Privacy policy

Below we inform you how ENERTRAG SE (hereinafter "ENERTRAG" or "we") uses your personal data, what rights you are entitled to and who you can contact if you have any questions about data protection.

In most cases, you can decide which personal data you wish to transmit to us. However, if you refuse to do so, we may not be able to offer you certain services. We have marked mandatory information that we require for the provision of our services accordingly.

This information was last updated in May 2026. From time to time, we have to make adjustments to reflect actual circumstances or legal or regulatory requirements; so please take a look at the data protection information the next time you visit our website to ensure that it is up to date.

Name and contact details of the controller

ENERTRAG SE
Dauerthal Estate
17291 Dauerthal
Germany
Fax: +49 39854 6459-420
Tel: +49 39854 6459-0
E-Mail: enertrag@enertrag.com

Name and contact details of our data protection officer

You can reach our data protection officer at:
E-Mail: dataprivacy@enertrag.com

1.    Data processing on our website

We process your personal data when you visit our website and when you contact us.

1.1.  Your visit to our website

Each time you visit our website, data that your browser automatically transmits to our server is stored. This includes IP address, type and version of the browser used, time and date of access, as well as the website from which access is made (referrer URL) and the operating system of your end device.

Legal basis: The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in ensuring convenient use and evaluating the system security and stability of our website.

Storage period: The aforementioned data is stored in a log file until it is automatically deleted after seven days. Backups are stored in encrypted form for up to 7 days. The storage period may be longer in individual cases, e.g. if this is necessary for legal prosecution.

1.2.  Cookies

We use cookies and similar technologies, such as tracking or web bugs or pixels (hereinafter referred to as "cookies"). Cookies can be used to recognize you on future visits to the website. We use cookies to design our website and our offers for you accordingly and to make it easier for you to use. On the one hand, we use cookies that are necessary for the technical operation of our website. With your consent, we also use cookies to analyze your interaction with our website and our offers and to integrate external media.

You can change your cookie settings or withdraw your consent at any time.

Further information can be found in our Cookie Information.

1.3.  Verification of entries

When entries are made on our website - for example in contact forms - we check whether they are made by humans or automated programs. To do this, we analyze the behavior of our visitors by recording parameters such as IP address, time spent on the site and mouse movements.

Legal basis: The legal basis for this data processing is § 25 para. 2 TDDDG and Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in ensuring the security and reliability of our website, in particular to protect it from abusive access by bots

1.4.  Maps

We provide you with interactive maps on our website to provide geographical information. For this purpose, we collect data about your use of the map functions.

Legal basis: The legal basis for this data processing is § 25 para. 1 TDDDG and Art. 6 para. 1 lit. a GDPR.

1.5.  Your contact

If you contact us, for example by sending us an email, using the contact form on our website, or calling us, we process your title, contact address, name, the subject of your inquiry, your additional contact details, and the information you provide in your request. In order to respond to your written inquiry, we require at least your title, name, the subject of your inquiry, and your email address.

Your inquiry is processed via a central system that is operated jointly by us and other group companies, including ENERTRAG Betrieb GmbH (Roth Acker 3, 31234 Edemissen, Germany), ENERTRAG Service GmbH (Gut Dauerthal, 17291 Dauerthal, Germany), ENERTRAG Systemtechnik GmbH (Automeile 2, 17291 Prenzlau, Germany), ENERTRAG Dark Sky GmbH (Automeile 2, 17291 Prenzlau, Germany), ENERTRAG Energiedienst GmbH (Dauerthal 3, 17291 Schenkenberg, Germany), Uckerwerk Energietechnik GmbH (Dauerthal 7, 17291 Schenkenberg, Germany), and ENERTRAG SE France (9 Mail Gay Lussac, 95000 Neuville-sur-Oise, France), on the basis of an agreement on joint controllership pursuant to Art. 26 GDPR. Inquiries are processed by the respective company to which your inquiry is addressed or which is responsible for your concern. Each respective company independently manages the contacts and inquiries assigned to it and is generally responsible for compliance with applicable data protection requirements. However, we are responsible for the technical administration of the system and therefore act as the central point of contact for data protection-related matters and for handling data subject requests. For this reason, we also provide information in this privacy notice regarding the processing activities carried out in this context.

Legal basis: The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in responding to general inquiries. If you contact us in the context of initiating or executing a contract, we process the aforementioned data in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.

Storage period: Your data will only be processed to answer your request and will be deleted immediately as soon as your request has been dealt with, unless a contract has been concluded, there are statutory retention obligations or legitimate interests in further storage on our part.

1.6.  Social media feed

Our social media feed aggregates posts on a so-called social wall from several social networks and embeds them on our website. The posts are retrieved directly from the social networks by your end device. When you access this content, your IP address and possibly other browser data, such as your user agent, are transmitted.

Legal basis: The legal basis for this data processing is § 25 para. 1 TDDDG and Art. 6 para. 1 lit. a GDPR.

