🇬🇧 This page is available in english for your convenience.
Only the german version of this page shall apply. 🇬🇧

Status 15.01.2023

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses or similar).

Octopus Energy Germany GmbH
August-Everding-Strasse 25
81671 Munich
E-mail: hallo@octopusenergy.de

PROLIANCE GmbH - www.datenschutzexperte.de
Leopoldstr. 21
80802 Munich
E-mail: datenschutzbeauftragter@datenschutzexperte.de

When contacting the data protection officer, please state the company to which your enquiry relates. Please refrain from enclosing sensitive information such as a copy of an identity card with your enquiry.

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data by which you can be personally identified. For more detailed information on data protection, please refer to our data protection statement below this text.

Our privacy policy is intended to be simple and understandable for everyone. As a rule, the data protection declaration uses the official terms of the General Data Protection Regulation (DSGVO). The official definitions are explained in Art. 4 DSGVO.

Octopus Energy Germany GmbH
August-Everding-Strasse 25
81671 Munich
E-mail: hallo@octopusenergy.de

On the one hand, your data is collected when you provide it to us via a contact form or by e-mail. This can be, for example, data that you enter in a contact form or in an e-mail.

Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you enter our website.

Some of the data is collected in order to ensure error-free provision of the website. Other data may be used to analyse your user behaviour.

You have the right to receive information free of charge at any time about the origin, recipient and purpose of your stored personal data. You also have the right to demand the correction, blocking or deletion of this data. You can contact us at any time at the address given in the imprint for this purpose and for further questions on the subject of data protection. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

When you visit our website, your surfing behaviour may be statistically analysed. This is done primarily with cookies and so-called analysis programs. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. You can revoke or change your cookie settings at any time. To do so, call up the biscuit settings again via the biscuit button. You can find this button at any time at the bottom left of the website. You will find detailed information on this in the following data protection declaration.

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

Our data protection declaration should be simple and understandable for everyone. The data protection declaration generally uses the official terms of the General Data Protection Regulation (DSGVO). The official definitions are explained in Art. 4 DSGVO.

When you use this website, various personal data are collected and processed. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for (purposes) and the legal basis on which we process your personal data. It also explains how and for what purpose this is done.

We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

By using our website, information (e.g. IP address) may be accessed or stored (e.g. cookies) in your terminal equipment. This access or storage may involve further processing of personal data within the meaning of the GDPR. In cases where such access to information or such storage of information is absolutely necessary for the technically error-free provision of our services, this is done on the basis of Section 25 (1) sentence 1, (2) no. 2 TTDSG.

In cases where such a process serves other purposes (e.g. the needs-based design of our website), this will only be carried out on the basis of § 25 para. 1 TTDSG with your consent in accordance with Art. 6 para. 1 lit. a DSGVO. The consent can be revoked at any time for the future.

Further information on the processing of your personal data and the relevant legal bases in this context can be found in the following sections on the specific processing activities on our website.

This website is hosted by external service providers (hosters). The web hosting is primarily carried out on servers within the EU. In cases where data is transferred to countries outside the EU by the hosting service provider, further appropriate safeguards are required to ensure a level of data protection that complies with the GDPR. To ensure this, we have agreed standard data protection clauses with the hosting service provider in accordance with Art. 46 (2) lit. c DSGVO. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured by this contractual extension, we will endeavour to obtain additional regulations and assurances from the recipient in the third country.

Personal data collected on this website is stored on the hoster's servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, website hits and other data generated via a website.

We collect the listed data in order to be able to guarantee a smooth connection of the website and a technically error-free provision of our services. The processing of this data is absolutely necessary to provide you with the website. The legal basis for the processing of the data is our legitimate interest in the correct presentation and functionality of our website in accordance with Art. 6 Para. 1 lit. f DSGVO.

We have concluded an order processing agreement with the provider in accordance with the requirements of Art. 28 DSGVO, in which we oblige the provider to protect our customers' data and not to pass it on to third parties.

When you visit our website, it is technically necessary for data to be transmitted to our web server via your internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:

We collect this data to ensure a smooth connection to the website and to enable users to use our website comfortably. In addition, the log file is used to evaluate system security and stability as well as for administrative purposes.

The legal basis for the temporary storage of the data or the log files is Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in the smooth running of the website.

For reasons of technical security, in particular to defend against attempted attacks on our web server, we store this data for a short time. As soon as the data is no longer needed, it is anonymised by shortening the IP address at domain level, so that it is no longer possible to establish a link to the individual user.

Our website uses so-called "cookies". Cookies are small text files that are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your terminal device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or until they are automatically deleted by your web browser.

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or language settings). Other cookies are used to evaluate user behaviour or display advertising.

Technically necessary cookies are stored on the basis of Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in storing cookies for the technically error-free and optimised provision of our services. For details on the processing purposes and legitimate interests, please refer to the explanations on the specific data processing.

Other cookies are only stored with your consent on the basis of Art. 6 para. 1 lit. a DSGVO. The consent can be revoked at any time for the future. The legal basis may also arise from Art. 6 (1) lit. b DSGVO if the processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures which are carried out at the request of the data subject. Insofar as cookies are used for analysis purposes, we will inform you separately about this within the framework of this data protection declaration and obtain your consent.

You can set your browser so that you are

The cookie settings can be managed under the following links for the respective browsers:

You can also manage cookies of many companies and functions used for advertising individually. To do this, use the corresponding user tools, which you can access at https://www.aboutads.info/choices or https://www.youronlinechoices.com/uk/your-ad-choices. Most browsers also offer a so-called "do-not-track function". When this function is activated, the respective browser tells advertising networks, websites and applications that you do not want to be "tracked" for the purpose of behavioural advertising and the like.

