Privacy policy

1. data protection declaration

Thank you for your interest in our website.

We take the protection of your personal data very seriously when collecting, processing and using it during your visit to our website. Your data is protected in accordance with legal requirements.

Please take a moment to read the following information. This will give you information about how we handle your personal data, how and for what purpose this data is used, to whom we pass this data on and how we protect your personal data.

Your personal rights are our top priority and we make every effort to protect and guarantee these rights.

The controller for the processing of your personal data within the meaning of the European General Data Protection Regulation is:

AVISTA OIL Deutschland GmbH

Bahnhofstraße 82

31311 Uetze

+49 5177 85 0

info@avista-oil.de

Data protection officer

If you have any questions about data protection, please do not hesitate to contact our data protection officer S-CON GmbH & Co. KG, Podbielskistraße 386, 30659 Hannover, will be happy to answer any questions you may have about data protection (datenschutzteam068@s-con.de).

Collection and processing of data

Every access to our website and every retrieval of a file stored on the website is logged. The storage of this information is for internal system-related and statistical purposes.

The following information is logged:

• name of the accessed file,
• date and time of access,
• amount of data transferred,
• notification of successful access,
• operating system used,
• browser and browser type,
• the website from which the user was redirected,
• the internet service provider,
• pages visited and
• requesting domain.

In addition, the IP addresses of the requesting computers are logged. However, the controller does not draw any conclusions about a person.

This data is only needed to display the contents of our website correctly, to optimize the contents permanently for you and to support criminal prosecutions in the event of hacker attacks. The data is processed on the basis of our legitimate interest in accordance with Art. 6 (1) (1) (f) GDPR. The processing of the data is necessary for the operation of the website. The data is stored for as long as it is needed for the fulfillment of the purpose and is then automatically deleted.

Rights of data subjects

In accordance with Art. 15 GDPR, you have the right to request information about the processing of your personal data.

In addition, you are free to exercise your rights to rectification, erasure or, if erasure is not possible, to restriction of processing and to data portability in accordance with Articles 16–18, 20 GDPR. If you wish to exercise this right, please contact our data protection officer.

Furthermore, you have the right to complain to the relevant regulatory authority at any time. If you believe that the processing of your personal data does not comply with data protection laws, we would kindly ask you to contact our data protection officer.

Furthermore, you have the right to object to the processing of your personal data at any time.

Protection of stored data

We use technical and organizational security measures to protect the personal data that you have provided to us from manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved and adapted in line with the latest technology. It cannot be ruled out that unencrypted data transmitted by you may be viewed by third parties during transmission. Please note that with regard to data transmission over the internet (e.g. when communicating by e-mail), no completely secure transmission can be guaranteed. Sensitive data should therefore either not be transmitted over the internet at all or only over a secure connection (SSL).

Protection of minors

Consent to the processing of personal data can only be given by a person of legal age. For information society services, the consent of a child from the age of sixteen is permissible in accordance with Art. 8 GDPR.

Hosting

The contents of this website are hosted by the following provider:

The provider is Mittwald CM Service GmbH & Co. KG (hereinafter Mittwald).

Further details can be found in Mittwald's privacy policy: . The use of Mittwald is based on Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in ensuring that our website is displayed as reliably as possible. If consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. The consent can be revoked at any time. Furthermore, we have concluded an order processing contract with the provider.

Contact form

All your personal data and other information that you provide to us via the contact form set up on our website will only be collected and processed for the purpose of processing and responding to your inquiries.

By contacting us, you consent to the data processing in accordance with Art. 6 (1) (1) (a) GDPR.

If you are interested in an offer, your personal data will be processed for the purpose of contract initiation in accordance with Art. 6 (1) (1) (b) GDPR.

Your data will be forwarded to us by email via our provider. Unfortunately, if you do not provide this information, we will not be able to contact you and process your request.

No automated decision-making will be carried out.

Your personal data will not be passed on to external third parties.

The personal data you provide will not be transferred to a third country or an international organization and is not planned.

You have the right to revoke your consent at any time with effect for the future. The legality of the data processing carried out up to the point of revocation remains unaffected.

The personal data that you provide to us via the contact form will be stored by us for the duration of the processing of your request and kept until the corresponding legal deadlines have expired.

E-mail contact, telephone and fax

You can contact us via the email address provided on our website. You can also contact us using the telephone or fax number provided on the website. If you choose to do so, the personal data transmitted will be stored and collected and processed only for the purpose of processing and answering your request.

By contacting us, you consent to the data processing in accordance with Art. 6 (1) (1) (a) GDPR.

If you are interested in an offer, your personal data will be processed for the purpose of contract initiation in accordance with Art. 6 (1) (1) (b) GDPR.

