The data protection statement below shows you what personal data we process and how.
So you know who you can turn to about your data, first let us tell you who is legally responsible for processing it and who you should contact specifically in connection with your interests.
Data protection officer
c/o con|energy ag
Each time you access a website, your Internet browser sends our web server information automatically for technical reasons ('protocol data'). We save some of this information in log files, such as
We only analyse protocol data in principle to rectify problems when operating our website or sorting out security incidents.
As well as protocol data, we may also need to gather personal data to rectify problems or as evidence in the event of security incidents. We then process protocol data as allowed in law.
We process it under Art. 6 para. 1(f) GDPR; our interest is in providing, safeguarding and optimising the website.
You can contact us using the contact form. Some of the data entered there is required to enable us to communicate with you and deal with what is concerning you. These are marked as mandatory fields. Other data you send us helps us talk to you personally or deal with things more promptly.
In order to guarantee the safety of your data during the transfer process, we use state-of-the-art encryption procedures (e.g. SSL) via HTTPS.
We process this under Art. 6 para. 1 (b) GDPR.
You can ask to be added to our press distribution list using the contact form. Some of the data input there are required to facilitate communication and to process your enquiry. These data are labelled as mandatory fields. Other data which you provide us with will allow us to communicate with you on a more personal level, or allow us to process your enquiry in a better or more efficient way.
These processes are based on Art. 6 1a) GDPR.
You can use the application form both to apply of your own accord and apply for one of the situations vacant posted at our company. We need the data you input here to start establishing an employment relationship, communicate about it and process your case.
We process this data under Art. 6 para. 1 (b) GDPR in conjunction with § 26 para. 1 BDSG [Federal Data Protection Law].
We use contact and communications data and other relevant personal data of our suppliers and customers insofar as they or their staff are natural persons. We process this data to handle business dealings, communications and keep contacts updated.
We process it under Art. 6 para. 1 (f) GDPR, we have a legitimate interest in handling commercial collaboration and updating contacts.
These processes are based on Art. 6 1a) GDPR.
We have a newsletter you can subscribe to on our website. We've flagged the data we need to send you it; there is also other data you can send us voluntarily, so we can write to you personally or coordinate content better. We request your consent to processing this data in the course of the subscription procedure citing this data protection statement.
We use the double opt-in method to check that the subscription to the newsletter has actually been made by someone who has an e-mail address. The e-mail address owner cannot subscribe to the newsletter until they have activated it expressly by clicking on the link from the confirmation e-mail. We record conducting the individual phases of the double opt in procedure as evidence.
If you register to subscribe to our newsletter and so agree to us sending it to you, we will only use your data to send you it. You can revoke your consent at any time. You'll find a link you can use to do this in each newsletter. We will note that you have unsubscribed to our newsletter in our database.
Data will be deleted as soon as it is no longer required for the purpose it was gathered for. We save users' e-mail addresses for as long as they subscribe actively to our newsletter.
Processing this is allowed under Art. 6 para. 1 (a) GDPR.
Cookies cannot be used to start software or copy viruses to a computer. Cookies can only be read by the web server which sent them.
We will not pass the information in cookies on to any third parties without your express consent. You can also view our website without using cookies. Most Internet browsers are set to accept cookies. To stop your Internet browser using cookies, you can (1) reject using cookies when accessing our website via the cookie layer (if available) or (2) deactivate using cookies via your Internet browser settings. To find out how to deactivate and/or delete cookies in your browser, use your Internet browser's help function. Please note, deactivating/deleting cookies may mean individual functions of our website may no longer work as expected. Cookies which may be needed for some of our website functions are set out below. Also, deactivating/deleting cookies only works on the Internet browser you are using at the time. Which means you will need to deactivate/delete cookies for other Internet browsers all over again.
Cookies we use for certain functions, non-personalised:
Cookies we use for certain functions, personalised:
We save this data until each cookie's life expires or until you delete them.
We can process this under Art. 6 para. 1 (f) GDPR. Our interest is in optimising our website constantly and making it more user-friendly.
This website uses Google Analytics, a web analysis service of Google Inc, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; 'Google'). We use it in 'Universal Analytics' mode. That lets us allocate data, sessions and interactions across a number of devices a pseudonym user ID and so analyse how users are using different devices.
