A. Responsible entity
B. General information
Our company, Delta Energy Systems (Germany) GmbH (hereinafter referred to as „Delta Energy Systems“), is pleased about your visit to our website and your interest in our company, our products and services. The protection of your personal data collected, processed and used when visiting our website is a matter of great importance to us. In the following, we explain to you what kind of information we collect during your visit to our website and how we use it.
C. Purpose, legal basis and storage period
I. Visit to the website
Purpose: Every time a user accesses a website of Delta Energy Systems, personal data of this process is stored in a log file. This is for internal, system-based and statistic purposes only. In detail, the following data set is stored for each access:
This data is only collected for the purpose of data security and to optimise our web offer.
Legal basis: We process the personal data mentioned above, based on our overriding interest according to art. 6, para 1, (1) lit. f GDPR in order to make the website technically available to you. Our legitimate interest is to provide you with an attractive, technically functional and user-friendly website and to take measures to protect our website from cyber risks and prevent our website from posing cyber risks to third parties.
Storage period: If you just visit our website, we only store your personal data on our servers for the duration of your visit to our website. Our server deletes the data given immediately after leaving our website.
II. User requests
Purpose: You can send us requests using our contact form or our email address. In any case, we need your name, your company, your email address and your telephone number in order to be able to send you a reply. Apart from that, you can provide voluntary information or we process the information that you send us in the context of your message.
Legal basis: We process your personal data to answer user requests in compliance with the following legal basis:
Storage period: As a rule, we store your personal data for these purposes for the duration of responding to the request or for the duration of the business relationship, e.g. in case a contract is concluded. This includes the initiation of a contract (pre-contractual legal relationship) and the processing of a contract. Apart from that, the storage durations mentioned below apply with regard to the compliance with a legal obligation or for law enforcement.
Purpose: With your consent, we use your data for promotional purposes, especially for transmitting our newsletter. We collect mandatory data such as your email address, but also information that you submit to us on a voluntary basis.
In case we receive your email address in connection with the conclusion of the contract and the provision of our products and you have not objected to this, we reserve the right to send you offers of similar products from our range by email on a regular basis. You can object to this use of your email address at any time by using one of the contact options described below or by using the link in the relevant email, without incurring additional costs other than the transmission costs according to the basic rates.
Storage period: We store your data for the duration of the subscription of our newsletter or until your consent has been withdrawn or until we receive your objection. Apart from that, the storage durations mentioned below apply with regard to the compliance with a legal obligation or for law enforcement.
IV. Compliance with legal obligations
Purpose: In addition, we process your personal data to comply with other legal obligations. These can come up in connection with business communication, among other cases. In particular, this includes retention periods under trade, commercial or tax law (e.g. §§ 238, 257 para 4 HGB or § 147 para 3, 4 AO).
Legal basis: We process your personal data in compliance with the following legal basis:
Storage period: We store your data to comply with legal obligations, initially for the duration of the legal obligation to retain data. This period can vary between two and ten years. For this period, the data will be processed again only in the case of a review by e.g. the financial authorities. Any further storage may then be considered for law enforcement purposes.
V. Law enforcement
Purpose: In addition, we store your personal data to assert our rights and to enforce our legal claims. We also process your personal data to defend ourselves against legal claims. Finally, we process your personal data insofar as this is necessary for the prevention or prosecution of criminal offences.
Legal basis: We process your personal data for this purpose in compliance with the following legal basis:
D. Categories of recipients of personal data
Your data will only be passed on to third parties if this is permitted or required by law or if you have agreed to it. We also share your data to the extent required with our service providers in order to be able to provide our services. We limit the disclosure of data to what is necessary to provide our services to you. In some cases, our service providers receive your data as processors and are then strictly bound by our instructions when handling your data. In some cases, the recipients act independently with your data that we disclose to them.
In the following, we provide you with the categories of the recipients of your data:
• Associated companies within the group as far as they are working for us as processors or independently and e.g. provide IT services or as far as this is necessary for providing our services or your requests concern these;
Furthermore, we can exchange your personal data within our globally active company group, e.g. to subsidiaries that require this data to fulfil our, and/or their own contractual and statutory obligations or require the data based on legitimate interests. These may be economic, administrative or other internal business purposes; this is only applicable insofar as your interests, basic rights, or fundamental freedoms that require the protection of personal data, do not prevail.
Apart from that, we will not pass on your data to third parties.
E. Transfer to third countries
We do business worldwide. Your personal data may therefore be transferred to countries outside the European Union to other parts of our group of companies. Transfer of data to countries outside the European Union or the EEA (so-called third countries) only occurs insofar as this is necessary or legally required in the context of handling of our contractual relationships (e.g. tax reporting requirements), in case you have given us your consent or in the context of the processing of an order. The transfer of data to recipients based in a third country will be done in compliance with art. 44 ff. GDPR; as a rule, they are bound by the agreement of the EU standard contractual clauses to respect the level of data protection in Europe. Alternatively, we transmit the data based on the Binding Corporate Rules.
Apart from that, we will not pass on your data to countries outside the EU or the EEA or to international organisations.
F. Data subject rights
If personal data about you is processed, you are a “data subject” in the sense of the GDPR. You have the following rights against us as the responsible entity:
Landesbeauftragte für Datenschutz und Informationsfreiheit
Postfach 20 04 44
Tel.: +49 211/38424-0
Fax: +49 211/38424-10
We recommend, however, to always first address a complaint to our data protection officer (for contact details see point G).
Wherever possible, please address your requests to exercise your rights in writing to the address given in point A. or to our data protection officer (for contact details see point G.)
G. Contact data of the data protection officer
If you have any questions regarding the processing of your personal data or if you wish to exercise your rights as a data subject, please get in touch with our data protection officer whom you can contact either by email email@example.com or by mail: Silvia C. Bauer; c/o Luther Rechtsanwaltsgesellschaft, Anna-Schneider-Steig 22, 50678 Köln, Germany.
H. Scope of your obligations to provide data
In principle, you are not obliged to provide us with your personal data. However, if you fail to do so, we may be unable to provide you with full access to our website, answer your questions, send you information, etc.
I. Automated decision-making and profiling
We do not use procedures for automated decision-making and profiling in the sense of the GDPR.
Right of objection under art. 21 GDPR
You have the right to object to the processing of your data at any time, which is carried out on the basis of art. 6 para. 1 (1) lit. f GDPR (data processing based on a balancing of interests) or art 6 para 1 (1) lit. e GDPR (data processing in the public interest) if there are reasons for doing so which arise from your particular situation. This also applies to profiling based on this provision in the sense of art. 4 no. 4 GDPR.
If you object, we will no longer process your personal data unless we can prove compelling legitimate reasons for processing that outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
If we also process your personal data for the purpose of direct marketing, you have the right to object to the processing of your personal data at any time for the purpose of such marketing; this includes profiling, where it is linked to such direct marketing. If you object to processing for the purposes of direct marketing, we will no longer process your personal data for those purposes.
The objection can be made without any formal requirement and you should send it to the address mentioned above.
Soest, August 2020