Privacy Policy

Privacy Policy

The protection of your personal data is of the utmost importance for Chevron Services GmbH and therefore you will find the following information in our privacy policy …

… General information about Chevron Services GmbH
… General information on data processing
… Information on our data processing activities
… Information on required data transmissions
… Information on the protection of your data and your rights
… Information about Cookies

If you have any questions or uncertainties regarding data protection, you can contact our data protection officer using the options listed in I.

I. General Information about Chevron Services GmbH

Name and Address of the Controller

Responsible in the sense of the General Data Protection Regulation (GDPR), as well as the BDSG-neu is:

Chevron Services GmbH
Birkenwaldstraße 38
63179 Obertshausen
Germany

Telephone: +49 6104/775 1000
E-Mail: info@chevron-consultants.com
Website: https://www.chevron-consultants.com

Contact information of the Data Protection Officer (DPO)

The DPO can be contacted via:

Data Protection Officer
Chevron Services GmbH
Birkenwaldstraße 38
63179 Obertshausen
Germany

Telephone: +49 6104/775 1000
E-Mail: info@chevron-consultants.com

II. General Information on Data Processing

1. Scope

Generally, Chevron Services GmbH processes your personal data only in order to be able to present contents and services for a well working website, to offer offer and deliver our services to you and to make contact with you. We always ask for your consent to process your personal data, unless the processing is allowed anyway, e. g. due to legal requirements.

2. Legal Basis

The legal basis for the processing of your personal data results from Art. 6(1) of the EU General Data Protection Regulation (GDPR).

In case that your consent is required for the processing of your personal data, this results from Art. 6(1)(a) GDPR.

If the processing of your personal data is necessary for the fulfilment of a contract or pre-contractual measures, Art. 6(1)(b) GDPR serves as the legal basis.

Art. 6(1)(c) GDPR is the legal basis for the processing of your personal data for the fulfilment of legal obligations on behalf of Chevron Services GmbH.

For the protection of vital interests Art. 6(1)(d) GDPR is the legal basis, for public interests Art. 6(1)(e) GDPR applies.

If the processing of personal data is necessary to safeguard legitimate interests of Chevron Services GmbH or other third parties and the interests, basic rights and fundamental freedoms of the persons concerned do not outweigh, Art. 6(1)(f) GDPR is the legal basis.

3. Principles of Data Processing

Chevron Services GmbH always processes data in a transparent and lawful manner, in good faith and trust and for clearly defined and legitimate purposes only. The processing of personal data appropriate to the purpose is limited to necessary extent. Chevron Services GmbH always processes personal data being up-to-date in a correct manner and ensures that personal data – which is incorrect concerning the purpose of processing – will be corrected or deleted immediately. By the way in which personal data is stored Chevron Services GmbH ensures that such data remains identifiable only as long as the purpose of the data processing is present. Chevron Services GmbH further ensures by means of appropriate technical and organisational measures that no personal data will be processed unauthorized or unlawfully and that no accidental loss, destruction or damage of personal data may be possible.

4. Duration of Data Storage and Data Deletion

Chevron Services GmbH deletes your personal data in general, if the purpose of storage is no longer available. However, it is conceivable that a storage exceeding this purpose results from European or national laws, regulations or other rules, to which Chevron Services GmbH is subject. Such data will only be deleted when the corresponding storage periods resulting from the aforementioned legal sources end. An exception is only made if the stored data is necessary for the fulfillment of a contract or the conclusion of a contract. For example, storage periods of up to ten years are legally prescribed for certain data due to tax regulations.

III. Information on our Data Processing Activities

Visiting and Using our Website

1. Description and Scope of Data Processing

Whenever you visit our website https://www.chevron-consultants.com, we automatically collect information and data from your computer system or mobile device. In this context, we receive the following data:

a. Information on browser type and used version
b. Operating system
c. Internet-Service-Provider
d. Your IP address
e. Date and time of your access
f. Website from which you access chevron-consultants.com
g. Websites that are called up by your system via our website

We store the collected data in log files of our system. We do not store this data together with your other personal data.

