Privacy Policy

MVV Energie AG

We appreciate your interest in our company and our products and services. We would like you to feel secure when you visit our website, not least with regard to the safety of your personal data. Protecting your personal data is a matter we take very seriously. We naturally comply with the requirements of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

In this Privacy Policy, we would like to inform you about the type, scope and purpose of personal data processing on these internet pages, about further services and processes and about your rights in this respect.

We update this Privacy Policy at regular intervals. We recommend you consult this information regularly to make sure that you are kept informed.

 

Contact details for the responsible body and the Data Protection Officer

Responsible body
MVV Energie AG
Luisenring 49
68159 Mannheim
E-Mail:  kontakt@remove-this.mvv.de  (see imprint for further details).

Data Protection Officer
MVV Energie AG
Datenschutzbeauftragter
Luisenring 49
68159 Mannheim
E-Mail:  datenschutz@remove-this.mvv.de

 

General information on the scope and purpose of personal data processing

Personal data is information about your personal and material circumstances. This includes information such as your name, address, telephone number and e-mail address. In general, you do not need to actively disclose any personal data to use our websites.

When you visit our website, we store the following data in anonymised form: the name of your internet provider, the number of visits you make to our website per day and week, the number of visits per page, the average time spent per page, the number of feedbacks and the website from which you visit us. This data is evaluated to ensure the trouble-free operation of the website and to improve our services.

No personal user profiles are compiled using this data.

If you use our services, we will only collect that data (e.g. your name and address) we need to provide these services. If we ask you for additional data, you provide this on a voluntary basis.

Purpose of processing
We will process (in particular collect, use and store) your data for the following purposes:

  • a)To respond to your enquiries, process your orders, or provide you with access to specific information or offerings (Art. 6 (1) b) GDPR).
  • b) To protect our legitimate interests and those of third parties, particularly of companies within the MVV Energie Group, also for advertising or market research, to improve services and offerings of customised products, for credit checks, or to investigate or prevent criminal actions such as electricity theft (Art. 6 (1) f) GDPR).
  • c) To the extent that you have given us your consent (Art. 6 (1) a) GDPR).
  • d) Due to legal requirements to which we as a company are subject, and in particular the requirements of commercial and tax law, the German Energy Industry Act and the German Metering Operation Act. (Art. 6 (1) c) GDPR).

Forwarding of personal data
If we need to do so to process your enquiries or perform our services for you, we will forward the personal data we have collected to the legally permissible extent (e.g. for order processing) to recipients in the following categories:

  • Customer support service providers
  • Banks, payment service providers, debt collection agencies and legal firms
  • IT, postal and other communications service providers
  • Other companies within the MVV Energie Group
  • Public bodies and organisations (e.g. supervisory authorities, social security agencies, tax authorities, investigative authorities).

Your data will otherwise only be forwarded if you have consented to this in advance.

Duration of storage

If you or a third party have communicated your data to us, we will only process it from the time at which it is collected. We delete the data thereby collected as soon as storage is no longer required or limit the processing of the data if statutory retention applies.

Your rights
You are at all times entitled

  • a) To request confirmation as to whether personal data concerning you are being processed by us (Art. 15 GDPR)
  • b) To request information as to which personal data concerning you we are processing (Art. 15 GDPR)
  • c) To request the rectification, deletion or restriction in the processing of personal data concerning you (Art. 16 – 18 GDPR)
  • d) To exercise your right to data portability (Art. 20 GDPR)
  • e) To object to the processing of personal data concerning you (Art. 21 GDPR).

Please address such requests to MVV or send an e-mail to kontakt@mvv.de. We will inform you by sending copies to you or – if you submit your request in electronic form – electronic copies.

Furthermore, you are entitled to lodge a complaint with the responsible supervisory body.

Right to withdraw consent already provided

If you have already consented to us processing your data, you are at all times entitled to withdraw this consent with future effect.

