Privacy Statement

Hello and thank you for your interest in our website. Among other things, we take your rights to privacy, data protection and informational self-determination very seriously. Therefore we would like to inform you about the following:

 

Who are we?

Energy Brainpool GmbH & Co. KG, represented by the managing director Dipl.-Ing. Tobias Federico, Brandenburgische Str. 86/87, 10713 Berlin, E-Mail: kontakt(at)energybrainpool.com, Tel.: +49 30 76 76 54 – 10.

Who is responsible for data protection (data protection officer)?

Everyone is responsible for the topic of data protection. In addition, we have decided to appoint a data protection officer. To ensure its independence, we have appointed an external consultant. This is the lawyer Petra von Notz. You are welcome to contact her at any time. You can reach her as follows:

Petra von Notz
kontakt(at)energybrainpool.com
 

We collect data from you. Which one? Where from? How long? And are we even allowed to do that? 

You can find a clear answer to these questions in the following table:

Data categories	Sources	Purpose	Storage time	Legal basis
Surname, first name, title, address, e-mail address, telephone, fax, comments (notes on dealing with the person concerned), reference number, meeting content, type of contact, information on assignment to projects, list of participants (for training measures), data on projects/orders, payment data and other accounting data, customer ID, supplier ID in connection with the name of the contact person, contact person ID	Your information, if applicable the information of your company	Establishment, performance and termination of the obligation	until expiry of the retention period, usually 10 years after the end of the contractual relationship	Article 6(1)(b) GDPR

Are we obliged to collect this data? What happens if we do not collect this information?

A legal obligation to collect this data does not yet exist in the application phase. However, it is possible that the absence of some or all data may occasionally lead to inquiries.

Who do we send the data to? And: Are the data leaving the European Union or the European Economic Area?

We may store your data with external cloud service providers who may also be based outside the European Economic Area, and data may be transmitted to them. We carefully select and review these service providers and contractually bind them in accordance with legal requirements. Such an assignment does not conflict with the existing third country status, as we only work with providers that are listed in the PrivacyShield framework and/or commit to the EU standard contract clauses.

What rights do you have?

You have several rights. You have the right to information about the personal data processed to your person as well as to correction or deletion, to restriction of the processing, to objection to the processing as well as to data transferability. In addition, you have the option to complain about us to the supervisory authority responsible for us. We would like to point out politely that these rights may be subject to certain conditions that we will insist on.

We collect data from you. Which one? Where from? How long? And are we even allowed to do that? 

You can find a clear answer to these questions in the following table:

Data categories	Sources	Purpose	Storage time	Legal basis
Surname, first name, title, address, e-mail address, telephone, fax, comments (notes on dealing with the person concerned), reference number, meeting content, type of contact, information on assignment to projects, list of participants (for training measures), data on projects/orders, payment data and other accounting data, customer ID, supplier ID in connection with the name of the contact person, contact person ID	Your information, if applicable the information of your company	Establishment, performance and termination of the obligation	until expiry of the retention period, usually 10 years after the end of the contractual relationship	Article 6(1)(b) GDPR

Are we obliged to collect this data? What happens if we do not collect this information?

A legal obligation to collect this data does not yet exist in the application phase. However, it is possible that the absence of some or all data may occasionally lead to inquiries.

Who do we send the data to? And: Are the data leaving the European Union or the European Economic Area?

We may store your data with external cloud service providers who may also be based outside the European Economic Area, and data may be transmitted to them. We carefully select and review these service providers and contractually bind them in accordance with legal requirements. Such an assignment does not conflict with the existing third country status, as we only work with providers that are listed in the PrivacyShield framework and/or commit to the EU standard contract clauses.

What rights do you have?

You have several rights. You have the right to information about the personal data processed to your person as well as to correction or deletion, to restriction of the processing, to objection to the processing as well as to data transferability. In addition, you have the option to complain about us to the supervisory authority responsible for us. We would like to point out politely that these rights may be subject to certain conditions that we will insist on.

