Responsible for data processing on these websites:

HeidelbergCement AG (in the following „we“)
Represented by:
Dr. Bernd Scheifele, Vorsitzender
Dr. Dominik von Achten, stellvertretender Vorsitzender
Kevin Gluskie
Hakan Gurdal
Jon Morrish
Dr. Lorenz Näger
Dr. Albert Scheuer

Berliner Straße 6
D-69120 Heidelberg
Germany 

Phone: +49 6221-481-0
Fax: +49 6221-481-13217
E-Mail:  info@heidelbergcement.com 

Data Protection Officer:

Dr. Dennis Voigt (external Data protection Officer)
datenschutz@heidelbergcement.com
​Phone: +49 6221-481-39603

1. Collection and processing of data

We collect an process personal data insofar you provide us with via an entry form on our website or by any other way for example e-mail. Moreover we collect and process data that arises during use of our website. The processing of your data is made in accordance with the EU General Data Protection Regulation (GDPR), the German Data Protection Act (Bundesdatenschutzgesetz – BDSG) and the German Telemedia Act (Telemediengesetz – TMG). Personal data means any information relating to an identified or identifiable natural person. Below we inform you in detail about which data we process in which way and on which legal basis. Moreover we inform you about your rights and about the duration of storage of your data.

2. Processing of data for registering for and participating in the QLA contest; CONSENT to disclose your data to public

To participate in Quarry Life Award contest a user account is required. So before submitting a project proposal you have to create an account on our Quarry Life Award website (e.g. https://www.quarrylifeaward.com). Moreover, we process your IP address with a timestamp in order to be able to prove your consent. For creation of an account you have to provide us in a first step only with your e-mail address. After submitting your e-mail address in our registration form you receive a confirmation e-mail in which you have to click a link to confirm your registration. This confirmation e-mail is necessary for verifying you as the owner of the e-mail address inserted. Without clicking this link you will not be registered. In this case we delete your e-mail address after a short period of time as a matter of routine.

We process your e-mail address and your password according to Art. 6 (1) sent. 1 point (b) GDPR only for the purpose of providing you the account with Quarry Life Awards’ website and send you messages necessary for your participation in Quarry Life Award. 

After confirmation of your registration you may submit your first name, last name, your occupation, your organization/university and the country of contest you will participate. We need this data for your participation in the contest and therefore according to Art. 6 (1) sent. 1 point (b) GDPR.

Moreover, you can provide us on a voluntarily basis with a picture of you, with your short biography and links to your social media profiles and web site. Of course, you may provide us with more data when participating and submitting your proposal and your final report. If you provide us with these data you give us your consent to save these data on our servers and make it available to the International and National coordinators as well as National and International Jury Members.

When submitting the final report you give also your express consent that we store and make it publicly available in our website’s archive.

In addition, information you provide to us by participating in a contest, will be processed according to Art. 6 (1) sent. 1 point (b) GDPR by the International and National coordinators as well as National and International Jury Members for the purposes of evaluation and publication of the projects.

CONSENT to disclose your data to public

If you do not hide your profile by activating “Hide my profile for other users” you give your consent that we make the following data available to the public:

  • First and last name
  • Organization / University
  • URLs
  • Short biography

Furthermore, your personal data may be disclosed in the event of publication of research that you submitted to us. We may also disclose your personal data to other entities of the HeidelbergCement Group for related processing purposes as for which you initially submitted your personal information. Some of these entities are located in countries that are not considered to provide the same level of data protection as the countries within the EEA. You understand and agree with such international transfer of your personal information by submitting or uploading information via the Quarry Life Award website.

3. Processing of Personal Data when participating in public vote

To ensure a fair voting process and to prevent double-voting, all voters have to register with their email-address and a password. After submitting your e-mail address in our registration form you receive a confirmation e-mail in which you have to click a link to confirm your registration. This confirmation e-mail is necessary for verifying you as the owner of the e-mail address inserted. Without clicking this link you will not be registered. In this case we delete your e-mail address after a short period of time as a matter of routine. We use the personal data made available by you on the legal basis of Art. 6 (1) sent. 1 point (f) GDPR exclusively for the purpose to ensure a fair voting process and to prevent double-voting which is our legitimate interest. Your data will be deleted shortly after the voting period ends.