2. Legal Basis for the Data Processing

Art. 6(1)(f) GDPR is the legal basis for the temporary storage of data and log files.

3. Purpose of Data Processing

For the duration of your session it is necessary to save your IP address in order to deliver our website to your computer or mobile device.

The uniform storage in log files ensures the functionality of our website and makes an important contribution to the security of the IT systems of Chevron Services GmbH. Furthermore we use the data to improve our online offer.

Finally, this is also the reason for our legitimate interest in data processing.

4. Duration of Storage

We delete stored log files after seven days. In case, we would need log files for a longer period for the purposes aforementioned, we would anonymize or delete your IP address rendering an allocation to you impossible.

5. Right to object and right to erasure

Clients or website visitors have the right of objection. Since the data is absolutely necessary for the provision of our website, you would not be able to use our website afterwards.

Communication with the client or website visitor

A. Contact form
1. Description and Scope of Data Processing

In order to send a message to Chevron Services GmbH our website offers you various contact forms.

In this context, we receive the following data, depending from the type of contact form you use:

a. Name
b. E-Mail address
c. Telephone number
d. Company name
e. Company address
f. Number of shops
g. Content of your message

These data are also stored at the time the message is sent:

a. Your IP address
b. Date and time

The data will only be used to process your request and will not be passed on to third parties.

2. Legal Basis for the Data Processing

Art. 6(1)(a) GDPR and thus your consent (given by you when submitting the contact form) constitutes the legal basis for data processing.

3. Purpose of Data Processing

Processing of contact initiated by clients or website visitors and prevention of misuse of the IT systems of Chevron Services GmbH.

4. Duration of Storage

The personal data collected when submitting a message via contact form to us will be deleted whenever the communication with the client is finally terminated, i. e. when the relevant facts have been finally clarified. Further data, collected when submitting the message, will be deleted within 7 days at the latest.

5. Right to object and right to erasure

The client or website visitor may revoke his or her preliminiary granted consent at any time. In this case all data that has been accumulated by using the contact form will be deleted immediately and the processing of a still open request sent by contact form will be terminated.

B. E-Mail
1. Description and Scope of Data Processing

In order to send a message to the Chevron Services GmbH an e-mail can be sent to the e-mail address info@chevron-consultants.com. All player data sent with the e-mail will be saved.

a. E-mail address
b. E-mail contents and attachments

All data will only be used to process your request and will not be passed on to third parties.

2. Legal Basis for the Data Processing

Art. 6(1)(f) GDPR and thus our legitimate interests, constitutes the legal basis for data processing.

3. Purpose of the Data Processing

It is a legitimate interest of Chevron Services GmbH to answer player requests received by e-mail as soon as possible, as well as to prevent misuse of the IT systems of Chevron Services GmbH.

4. Duration of Storage

The personal data collected in the course of e-mail communication will be deleted whenever the communication with the client is finally terminated, i. e. when the relevant facts have been finally clarified.

5. Right to object and right to erasure

The client or website visitor may object to the storage of his or her personal data at any time. In this case, the conversation with the client or website visitor cannot longer be maintained.

C. Telephone
1. Description and Scope of Data Processing

You may contact Chevron Services GmbH via telephone number +49 6104/775 1000 to get in touch with us. In this context, we receive the following data:

a. First name
b. Last name
c. E-Mail address
d. Telephone number
e. Content of the conversation

All data will only be used to process your request and will not be passed on to third parties.

2. Legal Basis for the Data Processing

Art. 6(1)(f) GDPR and thus our legitimate interests, constitutes the legal basis for data processing.

3. Purpose of the Data Processing

It is a legitimate interest of Chevron Services GmbH to answer client calls and appropriate requests as soon as possible.