If you use our websites (https://www.energybrainpool.com/en.html, https://blog.energybrainpool.com/en/ and https://symposium.energybrainpool.com/) for information purposes only, i.e. if you do not register as a user or otherwise provide information, we collect the following data from you: IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transmitted in each case, website from which the request comes, browser, operating system and its interface, language and version of the browser software, server location. We receive this data via cookies and directly from your browser. The purpose of this processing is the provision of our website as well as the statistical evaluation. The legal basis for this is Article 6(1), first sentence, lit. f GDPR, according to which the processing of personal data is also possible without the data subject's consent if the processing is necessary to safeguard the legitimate interests of the data controller or a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular if the data subject is a child. The aforementioned purposes are in our interest. If we use cookies, we refer to our explanations under "How do we use cookies on our websites".

When you communicate with us on our website (www.energybrainpool.com/en/services/contact.html) via our contact field, we collect the following data as mandatory fields: First name, last name, company, e-mail address and your message as well as optional position, street and house number, postcode, city, country and telephone number. When you communicate with us on our symposium website (symposium.energybrainpool.com/kontakt/) via our contact field, we collect the following data as mandatory fields: Surname, first name, e-mail, subject and message as well as optional salutation, title and telephone. Only you know the reasons for contacting us; the reaction to this immediately describes the purpose of the processing. Where a specific obligation is involved, whether in connection with the initiation, implementation or termination, the legal basis for processing is Article 6(1)(b) GDPR. In this case we store the data until the end of the legal retention period. In all other cases, the legal basis is Article 6(1), first sentence f, GDPR, which allows the processing of personal data without the data subject's consent if processing is necessary to safeguard the legitimate interests of the data controller or a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular where the data subject is a child. Communication outside a contractual relationship is in our mutual interest. We store your data until the purpose resulting from the legitimate interest has been fulfilled

1) With your consent you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent. The legal basis is then your consent in accordance with Article 6 paragraph 1 sentence 1 lit. a GDPR. We store the data until your consent is revoked.

(2) We use the double opt-in procedure to subscribe to our newsletters. This means that after your registration we will send you an e-mail to the specified e-mail address in which we ask you to confirm that you would like the newsletter to be sent. If you do not confirm your subscription to the website newsletter or blog newsletter within 27 hours, your information will be deleted. In addition, we store your IP addresses and the time of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.

(3) For the registration of the website newsletter we process the following data: Salutation, title, first name, surname, company, position, e-mail. For the registration of the blog newsletter we process the following data: First name, last name, company, e-mail.

(4) You can revoke your consent to the sending of the newsletter at any time and cancel the newsletter. You can declare your revocation by clicking on the link provided in every newsletter e-mail, via the form of the website newsletter: www.energybrainpool.com/en/services/newsletter.html, or via the form of the blog newsletter: blog.energybrainpool.com/en/manage-subscriptions/ or by e-mail to kontakt@energybrainpool.com or by sending a message to the contact details given in the imprint.

(5) We would like to point out that we evaluate your user behaviour when sending the newsletter. For this analysis, the e-mails sent contain so-called web beacons or tracking pixels, which represent single-pixel image files stored on our website. For the analysis we link the data mentioned in paragraph 3 and the web beacons with your e-mail address and an individual ID. Links received in the newsletter also contain this ID.

With the data obtained in this way, we create a user profile to tailor the newsletter to your individual interests. We record when you read our newsletters, which links you click on in them and deduce your personal interests.

You can object to this tracking at any time by clicking on the separate link provided in each e-mail or by informing us of another contact method. The information is stored for as long as you have subscribed to the newsletter. After logging off, they are deleted.

Such tracking is also not possible if you have deactivated the display of images in your e-mail program by default. In this case the newsletter will not be displayed completely and you may not be able to use all functions. If you display the images manually, the above tracking takes place.

