Privacy policy

The protection of your personal data (here in referred to as "data") is a major and very important concern for us. We would therefore like to inform you in detail below about which data we collect and how we process it in the following. We would like to state in advance that our offers and products are aimed exclusively at business customers, i.e. representatives of companies.

I. Name and contact details of the controller and the data protection officer

The controller within the meaning of the data protection regulations for the processing of personal data is

ENIT Energy IT Systems GmbH

represented by the managing director Pascal Benoit

Mercystraße 26

79100 Freiburg

P: +49 7614589100

E: info@enit.io

W: www.enit.io

You can reach our data protection officer at
E-mail: datenschutz@enit.io

II. Information on the purposes of processing your personal data, legal basis and storage period

Below we inform you about the data processing that takes place on our website, its purposes, legal basis and respective storage duration and, if applicable, specific objection and removal options.

Log files

When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a log file. The following information is collected without any action on your part and stored until it is automatically deleted:

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the website accessed,
• Website from which the access was made (referrer URL),
• browser used, version of the browser
• Operating system and version of your computer's operating system and the name of your access provider.
• Transferred data volumes and the access status (file transferred, file not found, etc.)
• Language and version of the browser software
  
  
  

Cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.

Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.

We use the following cookies:

• Session cookies
• Other temporary cookies (e.g. cookies for analysis purposes or third-party cookies)
  
  
  

On the one hand, the use of cookies serves to make the use of our website more pleasant for you.

For example, we use so-called session cookies to recognize that you have already visited individual pages of our website.

In addition, we also use other temporary cookies to optimize user-friendliness, which are stored on your device for a specified period of time. If you visit our site again to make use of our services, it is automatically recognized that you have already visited us and which entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to record and evaluate the use of our website pseudonymously and purely statistically in order to further optimize our offer for you. These cookies enable us to automatically recognize that you have already visited our website when you visit it again. The third-party providers of the associated analysis tools as well as the providers of social media plugins use corresponding cookies for this purpose (details can be found in the following descriptions of the associated third-party services).

The legal basis for possible processing of personal data using cookies and their storage duration may vary. Insofar as the data processing is based on our overriding legitimate interests, the legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR and Section 25 para. 2 no. 2 TTDSG. The stated purpose then corresponds to our legitimate interest. If you have given us your consent, the legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR and § 25 para. 1 TTDSG. No non-essential cookies will be set without your consent.

Session cookies are automatically deleted at the end of the session. Other temporary cookies are automatically deleted after a defined period of time, in this case 2 months. Cookies for analysis purposes or third-party cookies are automatically deleted after the times specified by the respective providers.

You can delete cookies already stored on your device at any time. If you wish to prevent the storage of cookies, you can do so via the settings in your Internet browser. You can find instructions for common browsers here: Internet Explorer, Firefox, Google Chrome, Google Chrome mobile, Microsoft Edge, Safari, Safari mobile. Alternatively, you can also install so-called ad blockers. Please note that individual functions of our website may not work if you have deactivated the use of cookies.

Cookiebot

Cookiebot is a consent management platform that enables websites to protect user privacy and comply with the GDPR when it comes to cookies and tracking. "Cookiebot" is an offer from the provider Usercentrics A/S , Havnegade 39,
1058 Copenhagen, Denmark, hereinafter referred to as "Usercentrics".

Through the "Cookiebot" function, we inform our website visitors about the use of cookies on our website and enable them to make a decision about their use.

If the visitor consents to the use of cookies, the following data is automatically logged:

• The IP number of the user
• Date and time of consent
• User agent of the end user's browser
• The URL of the provider
• The user's authorized cookies (cookie status), which are required as proof of consent.
• An anonymous, random and encrypted key.

The encrypted key and the cookie status are stored on the user's end device using a cookie in order to establish the corresponding cookie status on future page views. This cookie is automatically deleted after 12 months.

The legal basis for this is Art. 6 para. 1 lit. f GDPR and § 25 para. 2 no. 2 TTDSG. Our legitimate interest lies in the user-friendliness of the website and in fulfilling the legal requirements of the GDPR.

The user can prevent or terminate the installation of cookies and their storage, and thus their cookie consent, at any time by changing their browser settings.

