Privacy
Data Privacy
At EP Power Minerals GmbH, we take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
The use of our website is generally possible without providing personal data. To the extent that personal data (for example, name, address or e-mail addresses) is collected on our pages, this is always done, as far as possible, on a voluntary basis. No such data will be passed on to third parties without your express consent.
However, we would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may involve security vulnerabilities. Complete protection of data against access by third parties is therefore not possible.
1. Controller under Art. 4 (7) GDPR
The controller under Art. 4 (7) GDPR is:
EP Power Minerals GmbH
Duisburger Str. 170
46535 Dinslaken, Germany
If you have any questions regarding data protection, you are welcome to contact our data protection officer at the above address or by
E-mail: datenschutz(at)ep-pm(dot)com
2. Communication by e-mail/telephone/contact form
Purpose and legal basis of data processing
Personal information that you provide to us by e-mail, telephone, mail or contact form will of course be treated confidentially. We use your data solely for the purpose of processing your request. The legal basis for data processing is Art. 6 (1) (f) GDPR. In this context, the legitimate interest on the part of EP Power Minerals GmbH results from the interest in answering inquiries from our customers, business partners and interested parties and thus in maintaining and fostering customer satisfaction.
We use phone functions of Microsoft Teams. The explanations regarding MS Teams in this privacy policy apply accordingly to the phone functionality.
Recipients / categories of recipients
As a matter of principle, we do not pass on the data to third parties outside EP Power Minerals GmbH. In exceptional cases, data is processed on our behalf by processors. In each case, these are carefully selected, and are also audited by us and subject to contractual obligations in accordance with Art. 28 GDPR.
Furthermore, it may be necessary for us to pass on inquiries to other companies within the EP Power Minerals Group should this be necessary for processing.
Storage period / criteria for determining the storage period:
All personal information that you provide to us in response to inquiries will be deleted or rendered securely anonymous by us no later than 90 days after the final answer is provided to you. The retention period of 90 days reflects the fact that it may occasionally happen that you need to contact us again about the same matter after receiving a reply, and that you need to be able to refer to the previous correspondence. Experience has shown that, as a rule, queries about our answers do not occur any more after 90 days.
3. Processing of contact data
Purpose and legal basis of data processing
EP Power Minerals GmbH processes the contact data of contact persons at customers, prospective customers, suppliers and other business partners for communication by e-mail, telephone, fax and mail. The legal basis for data processing is Art. 6 (1) (f) GDPR. In this context, the legitimate interest on the part of EP Power Minerals GmbH results from the interest in carrying out or initiating the business relationship with customers, prospective customers, suppliers and other business partners and in maintaining personal contact with contact persons in this context.
Recipients / categories of recipients
As a matter of principle, we do not pass on the data to third parties outside EP Power Minerals Group. Within the EP Power Minerals Group, your data will be passed on, among other things, for the purpose of implementing or initiating the business relationship. In exceptional cases, data is processed on our behalf by processors. In each case, these are carefully selected, and are also audited by us and subject to contractual obligations in accordance with Art. 28 GDPR.
Storage period / criteria for determining the storage period:
Personal data is stored for the purpose of implementing business relationships for as long as there is a legitimate interest in doing so.
4. Data processing for marketing purposes
Purpose and legal basis of data processing
The companies use personal data for marketing purposes, in particular for promotion by e-mail, telephone and mail. The purpose of data processing in the context of marketing measures is to inform the data subjects about products and services of the companies. The legal basis for sending out promotional communications by post is Art. 6 (1) (f) GDPR. In this context, the legitimate interest on the part of the company results from the interest in sending customers and prospective customers information about products and services. The legal basis for marketing by e-mail or telephone is usually a declaration of consent provided by you. For marketing towards existing customers, Section 7 of the German Unfair Competition Act (UWG) may also apply.
You may at any time object to the receipt of marketing communications with effect for the future by sending a message to info@ep-pm.com .
Recipients / categories of recipients
As a matter of principle, your data will not be passed on to external parties. If external processors are used to send promotional communications, they are contractually obligated in accordance with Art. 28 GDPR and have been checked accordingly to ensure that appropriate organizational and technical security measures are in place. Within the EP Power Minerals Group, your data may be shared with other companies for marketing purposes.
Storage period / criteria for determining the storage period:
If you object to receiving promotional communications, your data will be blocked immediately and then deleted, unless it is also stored for other purposes.
