MVV Energie AG
We appreciate your interest in our company and our products and services. We would like you to feel secure when you visit our website, not least with regard to the safety of your personal data. Protecting your personal data is a matter we take very seriously. We naturally comply with the requirements of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
Contact details for the responsible body and the Data Protection Officer
Data Protection Officer
MVV Energie AG
Your direct way to the individual topics
General information on the scope and purpose of personal data processing
Personal data is information about your personal and material circumstances. This includes information such as your name, address, telephone number and e-mail address. In general, you do not need to actively disclose any personal data to use our websites.
When you visit our website, we store the following data in anonymised form: the name of your internet provider, the number of visits you make to our website per day and week, the number of visits per page, the average time spent per page, the number of feedbacks and the website from which you visit us. This data is evaluated to ensure the trouble-free operation of the website and to improve our services.
No personal user profiles are compiled using this data.
If you use our services, we will only collect that data (e.g. your name and address) we need to provide these services. If we ask you for additional data, you provide this on a voluntary basis.
Purpose of processing
We will process (in particular collect, use and store) your data for the following purposes:
- a)To respond to your enquiries, process your orders, or provide you with access to specific information or offerings (Art. 6 (1) b) GDPR).
- b) To protect our legitimate interests and those of third parties, particularly of companies within the MVV Energie Group, also for advertising or market research, to improve services and offerings of customised products, for credit checks, or to investigate or prevent criminal actions such as electricity theft (Art. 6 (1) f) GDPR).
- c) To the extent that you have given us your consent (Art. 6 (1) a) GDPR).
- d) Due to legal requirements to which we as a company are subject, and in particular the requirements of commercial and tax law, the German Energy Industry Act and the German Metering Operation Act. (Art. 6 (1) c) GDPR).
Forwarding of personal data
If we need to do so to process your enquiries or perform our services for you, we will forward the personal data we have collected to the legally permissible extent (e.g. for order processing) to recipients in the following categories:
- Customer support service providers
- Banks, payment service providers, debt collection agencies and legal firms
- IT, postal and other communications service providers
- Other companies within the MVV Energie Group
- Public bodies and organisations (e.g. supervisory authorities, social security agencies, tax authorities, investigative authorities).
Your data will otherwise only be forwarded if you have consented to this in advance. With regard to the consent you may provide to the use of marketing, statistical and preference cookies (see Information about cookies and tracking) and the associated forwarding of data to third parties, we point out that the processing of this data, if such takes place outside the EU or a secure third country, is performed in accordance with the provisions set out in the judgement of the European Court of Justice dated 16.07.2020 (Case C-311/18), the so-called Schrems II Judgement. These include agreeing standard contractual clauses (SCC) with the respective company and reviewing more far-reaching guarantees to ensure that users’ personal data continues to be protected.
Duration of storage
If you or a third party have communicated your data to us, we will only process it from the time at which it is collected. We delete the data thereby collected as soon as storage is no longer required or limit the processing of the data if statutory retention applies.
You are at all times entitled
- a) To request confirmation as to whether personal data concerning you are being processed by us (Art. 15 GDPR)
- b) To request information as to which personal data concerning you we are processing (Art. 15 GDPR)
- c) To request the rectification, deletion or restriction in the processing of personal data concerning you (Art. 16 – 18 GDPR)
- d) To exercise your right to data portability (Art. 20 GDPR)
- e) To object to the processing of personal data concerning you (Art. 21 GDPR).
Furthermore, you are entitled to lodge a complaint with the responsible supervisory body.
Right to withdraw consent already provided
If you have already consented to us processing your data, you are at all times entitled to withdraw this consent with future effect.
That also applies to the withdrawal of declarations of consent you provided to us before the GDPR came into effect on 25 May 2018. The withdrawal of consent applies to the future and does not alter the legitimacy of data processing through to the withdrawal of consent. If you would like to withdraw your consent, then please write to MVV or send an e-mail to email@example.com.
Right to object
You are at all times entitled to object on grounds relating to your particular situation to the processing of personal data concerning you on the basis of Art. 6 (1) e) or f) GDPR; the same applies for any profiling performed on the basis of these requirements.
If we process personal data to perform direct advertising, you are at all times entitled to object to the processing of personal data for the purposes of such advertising; the same applies for any profile to the extent that this relates to such direct advertising.
