Efficient energy Data Protection Declaration
Thank you for your interest in our website! We take the protection of your personal data very seriously. Below, you will find information about how we handle your personal data which are collected when you visit our website. Your data are processed in accordance with the statutory data protection regulations. If links are contained which point to other websites, we have no influence or control over the linked contents or the data protection terms of that website. We recommend that you check the data protection statements on the linked websites to determine whether, and the extent to which, personal data are collected, processed, used and made accessible to third parties.
If you need further assistance or would like to send us a comment, inquiry or declaration, please contact us at the address, or via one of the other contact possibilities, stated below:
The controller within the meaning of data protection legislation is:
Efficient Energy GmbH
Tel: +49 89-693369-500
Fax: +49 89-693369-8610
Contact details of the data protection officer:
PROLIANCE GmbH / datenschutzexperte.de
data protection officer
80802 Munich, Germany
Our Data Protection Declaration should be simple and self-explanatory for everybody. As a rule, this Data Protection Declaration uses the official terms used in the General Data Protection Regulation (GDPR). The official terms are explained in Article 4 GDPR.
3. Data processing resulting from a visit to our website
When you call up our web pages, it is necessary for technical reasons that data be transmitted to our web server via your internet browser. The following data regarding the communication between your internet browser and our web server are recorded during an established connection:
- Visited domain
- Date and time of the request
- Page from which the file was requested
- Access status (file transmitted, file not found etc.)
- Used web browser and operating system
- IP address of the requesting computer
- Transferred data volume
We collect the listed data to ensure that the website connection can be established smoothly, and to enable convenient usage of our website by its users. Also, the logfile is used to evaluate system security and stability as well as for administrative purposes. The legal basis for the temporary storage of the data, respectively logfiles, is point (f) of Article 6 (1) GDPR.
We may possibly save these data for a short time for reasons of technical security, notably to safeguard against attempted attacks on our web server. Individual persons cannot be inferred on the basis of these data. After a maximum of seven days, the data are rendered anonymous by truncating the IP address at the domain level so that it is no longer possible to establish a reference to individual users. These data are in no way evaluated except for statistical purposes, in which case this is done in anonymised form. These data are not combined with data from other data sources.
4. General data processing on the website
Contact form, contact by email
If you send us inquiries using the contact form or by email, we will save your personal data from the contact form or your email, including your contact details you provide there, in order to handle your inquiry and in case of any follow-up questions. We will not pass on these data under any circumstances without your consent. The legal basis for the processing of the data is our legitimate interest in responding to your inquiry pursuant to point (f) of Article 6 (1) GDPR and possibly point (b) of Article 6 (1) GDPR provided that the objective of your inquiry is to enter into a contract. We will erase the data once your inquiry has been conclusively dealt with, provided that the data are not subject to a statutory or contractual (point (b) of Article 6 (1) GDPR) obligation to retain them.
If you would like to receive the newsletter that is offered on our website and contains regular information about our offers and products, we will need your email address as a requisite item of information. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you our newsletter by email after you have expressly confirmed that you consent to the newsletter’s dispatch. For this, you will firstly be sent an email containing a link via which you can confirm that, in your capacity as owner of the email address concerned, you would like to receive future newsletters. With this confirmation, you grant us your consent under point (a) of Article 6 (1) GDPR to our use of your personal data for the purpose of sending the desired newsletters.
When you subscribe to the newsletter, we save, together with the email address needed for the dispatch and your first and last names, the IP address from which you subscribed to the newsletter, and the date and time of the subscription and confirmation to enable us to reconstruct potential abuse later on.
You can cancel the newsletter at any time via the link embedded in each newsletter, or by sending an email to the competent party stated above. After the cancellation, your email address will be erased from our newsletter distribution list without delay, provided that you have not expressly consented to a continued use of the collected data, or if the continued use of the data is otherwise legally allowed.
Efficient Energy GmbH’s newsletters contain so-called tracking pixels. Tracking pixels are miniature graphics embedded in emails sent in HTML format to enable recording in a logfile and logfile analyses. This enables online marketing campaigns to be statistically evaluated with respect to their success or failure. Based on the embedded tracking pixel, Efficient Energy GmbH can recognise whether, and when, an email was opened by the data subject, and which of the links embedded in the email were called up by the data subject.
Personal data collected by tracking pixels contained in the newsletters are saved and evaluated by the controller to optimise the newsletter’s dispatch, and to better align the contents of future newsletters with the data subjects’ interests. These personal data are not passed on to third parties. Data subjects may at any time withdraw the declaration of consent that they specially granted in this regard by way of the double opt-out procedure. After this withdrawal, the controller will erase the personal data. Efficient Energy GmbH automatically interprets a cancellation of the newsletter subscription as a tacit withdrawal of consent.