Further information on Cookiebot can be found at
https://www.cookiebot.com/de/privacy-policy/

Userlike

You can contact us via the live chat function. On this website, we use the live chat software of the company Userlike UG (haftungsbeschränkt), Probsteigasse 44-46, 50670 Cologne, Germany (hereinafter referred to as "Userlike"). You can use the live chat like a contact form to chat with our employees in near real time. When using the chat, the following data is collected, processed and stored Date and time of the call, browser type/version, IP address, operating system used, URL of the previously visited website, amount of data sent, first name, surname and e-mail address.

When you visit our website, the chat widget is loaded in the form of a JavaScript file. The chat widget technically represents the source code that is executed on your computer and enables the chat.

The data collected is not used to personally identify the visitor to this website and is not merged with personal data about the bearer of the pseudonym.

We use live chat on the basis of our legitimate interests for the optimization and economic operation of our online offer. The legal basis for the processing is Art. 6 para. 1 lit. f. GDPR and § 25 para. 2 no. 2 TTDSG.

Further information can be found at: https://www.userlike.com/de/terms#privacy-policy.

Weglot

Functions of the Weglot translation service are integrated on this website. The provider is Weglot SAS, 138, rue Pierre Joigneaux in Bois-Colombes 92270 France. Weglot is loaded when you access the website so that you can change the language to a language other than German using the language icon in the header of the website. This enables a direct connection to be established between your browser and the Weglot server when you visit this website. Weglot then receives the information that you have visited this website with your IP address.

The data is stored and analyzed on the basis of Art. 6 para. 1 lit. f GDPR and § 25 para. 2 no. 2 TTDSG. The website operator has a legitimate interest in presenting a substantial part of its website in common languages for non-German-speaking visitors. If a corresponding consent has been requested (for example, consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time with effect for the future.

Further information on this can be found in Weglot's privacy policy: https://weglot.com/privacy/

Google Tag Manager

For reasons of transparency, we would like to point out that we use the Google Tag Manager of the provider Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Google Tag Manager makes it easier for us to integrate and manage our tags. Tags are small code elements that are used, among other things, to measure traffic and visitor behaviour, record the impact of online advertising and social channels, set up remarketing and targeting and test and optimize websites. We use the Tag Manager for the Google Analytics service and collect aggregated data via the tag trigger. If you have made a deactivation, this deactivation will be taken into account by Google Tag Manager. For more information on Google Tag Manager, see: https://www.google.com/intl/de/tagmanager/use-policy.html.

Insofar as the data processing is based on our overriding legitimate interests, the legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR and § 25 para. 2 no. 2 TTDSG. The stated purpose then corresponds to our legitimate interest. If you have given us your consent, the legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR and Section 25 para. 1 TTDSG. No non-essential cookies will be set without your consent.

The retention period is the period of time during which the collected data is stored for processing. The data must be deleted as soon as it is no longer required for the specified processing purposes.

The data is deleted as soon as it is no longer required for the purposes of processing.

The recipients of the data collected are also Alphabet Inc, Google LLC, Google Ireland Limited

You can view the data processor's privacy policy here:

https://policies.google.com/privacy?hl=de

The data processor's cookie policy can be found here:

https://policies.google.com/technologies/cookies?hl=de

Leadfeeder (Dealfront)

We use the Leadfeeder technology from Dealfront Group GmbH, Durlacher Allee 73, 76131 Karlsruhe, Germany. Leadfeeder is an analysis service of the Finnish company Leadfeeder, Keskuskatu 6 E, 00100 Helsinki, Finland. With the help of Leadfeeder, we recognize which companies visit our website. For this purpose, your IP address is processed in order to recognize whether it is a company-related IP address. Leadfeeder identifies companies based on their publicly registered IP addresses and the IP address database maintained by www.leadfeeder.com/privacy/. Only company visits are displayed. All users visiting our website from private IP addresses are automatically filtered out. All visit data is aggregated at company level. The tracker cookie is only set for the website domain and is used to set a unique identifier to distinguish between different visitors. Processing of personal data cannot be completely ruled out when reviewing the linked company information.

The legal basis for the processing and storage of the data is your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time with effect for the future.

Further information on data processing by Leadfeeder can be found in the privacy policy at www.leadfeeder.com/privacy/

Doubleclick

We use the online marketing tool DoubleClick by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA on our website. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. DoubleClick uses cookies to display ads that are relevant to users, to improve campaign performance reports or to prevent users from seeing the same ads more than once. Google uses a cookie ID to record which ads are displayed in which browser. This prevents the same ad from being shown more than once. In addition, DoubleClick can use cookie IDs to record so-called conversions with reference to ads. This is the case, for example, when a user sees a DoubleClick ad and later visits the advertiser's website using the same browser and makes a purchase there.

