1. Controller
The controller responsible for data processing is:
2. Data Protection Officer
You can contact our data protection officer as follows:
3. Your rights as a data subject
As a data subject, you have the following rights under the General Data Protection Regulation (GDPR), provided that the respective legal requirements are met:
- Information (Art. 15 GDPR): You have the right to obtain information about the personal data processed concerning you.
- Rectification (Art. 16 GDPR): You can request the rectification of inaccurate personal data concerning you. You can also request the completion of incomplete data.
- Erasure (Art. 17 GDPR): In certain cases, you can request the erasure of your personal data.
- Restriction of processing (Art. 18 GDPR): In certain cases, you can request that the processing of your data be restricted.
- Data portability (Art. 20 GDPR): If you have provided data on the basis of a contract or consent and the processing is carried out using automated procedures, you may request that you receive the data you have provided in a structured, commonly used and machine-readable format or that it be transmitted to another controller.
Right to object on a case-by-case basis:
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (balancing of interests), including profiling based on those provisions.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
Objection to data processing for the purpose of direct advertising:
Where we process your personal data for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
- Withdrawal of consent (Art. 7 para. 3 GDPR): If you have given your consent to the processing of your data, you can withdraw this at any time with effect for the future. This does not affect the lawfulness of the processing of your data until you withdraw your consent.
You can revoke your consent to cookies in the cookie settings. If you give your consent for individual services on our website, you will receive further information on revocation options when giving your consent and under section 5 (“Exercise of revocation”).
Assertion of your rights: To exercise all of your aforementioned rights, please contact datenschutz@k-plus-s.com or send a letter to the address given in section 1 above. Please ensure that we are able to clearly identify you.
If you are of the opinion that the processing of your personal data violates data protection law, you can also lodge a complaint with a supervisory authority, in particular in the EU Member State or federal state of your habitual residence, place of work or the place of the alleged violation you are complaining about.
This also applies to the supervisory authority responsible for us:
4. Details on integrated services and functionalities
4.1. Own services
4.1.1. Provision of the website
| Processed personal data: | Visited website, date and time at the time of access, - Amount of data sent in bytes, source/reference from which you came to the page (click path), operating system used, IP address used, browser information, browser plug-ins, time zone, interactions with advertising, services and products. |
| Purpose(s): | Provision of the website |
| Legal basis(s): | Art. 6 para. 1 lit. f) GDPR (balancing of interests). We pursue the legitimate interest of providing our website. |
| Recipient of the personal data: | Processor for the hosting of our website: Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855, Luxembourg. |
| Third country transfer: | In principle, data processing takes place within the EU. It is possible that our processor may transfer the data transferred to it to companies based in third countries in order to perform the above-mentioned processing activities. For this data transfer, our processor assures us that the conditions set out in Chapter V of the GDPR will be complied with. Copies of the corresponding guarantees can be obtained from the contact details provided in Section 1. |
| Storage period of the personal data: | We do not store any data for displaying the website; log files are stored for 90 days for the purposes mentioned under "Logfiles". |
4.1.2. Logfiles
| Processed personal data: | Visited website, date and time at the time of access, - Amount of data sent in bytes, source/reference from which you reached the page (click path), operating system used, IP address used, browser information, browser plugins, time zone, interactions with advertising, services and products |
| Purpose(s): | Statistical evaluations, improvement of the website, system security (e.g. prevention of misuse), error diagnosis. |
| Legal basis(s): | Art. 6 para. 1 lit. f) GDPR (balancing of interests). We pursue the legitimate interest in improving the website, system security (e.g. prevention of misuse) and error diagnosis. |
| Recipient of the personal data: | Internal departments, contract processors for the hosting and further development of our website, government agencies on request. |
| Third country transfer: | In principle, data processing takes place within the EU. It is possible that our processor may transfer the data transferred to it to companies based in third countries in order to perform the above-mentioned processing activities. For this data transfer, our processor assures us that the conditions set out in Chapter V of the GDPR will be complied with. Copies of the relevant guarantees can be obtained from the contact details provided in Section 1. |
| Storage period of the personal data: | 90 days. |
