Data Protection Declaration
Data Protection Declaration
The engineering and expert office TROST Energy Consult, Ballastkai 9, 24937 Flensburg is responsible for the data on this website within the meaning of The General Data Protection Regulation (GDPR). We respect your personal rights. We recognize the importance of personal data, which we receive from you as user of our website. We respect the protection of your personal data and will only collect, save, or process data within the scope of our business purposes in accordance with the respective data protection regulations.
Personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
3. Legal Basis of the Processing
Where the processing of personal data is based on your consent, Article 6(1)(a) of the General Data Protection Regulation (GDPR) will serve as legal basis.
The processing of personal data that is necessary for the performance of a contract with you, is based on Article 6(1)(b) of GDPR. This also applies for procession operations, that are necessary to carry out preliminary contracts.
If processing of personal data is necessary for the purposes of the legitimate obligations governing our corporation interests, this is done in accordance with Article 6(1)(c) of GDPR.
If processing is necessary to protect a legitimate interest of us or a third party and your interests, fundamental rights and fundamental freedoms do not outweigh the legitimate interest, Article 6(1)(f) GDPR as the legal basis for processing. The authorized interest of our company is usually in the provision of our services owed and/or continuous optimization of our services and presentations.
4. Deleting Data and Duration of Storage
Your personal data will be deleted or blocked as soon as the purpose of the storage is cancelled. A storage can also be carried out if the European or national Legislator in Union law regulations, laws or other regulations have foreseen this. The data will be blocked or deleted even if a storage period prescribed by the standards expires, unless there is a requirement for further storing of the data for the conclusion of a contract or a performance of the contract.
5. Collecting Personal Data
In principle, we do not collect and use any person-related data when visiting our website. This is only done as far as this is necessary for the provision of a functioning website as well as the content and our services. The collection and use of personal data of our users is carried out on a regular basis only after their consent. Other applies in such cases, in which a prior obtaining consent is not possible for actual reasons and the processing of the data is permitted by legal regulations.
Below we would like to inform you about the nature, scope, and purpose of our data handling within the scope of this website:
Every time you call our website www.trost-energy-consult.com the user's access data required to use and settle the usage on our server will be stored in a protocol file (log file) that your browser automatically transmits to us.
- browser type and browser version;
- applied operation system;
- hostname of the accessing computer;
- date and time for server request;
- IP address of the computer requesting the website;
- website, from which access was made (referrer URL);
- called files;
- amount of data transferred;
The log file is saved for the following purposes:
- evaluation files retrieval for statistical purposes;
- system security and website stability;
- check for unlawful or otherwise illegal use, if there are actual hold points.
The legal basis for this data processing is Article 6(1)(f) of GDPR. Our legitimate interest follows data collection for the above-mentioned purposes. In no case will we use the data raised for drawing conclusions on your person. We refrain from merging this data with other data sources.
After the user logs on to our website, so-called "cookies" are stored on the user's computer.
A cookie is a small text file in a designated file directory of the computer. This file is used to identify the user's computer for the duration of the session. Cookies cannot create tampering on the user's respective terminal and can be deleted manually at any time in the browser.
The handling of cookies can be set individually in your internet browser so that cookies are rejected or accepted only after confirmation. The cookies, the so-called "session cookies", serve the purpose of the function extension of our internet offer as well as to make the use possibly comfortable. We would point out that in the case of rejection of cookies not all parts of our application can function without interference.
The processing of the data by cookies is required for the purposes for the protection of our entitled interests as well as possibly third parties according to Article 6(1)(f) of GDPR.
5.3 Utilization data
We collect and use your personal data based on Article 6(1)(b) of GDPR, as far as this is necessary to enable the use of our internet offer (usage data).
For purposes of advertising, market research and for the appropriate design of our internet offer, we may also create usage profiles when using pseudonyms.
You have the right to object to this use of your data at any time. We may not merge the usage profiles with data about the carrier of the pseudonym.
5.4 Data in connection with your contact
If you send us a request via contact form, your information will be sent from the form, or via the email address provided to contact you, including the contact details you stated there for processing the respective request and for follow-up questions stored with us.
We will not pass this data on to third parties without your consent. The corresponding data use is based GDPR Article 6(1)(b) during processing of your application.
5.5 Data for registration for downloading documents
If you send us information by registration form for downloading documents, your data from the form via the provided e-mail address will only be stored by us for contact purposes and for further offers to deepen the facts presented in the documents.
We will not pass this data on to third parties without your consent. The corresponding data is used based on GDPR Article 6(1)(b) in the context of processing your request.
5.6 Application of Google Maps
On this website we use the offer of Google Maps. This allows us to show you interactive maps directly in the website and allow you to use the map function conveniently.
