Contact
Magazine
Career

Data protection

Information letter in compliance with Art. 13, 14 GDPR

To our GDPR letters

ENGIE Germany is aware of the importance of the protection of personal data and takes it very seriously. Consequently, your personal data will be processed confidentially and in accordance with the statutory data protection regulations - in particular the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and the German Telemedia Act (TMG) as well as this data privacy policy.

The following statements apply exclusively to the website of ENGIE Germany at engie-deutschland.de, but not to companies that link to our website or to companies on whose websites we link.

In the context of the use of our website, various personal data, i.e. data relating to an identified or identifiable person, are collected. In compliance with Article 13 DS-GVO, we therefore inform you below about the type, scope and purpose of the collection and use in connection with the use of our website. You will receive information on how your data is used and what rights you have with regard to its use.


1. Responsible party
 

The responsible partyas defined by Article 4(7) of the GDPR is the

ENGIE Deutschland GmbH
Aachener Straße 1044, 50858 Köln
T +49 221 46905-0 |
info-deutschland@engie.com

2. Data protection officer
 

The data protection officer for ENGIE Germany GmbH can be reached at:

Mr. Boris Reibach
Scheja und Partner Rechtsanwälte mbB
Adenauerallee 136, 53113 Bonn
T +49 228 227226-0 |
Contact form: scheja-partner.de/kontakt/kontakt 


3. Collection and storage of personal data and the nature and purpose of their use


a)   Server log files
When you access our website, information is automatically sent to the server of our website by the browser used on your device (laptop, tablet, smartphone, etc.). This information is temporarily stored in a log file. The following information is recorded without your intervention and stored until automatic deletion:

  • IP address of the accessing terminal,
  • date and time of access,
  • name and URL of the retrieved file,
  • web page from which access is made (referrer URL),
  • browser type used, browser version  used and, if applicable, the operating system of your device and the
  • name of your Internet service provider.

    The aforementioned data is processed by us in order to ensure a smooth connection to the website as well as a comfortable use of our website, to evaluate the system security and stability as well as for other administrative purposes. ENGIE Deutschland does not use the above data to identify you personally.

    The legal basis for data processing is Art. 6 (1) sentence 1 lit. f GDPR. Our legitimate interest derives from the purposes listed above for data collection.


b)   Use of contact forms
We provide you with the opportunity to contact us regarding various issues in different areas of our website using a form provided on the web pages. Among other things, it is necessary to provide your contact details so that we know from whom the request originates and so that we can respond to it. The personal data you provide when using these contact forms is automatically stored.

Data processing for the purpose of contacting us is carried out in compliance with Art. 6 (1) sentence 1 lit. f GDPR. Our legitimate interest here is the receipt and processing of inquiries, complaints or other feedback. The personal data collected in the context of the use of the contact forms will be deleted after completion of the request made by you and expiration of any retention periods.

c) mailto links and e-mail communication

You can contact us by e-mail at any time. For this purpose, we have integrated mailto links in various areas of our website, which your e-mail program opens with our pre-filled e-mail address.

The data processing for the purpose of contacting us is carried out in compliance with Art. 6 (1) sentence 1 lit. f GDPR. Our legitimate interest here is the receipt and processing of inquiries, complaints or other feedback. The personal data collected in the context of the e-mail communication will be deleted after completion of the request made by you and expiration of any retention periods.

d)    Downloading brochures
On our website we offer you the possibility to download brochures. In this context, we will obtain your consent to the processing of your data in order to inform you about goods or services of companies of the ENGIE Group. This data processing for advertising purposes takes place in compliance with Art. 6 (1) lit. a GDPR.
You can revoke your consent at any time with future effect. The lawfulness of the processing carried out on the basis of the consent until revocation remains unaffected.
We delete your data if it is no longer necessary for the purposes pursued by us, or if you have revoked your consent and no other legal basis exists. If there is any other legal basis, we will delete your data after it no longer exists.


4. Disclosure of data


Your personal data will not be transmitted to external recipients for purposes other than those listed below.