For information and instructions on how to edit this feature, please see the links below, depending on your browser provider:

In addition, you can prevent the loading of so-called scripts by default. "NoScript" allows the execution of JavaScripts, Java and other plug-ins only on trusted domains of your choice. Information and instructions on how to edit this function can be obtained from the provider of your browser (e.g. for Mozilla Firefox at: https://addons.mozilla.org/de/firefox/addon/noscript/).

Please note that if you deactivate cookies, the functionality of our website may be limited.

You can revoke or change your cookie settings at any time. To do this, call up the biscuit settings again via the biscuit button. You can find this at any time at the bottom left of the website.

On our website, consentmanager GmbH, Eppendorfer Weg 183, 20253 Hamburg is used as an order processor for the purpose of consent management.

When visiting our website, an essential cookie is stored in the user's browser, in which the consent given or the revocation of consent is saved. This data is not passed on to the provider of consentmanager GmbH.

With consentmanager GmbH, we provide you with a so-called cookie banner, via which you can give us your consent to the use of cookies. The cookie banner informs you about the use of cookies when you first visit our website and asks for your consent to the use of cookies. Until you give your consent, all non-essential cookies that we use on our website are automatically blocked. You have the option to reject unwanted cookies via the cookie banner and still continue to use the website.

The Borlabs cookie in particular is necessary in order to comply with the legal requirements of data protection law. We do not use the user data collected by the cookies to create user profiles. The legal basis for the processing is our legitimate interest in observing the rejection of cookies and/or the revocation of your consent to the use of cookies, in accordance with Art. 6 para. 1 p. 1 lit. f DSGVO., §25 para. 2 no. 2 TTDSG).

The data must be deleted as soon as it is no longer required for the specified processing purposes.

We use Storyblok as our content management system (CMS). The service provider is Storyblok GmbH, Peter-Behrens-Platz 2, Linz, AT 4020, Austria. Storyblok is used to provide the content of our website. When visiting our website, it is necessary for the playout of the content and thus the presentation of the website that the IP address of the user is transmitted to the servers of Storyblok. When visiting our website, an essential cookie is stored in the user's browser, in which the consent given or the revocation of consent is stored. The legal basis for the processing is our legitimate interest in observing the rejection of cookies and/or the revocation of your consent to the use of cookies, in accordance with Art. 6 para. 1 p. 1 lit. f DSGVO.

We have concluded an order processing contract with the service provider in which we oblige him to protect our customers' data and not to pass it on to third parties.

When using the service provider, personal data may be transferred to countries outside the EU (e.g. USA). For further information, please visit the website at https://www.storyblok.com/ or the Storyblok privacy policy at https://www.storyblok.com/legal/privacy-policy.

If you send us enquiries via the contact form or e-mail, the information you provide in the enquiry form or e-mail, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. Under no circumstances will we pass on this data without your consent.

The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 Para. 1 lit. f DSGVO and, if applicable, Art. 6 Para. 1 lit. b DSGVO if your request is aimed at concluding a contract.

Your data will be deleted after your enquiry has been processed, provided that there are no legal obligations to retain data. In the case of Art. 6 para. 1 lit. f DSGVO, you can object to the processing of your personal data at any time with effect for the future.

You can register for certain services offered on our website and thus create a user profile. As part of the registration and set-up process, we collect and use the following personal data:

Mandatory data:

Voluntary information:

Mandatory information that is required for the purpose of registration is marked as such with an asterisk. In addition, you can provide voluntary information. Your user account gives you the opportunity to use other areas of our website and the offers you have purchased. The legal basis for data processing is Art. 6 para. 1 lit. a DSGVO in the case of consent or Art. 6 para. 1 lit. b DSGVO if processing is necessary to provide the requested services. Your data will be deleted as soon as the user account on our website is deleted and insofar as no legal retention obligations exist. You can usually make a change and/or delete your user account, including the data you have provided, directly in your user account after logging in or by sending a message to the responsible person mentioned at the beginning.

A web form is provided on our website which you can use to contact us to request a free quotation for our services. The transmission of personal data via the web form is exclusively encrypted. If you take advantage of this option, the data entered in the input mask will be transmitted to us and stored.

These data are:

Furthermore, we record the date and time of your request. In this context, the data will not be passed on to third parties. The data will only be processed within the scope of the stated purpose - to send an offer and to contact you by telephone. The legal basis for the processing of data transmitted in the course of sending an e-mail is the implementation of pre-contractual measures or a contract pursuant to Art. 6 para. 1 lit. b DSGVO.

The personal data collected for the purpose of requesting an offer will be deleted as soon as the offer has been sent and a timely contact with you has taken place or was unsuccessful. Continued processing only takes place if this is necessary within the framework of the resulting initiation and processing of a contract or for the fulfilment of the resulting contractual purposes.

If you apply to us via our application platform (Lever) or by e-mail, we collect personal data. Data we collect about you in the application process may include, for example, your name, company, position, telephone number, mobile number, email address, date of birth, passwords, pictures and gender, qualifications, details of suitability, certificates and, where applicable, other categories of data. We may also receive data from other sources such as, in particular, professional social networks (XING, LinkedIn) or from third parties. This may also include special categories of personal data (e.g. information on a severe disability).

As a rule, your personal data is collected directly from you as part of the application process and encrypted during electronic transmission. The primary legal basis for this is Art. 6 para. 1 b DSGVO in conjunction with § 26 para. 1 BDSG. In addition, consent pursuant to Art. 6 Para. 1 lit. a, 7 DS-GVO in conjunction with § 26 Para. 2 BDSG can be used as a data protection permission provision. If the processing of your data is based on consent, you have the right to revoke your consent at any time with effect for the future. Data will be deleted after the contract has been fulfilled or processed; at the latest after any claims against us have become time-barred.

