Privacy policy GOLDBECK SOLAR

Privacy policy

On May 25, 2018, the European General Data Protection Regulation (GDPR) came into force after a transitional period of 2 years. With the following information, we inform you about the scope and purpose of the processing of your personal data at GOLDBECK SOLAR and your rights.

I. What personal data is processed?
GOLDBECK SOLAR processes personal data that we receive from you as a contractual partner. This data is supplemented by personal data that we obtain from publicly accessible sources such as, in particular, the commercial register, the press and the media. If you submit an offer in response to a tender submitted by GOLDBECK SOLAR and / or receive or place an order for the provision of services, visit our homepage or the supplier portal, we collect and store the following information: – title, surname and first name
– a valid e-mail address
– address
– telephone number (landline and / or mobile)
– IP address of the requesting computer
– date and time of access
– name and URL of the retrieved file
– employer / position
– website
– business liability insurance
– tax ID
– account data
– and other information required for cooperation.

II. purpose of processing personal data
Your personal data will be processed by us for the purpose of – identifying you as our contractual partner
– informing you about new projects and giving you the opportunity to actively participate in tendering processes
– corresponding with you
– invoicing
– asserting contractual and legal claims III. Legal basis for data processing
Your personal data will be processed in compliance with the provisions of the Federal Data Protection Act (BDSG) and the General Data Protection Regulation (GDPR) in application of the following provisions: – to fulfill contractual obligations in accordance with Art. 6 para. 1 sentence 1 lit. b) GDPR
At your request or after commissioning for a specific project or other delivery and service, the data agreement is made for the purposes mentioned under II. and is necessary for the appropriate handling of the project and for the mutual fulfillment of obligations arising from the contract. – to safeguard the legitimate interests of GOLDBECK SOLAR pursuant to Art. 6 para. 1 lit. f) GDPR
The contractual relationship between you and GOLDBECK SOLAR, which has already been established in the past, justifies a legitimate interest of GOLDBECK SOLAR in the processing and transmission of your personal data within the GOLDBECK SOLAR group of companies for internal administrative purposes. The processing of your personal data is necessary in order to be able to continue to provide you with offers for possible projects and to continue the cooperation in the future. – on the basis of your consent pursuant to Art. 6 para. 1 sentence 1 lit. a) GDPR
If you have given GOLDBECK SOLAR your express or implied consent to the processing of personal data for specific purposes, the lawfulness of this processing is based on your consent. Any consent given can be revoked at any time. This also applies to the revocation of declarations of consent that you gave to GOLDBECK SOLAR before the EU General Data Protection Regulation came into force – i.e. before May 25, 2018. IV. Your rights
As a data subject within the meaning of the Data Protection Act, you have the right to withdraw your consent (pursuant to Art. 7 (3) GDPR)
You can withdraw your consent to GOLDBECK SOLAR at any time. GOLDBECK SOLAR may then no longer continue the data processing based on this consent in the future. – Right to information (pursuant to Art. 15 GDPR)
You can request information about your personal data processed by GOLDBECK SOLAR.

In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details. – to rectification (pursuant to Art. 16 GDPR)
You may request the rectification of inaccurate personal data or the completion of your personal data stored by GOLDBECK SOLAR without undue delay. – to erasure (pursuant to Art. 17 GDPR)
You may request the erasure of your personal data stored by GOLDBECK SOLAR, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims. – to restriction of processing (pursuant to Art. 18 GDPR)
You may request the restriction of the processing of your personal data if the accuracy of the data is contested by you, the processing is unlawful but you oppose the erasure of the data and we no longer need the data for our processing purposes, but you require it for the establishment, exercise or defense of legal claims or you have objected to processing pursuant to Art. 21 GDPR. – to data portability (pursuant to Art. 20 GDPR)
You have the right to receive your personal data, which you have provided to GOLDBECK SOLAR, in a structured, commonly used and machine-readable format or to request transmission to another controller – to lodge a complaint (pursuant to Art. 77 GDPR)
You can lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or the registered office of our company. V. Right to object pursuant to Art. 21 GDPR
If your personal data are processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR. This applies if there are reasons for this arising from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying the particular situation. If you wish to exercise your right to object, simply send an email to datenschutz@goldbecksolar.com VI. Storage and deletion
Your personal data collected by GOLDBECK SOLAR will be stored by us after the end of the business relationship until the end of 10 calendar years and then deleted, unless GOLDBECK SOLAR is obliged to store it for a longer period of time in accordance with Art. 6 para. 1 sentence 1 lit. c) GDPR due to tax or commercial law storage and documentation obligations.

