Privacy Information
We are pleased that you are visiting our website. With this data protection information we inform you about how, to what extent and for what purposes we process personal data when using our website and beyond.
The subject of data protection is personal data. According to Art. 4 GDPR, personal data is all information relating to an identified or identifiable natural person. These include e.g. B. Information such as name, address, e-mail address or telephone number, but also usage data, e.g. B. IP address or content data. We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and the Telecommunications Telemedia Data Protection Act (TTDSG).
1. Controller
Municipal utility Sörup GmbH
Schleswiger Strasse 3
24966 Sorup
Telephone: 04635-996979-0
Email: info[@]gemeindewerk-soerup.de
2. General
Insofar as we obtain your consent for the processing of personal data, Article 6 (1) sentence 1 lit. a GDPR serves as the legal basis. Article 6 (1) sentence 1 lit. b GDPR serves as the legal basis for the processing of your personal data that is required to fulfill a contract between you and us. This also applies to processing operations that are necessary to carry out pre-contractual measures. Insofar as processing of personal data is necessary to fulfill a legal obligation to which the person responsible is subject, Article 6 Paragraph 1 Sentence 1 lit. c GDPR serves as the legal basis. If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the former interest, Article 6 Paragraph 1 Sentence 1 lit. f GDPR serves as the legal basis. Further information on the specific legal bases can be found in the relevant sections.
3. Data collection on our website
When using our website, we only collect the personal data that your browser transmits to our server. If you want to visit our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:
·IP address of the requesting end device;
· Device type used (e.g. smartphone, tablet, PC);
· date and time of access;
· Time zone difference from Greenwich Mean Time (GMT);
· content of the request (specific page);
· access status/HTTP status code;
· Amount of data transmitted;
· Name and URL of the retrieved data;
· Website from which access is made (referrer URL);
· Browser used and name of your internet provider (access provider);
· Selected access method or protocol;
· Operating system and its interface.
The legal basis is Article 6 Paragraph 1 Clause 1 Letter f GDPR. As the website operator, we have a legitimate interest in the technically error-free presentation and optimization of our website.
3.1. cookies
We use cookies. Cookies are data sets that are stored on your end device (desktop PC, laptop, tablet, smartphone, etc.). These data records are generated and sent to you by the web server to which you have established a connection via your web browser. A cookie contains information such as your personal page settings or login information. With the help of cookies, we can, among other things, make our website more user-friendly.
3.2. Cookie origin
First-party cookies are deposited and managed directly by us. So-called third-party cookies are deposited and managed by third parties in order to carry out statistical analyzes of navigation on our site. These analyzes are only carried out pseudonymously.
3.3. session cookies
The session cookie is technically required for the connection to the server in order to display the website. Deselecting is therefore not possible for technical reasons. The session cookie is a temporary cookie that is automatically deleted at the latest after the device is restarted or the session is ended. According to § 25 Abs. 2 TTDSG the setting of technically required cookies is permitted. The legal basis for the processing of personal data is Article 6 Paragraph 1 Clause 1 Letter f GDPR. As the website operator, we have a legitimate interest in the storage of cookies for the technically error-free and optimized provision of our website.
3.4. persistent cookies
Persistent cookies remain stored even after the session is ended or the device is restarted. We do not use persistent cookies on our website.
4. Hosting
We host our website with an external service provider and Internet provider (united-domains AG), which is based in 82319 Starnberg, Munich. The united-domains servers are located in Germany. Personal data collected on this website is stored on the host's servers. The use of united-domain web space and e-mail services is based on Art. 6 Para. 1 lit. f GDPR. We have a legitimate interest in our website being displayed as reliably as possible. If a corresponding consent was requested, the processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a DSGVO and § 25 Para B. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.
order processing
We have concluded an order processing contract with the service provider within the meaning of Art. 28 GDPR for the use of the above services. The host only processes your data to the extent necessary to fulfill its obligations and follows our instructions. You can find more information on data processing by united-domains at: https://www.united-domains.de/unternehmen/datenschutz/
5. Contact
If you send us inquiries via the contact options on the website, your details and personal data from this contact will be processed for the purpose of processing your inquiry and, if necessary, for follow-up questions. The legal basis is Article 6 (1) sentence 1 lit. b GDPR if your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In other cases, we base the processing on our legitimate interest in the effective processing of your request in accordance with Article 6 (1) sentence 1 lit. f GDPR.
