Scroll to Top
Right Arrow

Data protection

We, Co-Power Energy GmbH (hereinafter the “company”, “responsible person, “we” or “us”) take the protection of your personal data seriously and would like to take this opportunity to inform you about data protection in our company. We treat your personal data confidentially and in accordance with legal data protection regulations and this privacy policy.

We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may have security gaps. It is not possible to completely protect data from access by third parties.

I. General information

1. Responsible person

The body responsible for data processing within the meaning of the General Data Protection Regulation and other national data protection laws of the member states of the EU as well as other data protection regulations is: CO-Power Energy GmbH (i.G.) Wilhelmstraße 25, 80801 Munich

2. Data protection officer

We are currently not required by law to appoint a data protection officer.

3. Categories of affected persons

Site users

4. Categories of personal data

Data that you voluntarily submit to us for the purpose of initiating contacts and executing the contract (Art. 6 para. 1 lit. b) GDPR):

The contact form shows which data is collected; in particular, it concerns the following categories of personal data:

  • Inventory data (e.g. names).
  • contact details (e.g. e-mail, telephone numbers).
  • Individual written messages (text form).

As well as data collected in connection with the operation of the website as such (Art. 6 para. 1 lit. a) or lit. f) GDPR):

  • Website usage data (e.g. interest in content, access times).
  • Website meta/communication data (e.g. device information, IP addresses, behavior on the website, referrer URL).

5. Legitimate interests

Below, we will explain to you in detail our processing purposes and the individual legal bases. Overall, however, we may process all collected data insofar as it is necessary to protect our legitimate interests (Art. 6 para. 1 lit. f) GDPR). These legitimate interests include in particular:

  • fraud prevention
  • risk management
  • marketing, as permitted by law
  • Enforcement of legal claims and legal defense
  • enforcing the terms of our sites and services;
  • managing our normal business requirements, such as monitoring, analysis, service optimization;
  • Anonymization for statistical purposes

II. Processing purposes and legal bases

1. Use of the website

On the website, Co-Power Energy GmbH presents its services in particular in the area of financing and operating solar systems and battery storage systems for commercial and industrial companies and offers contact information by filling out and sending a contact form. In particular, the following data is processed:

  • User inventory data, contact details and account data
  • Meta/communication data.

Processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR, as data processing is a prerequisite for the provision of services by Co-Power Energy.

2. Contact

When you contact us (e.g. via contact form or email), personal data is collected. The contact form shows which data is collected when using a contact form. This data is stored and used exclusively for the purpose of answering your request or contacting you and for the associated technical administration.

Processing is carried out in accordance with Art. 6 para. 1 lit. b DSGVO, as data processing is a prerequisite for the provision of services by Co-Power. The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after your request has been processed. This is the case if it can be inferred from the circumstances that the matter in question has been finally clarified and, provided that there are no legal storage obligations to the contrary, is nergy.

III. Categories of recipients: general

The following categories of recipients, including contract processors, may have access to your personal data:

  • Government agencies/authorities, insofar as this is necessary to comply with a legal obligation. The legal basis for the transfer is then Art. 6 para. 1 lit. c GDPR;
  • Persons employed to carry out our business operations (in particular auditors, banks, insurance companies, legal advisors, supervisory authorities, parties involved in company acquisitions or the establishment of joint ventures, IT service providers, auditors, logistics companies, credit institutions). The legal basis for the transfer is then Art. 6 para. 1 lit. b or lit. f GDPR.

In addition, we will only share your personal data with third parties if you have given your express consent in accordance with Article 6 (1) (a) GDPR.

IV. International data transfer

Your personal data is processed exclusively within the EU/EEA.

V. Rights of the person concerned

Your personal data protection law grants you comprehensive data subject rights (rights of information and intervention) vis-à-vis the person responsible with regard to the processing of your personal data, which we inform you of below: Data is processed exclusively within the EU/EEA.

1. General

Right to information in accordance with Article 15 GDPR: In particular, you have the right to information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to correction, deletion, restriction of processing, objection to processing, complaint with a supervisory authority , the origin of your data, if it was not collected from you by us, the existence of automated decision-making, including profiling and, if applicable, meaningful information about the logic involved and the scope of such processing and the intended effects of such processing, as well as your right to be informed what guarantees exist in accordance with Article 46 GDPR when transferring your data to third countries;

Right to correction in accordance with Article 16 GDPR: You have the right to immediate correction of incorrect data concerning you and/or to complete your incomplete data stored by us;

Right to deletion in accordance with Article 17 GDPR: You have the right to request the deletion of your personal data if the requirements of Article 17 (1) GDPR are met. However, this right does not exist in particular if processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

Right to restrict processing in accordance with Article 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data that you have disputed is verified, if you refuse to delete your data due to unlawful data processing and instead request that the processing of your data be restricted if you need your data to assert, exercise or defend legal claims after we no longer need this data after we have achieved the purpose or if you have filed an objection for reasons relating to your particular situation, as long as it is not yet clear whether our legitimate reasons prevail;

Right to information in accordance with Article 19 GDPR: If you have asserted the right to correct, delete or restrict processing against the person responsible, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.

Right to data portability in accordance with Article 20 GDPR: You have the right to receive your personal data, which you have provided to us, in a structured, common and machine-readable format or to request transmission to another person responsible, insofar as this is technically feasible;

Right to withdraw consent given in accordance with Article 7 (3) GDPR: You have the right to withdraw consent given to the processing of data at any time with effect for the future. In the event of withdrawal, we will immediately delete the data concerned, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the withdrawal;

Right to lodge a complaint in accordance with Article 77 GDPR: If you believe that the processing of personal data concerning you is contrary to the GDPR, you have - without prejudice to any other administrative or judicial remedy - the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

2. RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION. IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS. IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING AT ANY TIME. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE. IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

VI. Duration of storage of personal data

The duration of storage of personal data is based on the respective legal basis, the purpose of processing and — if applicable — also on the basis of the respective legal retention period (e.g. commercial and tax retention periods). In addition, we store your personal data for the duration of the regular limitation period of three (3) years.

When processing personal data on the basis of express consent in accordance with Article 6 (1) (a) GDPR, this data is stored until the person concerned withdraws his consent.

If there are legal storage periods for data that are processed as part of legal or transactional obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data is routinely deleted after expiry of the retention periods, provided that it is no longer necessary to fulfill or initiate a contract and/or there is no legitimate interest on our part in continuing to store it.

When processing personal data on the basis of Article 6 (1) (f) GDPR, this data is stored until the data subject exercises his right of objection under Article 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for direct marketing purposes on the basis of Article 6 (1) (f) GDPR, this data is stored until the person concerned exercises his right of objection in accordance with Article 21 (2) GDPR.

Unless otherwise stated in the other information in this statement about specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.