(6) We use the MailChimp tool provided by The Rocket Science Group LLC, Georgia, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, Georgia 30308 to send the website newsletter. Please note that this provider is based outside the European Economic Area, namely in the USA. We have carefully selected it, contractually bound to it and review it regularly. The assignment was also permissible in view of the third country status, as the provider is listed in the PrivacyShield framework. More information about the provider can be found at mailchimp.com/legal/privacy. For sending the blog newsletter we use the plugin newsletter of Tribulant Software, 6 Tiptol Ave, Safari Gardens, Rustenburg, North-West, South Africa 0299. We have carefully selected the plugin. Newsletter of the provider Tribulant is a freeware, which is maintained and further developed by regular updates. More information about the provider can be found at https://tribulant.com/policies/privacy/.

When you register for a seminar or other event via our seminar calendar on our website (https://www.energybrainpool.com/en.html), we collect the following data as mandatory fields: First name, last name, company, street / house number, postcode / city, country, e-mail address, and your telephone number as well as optional position, sales tax ID and your message. When you register for an event via our symposium website (https://symposium.energybrainpool.com), we collect the following data as mandatory fields: Surname, first name, company, street, house number, postcode, city, e-mail and your telephone number. As well as optional salutation, title, position, sales tax ID and your message. The purpose of the processing of the data is your participation in our seminars and other events. We will inform you about the seminar or event for which you have registered. As far as it concerns a concrete obligation, whether in connection with the initiation, implementation or termination, the legal basis for the processing is Article 6 paragraph 1 letter b GDPR. In this case we store the data until the end of the legal retention period. In all other cases, the legal basis is Article 6(1), first sentence f GDPR, which allows the processing of personal data without the data subject's consent if the processing is necessary to safeguard the legitimate interests of the data controller or a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular where the data subject is a child. Communication outside a contractual relationship is in our mutual interest. We store your data until the purpose resulting from the legitimate interest has been fulfilled.

 

When using the Cardeleine app (exchange of (digital) business cards), we collect the following data as mandatory fields: First name, surname, company, street/number, postcode/city, country, email address and your telephone number as well as optional position and your additional info. The Cardeleine app is operated by Blue Performance GmbH, Plankenhofstraße 9, 81929 Munich, Germany.

Only you know the reasons for contacting us; the response to this immediately describes the purpose of the processing. Insofar as it concerns a specific contractual obligation, whether in connection with the initiation, performance or termination, the legal basis for the processing is Article 6(1)(b) GDPR. In this case, we store the data until the end of the statutory retention period. In all other cases, the legal basis is Article 6 paragraph 1 sentence 1 lit. f GDPR, according to which the processing of personal data is also possible without the consent of the data subject if the processing is necessary to safeguard the legitimate interests of the data controller or third parties, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, prevail, in particular if the data subject is a child. Communication outside a contractual relationship is in our mutual interest. We store your data until the purpose resulting from the legitimate interest has been fulfilled.

 

When you download a white paper from our website (www.energybrainpool.com/en.html) we collect the following data as mandatory fields: First name, last name, company and optionally: position. Where a specific obligation is involved, whether in connection with the initiation, implementation or termination, the legal basis for processing is Article 6(1)(b) GDPR. In this case we store the data until the end of the legal retention period. In all other cases, the legal basis is Article 6(1), first sentence f, GDPR, which allows the processing of personal data without the data subject's consent if processing is necessary to safeguard the legitimate interests of the data controller or a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular where the data subject is a child. Communication outside a contractual relationship is in our mutual interest. We store your data until the purpose resulting from the legitimate interest has been fulfilled.