4. Duration of Storage

The personal data collected in the course of telephonic communication will be deleted whenever the communication with the client is finally terminated, i. e. when the relevant facts have been finally clarified. If a recall will be stipulated during the clarification phase, no matter from which side, the data will be stored, but will be deleted seven days after the last telephone call took place at the latest.

5. Right to object and right to erasure

Der Anrufende kann jederzeit der Speicherung seiner personenbezogenen Daten widersprechen. Dadurch kann jedoch keine telefonische Kommunikation mehr stattfinden.

D. Whistleblowing system
1. Description and Scope of Data Processing

Chevron Services GmbH offers its clients a whistleblowing system to report anonymously suspect notifications. When filling the form of the whistleblowing system we receive the following data:

a. Company name
b. Topic
c. Content of the message
d. Content of attachments

All data will only be used to process your request and will not be passed on to third parties. An IP address won´t be stored.

2. Legal Basis for the Data Processing

Art. 6(1)(b) GDPR and thus the closed contract between Chevron Services GmbH and its client about using the whistleblowing system constitutes the legal basis for data processing.

3. Purpose of the Data Processing

Chevron Services GmbH receives the corresponding whistleblowing message anonymously and forwards it securely to the contractually or legally designated recipient, e. g. the client’s money laundering officer, in encrypted form or grants him or her access to the whistleblowing message stored on the secure servers of Chevron Services GmbH.

4. Duration of Storage

The data processed within the whistleblowing system must be stored for 5 years and then deleted, unless a longer storage period is ordered by a supervisory or law enforcement authority. The maximum storage period required by law is 10 years.

5. Right to object and right to erasure

The data processing ends once the client terminates the corresponding contract for the use of the whistleblowing system. Irrespective of this, retention periods mentioned in chapter 4. still apply.

IV. Information on required data transmissions

Associated Companies / Group Companies

All collected and personal data will be made available by Chevron Services GmbH to associated companies within the group of companies.

1. Description and Scope of Data Processing

All processed data, for example, when visiting the website or getting in touch with us, and mentioned in this privacy policy will be also made available to associated companies within the group of companies for the purposes described below.

2. Legal Basis for the Data Processing

Art. 6 Abs. 1 lit. f DSGVO und somit unser berechtigtes Interesse daran, Ihnen unsere Dienstleistungen vollumfänglich, fortwährend und neueste Trend aufnehmend anbieten zu können stellt die Rechtsgrundlage der Datenverarbeitung dar.

3. Purpose of the Data Processing

Chevron Services GmbH offers comprehensive services of different disciplines at the highest level. The expertise of our professionals contributes a considerable part on this and is allocated over various companies associated with Chevron Services GmbH. In order to present the comprehensive services across all disciplines, a data transfer, strictly limited to associated companies, is essential.

4. Duration of Storage

As soon as data stored at Chevron Services GmbH has to be deleted, the corresponding data stored at associated companies within the group of companies will also be irretrievably removed.

5. Right to object and right to erasure

In case, personal data that is processed in connection with art. 6(1)(a) GDPR and thus with the client’s or website visitor´s consent, a revocation is sufficient to prohibit further processing. In case, data is processed in connection with art. 6(1)(b) GDPR and thus by contract, the termination of the contract closed with Chevron Services GmbH is necessary to stop the data processing. In order to end the processing of data, which is carried out in connection with art. 6(1)(f) GDPR, an objection of your consent is necessary, which will be only effective for the future.

V. Informationen on the Protection of Your Data and Your Rights

Your rights as data subject

1. Right of access (Art. 15 GDPR)
You have the right to be informed whether and which personal data we process from you. In accordance with GDPR, we will provide you with a summary of your personal data on request. In accordance with the GDPR, we have a 30-day period to respond to your request for information.

2. Right to rectification (Art. 16 GDPR)
If you inform us that data processed by us on your behalf is incorrect or incomplete, we will adjust it immediately after positive verification.

