This privacy policy applies to data processing by:

ENERTRAG SE
Dauerthal Estate, 17291 Dauerthal
Telephone: 039854 6459-0

Management Board Dr Gunar Hering, Matthias König, Simon Hagedorn, Dr Tobias Bischof-Niemz
Commercial register Neuruppin HRB 13694

The provider's company data protection officer can be contacted at the above address, ‘Data protection officer - confidential -’, or at datenschutz[at]enertrag.com

When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which the access was made (referrer URL),
• browser used and, if applicable, the operating system of your computer and the name of your access provider.

The aforementioned data is processed by us for the following purposes:

• Ensuring a smooth connection to the website,
• Ensuring a comfortable use of our website,
• analysing system security and stability and
• for other administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.

We also use cookies and analysis services when you visit our website. You can find more detailed explanations on this in sections 4 and 5 of this privacy policy.

Your personal data will not be transferred to third parties for purposes other than those listed below.

We only pass on your personal data to third parties if:

• you have given your express consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
• the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR insofar as this is necessary for the processing of your contractual rights and obligations and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
• in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, and
• this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.

The tracking measures listed below and used by us are carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. With the tracking measures used, we want to ensure a needs-based design and the continuous optimisation of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.

The data processing purposes and data categories can be found in the following explanations.

We use the open source software Matomo to analyse and statistically evaluate the use of the website. Cookies are used for this purpose (see section 4). The information generated by the cookie about website usage is transmitted to our servers and summarised in pseudonymous usage profiles. The information is used to analyse the use of the website and to enable a needs-based design of our website. The information is not passed on to third parties.

Under no circumstances is the IP address associated with other data relating to the user. The IP addresses are anonymised so that they cannot be assigned (IP masking).

Your visit on this website may currently be recorded by Matomo web analytics. Click to check the analysis status and change it if necessary.here

This website uses Google Maps to display interactive maps and to provide directions. Google Maps is a map service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. By using Google Maps, information about the use of this website, including your IP address and the (start) address entered as part of the route planner function, may be transmitted to Google in the USA.

If you access a web page on our website that contains Google Maps, your browser will establish a direct connection to Google's servers if you consent to the location being recorded. The map content is transmitted by Google directly to your browser, which integrates it into the website. We therefore have no influence on the scope of the data collected by Google in this way. To the best of our knowledge, this is at least the following data:

• Date and time of the visit to the website in question,
• Internet address or URL of the website accessed,
• IP address, (start) address entered as part of route planning.

We have no influence on the further processing and use of the data by Google and can therefore accept no responsibility for this.
If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use the map display.
The purpose and scope of the data collection and the further processing and use of the data by Google as well as your rights in this regard and setting options to protect your privacy can be found in Google's data protection information ().
By using our website, you consent to the processing of data about you by Google Maps Route Planner in the manner and for the purposes set out above.  https://policies.google.com/privacy?hl=de

MapBox
We use MapBox API, a service of MapBox Inc. (address: 740 15th Street NW, 5th Floor, Washington, District of Columbia 20005, USA) hereinafter referred to as “MapBox”. We use MapBox to display geographical information visually. When MapBox is used, MapBox also collects, processes and uses data about the use of the map functions by visitors.

Through certification in accordance with the EU-US Privacy Shield, MaBox guarantees that the data protection requirements of the EU are also complied with when processing data in the USA. The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in optimizing the functionality of our website.

When you access one of our web pages in which the MapBox service is integrated, MapBox stores a cookie on your end device via your Internet browser. As a result, information about your use of our website, including your IP address, is transmitted to a MapBox server in the USA and stored there. This data is processed for the purpose of displaying the website or ensuring the functionality of the MapBox service. MapBox may pass this information on to third parties if this is required by law or if the information is processed by third parties on behalf of MapBox. The following information is sent to MapBox:

• IP address: For geographical localization and security purposes.
• Device information: Operating system, browser type and version
• Usage statistics: If permitted by the user, precise GPS coordinates or rough location information.
• Timestamp: Date and time of map use.
• Session information: Unique identifiers for user sessions.
• Telemetry data: Performance metrics to improve the service.
• API key: To identify the app or website that uses Mapbox

The “Terms of Service” provided by MapBox at https://www.mapbox.com/tos/#maps contain further information about the use of MapBox and the data obtained by MapBox.

If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your Internet browser. Details on this can be found above under “Cookies”. However, you will then no longer be able to use the MapBox service via our website.

