Data protection statement

Data protection statement

Personal data (below: referred mainly as simply “data”) is only processed by us to the extent necessary and for the purpose of providing a well-functioning, user-friendly Internet presence, including its contents and the services offered there.

According to Art. 4, item 1 of EU Directive 2016/679, known as the General Data Protection Regulation (below: “GDPR”), “processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

In the data protection statement below, we inform you in particular about the nature, scope, purpose, duration and legal basis for the processing of personal data, insofar as we make decisions either alone or jointly with others with regard to the purposes and means of this processing. Additionally, we inform you below about the external components used for optimization purposes and to increase usage quality, insofar as third parties process data under their own responsibility.

Our data protection statement is divided as follows:

I. Information about us as controllers
II. The rights of users and data subjects
III. Information on data processing

I. Information about us as controllers

The provider responsible for this Internet presence in the sense of the data protection regulations is:

decon® Deutsche-Energie-Consult GmbH
Reichenbachstraße 55
01069 Dresden

Tel.: (03 51) 4 66 62 27
Fax.: (03 51) 4 66 62 36

This email address is being protected from spambots. You need JavaScript enabled to view it.

II. The rights of users and data subjects

With regard to the data processing described in greater detail below, users and data subjects retain the right

  • to confirmation as to whether data relating to them is processed, to information regarding the processed data, to further information regarding the data processing and to copies of the data (cf. also Art. 15 GDPR);
  • to rectification or completion of incorrect or incomplete data (cf. also Art. 16 GDPR);
  • to the immediate erasure of the data relating to them (cf. also Art. 17 GDPR), or, alternatively, insofar as further processing is required in accordance with Art. 17 para. 3 GDPR, to a restriction of the processing as stipulated by Art. 18 GDPR;
  • to the receipt of the data relating to and provided by them and to the transmission of this data to other providers/controllers (cf. also Art. 20 GDPR);
  • the right to lodge a complaint to the supervisory authority insofar as they are of the opinion that the data relating to them is processed by the provider in breach of statutory data protection regulations (cf. also Art. 77 GDPR).

Furthermore, the provider is obliged to inform all recipients to whom data has been disclosed by the provider regarding any correction or erasure of data or the restriction of processing occurring on the basis of Art. 16, 17 para. 1, 18 GDPR. This obligation does not apply, however, if such notification is not possible or involves an unreasonable degree of effort. Irrespective of this, the user has a right to information regarding these recipients.

According to Art. 21 GDPR, the users and data subjects also have the right to object against the future processing of the data relating to them, insofar as the data is processed by the provider as stipulated in Art. 6, para. 1 lit. f) GPDR. In particular, objections are permissible against data processing for the purpose of direct advertising.

III. Information on data processing

Your data processed while you use our online presence will be erased or blocked as soon as the purpose of the storage no longer applies, the erasure of the data does not contradict any statutory storage obligations, and when subsequently, no other particulars relating to individual processing methods are provided.

Cookies

a) Session cookies

Our online presence uses cookies. Cookies are small text files or other storage technologies which are filed away and stored by the Internet browser used by you on your end device. These cookies are used to process information to an extent determined individually by you. This information includes your browser or location data, or your IP address, for example.

This processing helps make our online presence more user-friendly, effective and secure, for example through the processing or display of our online presence in different languages or by offering a basket function.

The legal basis of this processing is Art. 6 para. 1 lit. b) GPDR, insofar as these cookies process data for the purpose of entering or performing a contract.

If processing does not serve the entering or performance of a contract, our legitimate interest is to improve the functionality of our online presence. Here, the legal basis is Art. 6 para. 1 lit. f) GDPR.

These session cookies are deleted when you close your Internet browser.

b) Third-party provider cookies

Cookies from partner companies may also be used with our online presence. These are partners with whom we work together for the purpose of advertising, analysis or providing functions in our online presence.

The details relating to this usage, in particular relating to the purposes and legal bases of processing of such third-party provider cookies, are given in the information below.

c) Erasure option

You can prevent or restrict the installation of cookies by making the relevant settings in your Internet browser. You can also delete cookies that are already stored at any time. The steps and measures required to do so depend on the Internet browser that you use, however. If you have any questions, please therefore consult the Help function or documentation of your Internet browser or contact the browser manufacturer or support service. However, the processing of “flash cookies” cannot be prevented via your browser settings. Instead, you must change the settings in your Flash player. The steps and measures required to do so also depend on the Flash player that you use, however. If you have any questions, please therefore also consult the Help function or documentation of your Flash player or contact the manufacturer or support service.

If you prevent or restrict the installation of cookies, this may mean, however, that you are unable to use all the functions available in our online presence.

Contract processing

The data transmitted by you in order to use our goods and/or services offer is processed by us for the purpose of processing the contract and is therefore necessary. Without your data, we cannot conclude and process a contract with you.

The legal basis for processing is Art. 6 para. 1 lit. b) GDPR.

When the contract process has been fully completed, we delete the data, but must also observe the statutory storage periods required by the tax and trade laws.

As part of the contract performance, we forward your data to the transport company contracted to deliver the goods, or to the financial service provider, insofar as forwarding is necessary in order to deliver the goods or for payment purposes.

The legal basis for the forwarding of data is Art. 6, para. 1 lit. b) GDPR.