Within our company, only those persons and departments (e.g. Human Resources) have access to your personal data that absolutely need it to carry out the application procedure or to fulfil our legal obligations. If necessary, your applications will be forwarded to the relevant responsible persons for examination. Under no circumstances will your personal data be passed on to third parties without authorisation.

Your data relating to an application for a specific job advertisement will be stored and processed by us during the current application process. After completion of the application process (e.g. in the form of an acceptance or rejection), the application process, including all personal data, will be deleted from the system no later than six months after completion of the application process. The data of selected applicants will be stored securely for up to 2 years, provided that the applicants have given their consent to this in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future. An informal e-mail to the contact details of the responsible person listed above is sufficient for this purpose. In the event of a commitment, we also reserve the right to keep your application for longer, provided that the entry date is more than six months in the future.

We have concluded an order processing agreement with our service provider Lever, in which we oblige them to protect our customers' data and not to pass it on to third parties. As there is a transfer of personal data to the USA, further protection mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 Para. 2 lit. c DSGVO. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured by this contractual extension, we endeavour to obtain additional regulations and commitments from the recipient in the USA.

Service provider: Lever
Address: 1125 Mission Street, San Francisco, CA 94103, USA
Privacy policy: https://www.lever.co/privacy

We use the rating procedure of the provider Trustpilot A/S, Pilestræde 58, 5, 1112 Copenhagen, Denmark.

Trustpilot offers users of our online services the opportunity to rate our services. Users who have used our service are asked for consent to send the rating request. If users have given their consent (for example, by clicking on a checkbox or a link), they will receive a rating request with a link to a rating page. In order to ensure that the users have actually used our services, we transmit to Trustpilot the data required for this with regard to the user and the service used (this includes the name, the e-mail address and a reference number). This data is used to verify the authenticity and address of the user.

The legal basis for the processing of the user's data in the context of the evaluation procedure is the user's consent pursuant to Art. 6 para. 1 lit. a. DSGVO.

In order to submit a rating, it is necessary to open a customer account with Trustpilot. In this case, the terms and conditions and data protection information of Trustpilot apply. In order to maintain the neutrality and objectivity of the ratings, we have no direct influence on the ratings and cannot delete them ourselves. If users wish to have individual reviews or their Trustpilot account deleted, they must contact Trustpilot directly. In this case, Trustpilot acts as the responsible party. You can reach Trustpilot at privacy@trustpilot.com.

We can also integrate the Trustpilot widget into our website. A widget is a function and content element integrated within our online offer that displays variable information. Although the corresponding content is displayed within our online offer, it is retrieved from the Trustpilot servers at that moment. This is the only way to always show the current content, especially the current rating. For this purpose, a data connection must be established from the website accessed within our online offer to Trustpilot and Trustpilot receives technical data (access data, including the IP address). This is necessary so that the content can be displayed. Furthermore, Trustpilot receives information that users have visited our online offer. This information can be stored in a cookie and used by Trustpilot to recognise which online offers participating in the Trustpilot rating procedure have been visited by the user. The information may be stored in a user profile and used for advertising or market research purposes.

The legal basis for the processing of the user's data in the context of the integration of the widget is our legitimate interest in informing our users about the quality of our services in accordance with Article 6 para. 1 lit. f. DSGVO. If we ask users to consent to the processing of their data through the use of cookies, the legal basis of the processing is Article 6 (1) lit. a. DSGVO.

We have concluded an order processing contract with Trustpilot.

Users can find further information on the processing of their data by Trustpilot, as well as on their rights to object and other data subject rights, in Trustpilot's privacy policy: https://de.legal.trustpilot.com/end-user-privacy-terms.

This website uses a live chat to ensure the best possible user experience.

The moin.ai chat system we use for this only stores anonymised data. This excludes information that the user (voluntarily) sends to the chatbot. The moinAI chat widget does not use classical cookies. To store and recognise users, localStorage Keys are stored in the web browser.

When using the chatbot, we collect and use the questions and answers entered by you (chat history), but also your email address if you have previously explicitly instructed the transfer of the question to our customer team.

The legal basis for the processing of the data is our legitimate interest in answering the request made on the user's initiative in accordance with Art. 6 (1) lit. f DSGVO. If the enquiry or the messages are directed towards the fulfilment of a contract or the implementation of pre-contractual measures, the legal basis for the processing is Art. 6 (1) lit. b DSGVO.

In order to improve our customer service, we carry out statistical analyses of user behaviour on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f DSGVO. Only aggregated data records that no longer have any personal reference are used for this purpose.

The legal basis for data processing within the scope of the chat function is Art. 6 para. 1 lit. a DSGVO in the case of consent or Art. 6 para. 1 lit. b DSGVO if you wish to use the services of the chat function.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected, i.e. the reason for the request has been conclusively answered. The collected data will be deleted after a maximum of 30 days, as soon as we or you have ended the chat conversation. An exception to this is data that is subject to longer storage periods due to legal obligations or to protect or defend against legal claims.

We have concluded an order processing contract with our service provider so that the data you provide is processed for us strictly in accordance with instructions and orders.

Service provider: knowhere GmbH
Address: Karolinenstraße 9, 20357 Hamburg, Germany.
Privacy policy: https://www.iubenda.com/privacy-policy/59451072

If you would like to receive the newsletter offered on the website with regular information about our offers and products, we require your e-mail address as mandatory information. The provision of additional data is voluntary in order to be able to address you personally in the newsletter.