If you leave a comment in our blog (blog.energybrainpool.com/en/) we collect the following data as mandatory fields: Name and e-mail address and optionally: website and your comment. Where a specific obligation is involved, whether in connection with the initiation, implementation or termination, the legal basis for processing is Article 6(1)(b) GDPR. In this case we store the data until the end of the legal retention period. In all other cases, the legal basis is Article 6(1), first sentence f, GDPR, which allows the processing of personal data without the data subject's consent if processing is necessary to safeguard the legitimate interests of the data controller or a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular where the data subject is a child. Communication outside a contractual relationship is in our mutual interest. We store your data until the purpose resulting from the legitimate interest has been fulfilled.

(1) Our website (https://www.energybrainpool.com/en.html) and our blog (https://blog.energybrainpool.com/en/) use Google Analytics, a web analysis service provided by Google Inc. "("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, Google will reduce your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services associated with website and Internet use. The legal basis is Article 6(1), first sentence f GDPR, Article 6(1), first sentence f GDPR, according to which the processing of personal data is also possible without the data subject's consent if processing is necessary to safeguard the legitimate interests of the data controller or a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular if the data subject is a child. It is our legitimate business interest to evaluate the user behaviour on this website. Your interests are protected by your avoidance possibilities, which we describe later and the anonymization. Furthermore, we have concluded an order processing agreement with the provider and thus ensured our right to issue instructions to the provider. We delete the data after 14 months at the latest.

(2) The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

(3) You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en. You can also prevent the collection by Google Analytics by clicking on the following link: An opt-out cookie is set to prevent future collection of your data when you visit this website: Disable Google Analytics.

(4) These two websites use Google Analytics with the extension "_anonymizeIp()". As a result, IP addresses are further processed in abbreviated form, so that a personal relationship can be ruled out. As far as the data collected about you is personal, it will be excluded immediately and the personal data will be deleted immediately.

(5) We use Google Analytics to analyse and regularly improve the use of our websites. We can improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

(6) Third party information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: https://www.google.com/analytics/terms/us.html, privacy policy: support.google.com/analytics/answer/6004245, and privacy policy: https://policies.google.com/privacy?hl=en&gl=de.

Our symposium website (https://symposium.energybrainpool.com/) uses so-called web fonts provided by Google to uniformly display fonts. When you call up a page, your browser loads the required Web fonts into your browser cache to display texts and fonts correctly.

To do this, the browser you are using must connect to Google's servers. This gives Google knowledge that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

If your browser does not support web fonts, a default font is used by your computer.

Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.

On our website (https://www.energybrainpool.com) and in our blog (https://blog.energybrainpool.com/) the Google Web Fonts are locally stored on our server.

This page (https://symposium.energybrainpool.com) uses Adobe Typekit fonts. Your web browser loads the required web fonts to display texts and fonts correctly. For this purpose, the browser you are using must connect to the Adobe servers. This tells Adobe that your IP address has been used to access our website.

The use of Adobe Typekit Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If your browser does not support web fonts, a default font is used by your computer. For more information, please see Typekit's privacy policy, which you can access here: www.adobe.com/de/privacy/policies/typekit.html

(1) Our blog (https://blog.energybrainpool.com/en/) uses the internal Wordpress plugin WP Statistics to analyze and regularly improve the use of our website. We can improve our offer and make it more interesting for you as a user. We use the plugin to evaluate visitor access statistically and anonymously.

(2) We use an option of the plugin to replace the IP addresses in the database with generated hash values. IP addresses anonymized in this way cannot be restored at a later date.

(3) More information from the third party provider can be found here: Veronalabs.com

(4) Our blog (blog.energybrainpool.com/en/) also stores some user agent data and uses cookies. This information is used to provide a more personalised experience and to track your whereabouts on our website in accordance with the basic European Data Protection Regulation. If you decide against future tracking, a cookie is set up in your browser which stores this selection for one year. Agree, deny.

(5) The legal basis is Article 6 (1), first sentence f GDPR, Article 6 (1), first sentence f GDPR, according to which the processing of personal data is also possible without the data subject's consent if the processing is necessary to safeguard the legitimate interests of the data controller or a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular if the data subject is a child. It is our legitimate business interest to evaluate the user behaviour on this website. Your interests are protected by your avoidance possibilities, which we describe here. We delete the data after 14 months at the latest.

