Privacy Statement

We attach great importance to protecting personal data. Therefore, we process your data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the other applicable statutory provisions on the protection of personal data and data security.

The following information applies to our Internet presence (hereinafter referred to as “website”). It provides you with an overview of what personal data we collect from you through our website, and for what purposes and in what way we use such data. In addition, we provide you with information about the rights you have in relation to your personal data.

1. CONTROLLER UNDER DATA PROTECTION LAW

Iqony Solutions GmbH
Rüttenscheider Str. 1-3
45128 Essen
Germany

solutions@iqony.energy

2. CONTACT DETAILS OF OUR DATA PROTECTION OFFICER

STEAG GmbH
Group Data Protection Officer
Rüttenscheider Str. 1–3
45128 Essen
Germany

datenschutz@steag.com 
 

3. PROCESSING OF YOUR DATA

We process personal data whenever this is necessary for the provision of a functioning service or offering on our website. Any further processing of personal data will only take place with your consent. In the text below, we will inform you about which of our offerings, functionalities or services that you will find on our pages require processing of personal data and which we only provide to you on the basis of your consent.

4. LEGAL BASIS AND PURPOSES OF PROCESSING

4.1 Use of the website
Each time you visit our website, our system automatically collects data and information from the computer system of your terminal device in so-called server log files, which your browser automatically transmits to us. When you access a website, your IP address is anonymized by our website hosting service provider. Data recorded includes:

• the browser type and browser version used
• the operating system
• date and time of the server request
• status and error codes with execution time
• website from which the request originates (referrer page)
• IP address (anonymized before recording)
• URL/address of the elements to be loaded • type of request (GET or POST)

Some of this data is automatically transmitted to us due to the settings of your terminal device. In part they are necessary to display our website correctly and to make it secure, as well as to detect and correct possible technical problems (Section 25 para. 2 no. 2 TTDSG). Insofar as we use this data to make our website more usable and attractive, we have a legitimate interest pursuant to GDPR Art. 6 para. 1 sentence 1 lit. f). Your server log data will be deleted after two months at the latest. Since the collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website, you do not have an option to object. Your data will be passed on to our hosting service provider.

4.2 Information provided by you
If you use our general contact form, we will receive your message at info@iqony.energy. We process the data you provide for the purpose specified by you on the basis of your consent (legal basis GDPR Art. 6 para. 1 sentence 1 lit. a). We store information that you send to us via the contact form. The information provided is used for the purpose of processing your request. Your data will be deleted after your request has been processed. You can withdraw your consent at any time with effect for the future, details can be found in section 6 “Your rights”.

If you request information material through specific contact forms on our website, we process the data you provide using hubspot. See section 4.3.3.

4.3 Cookies
In certain areas of our Website, we also use cookies. Cookies are small data elements which a webserver can send to your computer. They store information about the visit to our site.

Our Website uses different types of cookies. Some cookies ensure the correct functioning of the website (necessary cookies). Others enhance your experience when you visit our website, for example, by not requiring you to set your preferences again when you return to our website. And some give us information about your user behavior on our website so that we can improve the performance of our website.

The law allows us to store cookies on your device if they are absolutely necessary for the operation of our website. We provide details of all other cookies below, including the purpose and legal basis for their use (legitimate interest or your consent). Some cookies are placed by third parties that appear on our pages; we also indicate this separately below.

The first time you visit our website, you will be asked if you wish to actively consent to the use of cookies.

4.3.2 SalesViewer^®-technology
We use SalesViewer^® to improve our website.

Scope of processing
SalesViewer^® uses a javascript-based tracking code on our website, which is used to acquire the following information (hereinafter referred to as company data) through the process described in more detail here (https://www.salesviewer.com/en/privacy):

• name, origin and industry of the visiting company
• website from which the request originates (referrer page)
• keyword on the referrer page
• Visitor behavior (e.g. (sub)pages accesses, time of access, duration of visit)

Purposes of processing
We use the data collected for marketing, market research and optimization purposes. This means that only company data is collected and processed.

Recipient
SalesViewer^® uses as subcontractors Hetzer Online GmbH, Industriestr. 25, 91710, Gunzenhausen for server hosting (SalesViewer^® infrastructure) and Host Europe GmbH, Welserstr. 14, 51149 Cologne for provision of DNS servers for SalesViewer^®. We have concluded a data processing agreement with SalesViewer^®.

Storage period
The application does not collect any personal user data.

Legal basis and withdrawal of consent
Using the technology provided by SalesViewer^® GmbH, we collect and store data for marketing, market research and optimization purposes on the basis of legitimate interests (GDPR Art. 6 para.1 sentence 1 lit. f).

You can object to the collection and storage of data at any time with effect for the future by clicking on this link https://www.salesviewer.com/en/opt-out to prevent the collection of data by SalesViewer^® through this website in the future. When you do this, an opt-out cookie for this Website will be placed on your device. If you delete your cookies in this browser, you must click this link again.

