Data Privacy Policy

We take the protection of your personal data very seriously and treat it in compliance with both this data privacy policy and all applicable statutory data protection regulations. 

§ 1     Information on the processing of personal data

1. In the following paragraphs we provide information about the processing of your personal data, which means all data that can be related to you personally, e.g., name, address, email addresses, and user behaviour
2. All companies within the NOTUS energy group are bound by this data privacy policy. 
3. In compliance with Art. 4 Para. 7 of the EU General Data Protection Regulation (GDPR) the responsible entity is NOTUS energy GmbH, Parkstraße 1, 14469 Potsdam, email: windkraft@notus.de. 
   You can contact the data protection officer of NOTUS energy Plan GmbH & Co. KG, NOTUS energy GmbH, NOTUS energy Construction GmbH & Co. KG, and NOTUS Energy Service GmbH & Co. KG at datenschutzbeauftragter@notus.de or at our postal address by letter addressed to "Der Datenschutzbeauftragte".  
4. Should we wish to use commissioned service providers for individual functions within our service range or to use your data for advertising purposes, we shall inform you in detail about the respective processes below, whereby, we also refer to the specified data storage duration criteria. 

§ 2    Processing the personal data of visitors to our website

1. We shall only collect the personal data that your browser sends to our server whenever you visit our website for informational purposes, i.e., when you do not send us any other information. Should you wish to view our website, we shall process the following data, which is technically necessary for us to be able to display our website and to ensure its stability and security, the legal basis of which is Article 6(1)(f) GDPR. These stated purposes also include our legitimate interest in the processing of personal data in compliance with Art. 6 Para. 1 f GDPR.
   
   - IP address,
   - date and time when you access our website,
   - time zone difference to Greenwich Mean Time (GMT),
   - content of the request (specific page),
   - access status/HTTP status code,
   - volume of data transferred in each case,
   - website from which the request is sent,
   - browser
    
2. We delete all data collected in relation to this once it is no longer necessary to retain it or will restrict processing if there is a legal obligation to retain it. Data retention is no longer necessary if the purpose for which the data was processed has been completed.

§ 3     Processing of personal data when contacting us

1. Whenever you contact us (e.g., by email, contact form, telephone or post), we shall process all the data you provide us with (including your email address, your name, and if applicable your address, the name of your company, and your telephone number) to answer your enquiries, the legal basis of which is Article 6(1)(f) GDPR. These stated purposes also include our legitimate interest in the processing of personal data in compliance with Art. 6 Para. 1 f GDPR.
2. If the purpose of the contact is to conclude a contract, the additional legal basis for data processing is Article 6(1)(b) GDPR.  
3. We delete all data collected in relation to this once it is no longer necessary to retain it or will restrict processing if there is a legal obligation to retain it. Data retention is no longer necessary if the purpose for which the data was processed has been completed.

§ 4    Processing personal data in connection with job applications

1. Should you apply for one of our advertised jobs, the data you provide shall be processed so that we can carry out the relevant application procedure and decide whether to establish an employment relationship with you, the legal basis of which is para. 6(1)(f) GDPR. These stated purposes also include our legitimate interest in the processing of personal data in compliance with Art. 6 Para. 1 f GDPR.
2. The processing can be done by post or electronically depending on whether you send us your application documents by post or email or by uploading them via our contact form. 
3.  If your application is unsuccessful or if no employment relationship is established, we shall delete the stored data 6 months after notifying you of this, provided that no legitimate interests on our part would prevent us from doing so. Legitimate interests could include such things as proceedings for violation of German anti-discrimination legislation (Allgemeines Gleichbehandlungsgesetz AGG). If you send us your application documents by post, we shall return them to you. 
4. Further information on the processing of personal data in the NOTUS energy Group application process can be found HERE.

§ 5     Passing on of your data 

1. In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us and are bound by our instructions and are checked regularly. We contract our web host as an external service provider, and they have access to the personal data mentioned in § 2 of this declaration as part of their activities. We contract our IT service providers as external service providers, and they have access to the personal data mentioned in § 3 and § 4 of this declaration within the scope of their activities. 
2. We may also pass on your personal data to other third parties if contracts are concluded or similar services are offered by us together with partners. 
3. The personal data mentioned under § 3 and § 4 of this policy will be passed on to other Notus energy companies within the scope of and for the purposes of carrying out our business activities. 
4. Should any of our service providers or partners be based in a state outside of the European Economic Area (EEA), we shall inform you of the consequences of this in the service description.

