General
Thank you for your interest in our company. Your privacy is important to us and you should always feel safe and comfortable when visiting our website. That is why we have put both technical and organizational measures in place to ensure we observe the relevant legislation at all times. This document describes the information we may collect and how we handle it.
I. Controller and data protection officer
RWE Aktiengesellschaft
RWE Platz 1
45141 Essen
P +49 (0) 201-51790
F +49 (0) 201-51795005
E-mail to RWE Aktiengesellschaft
You can reach our data protection officer at:
RWE Aktiengesellschaft
Data Protection Officer
RWE Platz 6
45141 Essen
E-mail to dataprotection@rwe.com
II. Provision of the website and logfiles
In the following, we will inform you how we process your personal data in connection with the provision of the website and creation of log files.
1. Which of your personal data do we use?
Each time you access our website, our system automatically collects data and information from the operating system of the accessing device. In addition to non-personal data (e. g. the domain name of the website which you came from; the websites from our offering you have visited; the names of the files accessed; the date and time of an access; the name of your internet service provider; as well as, if applicable, the operating system and browser version of your device; host name of the accessing device; language settings), your IP address is processed in the process.
2. What are the sources of the data?
The data is collected from you by being automatically transmitted by your computer to our system.
3. What do we process your data for (purpose of processing) and on what legal basis?
The data is initially collected to be able to provide the website in technical terms. In this case, the legal basis is our legitimate interest. In addition, we store the data - in pseudonymized form in log files - for security purposes, in particular to detect and counteract attacks on our website, for statistical purposes and to optimize our internet presence. In these cases, the processing is based on our legitimate interest to ensure the purposes stated above.
4. Who will your data be passed on to?
In certain cases, the data may be passed on to other Group companies. In addition, we use external service providers who also receive personal data in certain cases as part of the performance of their duties. In these cases, we ensure that your personal data is processed in accordance with the provisions of the GDPR and the German Federal Data Protection Act or the respective national data protection laws.
As a matter of principle, your data will not be passed on to other third parties unless we are obliged to do so due to legal or official orders.
5. How long will your data be stored?
We store the data for a period of 30 days.
6. Is there an obligation to provide your data?
There is no legal or contractual obligation to provide the data. If you do not provide the data, it is not possible to use the website to its full extent.
III. Web analysis and web optimization through cookies
We use cookies on our website. Cookies are text files that contain a characteristic string of signs and enable a unique identification of the computer. They are stored in the Internet browser or by the Internet browser on the user's operating system when the website is accessed. When the website is opened again, the operating system can be identified in this way and certain information can be transferred automatically.
The information that is stored via cookies fulfils various functions. We categorize them as follows:
- Required Cookies
- Analytical Cookies
- Convenience Cookies
1. Which of your personal data is used by us?
Depending on the cookie used, we collect different personal data. You can find a list of which data is involved in individual cases here.
2. What are the sources of the data?
All data that we collect in the form of cookies originate from you.
3. What do we process your data for and on what legal basis?
Depending on the cookie used, we pursue different purposes with the use of cookies. The first time you visit our website, you will be asked to select which cookies you wish to allow. Here you have the possibility to view and change your selection.
a. Required Cookies
Required cookies serve to safeguard a flawless operation of our website and to ensure its stability. When you access our websites, you will be informed by the info banner about the use of cookies and referred to this data protection information. The legal basis for this processing is our legitimate interest, which consists of being able to guarantee the aforementioned purposes.
The data collected from you in this way is pseudonymized by technical precautions and not stored together with other personal data from you. In this way, we can no longer assign the data to you personally.
b. Analytical Cookies
Analytical cookies enable us to analyze your surfing behaviour on our website so that we can measure and improve the performance of our pages. In doing so, we create statistical profiles that are not attributable to individuals but only to groups. These profiles are used to analyze visitor and click behaviour as well as demographic characteristics of the website visitors.
When you visit our websites, our info banner informs you about the use of analysis cookies by referring to this data protection information. If you agree to the processing, you click on this cookie category and thereby grant your consent, which serves as a legal basis.