If you do not provide it, we will unfortunately not be able to process your request. We do not use automated decision-making.

We do not transfer your personal data to external third parties.

We do not transfer the personal data you provide to a third country or an international organization, nor are we planning to do so.

You have the right to revoke your consent at any time with effect for the future. The legality of the data processing carried out up to the point of revocation remains unaffected.

The personal data that you provide to us will be stored by us for the duration of the processing of your request and kept until the corresponding legal deadlines have expired.

Disposal order form

All of your personal data and other information that you provide to us via the contact form set up on our website for the purpose of submitting a disposal order will only be collected and processed for the purpose of processing and responding to your requests.

Your data will be processed for the purpose of contract initiation in accordance with Art. 6 Para. 1 UAbs. 1 lit. b) GDPR.

Your data will be forwarded to us by email via our provider. Unfortunately, if you do not provide the data, we will not be able to contact you and process your request.

No automated decision-making will be carried out.

Your personal data will not be passed on to external third parties.

The personal data you provide will not be transferred to a third country or an international organization and is not planned.

You have the right to revoke your consent at any time with effect for the future. The legality of the data processing carried out up to the point of revocation remains unaffected.

The personal data that you provide to us via the contact form will be stored by us for the duration of the processing of your request and kept until the corresponding legal deadlines have expired.

Installation checklist form

All of your personal data and other information that you provide to us via the contact form set up on our website for the purpose of completing an installation checklist will only be collected and processed for the purpose of processing and responding to your requests.

Your data will be processed for the purpose of contract initiation in accordance with Art. 6 Para. 1 UAbs. 1 lit. b) GDPR.

Your data will be forwarded to us by email via our provider. Unfortunately, if you do not provide the data, we will not be able to contact you and process your request.

No automated decision-making will be carried out.

Your personal data will not be passed on to external third parties.

The personal data you provide will not be transferred to a third country or an international organization and is not planned.

You have the right to revoke your consent at any time with effect for the future. The legality of the data processing carried out up to the point of revocation remains unaffected.

The personal data that you provide to us via the contact form will be stored by us for the duration of the processing of your request and kept until the corresponding legal deadlines have expired.

Disposal request form

All of the personal data and other information that you provide to us via the contact form set up on our website for the purpose of submitting a disposal application will only be collected and processed for the purpose of processing and responding to your inquiries.

Your data will be processed for the purpose of contract initiation in accordance with Art. 6 Para. 1 UAbs. 1 lit. b) GDPR.

Your data will be forwarded to us by email via our provider. Unfortunately, if you do not provide the data, we will not be able to contact you and process your request.

No automated decision-making will be carried out.

Your personal data will not be passed on to external third parties.

The personal data you provide will not be transferred to a third country or an international organization and is not planned.

You have the right to revoke your consent at any time with effect for the future. The legality of the data processing carried out up to the point of revocation remains unaffected.

The personal data that you provide to us via the contact form will be stored by us for the duration of the processing of your request and kept until the corresponding legal deadlines have expired.

Online application

The personal data you provide is collected, processed and used for the purpose of deciding on the establishment of an employment relationship in accordance with Art. 6 (1) (1) (b) GDPR. The provision of your personal data is necessary for the application process and for deciding on the establishment of an employment relationship. If you do not provide it, unfortunately we will not be able to consider you for the position.

We do not use automated decision-making.

We process the personal data you provide exclusively in the application process. Your data is transmitted to us in encrypted form using Transport Layer Security (TLS).

We will provide you with the necessary information in accordance with Art. 13 GDPR when we receive your application by means of a reply e-mail.

We use an applicant management system from softgarden e-Recruiting GmbH, Tauentzienstr. 14, 10789 Berlin (contact: datenschutz@softgarden.de) to efficiently carry out application procedures. softgarden e-Recruiting GmbH operates the applicant management system as a processor within the meaning of Art. 4 No. 8 GDPR. We have concluded a data processing agreement with the provider in accordance with Article 28 of the GDPR, which ensures compliance with data protection regulations.

We remain your first point of contact for exercising your rights as a data subject and for handling the application process. You can contact us directly using the details of the controller provided above or, if provided, contact the data protection officer in confidence.

Your personal data will not be passed on to external third parties. To assess your documents, they will be forwarded to the responsible employees of the personnel department and to the responsible contact persons/heads of department of the respective specialist department for which the application is intended.

A transfer to a third country or an international organization of the personal data provided by you does not take place and is also not planned.

