfil a legal obligation to which our company is subject, Article 6 paragraph 1 lit. c GDPR forms the legal basis.
In the case that the processing of personal data is necessary in order to protect the vital interests of the data subject or of another natural person, Article 6 paragraph 1 lit. d GDPR is the legal basis.
If processing is necessary for the purposes of the legitimate interests of our company or a third party and these interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Article 6 paragraph 1 lit. f GDPR forms the legal basis for the processing.

3. The erasure of data and duration of storage

The personal data of the data subject will be erased or blocked as soon as the purpose of the storage of the data no longer applies. Storage of the data past this point may occur when stipulated by European or national law in Union regulations, ordinances or other laws to which the Controller is subject. The data will also be blocked or erased when a storage period stipulated by the standards specified above expires, unless the continued storage of the data is necessary for the conclusion or execution of a contract.

1. The description and scope of data processing

Every time you visit our website, our system automatically records data and information from the system of the computer used to visit our website. The following data are collected:
(1) Information on the browser type and browser version used,
(2) The user's operating system,
(3) The user's Internet service provider,
(4) The user’s IP address,
(5) The time and date of access,
(6) Websites from which the user’s system accessed our website,
(7) Websites that are accessed by the user’s system via our website.

These data are also stored in our system’s log files. These data are not stored together with the user’s other personal data.
These data are also stored in our system’s log files. This does not apply to the user’s IP address or other data that can be used to allocate the data collected to a user. These data are not stored together with the user’s other personal data.

2. The legal basis for the processing of data

The legal basis for the temporary storage of these data and the log files is Article 6 paragraph 1 lit. f GDPR.

3. The purpose of the processing of data

The temporary storage of the IP address by the system is necessary in order to enable the user’s computer to connect to the website, which requires the storage of the user’s IP address for the duration of their visit.
The storage of the data in log files is required in order to provide a fully functioning website. We also use the data to optimise our website and to ensure the security of our IT systems. The data are not evaluated for marketing purposes within this context.
These purposes also represent our legitimate interest in the processing of data in accordance with Article 6 paragraph 1 lit. f GDPR.

4. The duration of storage

The data are erased as soon as they are no longer required to meet the purpose for which they were collected. In the case of data recorded in order to provide the website, this occurs when the user ends their visit.
In the case of the storage of the data in log files, this occurs after seven days at the latest. Storage of the data past these deadlines is possible. In this case, the user’s IP address will be erased or anonymised so that the client accessing the website can no longer be associated with the address.

5. The option of objecting to the collection and storage of and removing data

The collection of the data in order to provide the website and the storage of the data in log files are essential requirements for the running of the website. The user is therefore unable to object to these activities.

1. The description and scope of data processing

Our website uses so-called "cookies". Cookies are small text files that are stored in the cache of the Internet browser or stored by the Internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie is allocated a characteristic string that enables the browser to be clearly identified the next time the user visits the website.
We use cookies so that we can offer our visitors a user-friendly website. Some elements of our website require the browser accessing the website to also be able to be identified after visiting other websites before returning to our website.
The following data are stored and transmitted in the cookies:
(1) The user's first name and surname,
(2) The name of the user’s company,
(3) The address of the user’s company,
(4) The user’s telephone number
(5) The user’s e-mail address

2. The legal basis for the processing of data

The legal basis for the processing of personal data using cookies is Article 6 paragraph 1 lit. f GDPR.

3. The purpose of the processing of data

The purpose behind the use of technically necessary cookies is to make it easier for users to use websites. Some of the functions of our website cannot be offered without using cookies. These functions require the browser to also be able to be identified after visiting other websites before returning to our website.
We require cookies for the following applications:
(1) The user's first name and surname
(2) The name of the user’s company
(3) The address of the user’s company
(4) The user’s telephone number
(5) The user’s e-mail address

The user data collected by technically necessary cookies are not used to create user profiles.
The purposes specified above also represent our legitimate interest in the processing of the personal data in accordance with Article 6 paragraph 1 lit. f GDPR.

