Privacy policy – Liability for content

In accordance with the provisions of the European General Data Protection Regulation (GDPR) and all other applicable laws, Energiequelle GmbH shall only process personal data that is strictly necessary for the purpose or which we are legally obliged to collect.

This privacy policy is primarily intended to inform you about the processing of your personal data on our website as well as our social media channels and the rights to which you are entitled under data protection law.

Table of contents

I. Name and address of the controller
II. Data Protection Officer
III. General information on data processing
IV. Security of your data
V. Provision of the website and creation of log files
VI. Web analysis and cookies
VII. Contact requests
VIII. Subscribing to the customer magazine
IX. Data processing on our social media channels
X. Information on the integration of third party services
XI. Your rights as data subject
XII. Currency and alteration of this data privacy policy

I. Name and address of the controller
The controller as defined by the General Data Protection Regulation (GDPR) and other national data protection laws of the Member States as well as other data protection provisions is:

Energiequelle GmbH (hereinafter: EQ)

Address:
Hauptstraße 44, D-15806 Zossen OT Kallinchen, Germany
Telephone: +49 33769 871-0
Fax: +49 33769 871-105
e-mail: info@energiequelle.de
Website: www.energiequelle.de

Managing Director: Michael Raschemann

 II. Data Protection Officer

Data Protection Officer of Energiequelle GmbH
Address: Hauptstraße 44, D-15806 Zossen OT Kallinchen, Germany
e-mail: datenschutz@energiequelle.de

III. General information on data processing

Datenschutzeinstellungen bearbeiten

 

1) Scope of the processing of personal data

We will only collect and use the personal data of our users to the extent that is necessary for the functionality of our website and the provision of services and content. When using our website for purely information purposes, we will not collect any personal data, with the exception of the data transmitted by your browser.

We will only regularly collect and process personal data with the consent of the data subject and within the scope of contracts concluded with them. An exception from this applies where prior consent is not possible for practical reasons, where this is necessary for pre-contractual measures or the processing of data is permitted by statutory provisions.

 

2) Legal basis for the processing of personal data

We will process your personal data

  • if you have given us your express consent to do so pursuant to point (a) of Article 6(1) GDPR.
  • where this is lawful and necessary according to point (b) of Article 6(1) GDPR for the purposes of our business relationship with you or for the implementation of pre-contractual measures.
  • where this is necessary for the fulfilment of a legal obligation pursuant to point (c) of Article 6(1) GDPR.
  • where this is necessary in order to protect the vital interests of the data subject or of another natural person pursuant to point (d) of Article 6(1) GDPR.
  • where this is necessary for the performance of a task carried out in the public interest pursuant to point (e) of Article 6(1) GDPR.
  • where this is necessary for the purposes of the legitimate interests pursued by the controller or by a third party pursuant to point (f) of Article 6(1), except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

 

3) Erasure of data and storage duration

We process personal data as long as this is necessary for the fulfilment of our contractual and legal obligations.

The data processed by us will be deleted in accordance with statutory provisions as soon as consents are withdrawn or legal grounds for processing no longer exist.

Where data is not deleted because it is necessary for other, legally permissible purposes, its processing shall be restricted to these purposes. This means that the data is blocked and shall not be processed for other purposes. This applies, for example, to data that must be retained under commercial or tax law or the storage of which is necessary for the establishment, exercise or defence of legal claims or for the protection of the rights of natural or legal persons.

 

4) Data processing in third countries

If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA)) or if it is processed in the context of third party services or data is disclosed or transferred to other persons, bodies or companies, this only takes place in accordance with legal provisions.

Notwithstanding express consent or where a transfer is required by contract or law, data processing shall only take place if the third country has been confirmed by the EU Commission as having an adequate level of data protection or where other appropriate data protection safeguards (e.g. binding internal company data protection regulations or EU standard contractual clauses) are in place. See the information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_en).

 

IV. Security of your data

When handling personal data, our employees are obliged to observe the data protection requirements and in particular the provisions of the GDPR.

