I. Name and address of the controller
The controller as defined by the General Data Protection Regulation (GDPR) and other national data protection laws of the Member States as well as other data protection provisions is:
Energiequelle GmbH (hereinafter: EQ)
Hauptstraße 44, D-15806 Zossen OT Kallinchen, Germany
Telephone: +49 33769 871-0
Fax: +49 33769 871-105
Managing Director: Michael Raschemann
II. Data Protection Officer
Data Protection Officer of Energiequelle GmbH
Address: Hauptstraße 44, D-15806 Zossen OT Kallinchen, Germany
We take the protection of your personal data very seriously. We therefore process your personal data exclusively on the basis of statutory provisions. These are the European General Data Protection Regulation (EU-GDPR), the Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) and other statutory provisions (Telekommunikations-Gesetz, TKG).
III. General information on data processing
1) Scope of the processing of personal data
We will only collect and use the personal data of our users to the extent that is necessary for the functionality of our website and the provision of services and content. When using our website for purely information purposes, we will not collect any personal data, with the exception of the data transmitted by your browser.
We will only regularly collect and process personal data with the consent of the data subject and within the scope of contracts concluded with them. An exception from this applies where prior consent is not possible for practical reasons, where this is necessary for pre-contractual measures or the processing of data is permitted by statutory provisions.
2) Legal basis for the processing of personal data
We will process your personal data
- if you have given us your express consent to do so pursuant to point (a) of Article 6(1) GDPR.
- this is lawful and necessary according to point (b) of Article 6(1) GDPR for the purposes of our business relationship with you. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
- where this is necessary for the fulfilment of a legal obligation pursuant to point (c) of Article 6(1) GDPR.
- where this is necessary in order to protect the vital interests of the data subject or of another natural person pursuant to point (d) of Article 6(1) GDPR.
- where this is necessary for the performance of a task carried out in the public interest pursuant to point (e) of Article 6(1) GDPR.
- where this is necessary for the purposes of the legitimate interests pursued by the controller or by a third party pursuant to point (f) of Article 6(1), except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
3) Erasure of data and storage duration
We will erase or restrict the processing of your personal data as soon as the purpose of storing the data no longer exists.
The data may be stored if this is necessary for the fulfilment of our contractual and statutory obligations in consideration of retention periods under commercial and tax law.
Data will also be erased or restricted when statutory retention periods have expired, unless there is a necessity to continue storing the data for the conclusion of a contract or the performance of a contract.
IV. Provision of the website and creation of log files
Purpose and legal basis
When using our website purely for information purposes, our system will log the data of the accessing terminal and will store this in log files. The temporary storage of the IP address by the system is necessary in order to be able to deliver the website to the user’s terminal. The following data is collected for this purpose:
- IP address
- Date and time of query
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the query (specific pages)
- Access status/HTTP status code
- Quantity of any data transferred
- Website from which the query is coming
- Operating system and its interface
- Language and version of browser software
- The visitor’s country.
The legal basis for the temporary storage of the data is point (f) of Article 6(1) GDPR on the basis of our legitimate interests in improving the stability and functionality of our website.
We employ technical service providers for the operation and maintenance of our website, with whom we have concluded data processing agreements pursuant to Article 28 GDPR.
Duration of storage
The data will be erased once it is no longer required for the fulfilment of the purpose of its collection. In the case of recording the data for the provision of our website, this is when the relevant session is ended.
The recording of data for the provision of the website and the storage of data in log files is essential for the operation of our internet presence. The user therefore has no right to object.
V. Web analysis and cookies
Purpose and legal basis
Cookies will be stored on your computer when you use the website. Cookies are small text files which are stored by your browser on your end device. They help make the website more user-friendly and more effective overall. Cookies cannot execute programmes or transmit viruses to your computer.
The legal basis for the processing of this data is point (f) of Article 6(1) GDPR. Our legitimate interests as the website operator lie in the storage of cookies for the flawless technical and optimised provision of our services.
You can delete the cookies in the security settings of your browser at any time. This may, however, restrict the functionality of our website.
