Data privacy statement
Data privacy statements as per Articles 13, 14 and 21 GDPR for the website and external sites of Renusol Europe GmbH
I. General
1. Controller
We, Renusol Europe GmbH, take the protection of your personal data and the legal obligations that serve to ensure this protection very seriously. The legal provisions require comprehensive transparency in all issues regarding the processing of personal data. Only when the processing is traceable for you as the data subject you can be deemed to be sufficiently informed about the purpose, type and scope of the processing.
Therefore our Privacy Policy explains to you in detail which pieces of personal data we process when you use our websites (www.renusol.com and www.pv-configurator.com) or any other Internet pages that reference to it and in the other cases will be described here.
“Controller” in terms of the General Data Protection Regulation (GDPR), of the Bundesdatenschutzgesetz – German Federal Data Protection Act (BDSG) and other data protection regulations is the
Renusol Europe GmbH
Piccoloministr. 2
51063 Cologne / Germany
Phone: +49 (0)221 788 70 70
Email: info@renusol.com
Referred to hereinafter as “controller” or “we”.
You can contact our data protection officer under:
Sascha Kremer
Disch-Haus, Brückenstraße 21
50667 Köln (Innenstadt)
Phone: +49(221) 27141874
Email: datenschutz@renusol.com
Please be aware that you may be redirected to other Internet pages via links on our website whereby the other pages are not operated by us but by third parties. We either clearly mark such links or you can recognise them by the change of the address line of your browser. We are not responsible for compliance with the applicable data protection regulations and secure handling of your personal data by third parties operating such other Internet pages.
2. Definitions
From GDPR
This Privacy Policy uses the terms used in the wording of the GDPR. The definitions (Article 4 GDPR) can be found, for instance, in https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679.
Cookies and similar technologies Cookies are text files which a website places in your terminal or which are read out there. They contain letters and combinations of numbers to enable them, for instance, to recognise the user and its settings, when a connection is again established with the website that places the cookies, and to enable you to stay logged in a customer account or to conduct statistical analyses of certain user behaviour.
The WebStorage technology allows storing variables and values locally in the user's browser cache. This technology includes both the so-called "sessionStorage" that remains stored until the browser-tab has been finished and the "localStorage" that remains stored in the browser-cache until the user clears the cache. Among others, the localStorage technology makes it possible to recognise the user and its settings when our website is called again.
Special categories of data
If we state the processed categories of data, they especially include the following types of data: Master data (e.g. name, address, date of birth), Contact data (e.g. email address, telephone number, messenger services), Content data (e.g. input texts, photographs, videos, contents of documents/files), Contract data (e.g. subject of contract, contract duration, customer category), Payment data (e.g. bank accounts, payment history, use of other payment service providers), Usage data (e.g. history on our website, use of special contents, access times, history of contacts or orders), Connection data (e.g. information of equipment, IP addresses, URL referrer), Location data (e.g. GPS data, IP geo-localisation, access points).
3. Information about data processing
We only process personal data to the extent which is permitted by law. Disclosure or transfer to third parties takes place only in the cases described below. Your personal data is protected by technical and organisational measures (e.g. pseudonymisation, encryption).
Provided that we are not obliged by law to store or disclose personal data to third parties (especially to criminal prosecution authorities), the decision which personal data is processed by us and how long and to which extent we disclose it, if necessary, depends on which functions of the website you use in a given case.
4. Storage period
The personal data is cleared as soon as the purpose of processing is not applicable anymore or a prescribed storage period expires, unless continued storage of the personal data is necessary for the purpose of conclusion or performance of a contract. As far as we have to inform about the storage period of cookies and similar technologies you will find the referring details at the end of this Privacy Policy.
Personal data that we process in the course of an application (see below) will be stored for six month after the end of the application process.
5. Automated case-by-case decisions including profiling
No automated case-by-case decisions are taken, including profiling.
6. Rights of the data subjects
You as the data subject are entitled to the right of access to the data subject according to Article 15 GDPR, the right of rectification according to Article 16 GDPR, the right to erasure according to Article 17 GDPR, the right of restriction of processing according to Article 18 GDPR as well as the right to data portability according to Article 20 GDPR. The right of access to the data subject as well as the right to erasure are subject to the restrictions under §§ 34, 35 BDGS.
In addition, you have the right to lodge a complaint with a supervisory authority (Article 77 GDPR in combination with § 19 BDSG).
The competent supervisory authority for us/for our head office is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2-4
40213 Düsseldorf
However, you may also lodge a complaint with another supervisory authority.
Please find a list of supervisory authorities in https://www.bfdi.bund.de/ (in Infothek/Anschriften und Links)
7. Controller’s obligation to notify
We will inform all recipients, to whom your personal data was disclosed, about any rectification or erasure of your personal data or any restriction of processing according to Article 16, Article 17 (1) and Article 18 GDPR unless it is impossible or requires unreasonable effort to notify them. We will also inform you about the recipients' identity at your request.
