Main Menu

Privacy Policy

Preamble

Welcome to our website! We take the protection of your data and your privacy very seriously. The purpose of this document is to provide you with information about what types of data we process and when, for what purpose and on what legal basis we process data. In this document, we would like to explain to you how our services work and how we protect your personal data.

In accordance with Article 4 (1) of the GDPR, personal data means all information relating to an identified or identifiable individual. An identifiable natural person is someone who can be identified, either directly or indirectly. For further information, please refer to Article 4 (1) of the GDPR.

This privacy policy is accessible electronically via https://www.gknhydrogen.com/privacy/ and may be downloaded, saved and printed any time.

 

If we use our legitimate interest or the legitimate interest of a third party as the legal basis for processing your personal data (Article 6 (1) point f) of the GDPR), you have the right to object to this processing pursuant to Article 21 of the GDPR:

Under Article 21 of the GDPR, you have the right to object to the processing of your personal data at any time. We shall then no longer process your personal data for purposes of direct marketing or any related profiling.

 

Likewise, we shall then no longer process your personal data for any other purpose, unless we can demonstrate compelling legitimate reasons for processing that override your interests, rights and freedoms, or unless the processing serves to enforce, exercise or defend legal claims (see Article 21 (1) of the GDPR, the so-called ‘Limited right of objection’). In this case, you have to set out the reasons for the objection that relate to your particular situation.

 

Where personal data is processed for scientific or historical research purposes or statistical purposes pursuant to Article 89 (1) of the GDPR, you have the right to object to the processing of your personal data for reasons relating to your particular situation, unless processing is required to carry out a task for reasons of public interest (see Article 21 (6) of the GDPR).

 

In the individual sections, we will point out the right to object separately to you (e.g. by saying: “You have the right to object”) if this right applies. There you will also find further information on how to exercise your right to object.

 

In order to keep the following privacy policy transparent, we refer to information and privacy notices on external websites (see also the section “Social Networks & External Links” in this privacy policy) in various places via links. We endeavour to keep the links listed in this privacy statement up to date.

Nevertheless, due to the constant updating of the websites, it cannot be excluded that links do not function correctly. Should you notice such a link, we would be pleased if you inform us so that we can include the latest link.

Controller

The controller for the processing of personal data within the meaning of Article 4 (7) of the GDPR is:

GKN Hydrogen GmbH
Pennefeldsweg 11-15
53177 Bonn
Germany

If you have any questions regarding the processing of your personal data or your rights with respect to data protection, please contact: DataPolicy@gknhydrogen.com

Log Files

Every time you visit our website, we automatically collect data and information from your device’s system and store it in so-called ‘server log files’. This is data that relates to an identified or identifiable natural person (in this case: website visitors). The data is automatically transmitted by your browser when you visit our website. This following data is collected:

 

  • your IP address
  • browser type
  • domain names
  • internet service provider (ISP)
  • files viewed on our site (e.g., HTML pages, graphics, etc.)
  • operating system
  • clickstream data
  • access times and referring website addresses.

 

We process this data to ensure that our website is accessible from your device, and that it displays correctly on your device or in your browser. In addition, the data is used to optimise the website and to ensure the security of our systems. An evaluation of this data for the purpose of marketing does not take place.

The legal basis for this processing is Article 6 (1) point (f) of the GDPR. We have a legitimate interest in presenting you with a website that is optimised for your browser, and to facilitate communication between our server and your device. The latter, in particular, requires your IP address to be processed.
The information processed shall be stored only for as long as is necessary for the purpose for which it was processed.

The recipient of the data is our server host and our customer relationship management provider (“HubSpot”), who works for us within the framework of a data processing agreement. Further information on “HubSpot” can be found in section 8 of this privacy policy.

Google Services (Analytics & Youtube)

We use various services from Google LLC. (‘Google’), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA on our website.

