Privacy Policy
Responsible office and Data Protection Officer
Resposible office and contact
Responsible for the processing of the processing operations described in this data protection notice within the meaning of Art. 4 No. 7 of the General Data Protection Regulation (GDPR):
Data Protection Officer and contact
Website functions
About this processing
Your access to this website requires the processing of your personal data, such as your IP address. Further processing of personal data when using special services or cookies is described separately.
Description and purpose of the processing
When you access this website, we process your personal data to provide you with this website and to ensure its operation and technical security.
Categories of personal data
Your IP address, browser data (e.g. referrer ID or redirects, screen resolution, operating system, browser and browser version, installed plug-ins and extensions and fonts).
Legal basis of processing
The processing of your personal data when you access this website is based on our legitimate interest (Art. 6 para. 1 lit. f DSGVO).We have balanced our interest in providing as well as operating and securing this website against your interest in the confidentiality of your personal data, whereby our interest prevails. Without the processing of personal data, the provision of the website is technically impossible. This also applies to its operation and security. The security of the website also serves your interests.
Recipients / categories of recipients
We do not disclose your personal data to recipients.
Storage period
We store your data for as long as is necessary to provide the above services to you.
Obligation to provide
You are not obliged to provide personal data. However, without your personal data, you will not be able to access this website.
About this processing
In connection with the use of technically necessary cookies, we process your personal data in order to provide you with certain functions of this website.
Description and purpose of the processing
When you access this website, your personal data may be processed in connection with the use of so-called "cookies". Cookies are text files that are stored on your terminal device and are necessary for certain functions of this website. You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the functions of this website. In this regard, the following information relates to cookies that have no connection to a service available via our website, but serve exclusively to provide the website itself ("technically necessary cookies").
Categories of personal data
Google Tag Manager: aggregated data about tag triggering Consent Management Platform Usercentrics: opt-in and opt-out data, referrer URL, user agent, user settings, consent ID, time and type of consent, template version, banner language.
Legal basis of processing
The processing of your personal data in connection with the use of technically necessary cookies on this website is based on our legitimate interest (Art. 6 (1) lit. f DSGVO).
We have balanced our interest in providing the functions of this website that depend on cookies against your interest in the confidentiality of your personal data, whereby our interest prevails. Without the processing of personal data, it is technically impossible to provide the functions. At the same time, you have the option described above to prevent the processing of your personal data in connection with cookies.
Recipients / categories of recipients
We do not disclose your personal data to recipients.
Storage period
We store your personal data for as long as is necessary for the use of the respective cookie.
Obligation to provide
You are not obliged to disclose personal data. Without your personal data, not all functions of this website may be available to you.
About this processing
If you have consented, we store personal data entered by you on our website in the so-called local storage in your browser.
Description and purpose of processing
In connection with the use of local storage, we process your personal data in order to design certain functions of this website. This means that we store information you enter on our website in the local storage beyond your respective visit to our website. In this way, you do not have to re-enter this information on future visits to our website, but are provided with it directly as a suggested entry.
Categories of personal data
Input information in forms and data from tracking tools, but not consent, bank details or contract account numbers.
Legal basis of processing
The processing of your personal data in connection with the use of Local Storage on this website is based on legitimate interest (Art. 6 para. 1 lit. f DSGVO).
Recipients / categories of recipients
We do not disclose your personal data to recipients.
Storage period
We store your personal data for as long as is necessary for the use of the respective function of the website that depends on the Local Storage.
Obligation to provide
You are not obliged to provide personal data. You can configure your browser settings according to your wishes and, for example, deactivate the use of Local Storage. Without your personal data, not all functions of this website may be available to you.
About this processing
You can contact us using our contact form on this website or via the general email address info (at) eon.com. For this purpose, we process your personal data.
Description and purpose of the processing
We process your personal data in order to process your respective request.
Categories of personal data
Data that you enter in the contact form.
Legal basis of processing
If your enquiry relates to the performance of a contract to which you are a party or to carry out pre-contractual measures in response to your enquiry, Art. 6 (1) lit. b DSGVO is the legal basis for the processing.
In other cases, the processing of your personal data to handle your request is based on our legitimate interest (Art. 6 para. 1 lit. f DSGVO). We have balanced our interest in providing the contact form or a general service email address against your interest in the confidentiality of your personal data, whereby our interest prevails. Without processing the personal data, it is not possible to process your request. Furthermore, the use of the contact form or a general service e-mail address is voluntary.