6. Web analytics, tracking of advertising
Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”). Google Analytics uses so-called “cookies”. These are text files placed on your computer that enable an analysis of the way you use the website. The information which the cookie generates about your use of this website will generally be transmitted to a server of Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland) , where it will be saved. We only use Google Analytics with IP anonymisation enabled. This means that Google truncates users’ IP addresses within a Member State of the European Union or in other States party to the Agreement on the European Economic Area, thereby ruling out any possibility of inferring a personal identification. Data are processed, in accordance with point (f) of Article 6 (1) GDPR, respectively Section 15 (3) of the German Telemedia Act (Telemediengesetz, TMG), on our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.
Google will use this information on behalf of this website’s operator to evaluate your use of the website, compile reports on website activity, and provide other services relating to website activity and internet usage for the website operator. The IP address that your browser transfers in the framework of Google Analytics will not be combined with other data held by Google. Further details about the terms and conditions of use of Google Analytics, and information about data protection, are available at:
You can prevent the storage of cookies by selecting the appropriate configuration in your browser; please note, however, that, if you do so, you may not be able to use the full functionality of this website. You can also prevent collection of the information regarding your website usage (including your IP address) which is generated by the cookie for Google, as well as the processing of these data by Google, by downloading and installing the browser plugin available at the following link: (http://tools.google.com/dlpage/gaoptout?hl=en).
Disabling Google Analytics
Opt-Out of Google Analytics: Click here to opt-out of Google Analytics
7. Social media plugins
Links to social media
Social medial networks (LinkedIn, Twitter and XING) are integrated into our website as links to the services concerned. Clicking on the integrated text link / image link will forward you to the respective provider’s website. Only once you have been forwarded will user information be transferred to that provider. For details about how these websites process your personal data when you use their services, please refer to the respective data protection policies of the providers you use.
Data protection provisions regarding the deployment and usage of LinkedIn
The controller has integrated components of LinkedIn Corporation into this website. LinkedIn is a web-based social network that enables users with existing business contacts to connect and to make new business contacts. Over 400 million registered people in more than 200 countries use LinkedIn. Thus, LinkedIn is currently the largest platform for business contacts and one of the most visited websites in the world.
With each call to an individual page of this website, which is operated by the controller and contains an integrated LinkedIn component (LinkedIn plugin), the component prompts the data subject’s browser to download an image of this component from LinkedIn. Further information about the LinkedIn plugins are available at https://developer.linkedin.com/plugins. In the course of this technical procedure, LinkedIn is informed of exactly which page of our website is being accessed by the data subject.
If the data subject is simultaneously logged in to LinkedIn, LinkedIn detects with each call to our website by the data subject, and for the entire duration of that stay on our website, which specific page of our website was visited by the data subject. This information is collected by the LinkedIn component and associated with the respective LinkedIn account of the data subject. If the data subject clicks on one of the LinkedIn buttons contained on our website, then LinkedIn assigns this information to the personal LinkedIn user account of the data subject and stores these personal data.
LinkedIn receives information via the LinkedIn component that the data subject has visited our website, provided that the data subject is logged in to LinkedIn at the time of the call to our website; this happens regardless of whether or not the data subject clicks on the LinkedIn component. If the data subject does not wish that such information be transmitted to LinkedIn, this transmission can be prevented by the data subject logging out of his or her LinkedIn account before calling our website.
Data protection provisions regarding the deployment and usage of Twitter
The controller has integrated components of Twitter into this website. Twitter is a multilingual, publicly-accessible microblogging service on which users may publish and spread so-called ‘tweets,’ i.e. short messages that are limited to 280 characters. These short messages are accessible to everyone, including those who are not registered with Twitter. The tweets are also displayed to so-called followers of the user concerned. Followers are other Twitter users who follow a user’s tweets. Furthermore, Twitter allows a wide audience to be addressed via hashtags, links and retweets.
Twitter is operated by Twitter, Inc. of 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. With each call to an individual page of this website, which is operated by the controller and contains an integrated Twitter component (Twitter button), the internet browser running on the data subject’s information technology system is automatically prompted by the Twitter component to download a display of the corresponding Twitter component from Twitter. Further information about the Twitter buttons is available at https://about.twitter.com/de/resources/buttons. In the course of this technical procedure, Twitter is informed of exactly which page of our website is being accessed by the data subject. The purpose of integrating the Twitter component is to enable our users to disseminate the contents of this website, introduce it to the digital world and increase the number of website visitors.
If the data subject is simultaneously logged in to Twitter, Twitter detects with each call to our website by the data subject, and for the entire duration of that stay on our website, which specific page of our website was visited by the data subject. This information is collected by the Twitter component and associated by Twitter with the respective Twitter account of the data subject. If the data subject clicks on one of the Twitter buttons integrated into our website, then Twitter assigns this data and information to the personal Twitter user account of the data subject and stores and processes these.