Contact enquiries/ contact option

Should you contact us via the contact form or e-mail, the data given by you is used to process your enquiry. It is necessary to provide data in order to process and answer your enquiry. If data is not provided, we cannot answer your enquiry, or if so, only to a limited degree.

The legal basis for processing is Art. 6 para. 1 lit. b) GDPR.

Your data is erased when your enquiry has been fully answered and erasure does not conflict with any statutory storage obligations, such as any subsequent contract performance.

Google Analytics

Our online presence uses Google Analytics. This is an online presence analysis service operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, referred to below as “Google”.

Through certification according to the EU-US Privacy Shield

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that the EU data protection regulations are also observed when processing data in the USA.

The Google Analytics service is used to analyze the usage behavior of our online presence. The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is the analysis, optimization and efficient operation of our online presence.

Information relating to usage and the user, such as the IP address, location, time or frequency of visiting our online presence, is transferred to a Google server in the USA and stored there. However, we use Google Analytics with the “anonymization function”. Through this function, Google already abbreviates the IP address within the EU or EEA.

The data thus collected is in turn used by Google to provide us with an assessment of the visit to our online presence, and of the usage activities undertaken there. This data can also be used to provide further services related to the use of our online presence and the use of the Internet.

Google states that your IP address will not be linked to other data. In addition, Google provides further data protection information under

https://www.google.com/intl/de/policies/privacy/partners

including the options for prohibiting data usage.

In addition, Google provides a “deactivation add-on” under

https://tools.google.com/dlpage/gaoptout?hl=de

together with additional information about this add-on. This add-on can be installed with the standard Internet browsers and offers you further opportunities to control the data recorded by Google when you retrieve our online presence. Here, the add-on informs the JavaScript (ga.js) of Google Analytics that the information about your visit to our online presence should not be transferred to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analysis services. Information as to whether web analysis services are used by us, and if so, which, is naturally also included in this data protection statement.

Google-Maps

In our online presence, we use Google Maps to show the location of our premises and to produce a route description. This is a service operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, referred to below as “Google”.

Through certification according to the EU-US Privacy Shield

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

In order to present specific fonts in our online presence, a connection to the Google server in the USA is established when you retrieve our online presence.

If you call up the Google Maps component which is integrated into our online presence, Google stores a cookie on your end device via your Internet browser. Your user settings and user data are processed in order to display the location of our premises and to produce a route description. Here, we cannot guarantee that Google does not use servers in the USA.

The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is the optimization of the functions of our online presence.

The connection to Google created in this way enables Google to determine from which website your enquiry has been sent, and to which IP address the route description should be transmitted.

If you do not agree to this processing, you have the option of preventing the cookies from being installed by making the relevant settings in your Internet browser You will find details about this topic under “Cookies” above.

In addition, the usage of Google Maps and the information obtained via Google Maps is made in accordance with the Google conditions of use Google-Nutzungsbedingungen https://policies.google.com/terms?gl=DE&hl=de and the commercial terms and conditions of Google Maps

In addition, Google provides additional information under

https://adssettings.google.com/authenticated

https://policies.google.com/privacy

Google Fonts

Our online presence uses Google Fonts to present external fonts. This is a service operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, referred to below as “Google”.

Through certification according to the EU-US Privacy Shield

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that the EU data protection regulations are also observed when processing data in the USA.

In order to present specific fonts in our online presence, a connection to the Google server in the USA is established when you retrieve our online presence.

The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is the optimization and efficient operation of our online presence.

The connection to Google created when you retrieve our online presence enables Google to determine from which website your enquiry has been sent, and to which IP address the presentation of the font should be transmitted.

Under

https://adssettings.google.com/authenticated

https://policies.google.com/privacy

Google offers further information, in particular regarding the options for prohibiting data use.

Online job applications/ publication of job advertisements

We offer you the option of applying for jobs via our online presence. For these digital applications, your applicant and application data is electronically recorded and processed by us in order to continue with the application procedure.

The legal basis for this processing is § 26, para. 1 p.1 German Federal Data Protection Act (BDSG) in conjunction with Art. 88 para. 1 GDPR.

Insofar as the application procedure culminates in the conclusion of an employment contract, we shall store the data transferred by you during the application in your personnel file for the usual organization and administrative processing reasons. Naturally, in doing so, we shall observe the valid statutory obligations.

The legal basis for this processing is also § 26, para. 1 p.1 BDSG in conjunction with Art. 88 para. 1 GDPR.

Should an application be rejected, we shall automatically erase the data transferred to us two months following announcement of the rejection. However, data is not erased if due to statutory regulations, for example due to obligations to provide evidence according to the Equal Treatment Law (AGG), we are required to store it for a longer period of up to four months, or until the conclusion of legal proceedings.

In such cases, the legal basis is Art. 6 para. 1 lit. f) GDPR and § 24, para. 1 no. 2 BDSG. Our legitimate interest is the legal defense or assertion of our legal rights.

Should you expressly consent to longer storage of your data, e.g. for entry into a database of applicants or interested parties, the data will be further process on the basis of your consent. Here, the legal basis is Art. 6 para. 1 lit. a) GDPR. Naturally, you can however withdraw your consent at any time with effect in the future, by issuing us with a declaration as such, in accordance with Art. 7 para. 3 GDPR.