We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you our newsletter by e-mail if you have expressly confirmed that you consent to the sending of newsletters. In the first step, you will receive an e-mail with a link that you can use to confirm that you, as the owner of the corresponding e-mail address, wish to receive future newsletters. By confirming, you give us your consent in accordance with Art. 6 Para. 1 lit. a DSGVO that we may use your personal data for the purpose of sending the newsletter you requested.

When you register for the newsletter, we store, in addition to the e-mail address required for sending, the IP address via which you registered for the newsletter as well as the date and time of registration and confirmation, in order to be able to trace possible misuse at a later date. The legal basis for this is our legitimate interest according to Art. 6 Para. 1 lit. f DSGVO.

You can unsubscribe from the newsletter at any time via the link included in each newsletter or by sending an email to the responsible person named above. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to the continued use of the collected data or the continued processing is otherwise legally permitted.

Our e-mail newsletter is sent via a technical service provider to whom we pass on the data you provided when registering for the newsletter. We have concluded an order processing agreement with our email service provider in which we oblige them to protect our customers' data and not to pass it on to third parties.

Service provider: Xqeue GmbH
Address: Christian-Pleß-Str. 11-13, 63069 Offenbach am Main, Germany.
Privacy policy: https://maileon.com/datenschutz/

The service provider uses the information from the newsletter registration on the basis of your consent in accordance with Art. 6 Para. 1 lit. a DSGVO to send and statistically evaluate the newsletter on our behalf. For the evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked on. With the help of so-called conversion tracking, it can also be analysed whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter. In addition, technical information is recorded (e.g. time of retrieval, IP address, browser type and operating system). The data is collected exclusively in pseudonymised form and is not linked to your other personal data; direct personal reference is excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.

If you wish to revoke your consent to data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

The Typeform service is used on this website. Typeform is operated by TYPEFORM SL, C/Bac de Roda, 163, 08018 Barcelona, Spain. Typeform is a service that we use to display online surveys on our website and to conduct competitions.

In this context, the following data may be collected and processed:

If applicable, further data collected as part of the survey / competition (in particular user names).

The legal basis for the processing is your consent in accordance with Art. 6 Para. 1 lit. a DSGVO. If you do not want the above-mentioned data to be collected and processed via Typeform, you can refuse your consent or revoke it at any time with effect for the future. You can find more information about data processing in connection with Typeform in Typeform's data protection information: https://admin.typeform.com/to/dwk6gt.

Personal data will be kept for as long as it is necessary to fulfil the purpose of the processing. The data will be deleted as soon as they are no longer necessary to achieve the purpose.

This website uses the service Vercel. The provider is Vercel Inc, 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel is a cloud platform through which we provide our website. This means that your visit to our website is processed or passed through Vercel's servers. The data associated with your visit to our website is also transferred to Vercel. The data processing is based on Art. 6 para. 1 lit. f DSGVO. This is necessary so that your browser request can be processed successfully. This data includes:

Depending on the server location, this data may also be transferred to the USA. As there is a transfer of the IP address to Vercel in the USA, further protection mechanisms are required to ensure the level of data protection of the DSGVO. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 (2) lit. c DSGVO. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured by this contractual extension, we will endeavour to obtain additional regulations and assurances from the recipient in the USA. You can find Vercel's privacy policy at https://vercel.com/legal/privacy-policyy.

This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), to analyse the use of websites.

When using Google Analytics 4, so-called "cookies" are used. The information collected by cookies about your use of the website (including the IP address transmitted by your terminal device, shortened by the last few digits, see below) is generally transmitted to a Google server and stored and processed there. This may also result in the transmission of information to the servers of Google LLC, a company based in the USA, where the information is further processed.

When using Google Analytics 4, the IP address transmitted by your terminal device when you use the website is always collected and processed automatically and by default only in a shortened form, so that the information collected cannot be directly related to a person. This automatic anonymisation is carried out by Google shortening the IP address transmitted by your terminal device within member states of the European Union (EU) or other contracting states of the Agreement on the European Economic Area (EEA) by the last digits.

Google uses this and other information on our behalf to evaluate your use of the website, to compile reports on your website activities and usage behaviour and to provide us with other services related to your website and internet usage. In this context, the IP address transmitted and shortened by your terminal device within the scope of Google Analytics 4 will not be merged with other data from Google. The data collected in the context of the use of Google Analytics 4 will be stored for 2 months and then deleted.

Google Analytics 4 also enables the creation of statistics with statements about the age, gender and interests of website users on the basis of an evaluation of interest-based advertising and with the inclusion of third-party information via a special function, the so-called "demographic characteristics". This makes it possible to determine and distinguish user groups of the website for the purpose of targeting marketing measures. However, data collected via the "demographic characteristics" cannot be assigned to a specific person and thus also not to you personally. This data collected via the "demographic characteristics" function is kept for 2 months and then deleted.

All processing described above, in particular the setting of Google Analytics cookies for the storage and reading of information on the end device used by you for the use of the website, will only take place if you have given us your express consent for this in accordance with Art. 6 Para. 1 lit. a DSGVO. Without your consent, Google Analytics 4 will not be used during your use of the website.

We have concluded a so-called order processing agreement with Google for our use of Google Analytics 4, which obliges Google to protect the data of our website users and not to pass it on to third parties.

As there is a transfer of personal data to the USA, further protection mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 (2) lit. c DSGVO. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured by this contractual extension, we will endeavour to obtain additional regulations and commitments from the recipient in the USA.

