Data Protection

Data protection information in accordance with the Basic Data Protection Ordinance (DSGVO)

Your trust is important to us. E-Stream Energy GmbH & Co KG takes the protection of your personal data very seriously. Personal data are only collected, processed or used if the data subject has consented, if they are necessary for the fulfillment of a contract or if a law permits or prescribes the collection, processing or use of such data. With this data protection declaration we would like to inform you about details of data collection and data processing as well as about the rights you are entitled to in this connection.

1. the name and address of the person responsible


The person responsible within the meaning of the Basic Data Protection Regulation, other data protection laws applicable in the member states of the European Union and other provisions of data protection law is:

E-Stream Energy GmbH & Co. KG
Wilhelmshofallee 83, 47800 Krefeld, Germany
Tel.:  +49 (0) 2151 971860

Fax: +49 (0) 2151 9718650

email: info@estream-energy.com

You can contact our data protection officer at the above business address at any time with regard to data protection issues. E-mail: datenschutzbeauftragter@estream-energy.com

2. principles concerning the processing of personal data


Personal data is any information relating to an identified or identifiable natural person (hereinafter “data subject”). A natural person shall be regarded as identifiable if he can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an on-line identifier or one or more specific characteristics expressing the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
E-Stream Energy GmbH & Co KG processes personal data only if the user gives his consent or if data processing is permitted by legal regulations. The legal basis is Art. 6 para. 1 of the EU Basic Data Protection Regulation (DSGVO). According to this provision, the processing of personal data is only permitted if the data subject consents (Art. 6 para. 1 lit. A DSGVO) or if the processing is necessary for one of the following purposes:

3. storage duration and data erasure


The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also take place if this has been provided for by the legislator. The data shall also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless it is necessary for further storage of the data for the conclusion or performance of a contract. Prescribed storage periods in this sense are e.g. fiscal or commercial retention periods.

4. acquisition of access data (creation of log files)


The website of E-Stream Energy GmbH & Co. KG automatically collects general data and information from the computer system of the calling computer, which is stored in the log files of the server. The following data and information is recorded:

The data is stored anonymously in the log files of our system. There is no link with other personal data of the user, the E-Stream Energy GmbH & Co. KG does not draw any conclusions about the person concerned.
The legal basis for data processing is Art. 6 Para. 1 lit. f DSGVO. The storage is necessary to ensure the functionality of our website and the correct presentation of the contents. Furthermore, the data serve our statistics and the continuous optimization of our content. Finally, it is stored in order to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack.
The data will not be passed on to third parties unless there is a legal obligation to disclose.
Since the collection and storage of the data in the log files is absolutely necessary for a trouble-free operation of the website, there is no possibility for the
user to object.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. Insofar as the survey was carried out to provide the website without any functions, this shall be the case at the end of the Internet session.

5. cookies


We use cookies on our website. Cookies are text files which are stored by our server on your computer and thus certain data are stored. Cookies generally contain a characteristic string of characters that enables the Internet browser to be uniquely identified when the user accesses the website again. This allows the calling browser to be recognized and identified.
Cookies help us to make it easier for you to use the website. Through the recognition of the browser and the storage of previously entered data, the offers and contents of our website can be individually optimised by not having to re-enter data entered by you (e.g. access data, search terms) every time you visit the website. The legal basis for this is Art. 6 para. 1 lit. f DSGVO.
In addition, we use cookies on our website which enable us to analyse the surfing behaviour of our users. However, the data collected in this way is pseudonymised, i.e. the personal data is replaced by other identifiers (pseudonyms), so that identification of the person concerned is no longer possible without additional information. Since your consent is obtained when you access the website, the legal basis for processing personal data using Analysis Cookies is Art. 6 Para. 1 lit. a DSGVO.
Since cookies are stored on the user’s computer, you as the user also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies already saved can be deleted by you at any time. If cookies are deactivated for our website, however, it may no longer be possible to use all the functions of the website to their full extent.

6. registration on our website


You have the opportunity to register as a user on our website. The data is entered by you in an input mask, transmitted to us and stored by us. The input mask shows which personal data is affected by this. In addition, your IP address and the date and time of registration will also be stored. At the end of the registration process, we again obtain the user’s consent for data processing. The legal basis for the processing of personal data is therefore Art. 6 para. 1 lit. a DSGVO. As far as the storage of the IP address is concerned, the legal basis is also Art. 6 para. 1 lit. f DSGVO. The data will not be passed on to third parties unless there is a legal obligation to disclose.
The registration of the data subject by voluntarily providing personal data serves the purpose of the data controller to offer the data subject contents or services which, due to the nature of the matter, can only be offered to registered users. Other data is stored to prevent or detect misuse of the website and to ensure the security of our system.
As a registered user, you have the possibility at any time to modify or completely delete the personal data provided during registration. For this purpose you can use the functions contained in your account or inform us of your wish to change or delete the data in writing or by e-mail.