We use external service providers for tracking and/or web analysis. Our website uses functions provided by the web analysis service of Google Inc., Google Analytics, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google uses this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and Internet usage on our behalf. Google will never associate your IP address transmitted by your browser within the scope of Google Analytics with any other data.
The information stored using the cookies is stored separately from any other data provided to us. In particular, the cookies data will not be linked with your other data. The data collected will not be used to identify you or to create personal profiles. Any association with personal data you provide or any other data will not take place without your prior express consent.
You can prevent the data collection and storage by Google by adjusting the settings in your browser software accordingly. If you have used an opt-out cookie, please note that you must not delete these opt-out cookies for as long as you do not want measurement data to be recorded. If you have deleted all your cookies in the browser, you need to set the relevant opt-out cookie again.
Duration of storage
Temporary cookies are automatically deleted when you close your browser. These are session cookies. They save a session ID, which enables various browser requests to be assigned to the joint session. This means the end device can be recognised when you return to our website. Session cookies are deleted once you log off or close the browser.
Permanent cookies, such as analysis cookies from Google Analytics, are automatically deleted after a specific period, which varies depending on the cookie. Google Analytics cookies are deleted after 14 months unless deleted before from the browser settings. You can delete the cookies in the security settings of your browser at any time.
Third country transfer
Personal data is not transferred to third countries.
All transfers from cookies to Google Analytics are subject to the requirements of the EU-US Privacy Shield. Google is certified as compliant with the EU-US Privacy Shield on the collection, use and storage of personal data from the EU Member States.
You can deactivate or restrict the transfer of cookies by adjusting the settings in your internet browser. You can delete any cookies already stored in the security settings of your browser. This can also be done automatically. If the cookies for our website are deactivated, the functionality of our website may be limited.
VI. Use of the contact form and e-mail contact
Purpose and legal basis
The contact form on our website can be used to contact us electronically. If you use this option, the data you enter in the input mask will be transferred to us and stored. This data includes:
- Your name
- Your e-mail address
- Your message
- and, if provided, your telephone number.
You can also send us your enquiry by e-mail. In this case, we will store your message and the personal data transferred with the e-mail.
The legal basis for the processing of data is
- where the user’s consent has been given, point (a) of Article 6(1) GDPR;
- when sending an e-mail, point (f) of Article 6(1) GDPR.
Your personal data will only be processed for the purposes of processing your enquiry and will not be forwarded to third parties. Only employees in specialist internal departments will have access for the purposes of responding to your enquiry.
Duration of storage
The data will be erased once it is no longer required for the fulfilment of the purpose of its collection. For the personal data from the input mask of the contact form and the data sent by e-mail, this is the case if the conversation with the user is ended. The conversation will be ended if the matter in question is definitively settled.
The user can withdraw consent to the processing of personal data at any time. This can be done with an informal written notification. In such a case, the conversation cannot be continued and all data that was stored upon establishment of contact will be deleted.
VII. Ordering the customer magazine
Purpose and legal basis
Our website provides the option of subscribing to our free customer magazine. When ordering, the data from the input mask will be transferred to us so that we can send you the customer magazine.
In order to send the electronic customer magazine, we will process the e-mail address provided, and where it is sent by post, your first and last name, street and house number, as well as the post code and city.
Your data will be processed by external service providers, who have been carefully selected and commissioned. The service providers are bound to our instructions under data processing agreements pursuant to Article 28 GDPR to keep your data confidential, and they are regularly controlled.
Duration of storage
The data will be stored for as long as the subscription to the customer magazine is active.
The user can withdraw consent to the processing of personal data at any time. This can be done with an informal written notification. In such a case, the subscription cannot be continued and all data will be deleted.
VIII. Data processing on our social media channels
We provide information about our company and communicate with potential customers and our partners on our Facebook page. This supplements our online presence and offers an additional channel for contemporary communication.
Processing of page insights data
Facebook provides us with statistics and insights about our Facebook fan page in anonymous form. These help us learn about the activities of users on our page (page insights). These page insights are created on the basis of certain information about persons visiting our page. This processing of personal data is undertaken by Facebook and us as joint controllers.