8. Obligation to provide
Unless otherwise described in the following details referring the legal basis you are not obliged to provide personal data. In the cases of Article 6 (1) point (b) GDPR personal data is however necessary for the performance of a contract or for the conclusion of a contract. If you do not provide the data subject the performance of a contract or the conclusion of a contract is not possible. If you do not provide data in the cases of Article 6 (1) point (a), (f) GDPR, the use of the parts concerned in our website will not be possible.
Referring to our webinars (see II) you are not obliged to provide personal data, your participation in the webinars however will not be possible without this data.
9. Right to object and withdrawal of consent
You shall have the right to object on grounds relating to your particular situation at any time to processing of your personal data which is carried out according to point (f) of Article 6 (1) GDPR. Where personal data is processed for direct marketing processes, you have the right to object at all time to processing of your personal data for the purpose of such marketing.
As per Article 7 (3) sentence 1, GDPR, you shall have the right to withdraw your consent at any time with effect for the future informally by mail or e-mail. However, the withdrawal does not concern the lawfulness of the processing that took place with your consent before the withdrawal. Upon your withdrawal we will clear the personal data processed on the basis of the consent, provided there is no other legal basis for their processing.
Objection and withdrawal can be done informal and should be directed to the above mentioned contact data.
II. Data processing in connection with the use of our website
Using the website and its functions requires the regular processing of personal data.
Google Tag Manager
For embedding contents provided by third providers we use the Google Tag Manager. This is a technical solution that does not save or read out any cookies or similar technologies that demand consent but only controls the conditions under which the other programs used in our website are activated. These programs are described below.
Provision of website
Purpose of processing: Functionality and optimisation of the website as well as for ensuring safety of our information technology systems only for the purpose of information (no use of additional functions) on our website.
Legal basis: Article 6 (1) point (f) GDPR
Data categories: Connection data
Recipient of data: Data is only transferred to third parties to the extent which is necessary for operating our website. For such purpose the personal data is transferred to the following recipients: IT service providers
Intended third country transfer: None
Do we store personal data on your terminal on the basis of your consent or do we read such? No
Subscription of our newsletter
Purpose of processing: Subscription of our newsletter; proof of your consent; to ensure safety of our information technology systems (these are also our legitimate interests as per Article 6 (1) point (f) GDPR).
Legal basis: Article 6 (1) point (a), (f) GDPR
Data categories: Master data, contact data, if necessary, content data, usage data, connection data
Recipient of data: rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br.
Intended third country transfer: None
Do we store personal data on your terminal on the basis of your consent or do we read such? No
Online enquiries (transfer by e-mail)
Purpose of processing: Inquiry regarding PV projects, possible co-operations and call-back request using our inquiry forms by email; to ensure safety of our information technology systems.
Legal basis: Article 6 (1) point (f) GDPR; Article 6 (1) point (b) GDPR (if the inquiry causes a later conclusion of a contract or it concerns an existing contract)
Data categories: Master data, contact data, if necessary, content data, usage data, contract data and connection data
Recipient of data: None
Intended third country transfer: None
Do we store personal data on your terminal on the basis of your consent or do we read such? No
Renusol Project Configurator (on www.pv-configurator.com)
Purpose of processing: Creation of a customer account (as a precondition for the use of our Project Configurator); usage of our Renusol Project Configurator for technical specifications and inquiries for PV projects; safety of our information technology systems.
Legal basis: Article 6 (1) point (f) GDPR; Article 6 (1) point (b) GDPR (if the inquiry causes a later conclusion of a contract or it concerns an existing contract)
Data categories: Master data, contact data, if necessary, content data, contract data, usage data and connection data
Recipient of data: IT service providers
Intended third country transfer: None
Do we store personal data on your terminal on the basis of your consent or do we read such? No
Applications
Purpose of processing: Processing of your application and execution of application process.
Legal basis: Article 88 (1) GDPR in connection with § 26, section 1, sentence 1, BDSG
Data categories: Master data, contact data, content data, contract data, if necessary, connection data, if necessary usage data and, if necessary, special categories of personal data in the sense of Article 9 (1) GDPR (depending on the specific tender; these pieces of data are saved exclusively for your application that we received from you and that we are allowed to process in the context of your application)
Recipient of data: None
Intended third country transfer: None
Do we store personal data on your terminal on the basis of your consent or do we read such? No
Making contact
Purpose of processing: Processing of your contact request and call-back request.
Legal basis: Article 6 (1) point (f) GDPR; Article 6 (1) point (b) GDPR (if the inquiry causes a later conclusion of a contract or it concerns an existing contract)
Data categories: Master data, contact data, content data, if necessary, usage data, connection data, if necessary, contract data (depending on the type of inquiry).
Recipient of data: None
Intended third country transfer: None
Do we store personal data on your terminal on the basis of your consent or do we read such? No
Registration and conducting of our webinars via Microsoft teams
Purpose of processing: Registration for our webinars via Microsoft teams; preparation and conducting of webinars. Proof of your registration; to ensure safety of our information technology systems (these are also our legitimate interests as per Article 6 (1) point (f) GDPR).
