Privacy Policy
Controller
Controller to the data processing on this website is:
E.ON Drive Infrastructure GmbH
Alfredstr. 81
45130 Essen/Germany
Our data protection team can be contacted via the postal address mentioned above or via e-Mail: dataprotection@edri.com.
A. Website functionalities
1. Accessing this website
About this processing: The assessing and retrieval of this website by you requires the processing of your personal data, such as the IP address. More extensive processing of personal data when using special services or cookies is presented separately.
Description and purpose of processing: When you access this website, we process your personal data to provide you with this website and to ensure its operation and technical security.
Categories of personal data: Your IP address, browser data (e.g. referrer ID or redirects, screen resolution, operating system, browser and browser version, installed plug-ins and extensions, and fonts).
Legal basis of processing: The processing of your personal data when you access this website is based on our legitimate interest (Art. 6 (1) lit. f GDPR). We have balanced our interest in providing as well as operating and securing this website against your interest in the confidentiality of your personal data, whereby our interest prevails. Without the processing of personal data, the provision of the website is technically impossible. This also applies to its operation and security. In this context, securing the website also serves your interests.
Recipients / categories of recipients: In order for the website to operate properly and to fulfil our own obligations, we forward your data to our service provider supporting us with this website.
Storage period: We store your data for as long as is necessary to provide you with the services described above.
Obligation to provide: You are not obliged to provide personal data. Without your personal data, however, it is not possible for you to access this website.
2. Technically necessary cookies
About this processing: In connection with the use of technically necessary cookies, we process your personal data in order to provide you with certain functions of this website.
Description and purpose of processing: When you access this website, your personal data may be processed in connection with the use of so-called "cookies". Cookies are text files that are stored on your terminal device and are necessary for certain functions of this website. You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that you may not be able to use all functions of this website. In this regard, the following information refers to cookies that have no relation to a service available via our website, but serve exclusively to provide the website itself ("technically necessary cookies").
Categories of personal data: Google Tag Manager: aggregated data about tag triggering. Consent Management Platform Usercentrics: opt-in and opt-out data, referrer URL, user agent, user settings, consent ID, time and type of consent, template version, banner language.
Legal basis of processing: The processing of your personal data in connection with the use of technically necessary cookies on this website is based on our legitimate interest (Art. 6 para. 1 lit. f GDPR). We have balanced our interest in providing the cookie-dependent functions of this website against your interest in the confidentiality of your personal data, whereby our interest prevails. Without the processing of personal data, it is technically impossible to provide the functions. At the same time, the option outlined above is open to you to prevent the processing of your personal data in connection with cookies.
Recipients / categories of recipients: We do not disclose your personal data to third party. We only disclose data to our data processors or when we are legally obliged to provide the data.
Storage period: We store your personal data for as long as is necessary for the use of the respective cookie.
Obligation to provide: You are not obliged to disclose personal data. Without your personal data, not all functions of this website may be available to you.
3. Local Storage
About this processing: If you have consented, we store personal data entered by you on our website in the so-called local storage in your browser.
Description and purpose of processing: In connection with the use of the Local Storage, we process your personal data in order to design certain functions of this website. This means that we store information entered by you on our website in the Local Storage beyond your respective visit to our website. In this way, you do not have to re-enter said information on future visits to our website, but are provided with it directly as a suggested input.
Categories of personal data: Input information in forms as well as data from tracking tools, but not consent, bank details or contract account numbers.
Legal basis of processing: The processing of your personal data in connection with the use of Local Storage on this website is based on legitimate interest (Art. 6 para. 1 lit. f GDPR).
Recipients / categories of recipients: We do not disclose your personal data to recipients.
Storage period: We store your personal data for as long as is necessary for the use of the respective function of the website that depends on the Local Storage.
Obligation to provide: You are not obliged to disclose personal data. You can configure your browser settings according to your preferences and, for example, disable the use of Local Storage. Without your personal data, not all functions of this website may be available to you.
4. Usercentrics Consent Management Platform
About this processing: We use the Usercentrics Consent Management Platform to manage consents provided by you.
Description and purpose of the processing: This service provides a Consent Management Platform in order to comply with the legal evidence requirements for obtaining consents.
