Imprint Contact French English Deutsch Home › Dataprotection Data protection information Status February 2021 The protection of personal data is an important concern for WEB Windenergie AG (hereinafter "W.E.B", "we" or "us") and its group companies. In accordance with Articles 13 and 14 of the EU General Data Protection Regulation (hereinafter "GDPR"), we inform you below, among other things, about what personal data is processed when you visit the website "web.energy" (hereinafter the "website") and when you visit one of our social media company pages, how we handle it and what rights you have under applicable data protection law. In addition, you will also find links to further data protection information of W.E.B on specific topics. Content: I. General information II. Data processing website III. Data processing social media IV. Further data processing I. General information 1. Name and contact details of the controller Controller in the sense of the legal provisions on data protection (e.g. GDPR) for the processing of your personal data is: WEB Windenergie AG Davidstraße 1, A-3834 Pfaffenschlag bei Waidhofen an der Thaya FN 184649 v Phone: +43 2848 6336 E-Mail: office@web.energy All questions and requests regarding data protection can also be sent directly to the following e-mail address: dataprotection@web.energy 2. Legal bases The term "personal data" under data protection law refers to all information relating to an identified or identifiable natural person. In data protection law, the IP address is also generally considered to be personal data. An IP address is assigned to every device connected to the Internet by the Internet provider so that it can send and receive data. We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and the Data Protection Act (DSG). Data processing by us only takes place on the basis of a legal permission. 3. Duration of storage We store your data only as long as it is necessary to achieve the purpose of processing or to fulfill our contractual or legal obligations. Legal retention obligations may arise in particular from commercial or tax regulations. 4. External service providers and other recipients In the course of our processing of personal data, the data may be transferred to or disclosed to other bodies, companies, legally independent organizational units or persons. This includes, for example, service providers in the area of hosting, maintenance and support of IT systems as well as postal and delivery services, our house bank and tax advisors/auditors. Our service providers only process data on the basis of explicit instructions and are contractually obligated to ensure appropriate technical and organizational data protection measures. In all cases, we comply with the statutory requirements. 5. Processing when exercising your rights according to Art 15 to 22 GDPR If you exercise your rights pursuant to Art 15 - 22 GDPR, we process the personal data you have provided for the purpose of safeguarding your rights and to be able to provide evidence thereof. These processing operations serve to fulfill the legal obligations pursuant to Art 15 - 22 GDPR. The legal basis is therefore Art 6 (1) (c) GDPR. 6. Your rights You have the right to assert your data subject rights against us. In particular, you have the following rights: According to Art 15 GDPR, you have the right to request information about whether and, if so, to what extent we process personal data relating to you. According to Art 16 GDPR, you have the right to demand that we correct your data if it is incorrect, outdated or otherwise inaccurate. According to Art 17 GDPR, you have the right to demand that we delete your personal data if the storage is inadmissible, the purpose of the processing is fulfilled and the storage is no longer necessary or you have revoked a granted consent to process certain personal data. According to Art 18 GDPR, you have the right to request the restriction of the processing of your personal data if one of the conditions specified in Art 18 (1) GDPR is met. According to Art 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format or to request its transfer to another controller. If you have given us separate consent to data processing, you may revoke this consent at any time in accordance with Art 7 (3) GDPR. Such a revocation does not affect the lawfulness of the processing that was carried out on the basis of the consent until the revocation. If you believe that a processing of personal data concerning you violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Art 77 GDPR. 7. Right of objection According to Art 21 (1) GDPR, you have the right to object, on grounds relating to your particular situation, to the processing of your data based on the legal basis of Art 6 (1) (e) or (f) GDPR. If we process personal data about you for the purpose of direct marketing, you may object to such processing according to Article 21 (2) and (3) GDPR. II. Data processing website When you use the website, we collect information that you provide yourself. In addition, during your visit to the website, we automatically collect certain information about your use of the website. 1. Processing of server log files During the purely informative use of our website, general information is first automatically retrieved that your browser transmits to our server. This includes by default: date and time of the server request accessed page browser type/version operating system used the previously visited page IP address HTTP status code The processing is carried out to protect our legitimate interests and is based on the legal basis of Art 6 (1) (f) GDPR. This processing serves the technical administration and security of the website. We do not store this data. We are not able to identify you as a data subject from the information collected. 