When you access a page that uses DoubleClick and where the DoubleClick script is enabled, your browser automatically establishes a direct connection with the Google server. As the website operator, we have no influence on the scope and further use of the data collected by Google through the use of this tool. We inform you according to our level of knowledge: Through the integration of DoubleClick, Google receives the information that you have accessed the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and store it.

Insofar as data is processed outside the EEA, where there is no level of data protection corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish a secure level of data protection.

Further information on DoubleClick by Google can be found at https://www.google.de/doubleclick andon data protection at Google in general: https: //www.google.de/intl/de/policies/privacy. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at https://www.networkadvertising.org.

Data is only collected and stored with your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time with effect for the future.

Google Ads lead forms

We use Google Ads lead forms to offer interested parties the opportunity to contact us directly and voluntarily via a contact form displayed there. Google Ads lead form extensions are a service of Google LLC, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Alternatively, you can of course always contact us directly using the contact forms on our website or by email.

You can contact us directly with your request via the Google Ads lead forms.

When you contact us via a Google Ads lead form, the data you provide (your email address and full name) will only be processed by us in order to process your request. This is also our legitimate interest in processing within the meaning of Art. 6 para. 1 sentence 1 lit. f GDPR. The data will not be processed for any other purposes.

We will delete your data that we have received in the course of contacting you as soon as no further communication with you is required, requested by you or initiated by you.

You can object to the described processing of your personal data provided via the Google Lead form at any time with effect for the future. To do so, send us an e-mail toinfo(at)enit.io andexpress your wish to withdraw your consent with effect for the future.

If data is transferred outside the European Union, the high European level of data protection does not apply.

If data is processed outside the European Economic Area / the EU, where there is no level of data protection corresponding to the European standard, Google states that it uses standard contractual clauses. You can find more information on the handling of user data in the order data processing conditions for Google advertising products: https: //business.safety.google/intl/de/adsprocessorterms/

If you interact with Google services, Google in the USA will of course also have access to your data. We expressly draw your attention to the fact that Google stores the data (e.g. IP address, possibly also personal interests, behavior on Google pages, personal information stored with Google, etc.) of users and uses it for business purposes.

We have no influence on the processing and further use of this data, as Google alone determines the processing. The extent to which, where and for how long the data is stored, the extent to which the data is linked and evaluated and to whom the data is passed on is currently not clear to us. We also have no insight or influence with regard to deletion periods, i.e. whether and to what extent deletion periods are observed.

You can find Google's privacy policy and terms of use HERE.

Information on the data processing conditions between those responsible for Google advertising products can be viewed HERE.

Further information on the handling of data by Google itself can also be found at: https://business.safety.google/ .

Information on the lead form extensions can be found here:

https://support.google.com/google-ads/answer/9423234?hl=de&ref_topic=9716366

The information on Google Ads, remarketing and conversion tracking also applies here.

Google Ads, remarketing and conversion tracking

We use the Google Ads service. Google Ads is an online advertising program from Google LLC, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

This means that we place Google Ads ads and also use Google Remarketing and conversion tracking as part of this. The ads are displayed on Google's search results pages and on websites in the Google advertising network. We also use Ads remarketing lists for ads. This allows us to customize campaigns for users who have already visited our website. The services allow us to combine our ads with certain search terms or to place ads for previous visitors, e.g. advertising services that visitors have viewed on our website. This allows us to display interest-based advertising to users of our website on other websites within the Google advertising network (as a "Google ad" in Google Search or on other websites).

An analysis of online user behavior is necessary for interest-based offers. Google uses cookies to carry out this analysis. When you click on an advertisement or visit our website, Google places a cookie on the user's computer. These cookies have a duration of 90 days. The information collected by the respective cookie is used to target the visitor in a subsequent search query. Further information on the cookie technology used can also be found in Google's notes on website statistics and in the privacy policy.

With the help of this technology, Google and we as a customer receive information that a user has clicked on an advertisement and has been forwarded to our websites. The information obtained in this way is used exclusively for statistical analysis to optimize advertising. We do not receive any information with which visitors can be personally identified. Your IP address is transmitted to Google, but as we use Google's IP masking on this website as part of the use of Google Analytics, your IP address is anonymized.

The log data is anonymized after 9 months and the cookie information is anonymized after 18 months.

The statistics provided to us by Google include the total number of users who clicked on one of our ads and, if applicable, whether they were redirected to a page on our website with a conversion tag. Based on these statistics, we can track which search terms were clicked on our ad particularly often and which ads lead to the user contacting us via the contact form.