4. Processing of Personal Data when contacting us

If you provide us with personal data when contacting us, p.ex. by e-mail we collect and process your data according to Art. 6 (1) sent. 1 point (b) GDPR for the performance of a contract with you or in order to take steps at your request prior to entering into a contract or according to Art. 6 (1) sent. 1 point (f) GDPR for the purpose of our legitimate interest to answer your request. It can be necessary to forward your request and your data to an affiliate company of us to be able to answer it. We do not use your data beyond theses purposes. Please see also further information on your rights in sec. 11 of this Privacy Policy. We delete personal data submitted with your request after 2 (two) months after having answered or forwarded these requests unless there is another legal basis for storage. Please see also further information on the storage of our data in sec. 12 of this Privacy Policy. 

5. Processing of Data via Cookies and Logfiles

In accordance with Art. 6 (1) sent. 1 point (f) GDPR, our website uses so-called cookies which we need to provide all functions of our websites but also to analyze user behavior on our websites. A cookie is a small file which stores certain information about a user’s access device (PC, Tablet, Smartphone etc.) on such device. When such device accesses our server’s website, the server communicates with such cookies. The server can evaluate the information stored in the cookie by different methods. Cookies enable us p.ex. to recognize and track users. We do this because we have a legitimate interest to optimize our websites and to improve website experience of our users. We use session cookies which will be deleted automatically after end of browser session as well as persistent cookies which remain on your device for a preset time. 

You may delete cookies at any time from your browser. Moreover, You may accept or disable cookies completely or for some websites via your browser settings. For more information about the processing of your personal data via cookies see section 6 of this Privacy Policy about Google Analytics.

Moreover, in accordance with Art. 6 (1) sent. 1 point (f) GDPR, every single web page uses log files, i.e. for every page impression, the access data are saved to the server log. The saved data record contains the following details:

  • Your IP address, the date, the time, the file accessed, the status, the request that your browser sent to the server, the amount of data transmitted and the webpage from which you accessed the requested page (referrer) as well as
  • The product and version information of the browser used, your operating system and your country of origin.

Log data will be deleted every 14 days as a matter of routine, i.e. any contained data will be deleted irretrievably. These temporary storage is only for protecting our websites against attacks or misuse. We do not use the log data beyond this purpose.

6. Google Analytics

In accordance with Art. 6 (1) sent. 1 point (f) GDPR,  this website uses Google Analytics, a web analytics service provided by Google, Inc. with legal seat in the USA (“Google”). Google Analytics uses cookies, text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will normally be transmitted to and stored by Google on servers in the United States.

In accordance with the Commission Implementing Decision (EU) 2016/1250 of 12 July 2016 transfers from a controller or processor in the European Union to organisations in the U.S. that have self-certified their adherence to the EU-U.S. Privacy Shield Framework Principles with the Department of Commerce and have committed to comply with them are allowed. Google has self-certified its adherence to the EU-U.S. Privacy Shield Framework Principles and has committed to comply with them.

In case of activation of the IP anonymization on this website, Google will shorten the IP address beforehand within Member States of the European Union as well as for other parties to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address is sent to and shortened by Google servers in the USA. The IP anonymization is active on this website. On our behalf Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website provider. We have a legitimate interest in analyzing user behavior in order to optimize our websites and our marketing.

You may disable the use of cookies by selecting the appropriate settings on your browser. Furthermore you can prevent Google’s collection and use of data (cookies and IP address) by downloading and installing the browser plug-in available under https://tools.google.com/dlpage/gaoptout?hl=en-GB. 

Please note that you have to deactivate tracking for every single browser you use to prevent tracking from Google Analytics completely. Please also note that you will be tracked again if you delete the opt-out cookie or when it expires.