(1) We currently use the following social media plug-ins: Twitter, Xing, LinkedIn. We use the so-called two-click solution in our blog (https://blog.energybrainpool.com/en/) and on our symposium website (https://symposium.energybrainpool.com/kontakt/). This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the plug-in by the marking on the box above its initial letter or the logo. We offer you the possibility to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it, the plug-in provider receives the information that you have accessed the corresponding website of our online offer. In addition, the data referred to in paragraph 3 shall be transmitted. In the case of Xing, the IP address will be made anonymous immediately after collection, according to the provider in Germany. By activating the plug-in, personal data is transferred from you to the respective plug-in provider and stored there (for US providers in the USA). Since the plug-in provider collects data mainly via cookies, we recommend that you delete all cookies before clicking on the grayed-out box using your browser's security settings. On our website (https://www.energybrainpool.com/en.html) we only use links that do not track any data.

(2) We have no influence on the data collected and data processing processes, nor are we aware of the full extent of data collection, the purposes of processing, the storage periods. We also have no information on the deletion of the data collected by the plug-in provider.

(3) The plug-in provider stores the data collected about you as user profiles and uses these for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation takes place in particular (also for not logged in users) for the representation of demand-fair advertisement and in order to inform other users of the social network about your activities on our website. You have a right of objection to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Through the plug-ins we offer you the possibility to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user.

(4) The data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected with us will be directly assigned to your existing account with the plug-in provider. If you click the activated button and, for example, link the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. with. We recommend that you log out regularly after using a social network, especially before activating the button, as this way you can avoid being assigned to your profile with the plug-in provider.

(5) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers notified below. They will also provide you with further information about your rights in this regard and setting options to protect your privacy.

(6) The legal basis is Article 6(1), first sentence f GDPR, Article 6(1), first sentence f GDPR, according to which the processing of personal data is also possible without the data subject's consent if processing is necessary to safeguard the legitimate interests of the data controller or a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular if the data subject is a child. Our legitimate business interest is to give you the opportunity to voluntarily interact with us on social networks, as described here.

(7) Addresses of the respective plug-in providers and URL with their data protection information:

a) Twitter, Inc. 1355 Market St, Suite 900, San Francisco, California 94103, USA; twitter.com/en/privacy. Twitter has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.
b) Xing AG, Gänsemarkt 43, 20354 Hamburg, Germany; privacy.xing.com/en/privacy-policy.
c) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; https://www.linkedin.com/legal/privacy-policy. LinkedIn has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

(1) We have integrated YouTube videos into our online offer, which are stored on www.youtube.com and can be played directly from our website. These are all integrated in the "extended data protection mode", i.e. no data about you as a user will be transmitted to YouTube if you do not play the videos. Only when you play the videos will the data referred to in paragraph 2 be transmitted. We have no influence on this data transmission.

(2) Playing a video on the website informs YouTube that you have accessed the corresponding subpage of our website. In addition, the data referred to in paragraph 3 shall be transmitted. This is independent of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as user profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation takes place in particular (even for unlogged-in users) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

(3) Further information on the purpose and scope of data collection and processing by YouTube can be found in the data protection declaration. There you will also find further information about your rights and setting options to protect your privacy: policies.google.com/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

(4) The legal basis is Article 6(1), first sentence f GDPR, Article 6(1), first sentence f GDPR, according to which the processing of personal data is also possible without the data subject's consent if processing is necessary to safeguard the legitimate interests of the data controller or a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular if the data subject is a child. Here we refer to our interest in direct advertising in accordance with ErwG 47 a.E.GDPR.

(1) On this website (https://symposium.energybrainpool.com) we use the offer of Google Maps. This allows us to display interactive maps directly on the website and enables you to conveniently use the map function.