You can find more information on data protection in the context of Google Ads at: https://policies.google.com/technologies/ads?hl=de .

Insofar as data is processed outside the EU/EEA, we have concluded the standard data protection clauses adopted by the EU Commission in accordance with Art. 46 GDPR with the service provider to establish a secure level of data protection, which allow personal data to be transferred to a third country in individual cases.

The legal basis for the data processing described is your consent, Art. 6 para. 1 sentence 1 lit. a GDPR. Once you have given your consent, you can withdraw it at any time with effect for the future by changing your selection in the tracking settings (see above, under Cookies). Alternatively, you can delete your Local Storage from this website. The banner with the link to the selection options will then be displayed again.

Google Audiences

We use the Google Audiences service on this website. The operator of this service is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
The purpose of this service is the interest-based display of advertisements for users. This requires website usage to be analyzed using cookies. The cookies store anonymized or pseudonymized data relating to the use of the website. If you visit other websites that also use these services, you will be presented with advertisements that match your previous interests.
The following data is collected and processed:

• Pages visited
• IP address
• Duration of visit
• Other information on the use of websites
• Content in which the user is interested

The legal basis for the processing and storage is your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. If you do not want Google Audiences to collect and process the aforementioned data, you can refuse your consent or revoke it at any time with effect for the future.
The personal data is stored for as long as it is required to fulfill the purpose of processing. The data will be deleted as soon as it is no longer required to achieve the purpose.
In addition to Google Ireland Limited, the data may be transmitted to the following recipients as part of the processing:
- Google LLC.
- Alphabet Inc.

Insofar as data is processed outside the EU/EEA, we have concluded the standard data protection clauses adopted by the EU Commission in accordance with Art. 46 GDPR with the service provider in order to establish a secure level of data protection, which allow personal data to be transferred to a third country in individual cases.

Social media hyperlinks

We have included hyperlinks to the following social media services on our website Facebook, LinkedIn, YouTube and Xing. These are designed in the form of the corresponding logos and are stored on our own server. As a result, no data about you as a user is transferred to the respective provider service when you first load our website. Only when you click on the buttons will the data mentioned in section II 1 of this declaration be transferred to the respective providers and you thereby give your consent for your data to be transferred to the respective provider. The legal basis for the use of the plugins is Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG

We have no influence on this data transfer. Data is transmitted regardless of whether you have a user account with the respective social media service and/or are currently logged in to it.

In the case of Facebook (Meta Platforms Inc.), LinkedIn (LinkedIn Corporation.) and YouTube (Google Inc.), your personal data is therefore transmitted to the respective provider in the USA and stored there. To ensure suitable guarantees for the protection of the transfer and processing of personal data outside the EU, data is transferred and processed on the basis of suitable guarantees in accordance with Art. 46 ff GDPR, in particular through the conclusion of so-called standard data protection clauses of the EU Commission in accordance with Art. 46 para. 2 lit c GDPR.

We provide the above-mentioned hyperlinks on our website in order to make our company better known through our own presence there.

The legal basis for the use of the hyperlinks is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR and § 25 para. 1 TTDSG. Consent can be withdrawn at any time with effect for the future.

We recommend that you log out regularly after using the respective social network, but especially before activating the respective button, as this way you can avoid being assigned to your profile with the respective social media provider.

You also have the right to object to the creation of these user profiles, whereby you must contact the respective social media provider to exercise this right.

Further information on data processing there, in particular on the legal basis and storage period, can be found in the data protection declarations of the respective provider. There you will also find further information on your rights in this regard and setting options to protect your privacy.

Social media channels

We operate channels on various social platforms to communicate directly with you and to inform you about interesting news from our company.

We process the data of visitors to our channels, in particular information about user interactions (e.g. likes, comments, retweets), demographic and statistical data as well as the data transmitted to us in the context of messages and comments.

We would like to point out that when you use these social networks, the respective providers also receive access to your data. This data may be used by them for market research and advertising purposes. We have no further knowledge of the data processing by the providers of the social platforms in question. We would like to point out that the links to the respective platforms included on our site are purely links. Data processing by the platforms only takes place when you visit them.

The processing of the personal data of visitors to our online presence is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in ensuring communication with our customers and informing them about news related to our products.

