Privacy policy
Responsible for data processing on these websites and during the execution of the Quarry Life Award is:
Heidelberg Materials AG (in the following “HCAG” or “we”)
Represented by the Managing Board
Dr. Dominik von Achten, Chairman
René Aldach
Kevin Gluskie
Hakan Gurdal
Ernest Jelito
Dr. Nicola Kimm
Dennis Lentz
Jon Morrish
Chris Ward
Berliner Straße 6
69120 Heidelberg
Germany
Phone: +49 6221-481-0
Fax: +49 6221-481-13217
E-Mail: info@heidelbergcement.com
Data Protection Officer:
+49 6221 481 34567
data.protection@heidelbergcement.com
1. Collection and processing of data
We collect and process personal data insofar you provide us with via an entry form on our website or by any other way, for example e-mail. Moreover, we collect and process data that arises during your use of our website. The processing of your data is made in accordance with the EU General Data Protection Regulation (GDPR) and applicable local data protection laws (e.g. German Data Protection Act, German Telecommunication-Telemedia-Data Protection Act). Personal data means any information relating to an identified or identifiable natural person. Below we inform you in detail about which data we process in which way and on which legal basis. Moreover, we inform you about your rights and about the duration of storage of your data.
HCAG is the organizer of the Quarry Life Award and decides on the winners on an international level (see in detail the Terms & Conditions and How to participate).
2. Processing of data for registering for and participating in the Quarry Life Award contest
To participate in Quarry Life Award contest a user account is required. Before submitting a project proposal you have to create an account on our Quarry Life Award website (e.g. https://www.quarrylifeaward.com). For creation of an account you must provide us your e-mail address, first name, last name and postal address. After submitting these personal data in our registration form you receive a confirmation e-mail in which you must click a link to confirm your registration. This confirmation e-mail is necessary for verifying you as the owner of the e-mail address inserted. Without clicking this link, you will not be registered. In this case we delete your personal data after 48 hours as a matter of routine.
We process your personal data according to Art. 6 (1) sent. 1point (b) GDPR for the purpose of identification of our contractual partner and providing you the account with Quarry Life Awards’ website and send you messages necessary for your participation in the Quarry Life Award contest or if you wish to receive a new password.
Insofar personal data is included in data uploaded within the User Account during the Contest and/or in the Project Reports, we process this information for the purpose of your participation in the contest and therefore according to Art. 6 (1) sent. 1 point (b) GDPR. Moreover, data uploaded within the User Account during the Contest and in the Project Reports of the Top Six Submissions will be made publicly available on the Quarry Life Award website. These data and Project Reports shall not include personal data of third parties.
However, if personal data of third parties is included, we have a legitimate interest to process these personal data because with the Quarry Life Award, we show our sustainability efforts to the public and therefore need to present on the Quarry Life Award Website current and past Contests. The legal basis for the processing is Art. 6 (1) sent. 1 point (f) GDPR.
Personal data you provide to us by participating in a contest (including photos of Contestants), will be processed according to Art. 6 (1) sent. 1 point (b) GDPR by us for the purposes of evaluation and publication of the projects.
3. Processing of Personal Data when contacting us
If you provide us with personal data when contacting us, e.g. by e-mail we collect and process your data according to Art. 6 (1) sent. 1 point (b) GDPR for the performance of a contract with you or in order to take steps at your request prior to entering into a contract or according to Art. 6 (1) sent. 1 point (f) GDPR for the purpose of our legitimate interest to answer your request.
4. Processing of Data via Cookies and Logfiles
Our website only uses the necessary session cookie “has_js”. We use this cookie to indicate whether or not your browser has JavaScript enabled. The cookie is deleted after the browser session.
Necessary cookies do not require the consent of the user under applicable law.
You can configure your web browser in such a way that necessary cookies are also blocked, but you may then not be able to use the website as intended.
If the data processed with the help of necessary cookies can be viewed in individual cases as person related, the legal basis for such processing is Art. 6 (1) point (f) GDPR, as we have a legitimate interest in the operation of the website.
