Data Protection

Data Protection

General Information

We, Oiltanking GmbH, and our affiliated companies (hereinafter jointly referred to as “the Company”) welcome you to our websites and thank you for your interest in our company.

We strive to offer you the best possible service; this also includes continuous optimizing of our Internet presence and, it goes without saying, protection of your data. Our server will automatically record data whenever you visit our websites. We do not, however, assign any personal identity to this data, which can, for example, be the domain name and IP address of the requesting computer or the date of access, duration of your visit or the website from which you visit us. This data is generally used for system security purposes as well as to continually optimize our sites and services. Data evaluation is exclusively of a statistical nature.

Any additional personal data, such as your name, address, telephone number or e-mail address, will not be gathered unless you specifically provide them to us (e.g. via the contact form or by email). It goes without saying that in such cases your data will only be gathered, processed or used for the purposes as indicated or for purposes arising from them, unless current legal regulations require us to pass them on. We will only use your data for other purposes (e.g. advertising or market/opinion research) if you have specifically consented to us doing so.

Please find below information about how we, the Company, handle your data in accordance with Art. 13 of the General Data Protection Regulation (“GDPR”).

Data Controller

The entity stated in our legal notice (see Content Provider) is responsible for collection and processing of the data described below.

We will store the IP address transmitted by your web browser for a period of seven days strictly for the purpose of being able to recognize, limit and rectify any attacks on our websites. After expiry of this period, we will erase or anonymize the IP address. The legal basis for this is Art. 6 Para. 1 lit. f GDPR.

Usage Data

Whenever you visit our websites, for statistical purposes our web server will temporarily store in a log your so-called “usage data” to allow us to improve the quality of our websites. This data set comprises:

  • The site from which the file was requested,
  • The file name,
  • The date and time of the request,
  • The data volume transmitted,
  • The access status (file transmitted, file not found),
  • The description of the type of web browser used,
  • The requesting computer’s IP address, shortened in such a way that it can no longer be linked to an identified individual.

The above-mentioned log data will only be stored in an anonymized form.

Data Transfer to Third Parties

Within the framework of data processing on our behalf as defined by Art. 28 GDPR, we will transfer your data to service providers who assist us with the operation of our websites and the related processes. Our service providers are bound by strict instructions issued by us and subject to corresponding contractual obligations. We use the following service providers: hosting provider, web analysis service provider, website programming and maintenance service provider.

Use of Cookies

Website Analysis Matomo

We use web analysis tool Matomo in order to collect and evaluate statistics about the use of our website, in order to design our webpage according to your needs. These tools generate usage profiles on the basis of anonymous usage data. To this purpose, cookies are being used according to the description in our consent management tool. If, in individual cases, personal data is being processed, the processing is carried out on the basis of your consent.

For more information see: Use of Cookies.

Social Media Presences

We operate official Social Media pages, based on Article 6, section 1 (f) GDPR which refers to processing that is done in the interest of public relations and communication. We do not at any time register, store or process personal data of our users on these pages, except for job applications (see under “Online Job Applications” and below). We may communicate with you via the Social Media platform by answering to comments, messages or the like, share your posted content on any of our social media pages and allow you to participate in contests and/or raffles.

On certain Social Media pages, we also accept job applications. The processing here is based on Art. 6, section 1 (b) GDPR (or the equivalent national implementation provision). Please see the “Online Job Application” section for more information. Please check the settings and privacy policy of the respective provider you have signed up to as well.

The data you submit to our Social Media pages (e.g. comments, videos, applications or pictures) will at no time be used or processed by us for any other undisclosed purposes.

To the extent that the platform provider leaves us room to exert influence over or set parameters regarding the processing of your data, we will design our social media pages to be as compliant as possible with applicable data protection rules. We therefore do not make use of demographic, interest-based, behavior-based or location-based target group classifications for the purposes of advertising, notwithstanding that such services may (by default) be provided to us by the social media platform providers.