We only pass on your personal data to external recipients if

  • you have given your express consent to this in compliance with Art. 6 (1) sentence 1 lit. a GDPR
  • transfer pursuant to Article 6(1), first sentence, lit. f GDPR is necessary to assert, exercise or defend legal claims and there is no reason to believe that you have an overriding interest worthy of protection in the non-disclosure of your data,
  • this is necessary to fulfill a legal obligation to which we are subject (Art. 6.1 sentence 1 lit. c GDPR)
  • this is legally permissible and in accordance with Art. 6 (1) sentence 1 lit. b GDPR is required for the processing of contractual relations with you.

External recipients can be:

  • Processor: Service providers that we use for the provision of services or that are entrusted with the maintenance of our IT systems.
  • Public Sector: Authorities and state institutions, such as public prosecutors, courts or financial authorities, to which we may have to transmit personal data on a case-by-case basis.
  • Private entities: Private entities to which we transfer your personal data, such as lawyers (disputes, collections, etc.), tax consultants, auditors.

Within the company, those departments receive your data, which they absolutely need to fulfill our contractual and legal obligations.


5. Cookies


We use cookies on our website. Cookies are text files which are created by your Internet browser when you visit our website and are stored and stored on your computer system. Information is stored in the cookie that is related to the specific end device used.

Many websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters by which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This enables the visited websites and servers to distinguish the individual browser of the data subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified via the unique cookie ID.

The use of cookies serves on the one hand to make the use of our offer more pleasant for you. Cookies enable us, for example, to recognize the users of our website. The purpose of recognition is to make it easier for users to use our website. For example, the user of an Internet site that uses cookies does not have to re-enter his or her access data each time he or she visits the Internet site, because this is handled by the Internet site and the cookie stored on the user's computer system.

We use the following cookies:

Required cookies

These cookies are necessary for the website to function and for you to navigate the pages and use their services and features.

Analytical cookies

We use analytical cookies to collect statistics about the use of our website to improve the performance and design of the website and our services. For this purpose, analytical cookies collect information about your:

  • device type
  • operating system type
  • browser type
  • other system settings
  • referring URLs
  • Actions on the pages and the dates and times of your visits, the country and the time zone in which your device is located

The data processed by necessary cookies are required for the aforementioned purposes to protect our legitimate interests and those of third parties in accordance with Art. 6 (1) p. 1 lit. f of the GDPR.
Data processing by the analytical cookies is based on Art. 6 (1) lit. a GDPR. You can revoke your consent at any time by selecting "Allow required cookies" in the cookie settings.

The data subject can prevent the setting of cookies by our website at any time using an appropriate setting of the Internet browser used and thus object permanently to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time using an Internet browser or other software programs. This is possible in all common Internet browsers. If the data subject disables the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.


6. Analysis tools


When visiting our website, we carry out tracking measures, which are specifically described below. All tracking measures mentioned below are based on Art. 6(1) sentence 1 lit. a GDPR, i.e. we will only set the optional cookies if you have given your prior consent. You can revoke your consent at any time. Their primary purpose is to ensure that our website is designed to meet the needs of our customers and to optimize it on an ongoing basis. In addition, we also use tracking measures to statistically record the use of our website and evaluate it for the purpose of optimizing our offer for you. The respective data processing purposes and data categories are shown in detail in the presentation of the corresponding tracking tools.


(a) Matomo
Our website uses Matomo, a web analysis service.

Matomo uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. For this purpose, the usage information generated by the cookie (including your shortened, anonymized IP address) is transmitted to our server and stored for usage analysis purposes, which serves to help us optimize the website. Your IP address is immediately anonymized during this process, so that you as a user remain anonymous to us. The information generated by the cookie about your use of this website will not be disclosed to third parties. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

If you do not agree with having this data from your visit stored and analyzed, you can object to its storage and use at any time by clicking on the following link. In this case, an opt-out cookie is stored in your browser, which means that Matomo does not collect any session data. Attention: If you delete your cookies, this will result in the opt-out cookie also being deleted and you may have to activate it again.

These cookies are valid for up to one year.