We use the latest technical and organisational security measures in order to protect your data against accidental or intentional manipulation, total or partial loss, destruction or unauthorised third party access. The precautions correspond to at least the statutory provisions and are continuously improved in accordance with technological progress.

 SSL encryption

This website uses SSL encryption for security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator. You can recognise an encrypted connection from the address line of the browser beginning with https:// and from the padlock symbol in your browser line. If SSL encryption is activated, the data you transfer to us cannot be read by third parties.

 

V. Provision of the website and creation of log files

Purpose and legal basis
When using our website purely for information purposes, our system will log the data of the accessing terminal and will store this in log files. The temporary storage of the IP address by the system is necessary in order to be able to deliver the website to the user’s terminal. The following data is collected for this purpose:

  • IP address
  • Date and time of query
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the query (specific pages)
  • Access status/HTTP status code
  • Quantity of any data transferred
  • Website from which the query is coming
  • Browser
  • Operating system and its interface
  • Language and version of browser software
  • The visitor’s country.

The legal basis for the temporary storage of the data is point (f) of Article 6(1) GDPR on the basis of our legitimate interests in improving the stability and functionality of our website.

 Recipients
We employ technical service providers for the operation and maintenance of our website, with whom we have concluded data processing agreements pursuant to Article 28 GDPR.

 Duration of storage
The data will be erased once it is no longer required for the fulfilment of the purpose of its collection. In the case of the collection of the data for the provision of our website, this is the case when the relevant session is ended.

 Objection
The recording of data for the provision of the website and the storage of data in log files is essential for the operation of our internet presence. The user therefore has no right to object.

 

VI. Web analysis and cookies

Purpose and legal basis
Technically necessary cookies will be stored on your computer when you use the website. Cookies are small text files which are stored by your browser on your end device. Cookies cannot execute programmes or transmit viruses to your computer.

For the processing of cookies that are not strictly necessary for the operation of this website, we shall ask for your voluntary and express consent via a consent banner. The legal basis for the processing of this data is point (a) of Article 6(1) GDPR. These cookies help make the website more user-friendly and more effective overall. We use cookies in order to be able to identity you the next time you visit the website, e.g. after changing internet pages.

You can delete the cookies in the security settings of your browser at any time. This may, however, restrict the functionality of our website.

Recipients
We use external service providers for tracking and/or web analysis. Our website uses functions provided by the web analysis service of Google Inc., Google Analytics, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This service uses cookies enabling the analysis of visitors’ use of the website. The information generated will be transferred to and saved on Google’s server in the USA. If IP anonymisation has been activated on this website, your IP address will be first be shortened by Google within Member States of the European Union or in other contracting parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.

Google uses this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and Internet usage on our behalf. Google will never associate your IP address transmitted by your browser within the scope of Google Analytics with any other data.

The information stored using the cookies is stored separately from any other data provided to us. In particular, the cookies data will not be linked with your other data. The data collected will not be used to identify you or to create personal profiles. Any association with personal data you provide or any other data will not take place without your prior express consent.

You can prevent the data collection and storage by Google by adjusting the settings in your browser software accordingly. If you have used an opt-out cookie, please note that you must not delete these opt-out cookies for as long as you do not want measurement data to be recorded. If you have deleted all your cookies in the browser, you need to set the relevant opt-out cookie again.

Duration of storage
Temporary cookies are automatically deleted when you close your browser. These are session cookies. They save a session ID, which enables various browser requests to be assigned to the joint session. This means the end device can be recognised when you return to our website. Session cookies are deleted once you log off or close the browser.

Permanent cookies, such as analysis cookies from Google Analytics, are automatically deleted after a specific period, which varies depending on the cookie. Google Analytics cookies are deleted after 14 months unless deleted before from the browser settings. You can delete the cookies in the security settings of your browser at any time.

Revocation
You can disable or restrict the transmission of cookies by adjusting the settings in your internet browser. You can delete any cookies already stored in the security settings of your browser. This can also be done automatically. If the cookies for our website are disabled, the functionality of our website may be limited.