Twitter receives information via the Twitter component that the data subject has visited our website, provided that the data subject is logged in to Twitter at the time of the call to our website; this happens regardless of whether or not the data subject clicks on the Twitter component. If the data subject does not wish that such information be transmitted to Twitter, this transmission can be prevented by the data subject logging out of his or her Twitter account before calling our website.
Data protection provisions regarding the deployment and usage of XING
The controller has integrated components of XING into this website. XING is a web-based social network that enables users with existing business contacts to connect and to make new business contacts. The individual users can create a personal profile of themselves at XING. Businesses can, for example, can create company profiles or publish jobs vacancies on XING.
XING is operated by XING SE of Dammtorstraße 30, 20354 Hamburg, Germany.
With each call to an individual page of this website, which is operated by the controller and contains an integrated XING component (XING plugin), the XING component automatically prompts the internet browser running on the data subject’s information technology system to download a display of the corresponding XING component from XING. Further information about XING plugins is available at https://dev.xing.com/plugins. In the course of this technical procedure, XING is informed of exactly which page of our website is being accessed by the data subject. If the data subject is simultaneously logged in to XING, XING detects with each call to our website by the data subject, and for the entire duration of that stay on our website, which specific page of our website was visited by the data subject. This information is collected by the XING component and associated by XING with the respective XING account of the data subject. If the data subject clicks on one of the XING buttons integrated into our website, such as the “Share” button, then XING assigns this information to the personal XING user account of the data subject and stores these personal data.
XING receives information via the XING component that the data subject has visited our website, provided that the data subject is logged in to XING at the time of the call to our website; this happens regardless of whether or not the data subject clicks on the XING component. If the data subject does not wish that such information be transmitted to XING, this transmission can be prevented by the data subject logging out of his or her XING account before calling our website.
The data protection policies published by XING, which are available at https://www.xing.com/privacy, provide information on the collection, processing and use of personal data by XING. In addition, XING has published privacy notices for the XING “Share” button at https://www.xing.com/app/share?op=data_protection.
Data protection provisions regarding the deployment and usage of YouTube
The controller has integrated components of YouTube into this website. YouTube is an Internet video portal that allows video publishers to upload video clips at no charge, and other users to view, review and comment on them, also at no charge. YouTube allows publication of all kinds of videos, making movies and TV broadcasts, as well as music videos, trailers, and users’ self-produced videos accessible via the Internet portal.
YouTube is operated by YouTube, LLC of 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. With each call to an individual page of this website, which is operated by the controller and contains an integrated YouTube component (YouTube video), the YouTube component automatically prompts the internet browser running on the data subject’s information technology system to download a display of the corresponding YouTube component from YouTube. Further information about YouTube is available at https://www.youtube.com/intl/en/yt/about/. In the course of this technical procedure, YouTube and Google are informed of exactly which page of our website is being accessed by the data subject.
If the data subject is simultaneously logged in to YouTube, YouTube detects, with every call to a web page containing a YouTube video, which specific page of our website was visited by the data subject. This information is collected by YouTube and Google and associated with the respective YouTube account of the data subject.
YouTube and Google receive information via the YouTube component that the data subject has visited our website, provided that the data subject is logged in to YouTube at the time of the call to our website; this happens regardless of whether or not the data subject clicks on a YouTube video. If the data subject does not wish that such information be transmitted to YouTube or Google, this transmission can be prevented by the data subject logging out of his or her YouTube account before calling our website.
YouTube’s data protection policies, which are available at https://policies.google.com/privacy?hl=en&gl=en, provide information about the collection, processing and use of personal data by YouTube and Google.
Sometimes cookies allow simplification of the website processes by saving settings (e.g. storing options which have already been selected). If personal data are processed by individual cookies which we have implemented, the data are processed, either in accordance with point (b) of Article 6 (1) GDPR for implementation of contract, or in accordance with point (f) of Article 6 (1) GDPR for the purpose of our legitimate interests in the best-possible functionality of the website and a customer-friendly and effective organisation of the website visit.
You can configure your browser to inform you when cookies are being placed, and decide in each case whether to accept them, or whether to reject cookies only in certain cases or in general, and to enable the automatic deletion of cookies when the browser is closed. Information on how to manage the cookie settings is available for the respective browsers at the following links.
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
You can also individually manage the cookies of many companies and features used for advertising. To do this, use the corresponding user tools available https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices.