5.1. reCAPTCHA
We use Google "reCAPTCHA" from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, Ireland on our website. With reCAPTCHA we can check whether the input of the data e.g. B. in our contact form by a human or by an automated program (bot protection). reCAPTCHA analyzes your visitor behavior, e.g. B. by recording the length of stay, the IP address and the mouse movements. This data is transmitted to Google. The legal basis is Article 6 Paragraph 1 Clause 1 Letter f GDPR, we base the processing on our legitimate interest in the effective processing of your request in accordance with Article 6 Paragraph 1 Clause 1 Letter f GDPR and protection against automated programs. You can find more information on data processing by Google reCAPTCHA at:
https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en .
As an alternative to this procedure (using the contact form), you can also simply send us an email and waive your consent to reCAPTCHA.
5.2. Regional power supply
We integrate services from an external service provider. The service provider is Nordgröön Energie GmbH, Hauptstr. 49, 24994 Medelby. Nordgröön Energie GmbH provides services in connection with the energy-related registration of the regional electricity supplier as a supplier to customers as part of the business processes for supplying customers with electricity, including the corresponding, necessary market communication with the locally responsible network operators, as well as obtaining detailed and for the specific and necessary details for the proper registration process from the locally responsible network operators. Personal data is processed here and the following data is transmitted as part of your request: personal master data, communication data (e.g. telephone number, e-mail), planning and control data as well as contract billing and payment data required for invoicing. Our use of these services is based on Article 6 (1) (f) GDPR. We have a legitimate interest in processing customer requests as reliably as possible.
order processing
We have concluded an order processing contract with the service provider within the meaning of Art. 28 GDPR. The service provider only processes your data to the extent necessary to fulfill its obligations and follows our instructions.
6. Processing of prospect, customer and contract data
We process your personal data to fulfill a contract and to carry out pre-contractual measures in this regard or to terminate our contract. The data processing is necessary for the fulfillment of the contract. The legal basis is Article 6 Paragraph 1 Sentence 1 Letter b GDPR.
7. Processing of contact details of contact persons
We process contact data from contact persons, employees, service providers or vicarious agents of our contractual partners. The legal basis is Article 6 Paragraph 1 Clause 1 Letter f GDPR. Our legitimate interest lies in the smooth handling of the business relationship.
8. Processing of personal data in the context of business contacts
We process your personal data, which we z. B. received from you in the context of business contacts, a trade fair or an event (e.g. handing over your business card and other data) to fulfill a contract and the related implementation of pre-contractual measures (e.g. preparation of an offer). Data processing is required to initiate or fulfill the contract. The legal basis is Article 6 Paragraph 1 Sentence 1 Letter b GDPR.
9. Corporate Transaction
As part of a corporate transaction, it may be necessary to transfer your personal information to a third party. This is at least the case with an asset deal. As part of the due diligence, anonymized or pseudonymised data is always processed. However, it may be necessary in specific individual cases to also process personal data without anonymization or pseudonymization. In this case, the legal basis for the processing of your personal data is Art. 6 (1) sentence 1 lit. f GDPR. Our legitimate interest lies in carrying out the corporate transaction.
10. Recipients or Categories of Recipients
In some cases, we use external service providers to process your personal data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly checked. As a rule, this is done on the basis of order processing in accordance with Art. 28 GDPR. In addition, we only transfer personal data to third parties if there is legal permission to do so or if you have given your prior consent. Your personal data will only be disclosed or transmitted within the scope of the aforementioned purposes to the following recipients or categories of recipients:
· IT service provider;
· Possibly debt collection service providers and lawyers, e.g. B. to collect claims and enforce claims in court;
· If necessary, company buyers/prospects in company transactions;
· Controllers, processors;
· Other authorized parties (e.g. authorities and courts), insofar as there is a legal obligation or authorization to do so;
· Depending on the order to other recipients, which we may coordinate with you.