If you wish to object to a particular data processing, please contact us via the contact information provided in our content provider information. Following our examination of your request, we will determine whether we are able to respond to your request. If we are unable to fulfill your request using our own means, we will forward it to the appropriate service provider. If you send us an inquiry through the social media platform, we may also, depending on your request, refer to other secure communication channels that guarantee confidentiality. You always have the option to send us confidential inquiries to the address given in the content provider information.

The Social Media platforms use what are known as “web tracking methods” on their websites. Please be aware of the following: the possibility cannot be excluded that the Social Media platforms may use your profile data, for instance in order to evaluate your habits, personal relationships, preferences and the like. Together with the platform provider we entered into a so called joint controllership. This means we and the respective Social Media platform are jointly responsible for the processing of the personal data. We have no influence on the processing of your data by the social media platforms. Further information on the data processing conducted by the platform provider, including information concerning your rights as a user, can be found in the provider's data protection policy and, the joint controller addendum. Please reach out to us, if you have further questions or require assistance in finding the respective information.

Data Security

We have implemented technical and organizational measures to ensure that your data is protected as comprehensively as possible against undesired access. We use an encryption procedure on our sites. Your computer will use TLS encryption to transmit your data to our server via the Internet and vice versa. This is indicated by the locked padlock symbol in your browser status bar and the address line beginning with https://

Contact via Email

You have the possibility of getting in touch with us by means of an online form or email. In order to process your inquiry we need your name and your e-mail address. The legal basis for the processing of the data is article 6, section 1 (b) of the General Data Protection Regulation. We use your data exclusively for the purpose of processing your enquiry.

Online Job Applications

We process your personal data in accordance with the applicable data protection provisions, based on Art. 6, section 1 (b) General Data Protection Regulation (or the equivalent national implementation provision). We process the data you relinquish to us in connection with your online application exclusively for the purpose of selecting from among the candidates. No data processing for other purposes will take place.

You yourself determine the scope of the data you would like to communicate to us in connection with your online application. Online applications are transmitted to our HR department and processed by HR as rapidly as possible. The data are transmitted in encrypted form. As a rule, applications are forwarded to the heads of the responsible specialist units of our company. Other than that, no sharing of your data takes place. Your details will be treated by us as confidential. If your application proves unsuccessful, your documents will be deleted on the expiry of 6 months.

If you wish us to have regard to your application in connection with other or future job vacancies, please do include a note on your application to this effect. Your data will then be processed in compliance with article 6, section 1 (a) of the General Data Protection Regulation. In this case, your application will be deleted after two years. You can withdraw your consent at any time contacting the Controller or our contact person for data protection matters.

Your Rights as a User

Under the terms of the GDPR, you have the following rights as a so-called “data subject” – the right to information (Article 15 GDPR); the right to rectification (Article 16 GDPR); the right to erasure (Article 17 GDPR); the right to restriction of processing (Article 18 GDPR); the right to object (Article 21 GDPR) and the right to data portability (Article 20 GDPR). 

Right to Object (Art. 21 GDPR)

Should data be gathered on the basis of Art. 6 Para. 1 lit. f (data processing for the purposes of legitimate interests), then you have the right to object to processing at any time on grounds relating to your particular situation. Should you do so, then we will no longer process your personal data unless there are compelling legitimate grounds for processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

Right to Lodge a Complaint with a Supervisory Authority

Under the terms of Art. 77 GDPR you have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes data protection law regulations. You can assert this right in particular with a supervisory authority in the member state of your habitual residence; place of work or the place of the alleged infringement.

Data Protection Officer’s Contact Details

Our company Data Protection Officer will be pleased to provide you with any information you require, or respond to any feedback you have, concerning data protection:

Oiltanking GmbH
Data Protection Officer
+49 40 370990

Concluding Provisions

We reserve the right to update this data protection declaration at any time, either with or without prior notice. By using our website(s) you are declaring your agreement to these data protection regulations.

Status: May 2022