2. Cookies We use cookies and similar technologies on our website. Cookies are small text files that are stored by your browser when you visit a website. This identifies the browser used and can be recognized by our web server. We use so-called "session cookies", which are deleted when the browser session is closed, and cookies that are automatically deleted after a specified period of time ("persistent cookies"). The use of cookies is partly technically necessary for the operation of our website and is therefore in our legitimate interest. The legal basis is then Art 6 (1) (f) GDPR. We also use cookies and similar technologies to track user behavior. In particular, we pursue marketing purposes with this. This analysis is only carried out on the basis of the user's consent. The legal basis is then Art 6 (1) (a) GDPR. Cookies are stored on the user's computer. Therefore, as a user, you also have full control over the use of cookies. You can delete the cookies in the security settings of your browser at any time. You can object to the use of cookies through your browser settings in principle or for specific cases. Further information on this is provided, for example, by the German Federal Office for Information Security at this link: https://www.bsi-fuer-buerger.de/BSIFB/DE/Empfehlungen/EinrichtungSoftware/EinrichtungBrowser/Sicherheitsmasnah men/Cookies/cookies_node.html Via our consent management tool "Cookiebot", you can also manage for the use of which cookies and comparable technologies on our website you would like to give us consent, and revoke consent already given. For more information on how cookies and similar technologies are used by us, please see below. You can also view more information about the cookies used by us on the website under the further cookie settings. Your Cookie adjustment. We use cookies on our website. Some of them are essential, while others help us to improve this website and your experience. Cookies are small text files that can be used by websites to make a user's experience more efficient. The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission. This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages. You can at any time change or withdraw your consent from the Cookie Declaration on our website. Learn more about who we are, how you can contact us and how we process personal data in our Privacy Policy. Please state your consent ID and date when you contact us regarding your consent. Your consent applies to the following domains: web.energy Your current state: Deny. Change your consent Cookie declaration last updated on 11/21/21 by Cookiebot: Necessary (9) Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies. Name Provider Purpose Expiry Type ASPSESSIONID# web.energy Preserves users states across page requests. Session HTTP Cookie AWSALB web.energy Registers which server-cluster is serving the visitor. This is used in context with load balancing, in order to optimize user experience. 6 days HTTP Cookie AWSALBCORS [x2] web.energy windenergie.at Registers which server-cluster is serving the visitor. This is used in context with load balancing, in order to optimize user experience. 6 days HTTP Cookie cms_actiontable web.energy Pending Session HTML Local Storage CookieConsent Cookiebot Stores the user's cookie consent state for the current domain 1 year HTTP Cookie notfirstcall web.energy Pending Persistent HTML Local Storage notfirstsessioncall web.energy Pending Session HTML Local Storage user web.energy Unique id that identifies the user's session. Session HTTP Cookie Preferences (1) Preference cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in. Name Provider Purpose Expiry Type yt-player-bandaid-host YouTube Used to determine the optimal video quality based on the visitor's device and network settings. Persistent HTML Local Storage Statistics (3) Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously. Name Provider Purpose Expiry Type _ga Google Registers a unique ID that is used to generate statistical data on how the visitor uses the website. 2 years HTTP Cookie _gat Google Used by Google Analytics to throttle request rate 1 day HTTP Cookie _gid Google Registers a unique ID that is used to generate statistical data on how the visitor uses the website. 1 day HTTP Cookie Marketing (9) Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers. Name Provider Purpose Expiry Type ads/ga-audiences Google Used by Google AdWords to re-engage visitors that are likely to convert to customers based on the visitor's online behaviour across websites. Session Pixel Tracker yt.innertube::nextId YouTube Registers a unique ID to keep statistics of what videos from YouTube the user has seen. Persistent HTML Local Storage yt.innertube::requests YouTube Registers a unique ID to keep statistics of what videos from YouTube the user has seen. Persistent HTML Local Storage yt-remote-cast-installed YouTube Stores the user's video player preferences using embedded YouTube video Session HTML Local Storage yt-remote-connected-devices YouTube Stores the user's video player preferences using embedded YouTube video Persistent HTML Local Storage yt-remote-device-id YouTube Stores the user's video player preferences using embedded YouTube video Persistent HTML Local Storage yt-remote-fast-check-period