11. Transfer to countries outside the EU or the EEA
Insofar as we process data outside the European Union (EU) or the European Economic Area (EEA) or this happens in the context of using third-party services or disclosure or transmission of data to third parties, this only takes place if it is necessary to fulfill our (before ) contractual obligations, based on your consent, due to a legal obligation or based on our legitimate interests. To ensure an adequate level of data protection at the recipient of the data, we generally use EU standard contractual clauses and check the existence of additional guarantees with regard to the transfer of personal data to the USA. According to the case law of the European Court of Justice of July 16, 2020 (C-311/18), there is no adequate level of data protection in the USA. The USA is not a safe third country within the meaning of the GDPR. US service providers and their subsidiaries are subject to US laws and are obliged to release personal data to US authorities (e.g. secret services). Affected persons cannot take legal action against this. It is therefore possible for US authorities (e.g. for surveillance purposes) to access, process, evaluate and store personal data. In terms of the GDPR, this constitutes an inadmissible disclosure of personal data. We cannot influence this processing activity.
12. Duration of storage
Your personal data will be stored for as long as is necessary to fulfill the stated purposes. Thereafter (e.g. after your request has been processed; when the relevant facts have been finally clarified; after completion of the order or termination of the business relationship) your personal data will be deleted, unless we are legally required to do so (e.g. commercial or tax retention requirements) are obliged to store them for a longer period of time. In this case, your personal data will initially be blocked and then deleted once the retention period has expired. Storage can also take place if this has been provided for by European or national legislators in EU regulations, laws or other regulations to which our company is subject. In addition, storage can also take place if you have given your consent in accordance with Article 6 Paragraph 1 Clause 1 Letter a GDPR. In the case of obligations to permanently observe objections or revocations, we reserve the right to store your contact details in a blocking list (so-called "denylist") for this purpose alone.
Further information on the duration of the storage and deletion of your personal data can be found in the individual data protection information in this data protection information.
13. Data subject rights
You have a claim against us within the scope of the legal requirements
- Confirmation as to whether your personal data is being processed by us and information about the circumstances of the processing (Art. 15 GDPR);
- Correction if your personal data is incorrect (Article 16 GDPR);
- Deletion of your personal data, insofar as there is no justification for the processing and no obligation to store it (any longer) (Article 17 GDPR);
- Restriction of processing if one of the conditions specified in Article 18 (1) lit. a to d GDPR is met (Article 18 GDPR);
- Data portability of your personal data in a structured, common and machine-readable format (Article 20 GDPR);
- Complaint to a supervisory authority (Article 77 GDPR).
If the processing of your personal data is based on your consent, you have the right to revoke your consent at any time in accordance with Art. 7 Para. 3 DSGVO, with the result that the processing of your personal data will be inadmissible for the future. However, this does not affect the legality of the processing carried out on the basis of the consent until the revocation. The withdrawal of consent can be sent by e-mail to info[@]gemeindewerk-soerup.de or by post to our postal address listed at the beginning of this data protection information.
In addition, pursuant to Article 21 GDPR, in the event of processing based on a legitimate interest pursuant to Article 6 Paragraph 1 Sentence 1 lit must. The objection can be sent by email to info[@]gemeindewerk-soerup.de or by post to our postal address listed at the beginning of this data protection information.
14. Obligation or Obligation to Provide the Data
As part of the fulfillment of a contract and the related implementation of pre-contractual measures of contracts with you, it is necessary for you to provide the personal data that is required for the establishment or implementation of the contract and thus for the fulfillment of the contractual obligations. You are not obliged to provide your personal data. However, if you do not provide this, it is not possible to establish and implement the contractual relationship.
15. No automated decision-making including profiling
We do not process your personal data for the purpose of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) GDPR.
16. Data Security
We have taken the necessary technical and organizational measures to protect the personal data you have provided against loss, destruction, manipulation and unauthorized access. All our employees and all persons involved in data processing are obliged to comply with the GDPR, the BDSG and other data protection laws and to treat personal data confidentially. Our employees are trained accordingly. Both internal and external checks ensure compliance with all data protection-related processes.
17. Changes to the Privacy Policy
New legal requirements, business decisions or technical developments may require changes to our data protection information. The data protection information will then be adjusted accordingly. You can find the latest version here.
Status: January 2023