Privacy
AND DATA SECURITY
I. Privacy policy
We are glad that you visit our website. We respect your privacy. Data protection and data security when using our website are very important to us. With this privacy policy, we would like to inform you about the extent to which data is collected when you use our website and for what purposes we use this data. We would also like to inform you about your rights in this regard.
II. Responsible
Green FOX Energy GmbH
Jörn Reinecke (Managing Director)
Große Elbstraße 61
22767 Hamburg
Germany
Phone: +49 (40) 238 311 350
E-mail: info@greenfoxenergy.de
Register court: Amtsgericht Hamburg
Register number: HRB 172288
III. Data Protection Officer
OSYSCON GmbH
external Data Protection Officer
Am Brunnen 17
04159 Leipzig
Germany
E-mail: datenschutz@osyscon.de
https://www.osyscon.de/
IV. Accessing our Website
When accessing our website without registering or providing personal information, general information is automatically collected. This includes server log files such as the type of browser, operating system, internet service provider domain name, and IP address. This information cannot be used to draw conclusions about you. It is processed for the following purposes.
To guarantee a seamless connection to the website,
we need to ensure its smooth operation,
assess system security and stability, and
perform other necessary administrative tasks.
We do not use your information to identify you personally. However, we may use this information for statistical purposes to improve our website and its technology.
This processing is carried out in accordance with Art. 6 par. 1 f) GDPR, which reflects our legitimate interest in enhancing the stability and functionality of our website.
The data recipients are internal employees and, where applicable, contractors for the operation and maintenance of our website.
Categories of data: IP address data
The data is deleted when it is no longer required for collection. This is generally the case for data used to provide the website at the end of the session.
You may revoke your consent to the storage of your personal data at any time with effect for the future.
You may notify us of your withdrawal at any time using the contact information provided at the beginning of this Privacy Policy.
V. Legal basis for processing personal data
Following Article 13 GDPR, we will inform you of the legal basis for our data processing. If the legal basis is not specified in the privacy notice, the following applies: the legal basis for obtaining consent is Article 6(1)(a) in conjunction with Article 7 GDPR. The legal basis for processing to provide our services and fulfill contractual measures, as well as answering inquiries, is Article 6(1)(b) GDPR. The legal basis for processing to fulfill our legal obligations is Article 6(1)(c) GDPR. If the processing of your data is necessary to safeguard the legitimate interests of our company or a third party and if your interests, fundamental rights, and fundamental freedoms as the data subject do not outweigh the first interest, Article 6(1)(f) GDPR serves as the legal basis for the processing. If the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR serves as the legal basis.
VI. Data deletion and rention period
We adhere to the principles of data minimization in accordance with Article 5(1)(c) GDPR and storage limitation according to Article 5(1)(e) GDPR. We only store your personal data for as long as is necessary to achieve the purposes stated here, or as stipulated by the retention periods provided for by law. After the respective purpose no longer applies or after these retention periods have expired, the corresponding data will be deleted as quickly as possible.
VII. External links
This website may contain links to third-party websites or to other websites under our responsibility. If you follow a link to any of the websites outside our control, please note that these websites have their own privacy notices. We do not assume any responsibility or liability for these external websites and their privacy notices. Before using these websites, please check whether you agree with their privacy policies.
You can recognize external links either by the fact that they are displayed in a color which is slightly different from the rest of the text or that they are underlined. Your cursor will show you external links when you move it over such a link. Only when you click on an external link will your personal data be transferred to the destination of the link. The operator of the other website will then receive your IP address, the time at which you clicked on the link, the website you were on when you clicked on the link, and other information that you can find in the respective provider’s privacy notice.
VIII. Your rights as a data subject
If you process personal data as a user, you are considered a data subject by the GDPR. Data subjects are entitled to the following rights vis-à-vis the controller:
Right to information (Art. 15 GDPR)
You have the right to receive from us at any time, upon request, information about the personal data we processed and concerning you within the scope of Art. 15 GDPR.