Categories of personal data: Opt-in and opt-out data, referrer URL, user agent, user preferences, consent ID, time of consent, type of consent, template version, banner language.
Legal basis of processing: The processing is necessary for the fulfillment of a legal obligation to which we are subject (Art. 6 para. 1 lit. c GDPR). If the processing of your personal data is based on your consent, this is the legal basis (Art. 6 (1) a GDPR). You can withdraw your consent via the Cookie Settings button.
Recipients / categories of recipients: We use the service provider Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich.
Storage period: The consent data (consent and revocation of consent) are stored for one year. Cookies are deleted after the browser is closed. The data is then deleted immediately.
Obligation to provide: You are not obliged to disclose personal data.
B. Analyzes via Cookies and other technologies
1. Google Tag Manager
About this processing: We use Google Tag Manager to manage website tags on our website.
Description and purpose of the processing: Google Tag Manager is a solution from Google that allows companies to manage website tags through one interface. Google Tag Manager is a cookie-less domain that does not collect any personal data itself. The Google Tag Manager triggers other tags, which in turn may collect data. We hereby point this out separately. The Google Tag Manager does not access this data.
For our Google products, we use so-called Global Site Tags, so that we do not have to include the integration of Google, i.e. the script, on every page, but Google is then automatically delivered as an application in the tag on every page.
Categories of personal data: Aggregated tag triggering data, IP address; contract account number (Encrypted and Hashed), transaction number, web journey tracking; device type; device information (browser, OS, screen).
Legal basis of processing: The processing of your personal data is based on our legitimate interest (Art. 6 para. 1 lit. f GDPR). We have balanced our interest in using Google Tag Manager against your interest in the confidentiality of your personal data, with our interest prevailing.
Recipients / categories of recipients: Google Ireland Ltd, Gordon House; Barrow Street, Dublin 4, Ireland.
Storage period: The data is deleted 14 days after retrieval.
Third-country reference of the processing of your personal data: Adobe processes your personal data in the USA. There is no European Commission adequacy decision for the US. We have secured the level of data protection with appropriate guarantees (so-called standard contractual clauses) within the meaning of Art. 46 GDPR. You can request a copy of these guarantees from us.
Obligation to provide: You are not obliged to disclose personal data. Without your personal data, however, it is not possible for you to call up this website.
2. Google Analytics regarding the analysis of your website behavior
About this processing: If you have consented, we use "Google Analytics" on our website to analyze your website behavior. On our behalf, Google will use personal data to evaluate your use of the websites, compile reports on website activity and provide us with other services relating to website activity and internet usage. For the use of Google Analytics within the framework of the Google Marketing Platform to play out advertising, the information in the chapter Google Marketing Platform also applies.
Description and purpose of processing: We use "Google Analytics" on our website, a web analytics service provided by Google Ireland Limited, Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Analytics uses so-called tracking pixels and "cookies"; cookies are text files that are stored on your terminal device and enable an analysis of your use of the website. The information generated by a cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, by activating IP anonymization, your IP address will be shortened by Google beforehand within the European Economic Area (European Union and other member states). Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On our behalf, Google will use this information for the purpose of evaluating your use of the websites, compiling reports on website activity and providing us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
In connection with Google Analytics, we also use the Big Query service. Big Query is a database that resides on our own server. The data structure of Big Query is defined by Google, but the database itself and thus the incoming data fall under our data sovereignty. The collection of the data takes place in Google Analytics. Big Query "duplicates" the incoming Google Analytics data and transfers it to the database. Big Query also has data coming in from the Campaign Manager tool. This data is also duplicated and then sent to Big Query. Through Campaign Manager, we generate data on conversions made through so-called floodlight activities.
We also share anonymized data with Google for benchmarking purposes, so that we can conduct research and market analyses and constantly optimize the services. The data is aggregated and anonymized so that it cannot be used to identify the company, account or users.
Categories of personal data: Browser information, click path, date and time of visit, device information, downloads, Flash version, location information, IP address, JavaScript support, pages visited, purchase activity, referrer URL, usage data, widget interactions.
Legal basis of processing: The processing of your personal data is based on your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent via the Cookie Settings button. In this context, your consent also refers to Section 25 (1) TTDSG.