The data collected from you in this way is pseudonymized by technical precautions and is not stored together with other personal data of yours. Hence we can no longer assign the data to you personally.
c. Convenience Cookies
With convenience cookies we use marketing cookies and social media cookies. Marketing cookies help us to offer you personalized advertisements on and outside rwe.com that are tailored to your interests. Social media cookies allow you to connect directly to your social media account as needed. This approach makes it easier for you to share your website visit on social networks and share your experiences in that context. We also use these cookies to exchange data about you with the operators of social networks. This data also enables us to offer you advertisements tailored to your interests.
When you visit our websites, our so-called cookie banner informs you about the use of convenience cookies by referring to this data protection information. If you agree to the processing, click on this cookie category and thereby give your consent, which serves as a legal basis, in accordance with Art. 6 para. 1 lit. a) GDPR.
The created usage profiles, including those exchanged with the operators of social networks, are pseudonymized and only then processed. This means that we can only assign the analyzed advertising interests to the pseudonym, but not to you personally.
4. Who will your data be passed on to?
In certain cases, the data may be passed on to other Group companies. In addition, in certain cases, third-party companies that offer the respective cookie also receive your data as part of the processing on our behalf.
5. How long will your data be stored?
We use two types of cookies: persistent cookies and session cookies. A persistent cookie lasts beyond the current session and will stay on your browser until they expire or you delete them. Session cookies last only as long as the session (usually the current visit to a website or a browser session). Third parties, such as our customers, partners and service providers may also use cookies in connection with our Services. The list will inform you in detail about the storage.
6. Is there an obligation to provide your data?
There is no obligation to provide the data. However, the essential cookies are necessary for the website to function properly.
7. Your rights with regard to cookies
In addition to the rights mentioned under point XI, you have the right:
- to object to the use of the essential cookies at any time.
- to revoke/withdraw your consent here regarding the analytical and convenience cookies used by us.
Microsoft Application Insights
Application Insights is a service of the Azure cloud platform of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft"). This service collects telemetry data from the application being used. This data is anonymous statistical data. It is not possible to establish a personal reference based on this data. The IP address used by the user is shortened and thus anonymized. The legal basis for the processing of the users' personal data is the Legitimate Interest (Art. 6 para. 1 lit. f GDPR). Raw telemetry data is deleted after 90 days.
Information about Application Insights: https://learn.microsoft.com/en-us/azure/azure-monitor/app/data-retention-privacy
IV. Contact Form
On our website you have the possibility to contact us via a form. In the following we explain to you how we process your data in this context.
1. Which of your personal data do we use?
We process the data you provide in the respective form. These are:
- Salutation/Title
- Name,
- Title,
- E-Mail,
- Address,
- Phone number,
- Company.
In addition, you have the possibility to provide us with further data via a free text.
2. What are the sources of the data?
You enter the data into the form yourself.
3. What do we process your data for (purpose of processing) and on what legal basis?
We need the data so that we know who has sent us the inquiry and to answer this inquiry. The legal basis of the processing is your consent, which you grant by sending the request.
4. Who will your data be passed on to?
We will pass on your data to the Group company responsible for your request. In addition, we use service providers in certain cases who may also receive your data.
5. How long will your data be stored?
The data will be stored as long as necessary to answer your request. In addition, your data will be stored within the legal retention periods.
6. Is there an obligation to provide your data?
There is no obligation to provide the data. Without the data, we are not able to answer your inquiry.
7. Right to withdraw your consent
Within the scope of using the contact form you have the rights mentioned under point XI.
V. Newsletter
On our website and via embedded frames on our presences in social media we offer you the possibility to subscribe to our newsletter.
1. Which of your personal data is used by us?
To send the newsletter we process your name and e-mail address. In addition, we collect data about your subscription behavior, for example, whether you read the newsletter or click on links listed there. These data are collected anonymously.
2. What are the sources of the data?
You enter your name and e-mail address during registration. In order to exclude errors, we use the so-called double opt-in procedure, in which after registration you receive an e-mail with a confirmation link and only if you have clicked this link you are added to the newsletter distribution list.
3. What do we process your data for (purpose of processing) and on what legal basis?
We use the data to send you our newsletter with information about the RWE Group. We also use the data about your subscription behavior to improve our newsletter in order to provide you with topics that interest you. The legal basis is your consent, which you grant as part of the registration process.
