Publisher

This privacy policy applies to all processing of personal data on grilab.de, hereinafter referred to as the “website”.

Personal data means any information relating to an individual who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that individual.

Processing means any operation which is performed on personal data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

How we process your personal data

Personal data collected automatically when using the website

When you visit the website to obtain information, i.e. without being registered, we automatically collect and store certain information (e.g. device type, browser used, date and time of visit, pages visited).

We only use this data so that we can provide an efficient service (e.g. to customise our website to the requirements of your end-user device or to enable you to log in to our website). The personal data collected is required to provide you with the website. The legal basis for this processing operation is Art. 6, (1), letter b of the European General Data Protection Regulation (“DSGVO”).

Registration for our services

We process personal data that you have actively transmitted to us, e.g. when you register with us by creating a contact data record, register yourself or colleagues for participation, send us enquiries or other questions or use downloads. This personal data includes your name, e-mail address, contact details, company affiliation, country, enquiry and order information.

DNV  collects and uses personal data only to provide you with the services you have requested, to manage your contact details, to identify you and to communicate with you. We will also liaise with you via our general enquiry points or when responding to complaints or general feedback you have submitted to us in relation to our services or because we have or have had a contract with you.

We may also contact you to find out how satisfied you are with our products and services. We may also carry out further surveys.

The legal basis for this is Art. 6 (1) letter b of the DSGVO.

We use the personal data and contact details you provide when registering to inform you directly about our other products and services. As the provider of this website, we have a legitimate interest in using your personal data for the direct advertising of similar products and services (Art. 6, 1, f (DSGVO).

You can object to the use of your personal data for direct marketing purposes at any time. We will then refrain from any processing insofar as it relates to these purposes. You can inform us of your objection by sending us the Formulare Group Contact form inform.

If there are no exceptions for the specific services mentioned below, your personal data will continue to be stored for the duration of the use of your user account. If your account is no longer used, your personal data will be deleted as soon as its purpose has been fulfilled. Legal storage obligations or the necessity of legal action arising from misconduct within the services may result in your personal data being stored for longer. We will inform you accordingly in such a case.

Data collected from third-party sources

We may also collect personal data about you, such as your name and contact details, which we use to inform you about products and services, from third party sources at trade fairs and from suppliers of webinars in which we participate.

The legal basis for this processing is Art. 6 (1), 1, letter f DSGVO, as it is in the legitimate interest of our group of companies to maintain our user base, attract new users to the website and inform (potential) users about DNV organised and offered services.

E-mails for information purposes

With your e-mail address, you can subscribe to our information e-mails, from which you will receive the latest news about our products and services, if you agree to receive these e-mails. The legal basis for this processing is Art. 6 (1), sentence 1 letter a DSGVO. Your e-mail address will be stored for as long as you are a subscriber to our information e-mails and thereafter for a further 36 months of inactivity.

This service is partly provided by double opt-in. You will receive an e-mail with a link that you can use to confirm that you are the owner of the e-mail address and wish to be informed via our e-mail service. If your subscription is not confirmed, we will not send you any information e-mails.

You can cancel your subscription to this service via the link contained in every information e-mail.

Automated decision making

We do not use your personal data for automated decision-making that produces legal effects concerning you or similarly significantly affects you.

Recipients of your personal data

Your personal data will be disclosed to the following parties:

Internal recipient

Within the DNV-Group, your personal data may be transferred to various companies within the DNV-Group. DNV GL besteht aus der DNV GL Group AS mit Tochtergesellschaften (“DNV”).

The legal basis for such a transfer is the legitimate interest of the DNV-Group in providing joint customised support, administration and a customised internal IT department, as well as the legitimate interest of our group of companies to ensure smooth operations between our companies for the above-mentioned purpose. Personal data may be transferred from the country in which it was collected to another country.

DNV is a certified company with binding internal data protection regulations (controller) “Binding Corporate Rules – (Controller)”. This means that personal data transferred to a third country outside the European Union / European Economic Area is subject to these regulations.