5. Cookies
We use so-called cookies for web analysis purposes, in order to make our website more user-friendly and effective. Cookies are text files that are stored on your device.
Two types of cookies can be distinguished: technically required cookies and optional cookies. Technically required cookies are necessary for technical reasons for the operation of the website and its functions. Use of data by means of technically required cookies, if such use enables relating data to a person and thus constitutes processing, is necessary for the aforementioned purposes to safeguard our legitimate interests as well as those of third parties in accordance with Art. 6 (1) sentence 1 lit. f GDPR.
Optional cookies may contain functions that go beyond the scope of the use of technically required cookies. If links to personal data are established using optional cookies for analysis purposes, the legal basis for your consent is Art. 6 (1) sentence 1 lit. a GDPR. We use these cookies for website analysis. For more information, please refer to the section “Website analysis”.
You can delete the cookies in the security settings of your browser at any time. You can configure your web browser settings at any time to block the use of cookies. Further information is available from the Federal Office for Information Security at BSI - JavaScript, Cookies & Fingerprints (bund.de)
You can change or withdraw your consent at any time in the Consent Banner on our website.
Matomo
Matomo uses cookies that enable an analysis of your use of the Website. For this purpose, the information generated by the cookie about the use of this website is stored on our server. The IP address is anonymized before storage. The data is collected in order to optimize our website. The data is stored for a period of 12 months. The information generated by the cookie about your use of this website will not be disclosed to third parties.
If you agree to the storage and analysis of this data from your visit, then you can give your consent to such processing by clicking on the mouse when you access the website. Your selection will be saved for future sessions.
6. Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This information includes:
- browser type / browser version
- operating system used
- referrer URL
- name and URL of the accessed file
- date, time and time zone of the server request
- IP address of the requesting internet-capable device
Such data are not readily assignable to specific individuals. We will not merge this data with data from other sources. We reserve the right to check this data at a later date if we become aware of specific information indicating unlawful use.
The The legal basis for the processing of this data is Art. 6 (1) (f) GDPR. Our legitimate interest is the purposes of data processing listed above. This data will not be passed on to external parties. The data is stored for a period of 14 days.
7. YouTube videos
We embed YouTube videos on some subpages of our website.
Calling up these subpages leads to YouTube content being loaded. In this context, YouTube also receives your IP address, which is technically required to retrieve the content. We have no influence on the further data processing by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. However, when embedding the videos, we made sure to activate the extended data protection mode offered by YouTube. The use of YouTube and the associated transmission of your IP address is based on your consent under Art. 6 (1) (a) GDPR. The transfer of personal data to entities outside the EU is based on Art. 49 (1) (a) GDPR. You can withdraw these consents at any time. For more information on the handling of user data, please see YouTube's privacy policy at:
https://policies.google.com/privacy?hl=en&gl=en
Please note: When you play a YouTube video on our site, this will be considered to constitute consent for the purposes described above, even if you have not previously given consent in the consent management tool.
8. Microsoft Teams
If you participate in an online meeting as an external participant, you will receive an access link by e-mail from the meeting host. When registering for the online meeting, you will be required to enter your name and, if applicable, your e-mail address.
If you do not wish to exchange data with us via Microsoft Teams in accordance with Art. 9 GDPR, we ask you to black out such data in advance or otherwise make it unrecognizable.
Microsoft Teams is a service of Microsoft Corporation. For more information about the processing of your data when using Microsoft Teams, please go to: https://privacy.microsoft.com/de-de/privacystatement and https://news.microsoft.com/de-de/datenschutz-und-sicherheit-in-microsoft-teams-nutzer/.
The EP Power Minerals Group company whose employee sent you the invitation link is responsible for the collection and processing of your personal data in connection with the use of Microsoft Teams. Please refer to this privacy policy or the e-mail signature in the invitation for the contact details.
Purposes and legal basis of data processing
We use the tool "Microsoft Teams" for holding online meetings, video conferences and/or webinars and, if applicable, also for exchanging documents with the participants.
The legal basis for data processing regarding contact persons at external parties is Art. 6 (1) (f) GDPR. Our interest is to improve the organization and communication with our contact persons and to reduce the number of tools used so far. If our contact person is a direct contractual partner and a natural person, then the legal basis is Art. 6 (1) (b) GDPR.