4. The duration of storage and option of objecting to and removing cookies

Cookies are stored on the user’s computer and transmitted from this computer to our website. As the user, you therefore have full control of the use of cookies. You can change your Internet browser settings to deactivate or limit the transmission of cookies. You can delete cookies that have already been stored at any time. This can also be done using an automated process. If you deactivate cookies for our website, you may no longer be able to make full use of all of the functions of the website..

1. The description and scope of data processing

The website of the Müllheizkraftwerk Rothensee GmbH uses functions of the web analytics service Google Analytics, a service offered by Google Inc. (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland; “Google”).
Google Analytics uses so-called "cookies", that are stored to your computer in order to enable an analysis of your use of the website. The information generated by a cookie about your use of this website is normally transmitted to and stored at a Google server in the USA.
The following data are transmitted to meet these purposes:
(1) Search terms entered
(2) Frequency of page visits
(3) Use of website functions
(4) Browser type and version
(5) Your operating system
(6) The duration of your visit to our website
(7) The website you visited before our website

Müllheizkraftwerk Rothensee GmbH has added the function “anonymizelp()” to Google Analytics in order to guarantee the anonymised collection of IP addresses. If the anonymisation function for IP addresses is activated on this website, Google will abbreviate your IP address before transmitting this information within member states of the European Union or in other contractual states of the Agreement on the European Economic Area. This masking of IP addresses occurs as soon as the IP addresses arrive in the Analytics data collection network and before the data are stored or processed. Your full IP address will only be transmitted to a Google server in the USA and abbreviated on this server in exceptional cases.

2. The legal basis for the processing of data

In the case that the user has provided consent, the legal basis for the processing of personal data using cookies for the purpose of analysis is Article 6 paragraph 1 lit. a GDPR. If the user has not provided consent to the processing of personal data, the legal basis for the processing or personal data in exceptional cases can be justified by Article 6 paragraph 1 lit. f GDPR.
When they access our website, users are informed about the use of cookies for analytical purposes and asked to consent to the processing of the personal data used within this context. They are also referred to this Privacy Policy at the same time.
Müllheizkraftwerk Rothensee GmbH has concluded an agreement on contract data processing with Google and fully implemented the strict requirements stipulated by the General Data Protection Regulation when using Google Analytics.

3. The purpose of the processing of data

On behalf of Müllheizkraftwerk Rothensee GmbH, Google will use the information for the purpose of evaluating your use of the website, compiling reports on website activities and providing further services relating to use of the website and the Internet to the website operator.
The IP address transmitted by the user within the scope of Google Analytics will not be combined with other Google data.
The use of analytical cookies therefore serves the purpose of improving the quality of our website and its content. The analytical cookies enable us to find out how our website is used and constantly optimise our services based on these results.
These purposes also represent our legitimate interest in the processing of the personal data in accordance with Article 6 paragraph 1 lit. f GDPR.

4. The duration of storage and option of objecting to and removing cookies

a) Browser plugin
You can prevent the storage of analysis cookies by using the corresponding setting of your browser software. Please note, however, that doing so may prevent you from being able to fully use all functions of our website. Furthermore, you can prevent data generated by the cookie and relating to your use of the website, including your IP address (only for this domain) from being collected and processed by Google by downloading and installing the browser plug-in available via the following link: tools.google.com

b) Right to object to the recording of data
You can prevent the collection of your data by Google Analytics by clicking on the following link. This will store an opt-out cookie on your system that will prevent your data from being recorded when you visit our website in the future: Google Analytics deaktivieren

You can find out more about how Google Analytics handles your user data in Google's privacy policy: google.com/analytics

1. The description and scope of data processing

On our website we offer users the option of registering by making use of the service portal to provide their personal data. Users are required to provide their data on an input mask, which is subsequently transmitted to us and stored. The data are not disclosed to third parties.
The following data are obtained as part of the registration process:
(6) The user's first name and surname
(7) The name of the user’s company
(8) The address of the user’s company
(9) The user’s telephone number
(10) The user’s e-mail address

The following data are also stored during the registration process:
(1) The user’s IP address
(2) The time and date of the registration
The user’s consent to the processing of these data is obtained as part of the registration process.

2. The legal basis for the processing of data

In the case that the user has provided consent, the legal basis for the processing of data is Article 6 paragraph 1 lit. a GDPR.