Legal basis: Article 6 (1) point (b), (f) GDPR
Data categories: Master data, contact data, content data, contract data and connection data (depending on the respective webinar and your configuration)
Recipient of data: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft“)
Intended third country transfer: In the individual case USA (on the basis of the standard data protection clauses of the EU Commission, Article 46 (2) point (c) GDPR)
Do we store personal data on your terminal on the basis of your consent or do we read such? No
Google Maps
Purpose of processing: Embedding of interactive maps and map functions of Google Maps when using our Project Configurator.
Legal basis: Article 6 (1) point (f) GDPR
Data categories: Usage data, connection data, location data (depending on the type of usage)
Recipient of data: Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland
Intended third country transfer: No
Do we store personal data on your terminal on the basis of your consent or do we read such? No
YouTube
Purpose of processing: Embedding of videos via the video plug-in of YouTube for the personal design of our website.
Legal basis: Article 6 (1) point (f) GDPR
Data categories: Connection data
Recipient of data: Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland
Intended third country transfer: In the individual case USA
Do we store personal data on your terminal on the basis of your consent or do we read such? No
Analysis of our website („Visitors“)
Purpose of processing: Statistical analysis of our website via the plug-in „Visitors“ (visitor and access counter); optimisation and customised design of our website.
Legal basis: Article 6 (1) point (f) GDPR
Data categories: Connection data
Recipient of data: IT service providers
Intended third country transfer: None
Do we store personal data on your terminal on the basis of your consent or do we read such? No
Matomo
Purpose of processing: Statistical analysis, optimisation and customised design of our website.
Legal basis: Article 6 (1) point (f) of GDPR
Data categories: Usage data, connection data
Recipient of data: none
Intended third-country transfer: None
Do we store personal data on your terminal on the basis of your consent or do we read such? No
Marketing measures
Purpose of processing: Advertising and personalised marketing measures.
Legal basis: Article 6 section 1 point f of the GDPR
Legitimate interests: Promotion of sales activities, promotion of economic interests, advertising and image enhancement, market and opinion research, analysis and optimisation of own offers, services and advertising measures
Data categories: Usage data, connection data
Recipients of data: IT service providers, operators of advertising networks and advertising partners
Intended transfer to third countries: USA
Do we store or access personal data on your device based on your consent? Yes
III. Information on external websites of the Renusol Europe GmbH
Facebook
Purpose of processing: We established an Internet site for our enterprise („Facebook site“) on the „Facebook“ platform under the address https://www.facebook.com/pages/Renusol-GmbH/172955659401429. If you call this site, Facebook will process your personal data. We receive statistics on the usage of this site that is derived from this data.
Legal basis: Article 6 (1) point (f) GDPR
Data categories: Master data, contact data, content data, usage data, connection data, if necessary, location data
Recipient of data: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland („Facebook“) (as joint controller, Article 26 GDPR – the essentials of the agreement can be called under https://www.facebook.com/legal/terms/page_controller_addendum)
Intended third country transfer: In the individual case USA
Do we store personal data on your terminal on the basis of your consent or do we read such? No
Rights of the data subjects: Facebook is responsible for the implementation of the rights of the data subject. Facebook informs about your rights of the data subject on https://www.facebook.com/legal/terms/information_about_page_insights_data. You can also exercise your rights against us; we will then forward your inquiry to Facebook.
LinkedIn (profile)
Purpose of processing: We established an Internet site for our enterprise on the „LinkedIn“ platform under the address https://www.linkedin.com/company/renusol-gmbh. If you call this site, LinkedIn will process your personal data. We receive statistics on the usage of this site that is derived from this data.
Legal basis: Article 6 (1) point (f) GDPR
Data categories: Master data, contact data, content data, usage data, connection data, if necessary, location data
Recipient of data: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (as joint controller as per Article 26 GDPR – the essentials of the agreement can be called under https://legal.linkedin.com/pages-joint-controller-addendum)
Intended third country transfer: In the individual case USA
Do we store personal data on your terminal on the basis of your consent or do we read such? No
Rights of the data subjects: LinkedIn is responsible for the implementation of the rights of the data subjects. LinkedIn informs about your rights of the data subject on https://www.linkedin.com/legal/privacy-policy. You can also exercise your rights against us; we will then forward your inquiry to LinkedIn.
YouTube Channel
Purpose of processing: We established a video channel on the "YouTube" platform of Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland ("Google") under the address https://www.youtube.com/channel/UC_lXBF9JcKLNM3e-_ErUwrQ. If you call this site, Google will process your personal data. We receive statistics on the usage of this site that is derived from this data.
Legal basis: Article 6 (1) point (f) GDPR
Data categories: Master data, contact data, content data, usage data, connection data, if necessary, location data
Recipient of data: Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland
Intended third country transfer: In the individual case USA
Do we store personal data on your terminal on the basis of your consent or do we read such? No