Recipients / categories of recipients: We disclose your personal data to Google.
Storage period: We store your personal data for as long as is necessary for the use of Google Analytics for the analysis of your website behavior. Cookies are stored for a maximum of 2 years.
Third-country reference of the processing of your personal data: Google processes your personal data in the USA. There is no adequacy decision of the European Commission for the USA. We have secured the level of data protection with appropriate guarantees (so-called standard contractual clauses) within the meaning of Art. 46 GDPR. You can request a copy of these guarantees from us.
Obligation to provide: You are not obliged to disclose personal data.
3. LinkedIn Ads
About this processing: We process your personal data to use the LinkedIn Insight Tag to serve ads.
Description and purpose of the processing: This website uses the conversion tool "LinkedIn Insight Tag" as well as LinkedIn Ads of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. This enables targeted advertising on and outside this website without identifying you as a website user. This serves the analysis and optimization of our online offer, in particular retargeting, i.e. renewed advertising on other websites and the allocation to target groups.
Categories of personal data: Advertisements viewed, Advertising identifier, Articles viewed, Device identifier, Device information, IP address, Operating system information, Pages visited, Search terms, Connections, Followers, Information provided on profile, User agent data, Videos viewed.
Legal basis of processing: The processing of your personal data is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent via the Cookie Settings button. In this context, your consent also refers to Section 25 (1) TTDSG.
Recipients / categories of recipients: We disclose your personal data to LinkedIn.
Storage period: We store your personal data for as long as is necessary for the use of the LinkedIn Insight Tag for playing out advertising.
Third country reference of the processing of your personal data: LinkedIn processes your personal data in the USA. There is no adequacy decision of the European Commission for the USA. We have secured the level of data protection with appropriate guarantees (so-called standard contractual clauses) within the meaning of Art. 46 GDPR. You can request a copy of these guarantees from us.
Obligation to provide: You are not obliged to disclose personal data.
C. Other services
1. YouTube
About this processing: We process your personal data in order to provide you with videos on the YouTube platform.
Description and purpose of the processing: We have embedded YouTube videos on our website, which are stored on YouTube, a platform of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and can be played directly from our website. The YouTube videos are all embedded in "extended data protection mode", which means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only by playing the respective video is the respective processing initiated and data transferred.
Categories of personal data: By playing the video, the following categories of personal data are transmitted to YouTube: Website, language, region, browser type, browser version. If you have a Google account and/or a YouTube account, further categories of data are processed. For more details, see Google – Privacy Policy YouTube Services.
Legal basis of processing: The processing of your personal data is based on our legitimate interest (Art. 6 para. 1 lit. f GDPR). We have weighed our interest in the use of these videos against your interest in the confidentiality of your personal data, whereby our interest prevails. We cannot display corresponding videos without accessing the interface provided for this purpose by YouTube. The processing of personal data is technically mandatory for accessing the interface. In addition, you are free not to play a video and thus prevent the processing.
Recipients / categories of recipients: We disclose your personal data to YouTube.
Storage period: We store your personal data as long as this is necessary for the use of the website.
Third country reference of the processing of your personal data: YouTube processes your personal data in the USA. There is no adequacy decision of the European Commission for the USA. We have secured the level of data protection with appropriate guarantees (so-called standard contractual clauses) within the meaning of Art. 46 GDPR. You can request a copy of these guarantees from us.
Obligation to provide: You are not obliged to disclose personal data.
2. E-Mail Communication and contact form
About this processing: You can contact us using our contact form on this website or via the general service e-mail address info@edri.com. For the communication according to the content of communication, we process your personal data.
Description and purpose of processing: We process your personal data in order to process your respective request.
Categories of personal data: Contact details and data that you enter in the contact form.
Legal basis of processing: If your request relates to the performance of a contract to which you are a party, or for the implementation of pre-contractual measures taken in response to your request, the legal basis for processing is Article 6 (1) lit. b GDPR. In other cases, the processing of your personal data to handle your request is based on our legitimate interest (Art. 6 (1) lit. f GDPR). We have weighed our interest in providing the contact form or a general service email address against your interest in the confidentiality of your personal data, with our interest prevailing. Without the processing of personal data, it is not possible to process your request. Moreover, the use of the contact form or a general service e-mail address is voluntary.