 

In some circumstances, embedding Google services means that Google collects and processes information (including personal data). In such cases, we cannot rule out the fact that Google may also transmit the information to a server in a third country.

 

As outlined in Google’s Privacy Shield certification (available at https://www.privacyshield.gov/list by searching for ‘Google’), Google is obligated to comply with the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework with respect to the collection, use and storage of personal data from EU member states, or Switzerland. Through certification, Google, including Google LLC and its wholly owned subsidiaries in the USA declares that it complies with Privacy Shield principles. You can find more information about this at https://www.google.de/policies/privacy/frameworks/.

 

We have no influence over the information that Google actually collects and processes. However, Google states that it can generally only process the following information (including personal data):

 

  • protocol data (particularly the IP address);
  • location-related information;
  • unique application numbers; and
  • cookies and similar technologies.

 

If you are signed into your Google account, Google may add the processed information to your account, depending on your account settings, and treat it as personal data; also refer particularly to https://www.google.de/policies/privacy/partners/.

 

Among others, Google would like to state the following:

 

‘In some circumstances, we associate personal information from one service with information and personal data from other Google services. We do this to make it easier for you to share content with friends and acquaintances, for example. Depending on your account settings, your activity on other sites and apps may be associated with your personal information in order to improve Google’s services and the ads displayed by Google.’ (https://www.google.com/intl/de/policies/privacy/index.html)

 

You can prevent this data from being directly added to your account by signing out of your Google account or changing your account settings accordingly. You can also prevent cookies from being installed – if used by Google – by changing your browser settings accordingly; please note that in this case, you may not be able to use all of this website’s features fully.
You can learn more about how to delete cookies in the most common browsers, and about how to change cookie settings etc. here:

 

You can find more information in Google’s privacy policies, which can be accessed here:

 

 

You can find information about Google’s privacy settings at https://privacy.google.com/take-control.html

 

On our website, we use Google Analytics, a web analysis service provided by Google LLC “(“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

 

Google Analytics uses “cookies”, which are text files placed on your device, to help the website analyze how users use the site. Google Analytics may also use so-called web beacons (invisible graphics). These web beacons can be used to evaluate information such as visitor traffic to websites. The information generated by cookies and web beacons about the use of our website (including the user’s IP address) will be transmitted to and stored by Google on servers in the United States or other third countries. This information can be passed on by Google to Google’s contractual partners.

 

Information regarding Google’s existing Privacy Shield certification and other relevant information regarding data processing by Google in relation to the use of Google services can be found in this Privacy Policy under the section  Google services.

 

The following data types are processed by Google:

  • Online identifiers (including cookie identifiers)
  • IP address
  • device IDs

 

In addition, you can find more detailed information about the information processed at https://www.google.com/intl/de/policies/privacy/#infocollect under “Data we receive as a result of your use of our services” and at https://privacy.google.com/businesses/adsservices/

 

We only use Google Analytics with IP anonymization enabled (“anonymize IP”). This means that your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases the full IP address is transmitted to a Google server in the USA and shortened there.

 

Furthermore, we have concluded a data processing agreement with Google for the use of Google Analytics (Art. 28 of the GDPR). Google processes the data on our behalf in order to evaluate your use of the website, to compile reports on website activity for us and to provide us with other services associated with website and Internet use. Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.

 

The integration of Google Analytics enables us to analyze user behavior on our website and to respond to it. This enables us to continuously improve our services.

 

The legal basis for this processing is Article 6 (1) point (f) of the GDPR. We have a legitimate interest in the great benefit that the functions described above have for our services. The statistical evaluation of user behaviour enables us, in particular, to react and optimise our offer in line with the interests of our customers.

 

Google has the right to use subcontractors in the context of the data processing agreement. A list of these subcontractors can be found at https://privacy.google.com/businesses/subprocessors/

 

You can also prevent Google Analytics from collecting your data by clicking on the following link. An Opt-Out-Cookie is set, which prevents the future collection of your data when visiting our website: Click here to opt-out of Google Analytics.