Moreover, in accordance with Art. 6 (1) sent. 1 point (f) GDPR, every single web page uses log files, i.e. for every page impression, the access data are saved to the server log. The saved data record contains the following details:
- Your IP address, the date, the time, the file accessed, the status, the request that your browser sent to the server, the amount of data transmitted and the webpage from which you accessed the requested page (referrer) as well as
- The product and version information of the browser used, your operating system and your country of origin.
Log data will be deleted every 14 days as a matter of routine, i.e. any contained data will be deleted irretrievably. This temporary storage is only for protecting our websites against attacks or misuse. We do not use the log data beyond this purpose.
5. External links
Our website contains links to external websites. Social plugins such as the Facebook "Like" button are not used. The website protects your privacy by not directly integrating the external content into the website in these cases, but only by linking. Data can only be transmitted to the operator of the respective website when the link is activated. We are not responsible for the websites of other operators. In these cases, the data protection regulations of the other operator apply.
6. OpenStreetMap
This website utilizes map services provided by the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom (short OSMF). Your Internet browser or application will connect to servers operated by the OSMF located in the United Kingdom and in other countries. The operator of this site has no control over such connections and processing of your data by the OSMF. You can find more information on the processing of user data by the OSMF in their privacy policy.
https://wiki.osmfoundation.org/wiki/Privacy_Policy
The embedding of OpenStreetMap and thus the processing of your data as described above takes place on the legal basis of Art. 6 (1) sent. 1 point (f) GDPR because of our legitimate interest to make it easy to find the locations we have indicated on the website and thus to make our websites more attractive to our website visitors.
7. Encryption
Data you insert on our website is transferred in encrypted form (SSL). We take technical and organizational measures to secure our website and other systems against loss, destruction, access, modification or dissemination of your data by unauthorized persons.
8. Categories of recipients of the Personal Data; data transfer to a third country
Service providers and auxiliary agents used by us in connection with the contest and this website, e.g. host provider, agencies, IT service providers may have access to your personal data. If these service providers and auxiliary agents process data on our behalf they only act according to our instructions and are contractually bound by us accordingly.
We may also disclose your personal data to other entities of Heidelberg Materials for related processing purposes as for which you initially submitted your personal information (e.g. execution of payments). Service providers can have their legal seat in a third country (i.e. outside the EU/EEA). In third countries, the same level of data protection may not be guaranteed as in the European Economic Area. If data is transferred to a third country, we ensure that this transfer only takes place in accordance with the statutory provisions (Chapter V GDPR). In this respect, we always orientate ourselves on the current case law and follow the applicable recommendations of authorities in order to be able to ensure that your data is protected at the same level as the GDPR.
9. Your Rights
We provide any information referred to in Articles 13 and 14 GDPR to the data subject free of charge in a concise, transparent, intelligible and easily accessible form, using clear and plain language.
According to Art. 15 GDPR you have the right free of charge of access to your personal data and information about processing. Moreover, according to Art. 16 to 18 GDPR you have the right of rectification of inaccurate personal data as well as of erasure of personal data or restriction of processing.
Under the conditions of Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and the right to transmit those data to another controller without hindrance.
Moreover, according to Art. 21 (1) GDPR you have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Art. 6 (1) sent. 1 GDPR including profiling based on those provisions. Where personal data are processed for direct marketing purposes, according to Art. 21 (2) GDPR, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If the data processing is based on your consent, you can withdraw it at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
We shall comply with the aforementioned requests if and to the extent such compliance is required by the applicable statutory laws.
Please direct any request regarding your personal data to our contact details as mentioned at the beginning of this Privacy Policy.
Each data subject has the right to lodge a complaint with a supervisory authority of the alleged infringement.
10. Period of Data Storage and routine deletion
Insofar nothing else is explicitly stated above we process and store personal data only for the period, which is required to meet the purpose of processing, or as long and to the extent as statutory laws require us to process and/or store such data.
If the purpose of processing does not apply anymore or the applicable statutory retention requirement expires, we will as a matter of routine erase data or restrict the processing of data in accordance with the applicable statutory laws.