That also applies to the withdrawal of declarations of consent you provided to us before the GDPR came into effect on 25 May 2018. The withdrawal of consent applies to the future and does not alter the legitimacy of data processing through to the withdrawal of consent. If you would like to withdraw your consent, then please write to MVV or send an e-mail to datenschutz@mvv.de.

 

Right to object

You are at all times entitled to object on grounds relating to your particular situation to the processing of personal data concerning you on the basis of Art. 6 (1) e) or f) GDPR; the same applies for any profiling performed on the basis of these requirements.

If we process personal data to perform direct advertising, you are at all times entitled to object to the processing of personal data for the purposes of such advertising; the same applies for any profile to the extent that this relates to such direct advertising.

 

To exercise your right to object, you can simply refer to the contact options provided in the imprint. Furthermore, in connection with use of information society services, and irrespective of Directive 2002/58/EC, you are entitled to exercise your right to object by way of automated processes using technical specifications.

Should you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate reasons for processing which override the interests, rights and freedoms of the person concerned or the processing serves to assert, exercise or defend legal claims.

If you object to processing for direct advertising purposes, we will no longer process your personal data for these purposes.

Furthermore, you are entitled to object on grounds relating to your particular situation to the processing of personal data that we process for scientific or historic research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR, unless such processing is necessary for a task that is in the public interest.

 

Additional information about specific website offerings

Newsletter

By registering for the Newsletter, you agree to receive information about the latest products, offers and news at MVV Energie in the form of an electronic newsletter.

If you provide us with your e-mail address, we will first send you a validation link. Please click this link to be included in the Newsletter mailing list. Any data you give in addition to your e-mail address is provided on a voluntary basis. This may serve, for example, to clarify your form of address or to select the type of Newsletter. You can at all times and at no expense withdraw your consent with effect for the future. To do this, please click either on the deregistration link at the end of each electronic newsletter or send a brief message to kontakt@mvv.de.

If you deregister, you will no longer receive our Newsletter in future. Upon deregistration, we delete the data provided for that purpose from our system, unless other forms of data processing are legitimate.

Sweepstakes

By taking part in our sweepstakes, you consent to MVV potentially publishing your first name and surname if you are the winner.

Furthermore, the personal data thereby collected is used exclusively to identify the winner and to forward the winnings and is deleted after the sweepstake unless other forms of data processing are legitimate.

Contact by e-mail or otherwise
Bei Ihrer Kontaktaufnahme mit uns per E-Mail oder auf sonstige Weise (z.B. Übergabe einer Visitenkarte, telefonische Kontaktaufnahme) werden die von Ihnen mitgeteilten Daten (Ihre E-Mail-Adresse, ggf. Ihr Name und Ihre Telefonnummer) von uns zur Beantwortung Ihrer Fragen gespeichert. Durch Absenden Ihrer Anfrage zur Kontaktaufnahme erklären Sie sich mit der Verarbeitung Ihrer übermittelten Daten (u.a. E-Mail-Adresse und Name) zum Zwecke der Beantwortung Ihrer Anfrage und zur Kontaktaufnahme durch uns gem. Art. 6 Abs. 1 lit. b) bzw. Art 6  I f) DSGVO ( Interessensabwägung) einverstanden

Ihre personenbezogenen Daten werden ausschließlich für den angegebenen Zweck verwendet und nur so lange gespeichert, wie es für die Erfüllung dieses Zwecks notwendig ist. Sollten gesetzliche Aufbewahrungsfristen einzuhalten sein, wird die Verarbeitung der Daten nach Zweckerfüllung eingeschränkt.

Online forms

We use numerous online forms to enable you to contact us or draw on our services. If you contact us using an online form, we will store the personal data you provide to us (your e-mail address, possibly your name and telephone number) for the purpose of responding to your questions. By sending your contact enquiry, you consent to the data you send (such as e-mail address and name) being processed for the purpose of responding to your enquiry and to enable us to contact you pursuant to Art. 6 (1) b) and Art. 6 (1) f) GDPR (balancing of interests).