Furthermore, longer storage may be necessary to preserve evidence within the framework of the statute of limitations. According to §§ 195 ff. of the German Civil Code (as of June 2018), these limitation periods can be up to 30 years. VII Disclosure of personal data by GOLDBECK SOLAR
GOLDBECK SOLAR will not disclose your personal data to third parties for purposes other than those listed below. GOLDBECK SOLAR will only pass on your personal data to third parties if: – You have previously expressly consented to the disclosure to third parties in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR;
– insofar as this is necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b) GDPR;
– in the event that the disclosure is necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. c) GDPR.
If we use contract data processors, we ensure through separate contracts (so-called contracts for contract data processing) that your data is protected by the processor in the same way as it is protected by us.

VIII. Transfer to other countries
The transfer of data to other countries only takes place in the context of cross-company processing by the GOLDBECK SOLAR Group, which actively participates in the international market. A transfer may also take place, among other things::- to certified recipients, in particular on the basis of Binding Corporate Rules (BCRS), EU Standard Data Protection Clauses (SCCs) (Art. 45 and 47 GDPR);
– on the basis of your consent previously given for this purpose (Art. 49 para. 1 p. 1 lit. a) GDPR);
– if the transfer serves to initiate or fulfill a contract (Art. 49 para. 1 sentence 1 lit. b) GDPR and Art. 49 para. 1 sentence 1 lit. c) GDPR);
– if this is necessary for the assertion, exercise or defense of legal claims (Art. 49 para. 1 sentence 1 lit. e) GDPR). IX. protection
Communication with GOLDEBCK by email is always encrypted, provided your server supports encryption. X. Online presences in social media
GOLDBECK SOLAR maintains online presences within social networks and platforms in order to communicate with business partners, interested parties and users active there and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply. Unless otherwise stated in our privacy policy, we process users’ data if they communicate with us within the social networks and platforms, e.g. write posts on our online presences and send messages. XI. Social media plugins
We use plugins from the social networks Facebook, Instagram, Twitter, Xing, YouTube and Kununu on our website on the basis of Art. 6(1)(f) GDPR in order to make our company better known and for reasons of analysis, optimization and the economic operation of our online offering. The underlying legal purpose is to be regarded as a legitimate interest within the meaning of the GDPR and the responsibility for data protection-compliant operation is to be guaranteed by the respective provider.

We integrate these plugins using the so-called 2-click method to protect visitors to our website in the best possible way.a) Facebook social plugins Our website uses social media plugins from the social network facebook.com, which is operated by Facebook Ireland Ltd, 4 Grand Central Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins can display interaction elements or content (e.g. videos, graphics or text contributions) and are recognizable by one of the Facebook logos (white “f” on a blue tile, the terms “Like”, “Gefällt mir” or a “thumbs up” sign) or are marked with the addition “Facebook Social Plugin”. The list and appearance of Facebook social plugins can be viewed here:https://developers.facebook.com/docs/plugins/.Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active). When you access a function of this online offer that contains such a plugin, your device establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your device and integrated into the online offering. User profiles can be created from the processed data. We therefore have no influence on the scope of the data that Facebook collects with the help of this plugin and therefore inform you according to our level of knowledge.by integrating the plugins, Facebook receives the information that you have accessed the corresponding page of the online offer. If you are logged in to Facebook, Facebook can assign the visit to your Facebook account. If you interact with the plugins, e.g. by clicking the Like button or leaving a comment, the corresponding information is transmitted directly from your device to Facebook and stored there. If you are not a member of Facebook, it is still possible for Facebook to find out your IP address and store it. According to Facebook, only an anonymized IP address is stored in Germany. The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights in this regard and setting options to protect your privacy can be found in Facebook’s data protection information: https://www.facebook.com/about/privacy/. If you are a Facebook member and do not want Facebook to collect data about you via this online service and link it to your member data stored on Facebook, you must log out of Facebook and delete its cookies before using our online service. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are adopted for all devices such as desktop computers or mobile devices. b) Instagram
Our online offering may use functions and content of the Instagram service offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA. This may include, for example, content such as images, videos or texts and buttons with which you as a user can express your liking and subscribe to the authors of the content or our posts.

