Privacy policy

Privacy policy - BAYERNOIL whistleblower system

Your trust is very important to us and the protection of your data is a matter of trust. We treat your personal data confidentially and in accordance with the legal requirements, our employees are obliged to comply accordingly and suitable contractual agreements have been made with our partner companies.

We make every effort to use the latest technical and organizational means to store your personal data in such a way that it is not accessible to third parties. We would like to point out that complete data security cannot be guaranteed when communicating by e-mail. We therefore recommend that you only communicate confidential information via the whistleblower portal. Below you will find information on the processing of your data and the rights to which you are entitled:


1. Responsible contact

Mr.
Daniel Dietrich
BAYERNOIL Raffineriegesellschaft mbH
Raffineriestraße 100
93333 Neustadt

Phone: 08457 8 - 0
interne-meldestelle@bayernoil.de


2. Legal representation

Managing Directors Erkki Ranta and Dr. Alexander Struck


3. Supervisory board

Claudio Albanese (Chairman)
Julian Stoll (Vice Chairman)


4. Responsible authority

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach


5. Name and contact details of the data protection officer

Mrs.
Sonja Bergbauer
BAYERNOIL Raffineriegesellschaft mbH
Raffineriestraße 100
93333 Neustadt

Phone 08457 8 - 0
datenschutz@bayernoil.de


6. Purpose

The personal data is collected, processed and used by BAYERNOIL exclusively for the following purposes:

- To be able to process the notice within the meaning of the HinSchG
- For correspondence, in order to be able to contact you in the clarification of facts if necessary

The basis for data processing is Art. 6 Abs. 1 lit. a) and Art. 6 Abs. 1 lit. c) of the General Data Protection Regulation (DSGVO).


BAYERNOIL collects the following data:

For anonymous reports:
- Alias Name of the whistleblower
- The information contained in the individual report

For confidential reports:
- Contact details (if provided): First name, last name, e-mail address, telephone number
- The information contained in the individual report

Pursuant to § 10 HinSchG, the Internal Reporting Office is authorized to process personal data insofar as this is necessary to fulfill its tasks specified in § 13 HinSchG. By way of derogation from Art. 9 Abs. 1 of Regulation (EU) 2016/679, the processing of special categories of personal data by a reporting office is permitted if this is necessary for the performance of its tasks.

Personal data is stored or processed exclusively on servers in the Federal Republic of Germany or within the EU.


7. Recipients of the personal data

Within BAYERNOIL, only those departments receive your personal data that absolutely need it to achieve the intended purpose. These are in any case
- the representative of BAYERNOIL's internal reporting office
- the management

For the purpose of clarifying reported incidents and coordinating or initiating further measures, the internal reporting office may also contact other organizational units of BAYERNOIL or a law firm.

Outside the area of responsibility, information about the identity of a whistleblower or other circumstances that allow conclusions to be drawn about the identity of this person may be passed on to the responsible body in accordance with §9 Abs. 2 HinSchG, in deviation from § 8 Abs. 1 HinSchG, in particular
- in criminal proceedings at the request of the criminal prosecution authorities,
- on the basis of an order in administrative proceedings following a report, including administrative fine proceedings
- on the basis of a court decision


8. Duration of storage of personal data

Pursuant to § 14 Abs. 5 HinSchG, the documentation (and therefore your data) will be deleted three years after the conclusion of the respective proceedings. The documentation may be stored for longer in order to fulfill the requirements of the HinSchG or other legal provisions, as long as this is necessary and proportionate.


9. Rights

Users have the following rights in accordance with Art. 7, 13-14 and 15-22 DSGVO:

- Information about the collection of their personal data
- Right to information regarding the personal data stored and processed about them
- Revocation of consent
- Right to rectification and erasure
- Right to data portability
- Right to object to processing without consent to protect legitimate interests
- Right not to be affected by legally binding decisions based on automated data processes
- The right to lodge a complaint with the competent supervisory authority in the event of suspected unlawful data processing

If you have given your consent, all data processing that was carried out until you withdraw your consent remains lawful.

If you wish to exercise your rights, please inform us by sending an e-mail to interne-meldestelle@bayernoil.de.


10. References and links

When calling up Internet pages to which reference is made on this website, you may be asked again for information such as your name, address, e-mail address, browser properties, etc. This privacy policy does not regulate the collection, disclosure or handling of personal data by third parties.

Third-party service providers may have different and separate provisions regarding the collection, processing and use of personal data. It is therefore recommended that you inform yourself about the handling of personal data on the websites of third parties before entering personal data.