3. Right to erasure (Art. 17 GDPR)
We delete personal data immediately on request, provided that none of the reasons stated in art. 17 GDPR oppose this. Deletion can always only take place for the future.

4. Right to restriction of processing (Art. 18 GDPR)
If you wish, we will restrict the processing of your data if one of the conditions specified in the GDPR applies.

5. Notification obligation (Art. 19 GDPR)
We will inform recipients (e. g. data processors) of any requests for personal data that we have received, if you have sent us a request to correct, restrict or delete your personal data.

6. Right to data portability (Art. 20 GDPR)
Upon request, we will provide your data in a generally used, machine-readable format and will transfer your personal data to another responsible person upon request.

7. Right to object (Art. 21 GDPR)
You can object to the processing of personal data concerning you at any time, provided that the processing is carried out on the basis of Art. 6(1)(e) or (f) GDPR.

8. Revocation
Generally, you can only revoke the processing of your personal data if you have previously given your consent in accordance with Art. 6(1)(a) GDPR. A revocation is only valid for the future.

Automated Decision Making and Profiling

Chevron Services GmbH carries out automated decisions on individual cases including profiling only if European or national legal provisions allow it or you have given us your explicit consent. In order to protect your rights and freedoms as well as legitimate interests, at least one natural person participates in automated decisions. If you have given your consent to the processing of your personal data for automated decisions on individual cases s including profiling, you can revoke it at any time, always for the future. Please use one of our contact channels.

International Data Transmission

In general, recipients of personal data must be located in the European Union (EU) or the European Economic Area (EEA). The non-EU and non-EEA member Great Britain is treated as an EU member state on the basis of valid treaties, at least until 31st December 2020. Otherwise, data may only be sent to third countries if there is an adequacy decision by the EU Commission, if standard data protection clauses approved by the EU Commission are used, or if approved binding corporate rules are involved or if you gave us your explicit consent. Chevron Services GmbH does not send any data to recipients in third countries.

Right to lodge a complaint with a supervisory authority

If you come to the conclusion that the processing of personal data concerning you is not in accordance with the GDPR, you have the right to lodge a complaint with a competent supervisory authority (art. 77 GDPR). An overview of the supervisory authorities in the Federal Republic of Germany can be found at
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Adaptions to the Privacy Policy

From time to time, Chevron Services GmbH may amend this privacy policy and inform you accordingly. In case, your consent is required for this – depending on the type and scope -, we will obtain it.

VI. Information about Cookies

Our website https://www.chevron-consultants.com uses cookies, which are temporarily stored on your device. The respective company that places the cookie receives certain information, which is mainly used to make our website more user-friendly and to improve it. Chevron Services GmbH is allowed to use essential cookies without your consent (legal basis: Art. 6(1)(f) GDPR), but you have the right to object. In case you would object to the use of essential cookies, it cannot be excluded that our website can no longer be used to its full extent, as e. g. page navigation, language settings or the display of secure parts of our website may no longer function properly. For the use of non-essential cookies, e. g. for marketing or analysis purposes, your active consent is required (opt-in procedure), whereby Art. 6(1)(a) GDPR forms the legal basis for this. When you visit our website, you can give us the necessary consent or refuse to give it by clicking on the appropriate boxes in the cookie banner. You can also deactivate cookies in the settings of your internet browser or restrict their functions. Previously stored cookies can also be deleted directly. Restrictions implemented in your web browser may also lead to restrictions in the functionality of the website.

Cookies

a. Essential technical cookies:

i. Name: PHPSESSID
Provider: wb.thecompliancetools.com
Purpose: Keeps status for website user requests
Expiry: Session
Data is sent to: Germany

b. Non-essential preferential cookies:
/

c. Non-essential statistical cookies:
/

d. Non-essential marketing cookies:
/

e. Further non-essential cookies:
/