We would like to point out that the data processed when using social platforms and networks may be processed outside the European Economic Area.
For a comprehensive description of the respective data processing and opt-out options, please refer to the following pages of the providers:

- Facebook (Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
Privacy policy: https://www.facebook.com/privacy/explanation
Opt-out: https://www.facebook.com/help/contact/367438723733209

- LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland)
Privacy policy: https://www.linkedin.com/legal/privacy-policy
Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

- YouTube / Google (Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland)
Privacy policy: https://policies.google.com/privacy
Opt-Out: https://adssettings.google.com/authenticated

- Xing (New Work SE, Am Strandkai 1, 20457 Hamburg, Germany)
Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung
Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung

Embedded YouTube videos

We have integrated YouTube videos into our online offering, which are stored on www.YouTube.com and can be played directly from our website. YouTube is a service provided by Google Inc. The videos are all integrated in "extended data protection mode", i.e. no data about you as a user is transferred to YouTube if you do not play the videos. At the same time, only a preview image loaded from our own web server is displayed. Only when you play the videos will the aforementioned data be transmitted. We have no influence on this data transfer. Data is transmitted regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account.

We use such YouTube plug-ins on our website to make our company better known.

YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website.

The legal basis for the use of the plug-in is Art. 6 para. 1 sentence 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time with effect for the future.

If you do not wish to be associated with your profile on YouTube, you must log out of YouTube before starting the video.

You also have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

Further information on data processing, in particular on the legal basis and storage period by YouTube, can be found in the provider's privacy policy. There you will also find further information on your rights and setting options to protect your privacy: www.google.de/intl/de/policies/privacy.

Google Analytics

If you have given your consent, Google Analytics, a web analysis service of Google LLC, is used on this website. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Google Analytics uses cookies to help the website analyze how users use the site. The information collected by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there.

In Google Analytics 4, the anonymization of IP addresses is activated by default. Due to IP anonymization, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

During your visit to the website, your user behavior is recorded in the form of "events". Events can be
- Page views
- First visit to the website
- Start of the session
- Your "click path", interaction with the website
- Scrolls (whenever a user scrolls to the bottom of the page (90%))
- Clicks on external links
- Internal search queries
- Interaction with videos
- Ads viewed / clicked on

Also recorded:
- Your approximate location (region)
- Your IP address (in abbreviated form)
- Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
- your internet provider
- the referrer URL (via which website/advertising medium you came to this website)

Google will use this information on behalf of the operator of this website to evaluate your use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website and the success of our marketing campaigns.
Recipients of the data are/may be

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor pursuant to Art. 28 GDPR)
• Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
• Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
  
  
  

Insofar as data is processed outside the EU/EEA and there is no level of data protection corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish an appropriate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out.
The data sent by us and linked to cookies is automatically deleted after 2 OR 14 months. Data that has reached the end of its retention period is automatically deleted once a month.

The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR and § 25 para. 1 TTDSG. You can revoke your consent at any time with effect for the future.

You can find more information on the terms of use of Google Analytics and on data protection at Google at https://marketingplatform.google.com/about/analytics/terms/de/ and at https://policies.google.com/?hl=de.

Matomo

a) On our software site, which is accessible via our homepage (i.e. with our ENIT Agent for existing customers and with the demo version of the ENIT Agent), we use the open source web analysis service Matomo, a service of "InnoCraft Ltd", a company based in 7 Waterloo Quay, PO625 Wellington, New Zealand. As InnoCraft is based outside the EU, InnoCraft has appointed a representative in the EU: ePrivacy Holding GmbH, Große Bleichen 21, 20354 Hamburg(privacy(at)innocraft.com). When individual pages of our website are accessed, the following data is stored and user behavior is tracked:

• Two bytes of the IP address of the user's accessing system
• The website accessed
• The website from which the user accessed the website (referrer)
• The subpages that are accessed from the accessed website
• The time spent on the website
• The frequency with which the website is accessed
• E-mail address
• Time of login
  
  
  

We use the data collected by Matomo for the statistical analysis of user behavior in order to optimize the functionality and stability of the website and for marketing purposes. Our interest in and purpose of data processing lies in the optimization of our website, the adaptation of content and the improvement of our offer.

Matomo uses cookies that make it possible to analyze the use of the website. For this purpose, the usage information collected in the cookie (including your shortened IP address) is transmitted to the Matomo server located in the EU and stored for usage analysis purposes. Matomo does not transmit any data to servers that are outside our control. Your IP address is immediately anonymized during this process so that you as a user are not identifiable to us. The information collected about your use of this website is not passed on to third parties.