§ 6    Objecting to the processing of your data

1. Insofar as we base the processing of your personal data on the weighing of interests (Art. 6 (1) f GDPR), you can object to our processing it. In the event of such an objection, we would ask you to explain the reasons why we should not have processed your personal data as we have done. Should your objection be justified, we shall examine the facts of the case and shall either stop or adapt the data processing or show you our compelling protectable reasons on the basis of which we shall continue the processing. 
2. You can of course object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us about your objection using the following contact details: NOTUS energy HR GmbH & Co. KG, Parkstrasse 1, 14469 Potsdam, email: windkraft@notus.de.

§ 7     Your rights 

1. You have the following rights in relation to your personal data:
   
   - The right to information, 
   - The right to rectification or erasure, 
   - The right to restriction of processing, 
   - The right to object to the processing, 
   - The right to data portability. 
    
2. You also have the right to complain to a data protection supervisory authority about our processing your personal data. 

§ 8    The use of Google Analytics

1. This website uses Google Analytics, a web analysis service provided by Google LLC ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site if they have given their consent to the use of Google Analytics when they visit the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA where it is stored. However, in the event that IP anonymisation is activated on this website, within member states of the European Union or in other states which are party to the Agreement on the European Economic Area, your IP address will be shortened by Google. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator about the use of the website and the internet.
2. The IP address transmitted by your browser to Google Analytics will not be merged with other data from Google. 
3. Whenever you access our website, you can prevent the storage of cookies by configuring your cookie settings such that cookies for the analysis of user behaviour are not permitted. You can also prevent them from being stored by setting your browser software accordingly. However, we would like to point out that, in this case, you may be unable to use all functions of this website to their full extent. You can also prevent any data generated by the cookie and related to your use of the website (including your IP address) from being sent to and processed by Google by downloading and installing the browser plug-in, which is available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. 
4. This website uses Google Analytics with the "_anonymizelp()” extension, which means that IP addresses are processed in a shortened form, which excludes the possibility of personal references. If the data collected about you contains a personal reference, it shall be excluded, and the relevant personal data shall be deleted immediately.
5. We use Google Analytics to analyse and continuously improve the use of our website. We can use the statistics we obtain to improve our service offering and make it more interesting for you as a user. We shall only use Google Analytics if you have given your consent to use it when you access our website. 
   The legal basis for this is Article 6(1)(a), 7 of the GDPR. You can revoke your consent at any time by writing to windkraft@notus.de. We would like to point out that your consent also covers the potential transfer of your data to a third country that may not have adequacy legislation or appropriate guarantees in place (Art. 49 para. 1 a GDPR).
6. Information provided by the third-party service provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 (1) 543 1000, Fax: +353 (1 ) 686 5660, email: support-deutschland@google.com. The relevant terms of use can be found at:
   
   http://www.google.com/analytics/terms/de.html,
   Data protection overview: http://www.google.com/intl/de/analytics/learn/privacy.html,
   as well as the data privacy policy: http://www.google.de/intl/de/policies/privacy. 