VII. Contact requests

1) Contact form

Purpose and legal basis
If you send us enquiries using the contact form, your details from the enquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We shall not pass this data on to third parties without your consent.

This data is processed on the basis of point (b) of Article 6 (1) GDPR, insofar as your enquiry is connected with the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in processing the enquiry sent to us (point (f) of Article 6 (1) GDPR).

Other data processed as part of the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

Duration of storage
The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage ceases to apply (e.g. after your enquiry has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

2) Enquiry by e-mail, telephone or fax

Purpose and legal basis
If you contact us by e-mail, telephone or fax, your enquiry, including all resulting personal data (name, enquiry), will be stored and processed by us for the purpose of processing your enquiry. We will not disclose this data without your consent.

This data is processed on the basis of point (b) of Article 6 (1) GDPR, insofar as your enquiry is connected with the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in processing the enquiry sent to us (point (f) of Article 6 (1) GDPR).

 Duration of storage
We shall retain the data you send us with the contact request until you ask us to delete it, revoke your consent to storage or the purpose for data storage ceases to apply (e.g. after your enquiry has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

 

VIII. Subscribing to the customer magazine

Purpose and legal basis
Our website provides the option of subscribing to our free customer magazine. When subscribing, the data from the input screen will be transferred to us so that we can send you the customer magazine.

In order to send the electronic customer magazine, we will process the e-mail address provided, and where it is sent by post, your first and last name, street and house number, as well as the post code and city. The legal basis for the processing is point (b) of Article 6(1) GDPR.

The user will be made aware of this privacy policy when ordering.

Recipients
Your data will be processed by external service providers, who have been carefully selected and commissioned. The service providers are bound to our instructions under data processing agreements pursuant to Article 28 GDPR to keep your data confidential, and they are regularly audited.

Duration of storage
Your personal data will be stored for as long as you are subscribed to the customer magazine. This data is generally not passed on to third parties and is only used to send the customer magazine.

Unsubscribing from the customer magazine
You can unsubscribe from the customer magazine at any time. Please send your unsubscribe request by post to the above address or by e-mail to presse@energiequelle.de. Once unsubscribed, the aforementioned data will be deleted from our mailing list within a reasonable processing period.

 

IX. Data processing on our social media channels

We use links to social networks Facebook, Instagram, Twitter, XING and LinkedIn on our website. This supports our online presence as well as providing additional channels for contemporary communication. The underlying purpose of this is to be regarded as Energiequelle GmbH’s legitimate interest within the meaning of point (f) of Article 6(1) GDPR.

If you click on the relevant social media icon, you will be redirected to the service provider’s website in a separate browser window. Please note that we know nothing about the content of the (personal) data transmitted or how this data is used by the provider. Further details are to be found in the data privacy policy of the provider in question.

We expressly point out that user data can be processed outside the territory of the European Union. This may result in risks for users, e.g. because it could make it more difficult to enforce users’ rights.

 

1) Facebook

Social network service provider: Facebook Ireland Ltd. (“Facebook”), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, website: https://www.facebook.com.

We provide information about our company and communicate with potential customers and our partners on our Facebook page.

As the operator of this fan page, Energiequelle GmbH is the joint controller together with Facebook in accordance with data protection law.

We have concluded an agreement on the processing as joint controllers with Facebook, which sets forth the division of obligations under data protection law between us and Facebook. The agreement concluded sets forth the details on the processing of personal data for the creation of page insights.

You can find the full privacy policy for the Energiequelle GmbH Facebook page here.

 

2) Instagram

Social network service provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA, website: https://www.instagram.com. The Instagram service is a Facebook product provided by Facebook Ireland Ltd.

We provide information about our company and communicate with potential customers and our partners on our Instagram page.

Please note that you use this Instagram page and its functions under your own responsibility. This applies to the use of interactive functions in particular (e.g. comment, share, like).

You can find the full privacy policy for the Energiequelle GmbH Instagram page here.

 

3) Twitter

Social network service provider: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, website: https://www.twitter.com

We provide information about our company and current topics with our Twitter account.