Third-party recipient

We use third party companies and individuals to assist us in providing the services we offer through this website. For example, your personal data is disclosed to the following third parties and, in some cases, their sub-processors, who are also based outside the EU/EEA:

• Oracle Norge AS

Our contractors will therefore only use your personal data to the extent necessary for the performance of their work. They are contractually obliged to process your personal data only for us and in accordance with our requirements.

If legally required or requested, we may disclose your personal data (e.g. if this is required by law or a court order). The legal basis for this processing is Art. 6 (1), 1, letter c DSGVO.

International data transmission

IAs part of our information sharing activities set out above, your personal data may be transferred to other countries (including countries outside the European Union) which may have different data protection standards to your country of residence. Please note that data processed abroad may be subject to foreign laws and may be accessed by foreign governments, courts, law enforcement agencies and regulators. However, we will endeavour to take reasonable steps to maintain an adequate level of data protection even if we transfer your personal data to these countries.

In the case of a transfer to a country outside the European Union, this transfer is secured by the EU standard contractual clauses. Further information on the above-mentioned safeguards and guarantees can be found at: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.

Storage periods

We endeavour to limit our processing activities in relation to your personal data as much as possible. Where no specific retention periods are set out in this policy, your personal data will only be stored for as long as we need it to fulfil the purpose for which we collected it and, where applicable, for as long as required by legal retention requirements.

How we use cookies

The website uses cookies. A cookie is a small file of letters and numbers that we store on your computer. These cookies enable us to distinguish you from other users of the website. This makes it easier for us to provide you with a good experience when you visit our website and to improve our website.

Cookies can be classified according to their lifespan and the domain or area to which they belong. In terms of lifespan, a cookie is either

• Session cookie that is deleted when the browser is closed or
• Permanent cookie that remains on the user’s computer/device for a specified period of time.

With reference to the associated domain, there is either

• First-party cookies that are set by the web server of the visited page and belong to the same domain,
• Third-party cookies. They are set by a domain other than that of the page visited. This is possible if the website refers to a file, such as JavaScript, which is located on a different domain.

The cookies we use allow us to see the following:

• the internet domain and the internet protocol address (IP address) from which you access our website,
• the type of internet browser and the operating system of the computer you use to access our website,
• Date and time of your website visit,
• the pages you visit on our website,
• the pages you share on social media and which media these are,
• whether you came to our website via a link from another website, as well as the address of this website.

If you have been referred to our website by a search engine, the address of this website and the term you used for the search. Any data processing that occurs during the use of cookies for the sole purpose of carrying out the transmission of a communication or necessary to provide the services you have requested is based on Art. 6 (1), letter b of the DSGVO.

If personal data is processed during the use of cookies or similar technologies that are used for other purposes, e.g. to improve our website or for marketing purposes, the basis for the processing is Art. 6 (1), letter f DSGVO and represents our legitimate interest in maintaining our user base, attracting new users to our website and informing (potential) users about services organised and offered by DNV.

You can control or delete cookies as you wish. Details can be found at www.allaboutcookies.org. You can delete all cookies that are already on your computer, and most browsers can be set to prevent their placement. However, you may then have to make some of your desired settings manually each time you visit the website and some services and functions may not work.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc (“Google”). Google Analytics uses cookies to help us analyse user behaviour on our website. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.

This website uses the IP anonymisation function of Google Analytics. For member states of the European Union and other parties to the Treaty on the European Economic Area, Google truncates/anonymises the last eight characters of the IP address. Only in exceptional cases will the full IP address be transmitted to Google servers in the USA and truncated there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for us and providing other services relating to website activity and internet usage. Google will not associate your IP address with any other data held by Google. You can refuse the use of cookies by selecting the appropriate settings on your browser. Please note, however, that you may then not be able to use all the functions of this website.

You can also prevent the collection and use of data by Google (cookies and IP address) by clicking on the link below. https://tools.google.com/dlpage/gaoptout?hl=en download and install the available browser plug-in. An opt-out cookie is set to prevent the future collection of your data when you visit this website.

Further information can be found under https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage

SiteImprove Analytics:

We may occasionally use SiteImprove Analytics, an analytics tool provided by Siteimprove GmbH. SiteImprove Analytics uses cookies to help us analyse user behaviour on our site.