By clicking on “Accept / With reservation” and accepting the meeting invitation, you expressly give your consent in accordance with Art. 9 (2) (a) GDPR that, when activating the camera/microphone or, as the case may be, in the form of your profile picture, details/information about your ethnic origin, religion or health (e.g. skin color, glasses or headgear) or special categories of personal data may be processed.
Furthermore, in accordance with Article 49 (1) (a) GDPR, you expressly consent to the fact that this may also result in data being transferred to locations outside the EU/EEA where there is no adequate level of data protection as defined by the General Data Protection Regulation. You understand the risks associated with this, such as the lack of enforcement of data subject rights and possible access by government authorities.
You can withdraw these consents at any time with effect for the future. In the event of a revocation, any documents stored will be deleted from the Microsoft Teams platform.
Recipient / disclosure of data:
Personal data that is processed in connection with the storage of documents in Microsoft Teams is generally not shared with third parties unless it is intended to be shared. Note that content from filed documents, as well content shared during face-to-face meeting sessions, is often intended to communicate information with customers, prospects, or third parties and is therefore intended to be shared. Other recipients: The provider of Microsoft Teams necessarily obtains knowledge of the above data to the extent provided for in our data processing agreement with Microsoft Teams.
Data processing outside the European Union:
In principle, no data is processed outside the European Union (EU), as we have limited our data storage locations to data centers in the European Union. However, we cannot rule out the possibility that data may be routed via Internet servers located outside the EU or EEA. In some countries, there is a risk that authorities may access the data for security and surveillance purposes without informing you or making legal remedies available to you. We have agreed on EU standard contractual clauses with the provider of Microsoft Teams.
You are not under any obligation to communicate with us via Microsoft Teams. If you wish, communication may take place by other means (such as email or telephone).
Storage period / criteria for determining the storage period:
As a matter of principle, we delete personal data if there is no need for further storage. A need for further storage may exist in particular if the data is still required in order to fulfill contractual obligations, to verify and grant or defend against warranty and, if applicable, guarantee claims. In the case of statutory retention obligations, deletion will not be possible before the respective statutory retention period has expired.
9. Your rights as a data subject
In accordance with Art. 15 (1) GDPR, you have the right to obtain, upon request and free of charge, information about your personal data stored by EP Power Minerals GmbH.
In addition, you have a right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR) of your personal data provided that the legal requirements are met.
If the data processing is based on Art. 6 (1) (e) or (f) GDPR, you have the right to object to the processing under Art. 21 GDPR. If you object to data processing, no such processing will take place in the future unless the controller can demonstrate compelling legitimate grounds for further processing that outweigh the interest of the data subject in objecting.
If you have provided the processed data yourself, you have a right to data portability under Art. 20 GDPR.
If the data processing is based on consent pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR, you may withdraw your consent at any time with effect for the future without this affecting the lawfulness of the previous processing.
In the aforementioned cases, in the event of open questions or in the event of complaints, please contact the data protection officer in writing or by e-mail.
In addition, you have the right to lodge a complaint with a data protection supervisory authority. The competent data protection supervisory authority is that of the federal state in which you reside or in which the controller has its registered office.
In the case of joint controllers, you will receive the requested information from the controller with whom you initiate or conduct a business relationship.
10. No obligation to provide personal data
Unless otherwise stated above, the provision of personal data is not required by law or contract or necessary for the conclusion of a contract. You are not obliged to provide the personal data if nothing to the contrary has been stated previously. Failure to provide your personal data may mean that we are unable to respond to your contact request or that it is not possible for you to participate in an application process or attend an event.
11. Links to other websites
Our website includes links to other websites. If you follow these links, you will leave the web pages of EP Power Minerals GmbH and thus also the scope of this data protection declaration. We are not responsible for content or data privacy of these other websites. The responsibility lies exclusively with the operator of the respective website.
12. Social media presence
We, EP Power Minerals GmbH, operate the following pages on social media platforms:
You can find our contact details in our legal notice.
Apart from us, there is also the operator of the social media platform itself. This platform operator is also a controller in that it carries out data processing on which we have only limited influence. At the points where we can exert influence and parameterize the data processing, we work within the scope of the possibilities available to us to ensure that the operator of the social media platform treats the data in accordance with data protection requirements. At many points, however, we cannot influence the data processing by the operator of the social media platform and also have no exact knowledge of which data the operator processes. However, the platform operator will inform you about this in its respective privacy policy.
