Privacy Statement We are delighted that you have visited our website and thank you for your interest in our company.

Data protection is a top priority at Wintershall Noordzee. We would therefore like to inform you in detail about the following Privacy Policy aspects:

1.   Data protection responsibility and Data Protection Officer

     Responsible for data processing is:
     Wintershall Noordzee B.V.
     Bogaardplein 47
     2284 DP Rijswijk
     The Netherlands

     Phone +31 (0)88 880 3100
 

     The contact details of our Data Protection Officer are:
     Wintershall Noordzee B.V.
     F.a.o. Data Protection Officer
     Bogaardplein 47
     2284 DP Rijswijk
     The Netherlands

2.   Data collection and how

    2.1 If you visit our website, the following information will automatically be transmitted from your browser to our server:

• IP address of your computer
• Information about your browser
• Name of the website from which you visit us
• Name of the visited landing page address (URL) or the accessed file
• Date and time of your visit
• Transferred data volumes
• Status information such as error messages

    2.2 If you contact us by email, we will receive the following information:

• Your email address and other information which you submit to us in your email
• Date and time of your contact

3.   Purpose of data processing and legal basis

    3.1 If you visit the Wintershall Noordzee website, we will use the IP address and the other data (referred to in section 2.1) transmitted                    automatically from your browser to our server in order to:

          3.1.1. provide you with the requested content. We store the full IP address only as long as this is technically necessary to show you the                       requested page.

          3.1.2. protect us from attacks and to ensure the proper operation of our website. We store the data temporarily and access-protected for                      a maximum of 7 days.

          3.1.3. attempt to find out who is behind an IP address only in cases of unlawful attacks.

    3.2. If you contact us by email, we will use the provided personal data referred to in section 2.1, to reply to and accord with your request as             far as possible. This personal data will be stored for as long as is necessary to answer and respond to your request.

    3.3. The legal basis for processing your personal data is preserving our legitimate interests according to Article 6 para. 1 f) of the General                 Data Protection Regulation (GDPR). Wintershall Noordzee’s legitimate interest in these processing activities derives from the purposes                 set out above.

4.   Obligation to provide data

     To visit and show our website, the technically necessary personal data referred to in section 2.1 of this Privacy Policy is automatically                 processed. Any other personal data is voluntary based on your given cookie settings (see section 8) or for purposes of contact.

5.    Sharing of personal data

     Within our company, access to your personal data will only be granted to those persons and departments where this is necessary for the             purposes under section 3 of this Privacy Policy.

     We might employ external service providers for the processing of your personal data for the purposes under section 3 of this Privacy Policy.         They process your personal data on our behalf and only on our instructions in accordance with Art. 28 GDPR. An independent processing of         your personal data by the service providers have been  contractually excluded.

6.   Data transfer to third country

     The personal data referred to in section 2.1 is passed on to processors based in the European Union for the purposes set out in section 3.           The processing takes place on our behalf and according to our instructions. We do not intend to transfer your personal data to a third                 country beyond the European Union.

7.   Personal data protection

     Wintershall Noordzee uses technical and organizational security measures to protect your personal data from accidental or intentional                 manipulation, loss, destruction or access by unauthorised persons. Our security measures are continuously revised in line with technological       developments.

8.   Use of cookies

     When you visit our website, we point out in our “Cookie Notice Banner” that we use cookies. Cookies are small text files that are stored             locally in the visitor’s Internet browser cache. By using our website, you agree to our use of cookies. We would like to inform you about             which cookies we use and how you can prevent the setting of our cookies.

    8.1. We use two categories of cookies on our website:

           8.1.1. Necessary Cookies:          

                    These cookies are technically necessary for the operation, smooth functioning and certain services of our website. These cookies                        can only be deactivated by changing your browser settings

           8.1.2. Analytical Cookies:                    

                    We use Google Analytics to help us recognise recurring users and analyse their behaviour on our website (for example, which                            pages the users come from or which pages they have accessed) to improve our website.

    8.2. You can configure your browser setting according to your wishes and decide which cookies you want to allow and which cookies you                   want to reject. Please note that if you do not allow the use of cookies referred to in section 8.1, you may not be able to use all the                     features of our website.

9.   Your rights

You are granted specific rights under the General Data Protection Regulation:

    9.1. Right of access, Art. 15 GDPR

           You have a right to obtain information about your personal data processed by us and certain other information (such as those given in               this Privacy Policy).

    9.2. Right to rectification, Art. 16 GDPR

           If your personal data is incorrect or incomplete, you have a right to have it rectified.

    9.3. Right to erasure, Art. 17 GDPR

          On the basis of the so-called “right to be forgotten”, you can demand the erasure of your personal data in specific cases. We are entitled,            for example, to continue processing your personal data if such processing is required to comply with our legal obligations or to establish,            exercise or defend legal claims.

    9.4. Right to restriction of processing, Art. 18 GDPR

           This right includes restricting the usage or the manner of the usage. This right is limited to specific cases and applies in particular when:             (a) the data is incorrect; (b) the processing is unlawful and you oppose the erasure; (c) we no longer require the data, but you need the             data to establish, exercise or defend your rights. If processing is restricted, we may continue to store but not use the data. We keep a               list of those who have exercised their right to restrict processing to ensure this restriction.

    9.5. Right to data portability, Art. 20 GDPR

           In accordance with this right we will, if technically possible, transmit your personal data in a structured, commonly used and machine-               readable format for your own purposes.

    9.6. Right to revoke your consent, Art. 7 GDPR

           If the processing of your data is based on your consent, you have the right to object to the processing of your personal data at any time.

    9.7. Right to object, Art. 21 GDPR

           If we process your data for the safeguarding of our legitimate interests, you may object to this processing on grounds arising from your             specific situation. We will then cease to process your personal data unless we can prove grounds for the processing worthy of protection             which prevail over your interests, rights and freedom or the purpose of the processing is the assertion, exercise or defence of a legal                 claim.

Exercising these rights is free of charge. However, you must prove your identity with two factors. We will use reasonable efforts in accordance with our legal obligations to transfer, rectify or erase your personal data in our file systems.

To exercise your rights, file a complaint or submit any other request, please contact us by email or write to us. We will try to reply to you within 30 days. The contact details can be found in section 1.

10.   Complaints

You can contact the Data Protection Officer named in section 1 of this Privacy Policy or file a complaint with a supervisory authority according to Art. 78 GDPR, in the member state where you are resident, have your place of work, or where the alleged infringement took place.

     Autoriteit Persoonsgegevens
     Hoge Nieuwstraat 8      
     Postbus 93374      
     2509 AJ  The Hague      
     The Netherlands

     Informatie- en Meldpunt Privacy:        +31 (0)88 1805 250

11.  Personal data of minors

Our website is generally not aimed for and are not marketed to people under the age of 18 or such other age designated by applicable law (“minors”). We generally do not collect personal data of minors. If such persons submit personal data through this website, we will erase the data and will not process it as soon as we become aware that they are minors.