7. contact form and e-mail contact


The website of E-Stream Energy GmbH & Co KG provides a contact form which can be used for electronic contact with our company. The data entered by the user in the input mask is transmitted to us and stored. In addition, the IP address of the user as well as the date and time of transmission are stored. The consent of the user is obtained for the processing of the data within the scope of the sending process. The legal basis for the processing is therefore Art. 6 para. 1 lit. a DSGVO. As far as the storage of the IP address is concerned, the legal basis is also Art. 6 para. 1 lit. f DSGVO.
Alternatively, you can contact us via the e-mail address given on our website. In this case, in addition to the e-mail address, the personal data provided by the user in the e-mail will be transmitted. The legal basis in this respect is Art. 6 para. 1 lit. f DSGVO.
The processing of the data transmitted via the contact form or by e-mail serves exclusively to carry out the desired establishment of contact. Other data is stored to prevent or detect misuse of the website and to ensure the security of our system. The data will not be passed on to third parties unless there is a legal obligation to disclose.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. As far as the data transmitted by the user in the contact form or in the e-mail is concerned, this is the case when the relevant communication has ended, unless the communication content still has legal significance afterwards.
The data subject may at any time revoke his/her consent to data processing or object to the use of the data. In this case, it is no longer possible to make intended contact with the user or communication that has already begun cannot be continued.

8. subscription to our newsletter


On the website of E-Stream Energy GmbH & Co KG you have the possibility to subscribe to the newsletter of our company. Which personal data is transmitted to us and stored by us when ordering the newsletter results from the input mask used for this purpose. In addition, the IP address of the user as well as the date and time of transmission are stored. The consent of the user is obtained for the processing of the data within the scope of the registration process. The legal basis for the processing is therefore Art. 6 para. 1 lit. a DSGVO. As far as the storage of the IP address is concerned, the legal basis is also Art. 6 para. 1 lit. f DSGVO. The data will not be passed on to third parties unless there is a legal obligation to disclose.
The processing of the data transmitted by the user by input into the registration form is necessary in order to send the newsletter. A use going beyond this does not take place. The storage of the IP address is necessary in order to prevent or detect any misuse (in particular of the e-mail address) and to ensure the security of our system.
The subscription of the newsletter can be cancelled by the person concerned at any time and thus the consent to the dispatch can be revoked. For this purpose, a corresponding link is provided in every newsletter e-mail sent. In this case – as with any other objection to the use of data that may be raised at any time – the personal data stored by us as part of the newsletter subscription will be deleted. The data is therefore stored as long as the subscription to the newsletter is active.

9. newsletter tracking


When newsletters are sent, E-Stream Energy GmbH & Co KG collects statistical data. This is done by means of a so-called counting pixel. This is an invisible thumbnail image embedded in the newsletter email that is downloaded to the user’s computer when the email is opened. The same applies if the user clicks on links provided in the e-mail. When the pixel is downloaded, the time, the IP address of the user and the browser type used are transmitted to our server and saved. The legal basis for this is Art. 6 para. 1 lit. f. DSGVO.
The processing of the data serves the optimization of the newsletter. It enables a statistical evaluation of whether and when an e-mail was opened and which links contained in the e-mail were accessed. This allows the acceptance of the newsletter to be measured and appropriate adjustments made for future newsletters, both in technical and content terms, in order to optimise its use in line with requirements. The data will not be passed on to third parties.
Affected persons can object to the processing of their data at any time by unsubscribing to the newsletter (see subscription to our newsletter). In this case, personal data stored by E-Stream Energy GmbH & Co KG in this context will be deleted.

10. data protection for applications


Persons can send applications to us electronically (e.g. by e-mail or via an application form available on the website). In this case, the personal data transmitted will be collected and processed for the purpose of carrying out the application procedure and thus for the potential initiation of an employment relationship. The legal basis for this is Art. 6 (1) (b) DSGVO. If thereupon an employment contract is concluded with us, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If no employment contract is concluded, it will be deleted within two months of the announcement of the rejection decision, unless this conflicts with any other legitimate interests of our company. Such a legitimate interest is, for example, a duty to prove in proceedings under the General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz – AGG). or to object to the use of the data. In this case, it is no longer possible to make intended contact with the user or communication that has already begun cannot be continued.