To exercise your right to object, you can simply refer to the contact options provided in the imprint. Furthermore, in connection with use of information society services, and irrespective of Directive 2002/58/EC, you are entitled to exercise your right to object by way of automated processes using technical specifications.
Should you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate reasons for processing which override the interests, rights and freedoms of the person concerned or the processing serves to assert, exercise or defend legal claims.
If you object to processing for direct advertising purposes, we will no longer process your personal data for these purposes.
Furthermore, you are entitled to object on grounds relating to your particular situation to the processing of personal data that we process for scientific or historic research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR, unless such processing is necessary for a task that is in the public interest.
Additional information about specific website offerings
Recordings of telephone calls for quality control purposes
We record some telephone calls for quality control purposes and to improve contacts between our employees and our customers. At the beginning of the call, we ask whether you consent to such recording pursuant to Art. 6 (1) a) GDPR. The recordings serve as evidence that no incorrect information was provided. In individual cases, we also use them to improve the quality of our customer service, i.e. for training (coaching) our employees.
If no recording is made because you do not consent to such, then we take the liberty of documenting the course of the conversation in writing (phone memo). This too involves personal data processing, which enables us to handle your enquiry more systematically or avoid having to ask for the same information in subsequent conversations. Should you not have consented to the conversation being recorded, then these written records also serve as evidence that no incorrect information was provided. In formal terms, the legal basis is provided by our legitimate interest pursuant to Art. 6 (1) f) GDPR. Within MVV, access to your data is granted to those departments which require the data to fulfil the processing purpose. Your data is otherwise not forwarded unless this is necessary to fulfil the processing purpose. The records are automatically deleted after 28 days. You may at any time withdraw your consent free of charge and with future effect. Please send notification of such withdrawal of consent by mail to: kontakt@. mvv.de
By registering for the Newsletter, you agree to receive information about the latest products, offers and news at MVV Energie in the form of an electronic newsletter.
If you provide us with your e-mail address, we will first send you a validation link. Please click this link to be included in the Newsletter mailing list. Any data you give in addition to your e-mail address is provided on a voluntary basis. This may serve, for example, to clarify your form of address or to select the type of Newsletter. In addition, you agree that the following information is collected each time a newsletter is sent: Registration for the newsletter mailing, sending the mailing, opening the mailing, click within the mailing. Your data will be passed on to DYMATRIX CONSULTING GROUP GmbH, Stuttgart for processing purposes. You can at all times and at no expense withdraw your consent with effect for the future. To do this, please click either on the deregistration link at the end of each electronic newsletter or send a brief message to kontakt@. mvv.de
If you deregister, you will no longer receive our Newsletter in future. Upon deregistration, we delete the data provided for that purpose from our system, unless other forms of data processing are legitimate.
By taking part in our sweepstakes, you consent to MVV potentially publishing your first name and surname if you are the winner.
Furthermore, the personal data thereby collected is used exclusively to identify the winner and to forward the winnings and is deleted after the sweepstake unless other forms of data processing are legitimate.
Contact by e-mail or otherwise
If you take up contact with us by mail or in another way (e.g. handing over a business card, by telephone), we will store the data you provide to us (your e-mail address, possibly your name and telephone number) for the purpose of responding to your questions. By sending your contact enquiry, you consent to the data you send (such as e-mail address and name) being processed for the purpose of responding to your enquiry and to enable us to contact you pursuant to Art. 6 (1) b) and Art. 6 (1) f) GDPR (balancing of interests).
Your personal data will be used solely for the purpose stated and only stored for as long as is necessary to fulfil this purpose. If we are required to comply with statutory retention periods, the processing of your data will be restricted once the original purpose has been fulfilled.
We use numerous online forms to enable you to contact us or draw on our services. If you contact us using an online form, we will store the personal data you provide to us for the purpose of responding to your questions. By sending your contact enquiry, you consent to the data you send (such as e-mail address and name) being processed for the purpose of responding to your enquiry and to enable us to contact you pursuant to Art. 6 (1) b) and Art. 6 (1) f) GDPR (balancing of interests).
Your personal data will be used solely for the purpose stated and only stored for as long as is necessary to fulfil this purpose. If we are required to comply with statutory retention periods, the processing of your data will be restricted once the original purpose has been fulfilled.
Online services for private and business customers
When you register, we will first send you a validation link by e-mail. Please click on this link to complete the registration of your user account for our online services.