You can stop cookies being saved by setting your browser software accordingly; but we must point out that you may not then be able to use all this website's functions to the full. You can also prevent cookies recording data on how you use the website (incl. your IP address) to Google and prevent Google processing this data by downloading and installing the Browser Add-on. Opt-out cookies prevent your data being recorded when you visit this website in future. To stop Universal Analytics recording via different devices, you need to use the opt-out on all the systems you are using. To get to the opt-out button, click here.
Google Maps This site uses the Google Maps service via an API. This is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. You need to save your IP address to use Google Maps functions. This information is usually sent to a Google server in the USA and saved there. This site's provider has no control over how this data is sent. We use Google Maps to show what we offer online attractively and help you find the places we mention on the website. This is a legitimate interest as defined in Art. 6 para. 1 (F) GDPR. To find out more about how we deal with users' data, see Google's data protection statement: www.google.de/intl/de/policies/privacy/.
To set up and operate our website, we work with service providers who we send personal data in some cases:
We only send your data to receivers insofar as we have to perform a contract with you or have a legitimate interest in forwarding your data or if you have consented to us forwarding it.
These recipients include service providers and other companies in our group.
We also send personal data to recipients who are based outside the EEA in what are known as third states. Before passing it on, we then ensure either that the recipient uses a reasonable level of data protection (e.g. because the European Commission has decided that country is reasonable or has agreed EU standard terms and conditions of contract with the recipient) or that you have consented to its being sent.
To find out more, particularly on the measures we take, you can consult our data protection officer.
Insofar as we need your personal data to establish and conduct business dealings and the contractual or statutory obligations this involves, you must provide this data, so we can meet our obligations to perform or legal obligations. Unless you provide your data, we may not be able to provide our services any more or not duly or completely.
If we save your personal data, we only do so for a limited period and only for as long as is necessary. In principle, we delete your data when we no longer need it for the purpose for which we gathered it or when the law requires us to delete it for other reasons.
Insofar as the law requires us to retain data for a longer period, particularly to meet commercial and tax law retention periods, we save data for from two to 10 years.
We may also be required to save data for other reasons in law, such as for evidential purposes for as long as the limitation rules applicable last. These periods are generally between two and 30 years.
The rights you have in respect of your personal data by law are as follows: You can apply to our data protection officer, even if you'd like to know more about what these rights mean individually. As the legal details are highly complex, we will give you the main details of your rights below. Please let us know in what form you would like the information. If you don't say in what form you'd like it, we will usually answer your queries in the same form as that in which you made them. You will hear back from us within a month. If enquiries are obviously unfounded or excessive, we may demand reasonable payment or refuse to answer them.
You have the right to ask whether we process your personal data or not. If we process your personal data, we will tell you what specific data it is and give you further information.
You have the right to demand that we correct your data insofar as it is incorrect, inaccurate and/or incomplete; the right to correct it also includes the right to complete it by making additional statements or communications.
You have the right to demand that we delete your personal data if we have no further reason to keep it.
You have the right to have processing your personal data restricted to a given extent in given cases.
You have the right in some cases to demand that we surrender the data concerning you in a commonly used electronic machine-readable form.
The right to data portability includes the right to have data transmitted to another controller; we will therefore transfer data directly to a controller you nominate or will nominate on demand, insofar as technically possible. The right to transmit data applies only to data you provided and assumes that it is processed based on consent or to perform a contract and is carried out using automated procedures.
Where personal data is processed to perform tasks in the public interest (Art. 6 para. 1 (e) GDPR) or exercise legitimate interests (Art. 6 para 1 (f) GDPR), you can object to personal data concerning you being processed with effect for the future at any time if there is no reason to continue processing it.
(Please note, you do not have the right to object in law if data is processed based on consent. But as you have a right to revoke your consent with effect for the future at any time if data is processed with your consent, you can achieve an effect comparable with objecting by revoking it.)
If you consented to us processing your personal data, you can revoke that consent at any time with effect for the future without giving any reasons. Please contact the contact to whom you gave your consent or directly to our data protection officer.
You have the right to complain to the competent supervisory authority about your personal data being processed, Art. 77 GDPR.