Bischoff & Ditze Energy GmbH & Co. KG
Kreuzweg 7, D-20099 Hamburg, Germany
HRA-number: 122672, district court of Hamburg, Germany
fully liable general partner: Bischoff & Ditze Energy Verwaltungs GmbH, Hamburg, Germany
HRB-number 113509, district court of Hamburg, Germany
USt-Ident-number: DE 243 181 980
Represented by: Malte Mertens and Julia Pösl

E-Mail: info(at)bd-energy.com
Data Protection Officer: data-protection(at)bd-energy.com
Editorial responsibility: Malte Mertens mertens(at)bd-energy.com, Julia Pösl poesl@bd-energy.com

Legal note: Law and jurisdiction

This privacy policy applies to the Internet presence at the following addresses: www.energy-attribute-certificates.com; www.energy-attribute-certificates.de. In accordance with the territoriality principle of international law, this website and its contents are subject to German law: therefore, the place of jurisdiction is Germany. The location of the competent court is Hamburg, Germany.

What personal data do we process and when do we process it?

In the following cases, we process personal data from you:

a. When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information will be collected without your intervention and stored until automated deletion:

IP address of the requesting computer,
Date and time of access,
Name and URL of the retrieved file,
Website from which access is made (referrer URL),
the browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

In addition, we use cookies and analysis services when visiting our website. More information under “Analytic Tools”.

b. For questions of any kind, we offer you the opportunity to contact us via a form provided on the website. It is necessary to for you to provide a valid e-mail address, so we can answer your request. Further information can be provided voluntarily.

c. If you would like to send us an application (only electronically to: recruitung(at)bd-energy.com) to apply for an advertised position or to take initiative, we will process your submitted documents and personal data.
For unsolicited applications (only electronically to: recruitung(at)bd-energy.com), we need your name, address and other contact details, date and place of birth as well as nationality and qualification papers. In addition, you may provide us with other voluntary information that you think would be beneficial to substantiate an employment relationship.

Purposes of data processing

We only use the personal information provided by you. We solely use it for the agreed upon purposes and only to the extent required.

a. These data are processed by us for the following purposes:

Ensuring a smooth connection to the website,
Ensuring comfortable use of our website,
Evaluating system security and stability
and administrative purposes.

The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. Our legitimate interest follows from the data collection purposes listed above. In no case will we use the data collected for the purpose of drawing conclusions about you.

b. Data processing for the purpose of contacting us is in accordance with Art. 6 para. 1 p. 1 lit. b) GDPR on the basis of a pre-contractual measure. When a contract is achieved, the data can be included in our customer care system. The data will not be processed for any other purpose.

c. The data processing serves for the establishment and implementation of an employment relationship acc. Art. 88 DSGVO in conjunction with § 26 BDSG. If there is a positive decision, the personal data will be included in our personal file and will follow the purpose of our “employee management” procedure.

d. If, pursuant to Art. 6 para. 1 sentence 1 lit. a) DSGVO you have expressly consented, we use your e-mail address to regularly send you our newsletter.

If you have registered with us, we use your data for managing your account. In the event that a third party misuses your data and registers with this data without your knowledge, we use your data as a protection on our part in accordance with Art. 6 para P. 1 lit. b) GDPR.

Categories of recipients of personal data

A transfer of your personal data to third parties for purposes other than those listed below does not take place. We only share your personal information with third parties if:

You have explicitly given consent to this, according to Art. 6 para. 1 p. 1 lit. a DSGVO
the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f) DSGVO is required to assert, exercise or defend legal claims and there is no reason to assume that you have a legitimate interest in not disclosing your data,in the event that disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c) DSGVO is a legal obligation, it is legally permissible and according to Art. 6 para. 1 sentence 1 lit. b) DSGVO is required for the settlement of contractual relationships with you.

We will only transfer data to third countries, if you have given us your explicit consent.