We store your application documents for the duration of the application process and for a further three months thereafter so that we can answer any questions you may have. After this period, the documents are deleted. Documents sent by post are returned or destroyed after the three-month period. If you are employed by our company, your application documents are transferred to your personnel file.

Only after your express written consent in accordance with Art. 6 para. 1 subpara. 1 lit. a) GDPR, we store your data until further notice in order to be able to contact you in the future regarding job offers within our company that may be of interest to you.

You have the right to revoke your consent at any time with effect for the future. The legality of the data processing until revocation remains unaffected.

The personal data that you provide to us when you order the job subscription will be stored by us until you revoke your consent to receive the news and will be removed from the distribution list after you unsubscribe.

User login

All of your personal data and other information that you provide to us when registering on our careers page will only be collected and processed for the purpose of your registration and future logins on the basis of Art. 6 (1) subpara. 1 (b) GDPR. If you do not provide this information, unfortunately you will not be able to register on our website.

No automated decision-making is carried out.

Your personal data is not passed on to external third parties.

A transfer of the personal data provided by you to a third country or an international organization does not take place and is also not planned.

The personal data that you provide to us via registration and in our customer portal will be stored by us until you log out or delete your user account or have it deleted, as well as in accordance with any statutory retention period.

2. Cookies

Technically necessary cookies (session cookies)

We use only technical cookies on our website to make the website more user-friendly. For technical reasons, it is therefore necessary to allow session cookies in order to use the full functionality of our website.

The purpose of using such cookies is to enable you to use the website in a simplified and more user-friendly way. It is therefore necessary that the browser can also identify you after you have moved on to another page.

The data will not be used to create a user profile for you. The legal basis for the use of technical cookies is § 25 para. 2 TDDDG. It is not possible to use the website without session cookies.

Cookies for evaluation (tracking cookies)

In addition to the use of technical cookies, tracking cookies are also used on this website. Cookies are text files that are stored on your computer and enable an analysis of your use of the website. However, these collect and store the data exclusively in pseudonymous form. They are not used to identify you personally and are not merged with data about the pseudonym holder. We use this information to determine the attractiveness of our website and to continuously improve its content.

The legal basis for the use of tracking cookies is the consent you have given in accordance with § 25 para. 1 TDDDG.

You have the right to revoke your consent at any time with effect for the future. The legality of the data processing until the revocation remains unaffected.

You can adjust the cookie settings at any time.

Detailed information about the cookies and analysis services used, as well as the purpose and legal basis for the data processing, can be found in the data protection declaration.

Matomo

We use the open-source software Matomo (formerly PIWIK) on our website. Matomo is provided by Matomo.org. This is provided in particular by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. Cookies are text files that are stored on your computer and enable an analysis of your use of the website. The information generated is stored on our servers. Your IP address is stored in anonymized form for the purpose of evaluating visitor access. This means that it is not possible to link it to you personally. The IP address transmitted by Matomo is not merged with other data. The data is deleted as soon as it is no longer needed for our recording purposes.

Data is only collected as part of this service with your express consent.

The legal basis for the collection is your consent in accordance with § 25 Abs. 1 TTDSG. You have the right to revoke your consent at any time with effect for the future. The legality of the data processing until the revocation remains unaffected.

Your personal data will not be passed on to external third parties.

A transfer to a third country or an international organization of the personal data provided by you does not take place and is not planned.

Further information on data protection can be found at: matomo.org/gdpr-analytics/

You have the option to prevent the actions you take here from being analyzed and linked. This will protect your privacy, but it will also prevent the owner from learning from your actions and improving usability for you and other users.

Your visit to this website is currently being tracked by Matomo web analytics. Uncheck this box to opt-out.

Google reCAPTCHA

This website uses the Google reCAPTCHA service, operated by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter: “Google”), which protects the website from spam and misuse.

The reCAPTCHA service is designed to prevent abusive activities from being carried out on the website by automated software. This is ensured by means of a check to see whether the entries actually originate from a natural person.

The data used for the verification includes the address of the page on which the captcha is used, the user's IP address, the user's input behavior (e.g. answering the reCAPTCHA question, input speed into the form fields, the order of selection of input fields, etc.) as well as browser, browser size and resolution, browser plugins, date, language setting, the presentation instructions (CSS) and scripts (JavaScript) of the website and the mouse or touch events within the website. If the user of the website is logged in to Google, the Google account is also recognized and assigned. In this case, cookies from other Google services such as Gmail, Search and Analytics are also read by Google. Data that is collected and stored in the context of using Google reCAPTCHA is sent to Google in encrypted form. Whether the captcha is displayed on the page in the form of a checkbox or as text input is decided by the subsequent evaluation by Google. Personal data from the input fields of the respective form is not read or stored.