§ 9     The use of YouTube videos

1. We have integrated YouTube videos into our online service, which are stored at http://www.YouTube.com and can be played directly from our website by clicking on the respective video. We integrate YouTube videos on our website to provide you with an insight into our activities and specific projects. We will only play the You-Tube videos if you have given us your consent to do so, either by accessing our website or by clicking on the respective video and providing the appropriate consent. The legal basis for this is Article 6(1)(a), 7 of the GDPR. You can revoke the consent at any time by writing to windkraft@notus.de. We would like to point out that your consent also covers the possible transfer of data by the provider to a third country that may not have adequacy legislation or appropriate guarantees in place (Art. 49 (1) a GDPR). 
2. When you visit the website, YouTube is notified that you have accessed the corresponding subpage on our website. The data mentioned under § 2 of this policy will also be transmitted. This happens regardless of whether you are logged in via your YouTube account or have no such user account. If you are logged in to Google, your data will be directly associated with your account. Should you not wish this association with your YouTube profile to take place, you must log out before activating the button. YouTube will store your data in the form of a user profile and uses it for advertising purposes, market research and/or the demand-oriented design of its website. Such analyses are carried out in particular (even for users who are not logged in) to provide user-specific advertising and to inform other users of the social network about your activities on our website. You can prevent this processing by configuring your cookie settings when you access our website to prevent cookies from "external media". You also have a right to objection to the operator of YouTube against the creation of such user profiles, however you must contact YouTube to exercise this right. 
3. Further information on the purpose and scope of data collection and processing by YouTube can be found in their data privacy policy, where you will also find additional information about your rights and the setting options you will need to protect your privacy:https://www.google.de/intl/de/policies/privacy. 

§ 10    Integration of OpenStreetMaps

1. We use the services of OpenStreetMaps on our website, which enables us to display interactive maps directly on the website and allows you to use the map function in a convenient manner. OpenStreetMaps will only be used if you have given us your consent to do so, either when accessing our website or after clicking on the respective map and providing the appropriate consent. The legal basis for this is Article 6(1)(a), 7 of the GDPR. You can revoke your consent at any time by writing to windkraft@notus.de. We would like to point out that your consent also covers the possible transfer of data by the provider to a third country that may not have adequacy legislation or appropriate guarantees in place (Art. 49 (1) a GDPR).
2. When you visit the website, the operator of OpenStreetMaps, the OpenStreetMap Foundation, receives the information that you have accessed the corresponding subpage of our website. The data mentioned under § 2 of this policy will also be transmitted. This is done regardless of whether you are logged into your OpenStreeetMaps or if no user account exists. OpenStreetMaps will store your data as a usage profile and will use it for technical and security-related purposes, as well as for planning purposes and to improve the quality of the OpenStreetMaps data sets (e.g. by analysing requests for missing addresses and postcodes).
3. You can prevent the aforementioned processing by configuring your cookie settings when you access our website to prevent cookies from "external media".  
4. Further information on the purpose and scope of the data collected by OpenStreetMaps and how it is processed can be found in the provider's privacy policy at https://wiki.osmfoundation.org/wiki/Privacy_Policy. 

§ 11    Integration of Mapbox

1. We also use the services of Mapbox to improve the visualisation of the maps for our users. The Mapbox application is launched at the same time as you access the map function via our website. Mapbox will only be used if you have given us your consent to do so either when you access our website or after clicking on the respective map and providing the appropriate consent. The legal basis for this is Article 6(1)(a), 7 of the GDPR.  You can revoke your consent at any time by writing to windkraft@notus.de. We would like to point out that your consent also covers the possible transfer of data by the provider to a third country that may not have adequacy legislation or appropriate guarantees in place (Art. 49 (1) a GDPR). 
2. When you visit our website, the operator of Mapbox, Mapbox, Inc. will receive the data about your visit mentioned in § 2 of this policy. Mapbox will also receive information about the operating system you are using and limited information about your location and use of the website. This happens regardless of whether you are logged in via your Mapbox account or have no such user account. Mapbox will store your data for internal diagnostics and analysis, to improve their map products and services, to provide services to end customers, and to gather aggregated and anonymous user statistics. 
3. (3)    You can prevent the aforementioned processing by configuring your cookie settings when you access our website to prevent cookies from "external media".
4. Further information about the purpose and scope of Mapbox’ data collection and processing can be found in the provider's data protection policies a https://www.mapbox.com/legal/privacy/.

§ 12    Data security

An SSL (Secure Socket Layer) connection, i.e., an encrypted network connection between a server and a client (browser), is used to protect the security of data during transmission. 

§ 13    Objection to advertising e-mails

We hereby object to the use of our contact data published within the scope of our obligation to provide a legal notice (imprint) to send us advertising and other information materials not expressly requested by us. The operators of these webpages expressly reserve the right to take legal action in the event of receiving unsolicited advertising information, such as spam emails.