Source: https://www.next-kraftwerke.com/privacy-statement
Timestamp: 2019-04-24 07:48:01+00:00

Document:
We only process personal data of our users if this is necessary to provide a functional website as well as our contents and services.
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU Data Protection Ordinance (GDPR) serves as the legal basis. In the processing of personal data required for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures. Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis. In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR serves as the legal basis. If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.
Every time our website is accessed, our web server automatically collects data from the computer system of the calling computer and stores it in secure log files.
This data is stored by us for a period of 14 days after the visit of our website.
The legal basis for processing is Art. 6 para. 1 lit. f GDPR. The data is collected and stored in order to technically enable the website to be delivered to the user's computer and to guarantee the functionality of the website and the security of our IT systems. These purposes represent the legitimate interest on the basis of which the processing of the data by us is legal.
The data will only be processed by us and will not be transferred to other recipients or to a third country.
The data stored in the log files will be deleted by us 14 days after collection.
The collection of data for the provision of the website and the storage of data in log files is of utmost importance for the operation of the website and the IT security systems. You have the right to object to the processing by us pursuant to Art. 21 GDPR. However, in our opinion, there is no possibility for you to object to processing when you visit our website, as the processing purposes described are compelling reasons for processing. However, you can avoid processing by no longer visiting our website.
You have the right to request information about data processing from us in accordance with Art. 15 GDPR.
You may request the correction of the data in accordance with Art. 16 GDPR.
You may request the deletion of the data in accordance with Art. 17 GDPR.
In accordance with Art. 18 GDPR, you may restrict the processing of the data by us and to this extent demand notification in accordance with Art. 19 GDPR.
You may object to the processing of the data in accordance with Art. 21 GDPR.
You have the right to lodge a complaint about the processing of data with a supervisory authority.
For details of your rights in this regard, see here.
There is a contact form on our website which can be used to contact us electronically.
All data is processed to generate an e-mail to the employee responsible for you and to use it in the ordinary course of business.
The legal basis for the processing of data collected in the course of the contact form's use is Art. 6 para. 1 lit. f GDPR. If contact is made to establish a business relationship with us, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.
The processing of the data is solely for the purpose of creating the e-mail and using it in the ordinary course of business. This also constitutes the necessary legitimate interest in the processing of this data in accordance to Art. 6 para. 1 lit. f GDPR.
The e-mail generated from the data represents a business letter and is archived after the conversation with you, like all other business letters.
You have the right to object to our processing of your data at any time for reasons arising from your particular situation. In such a case, we will no longer use the data for conversation and the conversation cannot be continued.
You have the right to request information about data processing from us in accordance with Art. 15 GDPR. You may request the correction of the data according to Art. 16 GDPR. You may request the deletion of the data in accordance with Art. 17 GDPR. In accordance with Art. 18 GDPR, you may restrict the processing of data by us and to this extent demand notification in accordance with Art. 19 GDPR. You may object to the processing of your data in accordance with Art. 21 GDPR. You have the right to lodge a complaint about the processing of data with a supervisory authority. Details of your rights in this regard can be found here.
With the help of this cookie, the preferred settings of the user are stored in order to be able to make them available immediately the next time the page is visited. It also makes it easier to fill in forms.
The session cookies we use are deleted after the browser session has ended, so that the data collected by the session cookies is deleted.
This website uses Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies", which are small text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of our website (including the shortened IP address) is usually sent to a Google server in the USA and stored there.
Our website uses Google Analytics exclusively with the code extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and excludes direct personal references. As a rule, your IP address will be reduced by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In these exceptional cases, this processing is carried out in accordance with Art. 6 Para. 1 letter f DSGVO on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.
On our behalf, Google may use this information to evaluate your use of the website, to create reports on website activity and to provide us with other services relating to website and internet use. The IP address transmitted by your browser through Google Analytics is not merged with other Google data.
This site uses web fonts provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") for consistent display. When a page is called, the browser loads the required Web fonts into the browser cache to display texts and fonts as intended.
To do this, your browser must connect to Google's servers. This gives Google knowledge that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. If your browser does not support web fonts, your computer's default font is used.
if specific information on this is not possible, criteria for determining the storage period.
You have a right of rectification and/or completion vis-à-vis us if the personal data processed concerning you is incorrect or incomplete. We will make the correction immediately.
If the restriction on processing has been restricted in accordance with the conditions above, you will be informed by us before the restriction is lifted.
If we have made the personal data concerning you public and we are obliged to delete it pursuant to Art. 17 para. 1 GDPR, we will take appropriate measures, including technical measures, taking into account the available technology and implementation costs, to inform those responsible for data processing who process the personal data that you as the data subject have requested the deletion of all links to this personal data or of copies or replications of this personal data.
If you have exercised your right of rectification, deletion or restriction of processing against us, we are obliged to inform all recipients to whom we have disclosed the personal data concerning you of this rectification or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right vis-à-vis us to be informed about these recipients.
You have the right to object at any time to the processing of your personal data in accordance with Article 6(1)(f) of the GDPR for reasons arising from your particular situation.
b) the processing serves to assert, exercise or defend legal claims.
If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising.
