I.    Responsible authority   

For the processing of your personal data, the responsible party is

    Aurubis AG
    Hovestraße 50
    20539 Hamburg
    Deutschland.

Aurubis AG is represented by the Executive Board:

Roland Harings, Dr. Heiko Arnold, Dr. Thomas Bünger und Rainer Verhoeven.

II.    Contact information for the Data Privacy Protection Officer 

Aurubis AG’s Data Privacy Protection Officer has the following contact information:
Data Privacy Protection Officer of Aurubis AG, c/o Aurubis AG, Legal Department, Hovestrasse 50, 20539 Hamburg  

Phone:   +49 40 7883-3993
Fax:      +49 40 7883-9339

III.   Collection and processing of personal data when accessing the Aurubis AG website 

1. When you access our website, as part of our system security measures our web server automatically temporarily collects

• the access data of the inquiring computer,
• the Aurubis AG web pages that you visit,
• the date and duration of access,
• the type of internet browser and operating system used as well as
• the domain name of the website from which you came.

This data will only be processed for the duration of your access to our website. After you have left our website, this personal data will be deleted. 

1. We use Google Analytics on our website to analyze our users’ surfing habits. The software places a cookie on the user’s computer. When individual pages of our website are accessed, the following data is saved:

• Two bytes of the IP address of the user’s system
• The website accessed
• The website from which the user was directed to the website accessed (referrer)
• The subpages that are retrieved from the website accessed
• The amount of time the user stays on the website
• The frequency with which the website is accessed

The software is operated on the server statistics.kirchhoff.de. The user’s personal data is only stored there and is not transferred to third parties.

IV.    Collection and processing of personal data in other cases    

In cases other than those mentioned in Item III, we in principle only collect and process personal data if you voluntarily provide us with the following data:

1. If you contact us directly, especially electronically, e.g., via e-mail or via our website, for example to order a publication or place a request. In this case, we save and process the following data from you if you have provided us with the following:

• title, first name, last name,
• one or more valid e-mail addresses,
• address,
• telephone number (landline and/or mobile)
• fax number

The collection of this data takes place

• in order to be able to identify you as our contact;
• for correspondence with you;
• in order to inform you about the products, services, and Aurubis AG/Aurubis Group companies;
• for initiating and establishing a contractual relationship with you, if applicable;
• for invoicing, if applicable.

The basis for the storage and processing is Article 6 Paragraph 1(b) DSGVO (General Data Protection Regulation) if you contact us in order to enter into a contractual and pre-contractual legal relationship; otherwise, Article 6 Paragraph 1(a) DSGVO (General Data Protection Regulation.

1. If you are communicating with us while acting in a professional capacity for one of our business partners, we save and process your professionally used contact data, namely:

• business partner for whom you are working
• title, first name, last name
• one or more valid e-mail addresses
• address
• phone number (landline and/or mobile)
• fax number

In this case, the collection of this data takes place

• in order to be able to identify you as our contact with our business partner;
• for business correspondence with you;
• in order to inform you about the products, services, and Aurubis AG/Aurubis Group companies;
• in order to offer you Aurubis AG’s products and services;
• to initiate, execute, and terminate contracts in connection with the business relationship;
• to maintain the business relationship with Aurubis AG;
• for invoicing;
• to fulfill legal obligations, especially for the prevention of fraud and money laundering.

Your personal data as described above is saved and then deleted on the basis of Article 6 Paragraph 1(b) DSGVO (General Data Protection Regulation) and Article 6 Paragraph 1(f) DSGVO (General Data Protection Regulation) in order to maintain and conduct the business relationship for the length of the business relationship or until the Aurubis AG business partner communicates that you are no longer employed by them, unless we are obligated to store the data for a longer period of time pursuant to Article 6 Paragraph 1 Sentence 1(c) DSGVO (General Data Protection Regulation) due to storage and documentation obligations according to tax and commercial regulations (from the HGB, StGB, or AO) or you have agreed to storage for a longer period of time pursuant to Article 6 Paragraph 1 Sentence 1(a) DSGVO (General Data Protection Regulation). 

1. If Aurubis AG Group companies provide personal data of the type described above to Aurubis AG as allowed for the purposes mentioned above, especially for cases in which you have contacted an affiliated company with an issue that relates to Aurubis AG and not the affiliated company.

V.    Transmission of data to third parties
   
We also make use of services by providers with regard to the processing and storage of personal data (so-called processors pursuant to Article 28 DSGVO); this particularly applies to data hosting on servers, the management of these servers, and the hosting services. These processors will only work for us on the basis of corresponding contracts and, with regard to the storage and processing of personal data, are bound to our instructions.

If you contact Aurubis AG regarding issues that concern a company affiliated with Aurubis AG, in individual cases we will provide this affiliated company with your personal data.

Apart from this, data will only be transmitted in individual cases to the extent that Aurubis AG is legally obligated to do this (this especially concerns tax law cases) or if you have consented to transmission.

VI.    Your rights as the party concerned   

The persons affected have the following rights with respect to Aurubis AG:    

• You may revoke your consent that was given to us at any time (Article 7 Paragraph 3 DSGVO). As a consequence, we may henceforth no longer continue with the data processing if it was based on this consent.
• You have the right to request information regarding your personal data that is saved and processed by us (Article 15 DSGVO). In particular, you can request information regarding the purposes of processing; the category of the personal data; the categories of recipients to whom your data was or will be disclosed; the intended storage period; the existence of a right to correction, deletion, limitation of processing, or objection; the existence of a right of appeal; the origin of your data, if it was not collected by us; as well as regarding the existence of an automated decision-making (including profiling) and, if applicable, meaningful information regarding the details.
• You may request the prompt correction or completion of your personal data stored by us (Article 16 DSGVO).
• You may request the deletion of your personal data that is stored by us if the processing of this data is not required to exercise the right to freedom of speech and information; to fulfill a legal obligation; for reasons of public interest; or for the establishment, exercise, or defense of legal claims (Article 17 DSGVO).
• You may request that we restrict the processing of your personal data if you dispute the accuracy of the data; the processing is unlawful; you refuse the deletion and we no longer need the data but you need this for the establishment, exercise, or defense of legal claims; or you have objected to the processing pursuant to Article 21 DSGVO (Article 18 DSGVO).
• You have the right to receive the personal data that you have provided to us in a structured, conventional, and machine-readable format or to request the transfer to another responsible party (Article 20 DSGVO).
• You may complain to a supervisory authority. As a rule, for this you can contact the supervisory authority at your usual place of residence or work or at Aurubis AG’s headquarters (Article 77 DSGVO).