By visiting the website, Google receives information that you have accessed the corresponding sub-page of our website. The above-mentioned data (5.1) is also transmitted. This is done regardless of whether Google provides a user account that you are logged on to, or if there is no user account. If you are logged in to Google, your data will be directly associated with your account. If you do not want to associate with your profile on Google, you must log out before activating the button. Google stores your data as a usage profile and uses it for advertising, market research and/or appropriate design of its website. Such evaluation takes place in particular (even for unlogged users) for the provision of appropriate advertising and to inform other users of the social network about their activities on our website. You have the right to object to the formation of these user profiles. To do so you must address Google directly.
For more information about the purpose and scope of the data collection and its processing by the plug-in provider, please refer to the provider's privacy statements. There you will also receive further information on your rights and setting options for protecting your privacy: www.google.de/intl/de/policies/privacy. Google also processes your personal data in the United States and is subject to the EU-US privacy shield, https://www.privacyshield.gov/EU-US-Framework.
5.7 Google Web Fonts
This page uses Web fonts provided by Google to provide a uniform representation of fonts. When you call a page, your browser loads the required web fonts into your browser cache to display text and fonts correctly.
For this purpose, the browser you are using must connect to Google's servers. This makes Google aware that our website has been accessed via your IP address. The use of Google Web fonts is in the interest of a uniform and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of GDPR.
If your browser does not support Web fonts, a standard font is used by your computer.
5.8 Google Analytics
We use Google Analytics, a Web Analytics service from Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA for design and continuous optimization of our pages; hereinafter "Google"). In this context, pseudonymized usage profiles are created and cookies are used (see under clause 4). The information generated by the cookie about your use of this website, such as
- browser type and version;
- operating system used;
- referrer‐URL (the previously visited page);
- hostname of the accessing computer (IP address);
- server Request time;
are transferred to a Google server in the United States and stored there. The information is used to evaluate the use of the website, to compile reports on the website activities and to provide further services related to the use of the website and the internet for the purposes of market research and appropriate design of these internet services. This information may also be transferred to third parties if this is required by law or if third parties process this data by proxy. In no case will your IP address be merged with other data from Google. The IP addresses are anonymous, so that an assignment is not possible (IP ‐ masking).
6. Your Rights
As far as we process your personal data on our website, you are "concerned" in the sense of GDPR. You have the following rights towards us:
6.1 Right to Information
You can ask us to confirm whether we process personal data from you. If such processing is available, you can request information from us about the following:
- the purposes for which the personal data are processed;
- the categories of personal data that are processed;
- the recipients or categories of recipients to whom your personal data has been disclosed or is still being disclosed;
- the planned duration of the storage of your personal data or, if specific information is not possible here, criteria for determining the storage duration;
- the existence of a right of appeal by a supervisory authority;
- all available information about the origin of the data if the personal data is not collected from you;
- the existence of automated decision-making, including profiling pursuant to Article 22(1) and (4) of the GDPR and, at least in such cases, meaningful information on the logic involved and the scope and impact of such a processing for you.
You also have the right to request information on whether your personal data is transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate guarantees pursuant to Article 46 GDPR in connection with the transmission.
6.2 Right to Rectification
You have the right to rectify and/or complete your personal data to us, provided your processed data is incorrect or incomplete. If this is the case, we will make the correction without delay.
6.3 Right to Restrict Processing
Under the following conditions, you have the right to require the processing of your personal data to be restricted if:
- you deny the accuracy of your personal data for a period that allows us to verify the accuracy of the data;
- the processing is unlawful, and you reject the deletion of your personal data and instead require the restriction of use;
- we no longer need your personal data for the purposes of processing, but you need it for the assertion, exercise, or defence of legal claims, or
- you have objected to the processing in accordance with Article 21(1) of the GDPR and have not yet established whether our legitimate reasons outweigh your reasons.
If you have requested the limitation of the processing of your personal data, this data - apart from your storage - may only be subject to the assertion, exercise, or defence of legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest of the Union or of a Member State with your consent. You will be informed by us before the restriction is removed.
6.4 Right to delete
You may require us to delete your personal data immediately. We are obligated to delete these data immediately if one of the following is true:
- your personal data are no longer necessary for the purposes for which it was collected or otherwise processed;
- you revoke an existing consent, to which the processing according to Article 6(1)(a) or Article 9(2)(a) of GDPR supported and there is no other legal basis for further processing;
- you object to the processing in accordance with Article 21(1) of GDPR and there are no pre-constituting justifiable reasons for processing;
- you object to the processing by means of direct marketing in accordance with Article 21(2) of GDPR;
- your personal data has been processed unlawfully;
- the deletion of your personal data is necessary for the fulfilment of a legal obligation under union law or the law of the Member States to which we are subject;
- your personal data have been collected in relation to information provided by society services in accordance with Article 8(1) of GDPR.