For further information about Google’s privacy policy please visit: https://www.google.de/intl/en/policies/privacy/ (external link to Google)

7. Google Maps 

On our websites we use the services Google Maps, a service of Google Inc. based in the USA (in the following: Google). By including this service in our websites data of website visitors may be transferred to Google. This processing takes place on the legal basis of Art. 6 (1) sent. 1 point (f) GDPR because of our legitimate interest to make our websites more attractive to our website visitors. With Google Maps we can offer an interactive map which allows to our website visitors to display our locations and to get driving directions. 

In accordance with the Commission Implementing Decision (EU) 2016/1250 of 12 July 2016 transfers from a controller or processor in the European Union to organisations in the U.S. that have self-certified their adherence to the EU-U.S. Privacy Shield Framework Principles with the Department of Commerce and have committed to comply with them are allowed. Google has self-certified its adherence to the EU-U.S. Privacy Shield Framework Principles and has committed to comply with them.

For further information about Google’s privacy policy please visit: https://www.google.de/intl/en/policies/privacy/ (external link to Google)

8. Embedding of YouTube videos

On our websites we use the service provider YouTube LLC based in the USA (in the following: YouTube) to embed videos. When you play such video YouTube will send a cookie to your browser (see sec. 5 of this Privacy Policy). With this cookie YouTube may recognize you when you visit YouTube or any other website with embedded YouTube videos. You may delete cookies at any time from your browser. Information on processing of your data through YouTube you may find on YouTube’s website: www.youtube.com (external link to YouTube). 

YouTube LLC is included in self-certification of Google Inc. as part of the EU/US Privacy Shield. In accordance with the Commission Implementing Decision (EU) 2016/1250 of 12 July 2016 transfers from a controller or processor in the European Union to organisations in the U.S. that have self-certified their adherence to the EU-U.S. Privacy Shield Framework Principles with the Department of Commerce and have committed to comply with them are allowed. Google has self-certified its adherence to the EU-U.S. Privacy Shield Framework Principles and has committed to comply with them.

9. Encryption

Data you insert on our website is transferred in encrypted form (SSL). We take technical and organizational measures to secure our website and other systems against loss, destruction, access, modification or dissemination of your data by unauthorized persons.

10. Categories of recipients of the personal data; data transfer to a third country

Service providers and auxiliary agents used by us in connection with the website, p.ex. host provider, agencies, IT service providers as well as the service provider mentioned in sec. 6 to 8 of this Privacy Policy may have access to your personal data. However, insofar these service providers and auxiliary agents process data on our behalf they only act according to our instructions and we concluded adequate contracts with them. This applies accordingly to service providers which have their legal seat in a third country (outside the EU/EEA).

11. Your Rights

According to Art. 15 GDPR you have the right free of charge of access to your personal data and information about processing. Moreover, according to Art. 16 to 18 GDPR you have the right of rectification of inaccurate personal data as well as of erasure of personal data or restriction of processing. 

Under the conditions of Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and the right to transmit those data to another controller without hindrance. 

Moreover, according to Art. 21 (1) GDPR you have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Art. 6 (1) sent. 1 GDPR including profiling based on those provisions. We shall comply with the aforementioned requests if and to the extent such compliance is required by the applicable statutory laws.  Where personal data are processed for direct marketing purposes, according to Art. 21 (2) GDPR, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.

Please direct any request regarding your personal data to our contact details as mentioned at the beginning of this Privacy Policy or in the imprint of our website.

Each data subject has the right to lodge a complaint with a supervisory authority of the alleged infringement.

12. Period of Data Storage and routine deletion

Insofar nothing else is explicitly stated above we process and store personal data only for the period, which is required to meet the purpose of processing, or as long and to the extent as statutory laws require us to process and/or store such data.

If the purpose of processing does not apply anymore or the applicable statutory retention requirement expires, we will as a matter of routine erase data or restrict the processing of data in accordance with the applicable statutory laws.