(2) By visiting the website, Google receives information that you have called up the corresponding subpage of our website. In addition, the data referred to in paragraph 3 shall be transmitted. This is regardless of whether Google provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation takes place in particular (even for unlogged-in users) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

(3) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the data protection declarations of the provider. There you will also find further information about your rights in this regard and setting options for the protection of your privacy: policies.google.com/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

(4) The legal basis is Article 6(1), first sentence f GDPR, Article 6(1), first sentence f GDPR, according to which the processing of personal data is also possible without the data subject's consent if processing is necessary to safeguard the legitimate interests of the data controller or a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular if the data subject is a child. Here we refer to our interest in direct advertising in accordance with ErwG 47 a.E. GDPR. We delete the data as soon as the purpose has ceased to exist, at the latest when you opt against the processing.

On our website (www.energybrainpool.com) you can request a free test delivery of the spot price forecast via fax using a form. We collect the following data from you: Form of address, title, surname, first name, company, department, street, postcode, city, country, telephone, e-mail, date, signature and whether you are interested in other products and services of Energy Brainpool (in-house training and/or fundamental model Power2Sim). The purpose of the processing is a free test delivery of the spot price forecast for four weeks. Where a specific obligation is involved, whether in connection with the initiation, implementation or termination, the legal basis for processing is Article 6(1)(b) GDPR. In this case we store the data until the end of the legal retention period. In all other cases, the legal basis is Article 6(1), first sentence f, GDPR, which allows the processing of personal data without the data subject's consent if processing is necessary to safeguard the legitimate interests of the data controller or a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular where the data subject is a child. Communication outside a contractual relationship is in our mutual interest. We store your data until the purpose resulting from the legitimate interest has been fulfilled.

If we send you a download link (which may be password-protected) to access very large amounts of data, we will use a local Synology DiskStation located in a secure location. Your access behavior is not evaluated by us.

There is no legal obligation to collect this data. However, it is possible that it may be difficult to visit our website if the survey is not carried out.

The following companies receive the above-mentioned data, whereby please note below if the data leave the European Union or the European Economic Area:

Third country reference:

• Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; policies.google.com/technologies/partner-sites.
• Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/en/privacy.
• Automattic Inc., 60 29 th Street #343, San Francisco, CA 94110–4929, USA, https://automattic.com/privacy
• Quantcast Inc., 201 3 rd St, Floor 2, San Francisco, CA 94103–3153, USA
• LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy, https://www.privacyshield.gov/EU-US-Framework.
• The Rocket Science Group LLC, Georgia, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, Georgia 30308, https://mailchimp.com/legal/privacy/.

Others:

• Xing AG, Gänsemarkt 43, 20354 Hamburg, DE, https://privacy.xing.com/en/privacy-policy.
• Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001 (Google Analytics) User conditions: https://www.google.com/analytics/terms/us.html, privacy policy: support.google.com/analytics/answer/6004245, and privacy policy: https://policies.google.com/privacy?hl=en&gl=en.

We maintain current technical measures to guarantee data security, in particular to protect your personal data from the dangers of data transmission and before third parties become aware of them. These are adapted to the current state of the art in each case.

Furthermore, cookies are stored on your computer when using the website (https://www.energybrainpool.com/en.html). Cookies are small text files that are stored on your hard disk in the browser you use and through which certain information flows to the place that sets the cookie (in this case us). Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall. We delete the cookies after seven months at the latest. In addition to the cookies described above, we do not use any other cookies on our blog (blog.energybrainpool.com/en/) and on our symposium website (symposium.energybrainpool.com).

You have several rights. You have the right to information about the personal data processed to your person as well as to correction or deletion, to restriction of the processing, to objection to the processing as well as to data transferability. In addition, you have the option to complain about us to the supervisory authority responsible for us. We would like to point out politely that these rights may be subject to certain conditions that we will insist on.