Please note that you are using the Twitter short messaging service offered by EQ under your own responsibility. This applies to the use of interactive functions in particular (e.g. retweet, like).

By using Twitter, your personal data will be logged, transferred, saved, disclosed and used by Twitter Inc., and regardless of your place of residence, it will be transferred to the United States, Ireland and any other country in which Twitter Inc. does business, and saved and used there. You can find information about which data Twitter processes and for what purposes in the Twitter privacy policy: https://twitter.com/de/privacy.

We will process the data you provide to Twitter, in particular your username and the content published under your account, to the extent that we retweet your tweets or respond to them or even write tweets referring to your account. The data you freely publish and share with Twitter shall thus be included in the EQ communications and made accessible to its followers. The recipients of publications are the general public, and therefore potentially anyone.

You can find the full privacy policy for the Energiequelle GmbH Twitter account here.

 

4) LinkedIn

The network provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; website: https://www.linkedin.com. Please refer to LinkedIn’s privacy policy for details of what data LinkedIn processes and for what purposes: https://www.linkedin.com/legal/privacy-policy.

You can contact us via our LinkedIn account. In this event, we save your message as well as the personal data transmitted with the message. Personal data is only processed in order to handle your request; it is not transferred to third parties.

You can find the full privacy policy for the Energiequelle GmbH Twitter account here.

 

5) Xing

The network provider is SE, Dammtorstraße 30, 20354 Hamburg, Germany, website: https://www.xing.com/. Please refer to XING’s privacy policy for details of what data XING processes and for what purposes: https://privacy.xing.com/de/datenschutzerklaerung.

You can contact us via our XING account. In this event, we save your message as well as the personal data transmitted with the message. Personal data is only processed in order to handle your request; it is not transferred to third parties.

 

X. Information on the integration of third party services

This website may include third party content, such as videos, map material, RSS feeds or graphics from other websites. This always assumes that the providers of this content (hereinafter referred to as “third party providers”) know the IP address of the user in order to display the content on the browser of that user. We strive to use only content from providers who use the IP address solely for the purposes of delivering the content. However, we have no control over whether the third party provider saves the IP address, such as for statistical purposes. Where we are aware of this, we shall inform users.

 

1) YouTube with extended data protection

This website incorporates videos from YouTube. The website is operated by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in advanced privacy mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the extended data protection mode does not necessarily exclude the transfer of data to YouTube partners. As such, YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video.

As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. The YouTube server will be informed of which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, YouTube can store various cookies on your end device or use comparable recognition technologies (e.g. device fingerprinting) after starting a video. This allows YouTube to receive information about visitors to this website. This information is used, among other things, to collect video statistics, improve usability and prevent fraud attempts.

Starting a YouTube video may trigger other data processing operations, over which we have no control.

YouTube is used in the interest of an appealing presentation of our online offers.

This represents a legitimate interest within the meaning of point (f) of Article 6 (1) GDPR.

Further information about data protection on YouTube can be found in its privacy policy at: https://policies.google.com/privacy?hl=de.

 

2) Google Web Fonts

This page uses so-called web fonts provided by Google to uniformly display fonts. The Google Fonts are installed locally. This represents a legitimate interest within the meaning of point (f) of Article 6 (1) GDPR.

Further information on Google Web Fonts can be found at: https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

 

3) Google Maps

This page uses the map service Google Maps via an API. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

In order to use Google Maps functions, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there.

The provider of this page has no control over this data transfer.

Google Maps are used in the interest of an appealing presentation of our online offers and to make it easy to find the locations we specify on the website. This represents a legitimate interest within the meaning of point (f) of Article 6 (1) GDPR.

More information on handling user data can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de

 

4) Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of ReCAPTCHA is to verify whether data input on this website (e.g. in a contact form) is carried out by a person or by an automated program. For this purpose, reCAPTCHA analyses the behaviour of the website visitor on the basis of various features. This analysis begins automatically as soon as the website visitor enters the website. For this analysis, reCAPTCHA evaluates various information (e.g. IP address, length of time the website visitor stays on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run completely in the background. Visitors to the website will not be advised that an analysis is taking place.