We only store the analysis data for as long as the purpose of the data processing requires. Information on the duration of storage by Matomo can be obtained from the provider or at matomo.org/privacy.

You can prevent the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. If you do not agree to the storage and analysis of your usage data from your visit to our website, you can also prevent Matomo from collecting this data at any time by clicking on the following link. An opt-out cookie will then be set via your browser, which means that Matomo will not collect any session data.

The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. You can revoke your consent at any time with effect for the future by accessing the cookie settings in our Consent Management Platform and changing your selection there.

Contact via the live chat function/offline contact form

We use a live chat function on our website, which we would like to use to guide you individually through our website and respond to your individual questions and requests. During our business hours, you will be contacted by one of our employees via the chat function on our website. Alternatively, you can establish chat contact with one of our employees by clicking on the corresponding chat button (envelope). You can use both options to send them your inquiry and - if you wish - your personal data for the purpose of sending offers etc.. You can also chat with us anonymously without giving your name.

Outside of our business hours, you can click on the chat button (envelope) to access an input mask which you can use to send us your inquiry (offline contact form). The mandatory fields that must be filled in to contact us electronically are marked with (*). This is your e-mail address. If you provide us with additional data (surname, first name, etc.), this is voluntary.

We use the live chat function to help you navigate our website in real time and to provide you with individual advice on our product portfolio. The data that you send us via the contact form outside the availability of a consultant will be processed to enable us to contact you and process your request, as well as to prevent misuse of the contact form and to ensure the security of our information technology systems.

The legal basis for the processing of the mandatory information is Art. 6 para. 1 sentence 1 lit. f GDPR and § 25 para. 2 no. 2 TTDSG. The aforementioned purpose also constitutes the legitimate interest in processing the data. If the contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

The legal basis for the processing of the data voluntarily provided to us by you is Art. 6 para. 1 sentence 1 lit. a GDPR and § 25 para. 1 TTDSG.

All personal data collected via the live chat or the offline form will be deleted as soon as they are no longer required to achieve the purpose for which they were collected, unless you have consented to further storage in accordance with Art. 6 Para. 1 S.1 lit. a. DSGVO, § 25 para. 1 TTDSG consented. The purpose of the collection is achieved when the respective conversation with you has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. If a contract is concluded, the data will also be stored until the end of the statutory retention periods (6 years after the end of the year in which the contract was terminated) and then deleted, unless we are obliged to store it for longer due to tax and commercial law retention and documentation obligations (from HGB, StGB or AO).

You also have the option of withdrawing your consent to the processing of the personal data you have voluntarily provided at any time. To do so, simply contact us using the contact information provided in Section I. In such a case, the conversation cannot be continued.

Newsletter

This website uses the "Zoho" service of the provider Zoho Corporation GmbH, Trinkausstr. 7, 40213 Düsseldorf, Germany to send newsletters. There are several ways to subscribe to a free newsletter on our website, which we would use to inform you about webinars, updates and product information or e-mail practical tips and offers from the field of energy management. Mandatory information (*) for sending this newsletter is your e-mail address for sending the newsletter as well as a greeting and your first and last name in order to be able to address you personally and individually in the newsletter.

Your consent is obtained for the processing of the data as part of the registration process and reference is made to this privacy policy. We use the so-called double opt-in procedure to subscribe to our newsletter. This means that after you have registered, we will send you an email to the email address you have provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

The purpose of collecting your data is to send you the newsletter and to be able to address you personally. The collection of the time of registration and confirmation, as well as your IP address, is carried out to fulfill our legal obligation to prove the registration process and to avoid misuse.

The legal basis for the transmission is Art. 6 Para. 1 S. 1 lit. a GDPR and § 25 Ab.1 TTDSG for your entered data, as well as additionally Art. 6 Para. 1 S. 1 lit. f GDPR, Art. 7 Para. 1 GDPR for the collection of the registration and confirmation time, as well as your IP address.

For more information, please refer to Zoho's privacy policy at: https://www.zoho.com/de/privacy.html.

You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in every newsletter e-mail or by sending a message to the person responsible named in Section I.

After unsubscribing from the newsletter, your personal data will be deleted from the e-mail distribution list immediately.

