PRIVACY AND COOKIE POLICY

PRIVACY POLICY

Last Update August 2019

Data controller

Siemens Gamesa Renewable Energy (“Siemens Gamesa”) – with registered office at Parque Tecnológico de Bizkaia, Edificio 222, 48170, Zamudio, Vizcaya (Spain) – as Data Controller, takes data protection seriously. As part of this effort, we ensure that our websites are in compliance with the applicable laws on data privacy and security. As part of this effort, we ensure that our customer portal (Wind Dialogue) is in compliance with the applicable laws on data privacy and security.

This Privacy Policy serves to inform on the types of personal data we collect on our customer portal (Wind Dialogue), in addition to the reason for which these are collected. It also provides information on who your data is shared with and why, in cases where applicable. This Privacy Policy is updated from time to time. The last update can be found at the top of this page.

Utilization of cookies on our websites
Further information about cookies can be found in our Cookie Policy; the policy gives direction on how to take control over this subject.

When only visiting and browsing the customer portal (Wind Dialogue) we collect the IP address, email address for authentication and user behaviour. IP addresses are analyzed in the event of a cyber-attack and general location of access point.

Collection and processing of personal data as a result of your use of customer portal (Wind Dialogue), online applications and platforms

Siemens Gamesa may ask for your consent before using your personal data (Article 6 (1) (a) General Data Protection Regulation - GDPR):

• To fulfil a specific request, such as verifying your identity and authorizing our access to the website, granting access to collaboration features on the website or for support tickets and cases, as reasonably necessary to enforce our Terms of Use. Siemens Gamesa will process the data based on the consent of the interested party given when filling out the form provided for this purpose.

To exercise legitimate interests pursued by Siemens Gamesa (Article 6 (1) (f) GDPR) Siemens Gamesa will process your personal data:
• To verify your identity, and authenticate you, so only the relevant data for the customer you represent is shown to you. We use either an identity provider service administered within the SGRE premise, or in case a trusted connection between Siemens Gamesa and the customer it landscape has been set up, against the customer own identity provider service.
• To maintain and protect the security of our products, services and websites, preventing and detecting security threats, fraud or other criminal or malicious activities.
• To store your selections and to improve the usability of our websites.
• When a customer appointed user, administrator requests a user to be created on the customer portal on your behalf. As part of this, information to validate your identity will be handed over.

To comply with Siemens Gamesa’s legal obligations (Article 6 (1) (c) GDPR) Siemens Gamesa will process your personal data:

• To comply with legal and regulatory obligations and enforce our legal rights e.g. for compliance purposes, record keeping, compliance screening obligations (to prevent money laundering and other white-collar crimes).

Links to other websites
As part of our offerings, Siemens Gamesa may provide links to e.g. other third-party websites or applications that may be of interest to you. This privacy policy does not cover third parties; as such Siemens Gamesa is not responsible for the privacy practices of these websites or applications.

Personal data processed by Siemens Gamesa
For the aforementioned purpose(s), personal data processed by Siemens Gamesa may include:
• Contact information – e.g. full name, work telephone, job title, company affiliation and work email address;
• Further information necessarily processed in e.g. a project or contractual relationship with Siemens Gamesa or voluntarily provided by the Business Partner Contact, such as requests, and project milestones; and
• If legally required for Business Partner compliance screening – e.g. information about relevant and significant litigation or other legal proceedings against Business Partners.

Sharing of personal data

As part of our effort to protect your data, we will only share your personal data with our subsidiaries when necessary, or when we are legally entitled to do so. We only share your personal data with Siemens Gamesa subsidiaries in third countries that have adopted and implemented our Binding Corporate Rules (BCR) for the protection of personal data.

For the operation of our website, we work with service providers such as hosting services or IT maintenance service providers. In such cases, there are safeguards put in place to make certain that your personal data is protected according to the regulations of the European Union. For recipients located in countries outside the European Economic Area (“third countries”), there is a possibility that the applicable laws on data protection do not offer the same level of protection as in the European Economic Area (EEA). Where this is true, Siemens Gamesa takes the necessary steps to ensure that an appropriate level of protection of personal data exists.

Data is shared only in connection with and in compliance with applicable laws and regulations. We do not sell or otherwise market your personal data to third parties.

Personal rights
In case you wish, you may exercise your rights of access, rectification, erasure (“right to be forgotten”), restriction of processing, portability, object and not to be subject of an automated individual decision-making, including profiling.
You may also revoke your consent at any time by deleting your own profile or getting in contact with www.winddialogue.com/support/feedback.aspx or customerportal@siemensgamesa.com. We will respond to all legitimate requests.

Invoking your right to be forgotten on customer portal (Wind Dialogue) it will not remove datapoints where actions are taken that impacts obligations between Siemens Gamesa and the Company you are representing, e.g. agreements on service visits, availability negotiations or document sign offs. However, your profile will be delete form our system.

Complaints

Users who feel that their data protection rights have been violated or users who have any complaints regarding their personal information may contact the relevant Siemens Gamesa Data Protection Officer at dataprotection@siemensgamesa.com

In any event, data subjects may always lodge a complaint before the competent data protection authority in accordance with the applicable legislation.

Data retention

We only retain the personal data that you provided to us to fulfill the purposes for which it was initially collected, or unless otherwise required by law.

In this sense, once this purpose disappears or in the case in which the user withdraws his/her consent, Siemens Gamesa may keep the user's personal data, duly blocked, during the period of prescription of the actions that may arise from the relationship with the interested party or for the attention of public authorities, in accordance with the applicable regulations in each case, as well as for the exercise and defense of claims before the Data Protection Agencies.