MapBox also offers further information on the collection and use of data as well as your rights and options for protecting your privacy at https://www.mapbox.com/privacy/.

OpenStreetMaps

We use a map section from Umap () on our website to provide you with information about our company's donation activities.  https://umap.openstreetmap.de/de/

Umap is an open source mapping tool that works on the basis of OpenStreetMap (). Your IP address is forwarded to OpenStreetMap so that the map can be displayed to you. You can find out how OpenStreetMap stores your data on the OpenStreetMap data protection page here and here. https://openstreetmap.dewiki.openstreetmap.org/wiki/DE:Datenschutzwiki.openstreetmap.org/wiki/DE:Legal_FAQ

The provider of OpenStreetMap is the Openstreetmap Foundation:
Openstreetmap Foundation
132 Maney Hill Road
Sutton Coldfield
West Midlands
B72 1JU
United Kingdom

We base the use of the tool on Art. 6 para. 1 letter f) GDPR: the data processing is carried out to improve the user-friendliness of our website and is therefore in our legitimate interest.

The website uses the external service YouTube for the integration of videos. Please note that ENERTRAG has no control over the terms of use of the aforementioned services and their operators. These services store and process the personal data of their users (e.g. personal information, IP address, etc.) in accordance with their guidelines.

Please refer to the respective data protection notices of these providers to find out what rights and settings options you have to protect your privacy.

Our website uses the provider YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, for the integration of videos. We integrate YouTube videos via a two-click solution. Direct contact between the networks and users is only established when the user actively confirms the data protection notice in the upstream overlay of a video or agrees to the integration of YouTube videos via the cookie consent manager.

There is no automatic transfer of user data to the operators of these platforms. Personal data about your visit is only transmitted and stored when you watch the video. When you click on the video, a connection to the YouTube server in the USA is established and your IP address is transmitted to YouTube. YouTube learns that you have watched the video. If you are logged in with a Google or YouTube account, this information will also be assigned to your user account (you can prevent this by logging out of YouTube before viewing the video).

Please note that the providers YouTube and Google are based in a so-called third country, in this case the USA, within the meaning of the GDPR. In its decision of 16 July 2020, Case C-311/18 (‘Schrems II’), the European Court of Justice (ECJ) declared the European Commission's adequacy decision on the EU-US data protection obligation (Privacy Shield Decision 2016/1250) to be invalid. There is no level of data protection in the USA that is essentially comparable to European data protection standards.

As a result, there is no valid adequacy decision by the European Commission regarding the transfer of personal data to the USA within the meaning of Art. 45 (1), (3) GDPR. Furthermore, there are no so-called appropriate safeguards within the meaning of Art. 46 para. 2, 3 GDPR, which enable a corresponding level of protection without further measures. It therefore cannot be ruled out that a company based in the USA may grant government agencies access to the processed personal data. Personal data could therefore be passed on to third parties under certain circumstances. Data subjects' rights may not be enforced.

Therefore, the provision of the video and the associated data transfer is only possible with your consent (Article 49 (1) (a) GDPR).

In accordance with the privacy policy for all Google services, Google processes your data for advertising and market research purposes, to personalise content and to protect against fraud and misuse. You can find more information in Google's privacy policy at We also refer you to our general description in this privacy policy for the general handling and deactivation of cookies. www.google.de/intl/de/policies/privacy/

You have the right

• to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details;
• in accordance with Art. 16 GDPR, to demand the immediate correction of incorrect or incomplete personal data stored by us;
• in accordance with Art. 17 GDPR, to demand the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
• in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
• in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller;
• in accordance with Art. 7 para. 3 GDPR, to revoke your consent given to us at any time. The consequence of this is that we may no longer continue the data processing that was based on this consent in the future and
• in accordance with Art. 77 GDPR to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at the registered office of our law firm.

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

If you would like to exercise your right of cancellation or objection, simply send an email to enertrag[at]enertrag.com

When you visit our website, we use the common TLS (Transport Layer Security) method in conjunction with the highest level of encryption supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit technology instead. You can recognise whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

We process the applicant data only for the purpose and in the context of the application process in accordance with the legal requirements. Applicant data is processed to fulfil our (pre-)contractual obligations as part of the application process within the meaning of Art. 6 para. 1 lit. b. GDPR Art. 6 para. 1 lit. f. GDPR if the data processing becomes necessary for us, e.g. in the context of legal proceedings (in Germany, § 26 BDSG also applies).