11. use of social plug-ins


On our website we have integrated plug-ins from social networks. If the person concerned is registered with the respective social network when accessing our website and is also logged in, the social network recognises which specific subpage of our website the person concerned is accessing. This information is collected by the operator of the social network and assigned to the account of the person concerned. We have no influence on the type and extent of the data collected, stored and processed by the operator of the social network. For further information, please contact the operator of the respective social network.
In order to prevent data about you from being processed by the operator of the respective social network, you must log out of the relevant network before accessing our website. In addition, you can use special tools that block data transfer (e.g. Facebook Blocker).
We have integrated the social media plug-ins of the following companies on our website:
Facebook Inc. https://de-de.
facebook.com/about/privacy/
Instagramhttps://www.instagram.com/about/legal/privacy

12. use of Google Analytics


We use the analysis service Google Analytics on our website. Google Analytics stores cookies on your computer and thus allows an analysis of the use of the website by you. The information generated by the cookie, including your IP address, is usually transmitted to a Google server in the USA and stored there. However, the transmitted data will be made anonymous beforehand. On our behalf, Google will statistically evaluate the information transmitted in order to compile reports on website activity and to provide us with other services related to website and Internet usage. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
To prevent this, you can deactivate or restrict the transmission of cookies in the settings of your Internet browser. Cookies already saved can be deleted by you at any time. If cookies are deactivated for our website, however, it may no longer be possible to use all the functions of the website to their full extent.

13. use of Google Remarketing


This website uses the remarketing function of Google Inc. This function is used to present interest-related advertisements to website visitors within the Google advertising network. A so-called “cookie” is stored in the browser of the website visitor, which makes it possible to recognise the visitor when he visits websites belonging to the Google advertising network. On these pages, advertisements can be presented to the visitor, which refer to contents, which the visitor called up before on web pages, which use the Remarketing function of Google.
According to its own information, Google does not collect any personal data during this process. However, if you do not want Google’s remarketing feature to work, you can opt-out of it by setting your preferences at http://www.google.com/settings/ads . Alternatively, you can disable the use of cookies for interest-based advertising through the Advertising Network Initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp

14. privacy policy for the use of Google Adsense


This website uses Google AdSense, a service for the integration of Google Inc. advertisements. (“Google”). Google AdSense uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. Google AdSense also uses so-called web beacons (invisible graphics). Through these web beacons, information such as visitor traffic on these pages can be evaluated.
The information generated by cookies and web beacons about the use of this website (including your IP address) and the delivery of advertising formats will be transmitted to and stored by Google on servers in the United States. This information may be disclosed by Google to Google’s contract partners. However, Google will not merge your IP address with any other data held by you.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

15. privacy policy for the use of Google +1


Collecting and sharing information:
The Google +1 button allows you to publish information worldwide. The Google +1 button gives you and other users personalized content from Google and our partners. Google stores both information that you have given +1 for content and information about the page you have viewed by clicking +1. Your +1 can be displayed as a clue along with your profile name and photo in Google services, such as search results or your Google profile, or elsewhere on websites and ads on the Internet.
Google records information about your +1 activity to improve Google services for you and others. To use the Google +1 button, you need a globally visible, public Google profile, which must contain at least the name chosen for the profile. This name is used in all Google services. In some cases, this name may also replace another name you used when sharing content through your Google Account. The identity of your Google profile may be displayed to users who know your email address or have other identifying information about you.
Use of Information Collected: In
addition to the uses described above, the information you provide will be used in accordance with Google’s current privacy policy. Google may publish or share aggregated statistics about users’ +1 activity with users and partners, such as publishers, advertisers or affiliates.
Source reference: Privacy policy Google +1

16. Google AdWords


Our website uses Google Conversion Tracking. If you have reached our website via an advertisement placed by Google, Google Adwords places a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages on our site and the cookie has not expired, we and Google may recognize that the user clicked on the ad and was directed to that page. Each Google AdWords customer receives a different cookie. Cookies can therefore not be tracked via the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you will not receive any information that personally identifies users.
If you do not wish to participate in tracking, you can reject the setting of a cookie required for this – for example via browser settings that generally deactivate the automatic setting of cookies or set your browser so that cookies are blocked by the domain “googleleadservices.com”.
Please note that you may not delete the opt-out cookies as long as you do not wish to record measurement data. If you have deleted all your cookies in your browser, you must set the respective opt-out cookie again.