Facebook-Pixel

We may occasionally use Facebook pixel. This tool helps us to understand and carry out advertising via Facebook. The data collected, such as your IP address and browser information, is processed by Facebook. Facebook may be able to link the data to your Facebook account and use the data for its own advertising purposes.

You can find out more about Facebook Pixel at: https://www.facebook.com/business/help/651294705016616

LinkedIn Insights und Ads script

We may occasionally use LinkedIn Insights or Ads Script. The provider of this tool is LinkedIn Corporation, 2029 Stierling Court, Mountain View, CA 94043, USA. This tool helps us to track conversations, retarget website visitors and improve our website. You can find out more about LinkedIn Insight at

https://business.linkedin.com/marketing-solutions/blog/linkedin-b2b-marketing/2017/how-to-unlock-value-with-the-linkedin-insight

Security

We take standard market precautions to protect personal data. When our download form asks users to provide personal data, this data is encrypted and protected with standard market encryption software (SSL). On a secure site, the lock icon (image symbol in the form of a security lock) can be seen at the top of web browsers, such as Microsoft Internet Explorer.

Unfortunately, no data transmission or processing can be guaranteed to be 100% secure. Therefore, despite our efforts to protect personal data, DNV GL is not in a position to guarantee or warrant the security of personal data.

Rights of the data subjects

You may be entitled to exercise all or some of the following rights free of charge:

1. a) You may request (I) information as to whether your personal data has been stored and (II) access to or (III) copies of your stored personal data, including the purposes of the processing, the categories of data concerned, the recipients or categories of recipients to whom the data has been disclosed and, if possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period.
2. b) You may request proper correction, removal or limitation of the scope of your personal data, for example, because (I) this data is incomplete or inaccurate, (II) it is no longer needed for the purpose for which it was collected, (III) the consent that formed the basis for the processing has been withdrawn, or (IV) you have exercised an existing right to object to the data processing; if your personal data is processed by third parties, we will also forward your request for correction, removal or limitation to these third parties, unless this proves impossible or requires disproportionate effort.
3. c) You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from us. Where technically feasible, you have the right to have the personal data transmitted directly from us to another controller.
4. d) You can refuse to give your consent to the processing of your personal data at any time and withdraw your consent to this processing at any time – without this having any effect on the data processing that was carried out prior to such withdrawal;
5. e) You can object at any time to the use of your personal data for direct marketing purposes or – for reasons relating to your particular situation – to the processing of your personal data for other purposes.
6. f) You have the right not to be subject to automated individual decisions (automated decisions based on data processing by automated means to evaluate various personal aspects) which produce legal effects concerning you or similarly significantly affect you;
7. g) You may take legal action in relation to any infringement of your rights in the processing of your personal data and lodge complaints with the relevant data protection regulatory authorities.

Revision of the privacy policy

DNV may change or update the Privacy Policy without prior notice. All such changes will become effective after they have been posted on the Website. It is your responsibility to check for such updates. The Privacy Policy was last updated on the date indicated at the beginning of this Privacy Policy.

Contact details

If you have any questions, suggestions or information in connection with this privacy policy and the processing of your personal data, please contact our data protection officer.

Frau Johanna Soetbeer
Data protection officer
c/o intersoft consulting services AG
Beim Strohhause 17
20097 Hamburg, Germany
Tel.: +49 (40) 790235–0

JSoetbeer@intersoft-consulting.de

DNV
Company headquarters
Brooktorkai 18
20457 Hamburg, Germany
Tel.: +49 40 36149-0
Fax: +49 40 36149-200

Contact form

In addition, if you have any concerns about the use of data or questions about this Privacy Policy, please contact our Group Data Protection Officer at dataprotection@dnv.com or by writing to her at the postal address below. DNV regrets that only general enquiries about the Privacy Policy can be answered via email.

We hope you have a pleasant and positive experience on our website!

DNV Energy Systems Germany GmbH
Mittelstraße 3c
12529 Schönefeld
Germany