Newsletter tracking

We would like to point out that registration for the newsletter is also associated with tracking. We also use the Zoho marketing software service for this purpose. When you register for the newsletter, you also agree to us carrying out analyses by individually measuring, storing and evaluating opening and click rates in recipient profiles for the purpose of designing future newsletters. This means that we evaluate your user behavior when sending the newsletter in order to determine whether and when the newsletter was opened. For this analysis, the emails sent contain so-called web beacons or tracking pixels, which are stored on our server and loaded when the newsletter is opened. Technical information such as browser type, time of opening and IP address is transmitted. For analysis purposes, we link the aforementioned data and the web beacons with your email address and an individual ID. Links received in the newsletter also contain this ID and enable us to analyze your click behavior.

We use the data obtained in this way to create a user profile in order to tailor the newsletter to your individual interests. We record when you read our newsletters, which links you click on in them and deduce your personal interests from this. The legal basis for this data processing is your consent, Art. 6 para. 1 sentence 1 lit. a GDPR.

You can withdraw your consent at any time with effect for the future. In this case, the revocation includes the entire newsletter, as a separate revocation of tracking is unfortunately not technically possible. To do so, simply click the unsubscribe link provided in every email.

Such tracking is also not possible if you have deactivated the display of images in your e-mail program by default. In this case, the newsletter will not be displayed in full and you may not be able to use all the functions. If you display the images manually, the above-mentioned tracking will take place.

The information from the tracking is stored for as long as you are subscribed to the newsletter. After you unsubscribe, the data is anonymized and used purely for statistical purposes.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected by this.

Requesting access to the demo version of the ENIT Agent

You also have the option of requesting and using a demo version via our website. This gives you access to a separate area in which our software is presented in more detail using an example company. All you need to do is enter your own business e-mail address as mandatory information.

In return for using the energy monitoring demo, by entering your e-mail address and clicking on the checkbox, you agree that ENIT Energy IT Systems GmbH will inform you regularly for advertising purposes, in particular for sending practical tips and offers from the field of energy management, via the e-mail address provided, and will carry out analyses by individually measuring, storing and evaluating opening and click rates in recipient profiles for the design of future newsletters.

You can revoke this consent to the described advertising mailing at any time without giving reasons with effect for the future by clicking on the unsubscribe link provided at the end of each newsletter e-mail.

The following data is also stored at the time the corresponding request is sent:

• The IP address of the user
• Date and time of the request
  
  
  

The provision of an e-mail address also serves to prevent misuse of the contact form and to ensure the security of our information technology systems. The collection of the time of registration and confirmation, as well as your IP address, is carried out to fulfill our legal obligation to verify your request.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. b GDPR for your e-mail address, as this is required for granting access authorization to the demo version ((pre-)contract). An additional legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR for the processing of the time of the request and your IP address.

The legal basis for the promotional use of your e-mail address is Art. 6 para. 1 sentence 1 lit. a GDPR and § 25 para. 1 TTDSG.

If a contract is subsequently concluded, the data will also be stored until the expiry of the statutory retention periods, 6 years after the end of the year in which the contract was terminated, and then deleted, unless we are obliged to store the data for longer due to tax and commercial law retention and documentation obligations (from HGB, StGB or AO) or you have consented to further storage in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR.

With regard to the use of your email address for advertising purposes, you have the option of withdrawing your consent to the processing of your personal data at any time. You can declare your revocation by sending a message (e.g. by e-mail) to the controller named under Section I.

ENIT hub

The following data protection information informs you about the type, scope and purpose of the collection and use of your personal data in the context of registration and use of the ENIT hub.

Data processing when registering for the ENIT hub

We offer the ENIT hub customer portal on our website. As a registered user, you can access our starter tools via ENIT hub. In addition, ENIT hub is used for marketing purposes and thus also for the online presence of our company. The hub offers us the possibility of content management and the generation of new customer contacts, so-called lead generation.

If you decide to register for our ENIT hub, the first step is to collect your e-mail address. In the subsequent second step, we ask you to enter further contact details to complete the registration. These are your first name, surname, name of your organization, your function in your organization and your business telephone number. Once you have entered the above data to complete your profile, you will receive access to our applications.
We use the "Zoho Analytics / Zoho CRM" system from the provider Zoho Corporation to record your data in our customer system and for further processing. Our customers' data is currently stored on American and European servers.