17. use of Facebook Retargeting


This website uses the retargeting feature of Facebook Ireland Limited. This feature is used to present interest-based ads to website visitors within the Facebook advertising network. A so-called “cookie” is stored in the browser of the website visitor, which makes it possible to recognise the visitor when he visits websites belonging to the Facebook advertising network. On these pages, advertisements can be presented to the visitor, which refer to contents, which the visitor called up before on web pages, which use the Retargeting function of Facebook.
According to Facebook, it does not collect any personal data during this process. If you still do not want Facebook’s retargeting feature, you can always deactivate it by making the appropriate settings at http://www.facebook.com/settings/?tab=ads .

18. third party content and services for the use and enjoyment of YouTube


Our website also contains third-party content and services, such as videos from YouTube or maps from Google Maps. When these contents/services are accessed via our website, your IP address is usually transmitted to the respective third party provider. This makes it possible for these third parties to process your user IP address. While we endeavor to include only those third parties who use IP addresses solely to deliver content, we have no control over how the third party uses the information it receives. For further information, please contact the respective third party provider.

19. your rights as a data subject


If personal data is processed by you, you are the person concerned within the meaning of the DSGVO and you are entitled to the following rights vis-à-vis us as the person responsible:

a) Right to confirmation and information, art. 15 DSGVOS

You may request confirmation from us at any time as to whether personal data concerning you will be processed by us. If this is the case, you have a right to be informed by us of the following circumstances:
the categories of personal data that are being processed;
the recipients or recipients of the data; the type of data that is being processed; the type of data that is being processed; the type of data that is being processed; the type of data that is being processed; the type of data that is being processed; the type of data that is being processed; the type of data that is being processed; the type of data that is being processed; the type of data that is being processed; the type of data that is being processed; the type of data that is being processed; the type of data that is being processed; the type of data that is being processed. the categories of recipients to whom the personal data relating to you has been or will be disclosed;
the planned duration of the retention of the personal data relating to you or, if it is not possible to provide specific information, criteria for determining the retention period; the existence of a right to rectification or erasure of personal data concerning you, of a right to limitation of the processing by the controller or of a right to object to such processing; the existence of a right of appeal to a supervisory authority;
all available information on the origin of the data if the personal data are not collected from the data subject;
the existence of automated decision-making, including profiling, pursuant to Art. 22 (1) and (4) DSGVO and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.
In addition, you have a right to information as to whether personal data are transferred to a country that is not a member of the EU (so-called third country) or to an international organisation. In this context, you may request to be informed of the appropriate guarantees pursuant to Art. 46 DSGVO in connection with the transfer.

b) Right of rectification, art. 16 DSGVOS

You have the right to ask us to rectify immediately any inaccurate personal data concerning you. Furthermore, you have the right to demand from us the completion of incomplete personal data – also by means of a supplementary declaration – taking into account the purposes of the processing.

c) Right to deletion (right to be forgotten), Art. 17 DSGVOS

You may request us to delete the personal data concerning you immediately if one of the following reasons applies:
The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
You revoke your consent on which the processing pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a DSGVO was based and there is no other legal basis for the processing.
You object to the processing pursuant to Art. 21 (1) DSGVO and there are no overriding legitimate reasons for the processing, or you object to the processing pursuant to Art. 21 (2) DSGVO.
The personal data concerning you have been processed unlawfully.
The deletion of personal data concerning you is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the data controller is subject.
The personal data relating to you have been collected in relation to information society services offered pursuant to Art. 8 para. 1 DSGVO.
If the relevant personal data has been made public by E-Stream Energy GmbH & Co KG and we are obliged to delete the personal data in accordance with the above principles, we are also obliged to inform other persons responsible for data processing that you as the person concerned have requested the deletion of all links to this personal data or copies or replications of this personal data.
We take appropriate measures in this regard, taking into account the available technology and the implementation costs, also of a technical nature, to comply with these obligations, in any case insofar as the processing is no longer necessary, i.e. legal requirements prescribe this or legitimate interests stand in the way of deletion.

d) The right to limit the processing, art. 18 DSGVOS

You may request us to limit the processing of your personal data under the following conditions:
You will be denied the accuracy of the personal data for a period of time that will allow the person in charge to verify the accuracy of the personal data.
The processing is unlawful and you demand the restriction of the use of personal data instead of deletion.
The personal data is no longer required by us for the purposes of processing, but you need this data to assert, exercise or defend legal claims.
You have lodged an objection against the processing pursuant to Art. 21 (1) DSGVO and it is not yet clear whether the legitimate reasons of E-Stream Energy GmbH & Co KG outweigh your reasons.
Where the processing of personal data concerning you has been restricted, such data may not be processed, with the exception of their storage, without your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or for reasons of an important public interest of the Union or of a Member State. In this case you will also be informed by us before the restriction is lifted.

e) Right to be informed

If you have exercised the right to rectify, cancel or limit the processing, we are obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or cancellation of the data or limitation of the processing, unless this proves impossible or involves a disproportionate effort. In this respect, you can demand that we inform you about these recipients.