Recipients / categories of recipients
We do not disclose your personal data to recipients unless this necessity arises directly from your enquiry.
Storage period
We store your personal data for as long as is necessary to process your respective enquiry or for as long as we are entitled or obliged to store it on the basis of statutory retention obligations.
Obligation to provide
You are not obliged to provide personal data. The fields marked with * in the contact form are mandatory fields. Without this personal data, your respective request cannot be processed. The remaining information is voluntary and can simplify the processing of your enquiry.
About this processing
We use the Usercentrics Consent Management Platform to manage consents given by you.
Description and purpose of the processing
This service provides a Consent Management Platform to comply with legal record keeping requirements for obtaining consent.
Categories of personal data
Opt-in and opt-out data, referrer URL, user agent, user preferences, consent ID, time of consent, type of consent, template version, banner language.
Legal basis of the processing
The processing is necessary for the fulfilment of a legal obligation to which we are subject (Art. 6 para. 1 lit. c DSGVO).
Insofar as the processing of your personal data is based on your consent, this is the legal basis (Art. 6 para. 1 lit. a DSGVO and §25 TTDSG). You can revoke your consent via the Cookie Settings button.
Recipients / categories of recipients
We use the service provider Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany.
Storage period
The consent data (consent and revocation of consent) is stored for three years. Cookies are deleted after closing the browser. The data is then deleted immediately.
Obligation to provide
You are not obliged to disclose personal data.
About this processing
We use the Usercentrics Consent Management Platform to manage consents given by you.
Description and purpose of the processing
This service provides a Consent Management Platform to comply with legal record keeping requirements for obtaining consent.
Categories of personal data
Opt-in and opt-out data, referrer URL, user agent, user preferences, consent ID, time of consent, type of consent, template version, banner language.
Legal basis of the processing
The processing is necessary for the fulfilment of a legal obligation to which we are subject (Art. 6 para. 1 lit. c DSGVO).
Insofar as the processing of your personal data is based on your consent, this is the legal basis (Art. 6 para. 1 lit. a DSGVO and §25 TTDSG). You can revoke your consent via the Cookie Settings button.
Recipients / categories of recipients
We use the service provider Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany.
Storage period
The consent data (consent and revocation of consent) is stored for three years. Cookies are deleted after closing the browser. The data is then deleted immediately.
Obligation to provide
You are not obliged to disclose personal data.
Analysis of website behaviour
Description of Service
Google Tag Manager is a Google solution that allows companies to manage website tags from a single interface. The Google Tag Manager is a cookieless domain that does not collect any personal data. Google Tag Manager is responsible for triggering other tags, which in turn may collect data. We hereby draw your attention to this separately. Google Tag Manager does not access this data.
Processing company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data Purposes
This list represents the purposes of the data collection and processing. - Functionality
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser. - Pixel
Data Collected
This list represents all (personal) data that is collected by or through the use of this service. - Aggregated data about tag firing
Legal Basis
In the following the required legal basis for the processing of data is listed. - Art. 6 para. 1 s. 1 lit. f GDPR
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted after fulfillment of the respective purposes.
Data Recipients
In the following the recipients of the data collected are listed.
Alphabet Inc.
Google LLC
Google Ireland Limited
Description of Service
We use the web analysis service Google Analytics to collect usage data from our websites. This enables us to compile reports on website activity and thus to improve the website.
Furthermore, we use Google Analytics to process additional information from users, provided they are registered with Google and have consented to the processing of their data for personalized advertising. In these cases, the usage activities on our website are assigned to the Google account, possibly including location, search history and YouTube history. If applicable, cross device tracking might also take place. We receive so-called insights, i.e. aggregated demographic information about our website visitors.
We also process the data collected by Google Analytics for (re-) marketing purposes and transmit corresponding lists (so-called audiences) to other companies in the E.ON Group, as well as to Google and its advertising network. Last but not least, we also use Google Analytics to measure the success of our advertising campaigns and to be able to optimize them through Google conversion tracking. Cross-domain tracking within the E.ON Group may also be used to measure the success of advertising measures that cover the websites of several companies in the E.ON Group.
We also use the data collected by Google Analytics in the Google Optimize tool. This is done to improve usability through the use of A/B tests and to personalize the website. Google Optimize allows you to test different versions of a website and how the user reacts to those different versions. For example, we can test where certain information is most attractive on the website.