4.1.3. Contact form
| Processed personal data: | The data that website visitors enter |
| Purpose(s): | Receiving and processing inquiries, complaints or other feedback |
| Legal basis(s): | Art. 6 para. 1 lit. 1 f) GDPR (balancing of interests). In doing so, we pursue the legitimate interest in receiving and processing inquiries, complaints or other feedback. |
| Recipient of the personal data: | Internal departments; contract processors for the hosting of our website; government agencies on request. |
| Third country transfer: | In principle, data processing takes place within the EU. It is possible that our processor may transfer the data transferred to it to companies based in third countries in order to perform the above-mentioned processing activities. For this data transfer, our processor assures us that the conditions set out in Chapter V of the GDPR will be complied with. Copies of the corresponding guarantees can be obtained from the contact details provided in Section 1. |
| Storage period of the personal data: | Deletion after final processing of the request |
| Obligation to provide the personal data and consequences of non-provision: | Mandatory information in the contact form marked with "*", other information is used to process your request more quickly, but does not have to be provided. |
4.1.4. Newsletter registration
| Processed personal data: | E-mail address, type of registration (new or change), date and time of registration and confirmation, IP address used during registration and confirmation. |
| Purpose(s): | Newsletter registration (obtaining advertising consent), proof of consent |
| Legal basis(s): | Art. 6 para. 1 lit. a) GDPR (consent), |
| Recipient of the personal data: | Internal departments; contract processors for the hosting of our website, Net-Federation GmbH, Sürther Hauptstr. 180b, 50999 Köln (contract processor for the registration, dispatch and evaluation of our newsletter), government agencies on request. |
| Third country transfer: | In principle, data processing takes place within the EU. It is possible that our processors may transfer the data transferred to them to companies based in third countries in order to carry out the above-mentioned processing activities. For this data transfer, our processor assures us that the conditions set out in Chapter V of the GDPR will be complied with. Copies of the corresponding guarantees can be obtained from the contact details provided in Section 1. |
| Storage period of the personal data: | Deletion immediately after unsubscribing from the newsletter: e-mail address, date of registration, IP address of registration, history of newsletters received. |
| Obligation to provide the personal data and consequences of non-provision: | Mandatory information for subscribing to the newsletter is the e-mail address; if you do not provide us with this information, you will not be able to subscribe to the newsletter. |
| Exercise of the revocation: | Revocation can be declared via the unsubscribe link in every newsletter. |
Further information on the newsletter:
In our cookie banner, we ask you for your consent to set a cookie, which we use to carry out anonymized tracking of website visits by our newsletter subscribers.
5. Definitions
K+S AG:
K+S Aktiengesellschaft, Bertha-von-Suttner-Straße 7, 34131 Kassel, Germany, Email: [datenschutz@k-plus-s.com](mailto:datenschutz@k-plus-s.com) (hereinafter "we").
Google:
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Cookies and similar technologies:
Cookies are small text files that are stored on your device via the web browser used. Other technologies are used on our website that store information on your device or access information already stored on your device.
Improve information offerings of K+S AG:
We analyze how visitors use our website and newsletter so that we can continuously improve and make our website and newsletter more intuitive as information offerings.
Display additional information services:
We provide you with additional information services on our website to display maps, videos, social media posts about K+S or the K+S stock price.
Protect this website:
We use services to protect our website from misuse and fraud attempts, e.g., through machine-generated spam.
Website usage data:
We process how you navigate our website, which articles you click on, which information offerings you use.
Processing:
Any handling of personal data (e.g., collection, recording, organization, arrangement, storage, alteration, transmission of data). No transmission to other than the expressly named third parties takes place.
Insecure third countries:
States outside the European Economic Area (EEA) where there is no adequacy decision by the EU Commission ([https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en](https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en)). Therefore, compliance with the data protection principles of Union law is not guaranteed, so that there may be a violation of fundamental rights and freedoms. The exercise of the rights of affected individuals under the General Data Protection Regulation (e.g., access, rectification, deletion, compensation) and their administrative or judicial enforcement may also be difficult or excluded. Details see above.
Revoke:
As an affected person, you have the right to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out based on the consent until the revocation. You can revoke your consent above.