The legal basis for the use of reCAPTCHA is Art. 6 para. 1 subpara. 1 lit. a) GDPR and § 25 para. 1 TDDDG, provided that the consent within the meaning of the TDDDG refers to the setting of cookies or access to information on your end device. You have the right to revoke your consent at any time with effect for the future. The legality of the data processing until the revocation remains unaffected. The data will be deleted as soon as you leave our website.

There is a possibility that personal data may be transferred to Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) in the United States as part of the use of this Google service. You can find more information about the collection and processing of your data by Google and your rights as a data subject in Google's privacy policy: www.google.com/intl/de/policies/privacy/.

3. Data protection declaration for social media sites

We would like to get in touch with you and other interested parties, customers and users. To do this, we use various social networks. You can find out which individual social networks we use in the following section.

In general, data is collected that is used for market research and advertising purposes. Such data includes the assignment of your visit to our website to your user account with the social network or the assignment by means of your stored cookies or your IP address. This is usually done by creating user profiles and the interests identified from them. This makes it possible to display customized advertising both within and outside of the social network. Therefore, cookies are usually set on your computer when you use social networks. However, we would like to point out that we generally have no influence on what data is collected.

We use social media sites to provide you with information in the simplest and quickest way possible or to give you the opportunity to share it. Therefore, if you have not consented to data processing on the respective platform, the legal basis is our legitimate interest in accordance with Art. 6 Para. 1 UAbs. 1 lit. f) GDPR. If you have given your consent on the respective platform, your consent is the legal basis for the processing in accordance with Art. 6 (1) subpara. 1 point a GDPR and Section 25 (1) TDDDG, provided that the consent within the meaning of the TDDDG relates to the setting of cookies or access to information on your end device. You have the right to revoke your consent at any time with effect for the future. The legality of the data processing up to the point of revocation remains unaffected.

If you revoke your consent, request us to delete it or the purpose for storing the data no longer applies, we will delete your data, unless mandatory legal provisions prevent us from doing so. Cookies stored by you remain on your end device until you delete them.

The data processed as a result of your visit to our social media sites is classified as data processing initiated by us, and is therefore subject to joint responsibility with the social media site operator in accordance with Art. 26 GDPR. Joint responsibility is limited to those processing operations in which the purpose and means of processing are decided jointly. If you wish to assert your rights as a data subject, you can do so both with us and with the operator of the social media website.

Furthermore, we would like to point out that your data may also be processed outside the European Union and that there is therefore a risk that you will not be able to properly enforce your rights.

You have the right to receive information about the origin, recipients and purpose of your stored personal data at any time and at no cost. You also have the right to object, the right to data portability and the right to lodge a complaint with the competent supervisory authority. You can also request the rectification, blocking, erasure and, under certain circumstances, the restriction of the processing of your personal data.

Facebook (page)

We operate a page on the social network Facebook (Facebook fan page) to interact with Facebook users who access the fan page. For this Facebook fan page, we are jointly responsible with Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, in accordance with Art. 26 of the General Data Protection Regulation (GDPR). The joint controllership agreement can be found at the following link: www.facebook.com/legal/terms/page_controller_addendum

We hereby inform you about the type and scope of personal data that is processed when you use our Facebook fan page.

The purpose of processing your personal data is to provide visitors with a modern information platform and an opportunity for interaction on Facebook. The basis for the processing is thus our legitimate interest in accordance with Art. 6 Para. 1 UAbs. 1 lit. f) GDPR. The interests of the users are always taken into account. Information on the legal basis for processing on Facebook can be found at www.facebook.com/about/privacy/legal_bases/.

When you visit our Facebook fan page, Facebook collects and processes personal data on the basis of legitimate interest in accordance with Art. 6 (1) subpara. 1 (f) GDPR. Some of this data is provided to us in summary form via the so-called “Insights” (Facebook user statistics). A cookie is stored on the user's device for this purpose. This serves to be able to use this information again at a later point in time. The cookie remains active for a period of two years if it is not deleted. Further information from Facebook on the use of cookies can be found in the Facebook cookie policy at de-de.facebook.com/policies/cookies/. These user statistics are transmitted exclusively in anonymized form and we have no access whatsoever to the underlying data.

If you have consented to data processing on Facebook, your consent is the legal basis for the processing in accordance with Art. 6 (1) subpara. 1 point a GDPR and Section 25 (1) TDDDG, provided that the consent within the meaning of the TDDDG relates to the setting of cookies or access to information on your end device.