Your personal data will be used solely for the purpose stated and only stored for as long as is necessary to fulfil this purpose. If we are required to comply with statutory retention periods, the processing of your data will be restricted once the original purpose has been fulfilled.

Online services for private and business customers

Private and business customers who have previously registered are provided with password-protected direct access to their customer accounts. When registering, customers are required to accept the terms of use for our online services.

When you register, we will first send you a validation link by e-mail. Please click on this link to complete the registration of your user account for our online services.

MVV Partner customer portal

The website at the domain https://partner.mvv.de (https://partner.mvv.de/blogand https://partner.mvv.de/webinare) works with Hubspot (see https://www.hubspot.de) to individualise your visit to the website. You can find Hubspot’s privacy policy here: https://legal.hubspot.com/de/privacy-policy.

Hubspot uses cookies and creates log files to enable it to provide this service to MVV Enamic GmbH, to maintain quality and to compile general and anonymous usage statistics for the https://partner.mvv.de website at MVV Enamic GmbH. Only if you voluntarily provide us with personal data, such as your first name, surname, address, e-mail address or telephone number, and thus enter into a business relationship with MVV Enamic GmbH, can this data be associated with the data collected anonymously. That is only possible if you actively tick a checkbox and thus indicate your consent when initiating contact with us.

By sending your enquiry, you consent to the data you send being processed for the purpose of responding to your enquiry and to enable us to contact you pursuant to Art. 6 (1) b) and Art. 6 (1) f) GDPR (balancing of interests). All of the information thereby recorded is used exclusively for the purpose of optimising our sales activities and generating leads. For this, we may need to store your data in our CRM system. In this case, the data will be stored until you withdraw your consent.

 

Information about cookies and tracking

Our websites make use of cookies. Cookies are small text files stored locally in the temporary memory of the site visitor’s internet browser. They are used, for example, to enhance the user-friendliness of websites or to manage language settings and enable us to recognise your internet browser if you visit our sites again.

Cookies are subdivided into necessary, statistical and marketing cookies.

We require necessary cookies to protect our legitimate interests (Art. 6 (1) f) GDPR) and safeguard the operation of the website.

We only collect statistical and marketing cookies if you have provided your consent (Art. 6 (1) a) GDPR). These also include cookies from third-party providers.

Irrespective of this, you can also change your browser settings and stipulate that no cookies should be used. If you reject the use of cookies, we can only track your visit to our website with restrictions. However, this may also mean that you too are only able to draw on the services available on our websites to a limited extent.

Textchat

On our pages, we use the chat service offered by iAdvize GmbH, Erkrather Straße 401, 40231 Düsseldorf, to enable us, where necessary, to provide you with additional support options. This is intended to enhance your satisfaction and optimise the service we provide on the website. iAdvize will only collect, process and use the data for the purposes we stipulate and will in no circumstances forward the data to third parties, such as advertising networks. As the subsidiary of a French company, iAdvize complies with European data protection standards and, in particular, only stores data within the EU.

The data used for the service provided by iAdvize is stored via local storage or cookies on your computer if you have consented to this. Data is only stored on iAdvize servers if you yourself have initiated a chat with one of our advisors. You can influence local storage on your computer by adapting the customary cookie management settings in your browser.

The advisor receives information about your visit to our website and web standard data so that he or she can assist you as quickly as possible. Furthermore, the advisor can see the page which the customer is visiting, including the position of the mouse. Please note that, to ensure the quality of advice we aim to offer, it may be necessary to forward the contents of your chat with the advisor for inspection by other advisors or their managers. To be able to advise you in future and further optimise our website and services, customer chats are stored.