YouTube Stores the user's video player preferences using embedded YouTube video Session HTML Local Storage yt-remote-session-app YouTube Stores the user's video player preferences using embedded YouTube video Session HTML Local Storage yt-remote-session-name YouTube Stores the user's video player preferences using embedded YouTube video Session HTML Local Storage Unclassified (2) Unclassified cookies are cookies that we are in the process of classifying, together with the providers of individual cookies. Name Provider Purpose Expiry Type perms web.energy Pending Session HTTP Cookie userpermshash web.energy Pending Session HTTP Cookie 3. Cookiebot We use the service Cookiebot of the company Cybot A/S, based in Denmark, to obtain your consent and to withdraw your consent. Collected are: your IP address (in anonymized form) date and time of your consent our website URL technical browser data the cookies that you have allowed The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis arises from our legal obligation (Art 6 (1) (c) GDPR) to document your consent in accordance with Art 7 (1) GDPR. 4. Contact options and inquiries You can send us messages via a contact form, which is included on our website. The transmission of your data is encrypted (recognizable by the "https" in the address line of the browser). To answer your request, we need your name, e-mail address, a subject and the message text. Alternatively, you can send us a message via the contact e-mail address office@web.energy. If your request is directed towards the conclusion or performance of a contract with us, Art 6 (1) (b) GDPR is the legal basis for data processing. Otherwise, we process the data on the basis of our legitimate interest in contacting inquiring persons. The legal basis for data processing is then Art 6 (1) (f) GDPR. 5. Newsletter a) Registration and deregistration You have the possibility to subscribe to our newsletter via our website. After registration we will inform you regularly about current news on the part of W.E.B. To subscribe to the newsletter, you must provide a valid e-mail address as well as your name and an area of interest. Once you have registered for the newsletter, we will send you a confirmation e-mail with a link to confirm your registration (double opt-in). If you subscribe to the newsletter on our website, we process personal data on the basis of the consent you have given (Art 6 (1) (a) GDPR). You can revoke your consent at any time with future effect, for example via the "unsubscribe" link in the newsletter or by contacting us via the channels mentioned above. The legality of the data processing operations already carried out remains unaffected by the revocation. When registering for the newsletter, we also store the IP address and the date and time of registration. The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis arises from our legal obligation (Art 6 (1) (c) GDPR) to document your consent in accordance with Art 7 (1) GDPR. b) Analysis We analyze the reading behavior and the opening rates of our newsletter. For this purpose, we collect and process aggregated usage data that we do not merge with your e-mail address or your IP address. No profiling takes place. The legal basis for the analysis of our newsletter is Art 6 (1) (f) GDPR, because the processing serves our legitimate interest in optimizing our newsletter. You can object to the future sending of our newsletter at any time with effect for the future - either by using the link located at the bottom of each of our mailings or by sending an e-mail to the e-mail addresses listed under Contact. A separate revocation of the dispatch by the dispatch service provider or the statistical evaluation is unfortunately not possible. In this case, the entire newsletter subscription must be cancelled. c) Service provider For the management of subscribers and the dispatch of the newsletter, we use the services of Eyepin GmbH (Austria/EU). With regard to the processing of personal data, we have contractually obligated this provider to comply with the requirements of European Data Protection Law. 6. Google Analytics We use the service Google Analytics provided by Google Ireland Limited (Ireland/EU) to analyze visits to our website. Google uses cookies that enable an analysis of your use of our website. This involves processing personal data in the form of online identifiers (including cookie identifiers), IP addresses, device identifiers and information about interaction with our website. Google will use this information on our behalf for the purpose of evaluating your use of our website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. In doing so, pseudonymous usage profiles of the users can be created from the processed data. We only use Google Analytics with IP anonymization activated. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area (EEA). Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by the user's browser is not merged with other data from Google. Information on the cookies used by Google can be found at https://policies.google.com/technologies/types?hl=de. The setting of cookies and the further processing of personal data described here takes place with your consent. The legal basis for data processing in connection with the service Google Analytics is therefore Art 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future. You can also prevent Google Analytics from storing cookies by selecting the appropriate settings on your browser software. You can also prevent the collection of information generated by the cookie by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout. 7. Google Ads We use the online advertising program Google Ads of Google Ireland Limited (Ireland/EU), through which we place advertisements on the Google search engine. When you access our website via a Google ad, Google sets a so-called conversion cookie on your terminal device. Each Google Ads customer is assigned a different conversion cookie, so that the cookies cannot be tracked across the websites of different Ads customers. The information collected using the cookie is used to create conversion statistics. This tells us the total number of users who clicked on one of our Google ads. However, we do not receive any information with which users can be personally identified. Insofar as personal data is processed in this context, this is done on the basis of your consent. The legal basis is therefore Art 6 (1) (a) GDPR. 8. Integrated services We use services provided by third-party providers on our website. For such integration, a processing of your IP address is technically necessary so that the content can be sent to your browser. Your IP address is therefore transmitted to the respective third-party providers. This data processing is carried out in each case to protect our legitimate interests in the optimization and economic operation of our website and is thus based on the legal basis of Art 6 (1) (f) GDPR. You can object to this data processing at any time via the settings of the browser used or certain browser extensions. One such extension is, for example, the Matrix-based firewall uMatrix for the browsers Firefox and Google Chrome. Please note that this may result in functional restrictions on the website. We have integrated content from the following services provided by third-party providers into our website: "polyfill" of The Financial Times Limited (United Kingdom) to compensate for the different display of the website in different browsers; For more information from the third-party provider on data protection, please refer to the following website: https://polyfill.io/v3/privacy-policy "bootstrapcdn.com" offered by StackPath LLC, 2021 McKinney Ave. Suite 1100, Dallas, TX 75201 (USA), to display content. For the exceptional cases where personal data is transferred to the USA, StackPath has declared the standard contractual clauses approved by the EU Commission applicable in its Data Processing Addendum, which is an integral part of the Master Service Agreement; "Google Fonts" of Google Ireland Limited (Ireland/EU) for the display of fonts. For more information, please refer to Google's Frequently Asked Questions (FAQs). We use certain services provided by third-party providers on our website only with your consent. The legal basis for the use of these services is Art 6 (1) (a) GDPR. You can manage the giving of your consent for these services in the cookie settings. We use the following service based on your consent: "Google-Maps " of Google Ireland Limited (Ireland/EU) to display maps. III. Data processing social media We are represented on several social media platforms with a company page. Through this, we would like to offer further opportunities for information about our company and for exchange. When you visit our profile on a social media platform, personal data may be processed. The information associated with a social media profile used also regularly constitutes personal data. This also covers messages and statements made using the profile. In addition, during your visit to a social media profile, certain information is often automatically collected about it, which may also constitute personal data. We would like to point out that user data may be transferred to third countries in the process. This may result in risks for you because, for example, it could make it more difficult to enforce the rights of users. We are present on the following social media platforms: Facebook Instagram LinkedIn Xing 1. Facebook and Instagram When visiting our Facebook or Instagram page, through which we present our company, personal data is processed. The sole controller of this processing of personal data is Facebook Ireland Ltd (Ireland/EU). For more information about the processing of personal data by Facebook, please visit https://www.facebook.com/privacy/explanation. Facebook offers the option to object to certain data processing; information and opt-out options in this regard can be found at https://www.facebook.com/settings?tab=ads. With the operation of our Facebook and Instagram page, Facebook provides so-called "page insights". These page insights are anonymized statistical data about the users and visitors of our Facebook and Instagram page. For this purpose, Facebook stores cookies on the end devices of the users or visitors of the Facebook and Instagram page. This information or data stored in the cookies is called up again during a subsequent visit to the website, whereby the end device can be recognized. The data stored in the cookies is received and processed by Facebook. Further information on cookies by Facebook is available at https://de-de.facebook.com/policies/cookies/. Although we only receive anonymized data with the help of the cookies set by Facebook, the creation of these statistics is based on the prior processing of personal data. This processing of personal data is carried out by Facebook and us as joint controllers. The processing serves our legitimate interest to evaluate the types of actions taken on our site and to improve our site based on these findings. The legal basis