4.3.3 Social networks and media
Icons
Our website has embedded social network icons from Youtube, LinkedIn, Instagram and Twitter. The icons only allow you to access these networks via an external link. The icons are not share-buttons but only hyperlinks.

YouTube embeds
Furthermore, we use so-called embeds of the platform YouTube for videos that you can find on our website. YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland. The embedding is done through the technical process of so-called framing. Framing is the process of simply inserting an HTML link provided by YouTube into the code of a website to create a playback frame on our website (so-called third-party presence) and thus enable the video stored on YouTube servers to be played. We use the framing codes generated by YouTube in the so-called “extended data protection mode”. According to the information provided by YouTube, usage data is only transmitted when the user clicks on the play button and starts the video. If you visit our pages without using the video offer, no data is transmitted to YouTube. We offer videos in our legitimate interest to provide you with vivid insights into our company and to explain our products (GDPR Art. 6 para. 1 sentence 1 lit. f).

For information on what data is processed by YouTube and for what purposes this data is used, please refer to YouTube’s privacy policy.

Social media presence
We maintain presences in social media. For more information, please refer to this page.

4.3.4 OpenStreetMap / uMap
On our Website we use the services of the uMap open-source project to provide individual maps with markers via an API (programming interface) of the OpenStreetMap map service. The purpose of this is to display interactive maps directly on the Website, to make it easy to find the places we indicate on the Website, and to enable you to use the map function conveniently. The service provider is the OpenStreetMap Foundation (OSMF for short), 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom.

Each time a user accesses a corresponding page, data for uMap is requested from OSM caching servers (usually the one closest to their location, list available at hardware.openstreetmap.org/#tile-caches) and servers in France and displayed in the browser. At the same time, data is also sent to these servers and temporarily processed in a log file. Specifically, the following data is stored for each access/request:

• date and time of the request (timestamp) as well as the IP address of the accessing device or server,
• request details and destination address (protocol version, HTTP method, referrer, UserAgent string),
• name of the retrieved file and transferred data volume (requested URL incl. query string, size in bytes), and
• message indicating whether the request was successful (HTTP status code).

This log data is stored for a certain period of time. It is used for statistical evaluation, error analysis and defense against attacks. The processing of the IP address is necessary to enable communication on the Internet. OpenStreetMap’s privacy policy can be found at wiki.osmfoundation.org/wiki/Privacy_Policy and wiki.osmfoundation.org/wiki/Services_and_tile_users_privacy_FAQ.

4.3.5 Google Ads

Software distributor
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Scope of processing
Insofar as you have declared your consent (Art. 6 para. 1 sentence 1 (a) of the GDPR), Google Ads, an advertising service of Google LLC, is used on this website. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Our website uses Google Ads, an online advertising service, to present targeted advertisements. Google Ads allows us to present advertisements which are tailored to your interests and needs. It does this by using cookies and similar technologies to collect information about your web activity. The information collected by these cookies on your use of our website is as a rule transmitted to a Google server in the USA and stored there.

We use the function 'anonymizeIP' (so-called IP masking). Due to the activation of IP masking on this website, your IP address will be truncated by Google within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. According to Google, the IP address transmitted by your browser as part of Google Ads is not merged by Google with any other data.

Link to privacy policy:
https://policies.google.com/technologies/ads?hl=en

What data is processed?
During your interaction with Google Ads, the following information, for example, is collected:

• The web pages you visit and your usage history, including your click-through behavior.
• Achievement of defined “website goals”, such as newsletter signups or downloads.
• Your behavioral patterns as a user, including clicks, time spent on pages and bounce rates.
• An approximate location, such as your city in country X
• Your IP address, which is in shortened form.
• Technical information about your browser and the terminal devices you use, such as language settings and screen resolution.
• Your Internet provider.
• The origin website from which your request came (so-called “bounce page”).

Purposes of processing
On behalf of the operator of this website, Google Ads will use this information to analyze your website usage and generate reports about activity on the website. The reports provided by Google Ads are used to analyze the performance of our ads and the success of our marketing campaigns.

Legal basis and revocation option
Your consent under the terms of Art. 6 para. 1 sentence 1 (a) of the GDPR is necessary for this data processing. You can revoke your consent at any time with effect for the future. To do so, follow the link provided in section 4.3 “Cookies”.

Recipient
The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as a processor. We have concluded a processing agreement with Google for this purpose. Google has confirmed to us that they process your data in the European Economic Area. We cannot rule out the possibility that Google LLC, based in California, USA, and possibly US authorities, may access the data stored by Google. Please also read our risk notice on section 5 “Recipients of your data”.

Storage duration
You can disable the tool via the cookie settings here. The lifetime of cookies is up to 180 days (this only applies to cookies set via this website).

Privacy rights and settings
You have the right to withdraw your consent to the processing of your data by Google Ads at any time. You can also adjust your cookie settings to control the use of cookies. However, please note that disabling cookies may affect the functionality of our website.

4.3.6 Microsoft Advertising (formerly Bing Ads)

Software distributor
Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft”).

