Privacy Policy

TROST Energy Consult Ingenieure PartG · Last updated: 15 September 2026

Protecting your personal data is important to us. The following information explains how we process personal data when you visit our website and use the functions provided there.

1. Controller

TROST Energy Consult Ingenieure PartG
Ballastkai 9 · 24937 Flensburg · Germany
Phone: +49 (0)461 4807095-0
Email: info@trost-energy-consult.com

If you have any questions about data protection or wish to exercise your rights, you can contact us using these contact details.

2. Provision and security of the website

The website is hosted by Host Europe GmbH in Cologne, Germany. When the website is accessed, technically necessary access data are processed. These include, in particular, the IP address, date and time, page or file requested, amount of data transferred, access status, referrer URL, and information about the browser and operating system.

The processing serves to deliver the website, ensure stability and analyse errors, as well as to detect and defend against attacks. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and trouble-free operation of the website. Host Europe retains access log files for 14 days and error log files for 7 days.

Further information: Host Europe privacy notice

Wordfence Security

To protect the website against malware, unauthorised access and other attacks, we use the free version of Wordfence Security. The provider is Defiant, Inc., Seattle, USA. In connection with security-relevant events, Wordfence processes, in particular, the IP address, time, requested URL, technical request data, login attempts and the reason for a block.

Under the current configuration, the installation is limited to logging security-relevant events. Live Traffic data are deleted after no more than 30 days. Data relating to specific security incidents may be retained for longer until the incident has been fully resolved and, where necessary, for the establishment, exercise or defence of legal claims. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is ensuring IT and information security.

For security rules, malware signatures and technical API functions, the Wordfence installation may communicate with systems operated by Defiant. This may involve processing in the United States. For necessary transfers to third countries, Defiant provides, in particular, the Standard Contractual Clauses approved by the European Commission. Information on these safeguards and a copy of the Standard Contractual Clauses provided by Defiant can be accessed via the Wordfence provider information or requested from us using the contact details set out in Section 1.

Further information: Wordfence privacy information

3. Cookies and consent management

Our website uses technically necessary cookies and comparable storage technologies. They are required to provide the website securely, manage sessions and necessary settings, and store your privacy choices. Access to your terminal device is based on Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG); the associated processing of personal data is based on Art. 6(1)(f) GDPR.

Services requiring consent are activated only after you have given your consent. On our website, this currently applies in particular to Google Analytics. The legal bases are Section 25(1) TDDDG and Art. 6(1)(a) GDPR. Consent that has been granted can be changed or withdrawn at any time with effect for the future.

We use CCM19 from Papoo Software & Media GmbH, Bonn, Germany, to obtain and document your selection. CCM19 processes, in particular, a randomly generated consent ID, the date and time, and the consent status. The processing serves to implement your selection and demonstrate that valid consent has been obtained. The legal basis is Art. 6(1)(c) GDPR in conjunction with the data-protection documentation and accountability obligations; technically necessary storage is based on Section 25(2) TDDDG.

Records of consent are retained for the duration of the respective consent and thereafter for as long as necessary to demonstrate the lawfulness of the processing. They are then deleted unless statutory obligations or the need to defend legal claims require further retention. You can view the specific services, cookies, storage technologies and retention periods at any time in the website’s cookie settings.

Further information: CCM19 privacy notice

4. Google Analytics 4

After you have given your consent, we use Google Analytics 4 to statistically analyse and improve our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Analytics processing is activated only after consent has been given through our consent management system.

The data processed include, in particular, page views and interactions, referrer information, technical browser and device data, and approximate location data down to city level. According to Google, the IP address of users in the European Union is used only briefly to derive the approximate location; the full IP address is not logged or stored for this purpose.

Google Signals and the collection of data that users have actively provided to Google are disabled under the current configuration. Under the current configuration, the use of Analytics data for personalised advertising is not permitted in any region.

A retention period of two months is currently configured for event data and 14 months for user data. The retention of standard aggregated reports may technically differ from this because, according to Google, the GA4 retention setting primarily applies to user- and event-related data used for explorations and comparable detailed analyses.

The legal bases are your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time via the cookie settings. Processing by Google LLC in the United States may occur. Google LLC is certified under the EU-U.S. Data Privacy Framework.

Further information: Google Privacy Policy · Data protection in Google Analytics

5. Interactive map (MapGEO and amCharts)

Our website displays an interactive map using the WordPress plugin MapGEO – Interactive Geo Maps PRO. To display the map, the plugin currently loads JavaScript libraries and map files via the amCharts Content Delivery Network (CDN).

When you access a page containing this map, your browser therefore establishes a direct connection to servers operated by amCharts and its technical service providers. In particular, your IP address, the date and time of access, the requested file, the previously visited page, and information about your browser and operating system may be processed. The processing serves to deliver and ensure the functional display of the interactive map.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the clear and technically reliable presentation of information on our website. amCharts uses Cloudflare, Inc., USA, among others, for content delivery. Cloudflare may in particular have access to the requested URL and the IP address. Processing in the United States may occur. Cloudflare is certified under the EU-U.S. Data Privacy Framework.

