Data protection

General

Thank you for your interest in our company. Your privacy is important to us and you should always feel safe and comfortable when visiting our website. That is why we have put both technical and organisational measures in place to ensure we observe the relevant legislation at all times. This document describes the information we may collect and how we handle it.

I. Controller and Data Protection Officer

RWE Aktiengesellschaft
RWE Platz 1
45141 Essen
P +49(0)201-51790
F +49(0)201-51795005
E-Mail RWE Aktiengesellschaft

is responsible for the content and services made available on this website and therefore controller of personal data within the meaning of Art. 4 No. 7 of the General Data Protection Regulation (GDPR).

You can reach our data protection officer at:

RWE Aktiengesellschaft
Data Protection Officer
RWE Platz 6
45141 Essen
E-Mail dataprotection@rwe.com

II. Provision of the website and logfiles

In the following, we will inform you how we process your personal data in connection with the provision of the website and creation of log files.

1. Which of your personal data is used by us? 

Every time you visit our website, our system automatically collects data and information from the system of the accessing device. In addition to non-personal data (e. g. the domain name of the website which you came from; the websites that you visited on our domain; the names of the retrieved files, incl. date and time of the retrieval; the name of your Internet service provider; and, if applicable, the operating system and browser version of your device; host name of the accessing device; language settings), your IP address is processed.

2. What are the sources of the data?

The data is collected from you by being automatically transmitted by your device to our system.

3. What do we process your data for and on what legal basis?

The data is first collected in order to make the website technically available. In this case the legal basis is Art. 6 para. 1 lit. f) GDPR.

In addition, we store the data - in pseudonymised form in log files - for security purposes, in particular to recognise and counteract attacks on our website, for statistical purposes and to optimise our Internet presence. In these cases the processing is based on Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is to guarantee the above mentioned purposes.

4. To whom will your data be passed on?

In certain cases, the data may be passed on to other Group companies. In addition, we use external service providers who may also receive personal data in the course of performing their duties. In these cases, we ensure that your personal data is processed in accordance with the provisions of the GDPR and the German Federal Data Protection Act.

As a matter of principle, your data will not be passed on to other third parties, unless we are obliged to do so by legal or official orders.

5. How long will your data be stored?

We store the data for a period of 30 days.

6. Is there an obligation to provide your data? 

There is no legal or contractual obligation to provide the data. If you do not provide the data, it is not possible to use the website to its full extent.

III. Web analysis and web optimisation using cookies and pixels 

We use cookies and pixels on our website. Cookies are text files that contain a characteristic string of signs, pixels are graphic elements. They enable a unique identification of the device. They are stored in the Internet browser or by the Internet browser on the user's device system when the website is accessed. When the website is opened again, the device system can be identified in this way and certain information can be transferred automatically.

The information that is stored via cookies fulfils various functions. We categorise them as follows:

  • Essential Cookies 
  • Analytical Cookies 
  • Convenience Cookies

1. Which of your personal data is used by us?

Depending on the service used, we collect different personal data. You can find a list of data involved in individual cases here.

2. What are the sources of the data?

All data that we collect in the form of cookies and/or pixels originate from you.

3. What do we process your data for and on what legal basis?

Depending on the service used, we pursue different purposes. The first time you visit our website, you will be asked to select which services you wish to allow. Here you have the possibility to view and adapt your selection.

a. Essential Cookies 

Essential cookies are required for the technical operation of our website and to ensure its stability. When you visit our websites, a dedicated banner informs you about the use of cookies and refers you to this data protection information.

The data collected from you in this way is pseudonymised by technical precautions and is not stored together with other personal data of yours. Hence we can no longer assign the data to you personally.

Processing your data as identified above is necessary to safeguard the legitimate interests of RWE in accordance with Art. 6 para 1 (f) GDPR, and is justified by the balance of interests in favour of RWE. Some functions on our website will not work without the use of these cookies. It is essential that your browser is still recognised when you move on to a different page. RWE also has a legitimate interest in processing your personal data as identified above — in other words, to communicate relevant information about our intentions and business activities by operating our own websites as intended. Although you have a justifiable interest in not having the above data used for this purpose, this does not outweigh the legitimate interest of RWE, since RWE uses this data appropriately and in accordance with the stated purpose, and you also have an interest in enjoying a customer-friendly access to our website.