If we have made your personal data public and we are obliged to delete it pursuant to Article 17(1) of the GDPR, we shall take appropriate measures, taking into account the available technology and the implementation costs, in order to inform the data controller that you have requested from him/her the deletion of all links to these personal data, copies or replications.
Your right to delete does not exist as far as the processing is required
- to exercise the right to freedom of expression and information;
- to fulfil a legal obligation which requires processing under the law of the Union or of the Member States to which we are subject, or for the performance of a task which is in the public interest or in the exercise of public authority which was transferred to us;
- for reasons of public interest in the field of public health in accordance with Article 9(2)(h) and (i) and Article 9(3) of GDPR;
- for archival purposes in the public interest, for scientific or historical research or statistical purposes pursuant to Article 89(1) of GDPR, as far as the law referred to in section 1 presumably hinder or affect the achievement of the objectives of this processing, or
- for the assertion, exercise, or defence of legal claims.
6.5 Right to be Informed
If you have exercised your right to rectify, delete or restrict the processing to us, we shall be obligated to make this correction or deletion of the data or restriction to all recipients to whom your personal data has been disclosed, unless this proves to be impossible or involves a disproportionate effort.
You are entitled to be informed about these recipients.
6.6 Right to Data Transferability
You have the right to receive your personal data, which you may have provided us, in a structured, common, and machine-readable format. In addition, you have the right to transmit this data to another person responsible without hindrance, provided that
- the processing is based on a consent pursuant to GDPR Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b) and
- the processing is carried out using automated procedures.
You also have the right to obtain the transmission of your personal data directly from us to another person responsible, as far as this is technically feasible. The rights and freedoms of other persons may not be affected by this.
The right to transfer data does not apply to the processing of personal data necessary for the performance of a task which is in the public interest or is carried out in the exercise of public authority which has been transferred to us.
As part of the offer of our website, we do not currently assume that data which are subject to data transferability will be processed.
6.7 Right to Object
You have the right at any time, for reasons arising from your particular situation, to object against the processing of your personal data, which is based on Article 6(1)(e) or (f) of GDPR. This also applies to profiling based on these provisions.
We will not process your personal data any more, unless we can prove compelling reasons for the processing that outweigh your interests, rights and freedoms, or the processing is for the assertion, exercise, or defence of legal claims.
If your personal data are processed to run direct advertising, you have the right at any time to object to the processing of personal data relating to you for the purpose of such advertising. This also applies to the profile that may be associated with it.
If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
In connection with the use of information society services, irrespective of Directive 2002/58/EC, they have the possibility to exercise their right of objection by means of automated procedures using technical specifications.
6.8 Right to Revoke the Data Protection Declaration of Consent
You have the right to revoke your data protection declaration of consent at any time. The revocation of the consent does not affect the legality of the processing due to the consent until the revocation.
6.9 Automated Decision-making in Individual Cases Including Profiling
You have the right not to be subjected to a decision based solely on automated processing, including profiling, which will have a legal effect on you or, in a similar manner, significantly affect you. We do not accept such processing.
6.10 Right to Appeal to a Supervisory Authority
If you consider that the processing of your personal data violates the GDPR you shall be entitled to appeal to a supervisory authority, in particular in the Member State of your place of residence, your workplace or the place where the alleged infringement is concerned, without prejudice to any other rights of appeal.
7. Responsibility for Linked Content
On our website we may also use links to websites of other providers. This data privacy protection declaration does not apply to internet pages of third parties. If a collection, processing or use of personal data is carried out in the use of the websites of these other providers, please observe the data protection instructions of the respective providers. We are not responsible for their data protection handling.
8. Transfer of Personal Data to Third Parties
Your personal data will be stored exclusively on our servers or on protected servers used on our behalf. Access to and use of the data is only possible for an authorized group of employees or service providers and is limited to those data only which are necessary for the fulfilment of the respective task.
Your data will not be transmitted to third parties without your consent. A transfer of data to third countries (States outside the European Economic Area - EEA) does not take place and is not intended in future, unless otherwise stated in this data protection declaration.
9. Data Security
To protect your personal data, we have taken technical and organisational measures to ensure that your data are protected against accidental or intentional loss, destruction, or manipulation, as well as protection against the access of unauthorized persons. Our protective measures are reviewed at regular intervals and, if necessary, adapted to technical progress.
10. Data Protection Supervisor
According to Article 37(1) of GDPR and § 38 BDSG (Federal Data Protection Act) we are not obligated to order a data protection officer. If you have any further questions regarding the processing of your personal data, please contact our management, which you can reach as follows:
Trost Energy Consult, Ballastkai 9, 24937 Flensburg, + 49 461 48070950, Info@trost-energy-consult.com.
Last update: May 2018