The processing services our legitimate interest in our analysis of the types of activities undertaken and to improve our page using this knowledge. The legal basis for the processing of this data is point (f) of Article 6(1) GDPR. In no event will we use the information we obtain from the page insights to associate “Like” data for our page with a certain Facebook profile. Learn about which information is recorded and used here.
We have concluded an agreement on the processing as joint controllers with Facebook, which sets forth the division of obligations under data protection law between us and Facebook. The agreement) concluded between us and Facebook, contains the details on the processing of personal data for the creation of page insights.
Processing of data you have provided via the Facebook fan page
If you have provided us with information via our Facebook page, the processing shall take place on the basis of our legitimate interest in establishing contact with persons making enquiries. The legal basis for the processing is point (f) of Article 6(1) GDPR.
The information processed could be the Facebook name, name, e-mail address or a message. The processing of this personal data is undertaken by Energiequelle GmbH and only following a previous request to disclose your data.
Please note that you are using the Twitter short messaging service offered by EQ under your own responsibility. This applies to the use of interactive functions in particular (e.g. retweet, like).
We will process the data you provide to Twitter, in particular your username and the content published under your account, to the extent that we retweet your tweets or respond to them or even write tweets referring to your account. The data you freely publish and share with Twitter shall thus be included in the EQ communications and made accessible to its followers. The recipients of publications are the general public, and therefore potentially anyone.
IX. Information on the integration of third party services
This website may include third party content, such as videos, map material, RSS feeds or graphics from other websites. This always assumes that the providers of this content (hereinafter referred to as “third party providers”) know the IP address of the user in order to display the content on the browser of that user. We strive only to use content the providers of which only use the IP address to deliver the content. However, we have no control over whether the third party provider saves the IP address, such as for statistical purposes. Where we are aware of this, we shall inform users.
We integrate videos into our website, which are provided via YouTube. When you access these videos, a connection with the provider’s servers will be established in order to display the integrated content in your browser. The provider will receive information about which of our websites you visited. If you are also logged into your user account with this provider, they will associate this connection to your personal user account. To prevent this, you must log out first.
X. Your rights as data subject
Right of access (Article 15 GDPR)
You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed. On request, we shall send you this information in writing.
Right to rectification (Article 16 GDPR)
You have the right to obtain the rectification of inaccurate personal data concerning you and to have incomplete personal data completed.
Right to erasure (‘right to be forgotten’) (Article 17 GDPR)
You have the right to obtain the erasure of personal data concerning you where the statutory conditions under Article 17(1) and (3) GDPR apply.
Right to restriction of processing (Article 18 GDPR)
You have the right to obtain restriction of processing of your data.
Right to object (Article 21 GDPR)
You may object to the processing of personal data by us unless the processing is necessary for the performance of a task carried out for reasons of public interest or for the establishment, exercise or defence of legal claims.
If you wish to exercise your right to object, you can send a written notification by post to the address provided above.
Right to data portability (Article 20 GDPR)
You have the right to data portability, which means the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to transmit those data to another controller.
Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR.
The contact details of the Data Protection Commissioner and for the supervisory authority of your Federal State can be found on the following link:
Withdrawal of consent
If you have given your consent to the collection or use of personal data, you can withdraw this at any time with effect for the future by letter or e-mail.
Please send all information enquiries and objections to data processing to our Data Protection Officer by e-mail to email@example.com or by post to the address provided above.
XI. Security of your data
Our employees are obliged to comply with the requirements and regulations of the GDPR and of the new BDSG when handling data.
We use the latest technical and organisational security measures in order to protect your data against accidental or intentional manipulation, total or partial loss, destruction or unauthorised third party access. The precautions correspond to at least the statutory provisions and are continuously improved in accordance with technological progress.
This website uses SSL encryption for security reasons and to protect the transfer of confidential data. You can recognise an encrypted connection from the address line of the browser beginning with https:// and from the padlock symbol in your browser line. If SSL encryption is activated, the data you transfer to us cannot be read by third parties.