Sickingenstr. 70, 10553 Berlin
Managing Directors: Alessandro De Pasquale, Jörn Mecher, Philip Papendieck, Philipp Wolff
HRB 170017 B
Tax ID: DE301497713
VAT Number: 30/359/50880
PREAMBLE AND DEFINITIONS
2.1 Personal data"Personal data" means any information relating to an identified or identifiable natural person (Art. 4 No. 1 GDPR). Details of an identified person can be, for example, the name or the e-mail address. However, personal data is also data for which the identity is not immediately obvious, but which can be determined by combining own information with third-party information and thus finding out the identity of the person concerned. For example, a person can be identified through providing his or her address or bank details, date of birth or user name, IP addresses and/or location data. Any information that allows conclusions to be drawn about a person in any way whatsoever is relevant here.
Art. 4 No. 2 GDPR defines "processing” as any operation which is performed on personal data. This applies in particular to the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data.
Company: Engieventures GmbH ("we")
Legal representative: Alessandro De Pasquale, Jörn Mecher, Philip Papendieck (Managing Director)
Address: Sickingenstrasse 70, 10553 Berlin, Germany
Phone: +49 (0) 30 54 909 561
4. PROCESSING FRAMEWORK: WEBSITE
As part of our website with the URL www.drink-engie.de, we will process your personal data as individually listed in paragraphs 6 – 12. We only process data from you which you actively provide to us on our website (e.g. by completing forms) or which you automatically provide to us when you use our service. Your data will be exclusively processed by us and will not be sold, lent or passed on to third parties. Insofar as we use external service providers for the processing of your personal data, this is done within the scope of commissioned data processing, during which we, as the controller, are authorised to instruct our processors as the customer. For the operation and hosting of our website, we use the external service provider Hetzner. Our website is hosted in Hetzner data centres in Germany. If any of the processing operations listed in paragraphs 6-12 involve the use of other external service providers, they shall be designated there. A data transfer to third countries does not take place in principle and is also not planned. We will inform you about exceptions to this principle in the following processing steps.
DATA PROCESSING IN DETAIL5. SERVER LOG FILES
5.1 Description of the processing
Every time you visit the website, we will automatically collect information, which your browser transmits to our server. This information is also saved in the log files of our system. This includes the following data:
Your IP address, the last octet of the address is anonymised in the processThe browser software that you are using, including the version and languageThe operating system that you are usingThe website that took you to our website (referrer)The webpages that you have called up on our websiteThe date and the time of your visit to our websiteYour internet service providerThe volume of data transferredCountry and place from which you visited our websiteThe time you have spent on our website
5.2 Purpose The processing is technically necessary for us to display our website and to ensure its stability and security. Additionally, the processing serves the statistical evaluation and improvement of our online service.
5.3 Legal basis The processing is necessary to protect the predominant legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose set out in paragraph 6.2.
5.4 Storage period The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the event of the collection of data for the provision of the website, this is the case when the respective session has ended. The log files will be deleted after 30 days.
CONTACT FORM AND CONTACT BY EMAIL
6.1 Description of the processing
The purpose of the provision of a contact form on our website is to enable you to contact us with ease. The data transmitted with and in the contact form and your email will solely be used for the purpose of processing and responding to your message.
6.3. Legal basis
The processing is necessary to protect the predominant legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose set out in paragraph 7.2. If the email contact is aimed at the conclusion of a contract, the data processing is necessary for the performance of a contract (Art. 6 (1) lit b GDPR).
6.4 Storage period
We will delete the data as soon as they are no longer necessary to achieve the purpose for which they were collected. This is usually the case once the relevant communication with you has ended. The communication has ended where it can be inferred from facts and circumstances that your request has been concluded. We will store application documents for a period of 6 months and subsequently delete them.
7.1 Description of the processing
8.3 Legal basis
The processing is necessary to protect the predominant legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose set out in paragraph 8.2.