 

It is also possible to prevent the installation of cookies by making the appropriate settings in your browser; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.

 

For information on how to delete cookies in the most common browsers and how to change cookie settings, click here:

 

Google Chrome: Website
Mozilla Firefox: Website
Apple Safari: Website
Microsoft Internet Explorer: Website

 

The processed information is stored for 14 months and automatically deleted at the end of this storage period.

 

For more information on data processing regarding Google Analytics, please refer to Google’s privacy policy:

https://support.google.com/analytics/answer/6004245?hl=de

 

Information about Google’s privacy settings can be found at:

https://privacy.google.com/take-control.html?categories_activeEl=sign-in

 

The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. While you are not under any obligation to provide us with your personal data, if you do not do so, you may not be able to use all the features of the website fully.

 

We use videos from YouTube and YouTube plug-ins on our website. YouTube is a service of YouTube LLC (‘YouTube’), 901 Cherry Ave., San Bruno, CA 94066, USA and is provided by this company. YouTube LLC is a subsidiary of Google Inc. (‘Google’), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

 

The integration of YouTube is done by embedding the service into our website using ‘iFrames’. In some circumstances, YouTube/Google collects and processes information (including personal data) when these iFrames are loaded. In this process, we cannot rule out that YouTube/Google may also transmit this information to a server in a third country.

 

We do not collect any data when you watch a YouTube video on our website.

 

We use YouTube in the so-called “extended data protection mode”. According to the information provided by Google, a video can be played without the user behaviour being recorded by cookies. We do not collect any data ourselves when you watch a YouTube video with us.

 

By integrating YouTube, we are pursuing the purpose of being able to show you various videos on our website so that you can view these directly on the website.

 

The legal basis for processing personal data as described above is Article 6 (1) point f) of the GDPR. Our justified legitimate interest lies in the great benefits that YouTube offers. The integration of external videos takes some burden off our servers and enables us to use the freed resources elsewhere. This can, among other things, increase the stability of our servers. YouTube/Google also has a legitimate interest in the collected (personal) data to improve its own services.

 

You can find more information in YouTube’s/Google’s privacy policies, which can be accessed here: www.google.com/policies/privacy/

 

You can find information about Google’s privacy settings at https://privacy.google.com/take-control.html?categories_activeEl=sign-in

Hubspot

On our website we use services from HubSpot, Inc. (“HubSpot”), 25 First Street, 2nd Floor Cambridge, MA 02141, USA. HubSpot is a provider of hosting services and customer relationship management systems. HubSpot provides the necessary product infrastructure.

HubSpot uses services of the Google Cloud Platform (GCP) in Germany (Frankfurt a. M.), and the Amazon Web Services, Inc. (“AWS”) 410 Terry Avenue North, Seattle WA 98109, USA. HubSpot has concluded a contract with AWS and Google (GPC) for data processing agreement. The data processed by GPC are processed and stored on servers in Germany. Furthermore, this data is transferred to AWS in the USA. AWS and Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on AWS’s or Google’s behalf.

HubSpot enables us to integrate various codes and services into our website in an orderly and simplified manner. We link the following services to HubSpot:

  • Server logs

HubSpot uses the infrastructure of the Google Cloud Platform (GCP) in the EU (Frankfurt a. M., Germany) to support the processing of local customer data.

The personal data processed by the GCP is secured on Google’s servers within the EU and transmitted to and stored by the Amazon Web Service (“AWS”) in the United States. By hosting these services with AWS and GCP, HubSpot can increase the performance and reliability of the services. The purpose is to ensure that data can be retrieved and to guarantee data security.

The legal basis for the transfer of data to AWS is HubSpot’s legitimate interest pursuant to Article 6 (1) point f) GDPR. HubSpot’s legitimate interest lies in IT security. Transmission to AWS ensures additional data security.