2.    Data processing on our social media channels

We maintain a publicly accessible profile on various social media platforms. If you use our profile to interact with us (e.g. like or share a post, follow us, write a comment or send us a direct message), we process the data you provide to us for the purpose of contacting you. If we like, share or comment on your posts, the data you freely publish on the respective social media platform will be made available to our followers on our profile. All information that you enter in your profile is publicly visible, i.e. members who log into the network and customers of the social media platform can view it. This also applies to your activities within the service, such as: comments on posts; "Like" marks and the "Follow" function.

Group memberships are also publicly visible. If you share posts, this is set to public by default. You can restrict the visibility of these posts to your contacts in the options.

Legal basis: The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in staying in contact with our business partners and interested parties and keeping them informed, as well as in up-to-date public relations work and market observation. If you contact us via social media because you are interested in our offer, the request also serves to carry out pre-contractual measures in response to your request; the legal basis is then Art. 6 para. 1 sentence 1 lit. b GDPR.

3.    Data processing when concluding other contractual relationships

We process personal data in the context of supplier relationships, (cooperation) contracts and other business relationships.

This data is processed in order to be able to identify you or your company/your employer as our supplier, service provider or partner company; to fulfill legal obligations; to initiate, conclude and fulfill a contractual relationship with you/your company/your employer; for correspondence with you, insofar as this serves to initiate or fulfill the contract and to efficiently design operational processes.

Legal basis: The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. b GDPR (if you personally are or are to become a contractual partner) or Art. 6 para. 1 sentence 1 lit. f GDPR (if your employer is or is to become a contractual partner).

In the event of a legal obligation to process data, the legal basis arises from national or Union law in conjunction with Art. 6 para. 1 sentence 1 lit. c GDPR.

We may need to process your personal data for the assertion of claims or for the defense against claims; the legal basis is our legitimate interest under Art. 6 para. 1 sentence 1 lit. f GDPR in an efficient legal defense and enforcement of claims.

Storage period: The personal data collected by us will be stored until the above-mentioned purposes cease to apply and then deleted, unless we are obliged to store it for a longer period in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR due to statutory storage and documentation obligations (e.g. under commercial, criminal or tax law) or you have consented to further storage in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

The provision of your personal data is required if you wish to enter into a contractual relationship with us. If you do not provide your personal data, it will not be possible to establish and execute the contractual relationship.

4.    Marketing and existing customer information

4.1.  Newsletter dispatch

You can register on our website to receive our newsletter. To do so, you must enter your e-mail address, first name, surname and company name in the fields provided on our website. You will then receive a notification e-mail. By clicking on the link contained in this e-mail, you confirm that you wish to receive our newsletter (double opt-in). If you do not click on this confirmation link, you will not subsequently receive a newsletter in this way. In order to continuously improve content, data on usage behavior (e.g. opening the e-mail and links contained therein) is also processed using web beacons and similar technologies.

The newsletter is sent via a central system that is operated jointly by us and other group companies, including ENERTRAG Betrieb GmbH (Roth Acker 3, 31234 Edemissen, Germany), on the basis of an agreement on joint controllership pursuant to Art. 26 GDPR. Subscribers receive the newsletter of the respective company for whose newsletter they registered via the relevant website. Each respective company independently manages its subscriber base and is generally responsible for compliance with applicable data protection requirements. However, we are responsible for the technical administration of the system and therefore act as the central point of contact for data protection-related matters and for handling data subject requests. For this reason, we also provide information in this privacy notice regarding the processing activities carried out in this context.

Legal basis: The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. a GDPR. You can revoke your consent to the processing of your data for sending the newsletter at any time with effect for the future. For this purpose, you will find an unsubscribe link in every newsletter.

Storage period: Your data for sending the newsletter will be stored for as long as you have subscribed to it. This data will then be deleted.

4.2.  Information for existing customers

In addition, we send promotional emails to registered customers and event participants with information about our events, products and services.

Legal basis: The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in advertising to existing customers.

We would like to point out that you can object to the receipt of this information and the processing for the purpose of this information at any time without incurring any costs other than the transmission costs according to the basic rates. You have a general right to object without giving reasons in accordance with Art. 21 (2) GDPR. You can declare your objection by sending us a message (see the contact details in the section "Name and contact details of the controller"). We will delete your data at the latest after your objection.

5.    Data processing in the application process

5.1   General application process

We process the data that you provide to us yourself when you apply for a job (e.g. with your cover letter, CV and references).

During the application process, we process the following types of data: master data (e.g. title, first name, surname, date of birth, place of residence); documents (e.g. certificates, references, CV, letter of motivation); in the event that you have had reimbursable expenses, the data relevant for billing, e.g. your bank details and communication data (e.g. telephone numbers, e-mail, postal address).

Legal basis: The legal basis for the processing of your personal data is Art. 6 para. 1 sentence 1 lit. b GDPR. The data processing is necessary for the decision on the establishment of a contractual relationship. Insofar as special categories of personal data are processed (e.g. health data), we process these for reasons of labor law, social security law or social protection pursuant to Art. 6 para. 1 sentence 1 lit. b in conjunction with Art. 9 para. 2 lit. b GDPR.

After completion of the application process, further data processing may either take place on the basis of your consent or may be necessary for legal prosecution, whereby in the latter case the legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR, our legitimate interest in the assertion or defense of claims.