8.4 Storage period
9. SOCIAL NETWORKS
9.1 Description of the processing
Some of the webpages on our website use social plug-ins from the external social networks Facebook and Instagram. When you visit one of our pages containing such a plugin, your browser establishes a direct connection to the servers of the social network. The social network transmits the content of the relevant social plugin directly to your browser and it is displayed on our website. To prevent this, we use the double opt-in method. We have integrated the social plugins on our website so that the connection between the social plugins and the servers of the social networks is interrupted by default. If you communicate directly with a social network on our website via a social plugin and want to exchange data, you must click the relevant social plugin to activate it. Following the activation of a social plugin, we cannot influence the extent of the data collected by the relevant social network. We will therefore inform you according to our level of knowledge. By activating a social plugin, your IP address in conjunction with our website address will be transmitted to the relevant social network. If you are logged in to the social network when you visit our website, this information is assigned directly to your user account. If you interact with an activated social plugin, for example, if you click the “share”, “like” or “retweet” button, the relevant information will also be sent directly to the relevant social network and will also be stored in your user account. The social networks that you communicate with, will store your data in the form of user profiles and also use them for advertising purposes, market research and/or to tailor your websites as required. You have the right to object to the creation of these user profiles. To exercise these rights, you must contact the social networks directly.
The data is processed to facilitate the easy and user-friendly communication with social networks.
9.3 Legal basis
The processing is necessary to protect the predominant legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose set out in paragraph 9.2.
9.4 Recipient and transmission to third countries
By activating a social plugin your data will be sent to one of the following social networks:
Facebook: Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA. For further information on data protection at Facebook see http://www.facebook.com/policy.php; http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo.Instagram: Instagram LLC, 1601 Willow Rd, Menlo Park, California 94025, USA; For further information on data protection at Instagram see https://help.instagram.com/155833707900388/.The social networks also process your personal data in the US and are governed by the EU-US-Privacy Shield. For further information regarding the EU-US Privacy Shield, see https://www.privacyshield.gov/EU-US-Framework.
10. GOOGLE WEB FONTS
10.1 Description of the processing
Our website uses “Google web fonts”, a font replacement service of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4. Ireland (hereinafter referred to as “Google”). Google web fonts replace default fonts on your device with fonts from the Google catalogue to present our website. If your browser does not support the integration of Google web fonts, the text on our website will be displayed in a default font on your device. The Google fonts will be loaded directly from a Google server. For this purpose, your browser will send a request to a Google server. As a result your IP address in conjunction with our website address may be transmitted to Google. However, Google will not place cookies on your device. According to Google, data processed during the Google web font service will be sent to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. They are not associated with data that may be used in connection with the parallel use of other Google services such as the Google search engine or Gmail. For further information regarding data protection for Google web fonts, see https://developers.google.com/fonts/faq?hl=de-DE&csw=1. For general information regarding data protection at Google, please see http://www.google.com/intl/de-DE/policies/privacy/
The data are processed to be able to improve the visual presentation of the text on our website.
10.3 Legal basis
The processing is necessary to protect the predominant legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose set out in paragraph 10.2.
10.4 Recipient and transmission to third countries
By using Google web fonts your personal data may be transmitted to Google. Google will also process your personal data in the US and is governed by the EU-US-Privacy Shield. For further information regarding the EU-US Privacy Shield, see https://www.privacyshield.gov/EU-US-Framework.
11.1 Description of the processing
Our website uses content delivery networks (CDN). CDNs accelerate the loading of common fonts and icons because the files are transmitted by fast, local or underused servers of external service providers. We have integrated website icons (graphic symbols) of the external service providers on our website. These icons are directly loaded from a server of the external service providers. For this to be possible, your browser will send a request to these servers. As a result your IP address in conjunction with our website address may be transmitted to the servers of the external service providers.
The data is processed to visually improve the display of our website by integrating graphic symbols and to shorten the time it takes to load them.
11.3 Legal basis
The processing is necessary to protect the predominant legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose set out in paragraph 11.2.