In addition, we share anonymized data from Google Analytics with Google for benchmarking purposes.
Processing company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form
Data Purposes
This list represents the purposes of the data collection and processing.
Marketing
Analytics
Remarketing
Benchmarking
Advertising
Website optimization
A/B Testing
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Pixel
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
App updates
Click path
Date and time of visit
Device information
Downloads
Flash version
Location information
IP address
JavaScript support
Pages visited
Purchase activity
Referrer URL
Usage data
Widget interactions
Browser information
Cookie IDs
Legal Basis
In the following the required legal basis for the processing of data is listed.
- Art. 6 para. 1 s. 1 lit. a GDPR and § 25 TTDSG
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes
.The data collected with Google Analytics is stored for a period of 50 months. The data collected with the additional Google Optimize Cookie will be stored for the duration of the experiment, usually 90 days.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
- Worldwide
Data Recipients
In the following the recipients of the data collected are listed.
- Google Ireland Limited, Alphabet Inc., Google LLC
Click here to read the privacy policy of the data processor
https://policies.google.com/privacy
Storage Information
- Maximum age of cookie storage: 2 years
Stored Information
Name: _ga; This is used to distinguish users.; Type: cookie; Duration: 2 years;
Name: _gid; This is used to distinguish users.; Type: cookie; Duration: 1 day;
Name: _gat ; This is used to throttle request rate.; Type: cookie; Duration: 1 minute;
Name: _dc_gtm_xxx; This is used to distinguish users.; Type: cookie; Duration: 1 minute;
Name: _gat_gtag_xxx; This is used to distinguish users.; Type: cookie; Duration: 1 minute;
Name: _gac_xx; This contains information about which ad was clicked.; Type: cookie; Duration: 2 months, 29 days;
Name: IDE; Through this ID, Google can recognize the user across different websites and domains and display personalized advertising.; Type: cookie; Duration: 1 year;
Description of Service
This web analysis service is used to improve the user-friendliness of the website, to increase user satisfaction and thus ultimately to improve the conversion rates. For this purpose, data on the interaction of users with the website are collected and analyzed. This information about a specific website visit is only recorded anonymously. Therefore, we cannot assign this information to a specific user or a specific person. The analyzed data can be segmented, among other things, according to marketing campaigns through which the users were directed to the website. On the basis of the analyzed data, improvement measures are derived, partly using methods of artificial intelligence.
Processing company
Contentsquare GmbH
Implerstraße 25a, 81371 München
Data Purposes
This list represents the purposes of the data collection and processing.
Analytics
Increase user satisfaction
Improve conversion rates
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Scripts
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Date and time of visit
Duration of visit
Geographic location
Operating system information
Purchase activity
Referrer URL
Screen resolution
Unique device identifier
Usage data
Websites visited
Hashed IP Address
Mouse movements
Screen taps
Scrolling activity
Interaction with forms
Legal Basis
In the following the required legal basis for the processing of data is listed.
- Art. 6 para. 1 s. 1 lit. a GDPR, § 25 Abs. 1 TTDSG
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes. Aggregated web analysis data is usually deleted after 13 months, session recordings of mouse movements after 60 days.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
- Worldwide
Data Recipients
In the following the recipients of the data collected are listed.