You have the right to object at any time to the processing of your data on the basis of a balancing of interests, if your particular situation provides grounds for objection. Please refer to the section on objections in this regard.

b. Analytical Cookies

We also use cookies on our website that let us analyse the browsing behaviour of our users. Analytical cookies help us to analyse the website and thus measure and improve the performance of our web pages. We use cookies for the purpose of “audience reach measurement”. They are used to create statistical profiles which cannot be traced back to individual users, but merely to groups. We can analyse visitor and click behaviour as well as the demographic characteristics of website users. See the list of cookies and pixels here for details of the analytical cookies we use, and the opportunity to opt out of all or specific cookies and pixels. The data collected about you in this way is pseudonymised by technical means to ensure it can no longer be attributed to you. This data is not stored with other personal details we collect from you.

When you visit our websites, you will be informed via a dedicated banner about our use of cookies, referred to this data protection information and asked for your consent pursuant to Art. 6 para 1 lit. a) GDPR to process the personal data collected in this context. Your consent provides the legal basis for us to process personal data for analytical purposes using cookies and pixels. You will also be advised how you can block the storage of cookies in your browser settings.

You are entitled to withdraw this consent at any time with future effect. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. The easiest way to withdraw your consent is to set the relevant opt-out cookie/pixel via our cookie and pixel list here.

c. Convenience Cookies

The category of convenience cookies may include marketing and miscellaneous cookies. Marketing cookies help us to offer you personalised advertisements on and outside rwe.com that are tailored to your interests. Miscellaneous cookies within the convenience category enable us to provide you with additional features on our website, e. g. location services, which enhance your experience and make your visit even more comfortable. The complete list of cookies and pixels used can be viewed here.

When you visit our websites, our so-called consent banner informs you about the use of convenience cookies by referring to this data protection information. If you agree to the processing, click on this cookie category and thereby give your consent, which serves as a legal basis, in accordance with Art. 6 para. 1 lit. a) GDPR.

The created usage profiles are pseudonymised and only then processed. This means that we can only assign the analysed advertising interests to the pseudonym, but not to you personally.

4. To whom will your data be passed on?

In certain cases, the data may be passed on to other Group companies. In addition, third-party companies that offer the respective cookie will receive your data within the scope of data processing on our behalf pursuant to Art. 28 GDPR.

5. How long will your data be stored?

We use two types of cookies: persistent cookies and session cookies. A persistent cookie lasts beyond the current session and will stay on your browser until they expire or you delete them. Session cookies last only as long as the session (usually the current visit to a website or a browser session). Third parties, such as our customers, partners and service providers may also use cookies in connection with our Services. The list will inform you in detail about the storage.

6. Is there an obligation to provide your data?

There is no obligation to provide the data. However, the essential cookies are necessary for the website to function properly.

7. Your rights with regard to cookies 

In addition to the rights mentioned under point X, you have the right:

  • to object to the use of the essential cookies at any time.
  • to withdraw your consent regarding the analytical and convenience cookies used by us click here.

IV. Contact form

On our website you have the possibility to contact us via a form. In the following we explain to you how we process your data in this context.

1. Which of your personal data is used by us?

We process the data you provide in the respective form, i. a.:

  • Salutation/Title
  • Name,
  • E-mail,
  • Address,
  • Phone number,
  • Company.

In addition, you have the possibility to provide us with further data via a free text.

2. What are the sources of the data?

You enter the data into the form yourself.

3. What do we process your data for on what legal basis?

We process the data to answer your inquiry. The legal basis of the processing is your consent under Art. 6 para. 1 lit. a) GDPR, which you grant implicitly by submitting the request.

4. Whom will your data be passed on to?

We will pass your data on to the Group company responsible for your request. In addition, we use service providers in certain cases who may also receive your data.

5. How long will your data be stored?

The data will be stored as long as necessary to answer your request. In addition, your data will be stored within the legal retention periods.

6. Is there an obligation to provide your data?

There is no obligation to provide the data. Without the data, we are not able to answer your inquiry.

7. Right to withdraw your consent

Within the scope of using the contact form you have the rights mentioned under point IX.

V. Social media channels

We have set up and maintain corporate websites and channels on various social networks and process your personal data to actively communicate with you and provide you with additional information about us.

The social media portals and channels are not run by us, but by the respective operators under their own responsibility in the meaning of data protection regulations. Therefore we have no influence on the data collected and processed by the operator, nor are we aware of the full scope of data processing, its purposes of processing or storage periods.

In certain cases we process your data with the operator of the social medium in joint controllership pursuant to Art. 26 GDPR.

We draw your attention to the fact that, when using social media, your data may be processed outside the European Union (“EU”) and the European Economic Area (“EEA”) (in the so-called "third countries"), where the level of data protection does not correspond to that in the EU. This may result in certain risks as, for example, it may be more difficult for you to exercise your rights.