The application process requires that applicants provide us with the applicant data. If we offer an online form, the necessary applicant data is labelled, otherwise it results from the job descriptions and basically includes personal details, postal and contact addresses and the documents belonging to the application, such as cover letter, CV and certificates. Applicants can also voluntarily provide us with additional information.

By submitting their application to us, applicants consent to the processing of their data for the purposes of the application process in accordance with the type and scope set out in this privacy policy.

Provided that special categories of personal data within the meaning of Art. 9 para. 1 GDPR are voluntarily communicated as part of the application process, their processing is additionally carried out in accordance with Art. 9 para. 2 lit. b GDPR (e.g. health data, such as severely disabled status or ethnic origin). Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are requested from applicants as part of the application process, their processing is also carried out in accordance with Art. 9 para. 2 lit. a GDPR (e.g. health data if this is necessary for the exercise of the profession).

If provided, applicants can send us their applications using an online form on our website. The data is transmitted to us in encrypted form in accordance with the state of the art. Applicants can also send us their applications by email. Please note, however, that emails are generally not sent in encrypted form and applicants must ensure that they are encrypted themselves. We therefore cannot accept any responsibility for the transmission path of the application between the sender and receipt on our server and therefore recommend using an online form or sending it by post. Instead of applying via the online form and e-mail, applicants still have the option of sending us their application by post.

The data provided by applicants may be processed by us for the purposes of the employment relationship in the event of a successful application. Otherwise, if the application for a job offer is unsuccessful, the applicant's data will be deleted. Applicants' data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time.

Subject to a justified cancellation by the applicant, the deletion will take place after a period of six months so that we can answer any follow-up questions about the application and fulfil our obligations to provide evidence under the Equal Treatment Act. Invoices for any reimbursement of travel expenses will be archived in accordance with tax law requirements.

As part of the recruitment process, we offer applicants the opportunity to be included in our ‘talent pool’ for a period of two years on the basis of consent within the meaning of Art. 6 para. 1 lit. b. and Art. 7 GDPR.

The application documents in the talent pool will only be processed in the context of future job advertisements and the search for employees and will be destroyed after the deadline at the latest. Applicants are informed that their consent to inclusion in the talent pool is voluntary, has no influence on the current application process and that they can revoke this consent at any time for the future and declare an objection within the meaning of Art. 21 GDPR.

When contacting us (e.g. by contact form, e-mail, telephone or via social media), the user's details will be used to process the contact enquiry and its handling in accordance with Art. 6 para. 1 lit. b. (in the context of contractual/pre-contractual relationships), Art. 6 para. 1 lit. f. (other enquiries) GDPR. The user's details may be stored in a customer relationship management system (‘CRM system’) or comparable enquiry organisation.

We delete the enquiries if they are no longer required. We review the necessity every two years; the statutory archiving obligations also apply.

We maintain online presences within social networks and platforms in order to communicate with the customers, interested parties and users active there and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.

Unless otherwise stated in our privacy policy, we process users' data if they communicate with us within the social networks and platforms, e.g. write posts on our online presences or send us messages.

We use Cloudflare Turnstile (hereinafter referred to as “Turnstile”) on this website. The provider is Cloudflare Inc, 101 Townsend St., San Francisco, CA 94107, USA (hereinafter referred to as “Cloudflare”). Turnstile is used to check whether data is entered on this website (e.g. in a contact form) by a human or by an automated program. To do this, Turnstile analyzes the behavior of the website visitor based on various characteristics.

This analysis begins automatically as soon as the website visitor enters a website with Turnstile activated. For the analysis, Turnstile evaluates various information (e.g. IP address, time spent on the website by the website visitor or mouse movements made by the user). The data collected during the analysis is forwarded to Cloudflare.

The data is stored and analyzed on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its website from abusive automated spying and SPAM.
If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Data processing is based on standard contractual clauses, which you can find here: https://www.cloudflare.com/cloudflare-customer-scc/.
Further information on Cloudflare Turnstile can be found in the privacy policy at https://www.cloudflare.com/cloudflare-customer-dpa/.

This privacy policy is currently valid and was last updated in January 2022.

It may become necessary to amend this privacy policy as a result of the further development of our website and services or due to changes in legal or official requirements. You can access and print out the current privacy policy at any time on the website at www.enertrag.com