RAG-Stiftung Privacy Policy
With this Privacy Policy, we, the RAG-Stiftung, would like to inform you about how we process your data. This applies to data processing in connection with visits to our website, other data pro-cessing operations, and activities on our social media channels. The Privacy Policy provides you with an overview of what data we collect, for what purposes we use it, and what rights you have in connection with your data.
A. Data Controller
The controller responsible for the data processing described in this Privacy Policy is:
RAG-Stiftung
Im Welterbe 10
45141 Essen
T: +49 (201) 378-3333
Email: info[at]rag-stiftung.de
B. Data Protection Officer
You can contact our Data Protection Officer at the following address:
RAG-Stiftung
Im Welterbe 10
45141 Essen
Email: datenschutz[at]rag.de
C. Description of Data Processing
Below, we describe what data we process about you, for what purposes, and on what legal basis the data processing is based.
| Data Processing | Data | Purpose of processing | Legal basis |
|---|---|---|---|
| Visiting our website |
|
| Legitimate interest Our legitimate interest also lies in the purposes pursued through data processing. |
| Contact form |
| Processing of the contact request | Performance of a contract (if the contact relates to an existing contract or is aimed at concluding a contract) Legitimate interest (for other inquiries) Our legitimate interest lies in processing the contact request. |
| Sending greeting cards and event invitations |
|
| Legitimate interest Our legitimate interest lies in maintaining and fostering our contacts as well as in inviting you to events. |
| Registration and participation in an event |
| Guest and event management | Consent (regarding voluntarily provided information) Legitimate interest (for other information) Our legitimate interest lies in the efficient planning and execution of the event, smooth guest management, and event-related communication with you. |
D. Cookies
We use so-called cookies on our website. These are small text files that are stored on your device (e.g., laptop, tablet, or smartphone) when you visit our website. Cookies contain information related to the device you are using, without allowing us to directly identify you.
Certain cookies are technically necessary and serve our legitimate interest in ensuring the operation of our website, enabling basic functions and allowing you to visit the Investor Relations subpage (see Section C, Description of Data Processing, under Visiting Our Website). We use other cookies to make your experience on our website more enjoyable and to improve our offerings. In addition, cookies may be used for analytics and marketing purposes. We only use cookies that are not technically necessary if you have previously given your consent via our cookie banner. This applies in particular to cookies used for analytics and marketing purposes.
For more information about the cookies we use, as well as your options for selection and settings, please see our Cookie Policy . There, you can adjust or withdraw your consent at any time with future effect.
E. Social Media
We operate the following social media channels to communicate with interested parties and users and to provide information about our events, offers, and news.
1. Data Processing by the RAG-Stiftung
We process your data in connection with our social media channels based on our legitimate interest in public relations, communication, and interaction with you, as well as the ability to share our website content via social media and thereby increase our reach. Specifically:
1. Interaction via our social media channels
When you interact with us via our social media channels—for example, through comments, likes, sharing content, direct messages, or other posts—the data you enter is published by the respective social media platform.
We process this data exclusively for the purpose of communicating with you and addressing your inquiry. If the respective platform feature allows it, we may also share your content via our social media channel (e.g., through so-called reposts). The data will not be used for any other purposes.
We reserve the right to delete content if necessary.
2. Share Button
We integrate so-called share buttons from social media platforms (e.g., from Facebook or LinkedIn) on our website. These allow you to share content from our website on the respective social media platforms.
The share buttons are disabled by default. They are only activated when you click on them, which establishes a connection to the respective social media platform. In this case, the operator of the social media platform receives information that you have visited our website. If you are logged in to the respective social media platform, your visit may be associated with your user account.
3. Analytics and Insights
The operators of the social media platforms provide us with analytics and statistics functions (so-called insights). These are based on the processing of usage data and provide us with information about how visitors interact with our social media channel.
To generate these statistics, the platform operators process various user data, such as when you visit our page, view content, or interact with it. Cookies and similar tracking technologies (e.g., pixels) are used for this purpose. This may also occur even if you do not have a user account with the respective social media platform or are not logged in.
We receive only aggregated or statistical analyses from these analytics functions and have no access to the personal data underlying the statistics. We also have no influence over the specific data processing carried out by the platform operators.
2. Data Processing by Platform Operators
In addition, the operators of the social media platforms process data about you, particularly for advertising and web tracking purposes. Please note that we have no influence over the data processing carried out by the platform operators. Further information regarding their data processing, your rights, and—where applicable—the joint controller agreement can be found below:
- Instagram: operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland;
- Facebook: operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland;
- LinkedIn: operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland;
- YouTube: operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland;
F. Sharing Your Data with Third Parties
We may share your personal data with the following categories of recipients:
- to our service providers, who provide us with data processing services and may operate worldwide. These include, in particular, our website spam protection service provider, our service provider for managing our social media channels, and our service provider for sending greeting and event cards and for contact and guest management.
- to a competent law enforcement agency, regulatory authority, government agency, court, or other third party, to the extent we deem it necessary to (1) comply with legal or regulatory requirements; (2) exercise, establish, or defend our legal rights; or (3) protect your vital interests or the interests of another person;
- to other individuals for whom we have your consent to disclose the information.
G. International Data Transfers
We do not transfer your data to third parties based outside the European Union.
Please note that when you visit and use our social media channels, the operators of the social media platforms may transfer your data to the United States or other third countries and process it there.
H. Retention Period
We process and store your data only for as long as is necessary to achieve the respective purpose. For example, contact requests are deleted as soon as the request has been fully processed and answered. If the contact request relates to an existing contract, it is stored for the duration of the contract. Your data stored in the email distribution list for sending greeting cards and event invitations will be deleted as soon as it is no longer necessary to achieve the respective processing purpose or you have objected to receiving further greeting cards and invitations. Your data collected in connection with an event registration will be deleted after the respective event has concluded or upon revocation of your consent.
As soon as the purpose of processing no longer applies, your data will generally be deleted, provided that no legal retention obligations or legitimate interests on our part preclude this. This applies in particular to storage for the duration of limitation periods or for the assertion and defense of legal claims.
I. Your Rights
When we process your data, you have the following rights vis-à-vis us:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to object to processing
- Right to data portability
- Right to withdraw your consent
You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your data.