Right to rectification or erasure of personal data (Art. 16, 17 GDPR)
You have the right to request that we rectify the personal data concerning you without delay if it is incorrect.
You have the right, under the conditions described in Art. 17 GDPR, to demand that we delete the personal data concerning you. These conditions provide, in particular, for a right to erasure if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, as well as in cases of unlawful processing, the existence of an objection, or the presence of a deletion obligation under Union law or the law of the Member State to which we are subject.
Right to restriction of processing (Art. 18 GDPR)
You have the right to demand that we restrict processing by Art. 18 GDPR. This right exists in particular if the accuracy of the personal data is disputed between you and us for the duration that the verification of the accuracy requires, as well as if you request restricted processing instead of erasure in the case of an existing right to erasure; furthermore if the data is no longer necessary for the purposes pursued by us, but is required for the assertion, exercise or defense of legal claims, as well as if the successful practice of an objection is still disputed between you and us.
Right to notification in connection with correcting or deleting your personal data or restricting processing (Art. 19 GDPR).
Right to data portability (Art. 20 GDPR)
You have the right to receive from us the personal data concerning you that you have provided to us in a structured, standard, machine-readable format by Art. 20 GDPR.
Right to object (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, which is carried out, among other things, based on Art. 6(1)e) or f) GDPR, by Art. 21 GDPR. We will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms or if the processing serves the purpose of asserting, exercising, or defending legal claims.
Right to revoke the consent given. The lawfulness of the data processing carried out until the revocation remains unaffected due to the consent being valid to date. (Art. 7 para. 3 GDPR).
Right to complain with the supervisory authority (Art. 77 GDPR)
You also have the right to complain to the competent supervisory authority.
IX. Right of appeal to an authority pursuant to Art. 13 para. 2 lit. d)
Without prejudice to any other administrative or judicial remedy, any data subject shall have the right to complain with a supervisory authority, in particular in the Member State of his or her residence, place of work, or the place of the alleged infringement, if the data subject considers that the processing of personal data relating to him or her infringes the GDPR. The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.
X. Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke an already given consent at any time. For this purpose, informal communication by e-mail to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
XI. Hosting
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses, and other data generated via a website.
The hoster is used to fulfill the contract with our potential and existing customers (Art. 6 para. 1 lit. b) GDPR) and in the interest of a secure, fast, and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f) GDPR). As a corresponding consent has been requested, the processing is carried out exclusively based on Art. 6 para. 1 lit. a) GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g., device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.
Our hoster will only process your data to the extent necessary to fulfill its service obligations and follow our instructions regarding this data.
We use the following hoster:
hosting.de GmbH, Franzstraße 51, 52064 Aachen
Order processing
As mentioned above, we have concluded a contract on order processing (AVV) with the provider. This is a contract required by data protection law, which ensures that this provider only processes the personal data of our website visitors by our instructions and is in compliance with the GDPR.
XII. Use of local storage items, session storage items and cookies
Our website uses local storage items, session storage items, and/or cookies. Local storage is a mechanism that enables data to be stored within the browser on your end device. This data usually includes user preferences, such as the “day” or “night” mode of a website, and is retained until you manually delete the data. Session storage is very similar to Local storage, whereas the storage duration only lasts during the current session until the current tab is closed. The session storage objects are then deleted from your end device. Cookies are information that a web server (server that provides web content) stores on your end device to be able to identify this end device. They are either temporarily deleted for the duration of a session (session cookies) and after you visit a website or permanently (permanent cookies) on your end device until you delete them yourself or they are automatically deleted by your web browser.
These objects can also be stored on your end device by third-party companies when you visit our site (third-party requests). This allows us, as the operator, and you, as a visitor to this website, to make use of certain third-party services installed on this website. Examples are processing payment services or displaying videos on a website.