In return for access to the ENIT tools, by clicking on the checkbox and clicking on the blue "Continue" button, you agree that ENIT ENERGY IT Systems GmbH may use your contact details to inform you regularly for advertising purposes, in particular to send you product features, webinar information, practical tips and offers from the field of energy management via the e-mail address you have provided, and to carry out analyses by individually measuring, storing and evaluating opening and click rates in recipient profiles for the design of future newsletters. You can revoke your consent to the described advertising mailing at any time without giving reasons with effect for the future by clicking on the unsubscribe link provided at the end of each newsletter e-mail. Further information on the newsletter can be found under "Newsletter" in this privacy policy.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. b GDPR for your e-mail address, as this is required to grant access authorization for our tools. An additional legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR for the processing of the time of the request and your IP address.

The legal basis for the promotional use of your e-mail address is Art. 6 para. 1 sentence 1 lit. a GDPR and § 25 para. 1 TTDSG.

If a contract is subsequently concluded, the data will also be stored until the expiry of the statutory retention periods (6 years after the end of the year in which the contract was terminated) and then deleted, unless we are obliged to store the data for a longer period due to tax and commercial law retention and documentation obligations (from the German Commercial Code (HGB), German Criminal Code (StGB) or German Fiscal Code (AO)) or you have consented to further storage in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

With regard to the use of your email address for advertising purposes, you have the option of withdrawing your consent to the processing of your personal data at any time. You can declare your revocation by sending a message (e.g. by e-mail) to the controller named under Section I.

Online appointment booking

This website uses Calendly.com, a planning and organization tool for online appointments. This site offers an external platform for making appointments. The appointment scheduling function is integrated into the source code on our website via a script. By using the appointment scheduling tool, you automatically use the services of the American company Calendly LCC, 27117th St NW, Ste 1000, Atlanta, Georgia, 30363, USA. Data is transferred there for the security and documentation of ENIT Systems. The data collected includes: Name, Company, Email Address, Phone Number, Annual Electricity Usage, IP Address at time of appointment, agreed date and time. This data is not passed on to third parties and is only used for the administration and organization of appointments and for internal statistics. By using the appointment scheduling service, you agree that you consent to this. By using Calendly, data may also be transferred to the insecure third country USA, which does not offer an adequate level of data protection. Calendly uses the standard contractual clauses approved by the EU Commission to secure the third country transfer.

Here you can find further information from Calendly.com. Please be sure to read it. Please note, however, that the page is only available in English: calendly.com/privacy

III Recipients of data

In some cases, we use external service providers (processors) to process your data. These have been carefully selected and commissioned by us, are bound by instructions and are regularly monitored. These are external service providers who provide us with technical support (web hosts, programmers, providers of SaaS solutions). This is done on the basis of order processing contracts in accordance with Art. 28 GDPR.

Otherwise, we only pass on your data to third parties if

you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data, there is a legal obligation to disclose your data pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, or
this is legally permissible and necessary for the fulfillment of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.

Service providers in a third country are only commissioned if the special requirements of Art. 44 et seq. GDPR are fulfilled.

Transmission within the group of companies:

ENIT Energy IT Systems GmbH is a subsidiary of the proALPHA Group. Your data will not be transferred to third parties outside the proALPHA Group unless we are legally obliged to do so, the transfer of data is necessary for the execution of the contractual relationship or you have previously expressly consented to the transfer of your data. External service providers and partner companies will only receive your data if this is necessary to process your request. In these cases, however, the scope of the data transmitted is limited to the necessary minimum.
Certain services within our group of companies are provided centrally by individual companies. It is therefore possible that data may be passed on within the group as part of order processing, customer support, marketing campaigns or for internal administration and evaluation purposes. Only the data that is absolutely necessary for the purpose pursued in each case is transmitted and deleted after the purpose has ceased to apply and the statutory retention periods have expired.
We have ensured through internal agreements and rules of conduct that the integrity and security of data transmitted in this way can always be guaranteed.
Further information on the proALPHA group companies can be found HERE, a list of locations can be found HERE.

IV. Rights of data subjects

You have the right to

• to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details;
• in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us
• in accordance with Art. 17 GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims
• in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR
• in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller
• to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your habitual residence or place of work or the place of the alleged infringement.

V. Right to object

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation; this also applies to profiling based on these provisions. We will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

Of course, you can object to the processing of your personal data for the purposes of advertising and data analysis at any time. This also applies to profiling insofar as it is associated with such direct advertising.

IX. Data security

We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.

VII Right to withdraw consent under data protection law

In accordance with Art. 7 (3) GDPR, you have the right to withdraw your consent at any time. As a result, we may no longer continue the data processing based on this consent in the future. This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

VIII. Up-to-dateness of and changes to this privacy policy

Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can call up and print out the current data protection declaration at any time on the website under the following link.

Status: December 2023