Data transfer to the US is based on the EU standard contractual clauses, details of which can be viewed here: www.facebook.com/legal/EU_data_transfer_addendum

Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework (DPF). This is an agreement between the European Union and the United States to ensure that European data protection standards are met when processing data in the United States. Each company that has received DPF certification is committed to complying with these data protection standards. Further detailed information can be found at the following link: www.dataprivacyframework.gov/s/participant-search/participantdetail

If you are already logged in to Facebook via your personal user account, information about your visit to our website will be automatically forwarded to Facebook. It is then possible that Facebook will associate your visit to the website with your account.

If you do not want Facebook to transmit and store your data, please log out of your Facebook account.

You can find Facebook's privacy policy at:

XING (presence)

We have a presence on the XING social career network. This is an application of New Work SE (Am Strandkai 1, 20457 Hamburg; hereinafter: “XING”).

If you have consented to data processing on XING, your consent is the legal basis for the processing in accordance with Article 6 (1) (1) (a) GDPR and Section 25 (1) TDDDG, provided that the consent within the meaning of the TDDDG refers to the setting of cookies or access to information on your device. You have the right to revoke your consent at any time with effect for the future. The legality of the data processing up to the point of revocation remains unaffected.

Please note that we have no knowledge of the content of the transmitted data or its use by XING. Further information can be found at: privacy.xing.com/de/datenschutzerklaerung

LinkedIn (presence)

We have a presence on the social career network LinkedIn, which is operated exclusively by LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland; hereinafter “LinkedIn”).

If you have consented to data processing on LinkedIn, your consent is the legal basis for the processing in accordance with Art. 6 (1) 1 lit. a GDPR and Section 25 (1) TDDDG, provided that the consent within the meaning of the TDDDG refers to the setting of cookies or access to information on your end device. You have the right to revoke your consent at any time with effect for the future. The legality of the data processing up to the revocation remains unaffected.

Data transfer to the US is based on the EU standard contractual clauses, details of which can be found here: www.linkedin.com/legal/l/dpa and www.linkedin.com/legal/l/eu-sccs

LinkedIn Corporation is certified under the EU-US Privacy Shield (DPF). This is an agreement between the European Union and the United States to ensure that European privacy standards are respected when processing data in the United States. Each company that has obtained DPF certification is committed to complying with these privacy standards. For more detailed information, please see the following link: www.dataprivacyframework.gov/s/participant-search/participantdetail

You have the option to object to the analysis of your usage behavior and targeted advertising by LinkedIn here: www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Please note that we do not receive any information about the content of the transmitted data or its use by LinkedIn. The following link will take you to LinkedIn's privacy policy: de.linkedin.com/legal/privacy-policy

YouTube (presence)

We have a presence on the video platform YouTube. This is an application of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter: “Google”).

If you have consented to data processing on YouTube, your consent is the legal basis for the processing in accordance with Art. 6 (1) 1 lit. a GDPR and Section 25 (1) TDDDG, provided that the consent within the meaning of the TDDDG refers to the setting of cookies or access to information on your end device. You have the right to revoke your consent at any time with effect for the future. The legality of the data processing up to the point of revocation remains unaffected.

There is a possibility that personal data may be transferred to the United States as part of the use of this Google service. Please note that we do not receive any information about the content of the transmitted data or its use by Google. Further information can be found at: www.google.de/intl/de/policies/privacy/

Google LLC is certified under the EU-US Privacy Shield (DPF). This is an agreement between the European Union and the United States to ensure that European privacy standards are respected when processing data in the United States. Each company that has received DPF certification is committed to complying with these privacy standards. For more detailed information, please see the following link: www.dataprivacyframework.gov/s/participant-search/participantdetail

Instagram (presence)

We operate a presence on the social network Instagram. The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

If you have consented to data processing on Instagram, your consent is the legal basis for the processing in accordance with Art. 6 (1) 1 lit. a GDPR and Section 25 (1) TDDDG, provided that the consent within the meaning of the TDDDG refers to the setting of cookies or access to information on your device. You have the right to revoke your consent at any time with effect for the future. The legality of the data processing up to the point of revocation remains unaffected.

Data transmission to the US is based on the EU standard contractual clauses, details of which can be viewed here: de-de.facebook.com/help/566994660333381 and www.facebook.com/legal/EU_data_transfer_addendum

Meta Platforms, Inc. is certified under the EU-US Privacy Shield (DPF). This is an agreement between the European Union and the United States to ensure that European privacy standards are met when processing data in the United States. Each company that has received DPF certification is committed to upholding these privacy standards. Further detailed information can be found at the following link: www.dataprivacyframework.gov/s/participant-search/participantdetail

Please note that we do not receive any information about the content of the transmitted data or its use by Instagram. You can find more information at: https://privacycenter.instagram.com/policy/