Privacy policy on the OQ Chemicals website for plant access

Privacy policy for visitors to the Ruhrchemie plant in Oberhausen

You would like to visit our factory in the context of an existing or prospective business relationship between you or your employer and OQ Services GmbH (hereinafter "OQ"). To give you an overview of our safety facilities and procedures before your visit, you have the opportunity to watch a training video on this page before your visit. This includes a short test in which you can check whether you have understood the information correctly and thus know what to do in the event of danger on our site.

In addition, you have the option of entering personal data, including a photo, with which we can identify you as a person and create a site ID card for you. Personal data is processed in this context.

With the following information, we would like to give you an overview of this data processing and your rights:

1. Who is the controller and whom can I contact?

OQ Services GmbH, Otto-Roelen-Straße 3, 46149 Oberhausen, Germany, is responsible for data processing.

If you have any questions about this privacy policy or wish to exercise your rights, please contact our data protection officer (sc.dataprotection@oq.com).

What categories of personal data are processed?

If you visit our website to watch the training video and enter your data to create a site ID card, we will process your data in two areas:

1. Solely for visiting the website and watching the video

If you use our website without entering your data after viewing the video, we will process the following data. This data is technically necessary for us to display our website to you and to ensure stability and security. This data is automatically transmitted to us by your browser.

• IP address
• Date and time of the request
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (concrete page)
• Access Status/HTTP Status Code
• Data volume transferred in each case
• Website from which the request comes
• Browser
• Operating system and its interface
• Language and version of the browser software

This data is stored in server log files for security reasons for a maximum of 5 days and then deleted. If data must be retained for the purposes of evidence, it will not be deleted until the incident has been finally clarified.

2. Entering your data for identification and for the creation of a site ID card

Data processing at the time of entry for the creation of a site ID card includes the following categories of personal data:

• Your master data including your date of birth
• Your company affiliation
• Photo
• Test result.

What do we process your data for and on what legal basis?

We process your personal data in connection with your activity or your visit to our location in Oberhausen.

Your data is processed to fulfil legal obligations, which may be necessary such as for the security purposes of the chemical site (e.g. in accordance with the 12th BImSchV, KAS55), to combat illegal employment, for the purposes of fraud prevention, criminal prosecution and the fulfilment of retention and reporting obligations. The legal basis for this data processing is in each case a legal obligation within the meaning of Art. 6 para. 1 lit. c GDPR or the public interest according to Art. 6 para. 1 lit. e GDPR. If the company ID card is used for other functions (such as the RentalRobot), the legal basis is the fulfilment of the contract with you or your employer, Art. 6 para. 1 lit. b GDPR.

Who receives your data?

Within our company, access to your personal data is only granted to those departments that absolutely need it in order to fulfil the above-mentioned purposes. In addition, the following external recipients will receive your data:

• Service providers who administer, maintain or further develop the OQ applications and have access to your personal data as a side effect;
• Service providers (order processors) that we use for tasks in the area of plant security.
• If applicable, public authorities such as customs, the Federal Employment Agency or law enforcement agencies, in each case if there is a legal obligation to do so.

Use of YouTube

We use YouTube to show the safety video and other film sequences. YouTube is operated by Google Ireland Limited, Gordon House Barrow Street, Dublin 4, Ireland (hereinafter "YouTube").

We do not carry out any data processing. Google is responsible for data processing. Further information on the processing of your data by Google can be found at https://policies.google.com/privacy?hl

Use of cookies

This website uses cookies. Cookies are text files that are stored on a computer system via an internet browser.

Many websites and servers use cookies. Many cookies contain what is known as a cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters by which internet pages and servers can be assigned to the specific internet browser in which the cookie was stored. This enables the websites and servers visited to distinguish the individual browser of the person concerned from other internet browsers that contain other cookies. A specific internet browser can be recognised and identified via the unique cookie ID.

We use cookies to ensure the functionality of our website (Art. 6 para. 1 lit. f of the General Data Protection Regulation).

You can prevent the setting of cookies by our website at any time by means of a corresponding setting within your internet browser which may be used to object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via the internet browser. This is possible in all common internet browsers. If you deactivate the setting of cookies in the internet browser used, however, you may not be able to utilise all functions of our website to their full extent.

Is data transferred to countries outside the European Union?

The transfer of your personal data to countries outside the European Union is not intended. We will inform you in good time if this situation changes.

How long will your data be stored?

We process and store your data for as long as is necessary for the fulfilment of our contractual and legal obligations. Please note that the business relationship with you or your employer may be a continuing obligation that may last for years.

In detail, this results in the following:

1. The data we process as a result of your visit to the website will be deleted within 5 days of collection.
2. With regard to the data collected for the creation of the site ID card, the following shall apply:

   If OQ is in contact with you to initiate a business relationship and a contract is concluded with you or your employer, or if your personal data is solely collected and processed in connection with an ongoing business relationship, your personal data will be deleted upon termination of the contract with you or your employer, unless further processing or archiving is required for legal reasons.

   These legal reasons include, for example, retention obligations under commercial and tax law (from the German Commercial Code and the German Fiscal Code). The periods specified there for the retention of data generally range from two to ten years.

   Furthermore, we may need your data for evidence purposes in connection with warranty claims, the termination of the business relationship or in relation to the rights and obligations arising from the contract with you or your employer. With regard to this data, it is usually deleted after the expiry of the statute of limitations, whereby the regular statute of limitations of the German Civil Code is three years.

What rights do you have?

• Right of access. You have the right to access the personal data we hold about you, to review it and understand how we use your data.
• Right to rectification, erasure and restriction. You have the right in certain circumstances to request that we rectify, restrict or erase your personal data.
• Right to data portability. You have the right to receive your personal data from us in a structured, commonly used and machine-readable format and you have the right to transfer your personal data directly from us to third parties where this is technically feasible.
• Right of withdrawal. You have the right to withdraw any consent you may have given. Please note that this withdrawal of consent does not affect the permissibility of the data processing prior to your withdrawal.
• Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(f) GDPR. OQ will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing or the processing serves the establishment, exercise or defence of legal claims.
• Right to lodge a complaint. If you believe that our data processing violates European data protection law, you can lodge a complaint with a supervisory authority. For example, the supervisory authority of the federal state in which you reside is responsible for this. You can also contact the Hessian Commissioner for Data Protection and Freedom of Information.

What is the source of the personal data?

Insofar as the personal data is not collected directly from you, it is transmitted to us by our business partner, i.e. your employer, in connection with the business relationship.

Is there an obligation to provide personal data?

You are under no legal or contractual obligation to OQ to provide your personal data. However, without this data, OQ is generally not in a position to conclude, execute and terminate a contract with you or your employer.

Does automated decision-making or profiling take place?

No automated decisions or other profiling measures are carried out by us.