Privacy Policy

1. Data protection at a glance

General information

Personal data (hereinafter mostly referred to simply as “data”) is processed by us only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered on it.

Pursuant to Art. 4(2) of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (German: Datenschutz-Grundverordnung, DSGVO; hereinafter referred to simply as the “GDPR”), “processing” means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

With the following privacy policy, we inform you in particular about the nature, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide on the purposes and means of the processing either alone or jointly with others. We also inform you below about the third-party components we use for optimisation purposes and to enhance the quality of use, insofar as third parties thereby process data under their own responsibility.

Our privacy policy is structured as follows:

I. Information about us as the controller
II. Rights of users and data subjects
III. Information on data processing

I. Information about us as the controller

The provider of this website responsible within the meaning of data protection law is:

Energie NT

Nazan Zeynep Tekin

Siekkamp 65

33659 Bielefeld

Phone: +49 521 32936200

Email: [email protected]

II. Rights of users and data subjects

With regard to the data processing described in more detail below, users and data subjects have the right

to confirmation as to whether data concerning them is being processed, to access to the data processed, to further information about the data processing and to copies of the data (cf. also Art. 15 GDPR);
to rectification or completion of inaccurate or incomplete data (cf. also Art. 16 GDPR);
to the erasure without undue delay of data concerning them (cf. also Art. 17 GDPR) or, alternatively, where further processing is required pursuant to Art. 17(3) GDPR, to restriction of processing in accordance with Art. 18 GDPR;
to receive the data concerning them that they have provided and to have this data transmitted to other providers/controllers (cf. also Art. 20 GDPR);
to withdraw any consent given at any time with effect for the future (cf. also Art. 7(3) GDPR); the lawfulness of processing carried out before the withdrawal remains unaffected. For Google Maps and Trustlocal, reloading the page is sufficient;
to lodge a complaint with the supervisory authority if they consider that the data concerning them is being processed by the provider in breach of data protection provisions (cf. also Art. 77 GDPR).

The supervisory authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia), Kavalleriestraße 2–4, 40213 Düsseldorf.

In addition, the provider is obliged to notify all recipients to whom data has been disclosed by the provider of any rectification or erasure of data or restriction of processing carried out pursuant to Articles 16, 17(1) and 18 GDPR. However, this obligation does not apply where such notification is impossible or would involve disproportionate effort. Notwithstanding this, the user has the right to be informed about these recipients.

Under Art. 21 GDPR, users and data subjects also have the right to object, on grounds relating to their particular situation, to the future processing of data concerning them, provided the data is processed by the provider in accordance with Art. 6(1)(f) GDPR. In particular, an objection to data processing for the purposes of direct marketing is permissible.

III. Information on data processing

Your data processed when you use our website will be erased or its processing restricted as soon as the purpose of storage ceases to apply, no statutory retention obligations prevent its erasure and no information to the contrary is given below regarding individual processing operations.

Hosting

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen (hereinafter “Hetzner”), in data centres in Germany. The personal data collected on this website is processed on Hetzner’s servers. A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.

Hetzner is used on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in providing our website as reliably, quickly and securely as possible.

Further information can be found in Hetzner’s privacy policy: hetzner.com/de/legal/privacy-policy.

Contact requests / contact options

If you contact us via the contact form or by email, the data you provide will be used to process your enquiry. Providing this data is necessary to process and answer your enquiry – without it, we cannot answer your enquiry, or can do so only to a limited extent.

In the case of the contact form, this is your name, your email address, your telephone number, the subject you selected and – if provided – your message. The information is sent to us by email via a TLS-encrypted connection; in addition, you receive an automatic confirmation at the email address you provided.

The legal basis for this processing is Art. 6(1)(b) GDPR insofar as your enquiry is aimed at the conclusion or performance of a contract, and otherwise Art. 6(1)(f) GDPR; our legitimate interest lies in answering your enquiry.