 

As can be seen from HubSpot’s Privacy Shield certification (to be found at https://www.privacyshield.gov/list under the search term “HubSpot”), HubSpot has obligated to comply with the EU-US Privacy Shield Framework published by the US Department of Commerce and the Swiss-US Privacy Shield Framework on the collection, use and storage of personal data from the member states of the EU and Switzerland respectively. HubSpot has declared by certification that it complies with the Privacy Shield principles.

Information on the existing privacy shield certification of HubSpot and other relevant data on data processing by HubSpot within the scope of using HubSpot can be found at:

You can also find more detailed information about HubSpot on their websites https://www.hubspot.com/ and at https://legal.hubspot.com/privacy-policy?_ga=2.3730290.37890199.1552980835-511272210.1549970169&_gac=1.216713890.1552561725.EAIaIQobChMI37mbjb-B4QIVC853Ch3C5Qp5EAAYASAAEgIJzvD_BwE.

Furthermore, we have concluded a data processing agreement for the use of Hubspot with HubSpot (Article 28 of the GDPR). HubSpot processes the data on our behalf in order to trigger the stored tags and display the services on our website. HubSpot may transfer this information to third parties if required to do so by law or if third parties process this data on behalf of HubSpot.

If you have deactivated individual tracking services (e.g. by setting an opt-out cookie), the deactivation will continue for all affected tracking tags that are integrated by HubSpot.

Through the integration of HubSpot, we pursue the purpose of being able to carry out a simplified and clear integration of various services. In addition, the integration of HubSpot optimizes the loading times of the various services.

The legal basis for the processing of personal data described here is Article 6 (1) point f) of the GDPR. Our justified interest in this is the great benefit that the integration of various services via the HubSpot brings. By integrating HubSpot, we reduce our maintenance effort as well as the loading effort of the website and the server and traffic load. In addition, HubSpot has a justified interest in the collected (personal) data in order to improve its own services.

You have the option of preventing all HubSpot tags from being sent. All you have to do is click on this opt-out link to save the HubSpot_hs_opt_out cookie in your browser.

However, we would like to point out that deactivation may result in you not being able to use our website or not being able to use it to its full extent.

The processed information will only be stored as long as it is necessary or legally required for the intended purpose.

The provision of personal data is neither required by law nor by contract and is also not necessary for the conclusion of a contract. They are also not obliged to provide the personal data. Failure to do so may, however, result in you not being able to use our website or not being able to use it to its full extent.

Hubspot Contact Form

On our website you will find a contact form from Hubspot which you can use to contact us electronically. If you contact us via this contact form, the data entered in the input fields will be processed by us.

This includes the following data as mandatory data:

  • E-mail address
  • The information that is derived from the message text

In addition, you can add further data as voluntary information. This may simplify and speed up the processing of your request. The following data are potentially affected:

  • First name
  • Surname
  • Telephone number
  • Company Name and
  • Street and house number
  • Postcode and city
  • The information that is derived from the message text

Mandatory and voluntary information are treated equally by us. The mandatory information is necessary in order to contact you and process your request.

The following data will also be processed when the message is sent:

  • Your IP address
  • Date and time of sending

Please note that the extent of the personal data collected in the contact form also depends on which data you yourself disclose in the contact form in the message text.

The purpose of processing personal data within the scope of mandatory and voluntary information is to process the contact request and to be able to contact the requesting party in order to answer the request. The other personal data processed during sending (IP address, date and time of sending) serve to prevent misuse of our contact form.

The legal basis for the processing of the personal data provided by you is your express consent pursuant to Article 6 (1) point a) of the GDPR.

The legal basis for the processing of further personal data is our legitimate interest pursuant to Article 6 (1) point f) of the GDPR. We have a legitimate interest in being able to prove that you have given us your consent. In addition, we have a legitimate interest in being able to prevent or prove misuse of our contact form.

The data will only be processed as long as this is necessary for the provision of the function.

The recipient of the data is our custom relation management provider HubSpot, who works for us within the framework of a data processing agreement.