Energy Cockpit customer portal
The storage period for the data collected generally depends on the contractual relationship and any statutory retention requirements. Should you have any questions concerning the exact provisions for individual data, then we are pleased to refer you to your rights as the party affected, and in particular to your right to information (see below).
MVV B2B Online Shop
The MVV B2B Online Shop creates, amends and provides offerings to customers. This may also involve collecting and processing personal data from contact partners, for example for customer registration purposes, to compile offer documentation or to handle the necessary correspondence.
The processing serves to simplify the purchase process for customers and MVV. All processing activities are necessary for the performance of the contract or to take steps prior to entering into the contract (Art. 6 (1) b) GDPR).
Applications and applicant pool
By sending your application documents (by e-mail or by post) or uploading them to our applicant portal, you provide us with your personal data for a specific application for the purpose of participating in the application process. Your data is processed on our systems. During the application process, we will store information which includes the following personal data: first name, surname, residential address, e-mail address, telephone numbers, cover letter, letter of motivation, curriculum vitae, certificates, references and information provided in job interview. If we invite you to an interview, this may also be held digitally via video transmission (image and video). We do not make image and audio recordings of interviews.
If you communicate special categories of personal data to us in your application documents, this information is only considered and processed if you have provided your consent to such. Due to our compliance with the General Equal Treatment Act (AGG), we aim to assess all applicants solely in terms of their qualifications for the positions on offer. Where possible, please avoid making disclosures on special categories in your application. This does not apply to information about existing severe disability status.
All data you provide will be stored, assessed, processed or internally forwarded solely for the purpose of processing your application. The data is only accessible to employees of the personnel department and the decision makers in the relevant specialist departments. Your data will in no circumstances be forwarded to third parties or used for other purposes unless you have explicitly consented to such forwarding, or this is necessary for the purpose of processing. We commission service providers to process personal data and, among other functions, for information provision, storage of your data at a secure data centre, and database management and analysis. All external processers have been selected carefully, support us strictly in line with our instructions and only gain access to your data to the specified extent and for the necessary period. Furthermore, the data may be processed for statistical purposes (e.g. reporting). This does not enable inferences to be drawn about individual persons. We store your data in our applicant management system until the application process is complete and for a maximum period of 6 months.
Your data is only stored beyond this point if you have explicitly consented to your details being included in our applicant pool. In this case, your personal data (surname, first name, residential address, e-mail address, telephone numbers, cover letter, letter of motivation, curriculum vitae, certificates, references, information provided in job interview) is stored for 2 years. Should you have communicated special categories of personal data in your application documents, your consent also applies to this data. This consent also applies to data about your qualifications and activities from generally accessible data sources (especially professional social networks) which MVV Energie AG has lawfully collected in connection with the application process. Further processing is intended to enable us to contact you in future for professional purposes and to consider you for any vacancies at MVV Energie AG. This consent is voluntary and has no influence on your chances in the current application process. You may refuse to provide your consent without stating any reasons and without having to fear any disadvantages as a result. Furthermore, you may withdraw your consent at any time without stating any reasons. In this case, your data will be deleted immediately or once the respective application process is complete. Upon the expiry of either of the periods referred to above, your data will be deleted in full. If you take up a position at MVV Energie AG, your personal data, or extracts of such, will be included in your personnel records.
If you call up our YouTube channel or YouTube videos linked to our website, then cookies are placed on the device you use for this (i.e. your computer or mobile terminal) by YouTube’s owner, Google LLC (“Google”, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). These provide Google with information such as the type of device you use and your IP address. If you have a Google account, are logged in, and have deposited additional information there, such as your e-mail address, telephone number, address book contacts and a public profile, or if you yourself have a YouTube channel, then Google also combines this account data with your visit when you call up our YouTube channel. Google LLC uses this information for purposes such as advertising and cross-device personalisation. You have the option of deactivating personalised adverts in your Google account.
Videos embedded on our website are all integrated in the “extended privacy mode”, i.e. no data about you as the user is transferred to YouTube if you do not play these videos. The data listed above is only transferred when you play the videos. We have no influence on this data transfer.
Please note that, when you call up our YouTube channel, cookies are placed regardless of whether or not you have a Google account.
We ourselves may process that data you make available on YouTube (user name, comments published under your name) if we respond to comments you have published.