Your data will be erased once your enquiry has been conclusively answered and no statutory retention obligations prevent erasure, as may be the case, for example, if a contract is subsequently performed.

Server data

For technical reasons, in particular to ensure a secure and stable website, data is transmitted by your web browser to us or to our web hosting provider. These so-called server log files record, among other things, the type and version of your web browser, the operating system, the website from which you came to our website (referrer URL), the page(s) of our website that you visit, the date and time of each access and the IP address of the internet connection from which our website is used.

The data collected in this way is stored temporarily, but not together with any other data about you.

This storage takes place on the legal basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our website.

The data is erased after seven days at the latest, unless further retention is required for evidential purposes. In that case, all or part of the data is excluded from erasure until an incident has been finally resolved.

Cookies and local storage

We ourselves do not use cookies or similar technologies for analytics, tracking or advertising purposes. Only technically necessary settings are stored on your device:

the cookie “NEXT_LOCALE” containing the language you have selected (storage period: 12 months),
the entry “theme” in your browser’s local storage (localStorage) containing the colour scheme you have selected (until you delete it) and
the entry “ent:preloaded” in session storage (sessionStorage), so that the intro animation is only played once per visit (until you close the browser).

The language and colour scheme are only stored if you actively change them. The language cookie is sent to our server with every page request so that the page is delivered in your language; the other entries remain on your device. None of this information is passed on to third parties. The legal basis is § 25(2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act) and Art. 6(1)(f) GDPR; our legitimate interest lies in retaining the settings you have chosen.

Fonts and images

The fonts and images used on this website are delivered from our own server. No connection to the servers of Google or other third-party providers is established for this purpose when you visit the website.

Google Maps

On our website, you can display a map from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). The map is only loaded when you click “Load map”. Only then is a connection established to Google’s servers, in the course of which, in particular, your IP address and information about the page accessed are transmitted to Google. Google may set cookies or store or read information on your device. Data may also be transferred to the USA; Google is certified under the EU-US Data Privacy Framework, and the transfer is based on the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR).

The legal basis is your consent given by clicking “Load map” (Art. 6(1)(a) GDPR, § 25(1) TDDDG). It applies only to the current page view and is not stored; on your next visit, the map will be hidden again.

Further information can be found in Google’s privacy policy: policies.google.com/privacy.

Customer reviews (Trustlocal)

On our home page, you can display reviews from our customers via a widget from Trustlocal. The provider is Trustlocal DACH GmbH, Saarbrücker Str. 36, 10405 Berlin. The widget is only loaded when you click “Load reviews”. Only then is a connection established to Trustlocal’s servers, in the course of which, in particular, your IP address and information about the page accessed are transmitted to Trustlocal.

The legal basis is your consent given by clicking “Load reviews” (Art. 6(1)(a) GDPR, § 25(1) TDDDG). It applies only to the current page view and is not stored.

Further information can be found in Trustlocal’s privacy policy: trustlocal.de/datenschutz.

General linking to profiles on third-party platforms

The provider uses links on the website to the social networks listed below.

The legal basis for this is Art. 6(1)(f) GDPR. The provider’s legitimate interest lies in improving the quality of use of the website.

The networks are integrated by means of a simple link. The user is only redirected to the service of the respective social network once they click on the link.

After the customer has been redirected, the respective network collects information about the user. Initially, this is data such as the IP address, date, time and page visited. If the user is logged into their account with the respective network at the same time, the network operator may be able to assign the information collected about the user’s specific visit to the user’s personal account. If the user interacts via a “Share” button of the respective network, this information may be stored in the user’s personal account and possibly published. If the user wishes to prevent the information collected from being assigned directly to their account, they must log out before clicking the link. It is also possible to configure the respective user account accordingly.

Instagram

Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

Sample privacy policy by the law firm Weiß & Partner, extended to include sections on hosting, the contact form, cookies, fonts, Google Maps and Trustlocal. Last updated: 22.10.2026.