The storage and analysis of data takes place on the basis of point (f) of Article 6 (1) GDPR. The website operator has a legitimate interest in protecting its website offers from misuse of automated manifestations and SPAM.

Further information on Google reCAPTCHA can be found in the Google privacy policy and the Google Terms of Use at the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

Source of Chapter X.: e-recht24.de

 

XI. Your rights as data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR. The applicable data protection law grants you extensive data subject rights vis-à-vis the controller, which we inform you about below:

Withdrawal of consent (Article 7(3) GDPR)
If you have given your consent to the collection or use of personal data, you can withdraw this at any time by letter or e-mail with effect for the future. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Right of access (Article 15 GDPR)
You have the right to obtain confirmation as to whether or not, and which personal data concerning you we process. On request, we shall send you this information in writing.

Right to rectification (Article 16 GDPR)
You have the right to obtain the rectification of inaccurate personal data concerning you and to have incomplete personal data completed.

Right to erasure (‘right to be forgotten’) (Article 17 GDPR)
You have the right to obtain the erasure of personal data concerning you where the statutory conditions under Article 17(1) and (3) GDPR apply.

 Right to restriction of processing (Article 18 GDPR)
You have the right to obtain restriction of processing of your data under certain conditions.

Right to notification (Article 19 GDPR)
If you have exercised your right to rectification, erasure or restriction of processing vis-à-vis the controller, the controller shall be obliged to inform all recipients to whom the personal data concerned has been disclosed, unless this proves impossible or involves a disproportionate effort.

You have the right vis-à-vis the controller to be informed of these recipients.

Right to data portability (Article 20 GDPR)
You have the right to data portability, which means the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to transmit those data to another controller.

Right to object (Article 21 GDPR)
If, as part of a balancing of interests, we process your personal data on the basis of our overriding legitimate interest, you have the right at any time to object to this processing with future effect for reasons arising from your particular situation. If you exercise your right to object, we will terminate the processing of the data concerned. We reserve the right to further processing, however, if we can prove compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. You can exercise the objection as described above. If you exercise your right to object, we will terminate the processing of the data concerned for direct marketing purposes.

Right to lodge a complaint (Article 77 GDPR)
You have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes data protection laws. As a rule, you can contact the supervisory authority at the place of your habitual residence or place of work.

The contact details of the Data Protection Commissioner and for the supervisory authority of your Federal State can be found through the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Please send all information enquiries and objections to data processing to our Data Protection Officer by e-mail to datenschutz@energiequelle.de or by post to the address provided above.

 

XII. Currency and alteration of this data privacy policy

This privacy policy is dated 22/07/2020. As part of the development of our services or due to changed statutory or official provisions, it may be necessary to amend this privacy policy.

 

Kontakt

Um telefonisch Kontakt mit uns aufzunehmen, können Sie folgende Nummer verwenden:

T +49 33769 871 0

Oder schreiben Sie uns gerne eine Nachricht über das folgende Kontaktformular. Wir freuen uns darauf umgehend auf Sie zurück zu kommen.

Ich habe die Datenschutzerklärung zur Kenntnis genommen.

To contact us via phone, use the following number:

T +49 33769 871 0

Or write us a message via the following contact form. We look forward to getting back to you.

I have read the privacy policy

Pour nous contacter par téléphone, vous pouvez utiliser le numéro suivant:

T +49 33769 871 0

Ou bien n'hésitez pas à nous envoyer un message en utilisant pour cela le formulaire de contact suivant. Nous vous répondrons dans les plus brefs délais.

J'ai lu et compris la politique de confidentialité.

Puhelimitse voit ottaa yhteyttä seuraavaan numeroon:

Puh. +358 (0)44 974 1482

Voit myös lähettää viestin tällä lomakkeella. Otamme sinuun pian yhteyttä.

Olen lukenut tietosuojakäytännön.