Use of Google Tag Manager
On our website me make use of Google Tag Manager. This application, which is offered by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland, enables companies to manage website tags via a user interface. Tags are small code elements on websites that serve, for example, to measure traffic and visitor behaviour on websites and thus optimise the websites. The Google Tag Manager application itself is a cookie-free domain that does not collect any personal data. The application triggers other tags that may themselves collect data. However, Google Tag Manager does not access this data. If you do not want your visit to our website to be recorded by Google Tag Manager, you can disable this application on domain or cookie level. This disables all tracking tags implemented via Google Tag Manager.
The following tags are integrated into our websites using Google Tag Manager:
1. Google Marketing Services and Google Adwords Conversion
Auf unseren Seiten werden die „Google-Marketing-Services” eingesetzt.
Our websites make use of “Google Marketing Services”.
Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”)
Settings for presentation of adverts:
Google Marketing Services enable us to show adverts to users that are expected to match their interests. “Remarketing” involves presenting adverts to users for products which they have viewed on other websites.
To be able to do this in technical terms, a code from Google is implemented directly on our website and on other websites (which use Google Marketing Services) and specific (re-)marketing tags are integrated into the website (these may be invisible graphics or code snippets). This results in an individual cookie being stored with the user (comparable technologies may be used instead of cookies). These cookies include information about which websites the user has visited and what he or she was interested in. Furthermore, technical information about the browser and the operating system, forwarding websites, times and other information about website use and the IP address are stored.
User data is processed in pseudonymous form. That means Google does not store or process the name or e-mail address of the user but rather processes the relevant data in pseudonymous profiles. (That is not the case when a user has explicitly consented to Google processing the data without pseudonymisation.) The information collected by Google Marketing Services about users is communicated to Google.
In the case of Google AdWords (online advertising programme), each AdWords customer is allocated a different “conversion cookie”. These cookies help to compile conversion statistics for AdWords customers. AdWords customers receive information about the total number of users clicking their adverts. However, they do not receive any information enabling them to identify the users.
Google is certified under the Privacy Shield framework and thus guarantees to comply with European data protection law. You can find further information at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
You can find out more about how Google uses data for marketing purposes at this summary page: https://www.google.com/policies/technologies/ads.
To object to interest-based advertising from Google Marketing Services, you can draw on the opt-out options provided by Google: http://www.google.com/ads/preferences.
To exercise your right to object, you can also make immediate use of the opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=de
2. Google Universal Analytics
We make use of Google Analytics in the “Universal Analytics” version. This is a web analysis service offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. “Universal Analytics” denotes a method used by Google Analytics in which users are analysed with pseudonymous user IDs. This way, a pseudonymous profile of the user is compiled on the basis of information provided from the use of different devices (so-called cross-device tracking). We only use Google Analytics with activated IP anonymisation. This means Google abbreviates the users’ IP addresses within the member states of the European Union or other contract states of the European Economic Area.
In this procedure, the IP address thereby transferred is not combined with other data in Google’s possession. As is the case for cookies in general, the storage of the cookies used here can be prevented by changing the browser settings as appropriate. In addition, or alternatively, the collection of the information generated by the cookie and its processing by Google can be avoided by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de .
We operate a Facebook page on the basis of a “Joint Control Addendum” (see https://www.facebook.com/legal/terms/page_controller_addendum) with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The personal data of users is processed on the basis of our legitimate interest in effective user information and communication with them pursuant to Art. 6 (1) f) GDPR. If the provider of the platform has obtained consent for data processing, then the legal basis is provided by Art. 6 (1) a) and Art. 7 GDPR.
Facebook-Pixel, Custom Audiences and Facebook-Conversion
Our websites make use of Facebook Pixel offered by the social network Facebook, i.e. by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are resident in the EU, by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Using Facebook Pixel, Facebook can identify the visitors of our websites as a target group for presenting Facebook adverts.
Accordingly, we use Facebook Pixel on our websites to present those Facebook adverts we have activated to those Facebook users who have already shown interest in our websites or to whom specific “features” are allocated (e.g. interest in topics or offerings based on the websites they have visited). Facebook Pixel is also intended to ensure that our Facebook adverts are consistent with the user’s interests and are not felt to be an intrusion.
Facebook Pixel also serves to perform statistical analysis on the effectiveness of our Facebook adverts, as it enables us to see whether and how often users clicked on our adverts and were forwarded to our website.