- Contentsquare GmbH
Click here to read the privacy policy of the data processor
https://contentsquare.com/privacy-and-security/
Click here to read the cookie policy of the data processor
Storage Information
- Maximum age of cookie storage: 1 year, 1 month
Stored Information
Name: _CS_ID; Contains the following data separated by dots: user ID, user creation timestamp, number of visits, last pageview timestamp, last visit timestamp, timestamp of the last time this visitor was drawn, cookie expiration date, cookie SameSite attribute, cookie Secure attribute value (0/1).; Type: cookie; Duration: 1 year, 1 month;
Name: _CS_S; Contains the number of pages viewed in the current session and the recording type: ".1" (not recorded for Session Replay), ".3" (to include a visitor for Session Replay recording service) or ".5" (to include a visitor for Session Replay recording service after a specific trigger). For Advanced recording pipeline: value is 0 when not recorded for Session Replay/ Value is .5 when recorded.; Type: cookie; Duration: 30 minutes;
Name: _CS_CVARS; Includes the session's Custom variables URL encoded.; Type: cookie; Duration: Session;
Name: _CS_EX; When set, the user is excluded from tracking. Contains the timestamp of the last time this visitor was drawn.; Type: cookie; Duration: 30 minutes;
Name: _CS_C; Contains the user consent state (not expressed, granted, withdrawn).; Type: cookie; Duration: 1 year, 1 month;
Name: _CS_OPTOUT; When set, the user is opted-out from tracking.; Type: cookie; Duration: 1 year, 1 month;
Name: _CS_MK; This cookie is used for the Google Analytics and Adobe Analytics integrations.; Type: cookie; Duration: 30 minutes;
Name: _CS_RL; This cookie is used for a few integrations we have that require us to generate replay links and put them into cookies.; Type: cookie; Duration: 1 year;
Name: _CS_T; This is used to check if the browser supports cookies and if the tag must set the SameSite flag to None and the Secure flag to Yes.; Type: cookie; Duration: Session;
Name: _CS_SAME_SITE; This is used to check if the browser supports the SameSite flag.; Type: cookie; Duration: Session;
Name: _CS_ROOT_DOMAIN; This is used to get the root domain.; Type: cookie; Duration: Session;
Description of Service
This is a service providing increased security and performance for websites. Cloudflare offers for example a content delivery network („CDN“) to improve the loading times of the website. The use of a CDN enables the user to make content available for retrieval more quickly with the help of regionally or internationally distributed servers.
Processing company
Cloudflare Inc.
101 Townsend St., San Francisco, CA 94107, United States of America
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
privacyquestions@cloudflare.com, legal@cloudflare.com
Data Purposes
This list represents the purposes of the data collection and processing.
Optimization
Website security
Improvement of service
Reducing bandwidth usage
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
- Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
IP address
System configuration information
Name of website
Date and time of request
Name and URL of the accessed file
Amount of data transferred
Status Information
Device operating system
Referrer URL
Requesting provider
Device type
Time of the server request
Legal Basis
In the following the required legal basis for the processing of data is listed.
- Art. 6 para. 1 s. 1 lit. f GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
United States of America,European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
Data will be deleted as soon as they are no longer needed for the processing purposes.
Data Recipients
In the following the recipients of the data collected are listed.
- Cloudflare Group
Click here to read the privacy policy of the data processor
https://www.cloudflare.com/privacypolicy/
Storage Information
- Maximum age of cookie storage: 1 month
Stored Information
Name: _cf_bm; This cookie is set by Cloudflare. The cookie is used to support Cloudflare Bot Management.; Type: cookie; Duration: 30 minutes;
Name: cf_clearance; This cookie is set by Cloudflare-protected websites displaying a Captcha or a managed challenge. This Cookie stores the proof that a challenge has been passed.; Type: cookie; Duration: 30 minutes;
Name: _cfuvid; This cookie is required to manage inbound traffic and provide better visibility into the origin of a particular request.; Type: cookie; Duration: 7 days;
Name: cf_chl_cc_XXX; This cookie is used by Cloudflare to define challenges. It is not used for tracking and does not go beyond the scope of the challenge.; Type: cookie; Duration: Session;
Name: cf_chl_rc_i; This cookie is used by Cloudflare to define challenges. It is not used for tracking and does not go beyond the scope of the challenge.; Type: cookie; Duration: Session;
Name: cf_chl_rc_ni; This cookie is used by Cloudflare to define challenges. It is not used for tracking and does not go beyond the scope of the challenge.; Type: cookie; Duration: Session;
Description of Service
This is a social wall. With this service the user can collect and showcase posts, photos or videos from various social media channels.
Processing company
Walls.io GmbH
Schönbrunner Straße 213/215, 3rd Floor, 1120 Vienna, Austria
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
Data Purposes
This list represents the purposes of the data collection and processing.
Embedding Posts
Providing a social media feed
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
- Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
IP address
Cookie information
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
§ 25 para. 1 s. 1 TDDDG
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted the latest after 60 days.
Data Recipients
In the following the recipients of the data collected are listed.
- Walls.io GmbH
Click here to read the privacy policy of the data processor
Stored Information
Name: _ga; This is used to distinguish users.; Type: cookie; Duration: 2 years; Domain: walls.io;
Name: _gat; This is used to distinguish users.; Type: cookie; Duration: Session; Domain: walls.io;
Name: _gid; This is used to distinguish users.; Type: cookie; Duration: 1 day; Domain: walls.io;
Name: wallsio; This is used to provide the service.; Type: cookie; Duration: 30 days; Domain: walls.io;
Description of Service
This is an Adobe Experience Cloud Service. With this service the user can tailor and personalise the customers' experience on his website or mobile app.