Use of social media plugins
Social media plugins are applications that allow content to be accessed or shared via various service providers.
On pages containing such plugins, a direct connection to the server of the respective social network is established via your browser as soon as they are clicked. By clicking the button, you agree that the respective providers may process your data in accordance with their own current privacy policy. As a result, the social network receives the information about the use of this page. Insofar as you are logged into the respective social network at this time, the visit to our website and all interactions in connection with the social media plugins (e.g. clicking the Like button, creating a comment, etc.) can be assigned to your profile and stored by the social network. Even if you do not have your own profile, it cannot be ruled out that data will be stored. We point out that we, as the provider of our pages, do not have or get any knowledge of the content of the transmitted data as well as its use by the social media offers. To minimize the collection of data by social media platform operators, please log out of the networks before visiting our website.
We have embedded certain LinkedIn features on our pages.
Here you can find the privacy statements of the respective providers:
https://de.linkedin.com/legal/privacy-policy?
Data processing on our part
The data you enter on our social media pages, such as comments, videos, pictures, likes, public messages, etc., will be published by the social media platform and will not be used or processed by us for any other purpose at any time. We only reserve the right to delete content if this should be necessary. If applicable, we share your content on our site if this is a function of the social media platform and communicate with you via the social media platform. The legal basis is Art. 6 (1) sentence 1 (f) GDPR. This data processing is carried out in the interest of our public relations and communication activities.
If you wish to object to certain data processing which is within our control, please contact us using the contact details provided in the legal notice. We will then review your objection or forward it to the social media platform if necessary.
If you send us a request on the social media platform, we may also refer you to other, more secure communication channels that guarantee confidentiality, depending on the required response. You always have the option of sending us confidential inquiries to our address stated in the legal notice.
As already stated, at the points where we are given the possibility by the provider of the social media platform, we take care to design our social media pages to be as data protection compliant as possible. In particular, we therefore do not use the demographic, interest-based, behavior-based or location-based target group definitions for advertising that the operator of the social media platform may provide us with. All in all, we do not use the social media platform for advertising purposes. With regard to statistics made available to us by the provider of the social media platform, we can only influence these to a limited extent and cannot switch them off. However, we make sure that no additional optional statistics are made available to us.
Data processing by the operator of the social media platform
The operator of the social media platform uses web tracking methods. Web tracking can also take place regardless of whether you are logged in or registered with the social media platform. As already described, it is unfortunately almost impossible for us to influence the web tracking methods of the social media platform. We cannot, for example, switch web tracking off.
Please be aware of this: It cannot be ruled out that the provider of the social media platform uses your profile and behavioral data, for example to evaluate your habits, personal relationships, preferences, etc. In this respect, we have no influence on the processing of your data by the provider of the social media platform.
For more information on data processing by the provider of the social media platform and further options to object to such processing, please refer to the respective provider’s privacy policy:
13. Your rights as a user
Where processing of your personal data takes place, the GDPR grants you, as a website user, certain rights:
1.) Right of access (Art. 15 GDPR):
You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the information listed in detail in Art. 15 GDPR.
2.) Right to rectification and erasure (Art. 16 and 17 GDPR):
You have the right to request that inaccurate personal data relating to you be rectified without delay and, where applicable, that incomplete personal data be completed.
You also have the right to request that personal data concerning you be erased without undue delay if one of the reasons listed in Art. 17 of the GDPR applies, e.g. if the data is no longer required for the purposes for which it was collected.
3.) Right to restriction of processing (Art. 18 GDPR):
You have the right to request the restriction of processing of your personal data if one of the conditions listed in Art. 18 GDPR applies, e.g. if you have objected to the processing, for the duration of a possible verification.
4.) Right to data portability (Art. 20 GDPR):
In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to request the transfer of this data to a third party.
5.) Right to object (Art. 21 GDPR):
If data is collected on the basis of Art. 6 (1) (f) (processing for the purposes of legitimate interests), you have the right to object to the processing at any time on grounds relating to your particular situation. We will then no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
Right to lodge a complaint with a supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if in your opinion the processing of personal data relating to you infringes data protection regulations. In particular, the right of complaint can be exercised with a supervisory authority in the member state of your place of residence, your place of work or the place of the alleged infringement.
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Commissioner for Data Protection and Freedom of Information)
PO Box 20 04 44
40102 Düsseldorf
Germany
Last updated: September 1, 2023