• Change language:
  • DE
  • EN

Information to be provided under Art. 13, 14 General Data Protection Regulation (GDPR)

A)        identity and contact details of the controller / controller’s representative

Address:     VERBIO Vereinigte BioEnergie AG, Thura Mark 18, 06780 Zörbig
Represent.: Claus Sauter (CEO)
Phone:        +49 (0) 341 308530-0
Fax:            +49 (0) 341 308530-999
E-mail:        info@verbio.de
Website:     www.verbio.de

B)        Contact details of the data protection officer

Address:     VERBIO Vereinigte BioEnergie AG, Thura Mark 18, 06780 Zörbig
Name:         Daniela Sauter
Phone:        +49 (0) 341 308530-295
Fax:            +49 (0) 341 308530-999
E-mail:        datenschutz@verbio.de
Website:     www.verbio.de

C)        Purposes of the processing for which the personal data are intended and legal basis for the processing

1.         Processing on the basis of given consent (Art. 6(1)(a) GDPR)

The purpose of processing personal data on the basis of a given consent is that the measure described with the consent can be carried out and implemented. Such a measure could be, for example, the transfer of data to third parties that do not fall under the following processing purposes.  

2.         Processing for the purpose of performing and entering into a contract (Art. 6 (1)(b) GDPR and § 26 BDSG)

The processing of personal data is expedient for entering into contracts (pre-contractual measures), performing (justification, execution and termination).

3.         Processing for the compliance with a legal obligation (Art. 6(1)(c) GDPR)

The purpose of the processing of personal data lies in the necessity of the processing, if this is mandated by law.

4.         Processing to protect the vital interests of the data subject (Art. 6(1)(d) GDPR)

The purpose of the processing of personal data is that in emergencies the protection of personal data against vital interests must be withdrawn for their protection

5.         Processing for the performance of a task carried out in the public interest or in the exercise of official authority(Art. 6(1)(e) GDPR)

The processing of personal data is appropriate for the performance of a task which (1.) is in the public interest or (2.) is carried out in the exercise of official authority.

6.         Processing for the protection of legitimate interests (Art. 6(1)(f) GDPR)

The processing of personal data is appropriate to safeguard the interests of the Controller or a third party, provided that the data protection interests, fundamental rights and freedoms of the data subject do not prevail.

The legitimate interests are:

  • to send corporate news, annual and quarterly reports and other IR news, in particular ad-hoc announcements, promptly and regularly.

D)        Recipients or categories of recipients of the personal data

VERBIO [IR, law department, Officers], external service provider (EQS Group AG).

E)        Categories of personal data

Gender, First Name, Last name, Company, Email, Membership as Private Investor/Institutional Investor/Financial Analyst/Other.

F)        Period for which the personal data will be stored/criteria used to determine that period

Personal data will be deleted when the business relationship is terminated, all mutual claims are fulfilled and there are no other legal storage obligations or legal justifications for the storage. Among other things, these can be obligations to retain data from the German Commercial Code (HGB) and the Tax Code (Abgabenordnung). As a basic rule, the deletion period is up to 11 years, depending on the start of the period. The defined criteria for the duration of storage can be found in the concept for deletion.   

G)        Rights of the data subject

  1. Right of access by the data subject under Art. 15 GDPR, § 30 BDSG und § 34 BDSG;
  2. Right to rectification under Art. 16 GDPR;
  3. Right to erasure under Art. 17 GDPR und § 35 BDSG;
  4. Right to restriction of processing under Art. 18 GDPR und § 35 BDSG;
  5. Right to object under Art. 21 GDPR und § 36 BDSG;
  6. Right to data portability under Art. 20 GDPR;
  7. Right to revocation under Art. 13 (2)(c) and Art. 14 (2)(d) GDPR, provided that the processing is carried out on the basis of the consent provided for in Art. 6 (1)(a) or Art. 9 (2) GDPR. The legality of the processing based on the consent until revocation remains unaffected;
  8. Right to lodge a complaint with a supervisory authority under Art. 13 (2)(d) and Art. 14 (2) (e) GDPR.

H)        Provision of personal data is a statutory or contractual requirement

In the context of business relationships, personal data must be provided which is required for the prompt and regular sending of corporate news as well as annual and quarterly reports and other IR news, in particular ad-hoc announcements, or which we are legally obliged to collect. The provision is therefore obligatory for this relationship. Without this personal data we cannot carry out the IR mailing list.

I)          Source the personal data originate

The personal data will be provided by the respective business partner itself. If publicly accessible, personal data will be collected also from public sources, such as debtor registers, land registers, trade and association registers, the press and the Internet. In addition, we use personal data originating from affiliated companies.