Google reCAPTCHA

To enhance the security of our online forms, in some areas we use the reCAPTCHA service offered by Google Inc. By using this service, we can ensure that the form is filled out by a natural person, thus preventing the abuse of our forms by machines or automated processing. When this service is used, the IP address (and possibly other data required by Google for the reCAPTCHA service) is forwarded to Google. Google Inc. has published the privacy policy applicable to this service at https://www.google.com/intl/de/policies/privacy/.

Google Fonts:

We integrate fonts provided by Google (“Google Fonts”), for which the user’s data is used solely for the purpose of presenting the fonts in the user’s browser. This integration is based on our legitimate interest in the technically secure, maintenance-free and efficient use of fonts and in the uniform presentation of such and takes due account of possible restrictions on the integration of such due to licence law. Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://fonts.google.com/; privacy policy: https://policies.google.com/privacy; privacy shield (guarantees data protection standards when data is processed in the USA): https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

 

Use of Google Tag Manager

On our website me make use of Google Tag Manager. This application, which is offered by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland, enables companies to manage website tags via a user interface. Tags are small code elements on websites that serve, for example, to measure traffic and visitor behaviour on websites and thus optimise the websites. The Google Tag Manager application itself is a cookie-free domain that does not collect any personal data. The application triggers other tags that may themselves collect data. However, Google Tag Manager does not access this data. If you do not want your visit to our website to be recorded by Google Tag Manager, you can disable this application on domain or cookie level. This disables all tracking tags implemented via Google Tag Manager.

Click here to be excluded from data collection using Google Tag Manager.

You can find further information about Google Tag Manager at: http://www.google.de/tagmanager/ 

The following tags are integrated into our websites using Google Tag Manager:

1. Google Marketing Services and Google Adwords Conversion

Auf unseren Seiten werden die „Google-Marketing-Services” eingesetzt.

Our websites make use of “Google Marketing Services”.

Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”)

Website: https://marketingplatform.google.com/intl/de/about/analytics/

Settings for presentation of adverts:

https://adssettings.google.com/authenticated

Google Marketing Services enable us to show adverts to users that are expected to match their interests. “Remarketing” involves presenting adverts to users for products which they have viewed on other websites.

To be able to do this in technical terms, a code from Google is implemented directly on our website and on other websites (which use Google Marketing Services) and specific (re-)marketing tags are integrated into the website (these may be invisible graphics or code snippets). This results in an individual cookie being stored with the user (comparable technologies may be used instead of cookies). These cookies include information about which websites the user has visited and what he or she was interested in. Furthermore, technical information about the browser and the operating system, forwarding websites, times and other information about website use and the IP address are stored.

User data is processed in pseudonymous form. That means Google does not store or process the name or e-mail address of the user but rather processes the relevant data in pseudonymous profiles. (That is not the case when a user has explicitly consented to Google processing the data without pseudonymisation.) The information collected by Google Marketing Services about users is communicated to Google.

In the case of Google AdWords (online advertising programme), each AdWords customer is allocated a different “conversion cookie”. These cookies help to compile conversion statistics for AdWords customers. AdWords customers receive information about the total number of users clicking their adverts. However, they do not receive any information enabling them to identify the users.

Google is certified under the Privacy Shield framework and thus guarantees to comply with European data protection law. You can find further information at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active 

You can find out more about how Google uses data for marketing purposes at this summary page: https://www.google.com/policies/technologies/ads.

Google’s Privacy Policy can be found here: https://www.google.com/policies/privacy.

To object to interest-based advertising from Google Marketing Services, you can draw on the opt-out options provided by Google: http://www.google.com/ads/preferences.

To exercise your right to object, you can also make immediate use of the opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=de

 

2. Google Universal Analytics

We make use of Google Analytics in the “Universal Analytics” version. This is a web analysis service offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. “Universal Analytics” denotes a method used by Google Analytics in which users are analysed with pseudonymous user IDs. This way, a pseudonymous profile of the user is compiled on the basis of information provided from the use of different devices (so-called cross-device tracking). We only use Google Analytics with activated IP anonymisation. This means Google abbreviates the users’ IP addresses within the member states of the European Union or other contract states of the European Economic Area.