As a general rule, we do not receive our own personal access logs from the direct CDN connection between your browser and the providers named above. Any further storage by the integrated providers is governed by their respective data protection and deletion policies.

Further information: amCharts Privacy Policy

6. Contact and forms

If you contact us via a form, by email or by telephone, we process the contact details and content you provide in order to handle your enquiry. For forms, we store, in particular, your name, email address, date of submission and the content entered in the WordPress database on our web server.

If you are personally the contracting party or if, at your request, the contact is intended to take steps prior to entering into a contract with you, the legal basis is Art. 6(1)(b) GDPR. As we operate exclusively in the B2B sector, business enquiries are generally submitted by contact persons acting for a company or other organisation. In these cases, the processing is based on Art. 6(1)(f) GDPR; our legitimate interest lies in initiating, conducting and maintaining business relationships and in handling business communications appropriately. For other enquiries, Art. 6(1)(f) GDPR applies unless a more specific legal basis is applicable.

As a general rule, we delete form entries relating to contact enquiries six months after final processing. Data are retained for longer only where they are required for a contractual relationship, statutory retention obligations, or the establishment, exercise or defence of legal claims.

Download forms

To provide publications and other documents, we process the information requested in the relevant form, currently in particular the name, email address and date of the request. We require the email address to provide or allocate the requested download; the name is used for allocation and personal communication. The data may also be used to handle questions directly related to the request.

As our publications and technical information are directed at a professional B2B audience, the processing of data relating to company contact persons is generally based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the controlled provision of our own technical information, the allocation of the request and the handling of questions directly related to it. If, exceptionally, you are personally the contracting party and, at your request, the request directly serves pre-contractual measures, Art. 6(1)(b) GDPR may apply. These data are not used for newsletters or regular advertising.

As a general rule, entries from download forms are deleted six months after the material has been provided, unless statutory retention obligations or legitimate reasons require longer storage.

Required and voluntary information

Where input fields are marked as mandatory, we require the information requested there in order to process or provide the enquiry or function you have requested. Without this information, processing or provision is not possible or may not be complete. Any additional information is voluntary. As a general rule, there is no statutory obligation to provide the data unless otherwise stated in a particular case.

7. Job applications

If you apply to us, we process the application data you submit, in particular contact and master data, your CV, certificates, qualifications, information about the position sought, and application-related and further correspondence. The purpose is to decide whether to establish an employment relationship. The legal basis is Section 26(1) of the German Federal Data Protection Act (BDSG) in conjunction with Art. 6(1)(b) GDPR.

Retention period for applications

If no employment relationship is established, we generally delete application data no later than six months after completion of the application procedure. Where data are temporarily required after completion of the selection decision for the establishment, exercise or defence of potential legal claims, this further storage is based on Art. 6(1)(f) GDPR; our legitimate interest lies in legal defence. Data are retained for longer only with your consent or where statutory obligations or other legal grounds require this. If you are hired, the necessary data are transferred to the personnel file.

8. Recipients and transfers to third countries

Within our company, access to personal data is restricted to persons who require it for the respective purpose. We also use service providers, in particular for hosting, email, website maintenance, IT security, consent management, web analytics, the provision of external map libraries and applicant management. Where these service providers process personal data on our behalf, they are engaged in accordance with Art. 28 GDPR.

Data are transferred to other recipients only where this is necessary for the respective purpose and permitted by law, where a legal obligation exists, or where you have given your consent. Where personal data are processed outside the European Economic Area, this occurs only in accordance with the requirements of Art. 44 et seq. GDPR, in particular on the basis of an adequacy decision pursuant to Art. 45 GDPR or appropriate safeguards pursuant to Art. 46 GDPR. Details of the specific services used can be found in the sections above. Information on the safeguards used in each case and, where applicable, a copy of the Standard Contractual Clauses can be accessed via the provider information referred to above or requested from us using the contact details set out in Section 1.

9. Your rights

Subject to the applicable statutory requirements, you have, in particular, the following rights:

access to the personal data processed about you (Art. 15 GDPR),
rectification of inaccurate data and completion of incomplete data (Art. 16 GDPR),
erasure (Art. 17 GDPR),
restriction of processing (Art. 18 GDPR),
data portability (Art. 20 GDPR),
withdrawal of consent at any time with effect for the future; the lawfulness of processing based on consent before its withdrawal remains unaffected (Art. 7(3) GDPR),
objection to processing based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR).

To exercise your rights, an informal notification using the contact details set out in Section 1 is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority particularly competent for us is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany.

Further information: www.datenschutzzentrum.de

10. Special notice regarding the right to object

Where we process personal data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. If personal data are processed for direct marketing purposes, you may object to such processing at any time without stating reasons.

Last updated: 15 September 2026