4. Who will your data be passed on to?
The data is passed on within the Group to other Group companies. In addition, we sometimes use service providers who also receive your data in order to send you the newsletter. Other third parties do not receive any of your data.
5. How long will your data be stored?
We store your data for as long as you are registered for the newsletter. After you have unsubscribed, we store your consent information for 1 year for verification purposes.
6. Is there an obligation to provide your data?
There is no obligation to provide the data. However, we cannot send you a newsletter without the data provided.
7. Right to withdraw your consent
You have the possibility to withdraw your consent to receive the newsletter and to evaluate your subscription behaviour at any time. The easiest way to do this is to use the unsubscribe link at the end of each newsletter.
VI. Corporate presence in social media
We use various social media to actively communicate with you. For this purpose, we have set up company websites in various social networks. Furthermore, we have included third party plug-ins on our website, especially social networks or other IT service providers. These plug-ins are forwarding or recommendation functions, display functions with which information that RWE shares about itself in social networks can also be displayed on our website and other third-party IT services that help to display information in a more understandable way. In order such plug-ins to work, their provider requires certain personal data about you (e.g. your IP address) and processes it.
In order to protect your privacy, this processing only takes place if you agree to it. Accordingly, you will not have access to the Plug-In until you agree to it. You declare your consent by allowing comfort cookies. The plug-in will only be loaded and data will only be passed on to the social network if you wish to do so by agreeing to the comfort cookies in the cookie banner.
To display the social media content in the newsroom we use the service "Flockler" from Flockler Oy Rautatienkatu 26 B 32, 33100 Tampere, Finland, which aggregates relevant social media channels and displays them on our website. By interacting with the respective content a connection to the Flockler servers is established. Your IP address will be transmitted. The legal basis is your consent under Art. 6 para. 1 lit. a) GDPR, which you have given when registering with the social network or by accepting our convenience cookies. The privacy policy and further information about this service provider can be found at https://flockler.com/privacy-policy.
In certain cases we process your data with the provider of the social medium or plug-in on the basis of a joint control in accordance with Art. 26 GDPR. We would like to point out, that we have no influence on all data and data processing procedures collected by the provider of the respective social medium or plug-in, nor are we aware of the full scope of data processing, its purposes or storage periods. We also do not have any information about the deletion of the collected data by the respective provider. Therefore, in certain cases we have to forward inquiries addressed to us to the respective provider.
Below you will find a list of the social networks where we maintain a company presence or whose plug-ins we use. In addition, under the respective keywords you will find, if available, the agreement on joint control in terms of Art. 26 GDPR. We recommend reading the data protection information of the respective networks.
- Facebook / https://www.facebook.com/legal/terms/page_controller_addendum
- Google/Youtube
- Flickr
- Kununu
- Instagram: Social Network; Service Provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA Data Protection Information
- X: Social Network; Service Provider: X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. Settings: https://twitter.com/personalization. Data Protection Information
- LinkedIn: Social Network; Service Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. Data Protection Information
As far as we have information about the data processing procedures that concern you, we will inform you about it in the following:
1. Which of your personal data do we use?
In the following a listing of the data which may are processed: inventory data (e. g. names, addresses), contact data (e. g. e-mail, telephone numbers), content data (e. g. entries in online forms), usage data (e. g. websites visited, interest in content, access times), meta/communication data (e. g. device information, IP addresses).
We would also like to point out that social media providers generally collect data about your usage behavior and interests.
2. What are the sources of the data?
The data usually comes from you. Whether and in which cases the social media also process your data from other sources is beyond our knowledge.
3. What do we process your data for (purpose of processing) and on what legal basis?
By presenting our company in social media, we would like to actively communicate with you and offer you the opportunity to inform yourself about our products and services in this way.
The plug-in providers will also use your data for market research and advertising purposes.
The legal basis is your consent, which you have granted when registering with the social network or by accepting our convenience cookies.
4. Who will your data be passed on to?
We pass the data on to other Group companies within the Group. We do not pass on data to third parties. However, we do not have any information about who the respective social network is passing on your personal data to.
5. How long will your data be stored?
How long the social media store your data for their purposes is beyond our knowledge.