Storage period: The data collected by us will be stored until the above-mentioned purposes cease to apply and then deleted, unless we are obliged to store it for a longer period in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR due to statutory storage and documentation obligations (e.g. under commercial, criminal or tax law).

In the event that you have consented to further storage, we will transfer your data to our applicant pool. There the data will be deleted after two years. If your application is unsuccessful, the data will generally be deleted six months after completion of the procedure, unless there are longer retention obligations (e.g. for any receipts for reimbursement of travel expenses) or storage beyond this is necessary to defend against legal claims.

5.2.  AI Assistant

You can use the chat function of our AI Assistant on our career page to ask general questions about our job advertisements and about working at ENERTRAG. These questions will be answered by AI. In the course of this, technical data (e.g., IP address, device ID, session ID, date and time) and the interaction history (e.g., your input and the model's output) will be processed. Your entries may be anonymized or pseudonymized for training purposes of the AI model. Please note that our AI assistant cannot be used for specific inquiries about an ongoing application process. The data collected will be processed in pseudonymized form as far as possible. It is not possible to directly associate the data with your person without referring to separately stored information. 

Legal basis: The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in providing you with efficient information on job vacancies and processes as part of your application process and in the ongoing optimization of our offering. 

Storage period: The aforementioned data will be stored for a period of up to 2 years.

6.    Disclosure of your personal data

We will only pass on your data if we are legally permitted to do so. If we transfer your data to a country that is neither part of the EU nor the EEA and for which there is no adequacy decision by the EU Commission, we will take all necessary measures to secure the respective data processing. This includes, for example, standard contractual clauses of the EU Commission.

We may pass on your data as follows, unless already mentioned separately above:

• We use the service provider Platform.sh SAS, 22 rue de Palestro 75002 Paris, France, to host and operate our website.
• To protect our forms from misuse, we use the Cloudflare Turnstile service provided by Cloudflare Inc, 101 Townsend St., San Francisco, CA 94107, USA. The provider is certified in accordance with the EU-U.S. Data Privacy Framework. In addition, standard contractual clauses have been concluded.
• We use the Mapbox service provided by Mapbox, Inc, 1133 15th St NW, Suite 825, Washington DC 20005, USA, to display interactive maps and provide geographical information. The provider is certified in accordance with the EU-U.S. Data Privacy Framework. Standard contractual clauses have been concluded as an additional measure.
• To provide the cookie banner on our website, we use the Cookiebot service of the service provider Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany.
• We use the platform provided by Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg, Germany, to send our newsletter and information to existing customers.
• We use the Genesis service provided by CAS Software AG, CAS-Weg 1–5, 76131 Karlsruhe, Germany, to manage contact inquiries.
• For our social media presence, we maintain a profile on the social network LinkedIn. The network is operated by the provider LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. In individual cases, temporary processing of personal data in the USA cannot be ruled out. Corresponding standard contractual clauses have therefore been agreed as an additional measure
• For our social media presence, we maintain a profile on the social network Facebook. The network is  by the provider Meta Platforms Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2 Ireland. In individual cases, temporary processing of personal data in the USA cannot be ruled out. Corresponding standard contractual clauses have therefore been agreed as an additional measure.
• For our social media presence, we maintain a profile on the social network TikTok. The network is operated by the provider TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.
• For the integration of social media feeds on our website, we use the service Walls.io of Walls.io GmbH Schönbrunner Straße 213/215, 3rd Floor, 1120 Vienna.
• To manage applications and for providing the AI-powered assistant ‘Henri’, we use the SmartRecruiters personnel management software from the provider SmartRecruiters, Inc, 166 Geary St, 15th Floor Suite #1612, San Francisco, CA 94108, USA. The provider is certified in accordance with the EU-U.S. Data Privacy Framework. Standard contractual clauses have been concluded as an additional measure.

7.     Storage duration

Unless already mentioned separately above, we store your personal data for as long as is necessary to achieve the respective purpose, in particular for the fulfillment of our legal and contractual obligations. Once the purpose has been achieved, this data will be deleted unless the law allows us to continue storing it for specific purposes, including the defense of legal claims. In addition, we may need to store your data for billing purposes. We are subject to statutory retention and documentation obligations to retain documents for between two and ten years.

8.    Your rights

As a data subject, you are entitled to the following rights if the applicable requirements are met:

• Right to information (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)

You also have the right under Art. 77 GDPR to lodge a complaint with a supervisory authority of your choice about our data processing. Our registered office is in Brandenburg. The supervisory authority responsible for us is: Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht, Stahnsdorfer Damm 77, 14532 Kleinmachnow.

Furthermore, you have the right to object (Art. 21 GDPR) if we process data on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. Please note that in the case of data processing for purposes other than direct marketing, reasons must be given that arise from your particular situation. You can declare your objection by sending us a message (see the contact details in the section "Name and contact details of the controller").

If we process your personal data on the basis of your consent, you can withdraw your consent with effect for the future. You can declare your revocation by sending us a message (see the contact details in the section "Name and contact details of the controller").