3. The purpose of the processing of data

The provision of certain services and content on our website requires users to register.
MHKW Müllheizkraftwerk Rothensee GmbH implements an exemplary and state-of-the-art plant concept for the thermal treatment of residual waste at its location in the Rothensee district of the German city of Magdeburg. Customers and partners of MHKW Müllheizkraftwerk Rothensee GmbH have the opportunity to access information concerning acceptance criteria, opening hours, types of waste, etc. and can actively contact MHKW Müllheizkraftwerk Rothensee GmbH with their waste disposal enquiries.
The production of evaluations enables customers to independently access important information.
The identification of users is essential for the provision of information concerning their companies. Without this identification, we cannot guarantee that the data of the company in question can only be accessed by authorised individuals.

The data are erased as soon as they are no longer required to meet the purpose for which they were collected.
This applies to the data collected during the registration process if the registration on our service portal is cancelled or amended.

5. The option of objecting to the collection and storage of and removing data

As a user, you can cancel your registration at any time. You can request that amendments be made to or personally amend your stored personal data any time.

1. The description and scope of data processing

Users can contact us via the e-mail address provided on our website. If a user decides to use this possibility, we will store their personal data provided in their e-mail.
The data provided in the case of contact via e-mail are not disclosed to third parties. The data are only used to process the conversation.

2. The legal basis for the processing of data

The legal basis for the processing of data transmitted when an e-mail is sent is Article 6 paragraph 1 lit. f GDPR.

3. The purpose of the processing of data

We only process the personal data provided via e-mail to process a contact request. This is also the required legitimate interest for the processing of the data.

4. The duration of storage

The data are erased as soon as they are no longer required to meet the purpose for which they were collected. With regard to the personal data sent via e-mail, this applies when the corresponding conversation with the user has come to an end. The conversation is deemed to have come to an end when the circumstances indicate that the issue in question has been conclusively clarified.

5. The option of objecting to the collection and storage of and removing data

The user is able to object to the storage of their personal data at any time. If a user contacts us via e-mail, the conversation cannot be continued.
To object to the storage of personal data, please send us your objection via e-mail to info@mhkw-rothensee.de.
All personal data stored when the user contacts us will then be erased.

1. Right to information

You can ask the Controller to provide confirmation as to whether we process your personal data.
If we do process your personal data, you can ask the Controller to provide the following information:
(1) The purposes for which the personal data are processed.
(2) The categories of personal data that are processed.
(3) The recipients and/or categories of recipients to whom the personal data concerned have been or are still being disclosed.
(4) The planned duration of storage of your personal data or, if concrete details cannot be provided, the criteria for determining the duration of storage.
(5) The existence of a right to rectify or erase your personal data, a right to restrict the processing of these data by the Controller or a right to object to this processing.
(6) The existence of a right to submit a complaint to a supervisory authority.
(7) All available information on the origin of the data insofar as the personal data are not collected from the data subject.
(8) The existence of automated decision-making, including profiling, in accordance with Article 22 paragraphs 1 and 4 GDPR and, at least in these cases, conclusive information on the logic involved and the relevance and targeted effects of such processing for the data subject.

You have the right to request information as to whether your personal data are transmitted to a third country or an international organisation. Within this context, you can request to be informed about the suitable safeguards in accordance with Article 46 GDPR in connection with the transfer.

2. The right to rectification

You have the right to request that the Controller rectify and/or complete your data insofar as your personal data processed are incorrect or incomplete. The Controller must subsequently immediately rectify these data.

3. The right to restriction of processing

You can request the restriction of the processing of your personal data under the following conditions:
(1) If you contest the correctness of your personal data for a period of time that is long enough to allow the Controller to check the correctness of the personal data.
(2) If the processing is illegal and you reject the erasure of your personal data and instead request that the use of the personal data be restricted.
(3) If the Controller no longer requires the personal data for the purposes of the processing but does require them in order to assert, exercise or defend legal claims.
(4) If you have objected to the processing in accordance with Article 21 paragraph 1 GDPR and it has not yet been determined whether the legitimate reasons of the Controller outweigh your reasons.