11.4 Recipient and transmission to third countries
12. GOOGLE ANALYTICS
12.1 Description of the processing
The data is processed so that we can analyze and evaluate the use of our website. The information obtained as a result of this is used for improving and tailoring our online presence as needed.
12.3 Legal basis
The processing is necessary to protect the predominant legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose set out in paragraph 12.2.
12.4 Storage period and the right to object
We provided information on the storage period as well as your control and configuration options with regard to cookies in paragraph 8. You can object to data processing by Google Analytics at any time by downloading and installing the browser add-on provided by Google at HTTPS://TOOLS.GOOGLE.COM/DLPAGE/GAOPTOUT. Alternatively, you have the option to click on the following link. In doing so, an opt-out cookie that prevents your data from being recorded during future visits to this website is placed on your device. The analytical data processed and stored with Google Analytics is deleted by us automatically after 14 months.
12.5 Recipient and transmission to third countries
Google Analytics works for us as a service provider within the scope of commissioned data processing. Google will also process your personal data in the US and is governed by the EU-US Privacy Shield. For further information regarding the EU-US Privacy Shield, see HTTPS://WWW.PRIVACYSHIELD.GOV/EU-US-FRAMEWORK.
14. SECURITY MEASURES
To protect your personal data from external access, we have installed an SSL and/or TLS certificate on our website. SSL means “secure sockets layer” and TLS means “transport layer security” and encrypts the communication of data between a website and the user’s device. The SSL and/or TLS encryption is active when a small padlock symbol is displayed to the left of the address line in the browser. YOUR RIGHTS
15. RIGHTS OF DATA SUBJECTS
With regard to the processing of data by our company described above, you can assert the following rights of data subjects:
15.1 Right of access (Art. 15 GDPR)
You have the right to ask us to confirm whether we are processing personal data concerning you. If this is the case, you have the right to information on this personal data and on the further information listed in Art. 15 GDPR under the conditions specified in Art. 15 GDPR.
15.2 Right to rectification (Art. 16 GDPR)
You have the right to request us to correct any incorrect personal data concerning you and, if necessary, to complete incomplete personal data without undue delay.
15.3 Right to erasure (Art. 17 GDPR)
You have the right to request us to delete personal data relating to you without undue delay if one of the reasons listed in detail in Art. 17 GDPR applies, for example if your data is no longer necessary for the purposes we pursue.
15.4 Right to restriction of processing (Art. 18 GDPR)
You have the right to request us to restrict the processing if one of the conditions listed in Art. 18 GDPR applies; for example, if you contest the accuracy of your personal data, data processing will be restricted for a period enabling us to verify the accuracy of your data.
15.5 Right to data portability (Art. 20 GDPR)
You have the right, under the conditions set out in Art. 20 GDPR, to receive the personal data concerning you in a structured, commonly used and machine-readable format.
15.6 Right to withdraw consent (Art. 7 para. 3 GDPR)
If the data processing is based on your consent, you have the right to withdraw your consent at any time. The withdrawal is valid from the time of its assertion. In other words, it has effect for the future. The processing therefore does not become retroactively unlawful through the withdrawal of the consent.
15.7 Right to lodge a complaint (Art. 77 GDPR)
If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. You may exercise this right before a supervisory authority in the EU Member State of your place of residence, place of work, or the place where the alleged infringement occurred.
15.8 Prohibition of automated decision-making / profiling (Art. 22 GDPR)
Decisions that produce legal effects concerning you or significantly affect you may not be based solely on automated processing of personal data, including profiling. We hereby inform you that we do not use automated decision making including profiling with regard to your personal data. 15.9 Right to object (Art. 21 GDPR) If we process your personal data on the basis of Art. 6 para. 1 lit. f GDPR (to protect overriding legitimate interests), you have the right to object to this under the conditions set out in Art. 21 GDPR. However, this only applies if you have grounds relating to your particular situation. After an objection, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. We also do not have to cease processing if it serves to establish, exercise or defend legal claims. In any case – regardless of your particular situation – you have the right to object at any time to the processing of your personal data for direct marketing.
Last updated: March 2021