6. Is there an obligation to provide your data?
There are no obligations to provide the data. However, if you do not provide the data, you may in certain cases not be able to take full advantage of our offer on social media or not use the simplified presentation of information by the plug-in.
7. Right to withdraw your consent
In addition to the rights mentioned under point XI you have the right to withdraw your consent to the analysis and convenience cookies used by us here.
VII. Google Services
We have integrated Google Maps on our website via an API. The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Its parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Further information on data processing by Google can be found in the Google Privacy Policy.
1. Which of your personal data is used by us?
To be able to display the content in your browser, Google must receive your IP address and location data, otherwise Google would not be able to provide you with this embedded content. The generated information is transferred to a Google server in the USA and processed there.
2. What are the sources of the data?
The data is collected from you.
3. What do we process your data for (purpose of processing) and on what legal basis?
We need the data so that we can offer the Google services. When you visit our websites, our cookie banner informs you about the use of Google services by referring to this data protection information. If you agree to the processing, you click on this cookie category and thereby give your consent, which serves as a legal basis.
4. Who will your data be passed on to?
With your consent, the data will be passed on to Google.
5. How long will your data be stored?
Google stores your data. For more information visit their data protection information here.
6. Is there an obligation to provide your data?
There is no obligation to provide the data.
7. Right to withdraw your consent
In addition to the rights mentioned under point XI, you have the right to withdraw your consent to the Google services here.
Google Tag Manager
In addition, we use the Google Tag Manager service from Google. The Google Tag Manager is an auxiliary service and itself processes personal data only for technically necessary purposes.
The Google Tag Manager takes care of loading other components, which in turn may collect data.
The Google Tag Manager does not access this data. For more information about the Google Tag Manager, please see Google Privacy Policy.
VIII. Links to other Websites
The RWE websites contain links to other websites. As the provider of our websites, we are solely responsible for the content of our own online presence. A distinction must be made between our own content and the content provided by other providers, for which we cannot accept any responsibility and do not adopt their content as our own. We have no influence on whether the website operators linked to us adhere to the relevant data protection regulations. This declaration on data protection therefore does not apply to the websites of other providers, even if you access them via links on our website. Please therefore observe the respective data protection regulations of the other providers. We therefore accept no liability for the content of other websites. In the event that you should notice a relevant violation, we thank you for informing us. We will then remove the link after checking it, if necessary.
IX. Does automated decision-making, including profiling take place?
No automated decision-making, including profiling takes place.
X. Is your data transferred to third countries?
We also use carefully selected service providers based outside the European Union and the European Economic Area (in so-called "third countries") to process your data. In these cases, a third-country transfer of your personal data takes place. Such transfers will always be in accordance with Chapter V of the GDPR or the respective national data protection laws. In the absence of an adequacy decision by the European Commission pursuant to Art. 45 GDPR, adequate safeguards are provided to ensure an adequate level of data protection. As a standard practice, we enter into contracts with data recipients that contain standard data protection clauses, also referred to as "standard contractual clauses", to the extent that personal data is transferred outside the EEA.
You have the possibility to request further information as well as to receive copies of corresponding agreements at any time. You can reach us at the contact details mentioned under point 1.
XI. What rights do you have in connection with the processing of your data?
1. Right of access
You may request confirmation from the controller as to whether personal data concerning you is being processed by the controller.
2. Right to rectification
You have a right of rectification and/or completion vis-à-vis the controller if the personal data processed concerning you is inaccurate or incomplete. The controller shall carry out the rectification without undue delay.
3. Right to erasure
You may request the controller to delete the personal data concerning you without undue delay and the controller is obliged to delete such data without undue delay, unless an exception provided by law applies.
4. Right to restriction of processing
Under the conditions regulated by law, you may request the restriction of the processing of personal data concerning you.
5. Right to data portability
You have the right to receive the personal data concerning you, which you have provided to the controller and the processing of which is based on consent or on a contract with you, in a structured, commonly used and machine-readable format. You also have the right, under the conditions stipulated by law, to have your personal data transmitted to another controller without hindrance from the controller to whom the personal data was provided.
6. Right to withdraw the declaration of consent under data protection law
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal. All personal data stored on the basis of the consent granted in each case will be deleted in this case, unless there is another legal basis for further storage according to the law.