Scope of processing
Insofar as you have declared your consent (Art. 6 para. 1 sentence 1 (a) of the GDPR), Microsoft Ads (“MS Ads”), an advertising service of Microsoft, is used on this website.

Our website uses MS Ads, an online advertising service, to present targeted advertisements. MS Ads allows us to present advertisements which are tailored to your interests and needs. It does this by using cookies and similar technologies to collect information about your web activity. The information collected by these cookies on your use of our website is as a rule transmitted to a Microsoft server in the USA and stored there.

We use the function ‘anonymizeIP’ (so-called IP masking): Due to the activation of IP masking on this website, your IP address will be truncated by Microsoft within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. According to Microsoft, the IP address transmitted by your browser as part of MS Ads is not merged by Microsoft with any other data.

Link to privacy policy:
Microsoft Privacy Policy – Microsoft Privacy

What data is processed?
During your interaction with MS Ads, the following information, for example, is collected:

Engagement metrics; Number of visits; Bounce rates; Microsoft Click ID; Digital signature; UET ID tag; URLs; Referrer URL; Page title; Conversions; Screen height; Screen width; Browser language setting; Visit duration; Screen color depth; Page response times; Ads clicked.

Purposes of the processing
On behalf of the operator of this website, MS Ads will use this information to analyze your website usage and generate reports about activity on the website. The reports provided by MS Ads are used to analyze the performance of our ads and the success of our marketing campaigns.

Legal basis and revocation option
Your consent under the terms of Art. 6 para. 1 sentence 1 (a) of the GDPR is necessary for this data processing. You can withdraw your consent at any time with effect for the future. To do so, follow the link provided in section 4.3 “Cookies”.

Recipient
The recipient of the data is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft”) as a processor. We have concluded a processing agreement with Microsoft for this purpose. Microsoft has confirmed to us that they process your data in the European Economic Area. We cannot rule out the possibility that Microsoft, based in Washington, USA, and possibly US authorities, may access the data stored by Microsoft. Please also read our risk notice on section 5 “Recipients of your data”.

Storage duration
You can disable the tool via the cookie settings here. The lifetime of cookies is up to 180 days (this only applies to cookies set via this website).

Privacy rights and settings
You have the right to withdraw your consent to the processing of your data by MS Ads at any time. You can also adjust your cookie settings to control the use of cookies. However, please note that disabling cookies may affect the functionality of our website.

4.4 Our website
We use IT and support service providers to provide the website. These service providers are carefully selected by us and act as processors for us.

Our hosting provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.

Our website agency is BOROS, Hofaue 63, 42103 Wuppertal, Germany.

5. RECIPIENTS OF YOUR DATA / TRANSFER TO THIRD COUNTRIES

The processing of data will be carried out generally within a member state of the European Union (EU) or within a member state of the European Economic Area (EEA). Transfer of personal data to a third country or access to such data from a third country shall only take place if the special requirements of Art. 44 ff. GDPR are satisfied (e.g., by agreement of Standard Contractual Clauses or if the recipient acts on a legal basis adopted by the European Commission pursuant to Art. 45 (1) GDPR (so-called “adequacy decision”)). For more details, please refer to the individual service providers mentioned in section 4 hereinabove.

Note: Transfer of data to the USA
With regard to the use of analytics cookies and third-party cookies (such as Google or YouTube), data transfer to the USA cannot be ruled out. On July 10, 2023, the EU Commission decided that the transfer of personal data to the USA can be carried out in compliance with data protection regulations, provided that the US companies used have appropriate certification. Google LLC is certified under the EU-US Privacy Framework. You can find a complete overview of all certified organizations here. As not all US companies have this certification and US security authorities have extensive access powers to monitor "foreign communications", we expressly point out that data protection-compliant use cannot be guaranteed. Please bear this in mind when you give us your consent to set these cookies.

6. YOUR RIGHTS

You have a right of access, i.e. you may request that we disclose to you all your personal information that we have collected and hold for a certain period of time (Art. 15 GDPR). Furthermore, you may also request rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR) and have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG).

Where we process your personal data on the basis of your consent, you can withdraw this consent at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent prior to your withdrawal of consent, but prevents future processing.

Notices of withdrawal of consent and other requests can be addressed to our Group Data Protection Officer..

Of course, you can object to the processing of your personal data for purposes of advertising at any time with effect for the future. You can inform us of your objection to advertising using the following contact details: energyservices@steag.com.

We take your inquiries and concerns very seriously and always endeavor to address them.

Furthermore, you have the right to lodge a complaint with a data protection supervisory authority pursuant to Article 77 GDPR in conjunction with Section 19 BDSG. In North Rhine-Westphalia, the competent data protection supervisory authority is: Landesbeauftragte für Datenschutz und Informationsfreiheit (State Commissioner for Data Protection and Freedom of Information), North Rhine-Westphalia Kavalleriestr. 2 – 4, 40213 Düsseldorf, Germany.

Last updated: January 2022