Processing company
Adobe Systems Software Ireland Limited
4-6 Riverwalk City West Business Campus, Dublin 24, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
Data Purposes
This list represents the purposes of the data collection and processing.
Analytics
Optimization
Personalisation
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
- Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
- Browser information - Device information - Shortened IP Address - Usage data
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
§ 25 TTDSG
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes. The data will be deleted as soon as they are no longer needed for the processing purposes.
Data Recipients
In the following the recipients of the data collected are listed.
Adobe Systems Software Ireland Limited
E.ON Digital Technology GmbH Tresckowstraße 5 30457 Hannover, Deutschland
Click here to read the privacy policy of the data processor
https://www.adobe.com/de/privacy/policy.html
Click here to opt out from this processor across all domains
https://www.adobe.com/de/privacy/opt-out.html
Stored Information
Name: mbox.; The cookie remains on the visitor’s browser two years from their last login. You cannot change the cookie duration.; Type: cookie; Duration: 2 years;
Name: at_check; This is used to determine if a visitor has accepted cookies. ; Type: cookie; Duration: Session;
Name: session ID; This is used to create a unique ID for a user session. ; Type: cookie; Duration: 30 minutes;
Name: pc ID; This is a semi-permanent ID for a visitor's browser.; Type: cookie; Duration: 14 days;
Social media
About this processing
We process your personal data in order to provide you with videos on the YouTube platform.
Description and purpose of the processing
We have embedded YouTube videos on our website, which are stored on YouTube, a platform of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and can be played directly from our website. The YouTube videos are all embedded in "extended data protection mode", which means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only by playing the respective video is the respective processing initiated and data transferred.
Categories of personal data
By playing the video, the following categories of personal data are transmitted to YouTube: Website, language, region, browser type, browser version.
If you have a Google account and / or a YouTube account, further categories of data are processed. For more details, see Google - Privacy Policy YouTube Services.
Legal basis of processing
The processing of your personal data is based on our legitimate interest (Art. 6 para. 1 lit. f DSGVO).
We have weighed our interest in the use of these videos against your interest in the confidentiality of your personal data, whereby our interest prevails. We cannot display corresponding videos without accessing the interface provided for this purpose by YouTube. The processing of personal data is technically mandatory for accessing the interface. In addition, you are free not to play a video and thus prevent the processing.
Recipients / categories of recipients
We disclose your personal data to YouTube.
Storage period
We store your personal data as long as this is necessary for the use of the.
Third country reference of the processing of your personal data.
YouTube processes your personal data in the USA. There is no adequacy decision of the European Commission for the USA. We have secured the level of data protection with appropriate guarantees (so-called standard contractual clauses) within the meaning of Art. 46 DSGVO. You can request a copy of these guarantees from us.
Obligation to provide
You are not obliged to disclose personal data.
We maintain corporate appearances (so-called channels or fan pages) on the social media portals Facebook, X (formerly known as Twitter), Instagram, Threads, YouTube, LinkedIn and TikTok. For One-Link-Only solutions, we use the German provider Wonderlink.
By presenting our company in social media portals, we would like to seek active communication with you and offer you the opportunity to inform yourself about the products and services of our company and our group of companies via this way. In addition, we use social media portals to carry out marketing measures including competitions.
If you use the contact options to us on these social media portals, we process the data you provide in order to process your request, which is the reason for your contact, and to answer your questions. Your feedback and reactions in the portals also serve us to further develop and improve our product portfolio.
The operators of some social media portals provide our company with statistical data (so-called "page insights") that give us information about user activities on our corporate appearances. As part of marketing measures, we use the options provided by the social media portals for addressing specific target groups (“targeting”). In addition, usage data from our corporate appearances and marketing activities is also shared with other E.ON Group companies for the purpose of retargeting activities.
We process your personal data on the basis of our legitimate interest in communicating with you, in continuously optimizing our corporate appearances, and in the implementation of efficient advertising measures. If the processing is necessary for the fulfillment of a contract with you or for the implementation of pre-contractual measures, we process your personal data on this basis.
We store your personal data for as long as this is necessary to process your respective request or for as long as we are entitled or obliged to store it due to legal requirements.
