Who is responsible for data processing (controller)?
The data controller as defined by data protection law is
ENERPARC AG
Zirkusweg 2
20359 Hamburg
Contact person: Stefan Müller, Executive
Phone: 040 756644-90
Fax: 040 756644-965
E-mail: datenschutz@enerparc.com
Further information about our company, authorised representatives and further contact details are available in our Legal Notice on our website: www.enerparc.de/impressum
What type of data do we process? Where do these data come from?
As part of project development or cable line planning, we collect personal data by way of a so-called cadastral registry inquiry (excerpt of the property registry) and in some cases by way or resident registry inquiries.
As a rule, we collect the following data: First name, surname, date of birth, street and house number, postal code, city.
For what purposes do we process data? What is the legal basis for this?
We collect the data for the purpose of contacting you. We contact you to initiate contract negotiations on the sale or lease of your property, with the goal of building and operating a photovoltaic plant on your property, including installation of a so-called cable line, in pursuit of our business purpose.
The legal basis for processing personal data is a legitimate interest of Enerparc AG. We need to know this ownership data so that we can determine as early as possible in the planning stage whether an owner would be willing to make their property available for the development of a photovoltaic plant, and if further research and planning would therefore be worthwhile.
Since we process data based on weighing our interests against others, you as the data subject have the right, taking into account the requirements of Art. 21 GDPR, to object to the processing of personal data.
If you would like to exercise your right to object, a message in text form is sufficient. You can send us a letter or fax or contact us by e-mail. You will find our contact data at the top of this privacy statement or in the legal notice on our website.
How long are data stored?
We store data for as long as the respective purpose requires it, legal retention periods apply, or limitation periods for potential legal claims have not yet expired.
What recipients are the data transferred to?
We only share your personal data with third parties if it is necessary to fulfil a contract with you, if sharing the data is permissible based on weighing the interests as defined by Art. 6 (1) f GDPR, if we are legally required to share them or to the extent that you have given us your consent.
Within Enerparc AG and its affiliated companies, only those departments or employees receive your data who need them to safeguard legitimate interests and/or comply with any legal obligations.
In addition, we share your personal data with processors and recipients assigned by us, provided they need them to fulfil their respective duties. These are generally external project developers, cable line planners and possibly a registration service provider.
Where are the data processed?
As a rule, your data are processed in Germany and in other countries within the EU. If your personal data are processed in a country outside of the EU or recipients of your data are located in a country outside of the EU where the level of data protection does not match that of the EU, the following applies: We ensure that your data are only sent to such countries which the EU commission has deemed to have an adequate data protection level. In cases where the data protection level of the recipient country is not comparable to that of the EU, we satisfy the requirements developed by the EU and use so-called standard contract clauses. These are available upon request via one of the contact options listed above.
Automated decision-making, profiling
We do not use any automated decision-making processes as defined in Art. 22 GDPR to establish and maintain the business relationship.
Your rights as a “data subject”
The following are your rights regarding your personal data:
You have the right to request information about your personal data. You can contact us at any time to request this information. If you request the information in non-written form, please understand that we may require proof from you to document that you are the person you claim to be.
You also have the right to correction or deletion of your data, or the limitation of processing, provided you are entitled to this by law.
Furthermore, you have the right to object (see below) to the processing within the legal regulations.
You also have the right to data portability as defined by data protection regulations.
Once you have given us your consent, you can revoke it at any time. As a result, we are no longer permitted to continue the processing of your data that was based on this consent. If you would like to exercise your right to revoke your consent, you can inform us by e-mail.
Right to complain
You have the right to file a complaint about our processing of your personal data with a supervisory authority for data protection.
Right to object
If we process personal data as described above in order to guard our legitimate interests, determined by weighing our interests against others, you can object to this processing with effect to the future. If we process data for the purpose of direct marketing, you can exercise this right at any time. If processing is for other purposes, you only have the right to object for reasons justified by your particular situation.
After you object, we will cease to process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims.
This does not apply to processing for the purpose of direct marketing. In this case, we will cease to process your personal data for this purpose.
Our data protection representative
We have appointed an external data protection officer. This person can be reached at the above address of the data controller with the address addition "personal – confidential for the data protection officer" as well as at datenschutz@enerparc.com.
General privacy information
You can view the principles of data processing at Enerparc AG at General Privacy Policy - ENERPARC AG
Hamburg, on 01.11.2022