Further legal information on Google Analytics 4, including a copy of the aforementioned standard contractual clauses, can be found at the following link: https://policies.google.com/privacy?hl=de&gl=de

Details on the processing triggered by Google Analytics 4 and on Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites.

We integrate the fonts ("Google Fonts") of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

External fonts in the form of Google Fonts are used on this website for the uniform display of fonts. Google Fonts is a service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; ("Google").

When you access our site, your browser loads the required web fonts directly from a Google server into your browser cache in order to display texts and fonts correctly. This transmits to the server which of our web pages you have visited. The IP address of the browser of the end device of the visitor to these Internet pages is also stored by Google. If your browser does not support web fonts, a standard font from your computer will be used.

The legal basis for the use of Google Fonts is Art. 6 I (f) DSGVO. Our legitimate interest arises from the fact that we can present the fonts to you in a uniform form. Google LLC. is certified under the US Privacy Shield to ensure a level of data protection appropriate to the DSGVO.

If you, as a visitor to our website, do not wish to use the Google Fonts function and thus also wish to prevent the transmission of your IP address to Google, you can, for example, use a browser add-on such as NoScript or Ghostery for Firefox to prevent connections to fonts.googleapis.com. In this case, however, it may not be possible to use our website to its full extent.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/ You have the right to access and object to your data stored by us at any time.

We use Google AJAX Search API on our website. Google AJAX Search API is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

This tool is used to optimise loading speeds. For this purpose, program libraries are called from Google servers and Google's CDN (content delivery network) is used. If you have previously used jQuery on another page from the Google CDN, your browser will fall back on the cached copy. If this is not the case, this requires a download, whereby data from your browser is transferred to Google.

The legal basis for the processing of personal data in this context is our legitimate interest pursuant to Art. 6 (1) sentence 1 lit. f DSGVO to ensure the error-free functioning of the website.

We do not know what data Google links to the data received and for what purposes Google uses this data.

Since a transfer of personal data to the USA takes place, further protection mechanisms are required to ensure the level of data protection of the DSGVO. To ensure this, Google uses standard data protection clauses in accordance with Art. 46 (2) lit. c DSGVO. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured by this contractual extension, we endeavour to obtain additional regulations and commitments from the recipient in the USA.

You can find out more in the provider's data protection information: https://policies.google.com/privacy?hl=de&gl=de.

To prevent the execution of JavaScript code from Google altogether, you can install a JavaScript blocker (e.g. www.noscript.net).

This website uses the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This service allows website tags to be managed via an interface. The Google Tag Manager only implements tags. This means that no cookies are used and only the user's IP address is transmitted to Google to establish the connection. The Google Tag Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains in place for all tracking tags, insofar as these are implemented with the Google Tag Manager. We use the Google Tag Manager on the basis of your consent pursuant to Art. 6 (1) lit. a DSGVO. Since a transfer of the IP address to Google takes place in the USA, further protection mechanisms are required to ensure the level of data protection of the DSGVO. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 (2) lit. c DSGVO. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured by this contractual extension, we will endeavour to obtain additional regulations and commitments from the recipient in the USA.

Our website uses the functions of Google Ads Remarketing. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Provided that you have given us your consent, this function makes it possible to link the advertising target groups created with Google Ads Remarketing with the cross-device functions of Google Ads and Google Marketing Platform. The legal basis is your consent pursuant to Art. 6 (1) sentence 1 lit. a DSGVO. In this way, interest-related, personalised advertising messages that have been adapted to you depending on your previous usage and surfing behaviour on one end device (e.g. mobile phone) can also be displayed on another of your end devices (e.g. tablet or PC).

If you have given your consent, Google will link your web and app browsing history to your Google account for this purpose. In this way, the same personalised advertising messages can be displayed on every end device on which you log in with your Google account.

To support this feature, Google Analytics collects user authenticated IDs that are temporarily linked to our Google Analytics data to define and create audiences for cross-device ad targeting.

You can permanently opt out of cross-device remarketing/targeting by disabling personalised advertising in your Google Account; follow this link: https://adssettings.google.com/.

As there is a transfer of personal data to the USA, further protection mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 (2) lit. c DSGVO. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even through this contractual extension, we endeavour to obtain additional regulations and commitments from the recipient in the USA.

Further information and the data protection provisions can be found in Google's data protection declaration at: https://www.google.com/policies/technologies/ads/.

This website uses DoubleClick of the Google Marketing Platform, a service of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland ("Google").

DoubleClick uses cookies to present you with advertisements that are relevant to you. In doing so, a pseudonymous identification number (ID) is assigned to your browser or device in order to check which ads have been displayed in your browser and which ads have been viewed. This can improve campaign performance or, for example, prevent you from seeing the same ad more than once. In addition, Google can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a Campaign Manager ad and later visits the advertiser's website with the same browser and makes a purchase. According to Google, the cookies do not contain any personal information. If you have given us your consent, the processing of the data is based on Art. 6 (1) lit. a DSGVO.

Due to the technology used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of DoubleClick, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will obtain and store your IP address.

Since personal data is transferred to the USA, further protection mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, Google uses standard data protection clauses in accordance with Art. 46 (2) lit. c DSGVO. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even through this contractual extension, we endeavour to obtain additional regulations and commitments from the recipient in the USA.

Further information on the Google Marketing Platform can be found at https://marketingplatform.google.com/about/ and on data protection at Google in general: https://www.google.de/intl/de/policies/privacy.

This website uses Google AdSense, a service for integrating advertisements from Google Inc ("Google"). The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google AdSense enables an analysis of the use of the website. Google AdSense also uses so-called web beacons (invisible graphics). These web beacons can be used to analyse information such as visitor traffic on these pages.