Duration of personal data storage

a) Cookies are stored in your browser as so-called session cookies, so that your browser automatically deletes them after leaving the website. The duration of storage in this case is a characteristic of the browser and configuration that you are using.

b) Personal data sent to us in connection with a contact request on our website will only be stored for the duration of processing set request. When a contract is made, the information you provide can be stored in our customer care system on a regular basis for up to 10 years, unless there is another legal obligation that obliges us to retain it for a longer period of time.

c) The collected personal data will be collected for

a. A cancellation: and saved for at least three months. The longest storage period in this case is six months at most.
b. Employment: Our retention periods apply. The information that you are due to be given will be provided to you upon recruitment.

d) Your specified personal data will be stored until revoked.

e) Personal data sent to us in connection with a registration on our website will only be stored for the duration of your account. When a contract is made, the information you provide can be stored in our customer care system on a regular basis for up to 10 years, unless there is another legal obligation that obliges us to retain it for a longer period of time.

f) Miscellaneous

We point out that we will delete your data, if its storage is inadmissible (especially if the data is incorrect and a correction is not possible). If legal or actual obstacles stand in the way of a deletion (for example, special retention requirements based on commercial and tax regulations) the data will be blocked and public access will be deactivated.

Right of Objection

If your personal data is processed based on legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO, you have the right to file an objection against set processing of your personal data in accordance with Art. 21 DSGVO, if you can point to any reason arising from your particular situation or if the objection is directed against direct marketing/advertising. In the latter case, you have a general right of objection, which will be implemented by us regardless of any particular situation. If you would like to exercise your rights of revocation or objection with us, please send us an e-mail to data-protection(at)bd-energy.com

Right to Disclosure, Correction, Deletion, Restriction
The person or persons affected and depicted by the data are entitled to access their personal data and to rectification or erasure or restriction of data processing. Furthermore, they have the right to object to the processing of their data.

Right to transferability of data

The person or persons affected and depicted by the data are entitled to transferability of their data.

Status of the right of appeal to the supervisory authorities

You have the right to file a complaint with the appropriate regulatory authority.

Provision of personal data

There is no legal obligation for you to provide personal data. You are welcome to anonymize it or otherwise remove anything of personal relevance.

Automated decision making including profiling

Automated profiling with the aim of evaluating personal aspects may occur. We may use these profiling measures in the following cases:
Due to legal and regulatory requirements, we are committed to combat money laundering, financing terrorism and offences that endanger property. We analyse and evaluate our data in this context (which includes comparison and alignment with legally prescribed lists).

Cookies

We use cookies on our site. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not harm your device and do not contain viruses, Trojans or other malicious software.

The information stored within the cookie is a result of the interaction between our website and your specific device and setup in connection with the specific terminal used. However, this does not mean that we immediately become aware of your identity.

On the one hand, we use cookies to make the use of our website more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted after you leave our page.

To improve usability, we also use temporary cookies that are stored on your device for a specified period of time. When you then visit our site again to take advantage of our services, it will use this cookie to automatically recognize whether you have already been with us and what inputs and settings you have made, so you do not have to re-enter them.

On the other hand, we also use cookies for statistical evaluation of the use of our website in order to optimizing our offer (see Section 5). These cookies allow us to automatically recognize when you visit our site again that you have already been with us. These cookies are automatically deleted after a defined time.

The data processed by using cookies for the purposes mentioned are necessary to safeguard legitimate interests of us and of third parties according to Art. 6 para. 1 sentence 1 lit. f DSGVO.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that you are always notified before a new cookie is created. However, disabling cookies completely may mean that you cannot use all features of our website (to your satisfaction).

Analytic Tools

Tracking-Tools

The tracking measures listed below are used by us in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO. With the use of tracking measures, we want to ensure a continuous demand-oriented optimization of our website. We also use tracking measures to statistically record the use of our website and evaluate it for the purpose of optimizing our online presence. These interests are regarded to be justified within the scope of the aforementioned provision(s). The respective data processing purposes and data categories are explained in more detail in the sections about the corresponding tracking tools.