The social media portals are not operated by us, but by the respective social media portal operators on their own responsibility. The product sovereignty and product design of the social media portal lies with the respective social media portal operator. We have no influence on the data collected and processed by the operator, nor are we aware of the full scope of data collection, the purposes of processing or the storage periods. Only in individual cases in which the social media portals process personal data on the basis of our instructions, they act as processors under our responsibility as controllers.
For our Facebook fan page, we have concluded a joint control agreement in accordance with Art. 26 GDPR with Meta Platforms Ireland Ltd.. At this, it is agreed (https://www.facebook.com/legal/terms/page_controller_addendum) that Meta Platforms Ireland Ltd. is responsible for providing you with information about the processing of page insights (https://www.facebook.com/legal/terms/information_about_page_insights_data) and enable you to exercise your rights as a data subject according to the GDPR. You can find out more about these rights in your Facebook settings.
We would like to point out that the processing of personal data in countries outside the European Union and the European Economic Area, especially in the USA, cannot be ruled out. Under certain circumstances, this can be associated with the risk of more difficult legal enforcement, which represents a risk for the individual user.
Regarding the collection, processing and use of personal data by the operators of the social media portals, we refer to their privacy policies:
Facebook (Meta Platforms Ireland Ltd.): https://www.facebook.com/policy and https://www.facebook.com/legal/terms/information_about_page_insights_data
Instagram & Threads (Meta Platforms Ireland Ltd.): https://instagram.com/about/legal/privacy
X (Twitter International Company, Irland): https://twitter.com/de/privacy
YouTube (Google Ireland Ltd., Irland): https://policies.google.com/privacy
LinkedIn (LinkedIn Ireland Unlimited Company): https://www.linkedin.com/legal/privacy-policy
TikTok (TikTok Technology Ltd., Irland): https://www.tiktok.com/legal/privacy-policy
Wonderlink (Seyffert mit Himmelspach GmbH, Deutschland): https://www.wonderlink.de/datenschutz
Data Recipients and Data Sources
Within the scope allowed by law (as previously described), we relay personal data to companies in our group as well as to external service providers:
Group companies, for the purpose of fulfilling contractual obligations and for reporting purposes;
IT service providers, for the purpose of maintaining our IT infrastructure
Public agencies where justified on a case-by-case basis (e.g. national insurance carriers, financial authorities, police, public prosecutor’s office, regulatory agencies)
We process personal data that we obtain from you within the context of our user and business relationships. Where necessary in order to provide our services, we process personal data that we have collected within the context of your use of our website.
In addition to the data transfers to third countries as already described above, data is also transferred to countries outside the European Union and the European Economic Area ("third countries") in the context of the administration, development and operation of IT systems. When doing so, the following must be observed:
Transfer is in principle permissible because the requirements allowing for such transfer under law have been satisfied or you have given your consent to the transfer of the data and special conditions exist for transfer to a third country. Specifically, the data importer guarantees an adequate level of data protection in accordance with standard EU clauses for the transfer of personal data to data processors in third countries.
Data subject rights
Unless otherwise indicated, E.ON SE is responsible for processing your data. You may request information from us at any time regarding the data stored about you and you may request the correction of this data in the event it contains errors.
In addition, you may also request restrictions be placed on processing, the portability of the data you provided us in a machine-readable format or the deletion of your data – provided it is no longer needed. Moreover, you have the right to object to the use of your data on the basis of public or legitimate interests at any time.
To do so, please contact:
E.ON SE, Data Protection, Brüsseler Platz 1, D-45131 Essen
Email: datenschutz@eon.com
It is imperative that we retain the data collected in our log files in order to ensure the functioning of the website. Therefore, there is no right to object to the processing of this information. For the cookies that we place with your consent, we have specified the technical option in which you can revoke your consent. This has been termed as Opt Out
If we process your data on the basis of your consent, you may withdraw this consent with future effect at any time. Upon receipt of your withdrawal of consent, we cease processing your data for the purpose for which consent was granted
Please direct your withdrawal of consent or revocation of your consent to the commercial use of your data to:
E.ON SE, Data Protection, Brüsseler Platz 1, D-45131 Essen
Email: datenschutz@eon.com
In addition, you can direct a complaint at any time to a regulatory authority. For us, the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, PO Box 20 04 44, 40102 Düsseldorf, Germany, Phone: +49 (0)2 11 / 384 24-0, is responsible. Alternatively, you may also approach the regulatory authority with jurisdiction at your location.