The information generated by cookies and web beacons about the use of this website (including your IP address) and delivery of advertising formats will be transmitted to and stored by Google on servers in the United States. This information may be passed on by Google to contractual partners of Google. However, Google will not merge your IP address with other data stored by you.

Insofar as you have given your consent for the storage of AdSense cookies, this is done on the basis of Art. 6 para. 1 lit. a DSGVO.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the website to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de. You can also deactivate the cookie via this link.

Since a transfer of personal data to the USA takes place, further protection mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, Google has agreed standard data protection clauses in accordance with Art. 46 para. 2 lit. c DSGVO. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even through this contractual extension, we endeavour to obtain additional regulations and commitments from the recipient in the USA.

Further information on Google AdSense can be found in Google's privacy policy: https://www.google.com/policies/privacy/.

We use "Facebook Pixel" on our website, a service of Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland (hereinafter referred to as: "Facebook").

Provided that you have given us your consent in accordance with Art. 6 Para. 1 lit. a DSGVO, we use Facebook Pixel for marketing and optimisation purposes, in particular in order to place relevant and interesting ads for you on Facebook and thus improve our offer, make it more interesting for you as a user and avoid annoying ads.

Facebook Pixel enables Facebook to display our ads on Facebook, so-called "Facebook Ads", only to those Facebook users who have been visitors to our website, in particular who have shown interest in our online offer. In this case, Facebook Pixel also makes it possible to check whether a user was redirected to our website after clicking on our Facebook Ads. Facebook Pixel uses, among other things, cookies, i.e. small text files that are stored locally in the cache of your web browser on your end device. If you are logged into your Facebook user account, your visit to our website will be recorded in your user account. The data collected about you is anonymous for us, so it does not allow us to draw any conclusions about the identity of the user. However, this data can be linked by Facebook to your user account there. If you have a user account with Facebook and are registered, Facebook can assign the visit to your user account.

Since personal data is transferred to the USA, further protection mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 Para. 2 lit. c DSGVO. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even through this contractual extension, we endeavour to obtain additional regulations and commitments from the recipient in the USA.

You can find further information on data protection from the third-party provider on the following Facebook website: https://www.facebook.com/about/privacy.

Information on the Facebook pixel can be found on the following Facebook website: https://www.facebook.com/business/help/651294705016616.

You can make the relevant settings as to which types of advertisements are displayed to you within Facebook on the following Facebook website: https://www.facebook.com/settings?tab=ads.

Please note that these settings will be deleted when you delete your cookies. In addition, you can deactivate cookies that are used for range measurement and advertising purposes via the following websites:

http://optout.networkadvertising.org/

http://www.aboutads.info/choices

http://www.youronlinechoices.com/uk/your-ad-choices/

Please note that this setting will also be deleted when you delete your cookies.

This website uses "Outbrain", a technology of the provider Outbrain UK Limited, 100 New Bridge Street, UK ("Outbrain").

In the event that the data you provide to us is also or exclusively processed by Outbrain, Outbrain is the data controller for the purposes of the GDPR alongside us or in our place. For this purpose, we have concluded an agreement with Outbrain pursuant to Art. 26 DSGVO on joint responsibility for the processing of data (Data Sharing Agreement). This agreement specifies the data processing operations for which we or Outbrain are responsible. You can view this agreement at the following link:

https://www.outbrain.com/legal#amplify-dpa-us

With the help of a so-called widget, you as a user are referred to further content within our website and on websites of third parties that may also be of interest to you. The content displayed in the Outbrain widget is automatically controlled and delivered by Outbrain in terms of content and technology. In the process, your pseudonymised IP address at the time of the call, the device you use, the browser and the operating system used as well as the pages visited, the time of the visit and the referring URL are transmitted to the external provider. For the display of this interest-related advanced content, Outbrain uses a visitor pixel and cookies that are stored on the end device or in the user's browser. Outbrain also assigns a so-called Universally Unique Identifier (UUID), which can identify the user on a device-specific basis when he visits a website on which the Outbrain widget is implemented. Outbrain creates user profiles in which user interactions (e.g. page views and clicks) of a browser or terminal are aggregated in order to derive the preferences of the UUID. The data collected in this respect is only made available to us by Outbrain in anonymised form; we do not store any personal data ourselves in this context. According to Outbrain, the data collected in this way is stored for a period of 13 months. After 13 months, the data is anonymised so that it can no longer be associated with you.

The legal basis for the data processing is your consent in accordance with Art. 6 Para. 1 lit. a DSGVO.

As there is a transfer of personal data to third countries (including the USA), further protection mechanisms are required to ensure the level of data protection of the DSGVO. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 Para. 2 lit. c DSGVO. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured by this contractual extension, we endeavour to obtain additional regulations and commitments from the recipient in the third country.

For more information, please see Outbrain's privacy policy at https://www.outbrain.com/legal/privacy#privacy-policy. You can prevent the tracking for the display of interest-based recommendations by Outbrain at any time; to do so, click on the "Decline" (Opt-Out) field under Outbrain's data protection declaration, available at http://www.outbrain.com/de/legal/privacy. The opt-out only applies to the device you are using and also loses its validity when you delete your cookies.

Our website uses technology from Taboola Inc (1115 Broadway, 7th Floor, New York, NY 10010, USA). Taboola uses cookies and visitor pixels that determine what content you use and which of our pages you visit. The cookie enables us to create pseudonymous usage profiles by collecting device-related data and log data and to recommend content to you that matches your personal interests. This enables us to design our offer individually for you. These usage profiles do not allow any conclusions to be drawn about your person.

According to Taboola, the data collected in this way is stored for a period of 13 months. After 13 months, the data is anonymised so that it can no longer be associated with you.