In this procedure, the IP address thereby transferred is not combined with other data in Google’s possession. As is the case for cookies in general, the storage of the cookies used here can be prevented by changing the browser settings as appropriate. In addition, or alternatively, the collection of the information generated by the cookie and its processing by Google can be avoided by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de .

You can find further information about how Google uses the data and about your options for changing settings or objecting to this use in Google’s Privacy Policy (https://policies.google.com/technologies/ads) and in Google’s advert presentation settings (https://adssettings.google.com/authenticated).

Facebook

We operate a Facebook page on the basis of a “Joint Control Addendum” (see https://www.facebook.com/legal/terms/page_controller_addendum) with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The personal data of users is processed on the basis of our legitimate interest in effective user information and communication with them pursuant to Art. 6 (1) f) GDPR. If the provider of the platform has obtained consent for data processing, then the legal basis is provided by Art. 6 (1) a) and Art. 7 GDPR.

Facebook-Pixel, Custom Audiences and Facebook-Conversion

Our websites make use of Facebook Pixel offered by the social network Facebook, i.e. by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are resident in the EU, by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Using Facebook Pixel, Facebook can identify the visitors of our websites as a target group for presenting Facebook adverts.

Accordingly, we use Facebook Pixel on our websites to present those Facebook adverts we have activated to those Facebook users who have already shown interest in our websites or to whom specific “features” are allocated (e.g. interest in topics or offerings based on the websites they have visited). Facebook Pixel is also intended to ensure that our Facebook adverts are consistent with the user’s interests and are not felt to be an intrusion.

Facebook Pixel also serves to perform statistical analysis on the effectiveness of our Facebook adverts, as it enables us to see whether and how often users clicked on our adverts and were forwarded to our website.

Facebook processes data in accordance with the Facebook Data Use Policy. You can find general information about the presentation of Facebook adverts in the Facebook Data Use Policy: https://www.facebook.com/policy.php. Specific information and details about Facebook Pixel and its functionalities can be found here: https://www.facebook.com/business/help/651294705016616.

You can object to the collection and use of your data by Facebook Pixel to present Facebook adverts. The following page provides you with information about the settings for use-based advertising within Facebook: https://www.facebook.com/settings?tab=ads. The settings are independent of specific platforms, i.e. they apply to all devices such as desktop computers or mobile devices.

Facebook is certified under the Privacy Shield framework and thus guarantees to comply with European data protection law. You can find further information at: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active 


etracker Analytics

We draw on services from etracker GmbH in Hamburg, Germany (www.etracker.com) to analyse use data. These services use cookies to perform statistical analyses on visitors’ use of this website and the presentation of use-related contents or adverts.

The data generated using etracker is processed and stored by etracker on behalf of the provider of this website. This processing and storage takes place exclusively in Germany and is therefore governed by strict German and European data protection laws and standards. etracker has been independently audited, certified and awarded, certified and awarded the ePrivacyseal.

The privacy of our visitors is especially important to us. In view of this, etracker anonymises users’ IP addresses at the earliest possible opportunity. It converts log-in and device information into a key that is clear but cannot be allocated to a specific person. etracker does not use the information for any other purposes, combine it with other data, or forward it to third parties.

You can at all times object to the data processing outlined above to the extent that it is performed on a personalised basis. Your objection will not have any adverse consequences for you.

You can find further information about etracker here.

 

Information about the safety of your data

We have taken technical and organisational security measures to protect your data against loss, destruction, manipulation and unauthorised access. All our employees and all the individuals involved in processing data are obliged to comply with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and other legislation relevant for data protection purposes and to ensure the confidential treatment of personal data.

Where personal data is collected and processed, the information is communicated in encrypted form to prevent any data abuse by third parties. Our security measures are continually updated in line with technological advances.

Status: May 2020