Recipients / categories of recipients: We do not disclose your personal data beside our service provider to recipients unless this necessity arises directly from your inquiry.
Storage period: We store your personal data for as long as is necessary to process your respective inquiry or for as long as we are entitled or obligated to store it due to statutory retention obligations.
Obligation to provide: You are not obliged to provide personal data. The fields marked with * in the contact form are mandatory fields. Without this personal data, your respective request cannot be processed. The remaining information is voluntary and can simplify the processing of your request.
D. Fanpages and Social Media channels
1. LinkedIn and Facebook
We maintain corporate appearances (so-called channels or fan pages) on the social media portals LinkedIn and Facebook.
Description and purpose of processing: By presenting our company in social media portals, we would like to seek active communication with you and offer you the opportunity to inform yourself about the products and services of our company and our group of companies via this way. In addition, we use social media portals to carry out marketing measures including competitions.
If you use the contact options to us on these social media portals, we process the data you provide in order to process your request, which is the reason for your contact, and to answer your questions. Your feedback and reactions in the portals also serve us to further develop and improve our product portfolio.
Categories of personal data: We process the data of your profile. The service provider of social media portals provide our company with statistical data (so-called "page insights") that give us information about user activities on our corporate appearances. As part of marketing measures, we use the options provided by the social media portals for addressing specific target groups ("targeting").
Legal basis of processing: We process your personal data on the basis of our legitimate interest (Art. 6 (1) lit f) GDPR) or on basis of your consent (Art. 6 (1) lit. a) GDPR) in communicating with you, in continuously optimizing our corporate appearances, and in the implementation of efficient advertising measures. If the processing is necessary for the fulfillment of a contract with you or for the implementation of pre-contractual measures, we process your personal data on this basis.
Recipients / categories of recipients: We disclose your data to the service provider. The social media portals are not operated by us, but by the respective social media portal operators on their own responsibility. The product sovereignty and product design of the social media portal lies with the respective social media portal operator. We have no influence on the data collected and processed by the operator, nor are we aware of the full scope of data collection, the purposes of processing or the storage periods. Only in individual cases in which the social media portals process personal data on the basis of our instructions, they act as processors under our responsibility as controllers.
We would like to point out that the processing of personal data in countries outside the European Union and the European Economic Area, especially in the USA, cannot be ruled out. Under certain circumstances, this can be associated with the risk of more difficult legal enforcement, which represents a risk for the individual user.
Regarding the collection, processing and use of personal data by the operators of the social media portals, we refer to their privacy policies:
Facebook (Facebook Ireland Ltd., Ireland): https://www.facebook.com/policy
https://www.facebook.com/legal/terms/information_about_page_insights_data
YouTube (Google Ireland Ltd., Ireland): https://policies.google.com/privacy
LinkedIn (LinkedIn Ireland Unlimited Company): https://www.linkedin.com/legal/privacy-policy
Storage period: We store your personal data for as long as this is necessary to process your respective request or for as long as we are entitled or obliged to store it due to legal requirements.
Obligation to provide: You are not obliged to provide personal data.
2. Facebook Fanpage
About this processing: We maintain a corporate presence (so-called pages or fanpages) on the social media portal Facebook. In doing so, we process your personal data.
Description and purpose of processing: By presenting our company on Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), we would like to seek active communication with you and offer you the opportunity to find out about the products and services of our company and our group of companies via this channel. If you use the contact options to us on this social media portal, we process the data and information provided by you in order to process your request, the reason for your contact and to answer your questions.
Legal basis of processing: We process your personal data based on our legitimate interest, Art. 6 (1) lit. f GDPR, in communicating with you, as well as in the continuous optimization of our corporate presence. If the processing is necessary for the performance of a contract to which you are a party, or for the implementation of pre-contractual measures that take place at your request, we process your personal data on this basis, Art. 6 (1) lit. b GDPR.
Recipients/recipient categories/duration of storage: Of your personal data on the part of Facebook Ireland Limited. Information on joint responsibility pursuant to Art. 26 GDPR.