I. Google Analytics
Our site https://energy-attribute-certificates.com does not use Google Analytics.

II. Google Adwords Conversion Tracking
Our site https://energy-attribute-certificates.com does not use Google Adwords Conversion Tracking.

III. YouTube Videos
On some of our websites we embed YouTube videos. The corresponding plug-ins are operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page with the YouTube plug-in, it will connect to YouTube’s servers. YouTube will be informed about the pages you visit. If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally. This can be prevented by logging out of your YouTube account beforehand. If a YouTube video is started, the provider uses cookies that collect information about user behavior.
Anyone who has disabled the storage of cookies for the Google Ad program will not have to expect such cookies when watching YouTube videos. YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in the browser. For more information on data protection at “YouTube”, see the privacy policy of the provider at: https://www.google.de/intl/en/policies/privacy/

IV. Social Media Plug-Ins
We utilze Social Media Plug-Ins from the social networks Facebook, Twitter and Instagram in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO in order to expand brand awareness. The underlying commercial purpose is to be regarded as a legitimate interest within the scope of DSGVO. Responsibility compliance with data protection is to be guaranteed by their respective providers. The integration of these plug-ins by us is done by means of the so-called two-click method, in order to protect the privacy of visitors to our website in the best possible way.

V. Facebook
Our site https://energy-attribute-certificates.com does not use Social-Media Plugins from Facebook.

VI. Twitter
Our website contains plugins of the short message network Twitter Inc. (Twitter). The Twitter plugins (tweet button) on our site can be recognized by the Twitter logo. An overview of tweet buttons can be found here (https://about.twitter.com/resources/buttons).
When you visit a page of our website that contains such a plugin, a direct connection is established between your browser and Twitter’s servers. Twitter receives the information that you have visited our site with your IP address. If you click on the Twitter “tweet button” while logged in to your Twitter account, you can link the contents of our pages to your Twitter profile. This allows Twitter to associate your visit to our website’s pages with your user account. We point out that we as the provider of these pages are not aware of the content of the transmitted data nor of their use by Twitter.
If you do not want Twitter to know about your visit to our pages, please log out of your Twitter account. More information can be found in the privacy policy of Twitter (https://twitter.com/privacy).

VII. LinkedIn
We use components of the LinkedIn network on our site. LinkedIn is a service of the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time you visit a page of our website that includes such a component, this component causes the browser you are using to download a corresponding representation of set LinkedIn component.
Through this process, LinkedIn is informed about the specific page of our website is currently being visited. If you click the LinkedIn “Recommend Button” while logged in to your LinkedIn account, you can link the contents of our pages to your LinkedIn profile. As a result, LinkedIn is able to associate your visit to our pages with your LinkedIn user account.
We have no control over the information that LinkedIn collects or the extent of the information collected by LinkedIn. We also have no knowledge of the content of the data submitted to LinkedIn. For details about LinkedIn’s data collection, rights, and your options, please refer to the LinkedIn Privacy Notices. These can be found at http://www.linkedin.com/legal/privacy-policy

VIII. Google Fonts
Our site https://energy-attribute-certificates.com does not use Google Fonts.

Data security

We use the popular SSL (Secure Socket Layer) method for our site’s visits, in conjunction with the highest level of encryption supported by your browser. In general, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we’ll use 128-bit v3 technology instead. Whether a single page of our website is encrypted is shown by the closed representation of the key or lock icon in the lower status bar of your browser.
We also take appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

Up-to-dateness of and changes to our privacy policy

This privacy policy is current and is valid as of May 2018.
As a result of the further development and improvement of our website or the services thereof or due to changed legal or official requirements, it may be necessary to change this privacy policy. The current privacy policy can be accessed and printed on this page at any time.

Severability clause

If a provision of these terms and conditions is determined to be unlawful and/or unenforceable by any court or other competent authority, all other provisions will continue in effect. If any unlawful and/or unenforceable provision would be lawful or enforceable if part of it were deleted, that part will be deemed to be deleted, and the rest of the provision will continue in effect.