Most browsers also offer a so-called “Do-Not-Track” function with which you can specify that you do not want to be “tracked” by websites. When this feature is enabled, your browser tells advertising networks, websites and applications that you do not want to be tracked for behaviour-based advertising and the like. Information and instructions on how to edit this function are available from the links below, depending on your browser’s provider:
Mozilla Firefox: https://www.mozilla.org/de/firefox/dnt/
Internet Explorer: https://support.microsoft.com/de-de/help/17288/windows-internet-explorer-11-use-do-not-track
Please note that disabling cookies could impair the full functioning of this website.
9. Google Maps
This website uses Google Maps to show a location plan. Google Maps is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. By using this website, you declare your consent to the collection, processing and usage of the data which are automatically collected by Google Inc., its representatives and third parties, or which you enter yourself.
10. Forwarding of data, recipients
Your personal data will not be forwarded to third parties except:
– if we have explicitly indicated in the description of the respective data processing that they will be forwarded;
– if you have granted your explicit consent to their forwarding in accordance with point (a) of Article 6 (1) GDPR;
– if the forwarding is necessary for the establishment, exercise or defence of legal claims in accordance with point (f) of Article 6 (1) and there is no reason to believe that you have an overriding legitimate interest in the non-forwarding of your data;
– if a legal obligation exists for the forwarding, in accordance with point (c) of Article 6 (1) GDPR; or
– if forwarding is necessary for the implementation of a contractual relationship with you, in accordance with point (b) of Article 6 (1) GDPR.
For rendering our services, we also avail ourselves of external service providers which we have diligently selected and charged in writing. With some of these, we enter into commissioned processing agreements, in accordance with Article 28 GDPR, as necessary: these are service providers for web hosting, sending emails, and the servicing and maintenance of our IT systems etc. These are bound by our instructions and regularly audited by us. The service providers will not forward these data to third parties.
11. Duration of storage of personal data
The storage period for personal data is determined by the pertinent statutory retention periods (e.g. as prescribed under commercial and tax law). The relevant data will be routinely erased after expiry of the deadline concerned. To the extent that data are needed for implementation or initiation of contract, or we have a legitimate interest in continued storage, the data will be erased when they are no longer required for these purposes, or you exercise your right to withdraw or object.
12. Your rights
This section contains information on the rights that, under current data protection law, data subjects have vis-à-vis the controller regarding the processing of their personal data:
- Under Article 15 GDPR, to demand access to your personal data which we process. In particular, you may demand access to the purposes of the processing, categories of personal data concerned, categories of recipient to whom your personal data have been or will be disclosed, period for which the personal data will be stored, the existence of the right to request rectification or erasure of personal data or restriction of processing, or to object to such processing, the right to lodge a complaint, the source of the data provided that they were not collected by us, the existence of automated decision-making, including profiling, and possibly meaningful information about the logic involved;
- Under Article 16 GDPR, the right to obtain without undue delay the rectification of inaccurate personal data and completion of incomplete personal data which we store;
- Under Article 17 GDPR, to obtain the erasure of your personal data which we store, to the extent that processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
- Under Article 18 GDPR, to obtain restriction of processing of your personal data which we store to the extent that you contest the accuracy of the personal data, the processing is unlawful but you oppose the erasure of the personal data and we no longer need the data, but you need them for the establishment, exercise or defence of legal claims, or you have objected to processing pursuant to Article 21 GDPR;
- Under Article 20 GDPR, to receive, in a structured, commonly used and machine-readable format, your personal data which you provided to us or the right to obtain transmission of those data to another controller;
- Under Article 77 GDPR, to lodge a complaint with a supervisory authority. In general, you can seek the supervisory authority competent for the regional state of our aforementioned place of business, or possibly for your place of habitual place of residence or place of work.
- Under Article 7 (3) GDPR, to withdraw consent granted: you have the right, at any time, to withdraw your once granted consent to the processing of your data, with effect for the future. If consent is withdrawn, we will erase the data subject’s data without delay, provided that further processing cannot be justified by a legal basis that requires no consent. The withdrawal of consent does not prejudice the lawfulness of the processing which occurred by virtue of the consent before its withdrawal.
- If your personal data are processed on the basis of a legitimate interest in accordance with point (f) of Article 6 (1) GDPR, you have the right under Article 21 GDPR to object to the processing of your personal data on grounds relating to your particular situation. If the objection to the processing of personal data is directed against direct marketing, you have a general right to object, without having to state details of a particular situation.
If you would like to exercise your right of withdrawal or objection, it suffices to send us an email to: firstname.lastname@example.org.
13. Changes to our Data Protection Declaration
We reserve the right to amend and / or update this Data Protection Declaration, if necessary in accordance with the latest data protection guidelines. In this way, it can be revised to fulfil the latest legal requirements and take service changes into account, e.g. when new services are launched. The wording which is valid at the time of your visit applies.
Wording of this Data Protection Declaration, as at: March 2019