Contact by post, telephone, fax or e-mail

There is the option of contacting us by post, telephone, fax or e-mail.

If you contact us by post, we may in particular process your address data (e.g. surname, first name, street, place of residence, postal code), date and time of receipt of the mail as well as any data resulting from your letter itself.

If you contact us by telephone, we may in particular process your telephone number and, if necessary, your name, e-mail address, time of call and details of your request within the framework of the conversation.

If you contact us by fax, we can in particular process the fax number or the sender identification as well as the data resulting from the fax.

If you contact us by e-mail, your e-mail address, the time of the e-mail and the data resulting from the message text (including attachments, if applicable) will be processed.

The purpose of processing the above-mentioned data is to process the contact request and to be able to contact the requesting party in order to answer the request.

The legal basis for the processing of personal data described here is Art. 6 Para. 1 lit. f) of the GDPR. It is our legitimate interest to give you the opportunity to contact us at any time and to answer your questions.

Personal data will be deleted as soon as they are no longer required for the purpose for which they were collected.

Social Networks & external links

In addition to this website, we also maintain presences in various social media, which you can reach via the corresponding buttons on our website. If you visit such a presence, personal data may be transmitted to the provider of the social network.

 

Please note that user data is hereby transferred to a server in a third country and can therefore be processed outside the European Union. US providers who are certified under the Privacy Shield have committed themselves to comply with EU data protection standards. Further information can be found at https://www.privacyshield.gov/Program-Overview.

 

It is possible that in addition to the storage of the data you have specifically entered in this social medium, other information may also be processed by the social network provider.

In addition, the social network provider may process the most important information about the computer system from which you visit it, such as your IP address, the type of processor you are using, and the browser version and plug-ins you are using.

 

If you are logged in with your personal user account of the respective network during the visit of such a website, this network can assign the visit to this account.

 

The purpose and scope of the data collection by the respective medium and the further processing of your data there as well as your rights in this regard can be found in the respective regulations of the respective controller, e.g. below:

 

 

 

We would also like to point out that our website contains further links to external external websites, whereby we have no influence on the processing of data on these external websites.

Data security

We use technical and organisational measures to protect our website and other systems against loss, destruction, access, modification, or distribution of your data by unauthorised persons. Notwithstanding our best efforts, data security and protection against all risks cannot be fully guaranteed.

Withdrawal

You have the right to withdraw your consent with future effect at any time, without affecting the legality of the processing done before withdrawal and based on your consent.

Data subject rights

As a data subject, you have the following rights:

  • right of access (Article 15 of the GDPR);
  • right to rectification of data (Article 16 of the GDPR);
  • right of objection (Article 21 of the GDPR);
  • right to erasure (Article 17 of the GDPR);
  • right to restriction of processing (Article 18 et seq. of the GDPR); and
  • right to data portability (Article 20 of the GDPR).

If you have any questions regarding your rights, please contact info@gknhydrogen.com Please note that in this case, we have to ensure that we are dealing with the actual data subject.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority.

We do not use automated decision-making on our website.

1. Right of revocation

You have the right to revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until revocation.

You can send or inform us of your revocation of consent at any time (e.g. by e-mail to info@gknhydrogen.com). You can also revoke your consent simply by clicking on the appropriate link in our confirmation e-mail or reply e-mail.

2. Right of Objection

If the processing of your data is not covered by the consent (especially log files), you have the right to object.

Right of objection

You can send us your objection at any time (e.g. by e-mail to info@gknhydrogen.com).

The provision of personal data is neither required by law nor by contract and is not necessary for the conclusion of a contract. You are also not obliged to provide personal data. Failure to do so may, however, result in you not being able to use our contact form.

Amendments to the privacy policy

We may have to amend our privacy policy to reflect changes in the law or changes in our internal processes.

If we have to amend our privacy policy on this basis, we shall communicate this to you with the subject line: ‘Privacy policy’.