for this processing is Article 6 (1) (f) GDPR. We have entered into a joint controller agreement with Facebook, which sets out the distribution of data protection obligations between us and Facebook. For details about the processing of personal data to create page insights and the agreement concluded between us and Facebook, please visit https://www.facebook.com/legal/terms/information_about_page_insights_data. You also have the option of asserting your data subject rights against Facebook. Further information on this can be found in Facebook's privacy policy at https://www.facebook.com/privacy/explanation. Please note that according to Facebook's privacy policy, user data is also processed in the USA or other third countries. Facebook transfers user data only to countries for which an adequacy decision has been issued by the European Commission pursuant to Art 45 GDPR or on the basis of appropriate safeguards pursuant to Art 46 GDPR. 2. LinkedIn LinkedIn Ireland Unlimited Company (Ireland/EU) is the sole responsible party for the processing of personal data when visiting our LinkedIn page. For more information about the processing of personal data by LinkedIn, please visit https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy. When you visit or follow our LinkedIn company page, LinkedIn processes personal data to provide us with insights into anonymized statistics. This gives us insights into the types of actions people take on our page (so-called "page insights"). For this purpose, LinkedIn processes in particular such data that you have already provided to LinkedIn via the information in your profile, such as data on function, country, industry, seniority, company size and employment status. In addition, LinkedIn processes information about how you interact with our LinkedIn company page, such as whether you are a follower of our LinkedIn company page. With the page insights, LinkedIn does not provide us with any personal data about you. We only have access to the aggregated page insights. It is also not possible for us to draw conclusions about individual members via the information in the page insights. This processing of personal data in the context of the page insights is carried out by LinkedIn and us as joint controllers. The processing serves our legitimate interest in evaluating the types of actions taken on our LinkedIn company page and improving our company page based on these insights. The legal basis for this processing is Article 6 (1) (f) GDPR. We have entered into a joint controller agreement with LinkedIn, which sets out the distribution of data protection obligations between us and LinkedIn. The agreement is available at: https://legal.linkedin.com/pages-joint-controller-addendum. Please note that according to the LinkedIn Privacy Policy, personal data is also processed by LinkedIn in the USA or other third countries. LinkedIn transfers personal data only to countries for which an adequacy decision has been issued by the European Commission pursuant to Article 45 GDPR or on the basis of appropriate safeguards pursuant to Article 46 GDPR. 3. XING New Work SE (Germany/EU) is the sole responsible party for the processing of personal data when visiting our XING profile. Further information about the processing of personal data by New Work SE can be found at https://privacy.xing.com/de/datenschutzerklaerung. We also process information that you have provided to us via our XING company page. Such information may be the username used, contact details or a message to us. We regularly process this personal data only when we have been in contact with you. These processing operations are carried out by us as the sole controller. We process this data based on our legitimate interest in contacting the inquirers. The legal basis for the data processing is Article 6 (1) (f) GDPR. In addition, we may process this data for evaluation and marketing purposes. These processing operations are carried out on the legal basis of Art 6 (1) (f) GDPR, because they are carried out in our legitimate interest to further develop our product range and to inform you specifically about offers and promotions. Further data processing may take place if you have consented (Art 6 (1) (a) GDPR) or if this serves the fulfillment of a legal obligation (Art 6 (1) (c) GDPR). IV. Further data processing Below you will find further data protection information of W.E.B on the topics listed: 1. Contractual relationship For the establishment or implementation of contractual relationships, the processing of the personal master, contract and payment data of the contractual partner provided to us is regularly required. The legal basis for this processing is Art 6 (1) (b) GDPR. In addition, we process customer and prospective customer data for evaluation and marketing purposes. These processing operations are carried out on the legal basis of Art 6 (1) (f) GDPR and serve our interest to further develop our product range and to inform you specifically about our offers. Further data processing can only take place if you have consented (Art 6 (1) (a) GDPR) or if this serves the fulfillment of a legal obligation (Art 6 (1) (c) GDPR). 2. Green Power Contracts Click here for the data protection information Green Power Contracts 3. Applications Click here for data protection information Applications 4. Land use contracts Click here for data protection information on land use contracts WEB Windenergie AG Davidstraße 1, A-3834 Pfaffenschlag, Phone: +43 2848 6336, Telefax: +43 2848 6336-14, office@web.energy, www.web.energy