ARTICLE 1. SCOPE AND RESPONSIBILITIES
1.2 InnoEnergy is the controller for these Processing activities.
1.3 The Site may include references of third parties (for example hyperlinks, banners or buttons). We do not control these references and are not responsible for compliance with the law by these third parties. We recommend to carefully read the privacy policies of the third party websites you are visiting via the Site.
1.4 Additional privacy provisions may apply to specific sections in this Site.
ARTICLE 2. PERSONAL DATA AND PROCESSING
2.1 “Personal Data” means any information relating to an identified or identifiable natural person (data subject). We may collect the following Personal Data from Data Subjects:
a. name and address details;
b. information about an order;
c. e-mail address;
d. IP address;
e. payment details.
2.2 “Process” or “Processing” means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
ARTICLE 3. PROCESSING OF PERSONAL DATA AND LEGAL GROUNDS
3.1 InnoEnergy is Processing personal Data Submitted by Data Subjects in the context of the use of the Site, for the following purposes:
a. Performance of a contract (B-B): Personal Data of Data Subjects may be Processed by us for the performance of a contract when the Data Subject places an order via the Site. The purpose also includes payment for the report ordered. We do not Process more Personal Data than is strictly necessary for the performance of the contract involved. This Processing of Personal Data is necessary for the performance of a contract and/or for purposes of a legitimate interest pursued by InnoEnergy, namely to conducts its normal business.
b. Communication: Personal Data of Data Subjects may be Processed by us to communicate with Data Subjects about the report ordered and to inform Data Subjects of matters that are important for the use of the Site, customer service and the handling of any complaints. This Processing of Personal Data is necessary for the performance of a contract and/or for purposes of a legitimate interest pursued by InnoEnergy, namely to conducts its normal business.
c. Marketing purposes; Personal Data of Data Subjects may be Processed by us for direct marketing purposes, by sending our newsletters, advertising, project information, information about InnoEnergy, our projects, services and/or our educational programs and/or job offers. This Processing of Personal Data is necessary for purposes of a legitimate interest pursued by InnoEnergy, namely to keep in touch with customers and to offer customers similar products and services or is based on prior consent.
d. Statistical purposes; InnoEnergy compiles statistical information from the Personal Data, as much as possible on an anonymous basis. This Processing of Personal Data is necessary for purposes of a legitimate interest pursued by InnoEnergy, namely to improve its products and services.
ARTICLE 4. PROCESSING OF PERSONAL DATA AND LEGAL GROUNDS
4.2 The third-party service providers may be located outside the European Economic Area (“EEA”). This will involve transferring Personal Data to countries outside the EEA. If and insofar as we transfer Personal Data with parties in countries outside the EEA that do not have an adequate level of protection, we will agree with these parties data protection provisions set by the European Commission, so called Standard Contractual Clauses. A copy of the agreed standard provisions can be requested at InnoEnergy. Please contact us if you would like to obtain additional information on the transfer of Personal Data out of the EEA.
ARTICLE 5. SECURITY
5.1 We take appropriate organizational and technical security measures to protect Personal Data and to prevent misuse, loss or alteration thereof. In addition, we limit access to Personal Data to those employees, agents, contractors and other third parties who have a need to have access. Also, the aforementioned persons involved are bound by a confidentiality obligation, either in their employment agreements or (data processor) contracts.
5.2 We have internal safety guidelines in place including a data breach policy in which it is described how to deal with a suspected Personal Data breach. We will notify the relevant supervisory authority and the Data Subjects involved if required under applicable privacy legislation.
5.3 We store Personal Data that we collect via the Site on servers in and outside the EEA. The storage will involve transferring Personal Data outside the EEA.
ARTICLE 6. RETENTION PERIODS
6.1 We do not store Personal Data any longer than strictly necessary for the purposes for which we collect the Personal Data.
6.2 Data Subject’s may request InnoEnergy to delete the Personal Data at any stage. If the Personal Data are no longer required for the purposes for which we collected or otherwise Processed the Personal Data, we will remove the Personal Data.
ARTICLE 7. COOKIES
7.1 InnoEnergy may use “cookies” (small pieces of data stored on the Data Subject’s computer) or similar tools using (as much as possible anonymized) information.
7.2 KIC uses different types of cookies for different purposes;
a. Functional cookies: cookies that are necessary for the Site to function properly, including cookies that are necessary to enable the Data Subject to sign in to certain services to protect both the Data Subject and InnoEnergy, help make our services easier to use.
b. Analytical cookies: cookies that ensure that insight can be gained into how Data Subjects use (parts of) the Site, to help us understand how users engage with our services and to improve their features. InnoEnergy does not use the data obtained with these cookies to study the use of the Site at an individual level, but only at an aggregated level.
c. Tracking cookies; cookies are used for direct marketing purposes of InnoEnergy.
7.3 We only use third party cookies to improve the quality and effectiveness of the Site. For example, it uses Google Analytics, which is set up in a privacy-friendly manner. Google Analytics Processes the IP addresses for InnoEnergy.
7.5 Most browsers are set to accept cookies by default. You can set the browser to disable cookies or indicate when a cookie is being sent. However, it is possible that some functions and services of both InnoEnergy and other websites do not function properly if cookies are disabled.
ARTICLE 8. DATA SUBJECT’S RIGHTS
8.1 Data Subjects have the following rights:
a. the right to withdraw consent at any time, if the Personal Data Processing is based on consent (see above);
b. the right to request access to his Personal Data;
c. the right to request rectification of the Personal Data that we hold about the Data Subject involved;
d. the right to request erasure of Personal Data concerning the Data Subject;
e. the right to object to Processing of Personal Data where we are relying on a legitimate interest. Insofar as the Processing of your Personal Data takes place for direct marketing purposes, we will always honour such request. For Processing for other purposes, we will also stop Processing, unless we have compelling legitimate grounds for the Processing which override your interests, rights and freedoms or that are related to the institution, exercise or substantiation of a legal claim;
f. the right to request restriction of Processing of Personal Data;
g. the right to request to transfer of Personal Data to the Data Subject involved or to a third party (right to dataportability). Note that this right only applies to automated information which Data Subjects initially provided consent for us to use or where we used the information to perform a contract with the Data Subject involved.
8.2 We may request specific information from Data Subjects to help us confirm the identity and the rights described above.
8.3 The exercise of the abovementioned rights is free of charge.
8.4 InnoEnergy shall inform Data Subjects, within one (1) month after the receipt of such a request. Depending on the complexity of the request and on the number of requests, this period can be extended by another two (2) months. Applicable law may allow or require us to refuse your request. If InnoEnergy decides not to meet the request made, the refusal shall be explained, subject to any legal or regulatory restrictions. If InnoEnergy decides to meet the request made the necessary measures will be taken as soon as reasonably possible.
8.5 If requests are manifestly unfounded or excessive, in particular because of the repetitive character, we will either charge a reasonable fee or refuse to comply with the request.
ARTICLE 9. CONTACT
KIC InnoEnergy SE
Kennispoort, 6th floor, John F. Kennedylaan 2
5612 AB Eindhoven, The Netherlands.
tel: +31 40 247 31 82
ARTICLE 10. DATA PROTECTION AUTHORITY
10.1 In addition to the above mentioned rights everyone have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or of an alleged infringement of the GDPR at all times. However, we would appreciate the chance to deal with concerns before Data Subject’s approach the supervisory authority, so please contact us beforehand.
ARTICLE 11. MISCELLANEOUS