Contact information
If you have any matters relating to personal data, you can reach the Siemens Gamesa data protection department at: dataprotection@siemensgamesa.com.


COOKIE POLICY

Last Update August 2019

Applicability of policy

This Cookie Policy applies to the current website operated by the Siemens Gamesa Renewable Energy (hereinafter referred as “Siemens Gamesa” or the “owner”) – with registered office at Parque Tecnológico de Bizkaia, Edificio 222, 48170, Zamudio, Vizcaya (Spain).

Concept of cookies

When you visit the customer portal (Wind Dialogue) , information is stored on your terminal device in the form of a "cookies." Cookies are small files that are stored on your terminal device and save certain settings and data to exchange with our websites via your browser.

For each visit to the website, our server automatically recognizes and stores a unique identifier. In addition, our website uses cookies which may automatically collect information from you related to usage and behavior on the website. More information please see the section performance and managing cookies.

Data protection

In certain circumstances, the use of storage and data recovery devices in terminal equipment of the recipients, such as cookies, may involve the processing of personal data. Said data processing will be legitimated if the users have given their consent about the purposes of data processing.

In this sense, the personal data (hereinafter, the "Data") that the user of this website provides to the owner of the website, at the time of navigation through the website, and through the use thereof, will be processed with the express consent of the user for the following purposes:

(i) The provision of the services offered by Siemens Gamesa through the website.
(ii) The analysis of the user's browsing habits.

Siemens Gamesa may provide the Data to service providers that may eventually have access to the user’s Data on behalf of Siemens Gamesa (for instance, companies which provide technology and information services).

Users may withdraw their consent at any time. If you do not want us to recognize your terminal device, please configure your internet browser to erase all cookies from your device, to block all cookies or to receive a warning before a cookie is stored. You can control and/or delete cookies as you wish – read about it here: www.aboutcookies.org.

Additionally, the User may control rights of access, rectification, erasure, object, restriction of processing, portability, and has the right to not be object of an automated individual decision-making, including profiling.

Users can find additional information about the processing of their personal data by contacting Siemens Gamesa Data Protection Department at dataprotection@siemensgamesa.com.

Authorization for the use of cookies

In accordance with the Cookie Policy, Siemens Gamesa will use cookies for the purposes detailed in this Policy. The user of this website may modify or reject the cookies.

Types of cookies

The user who browses the Web can find cookies inserted directly by the owner of the website, or cookies inserted by third parties. Cookies can be assigned to four categories, depending on their function and intended purpose: absolutely necessary cookies, performance cookies, functional cookies, and cookies for marketing purposes.

1. Absolutely necessary cookies: are needed for you to navigate within Siemens Gamesa website and operate basic website functions, such as the issuance of anonymous Session IDs for bundling several related queries to a server.

2. Performance cookies: collect information on the usage of our website, including for example the Internet browsers and operating systems used, the domain name of the website which you previously visited, the number of visits, average duration of visit, and pages called up. These cookies do not store any information that would make it possible to personally identify the user. The information collected with the aid of these cookies is aggregated and is therefore anonymous. Performance cookies serve the purpose of improving the user friendliness of a website and therefore enhancing the user’s experience. You can block the use of such cookies by creating an exclusion cookie (see “managing cookies” below). Siemens Gamesa customer portal (Wind Dialogue) uses Google Analytics and Hotjar. Our analytic tools give us the possibility to know e.g. how much time users spend on which pages, which links users choose to click, what users do and don’t like, features heatmaps (clicks and movements from users), this information is recorded. The system allows us to record anonymize users’ interactions on the portal so we can replay them and gain insights to their behaviour.

3. Functional cookies: enable a website to store information the user has already entered websites such as user ID, language selection, or the user’s location), in order to offer improved, personalized functions to the user. Functional cookies are also used to enable requested functions such as playing videos and to make a user’s decision to block or disable a certain function (e.g. web analysis) persistent (“opt-out cookies”).

4. Cookies for marketing purposes: are used to offer more relevant content to users, based on their specific interests. Siemens Gamesa does not apply marketing cookies on this website.


Managing cookies
Please note that all the cookies mentioned below will necessarily be used when you browse our website using a mobile terminal device. Performance cookies: We use Google Analytics and Hotjar on our website for constantly improving the website and/or detecting errors. For this purpose, Google Analytics and Hotjar anonymously stores and analyzes various kinds of data including the visited website and the website’s metadata, websites that link to Siemens Gamesa, the time of the visit, and the browser used.

Google Analytics: Please click here to learn how to prevent Google Analytics from aggregating and analyzing the data collected from your visit to this website.

Hotjar: Please click here to prevent Hotjar from aggregating and analyzing the data collected from your visit to this website.

Browser settings

We remind Siemens Gamesa customer portal (Wind Dialogue) users that the use of cookies is subject to acceptance. This acceptance may be revoked. Please note that certain functions of our website may no longer work, or not work correctly, without cookies.

If you do not want us to recognize your terminal device, please configure your Internet browser to erase all cookies from your device, to block all cookies or to receive a warning before cookies are stored. You can control and/or delete cookies as you wish. Find more information at www.aboutcookies.org or via the provider of your browser.

Firefox
Internet Explorer
Safari
Chrome

Contact information

If you as a user want additional information on how to revoke the consent given, about the procedure to disable the cookies, or you want to ask any questions about the Cookies Policy of Siemens Gamesa, please contact our data protection team:

dataproteaction@siemensgamesa.com