The processing can be prevented via the opt-out option on the Taboola page: https://www.taboola.com/policies/privacy-policy.

The use is based on the consent declared to us in accordance with Art. 6 para. 1 p. 1 lit. a) DS-GVO.

As there is a transfer of personal data to third countries (including the USA), further protection mechanisms are required to ensure the level of data protection of the DSGVO. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 (2) lit. c DSGVO. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured by this contractual extension, we endeavour to obtain additional regulations and commitments from the recipient in the third country.

For more information, please see Taboola's privacy policy at https://www.taboola.com/policies/privacy-policy.

Social networks (Facebook, Twitter, LinkedIn, XING and Instagram) are only integrated on our website as a link to the corresponding services. After clicking on the embedded text/image link, you will be redirected to the page of the respective provider. User information is only transferred to the respective provider after the forwarding. For information on the handling of your personal data when using these websites, please refer to the respective data protection provisions of the providers you use.

In the following, you will find information on the handling of your data that is collected through your use of our social media presences on social networks and platforms. Your data will be processed in accordance with the legal regulations.

Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland, is the data controller for the data transmitted to us by you within the meaning of the DSGVO. Hereinafter referred to as Meta/ Facebook. For this purpose, we have concluded an agreement with Meta/ Facebook pursuant to Art. 26 DSGVO on joint responsibility for the processing of data (Controller Addendum). This agreement specifies the data processing operations for which we or Meta/ Facebook are responsible when you visit our Facebook fan page. You can view this agreement under the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

Since a transfer of personal data to the USA is carried out by Meta/ Facebook, further protection mechanisms are required to ensure the data protection level of the GDPR. For this purpose, the provider uses standard data protection clauses in accordance with Art. 46 para. 2 lit. c DSGVO. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured by this contractual extension, we will endeavour to obtain additional regulations and assurances from the recipient in the USA.

If you as a visitor to the site would like to make use of your rights (information, correction, deletion, restriction, data transferability, complaint to the supervisory authority, objection or revocation), you can contact Meta/ Facebook as well as us.

You can independently adjust your advertising settings in your user account. To do so, click on the following link and log in: https://www.facebook.com/settings?tab=ads or http://www.youronlinechoices.com.

For further details, please refer to the Meta/ Facebook data protection statement: https://www.facebook.com/about/privacy/

To contact the Meta/Facebook data protection officer, you can use the online contact form provided by Meta/Facebook at the following link https://www.facebook.com/help/contact/540977946302970.

Meta/Facebook provides so-called page insights for our Facebook fan page: https://www.facebook.com/business/a/page/page-insights. These are summarised page views. These are aggregated data that provide information about how people interact with our site. Page Insights may be based on personal information collected in connection with an individual's visit to or interaction with our Page and in connection with content provided. Please be aware of what personal data you share with us via Meta/ Facebook. Your data may be processed for market research and advertising purposes even if you are not logged into Meta/ Facebook or do not have a Meta/ Facebook account. For example, user profiles can be created from the usage behaviour and resulting interests of the users. The user profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to the interests of the users. This data collection takes place via cookies that are stored on your terminal device. Furthermore, data that is independent of the devices used by the users may also be stored in the user profiles; in particular, if the users are members of the respective platforms and logged in to them. The legal basis for the processing is your consent pursuant to Art. 6 para. 1 lit. a DSGVO. Please note that we have no influence on the data collection and further processing by Meta/ Facebook. As a result, we cannot provide any information about the extent to which, where and for how long the data is stored by Meta/Facebook. Furthermore, we cannot make any statements about the extent to which Meta/Facebook complies with existing deletion obligations, which evaluations and links are made with the data on the part of Meta/Facebook and to whom the data is passed on by Meta/Facebook. If you wish to avoid the processing of your personal data by Meta/ Facebook, please contact us by other means.

If your personal data is processed by a provider listed below, this provider is the data controller within the meaning of the GDPR. For the assertion of your data subject rights, we point out that these can be asserted most effectively with the respective providers. Only they have access to the data collected from you. If you still need help, please feel free to contact us at any time.

We have online presences on the social media platforms of the following providers:

Information on how to contact the data protection officer of the other social media providers can be found here:

The responsible party for data processing within the meaning of the GDPR is the body named at the beginning of this data protection declaration, insofar as data transmitted by you via one of the social media platforms is processed by ourselves.

If you have any concerns about data processing carried out by us as the data controller, you can contact our data protection officer using the contact details provided at the beginning of this data protection declaration.

As a rule, personal data is processed on the company website for market research and advertising purposes. For this purpose, a cookie is set in your browser, which enables the respective provider to recognise you when you visit a website. By means of the collected data, usage profiles can be created. These are used to display advertisements within and outside the platform that presumably correspond to your interests. Furthermore, data may also be stored in the usage profiles regardless of the devices you use. This is regularly the case if you are a member of the respective platforms and logged in to them.

We ourselves collect personal data when you contact us, for example, via a contact form or through a messenger service, such as Meta/ Facebook Messenger. Which data is collected depends on the information you provide and the contact details you have given or released. This data is stored by us for the purpose of processing the enquiry and in the event of follow-up questions. Under no circumstances will we pass on the data to third parties without your consent. The legal basis for the processing of the data is our legitimate interest in responding to your request in accordance with Art. 6 (1) lit. f DSGVO and, if applicable, Art. 6 (1) lit. b DSGVO if your request is aimed at concluding a contract. Your data will be deleted once we have completed processing your enquiry, provided there are no legal obligations to retain data. We assume that processing is complete if it can be inferred from the circumstances that the matter in question has been conclusively clarified.