If the processing of your personal data has been restricted, these data, apart from being stored, are only permitted to be processed with your consent; in order to assert, exercise or defend legal claims; to protect the rights of another natural or legal person or based on reasons connected to an important public interest of the European Union or a member state.
If the processing has been restricted in accordance with the requirements specified above, the Controller will inform you before lifting the restriction.

4. The right to erasure

a) obligation to erase
You can request that the Controller immediately erase your personal data and the Controller is obliged to immediately erase these data insofar as the erasure does not conflict with any obligation to retain data and one of the following reasons applies:
(1) Your personal data are no longer required for the purposes for which they were collected or processed in any other way.
(2) You withdraw your consent on which the processing in accordance with Article 6 paragraph 1 lit. a or Article 9 paragraph 2 lit. a GDPR was based and there is no alternative legal basis for the processing.
(3) You object to the processing in accordance with Article 21 paragraph 1 GDPR and there are no overriding legitimate reasons for the processing or you object to the processing in accordance with Article 21 paragraph 2 GDPR.
(4) Your personal data were illegally processed.
(5) The erasure of your personal data is required in order to comply with a legal obligation in accordance with European law or the law of the member states to which the Controller is subject.
(6) Your personal data were collected in relation to the offer of information society services in accordance with Article 8 paragraph 1 GDPR.
b) Information to third parties
If the Controller has made your personal data accessible to the public and is obliged to erase these data in accordance with Article 17 paragraph 1 GDPR, the Controller must, in consideration of the technology available and the costs of implementation, take suitable measures, including technical measures, to inform the individuals responsible for the data processing, who process the personal data, that you, as the data subject, have requested that they erase all links to these personal data or copies or replications of these personal data.
c) Exceptions
The right to erasure does not apply in the case that the processing is required:
(1) In order to exercise the right of free speech and information.
(2) In order to comply with a legal obligation to process data as stipulated by the law of the European Union of the member states to which the Controller is subject, to complete a task that is in the public interest or to exercise public authority that has been vested in the Controller.
(3) For reasons of public interest in the area of public health in accordance with Article 9 paragraph 2 lit. h and i and Article 9 paragraph 3 GDPR.
(4) For archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89 paragraph1 GDPR insofar as the right specified in paragraph a) is likely to seriously restrict the realisation of the objectives of this processing or make it impossible.
(5) In order to assert, exercise or defend legal claims.

5. Right to notification

If you have asserted the right to rectification, erasure or restriction of processing against the Controller, the Controller is obliged to inform all recipients to whom your personal data have been disclosed about this rectification or erasure of the data or restriction of processing unless this proves to be impossible or involves a disproportionate amount of time and effort.
You have the right to be informed about these recipients by the Controller.

6. The right to data portability

You have the right to receive a copy of your personal data that you have provided to the Controller in a structured, commonly used and machine-readable format. You also have the right to transmit these data to another Controller without being hindered by the Controller to which you provided the personal data insofar as:
(1) The processing is based on consent in accordance with Article 6 paragraph 1 lit. a GDPR or Article 9 paragraph 2 lit. a GDPR or on a contract in accordance with Article 6 paragraph 1 lit. b GDPR and
(2) the processing is carried out using automated procedures.
When exercising this right, you also have the right to request that your personal data be transmitted directly from one Controller to another where technically feasible. This right to data portability is not permitted to adversely affect the rights and freedoms of other individuals.

The right to data portability does not apply to processing of personal data necessary for the performance of a task that is in the public interest or for exercising public authority that has been vested in the Controller.

7. The right to object

You have the right to object to the processing of your personal data for direct marketing purposes without stating reasons. If we process your data in order to protect legitimate interests, you can object to this processing for reasons arising from your own particular situation. We will then no longer process your personal data unless we can provide evidence of compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms or the processing is required in order to assert, exercise or defend legal claims.

8. Right to withdraw your consent under data protection law

You have the right to withdraw your consent under data protection law at any time. The withdrawal of consent will have no impact on the legality of the processing carried out on the basis of your consent until you withdraw this consent.

9. The right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, especially in the member state of your habitual residence, place of work or place in which the alleged infringement took place if you believe that the processing of your personal data infringes the GDPR.
The supervisory authority with which the complaint has been lodged will inform the complainant about the progress and outcome of the complaint, including the possibility of a judicial remedy in accordance with Article 78 GDPR.