If you are a member of the Instagram platform, Instagram can assign access to the above-mentioned content and functions to your profiles there. Instagram’s privacy policy: http://instagram.com/about/legal/privacy/. c) Twitter
Functions and content of the Twitter service, offered by Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, may be used within our online offering. This may include, for example, content such as images, videos or texts and buttons with which you as a user can express your liking and subscribe to the authors of the content or our posts. If you are a member of the Twitter platform, Twitter can assign access to the above-mentioned content and functions to your profiles there. Twitter’s privacy policy: https://twitter.com/de/privacy. Twitter is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active). Privacy policy: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization. d) XING
Our website also uses plugins from XING, offered by XING SE, Dammtorstraße 30, 20354 Hamburg, Germany. This may include, for example, content such as images, videos or texts and buttons with which you as a user can express your approval by sharing and commenting on the content via XING. You can also use the button to gain access to the GOLDBECK SOLAR presence on XING. If you are a member of XING, XING can assign access to the above-mentioned content and functions to your profile there. You can find XING’s privacy policy at https://privacy.xing.com/de/datenschutzerklaerung. e) YouTube
Our online offering also includes plugins from YouTube, offered by YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066, USA, represented by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This may include, for example, content such as images, videos or texts and buttons with which you as a user can express your liking by sharing and commenting on the content via YouTube. You can also use the button to gain access to the GOLDBECK SOLAR presence on YouTube. If you are a YouTube member, YouTube can assign the access to the above-mentioned content and functions to your profile there. You can find YouTube’s privacy policy at: https://policies.google.com/privacy?hl=de&gl=de f) Kununu
Our website also uses plugins from Kununu, offered by kununu GmbH, Neutrogasse 4-8, Top 3.02, 1010 Vienna, Austria. This may include, for example, content such as images, videos or texts and buttons with which you as a user can express your approval by sharing and commenting on the content via Kununu. You can also use the button to gain access to the GOLDBECK SOLAR presence on Kununu.

If you are a member of Kununu, Kununu can assign access to the above-mentioned content and functions to your profile there. You can find Kununu’s privacy policy at: https://privacy.xing.com/de/datenschutzerklaerung XII. Google Analytics
Our website uses Google Analytics, a web analysis service of Google Inc (“Google”). This tracking measure used by GOLDBECK SOLAR is carried out on the basis of Art. 6 para. 1 sentence 1 lit. f) GDPR. The legitimate interests of GOLDBECK SOLAR within the meaning of the aforementioned provisions serve the purpose of enabling a needs-based design and the continuous optimization of our website. In addition, the use of Google Analytics enables us to statistically record the use of our website and optimize our offer. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. You can prevent the installation of cookies by selecting the appropriate settings in your browser software. We would like to point out that in this case you may not be able to use all the functions of our website to their full extent. By using our website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. You can object to the collection and use of your IP address by Google Analytics at any time with effect for the future. You can find more information on this at tools.google.com/dlpage/gaoptout. Please note that on this website Google Analytics has been extended by the code “gat._anonymizeIp();” to ensure anonymized collection of IP addresses. Further information on the use of data by Google Inc. can be found at: https://support.google.com/analytics/answer/6004245?hl=de XIII. Hubspot CRM
We use Hubspot CRM on this website. The provider is Hubspot Inc. 25 Street, Cambridge, MA 02141 USA (hereinafter Hubspot CRM). Hubspot CRM enables us, among other things, to manage existing and potential customers and customer contacts. With the help of Hubspot CRM, we are able to record, sort and analyze customer interactions via email, social media or telephone across various channels.

The personal data collected in this way can be evaluated and used for communication with the potential customer or for marketing measures (e.g. newsletter mailings). With Hubspot CRM, we are also able to record and analyze the user behavior of our contacts on our website. The use of Hubspot CRM is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the most efficient customer management and customer communication possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time. Details can be found in Hubspot’s privacy policy: https://legal.hubspot.com/de/privacy-policy. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.hubspot.de/data-privacy/privacy-shield. XIV Changes to this privacy policy
This privacy policy was last updated in June 2018 and is currently valid. Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this privacy policy. The current privacy policy can be viewed on the website at

can be called up and printed out by you.