Facebook processes data in accordance with the Facebook Data Use Policy. You can find general information about the presentation of Facebook adverts in the Facebook Data Use Policy: https://www.facebook.com/policy.php. Specific information and details about Facebook Pixel and its functionalities can be found here: https://www.facebook.com/business/help/651294705016616.
You can object to the collection and use of your data by Facebook Pixel to present Facebook adverts. The following page provides you with information about the settings for use-based advertising within Facebook: https://www.facebook.com/settings?tab=ads. The settings are independent of specific platforms, i.e. they apply to all devices such as desktop computers or mobile devices.
Facebook is certified under the Privacy Shield framework and thus guarantees to comply with European data protection law. You can find further information at: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
LinkedIn Insight Tag
Our website makes use of the “LinkedIn Insight Tag” conversion tool provided by LinkedIn Ireland Unlimited Company. This tool compiles a cookie in your web browser which enables data including the following to be captured: your IP address, device and browser features and page (e.g. page visits). This data is encrypted, anonymised within seven days and the anonymised data is then deleted within 90 days. LinkedIn does not share any personal data with MVV but rather offers anonymised reports on website target groups and the display performance. Via its Insight Tag, LinkedIn provides the option of retargeting. With the help of this data, MVV can show targeted advertising outside its website without you being identified as the website visitor. You can find further information about data protection at LinkedIn and the function of the LinkedIn Insight Tag at: https://business.linkedin.com/de-de/marketing-solutions/insight-tag
Members of LinkedIn can manage how their personal data is used for advertising purposes by amending their account settings. You can deactivate the Insight Tag on our website (“opt-out”) by clicking here.
Use of econda for web analysis
This website works with technologies provided by econda GmbH (www.econda.de). These involve collecting and storing data to compile use profiles based on pseudonyms. Cookies may also be used for this purpose. These are small text files making it possible to recognise an internet browser. Unless the site visitor has provided his or her explicit consent, no personal data is combined with the bearer of the pseudonym. This way, IP addresses are anonymised, making it impossible to assign information to any specific use profile. You are at all times entitled to object to the future collection and storage of your data. To withdraw your consent, click on this link: http://www.econda.de/econda/unternehmen/datenschutz/widerspruchscookie/ An opt-cookie will subsequently be deposited on your terminal device. The link has to be clicked again should you delete your cookies.
The data processing procedures outlined above are performed pursuant to Art. 6 (1) f) GDPR based on the legitimate interests of digidesk – media solutions to design and optimise this website as appropriate.
Use of HubSpot
We use HubSpot services for various purposes on this website. HubSpot is a software company based in the USA with a branch in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Tel: +353 1 5187500.
Hubspot offer an integrated software solution which we use to cover various aspects of our online marketing. Among others, these include: e-mail marketing, social media publishing & reporting, reporting, contact management (e.g. user segmentation & CRM), landing pages and contact forms.
– Geographical position
– Browser type
– Navigation information
– Referrer URL
– Performance data
– Information about how often the application is used
– Mobile apps data
– Registration information for the HubSpot subscription service
– Files displayed on location
– Domain names
– Pages viewed
– Aggregate use
– Operating system version
– Internet service provider
– IP address
– Device identifier
– Length of visit
– Where the application was downloaded from
– Operating system
– Events occurring within the application
– Access times
– Clickstream data
– Device model and version
The legal basis for this processing is the consent you provide pursuant to Art. 6 (1) a) GDPR. If you do not wish the aforementioned data to be collected and processed via HubSpot, you may refuse to provide your consent or withdraw your consent with future effect.
The personal data is stored for as long as is necessary to fulfil the processing purpose. The data is deleted as soon as it is no longer required to fulfil this purpose.
During its processing, HubSpot may transfer data to the USA. The security of this transfer is safeguarded by standard contractual clauses which ensure that the processing of personal data is governed by security standards equivalent to the GDPR. Should the standard contractual clauses be insufficient to ensure adequate security standards, the consent you provide pursuant to Art. 49 (1) a) GDPR may serve as the legal basis for transferring the data to third countries.
Information about the safety of your data
We have taken technical and organisational security measures to protect your data against loss, destruction, manipulation and unauthorised access. All our employees and all the individuals involved in processing data are obliged to comply with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and other legislation relevant for data protection purposes and to ensure the confidential treatment of personal data.
Where personal data is collected and processed, the information is communicated in encrypted form to prevent any data abuse by third parties. Our security measures are continually updated in line with technological advances.
Status: 6th May 2021