You have the right to receive the personal data concerning you which you have provided to us in a structured, common and machine-readable format. Furthermore, you have the right to communicate this data to another data controller without being hampered by the controller to whom the personal data have been provided, provided that the processing is based on the consent pursuant to Art. 6 para. 1 letter a DSGVO or Art. 9 para. 2 letter a DSGVO or on a contract pursuant to Art. 6 para. 1 letter b DSGVO and the processing is carried out by means of automated procedures, provided that the processing is not necessary for the performance of a task in the public interest or in the exercise of official authority assigned to the controller.
Furthermore, when exercising your right to data transferability pursuant to Art. 20 (1) DSGVO, you may request that the personal data be transferred directly from one responsible person to another responsible person, insofar as this is technically feasible and insofar as this does not impair the rights and freedoms of other persons.

g) Right to revoke a data protection consent, Art. 7 para. 3 DSVGOS

If you have given a data protection consent, you have the right to revoke this consent at any time with effect for the future. This also applies to the revocation of declarations of consent given to us prior to the application of the Basic Data Protection Regulation, i.e. before 25 May 2018. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected by this.
If you wish to exercise your right of withdrawal, please send an e-mail to datenschutzbeauftragter@estream-energy.com or send your objection to the business address E-Stream Energy GmbH & Co. KG, Feldstrae 8, 47198 Duisburg.

h.) Automated decisions in individual cases, including profiling

You shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or is similarly significantly prejudicial to it, provided that the decision
is not necessary for the conclusion or performance of a contract between you and E-Stream Energy GmbH & Co. KG or
is authorised by legislation of the Union or of the Member States to which the person responsible is subject, and such legislation contains adequate measures to safeguard the rights and freedoms and the legitimate interests of the data subject, or
with the express consent of the data subject.
However, these decisions may not be based on special categories of personal data under Art. 9 para. 1 DSGVO, unless Art. 9 para. 2 lit. a or g DSGVO applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.
If the decision is necessary for the conclusion or performance of a contract between the data subject and the responsible person or if it is made with the express consent of the data subject, E-Stream Energy GmbH & Co. KG shall take appropriate measures to protect the rights and freedoms as well as the legitimate interests of the data subject, including at least the right to obtain the intervention of a person on the part of the responsible person, to present one’s own position and to contest the decision.

i) Right to complain to the supervisory authority, Art. 77 DSGVO

Without prejudice to our rights, you also have the right to complain to a supervisory authority, in particular in the member state of your place of residence, your place of work or the location of the alleged infringement, if you are of the opinion that the processing of your personal data violates the DSGVO. The supervisory authority to which the complaint was submitted will inform you of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 DSGVO.

20. right of objection, Art. 21 DSGVOS


You have the right, for reasons arising from your particular situation, to object at any time from us to the processing of personal data concerning you which takes place on the basis of Art. 6 para. 1 letters e or f DSGVO. This also applies to profiling based on these provisions.

E-Stream Energy GmbH & Co KG will no longer process the personal data in the event of objection, unless we can prove compelling reasons for the processing worthy of protection that outweigh the interests, rights and freedoms of the person concerned, or the processing serves the assertion, exercise or defense of legal claims.
If the personal data concerning you are processed for the purpose of direct advertising, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising; this also applies to profiling to the extent that it is connected with such direct advertising.
If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
You have the possibility to exercise your right of objection in relation to the use of Information Society services – notwithstanding Directive 2002/58/EC – by means of automated procedures using technical specifications.
If you wish to exercise your right to object, please send an e-mail to datenschutzbeaufragter@timberland-finance.com or send your objection to the business address E-Stream Energy GmbH & Co. KG, Feldstraße 8, 47198 Duisburg, Germany.

21 Regular updating of this data protection information


These data protection legal framework conditions are subject to constant changes and adaptations. These changes from time to time make it necessary to update our privacy policy. You can recognize the current status by the line “Status…” at the end of this data protection notice.

2019