If your contact via a social network or other platform is aimed at the conclusion of a contract for the delivery of goods or the provision of services with us, we process your data for the performance of the contract or for the implementation of pre-contractual measures or for the provision of the requested services. In this case, the legal basis for the processing of your data is Art. 6 para. 1 lit. b DSGVO. Your data will be deleted if it is no longer required for the performance of the contract or if it is determined that the pre-contractual measures do not lead to the conclusion of a contract corresponding to the purpose of the contact. Please note, however, that it may be necessary to store personal data of our contractual partners even after the conclusion of the contract in order to comply with contractual or legal obligations.

If you are asked by the respective providers of the platforms for consent to processing for a specific purpose, the legal basis of the processing is Art. 6 (1) lit. a., Art. 7 DSGVO. Consent given can be revoked at any time with effect for the future.

When visiting and using the platforms listed above, personal data may be transferred to the USA or other third countries outside the EU, which is why further protective mechanisms are required in these cases to ensure the level of data protection of the DSGVO. You can find more information on whether and which suitable guarantees the providers can provide for this in the list below.

We have no influence on the processing of your personal data by the provider and how this is handled. We also do not have any information on this. For further information, please check the privacy policy of the respective provider and, if necessary, use the opt-out / personalisation options with regard to data processing by the provider:

On our website, we embed videos from "YouTube", a social media platform of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). The legal basis for the processing of your personal data is your consent granted for this purpose in accordance with Art. 6 (1) lit. a DSGVO.

If the playback of embedded YouTube videos is started by your consent, the provider "YouTube" uses cookies to collect information about user behaviour. According to YouTube, these cookies are used, among other things, to collect video statistics, to improve user-friendliness and to prevent abusive behaviour. If you are logged in to Google, your data will be directly assigned to your account when you click on a video. If you do not wish to have your data associated with your YouTube profile, you must log out before activating the button. Google stores this data as a usage profile and uses it for the purposes of advertising, market research and/or designing its websites to meet user needs. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. Please contact Google directly for this purpose.

As a transfer of personal data to the USA takes place, further protection mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, Google uses standard data protection clauses in accordance with Art. 46 (2) lit. c DSGVO. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even through this contractual extension, we endeavour to obtain additional regulations and commitments from the recipient in the USA.

Further information on data protection and data use by Google can be found on the following Google website: https://policies.google.com/privacy?hl=de&gl=de.

Your personal data will not be passed on to third parties,

We also use external service providers for the processing of our services, which we have carefully selected and commissioned in writing. They are bound by our instructions and are regularly monitored by us. If necessary, we have concluded order processing contracts with them in accordance with Art. 28 DSGVO. These are service providers responsible for web hosting, sending e-mails, and maintenance and care of our IT systems, etc. The service providers will not pass this data on to third parties.

We take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk in accordance with Article 32 of the GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, circumstances and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons. This website uses SSL encryption for security reasons and to protect the transmission of confidential content.

The duration of the storage of personal data is measured by the relevant statutory retention periods (e.g. from commercial law and tax law). After expiry of the respective period, the corresponding data is routinely deleted. If data is required to fulfil or initiate a contract or if we have a legitimate interest in continuing to store it, the data will be deleted when it is no longer required for these purposes or you have exercised your right of revocation or objection.

In the following, you will find information on which data subject rights the applicable data protection law grants you vis-à-vis the controller with regard to the processing of your personal data:

The right to request information about your personal data processed by us in accordance with Article 15 of the GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.

The right to request the correction of incorrect or incomplete personal data stored by us without delay in accordance with Art. 16 DSGVO.

The right to request the erasure of your personal data stored by us in accordance with Article 17 of the GDPR, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.

You have the right to request the restriction of the processing of your personal data in accordance with Art. 18 DSGVO, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO.

You have the right to be informed pursuant to Art. 19 DSGVO if you have asserted the right to rectification, erasure or restriction of processing against the controller. The controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

Right to data portability pursuant to Art. 20 DSGVO: You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller, insofar as this is technically feasible.

You have the right to complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of the federal state where our registered office is located for this purpose:

Bavarian State Office for Data Protection Supervision (BayLDA).
Promenade 18
91522 Ansbach

Postal address
PO Box 1349
91504 Ansbach
Germany
Telephone: +49 (0) 981 180093-0
or, if applicable, that of your usual place of residence or workplace.

Right to revoke consent given in accordance with Art. 7 (3) DSGVO: You have the right to revoke consent to the processing of data once given at any time with effect for the future. In the event of revocation, we will immediately delete the data concerned unless further processing can be based on a legal basis for processing without consent. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

If your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, insofar as this is done for reasons arising from your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement to specify a particular situation.

If you wish to exercise your right of revocation or objection, simply send an e-mail to hallo@octopusenergy.de.

Where links are provided to other websites, we have neither influence nor control over the linked content and the data protection provisions there. We recommend that you check the data protection declarations of linked websites when you visit them in order to determine whether and to what extent personal data is collected, processed, used or made available to third parties.

The provision of personal data for the decision on the conclusion of a contract, the fulfilment of a contract or for the implementation of pre-contractual measures is voluntary. However, we can only make the decision in the context of contractual measures if you provide such personal data that is required for the conclusion of the contract, the performance of the contract or pre-contractual measures.

Automated decision-making or profiling in accordance with Art. 22 DSGVO does not take place.

We reserve the right to adapt or update this data protection declaration if necessary in compliance with the applicable data protection regulations. In this way, we can adapt it to the current legal requirements and take into account changes to our services, e.g. when introducing new services. The current version applies to your visit.