These mechanisms have a variety of uses. They can improve the functionality of a website, control shopping cart functions, increase the security and comfort of website use, and carry out analyses regarding visitor flows and behavior. Depending on their individual functions, they must be classified in terms of data protection legislation. If are they necessary for the operation of the website and intended to provide certain features (shopping cart feature) or serve to optimize the website (e.g. cookies to measure visitor behavior), then their use is based on Article 6(1)(f) GDPR. As a website operator, we have a legitimate interest in storing local storage items, session storage items, and cookies to ensure the technically error-free and optimized provision of our services. In all other cases, local storage items, session storage items, and cookies are only stored with your express consent (Article 6(1)(a) GDPR).
If local storage items, session storage items, and cookies are used by third-party companies or for analysis purposes, we will inform you about this separately in this privacy notice. When required, your consent will be requested and can be revoked at any time.
XIII. External services
We use external services on our website. External services are services provided by third parties that are used on our website. This can be done for a variety of reasons, such as embedding videos or website security. When using these services, personal data is also passed on to the respective providers of these external services. If we have no legitimate interest in using these services, we will obtain your revocable consent as a visitor to our website before using them (Article 6(1)(a) GDPR).
XIV. privacy notice
We use the preeco privacy information service on our website. The provider of this service is preeco GmbH, Magirus-Deutz-Straße 14, 89077 Ulm, Germany.
Further information can be found in the provider’s data protection information at the following URL: https://www.preeco.de/datenschutzhinweise.
We base this processing on a legitimate interest (Art. 6 para. 1 lit. f) GDPR).
This service helps us to keep our privacy information up to date and compliant with the law. We therefore rely on the legitimate interest legal basis.
XV. Analytics
We process website visitors’ personal data to analyze user behavior. Evaluation of this data enables us to compile information on how visitors use individual components of our website. This allows us to increase the user-friendliness of our website. The analysis tools may be used, for example, to create user profiles for the display of targeted or interest-based advertising messages, to recognize our website visitors the next time they visit our website, to measure their click/scroll behavior and downloads, to create heat maps, to recognize page views, to measure the length of visits to the website or bounce rates, as well as to trace the origin of website visitors (city, country, the website visitors have come from). The analysis tools help us to improve our market research and marketing activities.
Processing only occurs if you expressly give consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent Art. 6(1)(a) GDPR. Without your consent, data processing in the manner described above will not take place. If you revoke your consent (e.g. via the consent banner or other options provided on this website), we will stop this data processing. The lawfulness of the processing carried out until the revocation remains unaffected.
XV.1. Koko Analytics
Our website uses Koko Analytics, provided by ibericode BV, St. Jacobslaan 51, 6533BP Nijmegen, Netherlands.
As the service is hosted locally on the web server, no data is transferred to third parties.
XVI. Presentation optimization
We use tools to optimize the presentation of our website. Among other things, these tools help us to present the website in other languages or to make it more accessible to people with disabilities.
Your data will only be processed if you expressly consent to this processing (via our consent banner on the website). The legal basis for this consent is Art. 6 para. 1 lit. a) GDPR. Without your consent, data processing in the manner described above will not take place. We will stop this data processing if you revoke your consent (e.g., via the consent banner or other options provided on this website). This will not affect the lawfulness of any processing carried out until the withdrawal.
XVI.1. QTranslate
Our website utilises the QTranslate service provided by QuestSoft Solutions Inc, located at 432 Route 34, Ste#3A, Matawan, USA.
As the service is hosted locally on the web server, no data is transferred to third parties.
This processing is based on our legitimate interest (Article 6(1)(f) GDPR).
The application is necessary to ensure the unrestricted functionality of the website as it serves as a language tool that is considered essential.
XVII. Inquiries by phone, e-mail or fax
If you contact us by e-mail, telephone, or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us to process your request. We do not pass on this data without your consent.
The processing of this data is based on Art. 6 para. 1 lit. b) GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 (1) f) GDPR) or on your consent (Art. 6 (1) a) GDPR) if this has been requested, the consent can be revoked at any time.
The data you send via contact requests will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g., after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
XVIII. Actuality and change of this privacy policy
This privacy policy is currently valid and has the status 03 / 2023 . Due to the further development of our website and offers on it or changed legal or regulatory requirements, it may become necessary to change this privacy policy.