Click here to prevent  Matomo from storing cookies on your computer.

b) Google Analytics
We use, subject to your consent, Google Analytics, a web analysis service provided to us by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland  ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site.

During your visit to the website, the following data is collected, among others:

  • device type
  • operating system type
  • browser type
  • other system settings
  • referring URLs
  • Activities on the pages and the dates and times of your visits, the country and the time zone in which your device is located

Google will use this information on our behalf to evaluate the use of our online offer by the users, to compile reports on the activities within this online offer and to provide us with further services connected with the use of this online offer and the Internet use. Pseudonymous user profiles of the users can be created from the processed data. We only use Google Analytics with activated IP anonymization. This means that the IP address of the users will be shortened by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The IP address transmitted by the user's browser is not merged with other Google data.

You can revoke your consent at any time with future effect by accessing the cookie settings at the beginning of this page and changing your settings accordingly.

You can also prevent the collection of data generated by the cookie and related to your use of the online offer to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
For more information on the Terms of Use and Privacy Policy, visit www.google.com/analytics/terms/de.html or www.google.de/intl/de/policies/.

These cookies are valid for up to 2 years.

You can prevent the collection by Google Analytics by clicking on the following link. [GOOGLEOPTOUT] An opt-out cookie will be set that will prevent future collection of your data when visiting this website Disable Google Analytics.
 

7. Tag Management System
 

For our website we use the Tag Management System "Google Tag Manager" of Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

The Google Tag Manager is a system for managing JavaScript and HTML tags that are used to implement tracking and analysis tools. The Google Tag Manager accesses information stored in your device (e.g. browser information) and passes it on to the respective tool provider.

The legal basis for data processing is Art. 6 (1) (a) GDPR.
 

8. Social Media
 

8.1 Xing Company Profile

We use the "Xing" service of XING SE, Dammtorstraße 30, 20354 Hamburg (contact to the data protection officer) and operate our Xing company profile using this service.

When interacting with you as a user of our Xing company profile, the following data is processed

  • Date and time of interaction
  • Type and content of interaction (e.g. direct messages, comments)
  • Profile name
  • Profile picture

You can access XING SE's privacy policy here: Privacy Policy

The processing of your personal data in the context of the operation of the Xing company profile is based on Art. 6(1)(b) and (f) GDPR and serves the interaction with us and other users as well as the information about our company and current vacancies. In doing so, a legitimate interest corresponding to the purpose is pursued.

Internal departments are the recipients of your personal data. We do not transfer your data to a third country. With regard to the recipients and the transfer to third countries by XING SE, we refer you to their privacy policy.

We will delete your personal data after full completion of the direct communication or after the post to be commented on has been removed. In addition, illegal content may be deleted. With regard to the deletion by XING SE, we refer you to their privacy policy.


8.2 LinkedIn company page

We operate the features of our LinkedIn company page: https://www.linkedin.com/company/engie-deutschland as joint responsible with LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (contact to the data protection officer). For the shared service Insights, we are only provided with statistical data about usage. With regard to this service, we have concluded a contract with LinkedIn Ireland Unlimited Company, which you can view here. You can access the LinkedIn Ireland Unlimited Company's privacy policy here: data protection guideline

You can assert your rights as a data subject both against us and directly against the LinkedIn Ireland Unlimited Company. The LinkedIn Ireland Unlimited Company will be able to react more quickly with respect to the processes it is responsible for, which is why we recommend contacting it directly.

You can use the following features on our LinkedIn company page:

  • Interaction with us and other users
  • Comments on contributions

When interacting with you as a user of our LinkedIn company page, the following data is processed:

  • Date and time of interaction
  • Type and content of interaction (e.g. direct messages, comments)
  • Profile name
  • Profile picture

The processing of your personal data in the context of the operation of the LinkedIn company page is based on Art. 6(1)(b) and (f) GDPR and serves the interaction with us and other users as well as the information about our company and current vacancies. In doing so, a legitimate interest corresponding to the purpose is pursued.