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State of your place of residence or the place of suspected infringement, if you believe that the processing of personal data concerning you is contrary to the GDPR. The supervisory authority to which the complaint was lodged informs you as the complainant about the status and the results of the complaint, including the possibility of a legal remedy under Article 78 GDPR.
We send our newsletter to customers of Next Kraftwerke and its subsidiaries as well as to interested parties, who have registered for it via our website or as part of an event. When registering via the website, the data from the input mask – i.e. your e-mail address – is transmitted to us. In addition, the IP address of the calling computer and the date and time of registration are collected. Your consent will be obtained for the processing of the data during the registration process and reference will be made to this data protection declaration.
The newsletter is sent by the service provider MailChimp. Like the company, the IT systems used by MailChimp are located in the USA. This means that data is passed on to third parties in a non-secure third country, as other data protection conditions exist in the USA. In terms of data protection law, an appropriate level of data protection must be ensured when processing data in a non-EU member state. At MailChimp this is realized by the so-called "Privacy Shield" – for this the Rocket Science Group LLC, which operates MailChimp, is certified.
Like other service providers, MailChimp offers statistical evaluation options for usage data, which also includes tracking of opening and click rates. We only use the tracking data in the form of aggregated reports, there is no analysis of individual usage behavior.
In order to be able to prove the entry in the list and to defend itself against any accusation of unsolicited e-mails, the list provider also stores the date of entry in the list as well as the IP address. Important: There is no further use of the IP address.
In addition, the following data is stored at MailChimp: Date of the last profile update, geolocation & time zone as well as the set language. These functions cannot currently be deactivated by us with MailChimp.
To validate input data, we use the Google reCaptcha service to determine whether a person or computer makes a particular entry in our contact or newsletter form. Google uses the following data to determine whether you are a human being or a computer: IP address of the terminal device used, the website that you visit on our site and on which the captcha is embedded, the date and duration of the visit, the identification data of the browser and operating system type used, the Google account if you are logged in to Google, mouse movements on the reCaptcha areas and tasks for which you must identify images. The legal basis for the data processing described is Art. 6 Para. 1 Letter f of the Basic Data Protection Regulation. There is a legitimate interest on our part in this data processing to ensure the security of our website and to protect us from automated entries (attacks).
The legal basis for processing the data is the existence of a contractual relationship with Next Kraftwerke or a subsidiary of the Next Kraftwerke Group or the user's consent within the scope of registering for the newsletter (Art. 6 Para. 1 lit. a DSGVO).
The legal basis for processing data in the USA is Art. 6 Para. 1 lit. f) DSGVO: According to this, data processing is based on a weighing of interests.
Since sending an e-mail newsletter to several thousand users is technically demanding, we use a technical service provider, who processes the data. In Mailchimp, we have found a secure and powerful service provider for this purpose. By tracking opening and click rates, we are able to offer our readers better and more accurate content and therefore take a justified interest for granted. Anyone concerned can object to the use of their personal data at any time by unsubscribing from the newsletter.
The data is stored by the list provider until the e-mail address is deleted by the owner of the e-mail address or by us as the list operator.
The newsletter can be cancelled by the user at any time. For this purpose there is a corresponding link in every newsletter.
With the following information, we would like to give you an overview of the processing of your personal data in connection with our business relationship and inform you about your rights in accordance with data protection law.
Next Kraftwerke GmbH operates one of Europe’s largest virtual power plants. From a central control platform, it connects power-producing assets from renewable sources such as biogas, wind, and solar with commercial and industrial power consumers and power-storage systems.
The data provided by you will be stored and processed accordingly for the purpose of our business relationship or the initiation of a business relationship between us. The concrete purpose results from the respective contractual relationship or the business relationship conducted up to this point.
We process or store your contact data such as e-mail address, telephone number to contact you as a customer, partner or service provider.
The data will be processed either on the basis of Art. 6 1 b GDPR or on the basis of a legitimate interest, Art. 6 1 f GDPR.
The data recipient is Next Kraftwerke GmbH. Within our company, only persons who are involved in initiating or maintaining a business relationship with you have access to your data. We also partly use service providers who act as our contract processors.
Transmission to states outside the European Union and states of the European Economic Area (EEA) shall only take place in accordance with legal provisions.
Your data will be deleted upon termination of our business relationship, as long as there are no retention obligations. Should storage periods exist, we of course adhere to these.
As a data subject, you have the right of access pursuant to article 15 GDPR, the right to rectification according to article 16 GDPR, the right to erasure pursuant to article 17 GDPR, the right to restriction of processing pursuant to article 18 GDPR, the right to object according to Article 21 GDPR and the right to data portability pursuant to article 20 GDPR. The restrictions under paragraphs 34 and 35 BDSG (German data protection law) apply to the right of access and the right to erasure.
In addition, there is the possibility to send a complaint to a responsible data protection supervisory authority.
If you object, we will no longer process your personal data unless we can prove compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
A pumping station linked in our Virtual Power Plant.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 15
 Art. 16
 Art. 17
 Art. 18
 Art. 19
 Art. 21
 Art. 6
 Art. 6
 Art. 6
 Art. 15
 Art. 16
 Art. 17
 Art. 18
 Art. 19
 Art. 21
 Art. 6
 Art. 6
 Art. 17
 Art. 6
 Art. 6
 Art. 6
 Art. 6