Data protection regulations for applications

The protection of personal data is an important concern of GUD. The handling of your data provided to us takes place in accordance with the legal regulations, in particular those of the Federal Data Protection Act (BDSG) and the EU-DSGVO. With your consent you agree to the processing of the data provided by you. The processing of the personal data collected by you in connection with the "Declaration of Consent" is carried out by Gasunie Deutschland Transport Services GmbH, Pasteurallee 1, D-30655 Hanover ("GUD") as the person responsible. Should you have any questions about this document or wish to make a complaint regarding the collection and processing of your personal data by GUD, please contact our data protection officer using the contact option listed in section 7 below.

1. collection, processing, use, disclosure of your data and legal basis:
Personal data is only collected, stored, processed and used for purposes in connection with your interest in contacting us.

2. categories of data, processing purposes: We collect and process the following personal data: Name, e-mail address, telephone number, language skills, education and work experience. We collect this data in order to provide you with personalized application options and to be able to contact you in this regard. The legal basis of the processing is your consent in accordance with Art. 6 (1) a) of the EU Data Protection Basic Regulation.

3. Recipients and categories of recipients: Any access to your personal data at GUD is limited to those persons who require knowledge in order to fulfil their professional tasks. Your personal data will only be passed on to third parties (e.g. courts or law enforcement authorities) if we are obliged to do so by law, if you have given your consent or if the passing on is otherwise legally permissible.

We may transfer your personal data to the following recipients and recipient categories in particular for the respective purposes:

a. Contract data processor. Just like others, we depend on the services of third parties, such as our data center. Our service providers are subject to local data protection laws and are also contractually obliged to process the personal data exclusively on our behalf and according to our instructions. We also oblige our service providers to comply with technical and organisational measures to ensure the protection of personal data;

b. public authorities, courts, external consultants and similar third parties who are public authorities. To the extent required or permitted by applicable law.

4. Duration of storage and deletion: Your personal data will be kept by us for as long as is necessary to fulfil the purposes of the consent. If we no longer need your personal data to comply with contractual or legal obligations, it will be deleted from our systems or made correspondingly anonymous, so that identification is not possible. Something else only applies if we have to fulfil legal or official obligations, e.g. legal retention periods, which can result from the Commercial Code or the Tax Code and can generally last 6 to 10 years, or if evidence has to be secured during the legal limitation periods, which normally amount to 3 years but can amount to up to 30 years.

If your contact information is of fundamental interest, you hereby give us your consent to store your data accordingly.

5. Data security: We attach great importance to the greatest possible security of our system and use modern data storage and security technologies to protect your data optimally. These include measures such as antivirus software or a firewall. It goes without saying that our security measures are continuously improved in line with technological developments.

6. Your rights: In addition to the right of appeal to a supervisory authority, you may have the following rights under applicable data protection law. To exercise your rights, please contact us at the above contact details.

a. Right to information. You have the right to request confirmation from us whether personal data concerning you will be processed. If this is the case, there is a right to information about this personal data. The right to information covers in particular information on the purposes of processing, the categories of personal data being processed and the recipients or categories of recipients to whom the personal data have been or are still being disclosed. Please note that the right to information is not an absolute right and that the legitimate interests of other persons may restrict the right to information.

b. Right to correction. You have the right to request the correction of incorrect personal data concerning you. Taking into account the purposes of the processing, there is also the right to request the completion of incomplete personal data - also by means of a supplementary declaration.

c. Right to cancellation ("right to be forgotten"). If the relevant requirements are met, you can request that the personal data relating to you be deleted immediately.

d. Right to limitation of processing. If the relevant prerequisites are met, you can request that processing be restricted. In this case, the personal data concerned will be marked accordingly and, if necessary, only processed for specific purposes.

e. Right to data transferability. If the relevant requirements are met, you have the right to transfer the personal data concerning you that you have provided to us, i.e. the right to receive it in a structured, current and machine-readable format and, if necessary, to transmit this data to another person in charge without interference from the person to whom the personal data was provided.

f. Right of objection. In certain circumstances, for reasons arising from your particular situation, you have the right to object to the processing of personal data concerning you. You also have the right to object to the processing of your personal data at any time and free of charge.

7. contact person / data protection officer

Data Protection Officer at GUD: Kateryna Wilio