Internal departments are the recipients of your personal data. We do not transfer your data to a third country. With regard to the recipients and the third country transfer of the LinkedIn Ireland Unlimited Company, we refer you to their privacy policy.

We will delete your personal data after full completion of the direct communication or after the post to be commented on has been removed. In addition, illegal content may be deleted. With regard to deletion by LinkedIn Ireland Unlimited Company, we refer you to their privacy policy.


8.3 YouTube channel

We use the service "YouTube" of YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066 USA (represented by Google, Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA) (contact to the data protection officer) and operate our YouTube channel using this service.

You can use the following features on our YouTube channel:

  • Interaction with us and other users
  • Comments on contributions

When you interact with you as a user of our YouTube channel, the following data is processed:

  • Date and time of interaction
  • Type and content of interaction (e.g. likes, direct messages, comments)
  • Profile name

You can access the privacy policy of Google, Inc. here: data guideline

The processing of your personal data in the context of the operation of the YouTube channel is based on Article 6(1)(b) and (f) GDPR and serves the interaction with us and other users as well as information about our products and our company. In doing so, a legitimate interest corresponding to the purpose is pursued.

Internal departments are the recipients of your personal data. We do not transfer your data to a third country. With regard to the recipients and the third country transfer of Google, Inc., we refer to their data protection information.

We will delete your personal data after full completion of the direct communication or after the post to be commented on has been removed. In addition, illegal content may be deleted. With regard to deletion by Google, Inc., we refer you to their privacy policy.
 

9. Third country transfer

 

When processing your data, your personal data may be transferred to bodies whose registered office or place of processing is not located in a Member State of the European Union or in another contracting state to the Agreement on the European Economic Area.
In this context, we ensure before transmission that, outside of exceptional cases permitted by law, the recipient either has an adequate level of data protection (e.g. through an adequacy decision of the European Commission, through appropriate guarantees such as the agreement of so-called EU standard data protection clauses of the European Commission with the recipient) or has your express consent.
You can obtain a copy of the specifically agreed regulations from us to ensure the appropriate level of data protection. Please use the contact details under section 1.
 

10. Rights concerned


You have the right at all times

  • in compliance with Art. 15 GDPR in conjunction with § 34 BDSG, to request information about your personal data processed by us. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it has not been collected from us, and the existence of automated decision-making including profiling and, where applicable, meaningful information on its details;
  • in compliance with Art. 16 GDPR, to demand immediately the correction of incorrect or completion of your personal data stored by us;
  • in compliance with Art. 17 GDPR in conjunction with § 35 BDSG, to request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
  • in compliance with Art. 18 GDPR, to demand the restriction of the processing of your personal data insofar as the correctness of the data is disputed by you, the processing is unlawful, but you refuse its deletion and we no longer need the data, but you need them for asserting, exercising or defending legal claims or you have filed an objection against the processing in compliance with Art. 21 GDPR;
  • in compliance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
  • in compliance with Art. 7 para. 3 GDPR, to revoke your consent to us at any time. As a result, we may no longer continue the data processing based on this consent for the future, without prejudice to the lawfulness of the processing of your personal data on the basis of the consent given until a declared revocation of this revocation, and
  • to lodge a complaint with a supervisory authority in compliance with Art. 77 GDPR.

 

11. Right of objection


If your personal data is processed on the basis of legitimate interests in compliance with Art. 6 (1) p. 1 lit. f DS-GVO, you have the right to object to the processing of your personal data in compliance with Art. 21 DS-GVO, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation.

If you would like to exercise your right of revocation or objection, this is possible at any time without any form using the contact data in compliance with section 1 of this privacy policy.


12. Data security


We use the widely used SSL (Secure Socket Layer) method on our website in conjunction with the highest encryption level supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form, for example,  by the closed display of a key or lock symbol in your browser or by the indication "https" in the address bar of your browser.

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are constantly being developed in line with technological developments.


13. Update and amendments to this Privacy Policy


This privacy policy is currently valid and updated as of August 2021.
As a result of the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this privacy policy. The current privacy policy can be called up and printed out at any time under https://www.engie-deutschland.de/datenschutz