Facebook Ireland Limited provides our company with statistical data known as "page insights", which give us information about user activity on our company websites. The functions of a Facebook company page provided by Facebook Ireland Limited for companies are a Facebook product of Facebook Ireland Limited which is subject to the regulations of the Facebook Data Policy (cf. https://www.facebook.com/about/privacy/update), the information on Facebook Page Insights (cf. https://de-de.facebook.com/legal/terms/information_about_page_insights_data) and an agreement provided unilaterally by Facebook Ireland Limited within the meaning of Art. 26 GDPR (cf. https://www.facebook.com/legal/terms/page_controller_addendum).
We have agreed with Facebook Ireland Limited that Facebook Ireland Limited is responsible for providing you with information about the processing for Page Insights and enabling you to exercise your data subject rights under the GDPR. According to the GDPR, you have the right of access, rectification, portability and deletion of your data, as well as the right to object to the processing of your data and to restrict the processing thereof. You can learn more about these rights in your Facebook settings. You can also contact the data protection officer of Facebook Ireland Limited, whose contact details can be found in the Facebook Ireland data policy (see https://www.facebook.com/help/contact/540977946302970).
We have agreed with Facebook Ireland Limited that the Irish Data Protection Commission is the lead supervisory authority overseeing processing for Page Insights (exceptions may apply if the Page operator is a public authority). You always have the right to lodge a complaint with the Irish Data Protection Commission (see at www.dataprotection.ie) or with any other supervisory authority.
The Facebook company page is based on the social media portal of Facebook Ireland Limited, which is operated responsibly by the latter and not by us. The product sovereignty and product design of so-called Facebook pages lies with Facebook Ireland Limited for platform-related reasons. For further information regarding the data collected and data processing procedures, the purposes of processing or the storage periods, please visit the data policy of Facebook Ireland Limited (see https://www.facebook.com/about/privacy/update).
Storage period: We store your personal data for as long as is necessary to process your respective request or for as long as we are entitled or obligated to store it due to legal retention obligations.
Third country reference of the processing of your personal data: In addition, it should be noted that the processing of personal data in countries outside the European Union, in particular in the USA, cannot be ruled out. Under certain circumstances, this may be associated with the risk of more difficult legal enforcement, which represents a risk for the individual user.
Your rights as a data subject
You may freely withdraw your consent under data protection law at any time with effect for the future; we will point this out in more detail when you give your consent. Processing carried out before a revocation remains unaffected by the revocation.
You have the right to request information about your personal data that we process at any time. If your personal data is incorrect or incomplete, you have the right to have it corrected and completed. You can request the deletion of your personal data at any time, unless we are legally obliged or entitled to continue processing your data. If the legal requirements are met, you may request restriction of the processing of your personal data.
If processing takes place on the basis of your consent or within the framework of a contract, you have a right to transfer the data you have provided, provided that this does not affect the rights and freedoms of other persons.
You have the right to address any questions or complaints to a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement. The supervisory authority responsible for us is the Data Protection Authority Aufsichtsbehörde NRW (www.ldi.nrw.de).
You have the right to object at any time to the processing of your data based on a balance of interests or in the public interest on grounds relating to your particular situation. This also applies to profiling based on this provision. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. We will observe this objection for the future. The objection can be made form-free and should preferably be addressed to E.ON Drive Infrastructure GmbH, Alfredstrasse 81, 45130 Essen/Germany or E-mail: dataprotection@edri.com.
E. CRIF Data utilisation right
We transmit personal data collected within the scope of this contractual relationship regarding the application and execution of this business relationship as well as data on non-contractual behaviour to CRIF GmbH, Victor-Gollancz-Str. 5, 76137 Karlsruhe.
The legal basis for this transfer is Article 6(1) sentence 1(b) and (f) of the General Data Protection Regulation (GDPR). The data exchange with CRIF GmbH also serves to fulfil legal obligations to carry out creditworthiness checks (sections 505a and 506 of the German Civil Code).
CRIF GmbH processes the data received and also uses it for the purpose of profiling (scoring) in order to provide its contractual partners in the European Economic Area and Switzerland and, if applicable, other third countries with information, among other things, to assess the creditworthiness of natural persons. The transfer of personal data to third countries takes place in accordance with Art. 44 ff. GDPR. Further information on the activities of CRIF GmbH can be found in its information sheet or online at www.crif.de/datenschutz.