For detailed information on the processing activities conducted by the operators of the social media as well as the opt-out options, we kindly refer to their data protection policies and statements:

As far as we have information about the data processing activities that concern you, we inform you about it in the following:

1. Which of your personal data is used by us?

In the following a listing of the data which may be processed: inventory data (e. g. names, addresses), contact data (e. g. e-mail, telephone numbers), content data (e. g. entries in online forms), usage data (e. g. websites visited, interest in content, access times), meta/communication data (e. g. device information, IP addresses, time stamps, consent status).

We would also like to point out that social media operators generally collect data about your usage behavior and interests.

2. What are the sources of the data?

The data usually originates from you. Whether and in which cases the social media operators also process your data from other sources is beyond our knowledge.

3. What do we process your data for and on what legal basis?

By presenting our company in social media, we would like to actively communicate with you and offer you the opportunity to inform yourself about our products and services in this way. This constitutes our legitimate interest, which also serves as the legal basis for the processing of your data pursuant to Art. 6 para. 1 lit. f) GDPR.

The social media operators will commonly use your data for market research and advertising purposes.

4. Whom will your data be passed on to?

We pass the data on to other companies within the RWE Group. We do not pass on data to third parties. However, we do not have any information about who the respective social network may pass on your personal data to.

5. How long will your data be stored?

The storage duration of your data with the social media operators for their own purposes is beyond our knowledge.

6. Is there an obligation to provide your data?

There is no obligation to provide the data. However, if you do not provide the data, you may in certain cases not be able to take full advantage of our offer on social media.

VI. Links to other Websites

The RWE websites contain links to other websites. As the provider of our websites, we are solely responsible for the content of our own online presence. A distinction must be made between our own content and the content provided by other providers, for which we cannot accept any responsibility and do not adopt their content as our own. We have no influence on whether the website operators linked to us adhere to the relevant data protection regulations. This declaration on data protection therefore does not apply to the websites of other providers, even if you access them via links on our website. Please therefore observe the respective data protection regulations of the other providers. We therefore accept no liability for the content of other websites. In the event that you should notice a relevant violation, we thank you for informing us. We will then remove the link after checking it, if necessary.

VII. Does automated decision-making including profiling take place?

No automated decision-making including profiling takes place.

VIII. Is your data transferred to countries outside the European Union?

We also use service providers located in third countries outside the EU and the EEA to process your data. To protect your personal data, we conclude standard data protection clauses provided by the EU Commission with service providers in third countries. These clauses provide appropriate safeguards for the protection of your data with service providers in the third country.

You have the opportunity to request further information and to receive copies of the relevant agreements at any time. You can reach us at the contact details mentioned under point I.

IX. What rights do you have in connection with the processing of your data?

1. Right of access

You may request confirmation from the controller as to whether personal data concerning you is being processed.

You also have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

2. Right to rectification

You have the right to ask the controller to rectify and/or complete the data, if the personal data processed concerning you is incorrect or incomplete. The controller shall make the correction without delay.

3. Right to restriction of processing

Under the conditions stipulated by the law, you may request that the processing of personal data concerning you be restricted.

4. Right to erasure

You may request the controller to delete the personal data concerning you and the controller is obliged to delete such data immediately, unless an exception is provided for by law.

5. Right to data portability

You have the right to obtain your personal data, in a structured, commonly used and machine-readable format, which you have provided to the controller and the processing of which is based on consent or on a contract with you.

In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly from one controller to another, as far as this is technically feasible. The freedoms and rights of other persons must not be affected by this.

6. Right to withdraw your consent

You have the right to withdraw your data protection declaration of consent at any time. Withdrawal of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until withdrawal. In this case, all personal data stored on the basis of the consent will be deleted, unless the law provides another legal basis for further storage.

7. Right to object

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data relating to you which is carried out pursuant to Art. 6 para. 1 lit. e) or f) GDPR, including profiling based on these provisions.

If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time, including profiling, insofar as it relates to such direct marketing. In the event of an objection, the personal data concerning you will no longer be processed for these purposes.

In order to declare your withdrawal, please contact us using the contact details given under point I.

8. How to exercise your rights

To exercise your above rights, please contact us using the contact details provided under point I.

If you want to withdraw your consent regarding the Google services, you can change this setting here.

9. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state in which you are resident, your place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you is in breach of the relevant data protection rules.

To make it easier for you to assert your rights, you will find below the contact details of the supervisory authority responsible for us:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia 
PO Box 20 04 44
40102 Düsseldorf 
T: +49 211 38424 0
F: +49 211 38424 10
E-mail: poststelle@ldi.nrw.de

An overview of the data protection supervisory authorities with their contact information is available on the following website of the European Data Protection Board.